Function at 0x40bac0
Capabilities:
Enumerate gui resources

Disassembly:
push 0xffffffffffffffff
push 0x424106
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x15c
push ebp
push esi
lea ecx, [esp + 0x14]
xor ebp, ebp
call fcn.00411f30
lea ecx, [esp + 8]
mov dword [esp + 0x16c], ebp
call fcn.00404290
lea eax, [esp + 8]
push 0x411
push eax
mov byte [esp + 0x174], 1
call fcn.00404430
mov eax, dword [esp + 0x17c]
add esp, 8
test eax, eax
jne 0x40bb39
push 0xffffffffffffffff
push 0x4321e0
lea ecx, [esp + 0x1c]
call fcn.00412290
mov dword [0x432384], 0x4321e0
jmp 0x40bb3e
mov dword [0x432384], eax
push edi
mov esi, 0x42bce0
mov ecx, dword [esi]
xor edi, edi
push edi
push 0x100
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.004050d0
mov eax, dword [esi]
push edi
push 0x200
lea ecx, [esp + 0x24]
push eax
push ecx
call fcn.004050d0
mov eax, dword [esi + 4]
add esp, 0x20
lea edx, [eax + eax*4]
mov eax, dword [0x432384]
mov eax, dword [eax + edx*4 + 8]
cmp eax, 5
ja case.default.0x40bb83
jmp dword [eax*4 + 0x40bd68]
mov edi, 0x7d2
jmp case.default.0x40bb83
mov edi, 0x7d3
jmp case.default.0x40bb83
mov edi, 0x7d5
jmp case.default.0x40bb83
mov edi, 0x7d6
jmp case.default.0x40bb83
mov edi, 0x7de
jmp case.default.0x40bb83
mov edi, 0x7dd
mov ecx, dword [esi]
push edi
push 0x400
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.004050d0
mov eax, dword [esi + 4]
mov ecx, dword [0x432384]
add esp, 0x10
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4]
test eax, 0x1000000
je 0x40bc12
test eax, 0x2000000
je 0x40bc01
and eax, 0xffffff
xor edx, edx
cmp eax, 8
mov ecx, 0xc00
setne dl
add edx, 0xc2d
mov eax, edx
jmp 0x40bc17
and eax, 0xffffff
mov ecx, 0xd00
add eax, 0xbb9
jmp 0x40bc17
mov ecx, 0x900
push eax
mov eax, dword [esi]
push ecx
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.004050d0
mov eax, dword [esi + 4]
add esp, 0x10
lea edx, [eax + eax*4]
mov eax, dword [0x432384]
mov eax, dword [eax + edx*4 + 4]
test eax, 0x1000000
je 0x40bc73
test eax, 0x2000000
je 0x40bc62
and eax, 0xffffff
xor ecx, ecx
cmp eax, 8
setne cl
add ecx, 0xc2d
mov eax, ecx
mov ecx, 0xc01
jmp 0x40bc78
and eax, 0xffffff
mov ecx, 0xd01
add eax, 0xbb9
jmp 0x40bc78
mov ecx, 0x901
mov edx, dword [esi]
push eax
push ecx
lea eax, [esp + 0x14]
push edx
push eax
call fcn.004050d0
mov eax, dword [esi + 4]
mov edx, dword [0x432384]
add esp, 0x10
lea ecx, [eax + eax*4]
mov eax, dword [edx + ecx*4 + 0xc]
test eax, 0x1000000
je 0x40bcd5
test eax, 0x2000000
je 0x40bcc4
and eax, 0xffffff
xor ecx, ecx
cmp eax, 8
setne cl
add ecx, 0xc2d
mov eax, ecx
mov ecx, 0xc02
jmp 0x40bcda
and eax, 0xffffff
mov ecx, 0xd02
add eax, 0xbb9
jmp 0x40bcda
mov ecx, 0x902
mov edx, dword [esi]
push eax
push ecx
lea eax, [esp + 0x14]
push edx
push eax
call fcn.004050d0
add esi, 8
add esp, 0x10
cmp esi, 0x42bd10
jb 0x40bb44
lea ecx, [esp + 0xc]
push ecx
call fcn.00404720
mov esi, dword [sym.imp.USER32.dll_EnumWindows]
add esp, 4
test eax, eax
pop edi
je 0x40bd21
push 0
push 0x40bd80
call esi
mov ebp, 1
push 0
push 0x40bd80
call esi
lea ecx, [esp + 8]
mov byte [esp + 0x16c], 0
call fcn.004043a0
lea ecx, [esp + 0x14]
mov dword [esp + 0x16c], 0xffffffff
call fcn.00411fb0
mov ecx, dword [esp + 0x164]
mov eax, ebp
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x168
ret