Function at 0x41e06f
Capabilities:
Check if file exists
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x228
mov eax, dword [0x4f8004]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0x210], 0
mov eax, dword [0x5233cc]
mov ecx, dword [0x523d94]
push ebx
push esi
push edi
test eax, eax
je 0x41e0a3
test ecx, ecx
je 0x41e614
cmp dword [0x524fcc], 0
jne 0x41e614
cmp dword [0x5235e8], 0
jne 0x41e614
cmp dword [0x523b88], 0
jne 0x41e614
mov edx, dword [sym.imp.KERNEL32.dll_GlobalSize]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov edi, dword [sym.imp.KERNEL32.dll_SearchPathW]
mov esi, dword [sym.imp.USER32.dll_EnumWindows]
mov dword [ebp - 0x214], edx
test ecx, ecx
je 0x41e35c
mov ecx, dword [0x5235d8]
test ecx, ecx
je 0x41e35c
push ecx
call edx
mov ecx, dword [0x5235d8]
shr eax, 1
mov edx, eax
call fcn.004110cd
push dword [0x5235d8]
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
lea eax, [ebp - 0x20c]
je 0x41e1a4
push 0x104
push 0x523808
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push dword [0x5235d8]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
lea eax, [ebp - 0x20c]
jne 0x41e1c1
xor ecx, ecx
push ecx
push eax
push 0x104
push ecx
push dword [0x5235d8]
push ecx
call edi
test eax, eax
lea eax, [ebp - 0x20c]
jne 0x41e1c1
push 0x104
push 0x523808
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push dword [0x5235d8]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
jmp 0x41e1bb
xor ecx, ecx
push ecx
push eax
push 0x104
push ecx
push dword [0x5235d8]
push ecx
call edi
test eax, eax
je 0x41e1ca
lea eax, [ebp - 0x20c]
push eax
push dword [0x5235d8]
call ebx
mov ecx, dword [0x5235d8]
call fcn.0041115d
lea eax, [ebp - 0x210]
push eax
push 0x41df86
call esi
cmp dword [ebp - 0x210], 0
je 0x41e357
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x41e5fd
push 0x34
pop esi
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x41e225
push 9
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_ShowWindowAsync]
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x41e263
push 0x203
push 0
mov esi, 0x400
push esi
push dword [ebp - 0x210]
call edi
push 0x202
push 0
push esi
push dword [ebp - 0x210]
call edi
push 0x34
pop esi
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [0x5235e4]
test eax, eax
je 0x41e286
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax*2 + 0x36]
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, dword [0x523b78]
mov esi, eax
xor eax, eax
or edi, 0xffffffff
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 0x10], eax
mov dword [esi + 8], ecx
test ecx, ecx
je 0x41e2cd
mov eax, dword [0x5235e4]
test eax, eax
je 0x41e2cd
push eax
lea eax, [esi + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 0x19
lea eax, [esi + eax*2]
push eax
call ebx
mov dword [esi + 0xc], edi
jmp 0x41e2d5
mov eax, dword [0x526cd8]
mov dword [esi + 0xc], eax
cmp dword [0x523a5c], 0
mov eax, dword [0x523d90]
mov dword [esi + 0x14], eax
mov eax, dword [0x5278a8]
mov dword [esi + 0x18], eax
mov eax, dword [0x52a5bc]
mov dword [esi + 0x1c], eax
je 0x41e2fd
call fcn.00405a48
mov edi, eax
mov eax, dword [0x523b80]
and dword [esi + 0x2c], 0
mov dword [esi + 0x24], eax
mov eax, dword [0x522fb8]
mov dword [esi + 0x20], edi
mov dword [esi + 0x28], eax
push esi
mov dword [ebp - 0x224], 0xfb10
call dword [ebp - 0x214]
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x224]
push eax
push 0
push 0x4a
push dword [ebp - 0x210]
mov dword [ebp - 0x21c], esi
call dword [sym.imp.USER32.dll_SendMessageW]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
