Function at 0x523dc7
Capabilities:
Enumerate gui resources

Disassembly:
push ebx
push esi
push edi
push ebp
mov ebp, esp
sub esp, 0x80
mov edi, ecx
mov dword [0x57b35a], ebx
cmp ebx, edx
jne 0x523ddf
mov eax, dword [ebp - 0x25]
mov edi, dword [ebp - 0x5e]
sub dword [ebp - 0x57], ebx
mov ecx, dword [ebp - 0x11]
mov dword [ebp - 0x19], edx
mov ebx, dword [0x57bb2b]
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x5f], eax
sub edx, dword [ebp - 0x2a]
add dword [ebp - 0x15], esi
add dword [ebp - 0x25], ebx
mov esi, esi
mov dword [ebp - 0x61], eax
movzx edx, bh
mov esi, dword [ebp - 0x6f]
test ecx, 0x89e3585b
jno 0x523e4a
movzx ecx, dh
xor dword [ebp - 0x28], ecx
or dword [ebp - 0x21], edx
lea edx, [ebp - 0xd]
mov dword [ebp - 0x75], edx
mov dword [0x57b7b8], esi
mov dword [ebp - 0x58], eax
mov ebx, 0x50b5
lea edx, [ebp - 7]
sub edi, dword [ebp - 0x52]
mov ecx, dword [ebp - 0x1e]
add dword [ebp - 4], ecx
mov esi, 0x847f
sub ecx, 0x780a
mov edx, ebx
or dword [0x57b823], esi
add ebx, dword [ebp - 0x79]
sub edi, 0x338f
mov edx, dword [ebp - 0x31]
add eax, 0x619c
or edi, dword [ebp - 0x42]
sub edx, ecx
mov word [ebp - 0x3e], cx
mov esi, dword [0x57c076]
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x30], eax
add ecx, 0xeb8e
mov dword [ebp - 0x1f], ebx
test ebx, edi
jae 0x523eaa
mov edi, edi
mov esi, dword [ebp - 0x5a]
or dword [ebp - 0x26], esi
mov dword [ebp - 0x61], esi
mov ebx, ecx
sub dword [ebp - 0x6b], ecx
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x62]
movzx edi, cl
mov esi, dword [ebp - 0x6c]
mov dword [ebp - 0x66], esi
mov dword [ebp - 0x40], ebx
lea esi, [ebp - 0x59]
mov edi, dword [ebp - 0x77]
mov ebx, edx
mov dword [ebp - 0x44], edi
lea eax, [ebp - 0x7e]
movzx edi, cl
add esi, dword [ebp - 3]
mov ebx, dword [ebp - 0x28]
and esi, edx
mov edx, esi
mov ebx, 0x24fa
mov esi, dword [ebp - 0x22]
cmp edx, 0x47c45154
js 0x523eed
mov ecx, edx
mov esi, esi
add ebx, 0x360
add edx, dword [ebp - 2]
xor dword [ebp - 0x51], esi
xor ecx, ebx
mov dword [ebp - 0x25], ebx
xor edi, dword [ebp - 0x21]
mov byte [ebp - 0x6a], dh
mov esi, 0x42fc
mov eax, dword [ebp - 0x67]
mov ebx, dword [0x57b7f3]
mov eax, dword [ebp - 0x1f]
cmp ch, ah
jmp 0x523f08
mov edx, dword [ebp - 0x4a]
mov dword [0x57bd6e], ebx
mov dword [ebp - 0x1f], edi
mov dword [ebp - 0x7f], edx
or dword [ebp - 0x12], edi
mov ebx, eax
add ecx, dword [ebp - 0x45]
mov eax, eax
mov dword [ebp - 0x67], esi
mov dword [0x57be52], edx
and dh, ah
mov edi, ebx
sub edx, edx
cmp edx, 0x53b2ab71
jb 0x523f3d
mov ebx, dword [ebp - 0x6a]
sub eax, edi
mov ecx, dword [ebp - 0x16]
or eax, 0x2ddc
test dword [0x57bcc0], esi
jmp 0x523f50
xor edx, esi
mov ebx, eax
sub dword [ebp - 0x7d], esi
mov edx, dword [ebp - 0x74]
sub eax, eax
mov eax, dword [ebp - 0x3b]
mov ebx, eax
sub dword [ebp - 0x6d], ebx
cmp edi, 0xad5df314
jne 0x523fa2
mov dword [ebp - 8], ebx
mov dword [ebp - 0x21], ecx
mov eax, dword [ebp - 0x45]
mov eax, dword [ebp - 0x41]
add esi, dword [ebp - 0x75]
mov ebx, dword [ebp - 0x2f]
mov eax, dword [0x57c2f3]
mov esi, dword [ebp - 0x5b]
mov dword [ebp - 0x28], ebx
mov edi, 0x13f2
mov dword [ebp - 0xf], eax
mov dword [ebp - 0x71], esi
mov dword [ebp - 0x2f], edi
mov eax, edx
