Function at 0x407f30
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x575d10
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push ebx
push esi
push edi
mov eax, dword [0x676300]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 0xc]
xor ebx, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 1
push ecx
mov ecx, dword [ebp + 8]
call fcn.00407e20
test al, al
jne 0x407fc2
push str.Failed_to_get_Process_id_...
push str.ProcessAnalyser
push 0x67eba0
call fcn.004ebec7
lea edx, [ebp - 0x28]
add esp, 0xc
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
cmp esi, edx
je 0x407fb8
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov eax, dword [ebp - 0x38]
cmp eax, ebx
jmp 0x4082bd
mov esi, dword [ebp - 0x38]
cmp esi, dword [ebp - 0x34]
je 0x407fe2
mov edi, dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [esi]
push eax
push 0x407cd0
call edi
add esi, 4
cmp esi, dword [ebp - 0x34]
jne 0x407fd0
mov eax, dword [0x68178c]
mov ecx, eax
mov dword [ebp - 0x14], ecx
cmp ecx, dword [0x681790]
je 0x4081c5
jmp 0x408000
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x5c]
mov ecx, dword [ecx + 0x60]
sub ecx, eax
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 6
mov ebx, edx
shr ebx, 0x1f
xor edi, edi
add ebx, edx
je 0x4081a8
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x5c]
lea esi, [eax + 0xb4]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], esi
cmp dword [esi - 0xa0], 0x10
jb 0x408041
mov eax, dword [eax]
mov ecx, str.QQ_GAME
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x408066
test dl, dl
je 0x408062
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x408066
add eax, 2
add ecx, 2
test dl, dl
jne 0x408046
xor eax, eax
jmp 0x40806b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4080b0
cmp dword [esi + 0x14], 0x10
jb 0x40807c
mov edx, dword [ebp - 0x10]
mov esi, dword [edx]
jmp 0x40807f
mov esi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
call fcn.004089f0
mov cl, byte [eax]
cmp cl, byte [esi]
jne 0x4080a7
test cl, cl
je 0x4080a3
mov cl, byte [eax + 1]
cmp cl, byte [esi + 1]
jne 0x4080a7
add eax, 2
add esi, 2
test cl, cl
jne 0x408087
xor eax, eax
jmp 0x4080ac
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4080d5
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
inc edi
add eax, 0xd0
add esi, 0xd0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], esi
cmp edi, ebx
jb 0x408036
jmp 0x4081a8
mov eax, dword [ebp + 8]
imul edi, edi, 0xd0
mov eax, dword [eax + 0x5c]
mov edx, dword [ebp - 0x28]
lea esi, [edi + eax + 0x1c]
mov edi, dword [ebp - 0x24]
cmp esi, edi
jae 0x408150
cmp edx, esi
ja 0x408150
mov ecx, dword [ebp - 0x20]
sub esi, edx
sar esi, 2
cmp edi, ecx
jne 0x408145
mov eax, edi
sub eax, edx
sar eax, 2
cmp eax, 0x3ffffffe
ja 0x408252
sub ecx, edx
inc eax
sar ecx, 2
cmp eax, ecx
jbe 0x408145
mov edx, ecx
shr edx, 1
mov edi, 0x3fffffff
sub edi, edx
cmp edi, ecx
jae 0x40812e
xor ecx, ecx
jmp 0x408130
add ecx, edx
cmp ecx, eax
jae 0x408136
mov ecx, eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.004273f0
mov edx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x24]
test edi, edi
je 0x4081a2
mov ecx, dword [edx + esi*4]
mov dword [edi], ecx
jmp 0x4081a2
mov ecx, dword [ebp - 0x20]
cmp edi, ecx
jne 0x40819a
mov eax, edi
sub eax, edx
sar eax, 2
cmp eax, 0x3ffffffe
ja 0x408252
sub ecx, edx
inc eax
sar ecx, 2
cmp eax, ecx
jbe 0x40819a
mov edx, ecx
shr edx, 1
mov edi, 0x3fffffff
sub edi, edx
cmp edi, ecx
jae 0x408186
xor ecx, ecx
jmp 0x408188
add ecx, edx
cmp ecx, eax
jae 0x40818e
mov ecx, eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.004273f0
mov edi, dword [ebp - 0x24]
test edi, edi
je 0x4081a2
mov edx, dword [esi]
mov dword [edi], edx
add edi, 4
mov dword [ebp - 0x24], edi
mov eax, dword [ebp - 0x14]
add eax, 0x1c
mov dword [ebp - 0x14], eax
cmp eax, dword [0x681790]
jne 0x408000
mov eax, dword [0x68178c]
mov ebx, dword [ebp - 0x24]
cmp eax, dword [0x681790]
je 0x408222
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [0x681790]
push ecx
call fcn.0040d900
mov edi, dword [0x681790]
mov ebx, eax
mov esi, ebx
cmp ebx, edi
je 0x408219
jmp 0x4081f0
cmp dword [esi + 0x14], 0x10
jb 0x408201
mov edx, dword [esi]
push edx
call fcn.00535f7c
add esp, 4
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
add esi, 0x1c
cmp esi, edi
jne 0x4081f0
mov dword [0x681790], ebx
mov ebx, dword [ebp - 0x24]
mov edi, dword [ebp - 0x28]
mov eax, ebx
sub eax, edi
sar eax, 2
push eax
push ebx
push edi
call fcn.0040d660
cmp edi, ebx
je 0x40828a
lea eax, [edi + 4]
mov ecx, edi
cmp eax, ebx
je 0x40828a
mov edx, dword [ecx]
cmp edx, dword [eax]
je 0x40825c
mov ecx, eax
add eax, 4
cmp eax, ebx
jne 0x408241
jmp 0x40828a
push str.vector_T__too_long
call fcn.005535bb
add eax, 4
cmp eax, ebx
je 0x408275
mov edx, dword [eax]
cmp dword [ecx], edx
je 0x40826e
add ecx, 4
mov dword [ecx], edx
add eax, 4
cmp eax, ebx
jne 0x408263
lea esi, [ecx + 4]
cmp esi, ebx
je 0x40828a
push 0
push ebx
push esi
call fcn.00536370
add esp, 0xc
mov ebx, esi
mov esi, dword [ebp + 0xc]
xor eax, eax
lea ecx, [ebp - 0x28]
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
cmp esi, ecx
je 0x4082ab
mov edx, dword [ebp - 0x20]
mov dword [esi], edi
mov dword [esi + 4], ebx
mov dword [esi + 8], edx
jmp 0x4082b8
cmp edi, eax
je 0x4082b8
push edi
call fcn.00535f7c
add esp, 4
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x4082c8
push eax
call fcn.00535f7c
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8