xor eax, eax
inc eax
jmp 0x41e616
mov eax, dword [0x5233cc]
test eax, eax
jne 0x41e614
and dword [ebp - 0x210], eax
lea eax, [ebp - 0x210]
push eax
push 0x41deef
call esi
cmp dword [ebp - 0x210], 0
je 0x41e614
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x41e5fd
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x41e3b7
push 9
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_ShowWindowAsync]
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
mov eax, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x218], eax
jne 0x41e3fb
push 0x203
push 0
mov esi, 0x400
push esi
push dword [ebp - 0x210]
call eax
push 0x202
push 0
push esi
push dword [ebp - 0x210]
call dword [ebp - 0x218]
push dword [ebp - 0x210]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [0x5235d8]
test eax, eax
je 0x41e34f
push eax
call dword [ebp - 0x214]
mov ecx, dword [0x5235d8]
shr eax, 1
mov edx, eax
call fcn.004110cd
push dword [0x5235d8]
call dword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
test eax, eax
lea eax, [ebp - 0x20c]
je 0x41e483
mov esi, 0x104
push esi
push 0x523808
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push dword [0x5235d8]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
lea eax, [ebp - 0x20c]
jne 0x41e4a0
xor ecx, ecx
push ecx
push eax
push esi
jmp 0x41e48c
xor ecx, ecx
push ecx
push eax
push 0x104
push ecx
push dword [0x5235d8]
push ecx
call edi
test eax, eax
je 0x41e4a9
lea eax, [ebp - 0x20c]
push eax
push dword [0x5235d8]
call ebx
push dword [0x5235d8]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
call edi
lea esi, [eax*2 + 0x36]
mov eax, dword [0x5235e4]
test eax, eax
je 0x41e4d0
push eax
call edi
lea esi, [esi + eax*2]
add esi, 2
push 0x523a68
call edi
mov dword [ebp - 0x228], eax
test eax, eax
je 0x41e4e7
lea esi, [esi + eax*2]
add esi, 2
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push dword [0x5235d8]
mov esi, eax
lea eax, [esi + 0x30]
mov dword [esi], 1
push eax
call ebx
mov eax, dword [0x5235f8]
or edi, 0xffffffff
mov dword [esi + 4], eax
mov eax, dword [0x523a64]
mov dword [esi + 0x10], eax
mov eax, dword [0x523b78]
mov dword [esi + 8], eax
test eax, eax
je 0x41e545
mov eax, dword [0x5235e4]
test eax, eax
je 0x41e545
push eax
lea eax, [esi + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 0x19
lea eax, [esi + eax*2]
push eax
call ebx
mov dword [esi + 0xc], edi
jmp 0x41e54d
mov eax, dword [0x526cd8]
mov dword [esi + 0xc], eax
cmp dword [0x523a5c], 0
mov eax, dword [0x523d90]
mov dword [esi + 0x14], eax
mov eax, dword [0x5278a8]
mov dword [esi + 0x18], eax
mov eax, dword [0x52a5bc]
mov dword [esi + 0x1c], eax
je 0x41e575
call fcn.00405a48
mov edi, eax
cmp dword [ebp - 0x228], 0
mov eax, dword [0x523b80]
mov dword [esi + 0x24], eax
mov eax, dword [0x522fb8]
mov dword [esi + 0x20], edi
mov dword [esi + 0x28], eax
je 0x41e5ae
push 0x523a68
lea eax, [esi + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 0x19
lea eax, [esi + eax*2]
push eax
call ebx
xor eax, eax
inc eax
jmp 0x41e5b0
xor eax, eax
mov dword [esi + 0x2c], eax
push esi
mov dword [ebp - 0x224], 0xfb10
call dword [ebp - 0x214]
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x224]
push eax
push 0
push 0x4a
push dword [ebp - 0x210]
mov dword [ebp - 0x21c], esi
call dword [ebp - 0x218]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
call esi
push dword [0x5235d8]
call esi
jmp 0x41e34f
push 0xc355
push 2
call fcn.00401b50
pop ecx
pop ecx
cmp eax, 6
jne 0x41e34f
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00486c63
leave
ret