Function at 0x413166
Capabilities:
Check if file exists
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x228
mov eax, dword [0x5a0b04]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0x210], 0
mov eax, dword [0x5a6e24]
mov ecx, dword [0x5a7078]
push ebx
push esi
push edi
test eax, eax
je 0x41319a
test ecx, ecx
je 0x41346c
cmp dword [0x5a707c], 0
jne 0x41346c
cmp dword [0x5a70ac], 0
jne 0x41346c
cmp dword [0x5a70b0], 0
jne 0x41346c
mov edx, dword [sym.imp.KERNEL32.dll_GlobalSize]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov edi, dword [sym.imp.KERNEL32.dll_SearchPathW]
mov esi, dword [sym.imp.USER32.dll_EnumWindows]
mov dword [ebp - 0x214], edx
test ecx, ecx
je 0x413482
mov ecx, dword [0x5a54c4]
test ecx, ecx
je 0x413482
push ecx
call edx
shr eax, 1
push eax
push dword [0x5a54c4]
call fcn.00411ad8
pop ecx
pop ecx
push dword [0x5a54c4]
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
lea eax, [ebp - 0x20c]
je 0x41329c
push 0x104
push 0x5a6e68
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push dword [0x5a54c4]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
lea eax, [ebp - 0x20c]
jne 0x4132b9
xor ecx, ecx
push ecx
push eax
push 0x104
push ecx
push dword [0x5a54c4]
push ecx
call edi
test eax, eax
lea eax, [ebp - 0x20c]
jne 0x4132b9
push 0x104
push 0x5a6e68
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push dword [0x5a54c4]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x4132b3
xor ecx, ecx
push ecx
push eax
push 0x104
push ecx
push dword [0x5a54c4]
push ecx
call edi
test eax, eax
je 0x4132c2
lea eax, [ebp - 0x20c]
push eax
push dword [0x5a54c4]
call ebx
push 0x104
push dword [0x5a54c4]
call fcn.00411d07
pop ecx
pop ecx
lea eax, [ebp - 0x210]
push eax
push 0x4139dd
call esi
cmp dword [ebp - 0x210], 0
je 0x41347d
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x413459
push 0x34
pop esi
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x413324
push 9
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_ShowWindowAsync]
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x413362
push 0x203
push 0
mov esi, 0x400
push esi
push dword [ebp - 0x210]
call edi
push 0x202
push 0
push esi
push dword [ebp - 0x210]
call edi
push 0x34
pop esi
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [0x5a54c8]
test eax, eax
je 0x413385
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax*2 + 0x36]
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
or edi, 0xffffffff
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 0x10], eax
mov eax, dword [0x5a70c8]
mov dword [esi + 8], eax
cmp dword [0x5a70c8], 0
je 0x4133d0
mov eax, dword [0x5a54c8]
test eax, eax
je 0x4133d0
push eax
lea eax, [esi + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 0x19
lea eax, [esi + eax*2]
push eax
call ebx
mov dword [esi + 0xc], edi
jmp 0x4133d8
mov eax, dword [0x5a9c74]
mov dword [esi + 0xc], eax
mov eax, dword [0x5a70bc]
mov dword [esi + 0x14], eax
mov eax, dword [0x5a9c7c]
mov dword [esi + 0x18], eax
mov eax, dword [0x5a9c78]
mov dword [esi + 0x1c], eax
mov eax, dword [0x5a54d0]
test eax, eax
je 0x413402
push eax
call fcn.00410b52
pop ecx
mov edi, eax
mov dword [esi + 0x20], edi
mov eax, dword [0x5a70b4]
mov dword [esi + 0x24], eax
mov eax, dword [0x5a70b8]
and dword [esi + 0x2c], 0
mov dword [esi + 0x28], eax
push esi
mov dword [ebp - 0x224], 0xfb10
call dword [ebp - 0x214]
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x224]
push eax
push 0
push 0x4a
push dword [ebp - 0x210]
mov dword [ebp - 0x21c], esi
call dword [sym.imp.USER32.dll_SendMessageW]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
