Function at 0x10027719
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1bc
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x16c], 0xfffffffe
mov dword [ebp - 0x20], 0xffffffee
jmp 0x10027743
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xe
je 0x10027852
mov dword [ebp - 0xcc], 0x7008b15e
mov dword [ebp - 0xfc], 0x6d21cd43
mov dword [ebp - 0x38], 0
jmp 0x10027771
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x10027787
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xe0], 0x4615
jmp 0x1002776a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe0], 0
je 0x1002779c
jmp 0x10027852
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe0]
mov dword [ebp - 0x168], eax
or eax, 0xffffffff
je 0x1002782d
cmp dword [ebp - 0x20], 0
jne 0x100277c8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe0], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe0], 0xffffffff
je 0x100277e4
mov dword [ebp - 0x94], 1
jmp 0x100277eb
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x94]
cmp eax, 0x69bd697e
jg 0x10027808
mov dword [ebp - 0xd4], 1
jmp 0x1002780f
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
je 0x1002782d
mov dword [ebp - 0x60], 1
jmp 0x10027831
and dword [ebp - 0x60], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe0]
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x60]
imul eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1002773c
movzx eax, byte [ebp + 8]
test eax, eax
je 0x10027865
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
jmp 0x100280e8
mov dword [ebp - 8], 0xfffffffe
mov dword [ebp - 0x130], 0xfffffff9
mov dword [ebp - 0x40], 0xfff9
mov dword [ebp - 0x10], 0
jmp 0x1002788d
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x100278a3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1ac], 0xdb856137
jmp 0x10027886
mov dword [ebp - 0x10], 0
jmp 0x100278b3
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x100278c9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x19c], 0xe55a4419
jmp 0x100278ac
mov dword [ebp - 8], 0
jmp 0x100278d9
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x12
jne 0x10027935
mov dword [ebp - 0x100], 0x1836
mov dword [ebp - 0x108], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 8], 0
jne 0x10027914
mov eax, 0x8306
test eax, eax
jne 0x10027914
and dword [ebp - 0xc0], 0
jmp 0x1002791e
mov dword [ebp - 0xc0], 1
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 8], 0
je 0x10027933
jmp 0x100278d2
jmp 0x100278d2
mov dword [ebp - 8], 3
jmp 0x10027945
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x10027a84
mov dword [ebp - 0x134], 0xda7bc999
mov dword [ebp - 0x80], 0xfdb69689
mov dword [ebp - 0x13c], 0xfffffff7
mov dword [ebp - 0x170], 1
mov dword [ebp - 0xf0], 0xcea2ff3e
mov dword [ebp - 0x4c], 0xbd53
mov dword [ebp - 0x110], 0x1c73
mov dword [ebp - 0x30], 0
jmp 0x1002799f
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x100279b5
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x148], 0xe6b6cd33
jmp 0x10027998
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x1ac]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x110]
cmp eax, 0x17290b1c
jg 0x100279ee
mov dword [ebp - 0x70], 1
jmp 0x100279f2
and dword [ebp - 0x70], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x70]
sub ecx, dword [ebp + eax - 0x148]
je 0x10027a15
or eax, 0xffffffff
je 0x10027a15
mov dword [ebp - 0xa8], 1
jmp 0x10027a1c
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0xa8], eax
jne 0x10027a33
mov dword [ebp - 0x78], 1
jmp 0x10027a37
and dword [ebp - 0x78], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x78], eax
jg 0x10027a4b
mov dword [ebp - 0xf4], 1
jmp 0x10027a52
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], eax
jg 0x10027a6f
mov dword [ebp - 0xd0], 1
jmp 0x10027a76
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x80], eax
jmp 0x1002793e
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0xa0], 0xc369
mov dword [ebp - 0x14], 0
jmp 0x10027aa5
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10027abb
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x128], 6
jmp 0x10027a9e
mov dword [ebp - 0x14], 0
jmp 0x10027acb
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x10027ae1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1bc], 1
jmp 0x10027ac4
mov dword [ebp - 0x2c], 0x1b
jmp 0x10027af1
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffff5
jl 0x10027d39
mov dword [ebp - 0xc], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0x18], 0
jmp 0x10027b1c
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10027b2f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x54], 0x770
jmp 0x10027b15
mov dword [ebp - 0x18], 0
jmp 0x10027b3f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10027b55
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x154], 0x23758185
jmp 0x10027b38
mov dword [ebp - 0xc], 2
jmp 0x10027b65
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x10027d27
mov dword [ebp - 0x98], 0xfffffff7
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x128]
mov dword [ebp - 0x174], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0xfffb
jl 0x10027ba5
mov dword [ebp - 0xb0], 1
jmp 0x10027bac
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0xb0]
jge 0x10027bc6
mov dword [ebp - 0xf8], 1
jmp 0x10027bcd
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x140], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0x451d77f1
je 0x10027bf2
mov dword [ebp - 0x88], 1
jmp 0x10027bf9
and dword [ebp - 0x88], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x88], eax
je 0x10027c17
mov dword [ebp - 0xc8], 1
jmp 0x10027c1e
