Function at 0x438582
Capabilities:
Enumerate gui resources
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x44753b
mov eax, dword fs:[0]
push eax
sub esp, 0x248
mov eax, dword [0x467034]
xor eax, esp
mov dword [esp + 0x240], eax
push ebx
push esi
push edi
mov eax, dword [0x467034]
xor eax, esp
push eax
lea eax, [esp + 0x258]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 8]
push ebx
push 0
push 0x100001
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [esp + 0x40], esi
and dword [esp + 0x260], 0
test esi, esi
je 0x4387be
lea eax, [esp + 0x44]
push eax
push 0x438528
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x50], 0
call dword [sym.imp.USER32.dll_EnumWindows]
xor bl, bl
cmp byte [esp + 0x48], bl
je 0x438794
xor eax, eax
inc eax
mov byte [edi + 0x58], al
mov eax, dword [edi + 8]
imul eax, eax, 0xa
and dword [esp + 0x20], 0
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
test eax, eax
jle 0x438676
push 0x64
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [edi + 0x10]
cmp eax, 0x102
movzx ebx, bl
push 1
pop eax
cmovne ebx, eax
mov eax, dword [esp + 0x20]
dec dword [esp + 0x18]
inc eax
mov dword [esp + 0x20], eax
test ecx, ecx
je 0x4386cc
push dword [esp + 0x1c]
and ecx, 0xfffffffe
push eax
lea eax, [edi + 0x18]
push eax
call dword [ecx + 4]
add esp, 0xc
test al, al
je 0x4386b2
mov eax, dword [esp + 0x18]
test bl, bl
je 0x438629
test bl, bl
jne 0x4387b7
mov ecx, dword [edi + 0x38]
test ecx, ecx
jne 0x4386fe
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x28]
mov dword [esp + 0x18], str.call_to_empty_boost::function
call dword [sym.imp.MSVCR110.dll_public:_void___thiscall_std::exception::constructor_char_const__const_const__]
mov dword [esp + 0x24], vtable.boost::bad_function_call.0
mov byte [esp + 0x260], 2
lea ecx, [esp + 0x24]
jmp 0x4386f9
push 7
lea ecx, [esp + 0x34]
call fcn.00431fe5
push 0x45b1a4
lea eax, [esp + 0x34]
push eax
call sub.MSVCR110.dll__CxxThrowException
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x28]
mov dword [esp + 0x18], str.call_to_empty_boost::function
call dword [sym.imp.MSVCR110.dll_public:_void___thiscall_std::exception::constructor_char_const__const_const__]
mov dword [esp + 0x24], vtable.boost::bad_function_call.0
xor eax, eax
inc eax
mov byte [esp + 0x260], al
lea ecx, [esp + 0x24]
call fcn.00417139
lea eax, [edi + 0x40]
and ecx, 0xfffffffe
push eax
call dword [ecx + 4]
push 8
mov edi, eax
call dword [sym.imp.MSVCR110.dll_void____cdecl_operator_new_unsigned_int_]
pop ecx
pop ecx
mov dword [esp + 0x1c], eax
mov byte [esp + 0x260], 3
test eax, eax
je 0x438736
lea ecx, [esp + 0x4a]
push ecx
push edi
push ecx
mov ecx, eax
call fcn.0043946f
mov edi, eax
jmp 0x438738
xor edi, edi
mov dword [esp + 0x18], edi
mov byte [esp + 0x260], 4
test edi, edi
je 0x43877a
mov eax, dword [edi]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, edi
call dword [eax + 4]
test al, al
jne 0x4387e4
push 0x3e8
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
movzx ebx, bl
push 1
pop eax
cmovne ebx, eax
test bl, bl
je 0x438748
xor ecx, ecx
inc ecx
mov byte [esp + 0x260], 0
test edi, edi
je 0x438790
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax]
test bl, bl
jne 0x4387b7
lea eax, [esp + 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x4387ae
cmp dword [esp + 0x14], 0x103
jne 0x4387b7
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x258]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x240]
xor ecx, esp
call fcn.0043ca4a
mov esp, ebp
pop ebp
ret 4
xor ecx, ecx
inc ecx
cmp dword [esp + 0x1c], ecx
je 0x43877d
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x24], str.Cancelled
call dword [sym.imp.MSVCR110.dll_public:_void___thiscall_std::exception::constructor_char_const__const_const__]
xor eax, eax
inc eax
mov byte [esp + 0x3c], al
mov dword [esp + 0x30], vtable.cancel_exception.0
push 0x45b214
lea eax, [esp + 0x34]
jmp 0x4386c6