Function at 0x10014ed9
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
sub esp, 0x2fc
lea ebp, [esp - 4]
mov eax, dword [0x1008bc20]
xor eax, ebp
mov dword [ebp + 0x2fc], eax
push 0x48
mov eax, 0x10064bab
call fcn.10045c3f
mov eax, dword [ebp + 0x324]
mov esi, dword [ebp + 0x30c]
mov edi, dword [ebp + 0x310]
lea ecx, [ebp + 0x278]
mov dword [ebp - 0x14], eax
call fcn.10040dcb
mov ebx, dword [ebp + 0x31c]
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp ebx, 0xffffffff
je 0x10014f36
cmp dword [ebp + 0x320], 0xffffffff
jne 0x10014f9d
lea ecx, [ebp + 0x13c]
call fcn.1001457e
lea ecx, [ebp + 0x13c]
mov byte [ebp - 4], 1
call fcn.1001462c
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp + 0x148], eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp + 0x13c]
call fcn.10014734
test eax, eax
jne 0x10014f8c
cmp ebx, 0xffffffff
jne 0x10014f79
mov ebx, 0x2000
cmp dword [ebp + 0x320], 0xffffffff
jne 0x10014f8c
mov dword [ebp + 0x320], 0x3000
lea ecx, [ebp + 0x13c]
mov byte [ebp - 4], 0
call fcn.100145a1
xor ecx, ecx
lea eax, [ebp + 0x278]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0x318]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x4c], eax
cmp ebx, 0xffffffff
je 0x10014fc3
mov dword [ebp - 0x4c], ebx
mov edx, dword [ebp + 0x320]
mov dword [ebp - 0x48], eax
cmp edx, 0xffffffff
je 0x10014fd4
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], ecx
cmp dword [ebp + 0x308], ecx
je 0x1001500b
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.100149e9
pop ecx
pop ecx
xor ecx, ecx
mov edi, dword [ebp - 0x14]
cmp edi, ecx
je 0x10015046
xor esi, esi
cmp dword [ebp + 0x328], ecx
jbe 0x10015046
lea eax, [ebp - 0x10]
push eax
push dword [edi + esi*4]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
test eax, eax
je 0x1001503b
push dword [ebp - 0x10]
lea eax, [ebp - 0x34]
push eax
call fcn.100149e9
pop ecx
pop ecx
inc esi
cmp esi, dword [ebp + 0x328]
jb 0x1001501c
xor ecx, ecx
cmp dword [ebp + 0x314], ecx
je 0x1001505d
lea eax, [ebp - 0x54]
push eax
push 0x10014b29
call dword [sym.imp.USER32.dll_EnumWindows]
lea ecx, [ebp]
call fcn.1001457e
lea eax, [ebp - 0x54]
push eax
push 0x10014a24
lea ecx, [ebp]
mov byte [ebp - 4], 2
call fcn.100147ff
xor esi, esi
cmp dword [ebp - 0x28], esi
je 0x10015096
cmp dword [ebp - 0x24], esi
je 0x10015096
call fcn.10014c95
xor edx, edx
div dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov esi, dword [eax + edx*4]
lea eax, [ebp - 0x28]
push eax
call fcn.1001494b
lea eax, [ebp - 0x34]
push eax
call fcn.1001494b
lea eax, [ebp - 0x40]
push eax
call fcn.1001494b
add esp, 0xc
lea ecx, [ebp]
mov byte [ebp - 4], 0
call fcn.100145a1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x278]
call fcn.100217d0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x2fc]
xor ecx, ebp
call fcn.10045c30
add ebp, 0x300
leave
ret