mov edi, dword [ebp - 0x39]
mov dword [ebp - 0x41], ebx
movzx edx, ah
mov esi, 0x6218
mov dword [ebp - 0x3a], esi
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x48], ebx
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x7b], edi
mov ebx, 0x71b9
movzx edi, ah
mov edx, dword [ebp - 0x34]
mov ecx, dword [0x57bee8]
sub dword [ebp - 0x1f], edi
mov edi, edi
mov al, byte [ebp - 0x64]
xor eax, 0xbc24
mov ebx, dword [ebp - 8]
mov word [ebp - 0xe], ax
mov eax, 0x13c8
mov edi, dword [0x57c02d]
cmp edi, ebx
jb 0x523ff0
movzx ecx, dh
mov dword [ebp - 0x21], esi
mov esi, dword [ebp - 0x4c]
mov esi, dword [ebp - 0x33]
and ecx, dword [ebp - 0x77]
cmp ecx, dword [0x57b69b]
jmp 0x52402f
and dword [ebp - 0x3a], esi
mov eax, dword [ebp - 1]
mov esi, dword [ebp - 0x16]
movzx eax, ax
mov eax, dword [ebp - 0x73]
and dword [ebp - 0x2f], edi
or dword [ebp - 0x19], eax
mov esi, esi
mov dword [ebp - 0x55], eax
lea eax, [ebp - 0x38]
mov eax, dword [0x57bd0c]
mov edi, dword [ebp]
cmp ebx, esi
jns 0x524069
mov eax, dword [0x57b62a]
xor ecx, 0x2839
and dword [ebp - 7], esi
mov eax, dword [ebp - 0xb]
add dword [ebp - 0x7e], edi
mov dword [ebp - 0x5e], esi
mov edi, edi
mov ecx, dword [ebp - 0xa]
mov ebx, dword [ebp - 0x54]
sub dword [ebp - 0x47], ebx
mov edi, 0x2d3a
mov dword [ebp - 0x74], edx
sub edx, dword [0x57c200]
mov dword [ebp - 0x11], eax
sub edi, ebx
mov esi, edi
push edi
cmp esi, 0xb2250f8e
je 0x52409e
mov dword [ebp - 0x75], ebx
mov dword [ebp - 0x15], edx
mov dword [ebp - 0x59], ebx
add edx, 0xd05c
sub edx, dword [ebp - 0x7e]
mov ecx, dword [ebp - 0x4d]
mov dword [ebp - 0x4e], edi
test esi, 0x9a0e9782
jns 0x5240b8
add dword [ebp - 0x79], esi
mov dword [ebp - 0x43], ecx
mov ebx, dword [ebp - 0x58]
cmp edi, ecx
js 0x52411e
test ecx, esi
je 0x5240e5
sub ebx, ecx
add edx, dword [ebp - 0x7c]
mov ecx, ebx
mov dword [ebp - 0x68], edi
mov ebx, ebx
mov edi, 0x5bae
mov ebx, dword [ebp - 0x61]
and eax, esi
mov ebx, dword [ebp - 4]
add eax, dword [ebp - 0x6a]
mov dword [ebp - 0x54], edi
mov dword [0x57b338], ebx
mov dword [ebp - 4], esi
and eax, dword [0x57bd26]
mov bh, byte [ebp]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x57]
movzx eax, byte [ebp - 0xc]
mov edx, ebx
mov edx, dword [ebp - 0x35]
mov dword [ebp - 0x59], edx
xor dword [ebp - 0x3b], edi
mov edi, dword [ebp - 4]
mov dword [ebp - 0x5c], edi
mov eax, edx
mov ecx, 0x82e5
mov edx, esi
mov dword [ebp - 0x13], ecx
add eax, esi
mov ecx, 0x3055
and edx, dword [ebp - 0x66]
mov dword [ebp - 0x69], esi
mov edx, ebx
movzx edx, di
mov dword [ebp - 0x33], eax
mov ch, dl
mov dword [ebp - 0x31], ecx
cmp edi, 0x719d2aa8
jno 0x524166
mov dword [ebp - 0x24], eax
call sub.USER32.dll_EnumWindowStationsW
mov dword [ebp - 0x52], ecx
movzx ecx, bh
mov esi, 0x9bda
or dword [ebp - 0x47], ebx
sub dword [ebp - 0x11], edx
mov eax, dword [ebp - 0x38]
mov ecx, ebx
mov esi, 0xe3f2
add edi, edi
mov dword [ebp - 0x79], edx
sub eax, 0x3273
mov esi, edi
mov ecx, dword [ebp]
mov edx, dword [ebp - 4]
cmp edx, eax
jb 0x524182
mov dword [ebp - 0xd], ebx
mov dword [ebp - 0x7a], esi
movzx esi, dh
cmp esi, dword [0x57b7bb]
jo 0x524196
mov ax, si
mov dword [ebp - 0x49], ebx
mov dword [ebp - 0x49], edi
pop edx
leave
pop edi
pop esi
pop ebx
ret