Function at 0x467850
Capabilities:
Check if file exists
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
mov eax, dword [0x53a090]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x567938]
mov ecx, dword [0x5674bc]
mov dword [ebp - 0x210], 0
test eax, eax
je 0x467884
test ecx, ecx
je 0x467e3b
cmp dword [0x56706c], 0
jne 0x467e3b
cmp dword [0x5678dc], 0
jne 0x467e3b
cmp dword [0x56793c], 0
jne 0x467e3b
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_SearchPathW]
push esi
mov esi, dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
test ecx, ecx
je 0x467b65
mov ecx, dword [0x567930]
test ecx, ecx
je 0x467b65
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalSize]
mov ecx, dword [0x567930]
shr eax, 1
mov edx, eax
call fcn.00456860
push dword [0x567930]
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
lea eax, [ebp - 0x20c]
je 0x467979
push 0x104
push 0x567298
push eax
call esi
push dword [0x567930]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
lea eax, [ebp - 0x20c]
jne 0x467997
push 0
push eax
push 0x104
push 0
push dword [0x567930]
push 0
call ebx
test eax, eax
lea eax, [ebp - 0x20c]
jne 0x467997
push 0x104
push 0x567298
push eax
call esi
push dword [0x567930]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x467991
push 0
push eax
push 0x104
push 0
push dword [0x567930]
push 0
call ebx
test eax, eax
je 0x4679a0
lea eax, [ebp - 0x20c]
push eax
push dword [0x567930]
call edi
mov esi, dword [0x567930]
push 0x104
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x4679c0
mov edx, eax
mov ecx, esi
call fcn.004568b0
lea eax, [ebp - 0x210]
push eax
push 0x467730
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [ebp - 0x210]
test eax, eax
je 0x467b60
push eax
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x467dfe
push dword [ebp - 0x210]
mov esi, 0x34
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x467a12
push 9
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_ShowWindowAsync]
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x467a50
push 0x203
push 0
push 0x400
push dword [ebp - 0x210]
call ebx
push 0x202
push 0
push 0x400
push dword [ebp - 0x210]
call ebx
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [0x56728c]
test eax, eax
je 0x467a73
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax*2 + 0x36]
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, dword [0x567290]
mov esi, eax
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 0x10], 0
mov dword [esi + 8], ecx
test ecx, ecx
je 0x467ac5
mov eax, dword [0x56728c]
test eax, eax
je 0x467ac5
push eax
lea eax, [esi + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 0x19
lea eax, [esi + eax*2]
push eax
call edi
mov dword [esi + 0xc], 0xffffffff
jmp 0x467acd
mov eax, dword [0x56d200]
mov dword [esi + 0xc], eax
cmp dword [0x567278], 0
mov eax, dword [0x5678d8]
mov dword [esi + 0x14], eax
mov eax, dword [0x56df08]
mov dword [esi + 0x18], eax
mov eax, dword [0x56e170]
mov dword [esi + 0x1c], eax
je 0x467af5
call fcn.00447c70
jmp 0x467af8
or eax, 0xffffffff
mov dword [esi + 0x20], eax
mov eax, dword [0x567920]
mov dword [esi + 0x24], eax
mov eax, dword [0x567940]
mov dword [esi + 0x28], eax
mov eax, dword [sym.imp.KERNEL32.dll_GlobalSize]
mov dword [esi + 0x2c], 0
push esi
mov dword [ebp - 0x21c], 0xfb10
call eax
mov dword [ebp - 0x218], eax
lea eax, [ebp - 0x21c]
push eax
push 0
push 0x4a
push dword [ebp - 0x210]
mov dword [ebp - 0x214], esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0050ecf7
mov esp, ebp
pop ebp
ret
mov eax, dword [0x567938]
