Function at 0x418650
Capabilities:
Check if file exists
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x228
mov eax, dword [0x633754]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x6391ec]
mov ecx, dword [0x639440]
mov dword [ebp - 0x210], 0
push ebx
push esi
push edi
test eax, eax
je 0x418687
test ecx, ecx
je 0x418c27
cmp dword [0x639444], 0
jne 0x418c27
cmp dword [0x639474], 0
jne 0x418c27
cmp dword [0x639478], 0
jne 0x418c27
mov edx, dword [sym.imp.KERNEL32.dll_GlobalSize]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov esi, dword [sym.imp.KERNEL32.dll_SearchPathW]
mov ebx, dword [sym.imp.USER32.dll_EnumWindows]
mov dword [ebp - 0x214], edx
test ecx, ecx
je 0x41896e
mov ecx, dword [0x63788c]
test ecx, ecx
je 0x41896e
push ecx
call edx
shr eax, 1
push eax
push dword [0x63788c]
call fcn.00416230
add esp, 8
push dword [0x63788c]
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
lea eax, [ebp - 0x20c]
je 0x41878b
push 0x104
push 0x639230
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push dword [0x63788c]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
lea eax, [ebp - 0x20c]
jne 0x4187a9
push 0
push eax
push 0x104
push 0
push dword [0x63788c]
push 0
call esi
test eax, eax
lea eax, [ebp - 0x20c]
jne 0x4187a9
push 0x104
push 0x639230
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push dword [0x63788c]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x4187a3
push 0
push eax
push 0x104
push 0
push dword [0x63788c]
push 0
call esi
test eax, eax
je 0x4187b2
lea eax, [ebp - 0x20c]
push eax
push dword [0x63788c]
call edi
push 0x104
push dword [0x63788c]
call fcn.004162d0
add esp, 8
lea eax, [ebp - 0x210]
push eax
push 0x4268b0
call ebx
mov eax, dword [ebp - 0x210]
test eax, eax
je 0x418969
push eax
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x418c0f
push dword [ebp - 0x210]
mov esi, 0x34
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x418813
push 9
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_ShowWindowAsync]
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x418851
push 0x203
push 0
push 0x400
push dword [ebp - 0x210]
call ebx
push 0x202
push 0
push 0x400
push dword [ebp - 0x210]
call ebx
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [0x637890]
test eax, eax
je 0x418874
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax*2 + 0x36]
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 0x10], 0
mov ecx, dword [0x639490]
mov dword [esi + 8], ecx
cmp dword [0x639490], 0
je 0x4188cb
mov eax, dword [0x637890]
test eax, eax
je 0x4188cb
push eax
lea eax, [esi + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 0x19
lea eax, [esi + eax*2]
push eax
call edi
mov dword [esi + 0xc], 0xffffffff
jmp 0x4188d3
mov eax, dword [0x63c334]
mov dword [esi + 0xc], eax
mov eax, dword [0x639484]
mov dword [esi + 0x14], eax
mov eax, dword [0x63c33c]
mov dword [esi + 0x18], eax
mov eax, dword [0x63c338]
mov dword [esi + 0x1c], eax
mov eax, dword [0x637898]
test eax, eax
je 0x4188ff
push eax
call fcn.00410760
add esp, 4
jmp 0x418902
or eax, 0xffffffff
mov dword [esi + 0x20], eax
mov eax, dword [0x63947c]
mov dword [esi + 0x24], eax
mov eax, dword [0x639480]
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], 0
push esi
mov dword [ebp - 0x220], 0xfb10
call dword [ebp - 0x214]
mov dword [ebp - 0x21c], eax
lea eax, [ebp - 0x220]
push eax
push 0
push 0x4a
push dword [ebp - 0x210]
