Function at 0x31382bb8
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x44], ecx
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x3138304e
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [esi + 0x18]
mov eax, dword [ebx + 0x2c8]
call fcn.31287d68
lea edx, [ebp - 0x24]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov edx, dword [esi + 0x18]
mov eax, dword [ebx + 0x2c8]
call fcn.31287d68
mov edx, dword [ebx + 0x64]
mov eax, dword [ebx + 0x2c8]
call fcn.31287bd4
mov eax, dword [esi + 0x10]
test al, 1
setne byte [ebp - 1]
test al, 0x10
setne byte [ebp - 2]
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x5c]
test al, al
jne 0x31382c2f
mov byte [ebp - 3], 1
jmp 0x31382c3f
cmp byte [ebp - 1], 0
je 0x31382c3b
mov byte [ebp - 3], 2
jmp 0x31382c3f
mov byte [ebp - 3], 0
mov eax, ebx
call fcn.312ef600
test al, al
je 0x31382e0c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x5c]
test al, al
jne 0x31382c5f
mov byte [ebp - 9], 5
jmp 0x31382c90
cmp byte [ebp - 1], 0
je 0x31382c6b
mov byte [ebp - 9], 4
jmp 0x31382c90
cmp byte [ebx + 0x2de], 0
je 0x31382c7a
mov byte [ebp - 9], 3
jmp 0x31382c90
movzx eax, byte [ebx + 0x2dc]
or al, byte [ebp - 2]
je 0x31382c8c
mov byte [ebp - 9], 6
jmp 0x31382c90
mov byte [ebp - 9], 2
call fcn.312edf30
lea ecx, [ebp - 0x30]
movzx edx, byte [ebp - 9]
call fcn.312ee400
test byte [ebx + 0x55], 0x80
jne 0x31382cc7
lea eax, [ebp - 0x30]
push eax
push 1
push 0
mov eax, ebx
call fcn.312e1c94
push eax
call fcn.312edf30
mov ecx, dword [esi + 0x18]
pop edx
call fcn.312ee374
jmp 0x31382ce9
push 0xfffffffffffffffe
push 0xfffffffffffffffe
lea eax, [ebp - 0x24]
push eax
call sub.user32.dll_EnumWindows
push 4
call sub.gdi32.dll_GetStockObject
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esi + 0x18]
push eax
call fcn.3123c318
lea eax, [esi + 0x1c]
push eax
call fcn.312edf30
mov edx, dword [esi + 0x18]
lea ecx, [ebp - 0x30]
call fcn.312ee1d0
lea eax, [esi + 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebx + 0x2c8]
call fcn.31287ce0
push eax
call fcn.312edf30
lea ecx, [ebp - 0x30]
pop edx
call fcn.312ee0e8
lea ecx, [ebp - 0x14]
xor edx, edx
xor eax, eax
call fcn.31263940
test byte [ebx + 0x55], 0x80
setne dl
mov eax, dword [ebx + 0x2cc]
mov byte [eax + 0x21], dl
mov edx, dword [ebp - 0x30]
mov dword [eax + 0x24], edx
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x28], edx
mov edx, dword [ebp - 0x28]
mov dword [eax + 0x2c], edx
mov byte [eax + 0x30], 0
mov eax, ebx
call fcn.312ef600
mov esi, dword [ebx + 0x2cc]
mov byte [esi + 0x31], al
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x44]
mov eax, ebx
call fcn.312d8d4c
mov eax, dword [ebp - 0x44]
push eax
movzx eax, byte [ebx + 0x2d2]
push eax
mov eax, dword [ebx + 0x2d8]
push eax
mov eax, dword [ebx + 0x2d4]
push eax
movzx eax, byte [ebp - 3]
push eax
push 0
xor edx, edx
mov eax, ebx
call fcn.312dbb00
movzx edx, byte [ebx + 0x271]
or eax, dword [edx*4 + 0x3143bb18]
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x24]
mov edx, dword [ebx + 0x2c8]
mov eax, esi
call fcn.3138171c
movzx eax, byte [ebx + 0x2dc]
and al, byte [ebp - 2]
je 0x31383023
mov eax, dword [ebx + 0x2c8]
mov eax, dword [eax + 0x44]
mov edx, 0xff000006
call fcn.31286704
mov eax, dword [ebx + 0x2c8]
mov eax, dword [eax + 0x48]
mov edx, 0xff00000f
call fcn.31286ad8
