Function at 0x4e8884
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x25
push 0
push 0
dec ecx
jne 0x4e888c
push ebx
push esi
push edi
mov dword [ebp - 0x2c], eax
mov esi, 0x5092c8
xor eax, eax
push ebp
push 0x4e8dc9
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 0x38c]
mov edx, dword [eax]
call dword [edx + 0x108]
mov dl, 1
mov eax, dword [0x4e784c]
call fcn.004e93d0
mov dword [esi], eax
push 0
push 0x4e8614
call sub.user32.dll_EnumWindows
mov eax, dword [esi]
mov ebx, dword [eax + 8]
dec ebx
test ebx, ebx
jl 0x4e8906
inc ebx
mov dword [ebp - 0x30], 0
mov edx, dword [ebp - 0x30]
mov eax, dword [esi]
call fcn.004e92a4
push 0
push 0x4e86cc
push eax
call sub.user32.dll_EnumChildWindows
inc dword [ebp - 0x30]
dec ebx
jne 0x4e88e9
cmp dword [0x5092c4], 0
jbe 0x4e8cf0
lea ecx, [ebp - 8]
lea edx, [ebp - 4]
mov eax, dword [0x5092c4]
call fcn.004e8430
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 8]
mov ecx, 0x4e8ddc
call fcn.0040a088
mov edx, dword [ebp - 0x44]
lea eax, [ebp - 0x28]
call fcn.0042f13c
mov dl, 1
mov eax, dword [0x44f5f8]
call fcn.00450734
mov ebx, eax
mov edx, 0x80000000
mov eax, ebx
call fcn.0045081c
mov cl, 1
mov edx, 0x4e8df8
mov eax, ebx
call fcn.00450964
test al, al
je 0x4e8986
xor ecx, ecx
mov edx, 0x4e8e10
mov eax, ebx
call fcn.004512ac
xor ecx, ecx
mov edx, 0x4e8e34
mov eax, ebx
call fcn.00451278
push 0x4e8e4c
push 0x4e8e68
push 0x4e8f4c
push 0x4e8f5c
push 0x4e8f6c
push 0
push 0x4e8f78
push 0x4e8f84
push 0x4e8f5c
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.00429b50
add esp, 0xc
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.00429b50
add esp, 0xc
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00429b50
add esp, 0x10
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00429b50
add esp, 0xc
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00429b50
add esp, 0xc
lea eax, [ebp - 0x54]
push eax
push 0
call fcn.00429b50
add esp, 0x14
push 0x4e8e4c
push 0x4e8f94
push 0x4e8f4c
push 0x4e8f5c
push 0x4e8f6c
push 0
push 0x4e8f78
push 0x4e8f84
push 0x4e8f5c
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.00429b50
add esp, 0xc
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00429b50
add esp, 0xc
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.00429b50
add esp, 0x10
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.00429b50
add esp, 0xc
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.00429b50
add esp, 0xc
lea eax, [ebp - 0xa4]
push eax
push 0
call fcn.00429b50
add esp, 0x14
lea ecx, [ebp - 0x10]
mov edx, 0x4e8e34
mov eax, ebx
call fcn.004512e0
lea edx, [ebp - 0xf8]
mov eax, dword [ebp - 0x10]
call fcn.0041c5cc
mov edx, dword [ebp - 0xf8]
lea eax, [ebp - 0xf4]
mov ecx, 0
call fcn.00407508
mov eax, dword [ebp - 0xf4]
lea edx, [ebp - 0xf0]
call fcn.004e6e8c
mov eax, dword [ebp - 0xf0]
lea edx, [ebp - 0xec]
call fcn.004e6e8c
mov edx, dword [ebp - 0xec]
lea eax, [ebp - 0xe8]
call fcn.004077a4
mov eax, dword [ebp - 0xe8]
mov edx, 0x4e9074
call fcn.0041c76c
test eax, eax
jne 0x4e8cd5
xor eax, eax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x18]
mov edx, 0x4e90c4
call fcn.00406ea8
lea ecx, [ebp - 0xfc]
mov edx, 0x4e8e10
mov eax, ebx
call fcn.004512e0
mov eax, dword [ebp - 0xfc]
lea edx, [ebp - 0xc]
call fcn.004ddd1c
lea ecx, [ebp - 0x100]
mov edx, 0x4e8e10
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 0x24]
mov eax, dword [ebp - 0x100]
mov edx, dword [eax]
call dword [edx + 0x90]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov ebx, dword [eax + 8]
dec ebx
test ebx, ebx
jl 0x4e8cb6
inc ebx
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x108]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
call fcn.004e4e18
mov eax, dword [ebp - 0x108]
lea ecx, [ebp - 0x104]
mov edx, 0x4e90e0
mov esi, dword [eax]
call dword [esi + 0x24]
mov eax, dword [ebp - 0x104]
mov edx, dword [eax]
call dword [edx + 0x90]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x4e8cac
inc esi
mov dword [ebp - 0x34], 0
inc dword [ebp - 0x38]
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x118], eax
mov byte [ebp - 0x114], 0
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x128]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
call fcn.004e4e18
mov eax, dword [ebp - 0x128]
lea ecx, [ebp - 0x124]
mov edx, 0x4e9100
mov edi, dword [eax]
call dword [edi + 0x24]
mov eax, dword [ebp - 0x124]
lea edx, [ebp - 0x120]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0x120]
xor ecx, ecx
mov edx, dword [ebp - 0x18]
call fcn.004da284
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x110], eax
mov byte [ebp - 0x10c], 0x11
lea edx, [ebp - 0x118]
mov ecx, 1
mov eax, 0x4e9120
call fcn.0041ddb0
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 0x38c]
mov eax, dword [eax + 0x2a0]
mov edx, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0x34]
dec esi
jne 0x4e8bfa
inc dword [ebp - 0x30]
dec ebx
jne 0x4e8bab
push 0
push 6
push 0x115
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 0x38c]
call fcn.0047f598
push eax
call sub.user32.dll_SendMessageW
jmp 0x4e8d09
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 0x38c]
mov eax, dword [eax + 0x2a0]
mov edx, 0x4e9138
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x4e8d09
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 0x38c]
mov eax, dword [eax + 0x2a0]
mov edx, 0x4e914c
mov ecx, dword [eax]
call dword [ecx + 0x38]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e8dd3
lea eax, [ebp - 0x128]
mov edx, dword [0x4dc69c]
mov ecx, 2
call fcn.00407f24
lea eax, [ebp - 0x120]
mov edx, 2
call fcn.00406b00
lea eax, [ebp - 0x108]
mov edx, dword [0x4dc69c]
mov ecx, 3
call fcn.00407f24
lea eax, [ebp - 0xfc]
mov edx, 2
call fcn.00406b00
lea eax, [ebp - 0xf4]
mov edx, 3
call fcn.00406b30
lea eax, [ebp - 0xe8]
call fcn.00406aa0
lea eax, [ebp - 0xe4]
mov edx, dword [0x401294]
mov ecx, 0xa
call fcn.00407f24
lea eax, [ebp - 0x44]
call fcn.0040a044
lea eax, [ebp - 0x28]
call fcn.00429b48
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00406b00
lea eax, [ebp - 0xc]
call fcn.0040a044
lea eax, [ebp - 8]
call fcn.0040a044
lea eax, [ebp - 4]
call fcn.0040a044
ret