Function at 0x401b8f
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
push ebx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
call fcn.0040df60
push edx
call fcn.0040de20
pop edx
push eax
push 2
push 0
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040de20
pop edx
push eax
call fcn.00409638
call fcn.00405182
add dword [esp], edx
call sub.KERNEL32.dll_LoadLibraryExW
call fcn.004051a0
mov dword [esp], eax
push 0
lea eax, [0x402109]
push eax
push dword [esp + 8]
call sub.KERNEL32.dll_EnumResourceTypesW
push dword [esp]
call sub.KERNEL32.dll_FreeLibrary
push dword [0x4170a8]
call fcn.0040a3e3
mov ebx, eax
and ebx, ebx
jle 0x401e1b
push dword [0x4170a8]
call fcn.0040a3ed
push dword [0x4170a8]
call fcn.0040a402
or eax, eax
je 0x401ca0
mov ebp, dword [0x4170ac]
mov edx, dword [ebp + 8]
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040dfc0
lea eax, [esp + 8]
push eax
call fcn.0040de60
push dword [esp + 4]
call fcn.00405d80
mov ebx, eax
cmp ebx, 0xa
jle 0x401c7f
mov edx, dword [esp + 8]
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040dfc0
mov edx, dword [esp + 8]
push edx
call fcn.0040dfc0
lea eax, [esp + 0xc]
push eax
call fcn.0040de60
jmp 0x401c9b
mov edx, dword [esp + 4]
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040dfc0
lea eax, [esp + 0x10]
push eax
call fcn.0040de60
jmp 0x401c17
push dword [0x4170a8]
call fcn.0040a436
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040de20
pop edx
push eax
push 1
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040de20
pop edx
push eax
push dword [esp + 0x24]
call fcn.00405db0
call fcn.00405182
add dword [esp], edx
call fcn.0040d0a0
call fcn.00405182
add dword [esp], edx
call fcn.00405e50
lea eax, [esp + 0x14]
push eax
call fcn.0040de60
mov edx, dword [esp + 0x10]
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040dfc0
lea eax, [esp + 0x18]
push eax
call fcn.0040de60
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040de20
pop edx
push eax
push 1
push dword [esp + 0x24]
call fcn.0040d0a0
call fcn.00405182
add dword [esp], edx
call fcn.00405e50
lea eax, [esp + 0x14]
push eax
call fcn.0040de60
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040de20
pop edx
push eax
push 0xa
push dword [esp + 0x1c]
call fcn.00405ec0
lea eax, [esp + 0x14]
push eax
call fcn.0040de60
push dword [esp + 0xc]
mov edx, dword [esp + 0x14]
pop ecx
call fcn.00405120
je 0x401e16
call fcn.004097fe
and eax, eax
je 0x401e12
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040de20
pop edx
push eax
push 0
call fcn.00409812
call fcn.0040e020
mov edx, dword [esp + 0x18]
pop ecx
push ecx
call fcn.00405160
mov ecx, eax
call fcn.00405120
je 0x401e12
mov dword [0x417050], 1
push edx
call fcn.0040de20
pop edx
push eax
push edx
call fcn.0040de20
pop edx
push eax
push 1
call fcn.00409812
lea eax, [0x417020]
push eax
call fcn.0040de60
jmp 0x401e22
jmp 0x4011a0
jmp 0x4011a0
push dword [esp + 4]
call fcn.0040def0
push dword [esp + 0xc]
call fcn.0040def0
push dword [esp + 8]
call fcn.0040def0
push dword [esp + 0x14]
call fcn.0040def0
push dword [esp + 0x10]
call fcn.0040def0
add esp, 0x18
pop ebx
pop ebp
ret