Function at 0x508469
Capabilities:
Enumerate gui resources

Disassembly:
push 0x94
mov eax, 0x51b8b3
call fcn.0044c7ac
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
lea edi, [ebx + 0x24]
mov eax, esi
call fcn.004129e9
mov eax, dword [0x575038]
or edi, 0xffffffff
mov ecx, 0x575038
mov byte [ebp - 0xd], 0
mov byte [ebp - 0xf], 0
mov byte [ebp - 0xe], 0
mov byte [ebp - 0x10], 0
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0x18], edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x20], eax
and dword [ebp - 4], 0
mov eax, dword [esi]
mov ecx, dword [eax - 0xc]
test ecx, ecx
jne 0x5084f2
call fcn.0050b347
test al, al
je 0x5084e1
push 2
push 0x5071c2
call dword [sym.imp.USER32.dll_EnumWindows]
mov byte [ebp - 0xd], 0
jmp 0x5089d8
and dword [ebp - 0x18], 0
mov byte [ebp - 0xf], 1
mov byte [ebp - 0xd], 1
jmp 0x508776
add eax, 0xfffffff0
call fcn.00412a2a
add eax, 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00411a4e
xor ecx, ecx
push str.cclaunch
inc ecx
lea esi, [ebp - 0x14]
call fcn.00411b7b
test eax, eax
jle 0x50858d
cmp byte [ebx + 0x1c], 0
jne 0x508534
call fcn.0050718d
mov byte [ebp - 0xd], 0
jmp 0x50875d
push str.updatecheck
xor ecx, ecx
lea esi, [ebp - 0x14]
call fcn.00411b7b
test eax, eax
jle 0x50855c
mov byte [ebp - 0xd], 1
mov byte [ebp - 0xe], 1
mov byte [ebp - 0x1c], 1
and dword [ebp - 0x18], 0
jmp 0x50875d
push 0x533f34
xor ecx, ecx
lea esi, [ebp - 0x14]
call fcn.00411b7b
and dword [ebp - 0x18], 0
test eax, eax
mov byte [ebp - 0xd], 1
jle 0x508584
mov byte [ebp - 0x10], 1
mov byte [ebp - 0x1c], 1
jmp 0x50875d
mov byte [ebp - 0xf], 1
jmp 0x50875d
push str._auto
xor ecx, ecx
lea esi, [ebp - 0x14]
call fcn.00411b7b
xor ecx, ecx
cmp eax, edi
je 0x5085c2
push str._shutdown
mov byte [ebp - 0xd], 1
mov byte [ebp - 0x10], 1
mov byte [ebp - 0x1c], 1
call fcn.00411b7b
cmp eax, edi
je 0x508553
mov byte [ebx + 0x28], 1
jmp 0x508553
push str._debug
call fcn.00411b7b
cmp eax, edi
je 0x5085e5
mov byte [ebp - 0xd], 1
mov byte [ebp - 0xe], 1
mov byte [ebp - 0xf], 1
mov byte [ebp - 0x1c], 0
jmp 0x508553
push str._delete
xor ecx, ecx
lea esi, [ebp - 0x14]
call fcn.00411b7b
cmp eax, edi
je 0x508614
mov eax, dword [ebp + 0xc]
lea edi, [ebp - 0x20]
mov byte [ebp - 0xd], 1
mov byte [ebp - 0x10], 1
mov byte [ebp - 0x1c], 1
call fcn.004129e9
jmp 0x508553
push str._appstop
xor ecx, ecx
lea esi, [ebp - 0x14]
call fcn.00411b7b
cmp eax, edi
je 0x508639
push 1
push 0x5071c2
call dword [sym.imp.USER32.dll_EnumWindows]
jmp 0x50875d
push str._hostcleanup
xor ecx, ecx
lea esi, [ebp - 0x14]
call fcn.00411b7b
cmp eax, edi
jne 0x508627
push str._cleaner
xor ecx, ecx
call fcn.00411b7b
cmp eax, edi
je 0x5086b6
and dword [ebp - 0x18], 0
mov byte [ebp - 0xd], 1
mov byte [ebp - 0xe], 0
mov byte [ebp - 0xf], 1
mov byte [ebp - 0x1c], 0
push 0x534334
push 0x8002
call dword [0x574ec0]
mov esi, eax
test esi, esi
je 0x50875d
push 1
push dword [ebp - 0x18]
push 0x410
push esi
call dword [0x574efc]
mov byte [ebp - 0xd], 0
call fcn.0050b347
test al, al
je 0x508744
call fcn.005070f9
jmp 0x50875d
push str._registry
xor ecx, ecx
lea esi, [ebp - 0x14]
call fcn.00411b7b
cmp eax, edi
je 0x5086e2
mov byte [ebp - 0xd], 1
mov byte [ebp - 0xe], 0
mov byte [ebp - 0xf], 1
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0x18], 2
jmp 0x508670
push str._tools
xor ecx, ecx
lea esi, [ebp - 0x14]
call fcn.00411b7b
cmp eax, edi
je 0x508711
mov byte [ebp - 0xd], 1
mov byte [ebp - 0xe], 0
mov byte [ebp - 0xf], 1
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0x18], 3
jmp 0x508670
push str._options
xor ecx, ecx
lea esi, [ebp - 0x14]
call fcn.00411b7b
cmp eax, edi
mov byte [ebp - 0xd], 1
mov byte [ebp - 0xf], 1
je 0x508553
mov byte [ebp - 0xe], 0
mov byte [ebp - 0x1c], 0
mov dword [ebp - 0x18], 8
jmp 0x508670
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x508756
push esi
call dword [sym.imp.USER32.dll_OpenIcon]
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.00410d34
cmp byte [ebp - 0xd], 0
je 0x5089d8
mov edi, dword [ebx + 0xc]
mov esi, dword [edi]
mov ecx, edi
call dword [esi + 0xc]
push eax
mov ecx, edi
