Function at 0x403b10
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
mov eax, dword [0x432018]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, ecx
xor eax, eax
xorps xmm0, xmm0
mov dword [ebp - 0x4c], eax
push 0x160
mov dword [ebp - 0x48], eax
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov dword [ebp - 0x44], eax
call fcn.0040bcf5
mov ecx, dword [ebp - 0x4c]
mov esi, eax
mov eax, dword [ebp - 0x48]
add esp, 4
sub eax, ecx
push eax
push ecx
push esi
call fcn.0040cde0
mov edx, dword [ebp - 0x4c]
add esp, 0xc
test edx, edx
je 0x403ba0
mov ecx, dword [ebp - 0x44]
mov eax, edx
sub ecx, edx
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x403b96
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403dea
push ecx
push edx
call fcn.0040bf76
add esp, 8
lea eax, [esi + 0x160]
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x4c]
push eax
push 0x4037c0
mov dword [ebp - 0x48], esi
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [ebp - 0x48]
xor ebx, ebx
mov ecx, dword [ebp - 0x4c]
sub eax, ecx
sar eax, 2
test eax, eax
je 0x403da7
mov eax, dword [ecx + ebx*4]
mov edx, eax
push 0x42eb2c
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x50], eax
call fcn.00403820
add esp, 4
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], 8
mov ecx, edi
cmovae eax, dword [ebp - 0x34]
push dword [ebp - 0x24]
push eax
call fcn.00406ab0
push 0x160
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
call fcn.0040bcf5
mov ecx, dword [ebp - 0x40]
mov esi, eax
mov eax, dword [ebp - 0x3c]
add esp, 4
sub eax, ecx
push eax
push ecx
push esi
call fcn.0040cde0
mov edx, dword [ebp - 0x40]
add esp, 0xc
test edx, edx
je 0x403c6f
mov ecx, dword [ebp - 0x38]
mov eax, edx
sub ecx, edx
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x403c65
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403dea
push ecx
push edx
call fcn.0040bf76
add esp, 8
lea eax, [esi + 0x160]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x40]
push eax
push 0x403800
push dword [ebp - 0x50]
mov dword [ebp - 0x3c], esi
call dword [sym.imp.USER32.dll_EnumChildWindows]
mov ecx, dword [ebp - 0x3c]
xor esi, esi
mov eax, dword [ebp - 0x40]
sub ecx, eax
sar ecx, 2
test ecx, ecx
je 0x403d14
mov edx, dword [eax + esi*4]
lea ecx, [ebp - 0x1c]
push str.child
call fcn.00403820
add esp, 4
lea eax, [ebp - 0x1c]
cmp dword [ebp - 8], 8
mov ecx, edi
cmovae eax, dword [ebp - 0x1c]
push dword [ebp - 0xc]
push eax
call fcn.00406ab0
mov ecx, dword [ebp - 8]
cmp ecx, 8
jb 0x403d04
mov edx, dword [ebp - 0x1c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403cfa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403dea
push ecx
push edx
call fcn.0040bf76
add esp, 8
mov ecx, dword [ebp - 0x3c]
inc esi
mov eax, dword [ebp - 0x40]
sub ecx, eax
sar ecx, 2
cmp esi, ecx
jb 0x403ca1
test eax, eax
je 0x403d5d
mov edx, dword [ebp - 0x38]
mov ecx, eax
sub edx, eax
and edx, 0xfffffffc
cmp edx, 0x1000
jb 0x403d3e
mov eax, dword [ecx - 4]
add edx, 0x23
sub ecx, eax
add ecx, 0xfffffffc
cmp ecx, 0x1f
ja 0x403dea
push edx
push eax
call fcn.0040bf76
add esp, 8
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov ecx, dword [ebp - 0x20]
cmp ecx, 8
jb 0x403d93
mov edx, dword [ebp - 0x34]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403d89
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403dea
push ecx
push edx
call fcn.0040bf76
add esp, 8
mov eax, dword [ebp - 0x48]
inc ebx
mov ecx, dword [ebp - 0x4c]
sub eax, ecx
sar eax, 2
cmp ebx, eax
jb 0x403bd3
test ecx, ecx
je 0x403dd7
mov edx, dword [ebp - 0x44]
mov eax, ecx
sub edx, ecx
and edx, 0xfffffffc
cmp edx, 0x1000
jb 0x403dcd
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403dea
push edx
push ecx
call fcn.0040bf76
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040ba30
mov esp, ebp
pop ebp
ret
call fcn.004140fb
int3