Function at 0xcc41fc
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x44
push ebx
push esi
push edi
mov edi, ecx
mov ecx, dword [ebp + 0x10]
call fcn.00c617d5
lea ecx, [edi + 0xbc]
call fcn.00c617d5
mov al, byte [ebp + 0x20]
lea esi, [edi + 0x14]
mov byte [edi + 4], al
mov al, byte [ebp + 0x1c]
mov byte [edi + 5], al
cmp esi, dword [ebp + 8]
je 0xcc423b
push dword [ebp + 8]
mov ecx, esi
call fcn.00c6a8c7
lea eax, [edi + 0x24]
cmp eax, dword [ebp + 0xc]
je 0xcc424d
push dword [ebp + 0xc]
mov ecx, eax
call fcn.00c6a8c7
lea ecx, [edi + 0x8c]
push 0xcfcc08
call fcn.00c66b57
mov eax, dword [ebp + 0x14]
lea ecx, [esp + 0x30]
xor ebx, ebx
mov dword [edi + 0x10], eax
xor eax, eax
inc ebx
mov dword [edi + 0x9c], ebx
mov byte [edi + 0xc], bl
mov dword [edi + 8], eax
mov dword [edi + 0xa0], eax
mov dword [edi + 0xb4], eax
call fcn.00c6a961
lea ecx, [esp + 0x20]
call fcn.00c6a961
lea ecx, [esp + 0x40]
call fcn.00c6a961
mov eax, dword [edi + 0x10]
test eax, eax
jns 0xcc42b0
push eax
call fcn.00c88fc4
pop ecx
mov dword [edi + 0x10], eax
mov byte [edi + 0xc], 0
cmp eax, 4
jne 0xcc42be
push esi
call fcn.00cc3e51
mov dword [edi + 0x10], ebx
xor eax, eax
cmp dword [edi + 0x18], eax
jne 0xcc42f2
cmp dword [edi + 0x28], eax
jne 0xcc42f2
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
mov ecx, edi
call fcn.00cc39c0
mov eax, dword [edi]
mov ecx, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
call fcn.00cc417d
jmp 0xcc492e
push eax
mov ecx, esi
call fcn.00c64c6d
cmp word [eax], 0x5b
jne 0xcc4870
mov eax, dword [edi + 0x18]
mov ecx, esi
dec eax
push eax
call fcn.00c64c6d
cmp word [eax], 0x5d
jne 0xcc4870
mov ecx, dword [edi + 0x18]
sub ecx, 2
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x10], ecx
push ecx
lea eax, [esp + 0x20]
mov ecx, esi
push eax
lea eax, [esp + 0x28]
push eax
lea edx, [esp + 0x3c]
call fcn.00cc4010
add esp, 0xc
test al, al
je 0xcc4870
push str.LAST
call fcn.00c84963
mov ebx, dword [esp + 0x38]
mov esi, dword [esp + 0x34]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], esi
pop ecx
cmp ebx, eax
jne 0xcc43a3
mov edx, ebx
mov ebx, str.LAST
mov eax, ebx
test edx, edx
je 0xcc4391
mov ecx, esi
sub ecx, ebx
movzx esi, word [ecx + eax]
movzx ebx, word [eax]
cmp si, bx
jne 0xcc448a
add eax, 2
sub edx, 1
jne 0xcc4379
xor eax, eax
test eax, eax
je 0xcc47d7
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
push str.ACTIVE
call fcn.00c84963
pop ecx
cmp ebx, eax
jne 0xcc43e9
mov edx, ebx
mov ebx, str.ACTIVE
mov eax, ebx
test edx, edx
je 0xcc43db
mov ecx, esi
sub ecx, ebx
movzx esi, word [ecx + eax]
movzx ebx, word [eax]
cmp si, bx
jne 0xcc4495
add eax, 2
sub edx, 1
jne 0xcc43c3
xor eax, eax
test eax, eax
je 0xcc47fe
mov ebx, dword [esp + 0x18]
mov esi, 0xd25d00
push esi
call fcn.00c84963
pop ecx
cmp ebx, eax
jne 0xcc442d
mov edx, ebx
mov eax, esi
test edx, edx
je 0xcc441f
mov ecx, dword [esp + 0x14]
sub ecx, esi
movzx esi, word [ecx + eax]
movzx ebx, word [eax]
cmp si, bx
jne 0xcc44a0
add eax, 2
sub edx, 1
jne 0xcc4407
xor eax, eax
test eax, eax
je 0xcc4819
mov ebx, dword [esp + 0x18]
mov esi, str.REGEXPTITLE
push esi
call fcn.00c84963
pop ecx
cmp ebx, eax
jne 0xcc44b9
mov edx, ebx
mov eax, esi
test edx, edx
je 0xcc445f
mov ecx, dword [esp + 0x14]
sub ecx, esi
movzx esi, word [ecx + eax]
movzx ebx, word [eax]
cmp si, bx
jne 0xcc44ab
add eax, 2
sub edx, 1
jne 0xcc444b
push 0xfffffffffffffffe
xor eax, eax
pop ebx
test eax, eax
jne 0xcc44b5
