Function at 0x40d668
Capabilities:
Enumerate gui resources

Disassembly:
mov eax, 0x4e09a0
call fcn.004b1eac
sub esp, 0x68
push ebx
push esi
push edi
mov edi, ecx
mov ecx, 0x51c747
call fcn.004b1bc6
mov eax, dword [edi + 4]
add eax, 4
push 0x4e5994
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00404709
add esp, 0xc
xor ebx, ebx
lea ecx, [ebp - 0x14]
push str.GptBrowser.exe
mov dword [ebp - 4], ebx
call fcn.0040496e
mov ecx, edi
call fcn.0040ea2b
mov ecx, edi
call fcn.0040f705
mov ecx, edi
call fcn.0040dcfb
mov eax, dword [edi + 4]
cmp dword [eax + 0xc], ebx
je 0x40d6d5
call fcn.004055dc
call fcn.0040a47f
push 0x4e7888
lea ecx, [ebp - 0x5c]
call fcn.004022e3
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 1
call fcn.004028b0
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
mov eax, dword [edi + 4]
push ebx
push 0x469
push dword [eax]
call esi
mov eax, dword [edi + 4]
push ebx
push ebx
push 0x46a
push dword [eax]
call esi
mov eax, dword [edi + 4]
push ebx
push 0x64
push 0x466
push dword [eax]
call esi
mov eax, dword [edi]
cmp byte [eax + 2], 0
jne 0x40d804
cmp byte [eax + 7], 0
mov esi, 0x4e5b44
lea eax, [ebp - 0x14]
push eax
push esi
lea eax, [ebp - 0x24]
push eax
je 0x40d75c
call fcn.00404771
push esi
push eax
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 2
push eax
call fcn.00404709
add esp, 0x18
mov byte [ebp - 4], 4
jmp 0x40d777
call fcn.00404771
push esi
push eax
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 5
push eax
call fcn.00404709
add esp, 0x18
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00405cf0
push ebx
push 1
push 1
push ebx
push ebx
lea eax, [ebp - 0x1c]
push eax
push ecx
mov ecx, esp
push str.explorer.exe
call fcn.00404074
call fcn.004068bf
mov ecx, dword [ebp - 0x1c]
add esp, 0x1c
lea ecx, [ecx - 0x10]
call fcn.00405cf0
mov esi, ebx
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x2c]
call fcn.00404035
mov byte [ebp - 0x28], bl
push str.SPChrome_FrameWin_
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.00406096
lea eax, [ebp - 0x2c]
push eax
push 0x40d4d7
call dword [sym.imp.USER32.dll_EnumWindows]
cmp byte [ebp - 0x28], 0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
jne 0x40d7ff
call fcn.00404436
inc esi
cmp esi, 0x50
jl 0x40d7af
jmp 0x40d804
call fcn.00404436
mov eax, dword [edi + 4]
push ebx
push ebx
push 0x46b
push dword [eax]
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, edi
call fcn.0040d1f2
lea eax, [ebp - 0x20]
push eax
call fcn.004085e2
mov esi, str.GPT_Chrome.lnk
mov byte [ebp - 4], 9
push esi
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00404709
add esp, 0xc
mov byte [ebp - 4], 0xa
mov ecx, esp
push 0x4e7120
call fcn.004040c9
lea eax, [ebp - 0x44]
push 0x85
push eax
call fcn.00407d94
add esp, 0xc
cmp dword [ebp - 0x34], 0
mov byte [ebp - 4], 0xb
je 0x40d8da
push 1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x28], esp
push str.1234njio9876123d
call fcn.004022e3
sub esp, 0x18
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x44]
mov ecx, esp
push eax
call fcn.004041b0
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0xb
push eax
call fcn.0040252c
add esp, 0x38
lea ecx, [ebp - 0x44]
push eax
call fcn.00402f9f
lea ecx, [ebp - 0x74]
call fcn.0040291c
lea eax, [ebp - 0x44]
push eax
push ecx
mov ecx, esp
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x28], ecx
call fcn.00403f4a
call fcn.00408391
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00407c15
add esp, 0x10
mov eax, dword [edi + 4]
cmp dword [eax + 0x10], ebx
je 0x40d90c
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push esi
call fcn.004040c9
push ecx
mov ecx, esp
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x14]
mov dword [ebp - 0x24], ecx
push eax
call fcn.00403f4a
mov byte [ebp - 4], 0xb
call fcn.00406563
pop ecx
pop ecx
push ecx
mov ecx, esp
mov esi, str.GptChromeSrv
push esi
call fcn.004040c9
call fcn.0040831d
mov ecx, esp
mov dword [ebp - 0x28], esp
push esi
call fcn.004040c9
mov eax, dword [edi + 4]
push ecx
add eax, 4
mov byte [ebp - 4], 0xe
mov ecx, esp
push eax
mov dword [ebp - 0x24], ecx
call fcn.00403f4a
mov byte [ebp - 4], 0xb
call fcn.00407738
mov eax, dword [edi + 4]
pop ecx
pop ecx
cmp dword [eax + 0x14], ebx
je 0x40d97a
call fcn.004078d6
test al, al
je 0x40d965
mov ecx, edi
call fcn.0040e9c4
jmp 0x40d97a
push ecx
mov ecx, esp
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x28], ecx
call fcn.00403f4a
call fcn.00407d06
pop ecx
push ebx
lea eax, [ebp - 0x74]
mov ecx, edi
push eax
call fcn.0040f1da
lea ecx, [ebp - 0x74]
call fcn.0040291c
lea ecx, [ebp - 0x44]
call fcn.0040291c
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00405cf0
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.00405cf0
lea ecx, [ebp - 0x5c]
call fcn.0040291c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00405cf0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret