Function at 0x44b1b0
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cc638
mov eax, dword fs:[0]
push eax
sub esp, 0x80
mov eax, dword [0x5091d4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x8c]
call fcn.00449f40
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0
call fcn.0044b770
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x64]
push eax
push 0x44bb10
mov byte [ebp - 4], 1
call dword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
je 0x44b46f
cmp dword [ebp - 0x60], 0
jne 0x44b24e
push str.An_runtime_exception_occurred:
lea ecx, [ebp - 0x40]
call fcn.00402850
push str.Cannot_detect_any_windows.
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 4
push eax
call fcn.004020f0
add esp, 0xc
mov byte [ebp - 4], 5
jmp 0x44b496
mov eax, dword [ebp + 8]
xor ebx, ebx
xor ecx, ecx
mov dword [ebp - 0x48], ebx
movzx eax, word [eax]
mov dword [ebp - 0x50], eax
cmp cx, ax
jae 0x44b313
call fcn.0045ec20
push ecx
mov ecx, esp
mov esi, eax
push 0x1b
call fcn.004631f0
mov ecx, esi
call fcn.0045efb0
test al, al
jne 0x44b313
mov esi, dword [ebp - 0x64]
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x44], esi
call fcn.004464b0
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x4c]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x68], eax
call fcn.004464b0
mov edi, dword [ebp - 0x4c]
cmp edi, dword [esi]
je 0x44b2e9
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], edi
call fcn.004464b0
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], esi
mov ebx, dword [eax + 0x14]
call fcn.004464b0
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x4c]
mov esi, edi
mov dword [eax + 0x14], ebx
call fcn.004464b0
mov eax, dword [ebp - 0x64]
mov edi, dword [ebp - 0x4c]
cmp edi, dword [eax]
jne 0x44b2b0
mov ebx, dword [ebp - 0x48]
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], esi
call fcn.004464b0
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x68]
push 1
mov dword [eax + 0x14], ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
mov dword [ebp - 0x48], ebx
cmp bx, word [ebp - 0x50]
jb 0x44b267
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
cmp byte [eax + 0xd], 0
jne 0x44b412
lea ebx, [eax + 0x10]
push ebx
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x5c]
call fcn.0044b160
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x48], eax
cmp byte [eax + 0xd], 0
jne 0x44b34b
movss xmm0, dword [eax + 0x10]
comiss xmm0, dword [ebx]
jbe 0x44b3bf
cmp dword [ebp - 0x58], 0x9249249
je 0x44b46a
mov edi, dword [ebp - 0x5c]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x6c], eax
push 0x1c
mov byte [ebp - 4], 6
mov dword [ebp - 0x68], 0
call fcn.0049f7ea
mov esi, eax
add esp, 4
mov dword [ebp - 0x68], esi
mov ecx, dword [ebx]
push 0
push 0
push 0
mov dword [esi + 0x10], ecx
lea ecx, [esi + 0x14]
push 0
mov byte [ebp - 4], 7
call fcn.00487bf0
push esi
push dword [ebp - 0x74]
mov dword [esi], edi
lea ecx, [ebp - 0x5c]
push dword [ebp - 0x78]
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov word [esi + 0xc], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x68], 0
call fcn.00421640
mov dword [ebp - 0x48], eax
lea esi, [eax + 0x14]
mov eax, dword [ebx + 4]
mov ecx, esi
mov dword [ebp - 0x50], eax
call fcn.00487e60
mov ecx, esi
mov ebx, eax
call fcn.00487f40
mov ecx, esi
mov edi, eax
call fcn.00487f30
mov ecx, dword [ebp - 0x48]
mov esi, eax
lea ecx, [ecx + 0x14]
call fcn.00487f00
push ebx
push edi
push esi
push eax
push dword [ebp - 0x50]
call fcn.0044fb60
add esp, 0x14
lea ecx, [ebp - 0x44]
call fcn.00446450
mov eax, dword [ebp - 0x44]
cmp byte [eax + 0xd], 0
je 0x44b325
push dword [ebp - 0x88]
call fcn.00492a00
mov eax, dword [ebp - 0x5c]
add esp, 4
push dword [eax + 4]
lea eax, [ebp - 0x5c]
push eax
mov ecx, eax
call fcn.0044b110
push 0x1c
push dword [ebp - 0x5c]
call fcn.0049f81a
add esp, 8
lea ecx, [ebp - 0x64]
call fcn.004460e0
lea ecx, [ebp - 0x80]
call fcn.00487c70
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049f836
mov esp, ebp
pop ebp
ret
call fcn.00421970
push str.An_runtime_exception_occurred:
lea ecx, [ebp - 0x28]
call fcn.00402850
push str.Could_not_enumerate_all_top_level_windows_on_the_screen.
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 2
push eax
call fcn.004020f0
add esp, 0xc
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x78]
call fcn.00402b30
push 0x4f9f28
lea eax, [ebp - 0x78]
push eax
call fcn.004a0dc4
int3