Function at 0x4938b4
Capabilities:
Enumerate gui resources
Get graphical window text
Terminate process

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff30
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0xd0], edx
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x493f0e
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x40e968]
call fcn.00402e48
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
push 0x49389c
call sub.user32.dll_EnumWindows
xor eax, eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x493ecb
inc eax
mov dword [ebp - 0x24], eax
xor esi, esi
push 0x7f
lea eax, [ebp - 0xa8]
push eax
mov edx, esi
mov eax, dword [ebp - 0xc]
call fcn.00410250
push eax
call sub.user32.dll_GetWindowTextA
test eax, eax
jle case.0x4939fa.0
lea eax, [ebp - 0x10]
lea edx, [ebp - 0xa8]
mov ecx, 0x80
call fcn.00403dd0
mov eax, dword [ebp - 0x10]
call fcn.004935cc
test al, al
je case.0x4939fa.0
lea eax, [ebp - 8]
push eax
mov edx, esi
mov eax, dword [ebp - 0xc]
call fcn.00410250
push eax
call sub.user32.dll_GetWindowThreadProcessId
cmp dword [ebp - 0x18], 0
jne 0x4939e9
mov eax, dword [0x4bc4e0]
mov edx, dword [ebp - 0x10]
call fcn.00403f30
je 0x4939e9
mov eax, 0x4bc4e0
mov edx, dword [ebp - 0x10]
call fcn.00403bf4
cmp dword [0x4c8018], 0
jl 0x4939c0
cmp dword [0x4c8018], 3
jle 0x4939c9
cmp dword [0x4c8018], 9
jne 0x4939e9
push 0
push 0
mov eax, dword [0x4bc4e0]
push eax
push 0
push 0
mov ecx, 3
mov edx, 0x91
mov eax, dword [ebp - 4]
call fcn.0048b008
inc dword [ebp - 0x18]
mov eax, dword [0x4c8018]
cmp eax, 9
ja case.0x4939fa.0
jmp dword [eax*4 + 0x493a01]
mov eax, dword [0x4bcafc]
mov edx, dword [eax + 4]
mov eax, dword [eax]
cmp edx, dword [0x4bc460]
jne 0x493a49
cmp eax, dword [0x4bc45c]
jae case.0x4939fa.0
jmp 0x493a4f
jge case.0x4939fa.0
lea eax, [ebp - 0xbc]
mov edx, dword [0x4bc734]
mov edx, dword [edx]
mov edx, dword [edx + 0x74]
call fcn.00403d58
mov ecx, dword [ebp - 0xbc]
mov dl, byte [0x493f1c]
mov al, 1
call fcn.00487830
jmp case.0x4939fa.0
mov edx, 3
mov eax, dword [0x4c7f98]
call fcn.00495024
jmp case.0x4939fa.0
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 0x10]
call fcn.00408754
mov eax, dword [ebp - 0xc0]
call fcn.00493834
test al, al
je 0x493bde
lea eax, [ebp - 0x20]
push eax
call sub.user32.dll_GetCursorPos
lea eax, [ebp - 0xb8]
push eax
mov edx, esi
mov eax, dword [ebp - 0xc]
call fcn.00410250
push eax
call sub.user32.dll_GetWindowRect
mov eax, dword [ebp - 0xb8]
test eax, eax
jge 0x493aec
sub dword [ebp - 0xb0], eax
xor eax, eax
mov dword [ebp - 0xb8], eax
jmp 0x493b2c
mov eax, dword [0x4bcc38]
mov eax, dword [eax]
call fcn.0042f174
cmp eax, dword [ebp - 0xb0]
jge 0x493b2c
mov eax, dword [0x4bcc38]
mov eax, dword [eax]
call fcn.0042f174
mov edx, dword [ebp - 0xb0]
sub edx, eax
sub dword [ebp - 0xb8], edx
mov eax, dword [0x4bcc38]
mov eax, dword [eax]
call fcn.0042f174
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb4]
test eax, eax
jge 0x493b46
sub dword [ebp - 0xac], eax
xor eax, eax
mov dword [ebp - 0xb4], eax
jmp 0x493b86
mov eax, dword [0x4bcc38]
mov eax, dword [eax]
call fcn.0042f168
cmp eax, dword [ebp - 0xac]
jge 0x493b86
mov eax, dword [0x4bcc38]
mov eax, dword [eax]
call fcn.0042f168
mov edx, dword [ebp - 0xac]
sub edx, eax
sub dword [ebp - 0xb4], edx
mov eax, dword [0x4bcc38]
mov eax, dword [eax]
call fcn.0042f168
mov dword [ebp - 0xac], eax
push 0x40
mov eax, dword [ebp - 0xac]
mov edi, dword [ebp - 0xb4]
sub eax, edi
push eax
mov eax, dword [ebp - 0xb0]
mov ebx, dword [ebp - 0xb8]
sub eax, ebx
push eax
push edi
push ebx
push 0xffffffffffffffff
mov edx, esi
mov eax, dword [ebp - 0xc]
call fcn.00410250
push eax
call sub.user32.dll_SetWindowPos
mov edx, dword [ebp - 0xb4]
add edx, 0xc
mov eax, dword [ebp - 0xb0]
sub eax, 0xf
call fcn.0049353c
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x20]
push eax
call sub.user32.dll_SetCursorPos
push 0
push 0
push 0x10
mov edx, esi
