Function at 0x42a460
Capabilities:
Enumerate gui resources
Terminate process

Disassembly:
sub esp, 0x734
mov eax, dword [0x4c4004]
xor eax, esp
mov dword [esp + 0x72c], eax
mov eax, dword [0x4def88]
push ebx
push ebp
push esi
push edi
push 0x2762
push eax
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], eax
call dword [sym.imp.user32.dll_GetDlgItem]
mov ebx, dword [sym.imp.user32.dll_SendMessageW]
mov ebp, eax
push 0
push 0
push 0x1004
push ebp
call ebx
mov esi, eax
xor edi, edi
test esi, esi
jle 0x42a4c5
nop dword [eax]
push 2
push edi
push 0x102c
push ebp
call ebx
cmp eax, 2
je 0x42a522
inc edi
cmp edi, esi
jl 0x42a4b0
mov edx, 0x4add54
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x534]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x530]
mov edx, 0x4add24
push 0x30
push eax
mov ecx, 0x4af760
call fcn.004773a0
push eax
push dword [esp + 0x20]
call dword [sym.imp.user32.dll_MessageBoxW]
xor eax, eax
mov ecx, dword [esp + 0x73c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0048d815
add esp, 0x734
ret
cmp edi, esi
jge 0x42a4c5
xor eax, eax
push 0x206
push eax
mov word [esp + 0x330], ax
lea eax, [esp + 0x332]
push eax
call fcn.0048e770
add esp, 0xc
mov dword [esp + 0x24], 1
lea eax, [esp + 0x328]
mov dword [esp + 0x34], 0x104
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push edi
push 0x1073
push ebp
call ebx
cmp dword [esp + 0x18], 0
mov ecx, 0x4af760
mov edx, 0x4add4c
je 0x42a585
mov edx, 0x4add98
call fcn.004773a0
mov ebp, dword [sym.imp.SHLWAPI.dll_StrCpyW]
push eax
lea eax, [esp + 0x124]
push eax
call ebp
mov esi, dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [esp + 0x328]
push eax
lea eax, [esp + 0x124]
push eax
call esi
mov edx, 0x4add90
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x124]
push eax
call esi
push 0x24
mov edx, 0x4ad0a4
mov ecx, 0x4af760
call fcn.004773a0
mov esi, dword [sym.imp.user32.dll_MessageBoxW]
push eax
lea eax, [esp + 0x128]
push eax
push dword [0x4def88]
call esi
cmp eax, 6
jne 0x42a507
push 0xc4
lea eax, [esp + 0x60]
mov dword [esp + 0x5c], 0x30
push 0
push eax
call fcn.0048e770
add esp, 0xc
mov dword [esp + 0x24], 0
lea eax, [esp + 0x58]
mov dword [esp + 0x34], 0x64
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push edi
push 0x1073
push 0x2762
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
push eax
call ebx
lea eax, [esp + 0x58]
push eax
call fcn.004936e5
add esp, 4
cmp dword [esp + 0x18], 0
jne 0x42a6b3
mov ecx, eax
call fcn.00474390
test eax, eax
jne 0x42a73d
mov edx, 0x4addd4
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x124]
push eax
call ebp
push 0x30
mov edx, 0x4adde4
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x128]
push eax
push dword [esp + 0x20]
call esi
jmp 0x42a73d
mov esi, eax
push esi
push 0
push 0x100001
call dword [sym.imp.kernel32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x42a6ff
push esi
push 0x474350
call dword [sym.imp.user32.dll_EnumWindows]
push 0xbb8
push edi
call dword [sym.imp.kernel32.dll_WaitForSingleObject]
test eax, eax
je 0x42a76f
push 0
push edi
call dword [sym.imp.kernel32.dll_TerminateProcess]
push edi
mov esi, eax
call dword [sym.imp.kernel32.dll_CloseHandle]
test esi, esi
jne 0x42a73d
mov edx, 0x4addd4
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x124]
push eax
call ebp
push 0x30
mov edx, 0x4adde4
mov ecx, 0x4af760
call fcn.004773a0
push eax
lea eax, [esp + 0x128]
push eax
push dword [esp + 0x20]
call dword [sym.imp.user32.dll_MessageBoxW]
push 0x3e8
call dword [sym.imp.kernel32.dll_Sleep]
push 0x2762
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
mov edx, 1
mov ecx, eax
call fcn.00473ba0
mov eax, 1
jmp 0x42a509
push edi
call dword [sym.imp.kernel32.dll_CloseHandle]
jmp 0x42a73d