Function at 0x4055c5
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
mov esi, dword [ebp + 0x14]
push edi
call fcn.00409074
mov edi, dword [ebp + 8]
lea esi, [edi + 0xb0]
mov dword [ebp - 8], esi
call fcn.00409074
mov al, byte [ebp + 0x24]
mov ebx, dword [ebp + 0xc]
mov byte [edi + 4], al
mov al, byte [ebp + 0x20]
lea esi, [edi + 0x14]
mov byte [edi + 5], al
mov eax, esi
mov dword [ebp + 0x24], esi
call fcn.0040fe4f
mov ebx, dword [ebp + 0x10]
lea eax, [edi + 0x20]
mov dword [ebp - 4], eax
call fcn.0040fe4f
lea eax, [edi + 0x84]
push 0x46ad3e
mov dword [ebp + 0xc], eax
call fcn.0040fe78
mov eax, dword [ebp + 0x18]
xor ebx, ebx
mov dword [edi + 0x10], eax
xor eax, eax
inc ebx
lea ecx, [ebp - 0x14]
mov dword [edi + 0x90], ebx
mov byte [edi + 0xc], bl
mov dword [edi + 8], eax
mov dword [edi + 0x94], eax
mov dword [edi + 0xa8], eax
call fcn.0040fcca
lea ecx, [ebp - 0x20]
call fcn.0040fcca
mov eax, dword [edi + 0x10]
test eax, eax
jge 0x40566c
push eax
call fcn.00451ad2
pop ecx
mov dword [edi + 0x10], eax
mov byte [edi + 0xc], 0
cmp dword [edi + 0x10], 4
jne 0x40567c
mov eax, esi
call fcn.00405411
mov dword [edi + 0x10], ebx
mov edx, dword [edi + 0x18]
test edx, edx
jne 0x4056c4
cmp dword [edi + 0x24], edx
jne 0x4056c4
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
mov esi, edi
call fcn.0040494b
mov eax, dword [edi]
mov eax, dword [eax]
mov esi, dword [ebp + 0x14]
mov dword [ebp + 0x24], eax
lea eax, [ebp + 0x24]
push eax
call fcn.004076ac
push dword [ebp - 0x20]
call fcn.0044f500
push dword [ebp - 0x14]
call fcn.0044f500
pop ecx
pop ecx
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret 0x20
push 0
mov eax, esi
call fcn.0040fe39
cmp byte [eax], 0x5b
jne 0x405954
lea eax, [edx - 1]
push eax
mov eax, esi
call fcn.0040fe39
cmp byte [eax], 0x5d
jne 0x405954
add edx, 0xfffffffe
push edx
lea eax, [ebp - 0x20]
push eax
push esi
lea edi, [ebp + 0x20]
lea eax, [ebp - 0x14]
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0x10], edx
call fcn.00404975
test al, al
je 0x405951
push str.LAST
lea esi, [ebp - 0x14]
call fcn.0040ffc0
test al, al
pop ecx
jne 0x4059ad
push str.ACTIVE
call fcn.0040ffc0
test al, al
pop ecx
jne 0x4059fd
push str.HANDLE
call fcn.0040ffc0
test al, al
pop ecx
jne 0x405a22
push str.REGEXPTITLE
call fcn.0040ffc0
test al, al
pop ecx
je 0x405770
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 8]
test bl, al
jne 0x405a3f
or eax, 2
mov dword [ecx + 8], eax
lea esi, [ecx + 0x2c]
jmp 0x4057ad
push str.CLASS
lea esi, [ebp - 0x14]
call fcn.0040ffc0
test al, al
pop ecx
je 0x405791
mov eax, dword [ebp + 8]
or dword [eax + 8], 8
mov eax, dword [ebp + 0xc]
jmp 0x40590e
push str.REGEXPCLASS
lea esi, [ebp - 0x14]
call fcn.0040ffc0
test al, al
pop ecx
je 0x4057cb
mov eax, dword [ebp + 8]
or dword [eax + 8], 0x10
lea esi, [eax + 0x58]
call fcn.00407741
lea eax, [ebp - 0x20]
mov ecx, esi
call fcn.00407794
test eax, eax
je 0x405931
push 0xfffffffffffffffe
jmp 0x405a41
push str.XYWH
lea esi, [ebp - 0x14]
call fcn.0040ffc0
test al, al
pop ecx
je 0x4057fb
mov esi, dword [ebp + 8]
push dword [ebp - 0x20]
or dword [esi + 8], 0x80
call fcn.00451529
pop ecx
mov dword [esi + 0x98], eax
jmp 0x405931
push 0x46b1cc
lea esi, [ebp - 0x14]
call fcn.0040ffc0
test al, al
pop ecx
je 0x40582b
mov esi, dword [ebp + 8]
push dword [ebp - 0x20]
or dword [esi + 8], 0x100
call fcn.00451529
pop ecx
mov dword [esi + 0x9c], eax
jmp 0x405931
