Function at 0x10001970
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
mov esi, str.elementclient.exe
push esi
push 0x100908a4
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
jne 0x10001ca7
push 0x10090250
push 1
push 0x10090300
push 0x100909a8
call fcn.10004b58
push 0x10090c80
call fcn.100051b8
add esp, 0x14
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.MSVCRT.dll__getpid]
push eax
push 0x10001797
call dword [sym.imp.USER32.dll_EnumWindows]
xor ebx, ebx
cmp dword [0x10090ab0], ebx
je 0x10001ca7
call fcn.100050d3
test eax, eax
je 0x100019f2
push 1
pop eax
jmp 0x10001ca9
push edi
call fcn.10002358
mov edi, eax
call fcn.10004410
push 0x10001811
call fcn.1000384d
pop ecx
mov ecx, edi
call fcn.100022d8
push 1
push 0xa
lea eax, [ebp - 8]
push 6
push eax
push esi
mov ecx, edi
mov byte [ebp - 8], 0xc6
mov byte [ebp - 7], 0x44
mov byte [ebp - 6], 0x24
mov byte [ebp - 5], 0x5d
mov byte [ebp - 4], bl
mov byte [ebp - 3], 0x56
call fcn.10002075
cmp eax, ebx
jbe 0x10001a4b
push 0x1000137a
push eax
mov ecx, edi
call fcn.10001cfc
push 1
push 0xfffffffffffffffb
lea eax, [ebp - 0x10]
push 7
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x10], 0x8b
mov byte [ebp - 0xf], 0x4c
mov byte [ebp - 0xe], 0x24
mov byte [ebp - 0xd], 0x24
mov byte [ebp - 0xc], 0x8b
mov byte [ebp - 0xb], 0x10
mov byte [ebp - 0xa], 0x51
call fcn.10002075
cmp eax, ebx
mov dword [ebp - 8], eax
jbe 0x10001ab3
push 0x100013f9
push eax
mov ecx, edi
call fcn.10001cfc
mov eax, dword [ebp - 8]
push 0x10001469
add eax, 0x41
mov ecx, edi
push eax
call fcn.10001ef4
mov eax, dword [ebp - 8]
push 0x100014cd
add eax, 0x79
mov ecx, edi
push eax
call fcn.10001ef4
push 1
push 0xffffffffffffffbb
lea eax, [ebp - 0x10]
push 7
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x10], 0x8d
mov byte [ebp - 0xf], 0xc
mov byte [ebp - 0xe], 0x89
mov byte [ebp - 0xd], 0x8d
mov byte [ebp - 0xc], 0x4c
mov byte [ebp - 0xb], 0x8d
mov byte [ebp - 0xa], bl
call fcn.10002075
cmp eax, ebx
mov dword [ebp - 8], eax
jbe 0x10001b1a
push 0x100016b8
push eax
mov ecx, edi
call fcn.10001e02
mov eax, dword [ebp - 8]
push 0x100016e3
add eax, 0x22
mov ecx, edi
push eax
call fcn.10001ef4
mov eax, dword [ebp - 8]
push 0x1000170e
add eax, 0x3d
mov ecx, edi
push eax
call fcn.10001ef4
push 1
push 0xfffffffffffffff5
lea eax, [ebp - 0x10]
push 6
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x10], 0x8b
mov byte [ebp - 0xf], 0x5e
mov byte [ebp - 0xe], 0x18
mov byte [ebp - 0xd], 0x8b
mov byte [ebp - 0xc], 0x7e
mov byte [ebp - 0xb], 0x1c
call fcn.10002075
cmp eax, ebx
mov dword [ebp - 8], eax
jbe 0x10001b6b
push 0x10001597
push eax
mov ecx, edi
call fcn.10001ef4
mov eax, dword [ebp - 8]
push 0x10001531
add eax, 0x19
mov ecx, edi
push eax
call fcn.10001cfc
push 1
push 0xa
lea eax, [ebp - 0x14]
push 0xa
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x14], 0x8b
mov byte [ebp - 0x13], 0x96
mov byte [ebp - 0x12], 0x4c
mov byte [ebp - 0x11], 2
mov byte [ebp - 0x10], bl
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xe], 0x50
mov byte [ebp - 0xd], 0x52
mov byte [ebp - 0xc], 0x8b
mov byte [ebp - 0xb], 0xce
call fcn.10002075
cmp eax, ebx
jbe 0x10001bb4
push 0x10001616
push eax
mov ecx, edi
call fcn.10001cfc
push 1
push 3
lea eax, [ebp - 0x14]
push 9
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x14], 0x8b
mov byte [ebp - 0x13], 0x41
mov byte [ebp - 0x12], 4
mov byte [ebp - 0x11], 0x8b
mov byte [ebp - 0x10], 0x80
mov byte [ebp - 0xf], 0x60
mov byte [ebp - 0xe], 5
mov byte [ebp - 0xd], bl
mov byte [ebp - 0xc], bl
call fcn.10002075
cmp eax, ebx
jbe 0x10001bf9
push 0x100015cc
push eax
mov ecx, edi
call fcn.10001e02
push 1
push 0x12
lea eax, [ebp - 0x14]
push 0xc
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x14], 0x8b
mov byte [ebp - 0x13], 0x38
mov byte [ebp - 0x12], 0x8b
mov byte [ebp - 0x11], 0xce
mov byte [ebp - 0x10], 0xc7
mov byte [ebp - 0xf], 0x44
mov byte [ebp - 0xe], 0x24
mov byte [ebp - 0xd], 0x18
mov byte [ebp - 0xc], 1
mov byte [ebp - 0xb], bl
mov byte [ebp - 0xa], bl
mov byte [ebp - 9], bl
call fcn.10002075
cmp eax, ebx
mov dword [ebp - 8], eax
jbe 0x10001c5f
push 0x10001658
push eax
mov ecx, edi
call fcn.10001cfc
mov eax, dword [ebp - 8]
push 0x10001658
add eax, 0xffffffb2
mov ecx, edi
push eax
call fcn.10001cfc
or byte [ebp - 0xe], 0xff
push 1
push 0xa
lea eax, [ebp - 0x10]
push 8
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x10], 0x8b
mov byte [ebp - 0xf], 0xc8
mov byte [ebp - 0xd], 0x52
mov byte [ebp - 0xc], 0x40
mov byte [ebp - 0xb], 0x50
mov byte [ebp - 0xa], 0x6a
mov byte [ebp - 9], bl
call fcn.10002075
cmp eax, ebx
jbe 0x10001ca1
push 0x10001683
push eax
mov ecx, edi
call fcn.10001cfc
push 1
pop eax
pop edi
jmp 0x10001ca9
xor eax, eax
pop esi
pop ebx
leave
ret