Function at 0x585330
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d3615
mov eax, dword fs:[0]
push eax
sub esp, 0x2d0
mov eax, dword [0x638fe4]
xor eax, ebp
mov dword [ebp - 0x18], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp dword [0x6441b4], 0
mov edi, dword [ebp + 8]
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0x2c0], edi
mov dword [ebp - 0x2d4], 0x644170
jne 0x5855fa
mov esi, dword [ebp + 0xc]
mov dword [ebp - 4], 0
cmp esi, 0xe30
jg 0x5856af
je case.0x5853b6.3324
lea eax, [esi - 0xce4]
cmp eax, 0x23
ja case.0x5853b6.3301
movzx eax, byte [eax + 0x585954]
jmp dword [eax*4 + 0x585938]
push ebx
push esi
push ecx
push 0
call fcn.005832c0
test al, al
jne 0x5853e6
push 0x62e4b0
lea eax, [ebp - 0x2c4]
mov dword [ebp - 0x2c4], 0x31e
push eax
call fcn.005479aa
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x2b0], 0
push eax
call dword [sym.imp.SUCMLIB.dll_Ordinal_77]
test edi, edi
jne 0x585405
xor edx, edx
jmp 0x585408
mov edx, dword [edi + 0x20]
mov ecx, dword [ebp - 0x2b0]
push edx
mov eax, dword [ecx]
call dword [eax + 0x11c]
push 0x2000000
push ebx
call fcn.0058c3e0
push eax
mov edx, ebx
lea ecx, [ebp - 0x2b4]
call fcn.005b5f80
add esp, 4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2b8]
push dword [eax]
call fcn.00405ea0
mov edx, eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x2b0]
push dword [edx]
mov eax, dword [ecx]
call dword [eax + pe_nt_image_headers32]
lea ecx, [ebp - 0x2b8]
call fcn.00402b90
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 0
call fcn.00402b90
mov ecx, dword [ebp - 0x2b0]
push 0xd03
mov eax, dword [ecx]
call dword [eax + 0x160]
mov ecx, dword [ebp - 0x2b0]
push 0xff0
mov eax, dword [ecx]
call dword [eax + 0x158]
push dword [ebp - 0x2b0]
call dword [0x643b84]
test al, al
lea eax, [ebp - 0x2b0]
push eax
jne 0x5855eb
call dword [sym.imp.SUCMLIB.dll_Ordinal_79]
push 0x62e4b0
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x2c8], 0x32a
push eax
call fcn.005479aa
push ebx
push esi
push ecx
push 0
call fcn.005832c0
test al, al
jne 0x5854ff
push 0x62e4b0
lea eax, [ebp - 0x2cc]
mov dword [ebp - 0x2cc], 0x337
push eax
call fcn.005479aa
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x2b0], 0
push eax
call dword [sym.imp.SUCMLIB.dll_Ordinal_77]
test edi, edi
jne 0x58551e
xor edx, edx
jmp 0x585521
mov edx, dword [edi + 0x20]
mov ecx, dword [ebp - 0x2b0]
push edx
mov eax, dword [ecx]
call dword [eax + 0x11c]
push 0x2000000
push ebx
call fcn.0058c3e0
push eax
mov edx, ebx
lea ecx, [ebp - 0x2b4]
call fcn.005b5f80
add esp, 4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b8]
push dword [eax]
call fcn.00405ea0
mov edx, eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x2b0]
push dword [edx]
mov eax, dword [ecx]
call dword [eax + pe_nt_image_headers32]
lea ecx, [ebp - 0x2b8]
call fcn.00402b90
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 0
call fcn.00402b90
mov ecx, dword [ebp - 0x2b0]
push 0xd04
mov eax, dword [ecx]
call dword [eax + 0x160]
mov ecx, dword [ebp - 0x2b0]
push 0xff0
mov eax, dword [ecx]
call dword [eax + 0x158]
push dword [ebp - 0x2b0]
call dword [0x643b84]
test al, al
lea eax, [ebp - 0x2b0]