mov dword [ebp - 0x218], esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0052a352
mov esp, ebp
pop ebp
ret
mov eax, dword [0x6391ec]
test eax, eax
jne 0x418c27
mov dword [ebp - 0x210], eax
lea eax, [ebp - 0x210]
push eax
push 0x426810
call ebx
mov eax, dword [ebp - 0x210]
test eax, eax
je 0x418c27
push eax
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x418c0f
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x4189c5
push 9
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_ShowWindowAsync]
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x228], ebx
test eax, eax
jne 0x418a09
push 0x203
push 0
push 0x400
push dword [ebp - 0x210]
call ebx
push 0x202
push 0
push 0x400
push dword [ebp - 0x210]
call ebx
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [0x63788c]
test eax, eax
je 0x418953
push eax
call dword [ebp - 0x214]
shr eax, 1
push eax
push dword [0x63788c]
call fcn.00416230
add esp, 8
push dword [0x63788c]
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
lea eax, [ebp - 0x20c]
je 0x418a8b
push 0x104
push 0x639230
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push dword [0x63788c]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
lea eax, [ebp - 0x20c]
jne 0x418aa9
push 0
push eax
push 0x104
push 0
push dword [0x63788c]
push 0
call esi
test eax, eax
je 0x418ab2
lea eax, [ebp - 0x20c]
push eax
push dword [0x63788c]
call edi
push dword [0x63788c]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
call ebx
lea esi, [eax*2 + 0x36]
mov eax, dword [0x637890]
test eax, eax
je 0x418ad9
push eax
call ebx
lea esi, [esi + eax*2]
add esi, 2
push 0x6378a8
call ebx
mov dword [ebp - 0x224], eax
test eax, eax
je 0x418af0
lea esi, [esi + eax*2]
add esi, 2
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov dword [esi], 1
lea eax, [esi + 0x30]
push dword [0x63788c]
push eax
call edi
mov ecx, dword [0x63948c]
mov dword [esi + 4], ecx
mov ecx, dword [0x639494]
mov dword [esi + 0x10], ecx
mov eax, dword [0x639490]
mov dword [esi + 8], eax
cmp dword [0x639490], 0
je 0x418b52
mov eax, dword [0x637890]
test eax, eax
je 0x418b52
push eax
lea eax, [esi + 0x30]
push eax
call ebx
add eax, 0x19
lea eax, [esi + eax*2]
push eax
call edi
mov dword [esi + 0xc], 0xffffffff
jmp 0x418b5a
mov eax, dword [0x63c334]
mov dword [esi + 0xc], eax
mov eax, dword [0x639484]
mov dword [esi + 0x14], eax
mov eax, dword [0x63c33c]
mov dword [esi + 0x18], eax
mov eax, dword [0x63c338]
mov dword [esi + 0x1c], eax
mov eax, dword [0x637898]
test eax, eax
je 0x418b86
push eax
call fcn.00410760
add esp, 4
jmp 0x418b89
or eax, 0xffffffff
cmp dword [ebp - 0x224], 0
mov dword [esi + 0x20], eax
mov eax, dword [0x63947c]
mov dword [esi + 0x24], eax
mov eax, dword [0x639480]
mov dword [esi + 0x28], eax
je 0x418bc0
push 0x6378a8
lea eax, [esi + 0x30]
push eax
call ebx
add eax, 0x19
lea eax, [esi + eax*2]
push eax
call edi
mov eax, 1
jmp 0x418bc2
xor eax, eax
mov dword [esi + 0x2c], eax
push esi
mov dword [ebp - 0x220], 0xfb10
call dword [ebp - 0x214]
mov dword [ebp - 0x21c], eax
lea eax, [ebp - 0x220]
push eax
push 0
push 0x4a
push dword [ebp - 0x210]
mov dword [ebp - 0x218], esi
call dword [ebp - 0x228]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call esi
push dword [0x63788c]
call esi
jmp 0x418953
push 0xc355
push 2
call fcn.004027f0
add esp, 8
cmp eax, 6
jne 0x418953
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0052a352
mov esp, ebp
pop ebp
ret