mov eax, dword [edi + 8]
test al, 1
jne 0xcc485c
or eax, 2
lea ecx, [edi + 0x34]
mov dword [edi + 8], eax
call fcn.00c6696a
push ecx
lea ecx, [edi + 0x34]
jmp 0xcc4579
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0xcc4393
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0xcc43dd
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0xcc4421
push 0xfffffffffffffffe
sbb eax, eax
pop ebx
and eax, ebx
inc eax
jmp 0xcc4464
mov ebx, dword [esp + 0x18]
mov esi, str.CLASS
push esi
call fcn.00c84963
pop ecx
cmp ebx, eax
jne 0xcc452e
mov edx, ebx
mov eax, esi
test edx, edx
je 0xcc44eb
mov ecx, dword [esp + 0x14]
sub ecx, esi
movzx esi, word [ecx + eax]
movzx ebx, word [eax]
cmp si, bx
jne 0xcc4522
add eax, 2
sub edx, 1
jne 0xcc44d7
xor eax, eax
test eax, eax
jne 0xcc452a
or dword [edi + 8], 8
lea ecx, [esp + 0x20]
lea eax, [edi + 0x8c]
push 1
cmp eax, ecx
lea esi, [edi + 0x14]
mov ecx, dword [esp + 0x14]
pop ebx
je 0xcc4328
lea ecx, [esp + 0x20]
push ecx
mov ecx, eax
call fcn.00c6a8c7
jmp 0xcc47c0
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0xcc44ed
mov ebx, dword [esp + 0x18]
mov esi, str.REGEXPCLASS
push esi
call fcn.00c84963
pop ecx
cmp ebx, eax
jne 0xcc459e
mov edx, ebx
mov eax, esi
test edx, edx
je 0xcc4560
mov ecx, dword [esp + 0x14]
sub ecx, esi
movzx esi, word [ecx + eax]
movzx ebx, word [eax]
cmp si, bx
jne 0xcc4590
add eax, 2
sub edx, 1
jne 0xcc454c
push 0xfffffffffffffffe
xor eax, eax
pop ebx
test eax, eax
jne 0xcc459a
or dword [edi + 8], 0x10
lea ecx, [edi + 0x60]
call fcn.00c6696a
push ecx
lea ecx, [edi + 0x60]
lea eax, [esp + 0x24]
push eax
call fcn.00c66848
test eax, eax
jne 0xcc492e
jmp 0xcc47c0
push 0xfffffffffffffffe
sbb eax, eax
pop ebx
and eax, ebx
inc eax
jmp 0xcc4565
mov ebx, dword [esp + 0x18]
mov esi, str.XYWH
push esi
call fcn.00c84963
pop ecx
cmp ebx, eax
jne 0xcc45fe
mov edx, ebx
mov eax, esi
test edx, edx
je 0xcc45d0
mov ecx, dword [esp + 0x14]
sub ecx, esi
movzx esi, word [ecx + eax]
movzx ebx, word [eax]
cmp si, bx
jne 0xcc45f2
add eax, 2
sub edx, 1
jne 0xcc45bc
xor eax, eax
test eax, eax
jne 0xcc45fa
push dword [esp + 0x20]
or dword [edi + 8], 0x80
call fcn.00c862d1
pop ecx
mov dword [edi + 0xa4], eax
jmp 0xcc47c0
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0xcc45d2
mov ebx, dword [esp + 0x18]
mov esi, 0xd25bf0
push esi
call fcn.00c84963
pop ecx
cmp ebx, eax
jne 0xcc465e
mov edx, ebx
mov eax, esi
test edx, edx
je 0xcc4630
mov ecx, dword [esp + 0x14]
sub ecx, esi
movzx esi, word [ecx + eax]
movzx ebx, word [eax]
cmp si, bx
jne 0xcc4652
add eax, 2
sub edx, 1
jne 0xcc461c
xor eax, eax
test eax, eax
jne 0xcc465a
push dword [esp + 0x20]
or dword [edi + 8], 0x100
call fcn.00c862d1
pop ecx
mov dword [edi + 0xa8], eax
jmp 0xcc47c0
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0xcc4632
mov ebx, dword [esp + 0x18]
mov esi, 0xd25bf4
push esi
call fcn.00c84963
pop ecx
cmp ebx, eax
jne 0xcc46be
mov edx, ebx
mov eax, esi
test edx, edx
je 0xcc4690
mov ecx, dword [esp + 0x14]
sub ecx, esi
movzx esi, word [ecx + eax]
movzx ebx, word [eax]
cmp si, bx
jne 0xcc46b2
add eax, 2
sub edx, 1
jne 0xcc467c
xor eax, eax
test eax, eax
jne 0xcc46ba
push dword [esp + 0x20]
or dword [edi + 8], 0x200
call fcn.00c862d1
pop ecx
mov dword [edi + 0xac], eax
jmp 0xcc47c0
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0xcc4692
mov ebx, dword [esp + 0x18]
mov edx, 0xd25bf8
lea ecx, [esp + 0x30]
call fcn.00c7f9f2
test al, al
je 0xcc46ec