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebx + 0x2c8]
call fcn.31287ce0
push eax
call fcn.3123c290
jmp 0x31383023
lea edx, [ebp - 0x24]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov dword [ebp - 8], 0x2010
cmp byte [ebp - 1], 0
je 0x31382e2a
or dword [ebp - 8], 0x200
test byte [esi + 0x10], 4
je 0x31382e37
or dword [ebp - 8], 0x100
movzx eax, byte [ebx + 0x2dc]
or al, byte [ebp - 2]
je 0x31382e9f
mov eax, dword [ebx + 0x2c8]
mov eax, dword [eax + 0x44]
mov edx, 0xff000006
call fcn.31286704
mov eax, dword [ebx + 0x2c8]
mov eax, dword [eax + 0x44]
mov edx, 1
call fcn.31286858
mov eax, dword [ebx + 0x2c8]
mov eax, dword [eax + 0x48]
mov dl, 1
call fcn.31286c58
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebx + 0x2c8]
mov edi, dword [eax]
call dword [edi + 0x74]
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x24]
push eax
call sub.user32.dll_EnumWindows
cmp byte [ebp - 1], 0
je 0x31382f06
mov eax, dword [ebx + 0x2c8]
mov eax, dword [eax + 0x44]
mov edx, 0xff000010
call fcn.31286704
mov eax, dword [ebx + 0x2c8]
mov eax, dword [eax + 0x44]
mov edx, 1
call fcn.31286858
mov eax, dword [ebx + 0x2c8]
mov eax, dword [eax + 0x48]
mov edx, 0xff00000f
call fcn.31286ad8
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebx + 0x2c8]
mov esi, dword [eax]
call dword [esi + 0x74]
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x24]
push eax
call sub.user32.dll_EnumWindows
jmp 0x31382f19
mov eax, dword [ebp - 8]
push eax
push 4
lea eax, [ebp - 0x24]
push eax
mov eax, dword [esi + 0x18]
push eax
call fcn.3123c298
cmp byte [ebx + 0x2dc], 0
je 0x31382f39
lea edx, [ebp - 0x24]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x54]
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x24]
push eax
call sub.user32.dll_EnumWindows
mov edx, dword [ebx + 0x64]
mov eax, dword [ebx + 0x2c8]
call fcn.31287bd4
cmp byte [ebp - 1], 0
je 0x31382f5a
push 1
push 1
lea eax, [ebp - 0x24]
push eax
call sub.user32.dll_GetMenu
lea ecx, [ebp - 0x4c]
xor edx, edx
xor eax, eax
call fcn.31263940
lea eax, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x50]
mov eax, ebx
call fcn.312d8d4c
mov eax, dword [ebp - 0x50]
push eax
movzx eax, byte [ebx + 0x2d2]
push eax
mov eax, dword [ebx + 0x2d8]
push eax
mov eax, dword [ebx + 0x2d4]
push eax
movzx eax, byte [ebp - 3]
push eax
push 0
xor edx, edx
mov eax, ebx
call fcn.312dbb00
movzx edx, byte [ebx + 0x271]
or eax, dword [edx*4 + 0x3143bb18]
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x24]
mov edx, dword [ebx + 0x2c8]
mov eax, dword [ebx + 0x2cc]
call fcn.3138171c
movzx eax, byte [ebx + 0x2dc]
and al, byte [ebp - 2]
je 0x31383023
lea edx, [ebp - 0x24]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x54]
push 0xfffffffffffffffc
push 0xfffffffffffffffc
lea eax, [ebp - 0x24]
push eax
call sub.user32.dll_EnumWindows
mov eax, dword [ebx + 0x2c8]
mov eax, dword [eax + 0x44]
mov edx, 0xff000006
call fcn.31286704
mov eax, dword [ebx + 0x2c8]
mov eax, dword [eax + 0x48]
mov edx, 0xff00000f
call fcn.31286ad8
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebx + 0x2c8]
call fcn.31287ce0
push eax
call fcn.3123c290
xor edx, edx
mov eax, dword [ebx + 0x2c8]
call fcn.31287d68
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x31383055
lea eax, [ebp - 0x50]
call fcn.31236de0
lea eax, [ebp - 0x44]
call fcn.31236de0
ret