Function at 0x10005c50
Capabilities:
Enumerate gui resources
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007c912
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x16c
push ebx
push esi
mov ebx, ecx
push edi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 4], 0
lea esi, [ebx + 0x28]
mov dword [ebp - 0x30], esi
mov al, byte [ebp + 0x10]
mov dword [ebx], 0x10087028
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov byte [esi + 4], al
mov eax, dword [ebp + 0xc]
mov dword [esi], 0
mov dword [esi + 8], 1
mov dword [esi + 0xc], eax
push 0xc
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.1001dcb9
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [esi + 0x10], eax
mov byte [ebp - 4], 1
push 0xc
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
call fcn.1001dcb9
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [esi + 0x18], eax
push 1
mov byte [ebp - 4], 2
call fcn.1001d922
mov dword [esi], eax
add esp, 4
mov byte [eax], 0
mov byte [ebp - 4], 3
lea esi, [ebx + 0x3c0]
mov word [ebx + 0x3b4], 0x100
mov byte [ebx + 0x3bc], 0
mov dword [ebp + 0x10], esi
push 0x28
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.1001dcb9
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov dword [ebx + 0x3c8], 0
mov dword [ebx + 0x3cc], 0
mov dword [ebx + 0x3d0], 0
mov byte [ebp - 4], 5
call fcn.10003aa0
push 0x10086b90
push str.kernel32.dll
mov dword [ebx + 0x3b8], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [ebp + 0x10], 0
test esi, esi
je 0x10005dbd
lea eax, [ebp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
test eax, eax
je 0x10005dbd
cmp dword [ebp + 0x10], 0
setne al
jmp 0x10005dbf
xor al, al
push 0x124
lea esi, [ebx + 0x48]
mov byte [ebx + 0x3bc], al
push 0
push esi
call fcn.10020640
add esp, 0xc
lea edi, [ebx + 0x16c]
push 0x124
push 0
push edi
call fcn.10020640
add esp, 0xc
lea eax, [ebx + 0x290]
push 0x124
push 0
push eax
call fcn.10020640
add esp, 0xc
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x10005e30
push 0x104
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x5c
push esi
call fcn.1001f400
add esp, 8
test eax, eax
je 0x10005e30
mov byte [eax + 1], 0
mov al, byte [esi]
lea esi, [esi + 1]
mov byte [esi + 0x123], al
test al, al
jne 0x10005e30
push str.ReBuzz
push edi
call fcn.1001f540
add esp, 8
test eax, eax
je 0x10005e66
push 0x5c
push eax
call fcn.1001f2d0
add esp, 8
test eax, eax
je 0x10005e66
mov byte [eax + 1], 0
jmp 0x10005e76
push 0x124
push 0
push edi
call fcn.10020640
add esp, 0xc
cmp byte [0x1008dfd0], 0
jne 0x10006012
push 1
push 0x1a
push 0x1008dfd0
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
test eax, eax
jne 0x10005eae
mov ax, word [0x10086bb8]
mov word [0x1008dfd0], ax
mov al, byte [0x10086bba]
mov byte [0x1008dfd2], al
mov ecx, 0x1008dfd0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10005eb6
sub ecx, edx
cmp byte [ecx + 0x1008dfcf], 0x5c
jne 0x10005ece
mov byte [ecx + 0x1008dfcf], al
mov edi, 0x1008dfd0
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10005ed4
mov ecx, 6
mov esi, str.PolacVst_Loader1.1.10_
rep movsd dword es:[edi], dword [esi]
push 0
push 0x1008dfd0
movsw word es:[edi], word [esi]
call fcn.10043da7
add esp, 8
cmp eax, 0xffffffff
jne 0x10005f08
mov ecx, 0x1008dfd0
call fcn.100019a0
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ecx + 0x1008dfd0]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x175], al
test al, al
jne 0x10005f10
lea ecx, [ebp - 0x174]
dec ecx
nop dword [eax + eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x10005f30
mov eax, dword [str.settings.ini]
mov dword [ecx], eax
mov eax, dword [0x10086bdc]
mov dword [ecx + 4], eax
mov eax, dword [0x10086be0]
mov dword [ecx + 8], eax
mov al, byte [0x10086be4]
mov byte [ecx + 0xc], al
lea eax, [ebp - 0x174]
push 0
push eax
call fcn.10043da7
add esp, 8
cmp eax, 0xffffffff
lea eax, [ebp - 0x174]
push eax
jne 0x10005fc4
lea ecx, [ebp - 0x28]
call fcn.1000ee30
cmp dword [ebp - 0x18], 0
je 0x10005faa
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push eax
push 0x1008dfd0
push str.Path
push str.Settings
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
lea ecx, [ebp - 0x28]
jmp 0x1000600d
push 0x1008dfd0
push str.Path
push str.Settings
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
lea ecx, [ebp - 0x28]
jmp 0x1000600d
lea ecx, [ebp - 0x48]
call fcn.1000ee30
push 0x1008dfd0
sub esp, 8
mov byte [ebp - 4], 6
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.10017720
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
push 0x104
cmova eax, dword [ebp - 0x28]
push eax
push 0x1008dfd0
call fcn.10043a80
add esp, 0xc
lea ecx, [ebp - 0x28]
call fcn.1000ed90
lea ecx, [ebp - 0x48]
call fcn.100174e0
cmp dword [ebx + 0x3b8], 0
je 0x10006040
lea esi, [ebx + 4]
push esi
push 0x10003c10
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [esi]
test eax, eax
je 0x10006040
lea ecx, [ebx + 8]
push ecx
push 0x10003c70
push eax
call dword [sym.imp.USER32.dll_EnumChildWindows]
mov ecx, dword [ebp - 0xc]
mov eax, ebx
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc