Function at 0x401ed0
Capabilities:
Enumerate gui resources
Get graphical window text

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dc6d0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x438
mov eax, dword [0x50a124]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [esi + 0x8c], 0
mov dword [ebp - 0x444], 0
jne 0x4021ae
nop word [eax + eax]
mov eax, dword [esi + 0xac]
cmp eax, dword [esi + 0xb0]
je 0x401f44
mov dword [esi + 0xb0], eax
push esi
push 0x402e60
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [esi + 0xb0]
mov edi, dword [esi + 0xac]
mov dword [ebp - 0x440], eax
cmp edi, eax
jne 0x402080
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x444]
mov eax, ecx
inc ecx
mov dword [ebp - 0x444], ecx
cmp eax, 0x14
jne 0x4021a1
call fcn.00408b60
push str.Apowersoft_window_not_found
sub esp, 0x18
mov dword [ebp - 0x440], eax
mov esi, esp
mov dword [ebp - 0x43c], esp
xorps xmm0, xmm0
mov ecx, esi
push 0x30
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.00404670
mov dword [esi], eax
mov dword [esi + 0x10], 0x22
mov dword [esi + 0x14], 0x2f
movups xmm0, xmmword [str.Apowersoft::SearchApowersoftWindow]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x4f562c]
movups xmmword [eax + 0x10], xmm0
mov cx, word [0x4f563c]
mov word [eax + 0x20], cx
mov byte [eax + 0x22], 0
push 0x74
sub esp, 0x18
mov dword [ebp - 4], 0
mov esi, esp
xorps xmm0, xmm0
mov ecx, esi
push 0x60
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.00404670
mov dword [esi], eax
mov edi, eax
mov dword [esi + 0x10], 0x56
mov ecx, 0x15
mov dword [esi + 0x14], 0x5f
mov esi, str.D:workspacewzzbcef_98_mastercef_98cef_binarySCSCaptureSCSCaptureApowersoft.cpp
rep movsd dword es:[edi], dword [esi]
push 4
push dword [ebp - 0x440]
movsw word es:[edi], word [esi]
mov byte [eax + 0x56], 0
mov dword [ebp - 4], 0xffffffff
call fcn.00409740
add esp, 0x40
push 0
push 0x4f54d8
push str.U_O_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x4021b3
mov eax, dword [edi]
push 5
push eax
mov dword [ebp - 0x438], eax
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x43c], eax
xor eax, eax
push 0x3fe
push eax
mov word [ebp - 0x418], ax
lea eax, [ebp - 0x416]
push eax
call fcn.00482150
add esp, 0xc
lea eax, [ebp - 0x418]
push 0x200
push eax
push dword [ebp - 0x43c]
call dword [sym.imp.USER32.dll_GetWindowTextW]
xorps xmm0, xmm0
mov dword [ebp - 0x420], 0
lea eax, [ebp - 0x418]
mov dword [ebp - 0x41c], 0
movups xmmword [ebp - 0x430], xmm0
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4020f4
sub eax, edx
lea ecx, [ebp - 0x430]
sar eax, 1
push eax
lea eax, [ebp - 0x418]
push eax
call fcn.004042d0
push str.vU_
lea ecx, [ebp - 0x430]
call fcn.004044e0
mov ecx, dword [ebp - 0x41c]
mov byte [ebp - 0x431], al
cmp ecx, 8
jb 0x40216e
mov edx, dword [ebp - 0x430]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40215e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4021d1
push ecx
push edx
call fcn.0047f372
mov al, byte [ebp - 0x431]
add esp, 8
test al, al
mov eax, dword [ebp - 0x438]
je 0x402180
mov dword [esi + 0x88], eax
jmp 0x402192
mov dword [esi + 0x8c], eax
mov eax, dword [ebp - 0x43c]
mov dword [esi + 0x90], eax
add edi, 4
cmp edi, dword [ebp - 0x440]
jne 0x402080
cmp dword [esi + 0x8c], 0
je 0x401f30
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0047f334
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0048ea48
int3