test eax, eax
jne 0x467e28
mov dword [ebp - 0x210], eax
lea eax, [ebp - 0x210]
push eax
push 0x467680
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [ebp - 0x210]
test eax, eax
je 0x467e28
push eax
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x467dfe
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x467bc0
push 9
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_ShowWindowAsync]
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x467bfe
push 0x203
push 0
push 0x400
push dword [ebp - 0x210]
call esi
push 0x202
push 0
push 0x400
push dword [ebp - 0x210]
call esi
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [0x567930]
test eax, eax
je 0x467b4a
push eax
mov eax, dword [sym.imp.KERNEL32.dll_GlobalSize]
call eax
mov ecx, dword [0x567930]
shr eax, 1
mov edx, eax
call fcn.00456860
push dword [0x567930]
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
lea eax, [ebp - 0x20c]
je 0x467c7f
push 0x104
push 0x567298
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push dword [0x567930]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
lea eax, [ebp - 0x20c]
jne 0x467c9d
push 0
push eax
push 0x104
push 0
push dword [0x567930]
push 0
call ebx
test eax, eax
je 0x467ca6
lea eax, [ebp - 0x20c]
push eax
push dword [0x567930]
call edi
push dword [0x567930]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
call ebx
lea esi, [eax*2 + 0x36]
mov eax, dword [0x56728c]
test eax, eax
je 0x467ccd
push eax
call ebx
lea esi, [esi + eax*2]
add esi, 2
push 0x565f48
call ebx
mov dword [ebp - 0x220], eax
test eax, eax
je 0x467ce4
lea esi, [esi + eax*2]
add esi, 2
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push dword [0x567930]
mov esi, eax
lea eax, [esi + 0x30]
push eax
mov dword [esi], 1
call edi
mov ecx, dword [0x567068]
mov eax, dword [0x567290]
mov dword [esi + 4], ecx
mov ecx, dword [0x567934]
mov dword [esi + 0x10], ecx
mov dword [esi + 8], eax
test eax, eax
je 0x467d41
mov eax, dword [0x56728c]
test eax, eax
je 0x467d41
push eax
lea eax, [esi + 0x30]
push eax
call ebx
add eax, 0x19
lea eax, [esi + eax*2]
push eax
call edi
mov dword [esi + 0xc], 0xffffffff
jmp 0x467d49
mov eax, dword [0x56d200]
mov dword [esi + 0xc], eax
cmp dword [0x567278], 0
mov eax, dword [0x5678d8]
mov dword [esi + 0x14], eax
mov eax, dword [0x56df08]
mov dword [esi + 0x18], eax
mov eax, dword [0x56e170]
mov dword [esi + 0x1c], eax
je 0x467d71
call fcn.00447c70
jmp 0x467d74
or eax, 0xffffffff
cmp dword [ebp - 0x220], 0
mov dword [esi + 0x20], eax
mov eax, dword [0x567920]
mov dword [esi + 0x24], eax
mov eax, dword [0x567940]
mov dword [esi + 0x28], eax
je 0x467dad
push 0x565f48
lea eax, [esi + 0x30]
push eax
call ebx
add eax, 0x19
lea eax, [esi + eax*2]
push eax
call edi
mov dword [esi + 0x2c], 1
jmp 0x467db4
mov dword [esi + 0x2c], 0
push esi
mov dword [ebp - 0x21c], 0xfb10
call dword [sym.imp.KERNEL32.dll_GlobalSize]
mov dword [ebp - 0x218], eax
lea eax, [ebp - 0x21c]
push eax
push 0
push 0x4a
push dword [ebp - 0x210]
mov dword [ebp - 0x214], esi
call dword [sym.imp.USER32.dll_SendMessageW]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call esi
push dword [0x567930]
call esi
jmp 0x467b4a
push 0xc355
push 2
call fcn.004422f0
add esp, 8
xor ecx, ecx
cmp eax, 6
setne cl
pop edi
pop esi
pop ebx
mov eax, ecx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0050ecf7
mov esp, ebp
pop ebp
ret
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0050ecf7
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor ecx, ebp
xor eax, eax
call fcn.0050ecf7
mov esp, ebp
pop ebp
ret