xor eax, eax
inc eax
jmp 0x41346e
push 0xc355
push 2
call fcn.004097b0
pop ecx
pop ecx
cmp eax, 6
jne 0x413454
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0049badb
leave
ret
mov eax, dword [0x5a6e24]
test eax, eax
jne 0x41346c
and dword [ebp - 0x210], eax
lea eax, [ebp - 0x210]
push eax
push 0x4139e2
call esi
cmp dword [ebp - 0x210], 0
je 0x41346c
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x413459
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x4134d1
push 9
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_ShowWindowAsync]
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
mov eax, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x218], eax
jne 0x413515
push 0x203
push 0
mov esi, 0x400
push esi
push dword [ebp - 0x210]
call eax
push 0x202
push 0
push esi
push dword [ebp - 0x210]
call dword [ebp - 0x218]
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [0x5a54c4]
test eax, eax
je 0x413454
push eax
call dword [ebp - 0x214]
shr eax, 1
push eax
push dword [0x5a54c4]
call fcn.00411ad8
pop ecx
pop ecx
push dword [0x5a54c4]
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
lea eax, [ebp - 0x20c]
je 0x41359e
mov esi, 0x104
push esi
push 0x5a6e68
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push dword [0x5a54c4]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
lea eax, [ebp - 0x20c]
jne 0x4135bb
xor ecx, ecx
push ecx
push eax
push esi
jmp 0x4135a7
xor ecx, ecx
push ecx
push eax
push 0x104
push ecx
push dword [0x5a54c4]
push ecx
call edi
test eax, eax
je 0x4135c4
lea eax, [ebp - 0x20c]
push eax
push dword [0x5a54c4]
call ebx
push dword [0x5a54c4]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
call edi
lea esi, [eax*2 + 0x36]
mov eax, dword [0x5a54c8]
test eax, eax
je 0x4135eb
push eax
call edi
lea esi, [esi + eax*2]
add esi, 2
push 0x5a54e0
call edi
mov dword [ebp - 0x228], eax
test eax, eax
je 0x413602
lea esi, [esi + eax*2]
add esi, 2
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov dword [esi], 1
lea eax, [esi + 0x30]
push dword [0x5a54c4]
push eax
call ebx
mov eax, dword [0x5a70c4]
or edi, 0xffffffff
mov dword [esi + 4], eax
mov eax, dword [0x5a70cc]
mov dword [esi + 0x10], eax
mov eax, dword [0x5a70c8]
mov dword [esi + 8], eax
cmp dword [0x5a70c8], 0
je 0x413665
mov eax, dword [0x5a54c8]
test eax, eax
je 0x413665
push eax
lea eax, [esi + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 0x19
lea eax, [esi + eax*2]
push eax
call ebx
mov dword [esi + 0xc], edi
jmp 0x41366d
mov eax, dword [0x5a9c74]
mov dword [esi + 0xc], eax
mov eax, dword [0x5a70bc]
mov dword [esi + 0x14], eax
mov eax, dword [0x5a9c7c]
mov dword [esi + 0x18], eax
mov eax, dword [0x5a9c78]
mov dword [esi + 0x1c], eax
mov eax, dword [0x5a54d0]
test eax, eax
je 0x413697
push eax
call fcn.00410b52
pop ecx
mov edi, eax
cmp dword [ebp - 0x228], 0
mov dword [esi + 0x20], edi
mov eax, dword [0x5a70b4]
mov dword [esi + 0x24], eax
mov eax, dword [0x5a70b8]
mov dword [esi + 0x28], eax
je 0x4136d0
push 0x5a54e0
lea eax, [esi + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 0x19
lea eax, [esi + eax*2]
push eax
call ebx
xor eax, eax
inc eax
jmp 0x4136d2
xor eax, eax
mov dword [esi + 0x2c], eax
push esi
mov dword [ebp - 0x224], 0xfb10
call dword [ebp - 0x214]
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x224]
push eax
push 0
push 0x4a
push dword [ebp - 0x210]
mov dword [ebp - 0x21c], esi
call dword [ebp - 0x218]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call esi
push dword [0x5a54c4]
call esi
jmp 0x413454