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x128]
cmp eax, dword [ebp - 0xc8]
jge 0x10027c3c
mov dword [ebp - 0x90], 1
jmp 0x10027c43
and dword [ebp - 0x90], 0
mov eax, dword [ebp - 0xc]
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x90]
sub edx, dword [ebp + ecx - 0x54]
cmp dword [ebp + eax*4 - 0x128], edx
jg 0x10027c68
mov dword [ebp - 0x44], 1
jmp 0x10027c6c
and dword [ebp - 0x44], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x44]
mov dword [ebp + eax - 0x1bc], ecx
cmp dword [ebp - 0x44], 0
jne 0x10027c92
push 3
pop eax
test eax, eax
jne 0x10027c92
and dword [ebp - 0xb8], 0
jmp 0x10027c9c
mov dword [ebp - 0xb8], 1
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0xb8]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x54]
cmp eax, dword [ebp - 0x2c]
jg 0x10027cc1
mov dword [ebp - 0x10c], 1
jmp 0x10027cc8
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x12c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x128], 0
mov dword [ebp - 0xd8], 0x3a15
imul eax, dword [ebp - 0xd8], 0x7557
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x154], eax
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x10027d22
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
jmp 0x10027b5e
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
jmp 0x10027aea
mov byte [ebp - 0x26], 0
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x5c], 0x996a5308
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x8c], 0xfffffffe
mov dword [ebp - 0x34], 0
jmp 0x10027d6c
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x10027d82
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xec], 0xfffffff9
jmp 0x10027d65
mov byte [ebp - 0x27], 0
movzx eax, byte [ebp - 0x27]
test eax, eax
je 0x10027d9a
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
mov dword [ebp - 0x1c], 2
jmp 0x10027daa
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10027fa6
mov dword [ebp - 0x104], 1
mov dword [ebp - 4], 0
jmp 0x10027dce
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 4
jge 0x10027de4
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x188], 0xeb4c8f0d
jmp 0x10027dc7
mov dword [ebp - 4], 0
jmp 0x10027df4
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x10027e0a
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x11c], 0x4d07ddbf
jmp 0x10027ded
mov dword [ebp - 4], 0
jmp 0x10027e1a
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x10027e30
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x194], 4
jmp 0x10027e13
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x188], 0x4a0d461e
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xec]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x5c], 0x1dfe936b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x11c]
neg eax
cmp dword [ebp - 0x5c], eax
jge 0x10027e74
mov dword [ebp - 0x6c], 1
jmp 0x10027e78
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xec]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x11c]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xec]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xec]
jne 0x10027ec1
mov dword [ebp - 0x7c], 1
jmp 0x10027ec5
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x7c]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xec]
je 0x10027ee5
mov dword [ebp - 0x84], 1
jmp 0x10027eec
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x84], eax
je 0x10027f00
mov dword [ebp - 0x48], 1
jmp 0x10027f04
and dword [ebp - 0x48], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x48]
mov dword [ebp + eax - 0x194], ecx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 6
jl 0x10027f2f
mov dword [ebp - 0x58], 1
jmp 0x10027f33
and dword [ebp - 0x58], 0
cmp dword [ebp - 0x58], 0xffffffff
je 0x10027f45
mov dword [ebp - 0x9c], 1
jmp 0x10027f4c
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xec]
cmp eax, dword [ebp - 0x9c]
je 0x10027f6b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x188], 0
mov eax, 0xffff
add eax, 0xfffffffd
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x11c]
jle 0x10027f8e
mov dword [ebp - 0xa4], 1
jmp 0x10027f95
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x104], eax
jmp 0x10027da3
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x10027fc1
push 0
push 0x1d5f
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x158], 0xfffffffe
mov dword [ebp - 0x24], 0xffffffee
jmp 0x10027fe2
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xe
je 0x100280e8
mov dword [ebp - 0xbc], 0x7008b15e
mov dword [ebp - 0x114], 0x6d21cd43
mov dword [ebp - 0x3c], 0
jmp 0x10028010
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x10028023
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x68], 0x4615
jmp 0x10028009
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x68], 0
je 0x10028035
jmp 0x100280e8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x68]
mov dword [ebp - 0x160], eax
or eax, 0xffffffff
je 0x100280c0
cmp dword [ebp - 0x24], 0
jne 0x1002805b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x68], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x68], 0xffffffff
je 0x10028074
mov dword [ebp - 0xac], 1
jmp 0x1002807b
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0xac]
cmp eax, 0x69bd697e
jg 0x10028098
mov dword [ebp - 0xb4], 1
jmp 0x1002809f
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
je 0x100280c0
mov dword [ebp - 0xc4], 1
jmp 0x100280c7
and dword [ebp - 0xc4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x68]
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0xc4]
imul eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10027fdb
mov esp, ebp
pop ebp
ret