Function at 0x40139f
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xec
push ebx
push esi
push edi
xor ebx, ebx
lea eax, [ebp - 8]
push eax
push 0x401337
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 8], ebx
call dword [sym.imp.USER32.dll_EnumWindows]
mov edi, dword [ebp + 0x10]
cmp word [edi], bx
je 0x4014a6
xor bh, bh
mov esi, edi
movzx eax, word [esi]
mov ecx, esi
add esi, 2
sub eax, 9
je 0x401475
sub eax, 1
je 0x401475
sub eax, 3
je 0x401475
sub eax, 0x13
je 0x401475
dec eax
sub eax, 1
je 0x40146c
sub eax, 0xd
jne 0x40147b
movzx eax, word [esi]
mov bl, 1
cmp eax, 0x63
ja 0x401437
je 0x401432
sub eax, 0x43
je 0x401432
dec eax
sub eax, 1
je 0x40145a
sub eax, 4
je 0x401455
sub eax, 3
je 0x401450
sub eax, 7
je 0x40144b
jmp 0x401482
lea eax, [ebp - 0x10]
jmp 0x40145d
cmp eax, 0x65
je 0x40145a
cmp eax, 0x69
je 0x401455
cmp eax, 0x6c
je 0x401450
cmp eax, 0x73
jne 0x401482
lea eax, [ebp - 0xc]
jmp 0x40145d
lea eax, [ebp - 0x14]
jmp 0x40145d
lea eax, [ebp - 8]
jmp 0x40145d
lea eax, [ebp - 4]
push eax
lea esi, [ecx + 4]
push 1
push esi
call dword [sym.imp.SHLWAPI.dll_StrToIntExW]
jmp 0x401482
xor bl, bl
test bh, bh
sete bh
jmp 0x401482
xor bl, bl
test bh, bh
je 0x401482
test bl, bl
jne 0x401482
add edi, 2
movzx eax, word [esi]
mov word [edi], ax
test ax, ax
jne 0x4013db
mov ecx, dword [ebp - 0x14]
mov edi, dword [ebp + 0x10]
test ecx, ecx
je 0x4014a4
mov eax, dword [ebp - 0xc]
dec eax
add eax, ecx
mov dword [ebp - 4], eax
xor ebx, ebx
push ebx
call dword [sym.imp.ole32.dll_OleInitialize]
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
mov esi, str.hekseditU.dll
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x4549d0], eax
test eax, eax
jne 0x4014f7
push esi
lea ecx, [ebp - 0xec]
push str.Unable_to_load_the__s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0xec]
push 0x10
push ebx
push ecx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push 3
pop eax
jmp 0x4016d1
push 0x28
pop ecx
lea eax, [ebp - 0x40]
mov byte [eax], bl
inc eax
sub ecx, 1
jne 0x4014fd
push 0x6d
push dword [ebp + 8]
mov dword [ebp - 0x40], 3
mov dword [ebp - 0x3c], 0x401000
call dword [sym.imp.USER32.dll_LoadIconA]
push 0x7f00
push ebx
mov dword [ebp - 0x2c], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov dword [ebp - 0x28], eax
mov esi, str.frhed_wndclass
mov eax, dword [0x4549d0]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x20], 0x66
mov dword [ebp - 0x1c], esi
call dword [sym.imp.USER32.dll_RegisterClassA]
push ebx
push dword [0x4549d0]
mov eax, 0x80000000
push ebx
push ebx
push eax
push eax
push eax
push eax
push 0x2cf0000
push ebx
push esi
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, dword [0x4549e4]
test ecx, ecx
jne 0x401588
push 0x10
push ebx
push str.Unable_to_create_the_heksedit_control
jmp 0x4014e8
mov eax, dword [ebp - 8]
mov dword [ecx + 0x10c], eax
mov eax, dword [ecx]
push ebx
push ecx
call dword [eax + 0x98]
mov eax, dword [0x4549e4]
cmp dword [eax + 0xfc], 0x80000000
je 0x401620
lea eax, [ebp - 0x88]
mov dword [ebp - 0x88], 0x2c
push eax
push dword [0x4549d4]
call dword [sym.imp.USER32.dll_GetWindowPlacement]
mov ecx, dword [0x4549e4]
mov eax, dword [ecx + 0xf8]
mov dword [ebp - 0x80], eax
mov eax, dword [ecx + 0xfc]
mov dword [ebp - 0x6c], eax
mov eax, dword [ecx + 0x100]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx + 0x104]
add eax, dword [ecx + 0xfc]
mov dword [ebp - 0x64], eax
mov eax, dword [ecx + 0x108]
add eax, dword [ecx + 0x100]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x88]
push eax
push dword [0x4549d4]
call dword [sym.imp.USER32.dll_SetWindowPlacement]
mov eax, dword [0x4549e4]
push dword [eax + 0xf8]
push dword [0x4549d4]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x4549d4]
call dword [sym.imp.USER32.dll_UpdateWindow]
cmp word [edi], bx
je 0x40166c
mov eax, dword [0x4549e4]
push edi
push eax
mov ecx, dword [eax]
call dword [ecx + 0xac]
cmp dword [ebp - 4], 0
je 0x40166c
mov eax, dword [0x4549e4]
push dword [ebp - 4]
push dword [ebp - 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x9c]
cmp dword [ebp - 0x10], 0
je 0x401687
push ebx
push dword [ebp - 0x10]
push 0x111
push dword [0x4549d4]
call dword [sym.imp.USER32.dll_PostMessageA]
mov esi, dword [sym.imp.USER32.dll_GetMessageA]
jmp 0x4016bb
mov ecx, dword [0x4549e4]
test ecx, ecx
je 0x4016a7
mov eax, dword [ecx]
lea edx, [ebp - 0x5c]
push edx
push ecx
call dword [eax + 0x2c]
test eax, eax
jne 0x4016bb
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push ebx
push ebx
push ebx
lea eax, [ebp - 0x5c]
push eax
call esi
test eax, eax
jne 0x40168f
call dword [sym.imp.ole32.dll_OleUninitialize]
mov eax, dword [ebp - 0x54]
pop edi
pop esi
pop ebx
leave
ret 0x10