Function at 0x414940
Capabilities:
Enumerate gui resources
Enumerate process modules
Get graphical window text

Disassembly:
sub esp, 0x81c
mov eax, dword [0x455028]
xor eax, esp
mov dword [esp + 0x818], eax
push ebp
mov ebp, dword [esp + 0x824]
push esi
push edi
mov ecx, 7
mov esi, str.UnknownProcess
lea edi, [esp + 0x214]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x1ea
xor edi, edi
lea eax, [esp + 0x236]
push edi
push eax
call sub.MSVCR90.dll_memset
add esp, 0xc
push ebp
push edi
push 0x1fffff
mov dword [esp + 0x18], edi
call dword [sym.imp.KERNEL32.dll_OpenProcess]
lea ecx, [esp + 0x10]
push ecx
push 4
lea edx, [esp + 0x14]
mov esi, eax
push edx
push esi
call sub.PSAPI.DLL_EnumProcessModules
test eax, eax
je 0x414ac0
mov ecx, dword [esp + 0xc]
push 0x208
lea eax, [esp + 0x218]
push eax
push ecx
push esi
call sub.PSAPI.DLL_GetModuleBaseNameW
mov eax, dword [esp + 0xc]
push 0x104
lea edx, [esp + 0x620]
push edx
push eax
push esi
call sub.PSAPI.DLL_GetModuleFileNameExW
push ebp
push 0x4145d0
mov dword [0x457e6c], edi
call dword [sym.imp.USER32.dll_EnumWindows]
push 0x1fc
lea edx, [esp + 0x422]
xor ecx, ecx
push edi
push edx
mov word [esp + 0x428], cx
call sub.MSVCR90.dll_memset
push 0x1fc
lea ecx, [esp + 0x26]
xor eax, eax
push edi
push ecx
mov word [esp + 0x2c], ax
call sub.MSVCR90.dll_memset
mov eax, dword [0x457e6c]
add esp, 0x18
cmp eax, edi
je 0x414a65
push 0x104
lea edx, [esp + 0x420]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov ecx, dword [0x457e6c]
push 0x104
lea eax, [esp + 0x18]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetClassNameW]
mov edx, dword [esp + 0xc]
lea ecx, [esp + 0x214]
mov dword [ebx + 0x70], ebp
mov dword [ebx + 0x74], esi
mov dword [ebx + 0x78], edx
mov eax, dword [0x457e6c]
push ecx
mov ecx, ebx
mov dword [ebx + 0x7c], eax
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
lea edx, [esp + 0x14]
push edx
lea ecx, [ebx + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
lea eax, [esp + 0x41c]
push eax
lea ecx, [ebx + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
lea ecx, [esp + 0x61c]
push ecx
lea ecx, [ebx + 0x54]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
mov dword [0x457e6c], edi
mov ecx, dword [esp + 0x824]
pop edi
pop esi
pop ebp
xor ecx, esp
mov eax, 1
call fcn.00436590
add esp, 0x81c
ret