call dword [esi + 8]
mov eax, dword [ebx + 0xc]
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
mov esi, dword [ebx + 0x14]
lea edx, [ebp + 0xc]
push edx
call dword [eax + 0xb8]
mov byte [ebp - 4], 2
mov eax, dword [eax]
mov edi, dword [esi]
push eax
call fcn.0044813c
pop ecx
push eax
push dword [0x574fcc]
mov ecx, esi
call dword [edi + 0x24]
mov byte [ebp - 4], 0
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
call fcn.00410d34
mov ebx, dword [ebx + 0xc]
mov ecx, dword [ebx + 4]
mov eax, dword [ecx]
lea edx, [ebp + 0xc]
push edx
call dword [eax + 0xd4]
push dword [eax]
call fcn.0044813c
mov ebx, eax
mov eax, dword [ebp + 0xc]
dec ebx
neg ebx
sbb bl, bl
pop ecx
add eax, 0xfffffff0
inc bl
call fcn.00410d34
mov eax, dword [0x5768f8]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
call dword [eax + 0xf4]
push edx
push eax
call fcn.005071a7
cmp byte [ebp - 0x10], 0
pop ecx
pop ecx
jne 0x508827
cmp byte [ebp - 0xe], 0
jne 0x508827
test bl, bl
je 0x508827
test al, al
je 0x508827
mov byte [ebp - 0xe], 1
mov dword [ebp + 0xc], 0x12
call fcn.00406dad
mov edx, eax
lea eax, [ebp + 0xc]
call fcn.00406e2f
mov ebx, dword [ebp + 8]
lea esi, [ebx + 4]
cmp dword [esi], eax
je 0x50884e
mov edi, eax
call fcn.004111f5
mov ecx, dword [esi]
mov eax, dword [ecx]
push 0
push 0
call dword [eax + 0x10]
test eax, eax
je 0x5089d8
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0xc]
cmp dword [ebp - 0x18], 0xffffffff
mov dword [ebx + 8], eax
je 0x5088be
mov eax, dword [esi]
xor ecx, ecx
test eax, eax
mov dword [ebp + 0xc], ecx
je 0x50888d
mov ecx, dword [eax]
lea edx, [ebp + 0xc]
push edx
push 0x5352c8
push eax
call dword [ecx]
mov ecx, dword [ebp + 0xc]
test ecx, ecx
mov byte [ebp - 4], 3
je 0x5088b0
push dword [ebp - 0x18]
mov eax, dword [ecx]
call dword [eax + 0x54]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
call dword [eax + 0x20]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
call dword [eax + 0x24]
mov ecx, dword [ebp + 0xc]
test ecx, ecx
mov byte [ebp - 4], 0
je 0x5088be
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
cmp byte [ebp - 0x10], 0
jne 0x5088f9
cmp byte [ebx + 0x29], 0
je 0x5088f9
push 1
lea eax, [ebp - 0xa0]
push eax
call fcn.004f6de6
mov byte [ebp - 4], 4
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ebx, [ebp - 0xa0]
call fcn.00406d64
mov ecx, ebx
mov byte [ebp - 4], 0
call fcn.004f6d6a
mov al, byte [ebp - 0xf]
mov ecx, dword [esi]
mov edx, dword [ecx]
neg al
sbb eax, eax
and eax, 5
push eax
call dword [edx + 0x34]
cmp byte [ebp - 0x10], 0
jne 0x50891b
cmp byte [ebp - 0xe], 0
je 0x5089d8
mov esi, dword [esi]
xor ecx, ecx
test esi, esi
mov dword [ebp + 0xc], ecx
je 0x508937
mov eax, dword [esi]
lea ecx, [ebp + 0xc]
push ecx
push 0x5352d8
push esi
call dword [eax]
mov ecx, dword [ebp + 0xc]
test ecx, ecx
mov byte [ebp - 4], 5
je 0x5089ca
push dword [ebp - 0x1c]
mov eax, dword [ecx]
call dword [eax + 0x1c]
cmp byte [ebp - 0x10], 0
je 0x5089af
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
push 1
call dword [eax + 0xc]
mov eax, dword [ebp - 0x20]
cmp dword [eax - 0xc], 0
je 0x5089af
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
push 1
lea edx, [ebp + 8]
push edx
call dword [eax + 0x30]
mov esi, dword [eax]
test esi, esi
mov dword [ebp - 0x1c], esi
je 0x508981
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov byte [ebp - 4], 6
mov eax, dword [ebp + 8]
test eax, eax
je 0x508992
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test esi, esi
je 0x5089a1
mov eax, dword [esi]
lea ecx, [ebp - 0x20]
push ecx
mov ecx, esi
call dword [eax + 0x20]
test esi, esi
mov byte [ebp - 4], 5
je 0x5089af
mov eax, dword [esi]
push esi
call dword [eax + 8]
cmp byte [ebp - 0xe], 0
je 0x5089bf
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
push 2
call dword [eax + 0xc]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
call dword [eax + 0x24]
mov ecx, dword [ebp + 0xc]
test ecx, ecx
mov byte [ebp - 4], 0
je 0x5089d8
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
call fcn.00410d34
mov al, byte [ebp - 0xd]
call fcn.0044c884
ret 8