push eax
jne 0x5855eb
call dword [sym.imp.SUCMLIB.dll_Ordinal_79]
push 0x62e4b0
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x2d0], 0x343
push eax
call fcn.005479aa
call dword [sym.imp.SUCMLIB.dll_Ordinal_79]
sub esp, 8
push edi
call fcn.00583250
mov eax, 2
jmp 0x585650
push 1
push esi
push edi
push ebx
call fcn.0057b780
cmp eax, 1
jne case.0x5853b6.3335
push ebx
push esi
push edi
call fcn.005819e0
jmp 0x585650
lea eax, [ebp - 0x2b4]
mov dword [ebp - 0x2b4], 0
push eax
push 0x5823b0
call dword [sym.imp.USER32.dll_EnumWindows]
cmp dword [ebp - 0x2b4], 0
je 0x58566e
mov edx, 0x98a02
mov ecx, edi
call fcn.0056c650
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.00544774
mov esp, ebp
pop ebp
ret 0xc
push edi
push ebx
lea ecx, [ebp - 0x2ac]
call fcn.005ba820
push ecx
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 6
call fcn.005ba490
lea ecx, [ebp - 0x2ac]
call fcn.005ba500
lea ecx, [ebp - 0x2ac]
mov dword [ebp - 0x2b0], eax
call fcn.005ba680
mov eax, dword [ebp - 0x2b0]
jmp 0x585650
cmp esi, 0x1fb0
jg 0x5857d0
je case.0x5853b6.3300
cmp esi, 0xec3
je 0x585790
cmp esi, 0x1faa
jne case.0x5853b6.3301
push 0x20006
mov edx, ebx
lea ecx, [ebp - 0x2b4]
call fcn.005b5f80
add esp, 4
xor edx, edx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2b4]
call fcn.005b0a70
push 0x2000000
push ebx
call fcn.0058c3e0
push eax
mov edx, ebx
lea ecx, [ebp - 0x2b8]
call fcn.005b5f80
add esp, 4
mov dword [ebp - 0x2b0], 0
lea eax, [ebp - 0x2b0]
push str.w_ccsUTF_8
push dword [ebp - 0x2b4]
push eax
call fcn.0054ca3b
mov eax, dword [ebp - 0x2b0]
add esp, 0xc
test eax, eax
je 0x585775
push dword [ebp - 0x2b8]
push 0x60dcec
push eax
call fcn.004059b0
add esp, 0xc
push dword [ebp - 0x2b0]
call fcn.0054caf8
add esp, 4
mov dword [ebp - 0x2b0], 0
lea ecx, [ebp - 0x2b8]
call fcn.00402b90
lea ecx, [ebp - 0x2b4]
call fcn.00402b90
jmp case.0x5853b6.3335
call fcn.005b0910
test al, al
jne 0x5857a5
mov edx, 0x9ca07
mov ecx, edi
call fcn.0056c650
push 0
push 0xec3
push 1
push ebx
call fcn.0058c410
jmp case.0x5853b6.3335
call fcn.005b0700
test al, al
jne case.0x5853b6.3335
mov edx, 0x9ca07
jmp 0x585644
mov eax, esi
sub eax, 0x1fb3
je case.0x5853b6.3335
sub eax, 1
je case.0x5853b6.3335
push 0
push esi
push edi
push ebx
call fcn.0057b780
cmp eax, 1
jne case.0x5853b6.3335
mov dword [0x6441ec], 0
push ebx
push esi
push edi
call fcn.00580910
mov ecx, dword [0x64417c]
sub ecx, dword [0x644178]
mov dword [ebp - 0x2b0], eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x58583f
push ebx
push esi
push edi
call fcn.0057de60
cmp eax, 3
je 0x585803
cmp esi, 0x1faf
je 0x5856a7
call fcn.0057ddd0
mov ecx, dword [0x6441e4]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, dword [0x6441e8]
mov eax, dword [ecx]
call dword [eax + 0x10]
push dword [ebp - 0x2bc]
mov edx, dword [0x6441a0]
push ecx
mov ecx, dword [0x64419c]
mov byte [0x6441e2], 0
call fcn.00405440
mov eax, dword [0x64419c]
add esp, 8
mov ecx, dword [0x6441a4]
sub ecx, eax
mov dword [0x6441a0], eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 0x80
jae 0x5856a7
push 0x80
mov ecx, 0x64419c
call fcn.00404b60
mov eax, dword [ebp - 0x2b0]
jmp 0x585650