mov eax, dword [ebp - 0xc]
call fcn.00410250
push eax
call sub.user32.dll_PostMessageA
jmp case.0x4939fa.0
mov eax, dword [ebp - 8]
push eax
push 0
push 1
call sub.kernel32.dll_OpenProcess
mov edi, eax
mov eax, edi
xor edx, edx
cmp edx, 0xffffffff
jne 0x493c14
cmp eax, 0xffffffff
je 0x493c2a
test edi, edi
je 0x493c2a
push 0x31
push edi
call sub.kernel32.dll_TerminateProcess
push edi
call sub.kernel32.dll_CloseHandle_1
jmp case.0x4939fa.0
cmp byte [0x4bc56c], 0
je 0x493c59
push 0x43
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
mov edx, esi
mov eax, dword [ebp - 0xc]
call fcn.00410250
push eax
call sub.user32.dll_SetWindowPos
mov eax, 0x14
call fcn.0045504c
push 0
push 0
push 0x10
mov edx, esi
mov eax, dword [ebp - 0xc]
call fcn.00410250
push eax
call sub.user32.dll_PostMessageA
cmp byte [0x4bc56c], 0
je case.0x4939fa.0
mov eax, 0x14
call fcn.0045504c
push 0
push 0
push 0
push 0x59
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x59
call sub.user32.dll_keybd_event
mov eax, dword [0x4c7ea8]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x493ec1
push 0x7f
lea eax, [ebp - 0xa8]
push eax
mov edx, esi
mov eax, dword [ebp - 0xc]
call fcn.00410250
push eax
call sub.user32.dll_GetClassNameA
test eax, eax
jle 0x493ec1
lea eax, [ebp - 0x14]
lea edx, [ebp - 0xa8]
mov ecx, 0x80
call fcn.00403dd0
mov eax, dword [0x4c7ea8]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x493ec1
inc eax
mov dword [ebp - 0x28], eax
xor ebx, ebx
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0xc8]
mov edx, ebx
mov eax, dword [0x4c7ea8]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0xc8]
mov ecx, 0x400
mov edx, 4
call fcn.00404028
mov edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x14]
call fcn.00403f30
jne case.0x493d85.0
test ebx, ebx
jne 0x493d53
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
call fcn.00408bbc
inc eax
je 0x493ec1
lea ecx, [ebp - 0xcc]
mov edx, ebx
mov eax, dword [0x4c7ea8]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0xcc]
movzx eax, byte [eax + 1]
sub eax, 0x30
mov dword [0x4c8018], eax
mov eax, dword [0x4c8018]
cmp eax, 7
ja case.0x493d85.0
jmp dword [eax*4 + 0x493d8c]
mov eax, dword [0x4bcafc]
mov edx, dword [eax + 4]
mov eax, dword [eax]
cmp edx, dword [0x4bc460]
jne 0x493dcc
cmp eax, dword [0x4bc45c]
jae case.0x493d85.0
jmp 0x493dd2
jge case.0x493d85.0
lea eax, [ebp - 0xd0]
mov edx, dword [0x4bc734]
mov edx, dword [edx]
mov edx, dword [edx + 0x74]
call fcn.00403d58
mov ecx, dword [ebp - 0xd0]
mov dl, byte [0x493f1c]
mov al, 1
call fcn.00487830
jmp case.0x493d85.0
mov edx, 3
mov eax, dword [0x4c7f98]
call fcn.00495024
jmp case.0x493d85.0
mov eax, dword [ebp - 8]
push eax
push 0
push 1
call sub.kernel32.dll_OpenProcess
mov edi, eax
mov eax, edi
xor edx, edx
cmp edx, 0xffffffff
jne 0x493e2f
cmp eax, 0xffffffff
je 0x493e45
test edi, edi
je 0x493e45
push 0x31
push edi
call sub.kernel32.dll_TerminateProcess
push edi
call sub.kernel32.dll_CloseHandle_1
jmp case.0x493d85.0
cmp byte [0x4bc56c], 0
je 0x493e74
push 0x43
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
mov edx, esi
mov eax, dword [ebp - 0xc]
call fcn.00410250
push eax
call sub.user32.dll_SetWindowPos
mov eax, 0x14
call fcn.0045504c
push 0
push 0
push 0x10
mov edx, esi
mov eax, dword [ebp - 0xc]
call fcn.00410250
push eax
call sub.user32.dll_PostMessageA
cmp byte [0x4bc56c], 0
je case.0x493d85.0
mov eax, 0x14
call fcn.0045504c
push 0
push 0
push 0
push 0x59
call sub.user32.dll_keybd_event
push 0
push 2
push 0
push 0x59
call sub.user32.dll_keybd_event
inc ebx
dec dword [ebp - 0x28]
jne 0x493cfb
inc esi
dec dword [ebp - 0x24]
jne 0x493934
cmp dword [ebp - 0x18], 0
jne 0x493edb
mov eax, 0x4bc4e0
call fcn.00403ba0
mov eax, dword [ebp - 0xc]
call fcn.00402e78
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x493f15
lea eax, [ebp - 0xd0]
mov edx, 6
call fcn.00403bc4
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00403bc4
ret