push dword [esp + 0x20]
or dword [edi + 8], 0x400
call fcn.00c862d1
pop ecx
mov dword [edi + 0xb0], eax
jmp 0xcc47c0
mov edx, str.INSTANCE
lea ecx, [esp + 0x30]
call fcn.00c7f9f2
test al, al
je 0xcc4717
push dword [esp + 0x20]
or dword [edi + 8], 0x20
call fcn.00c862d1
pop ecx
mov dword [edi + 0x9c], eax
jmp 0xcc47c0
mov edx, 0xd25ce8
lea ecx, [esp + 0x30]
call fcn.00c7f9f2
test al, al
je 0xcc4745
mov edx, 0xcfcc08
lea ecx, [esp + 0x20]
call fcn.00c7f9f2
test al, al
je 0xcc4868
or dword [edi + 8], 0x40
jmp 0xcc47c0
mov edx, str.TITLE
lea ecx, [esp + 0x30]
call fcn.00c7f9f2
test al, al
je 0xcc477a
mov eax, dword [edi + 8]
test al, 2
jne 0xcc4860
xor ebx, ebx
lea ecx, [esp + 0x40]
inc ebx
or eax, ebx
mov dword [edi + 8], eax
lea eax, [esp + 0x20]
push eax
call fcn.00c6a8c7
jmp 0xcc47c3
mov esi, 0xcfcc08
push esi
call fcn.00c84963
pop ecx
cmp ebx, eax
jne 0xcc4868
mov eax, esi
test ebx, ebx
je 0xcc47b6
mov ecx, dword [esp + 0x14]
sub ecx, esi
mov dword [esp + 0x14], ecx
movzx ecx, word [ecx + eax]
movzx edx, word [eax]
cmp cx, dx
jne 0xcc47cf
mov ecx, dword [esp + 0x14]
add eax, 2
sub ebx, 1
jne 0xcc479e
xor eax, eax
test eax, eax
jne 0xcc4868
xor ebx, ebx
inc ebx
mov ecx, dword [esp + 0x10]
lea esi, [edi + 0x14]
jmp 0xcc4328
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0xcc47b8
mov edx, 0xcfcc08
lea ecx, [esp + 0x20]
call fcn.00c7f9f2
test al, al
je 0xcc4868
mov eax, dword [edi]
push dword [eax]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0xcc483f
xor ebx, ebx
jmp 0xcc492e
mov edx, 0xcfcc08
lea ecx, [esp + 0x20]
call fcn.00c7f9f2
test al, al
je 0xcc4868
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
jmp 0xcc4838
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x18]
call fcn.00ccef10
push dword [esp + 0x18]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0xcc47f7
push dword [esp + 0x18]
mov ecx, edi
call fcn.00cc39c0
mov eax, dword [edi]
mov ecx, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
call fcn.00cc417d
xor ebx, ebx
inc ebx
jmp 0xcc492e
push 0xfffffffffffffffd
jmp 0xcc4862
push 0xfffffffffffffffc
pop ebx
jmp 0xcc492e
or ebx, 0xffffffff
jmp 0xcc492e
cmp dword [esp + 0x44], 0
je 0xcc4887
lea eax, [esp + 0x40]
cmp esi, eax
je 0xcc4887
push eax
mov ecx, esi
call fcn.00c6a8c7
mov eax, dword [edi + 8]
test eax, eax
jne 0xcc4890
mov eax, ebx
mov esi, dword [sym.imp.USER32.dll_CharUpperBuffW]
or eax, 4
cmp byte [edi + 0xc], 0
mov dword [edi + 8], eax
jne 0xcc48b5
lea ecx, [edi + 0x24]
call fcn.00c6aec9
push dword [edi + 0x28]
push dword [edi + 0x24]
call esi
mov eax, dword [edi + 8]
test al, 1
je 0xcc48cf
cmp byte [edi + 0xc], 0
jne 0xcc48cf
lea ecx, [edi + 0x14]
call fcn.00c6aec9
push dword [edi + 0x18]
push dword [edi + 0x14]
call esi
cmp byte [ebp + 0x18], 0
push edi
push 0xcc4954
je 0xcc48ea
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnumChildWindows]
jmp 0xcc48f0
call dword [sym.imp.USER32.dll_EnumWindows]
mov esi, dword [ebp + 0x10]
lea eax, [edi + 0xbc]
push eax
mov ecx, esi
call fcn.00cc3d92
lea ecx, [edi + 0xbc]
call fcn.00c617d5
mov eax, dword [edi + 0xb4]
cmp eax, ebx
jl 0xcc492c
mov eax, dword [esi + 4]
mov ecx, edi
mov eax, dword [eax]
push dword [eax]
call fcn.00cc39c0
mov ebx, dword [edi + 0xb4]
jmp 0xcc492e
mov ebx, eax
lea ecx, [esp + 0x40]
call fcn.00c6988f
lea ecx, [esp + 0x20]
call fcn.00c6988f
lea ecx, [esp + 0x30]
call fcn.00c6988f
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 0x1c