push 0x46b1d0
lea esi, [ebp - 0x14]
call fcn.0040ffc0
test al, al
pop ecx
je 0x40585b
mov esi, dword [ebp + 8]
push dword [ebp - 0x20]
or dword [esi + 8], 0x200
call fcn.00451529
pop ecx
mov dword [esi + 0xa0], eax
jmp 0x405931
push 0x46b1d4
lea esi, [ebp - 0x14]
call fcn.0040ffc0
test al, al
pop ecx
je 0x40588b
mov esi, dword [ebp + 8]
push dword [ebp - 0x20]
or dword [esi + 8], 0x400
call fcn.00451529
pop ecx
mov dword [esi + 0xa4], eax
jmp 0x405931
push 0x46b1d8
lea esi, [ebp - 0x14]
call fcn.0040ffc0
test al, al
pop ecx
je 0x4058b5
mov esi, dword [ebp + 8]
push dword [ebp - 0x20]
or dword [esi + 8], 0x20
call fcn.00451529
pop ecx
mov dword [esi + 0x90], eax
jmp 0x405931
push 0x46b25c
lea esi, [ebp - 0x14]
call fcn.0040ffc0
test al, al
pop ecx
je 0x4058e6
push 0x46ad3e
lea esi, [ebp - 0x20]
call fcn.0040ffc0
test al, al
pop ecx
je 0x4059f8
mov eax, dword [ebp + 8]
or dword [eax + 8], 0x40
jmp 0x405931
push str.TITLE
lea esi, [ebp - 0x14]
call fcn.0040ffc0
test al, al
pop ecx
je 0x40591b
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 8]
test al, 2
jne 0x405a44
or eax, ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp + 0x24]
lea ebx, [ebp - 0x20]
call fcn.0040fe4f
xor ebx, ebx
inc ebx
jmp 0x405931
push 0x46ad3e
lea esi, [ebp - 0x14]
call fcn.0040ffc0
test al, al
pop ecx
je 0x4059f8
push dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
push dword [ebp + 0x24]
lea edi, [ebp + 0x20]
lea eax, [ebp - 0x14]
call fcn.00404975
test al, al
jne 0x40570c
mov esi, dword [ebp + 0x24]
mov edi, dword [ebp + 8]
cmp dword [edi + 8], 0
jne 0x40595d
mov dword [edi + 8], ebx
or dword [edi + 8], 4
cmp byte [edi + 0xc], 0
jne 0x405975
mov eax, dword [ebp - 4]
push dword [eax + 4]
push dword [eax]
call dword [sym.imp.USER32.dll_CharUpperBuffA]
test byte [edi + 8], bl
je 0x40598b
cmp byte [edi + 0xc], 0
jne 0x40598b
push dword [esi + 4]
push dword [esi]
call dword [sym.imp.USER32.dll_CharUpperBuffA]
cmp byte [ebp + 0x1c], 0
push edi
push 0x405a85
je 0x405a48
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnumChildWindows]
jmp 0x405a4e
push 0x46ad3e
lea esi, [ebp - 0x20]
call fcn.0040ffc0
test al, al
pop ecx
je 0x4059f8
mov eax, dword [ebp + 8]
mov eax, dword [eax]
test eax, eax
je 0x4059f4
mov eax, dword [eax]
mov esi, dword [ebp + 0x14]
mov dword [ebp + 0x24], eax
lea eax, [ebp + 0x24]
push eax
call fcn.004076ac
mov edi, ebx
push dword [ebp - 0x20]
call fcn.0044f500
push dword [ebp - 0x14]
call fcn.0044f500
pop ecx
pop ecx
mov eax, edi
jmp 0x4056bd
xor edi, edi
jmp 0x4059db
or edi, 0xffffffff
jmp 0x4059db
push 0x46ad3e
lea esi, [ebp - 0x20]
call fcn.0040ffc0
test al, al
pop ecx
je 0x4059f8
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
mov esi, dword [ebp + 8]
call fcn.0040494b
mov eax, dword [esi]
jmp 0x4059c8
mov edi, dword [ebp - 0x20]
lea esi, [ebp + 0x24]
call fcn.0040f70b
push dword [ebp + 0x24]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4059f4
push dword [ebp + 0x24]
jmp 0x405a16
push 0xfffffffffffffffd
pop edi
jmp 0x4059db
push 0xfffffffffffffffc
jmp 0x405a41
call dword [sym.imp.USER32.dll_EnumWindows]
mov esi, dword [ebp - 8]
mov eax, dword [ebp + 0x14]
mov ebx, esi
call fcn.00405e86
call fcn.00409074
cmp dword [edi + 0xa8], 1
jl 0x405a7a
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 4]
mov eax, dword [eax]
push dword [eax]
mov esi, edi
call fcn.0040494b
mov edi, dword [edi + 0xa8]
jmp 0x4059db