Function at 0x43a4dc
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffdc
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x18], eax
xor eax, eax
push ebp
push 0x43ad64
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x20]
call fcn.00438450
pop ecx
mov eax, dword [ebp - 0x20]
mov ecx, 0x441912
mov edx, 0x441804
call fcn.00433ffc
test al, al
je 0x43ad39
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x20]
call fcn.00438450
pop ecx
mov eax, dword [ebp - 0x20]
mov edx, 0x43ad7c
call fcn.00434be8
mov ebx, eax
cmp byte [0x441912], 0
je 0x43a570
cmp ebx, 1
jle 0x43a570
mov eax, dword [0x441804]
cmp dword [eax*4 + 0x44172c], 0
jne 0x43a570
mov dword [0x441788], 4
jmp 0x43ad39
mov byte [0x441794], 1
mov eax, ebx
cmp eax, 0x33
jg 0x43a5df
je 0x43a999
cmp eax, 0x14
jg 0x43a5b6
je 0x43a815
dec eax
je 0x43a63c
sub eax, 6
je 0x43a6cb
sub eax, 3
je 0x43a6fc
sub eax, 4
je 0x43a751
jmp 0x43ad26
sub eax, 0x18
je 0x43a847
sub eax, 8
je 0x43a89f
sub eax, 8
je 0x43a94d
sub eax, 8
je 0x43a974
jmp 0x43ad26
cmp eax, 0x4d
jg 0x43a613
je 0x43aa94
sub eax, 0x35
je 0x43a9c0
sub eax, 6
je 0x43a9d5
sub eax, 4
je 0x43a9ea
sub eax, 7
je 0x43a9ea
jmp 0x43ad26
sub eax, 0x53
je 0x43aabb
sub eax, 4
je 0x43ab76
sub eax, 5
je 0x43ac47
sub eax, 8
je 0x43acd7
jmp 0x43ad26
cmp byte [0x441912], 0
je 0x43a663
mov eax, dword [0x441804]
cmp dword [eax*4 + 0x44172c], 0
je 0x43a663
mov dword [0x441788], 4
jmp 0x43ad39
mov dl, 1
mov eax, 0x409b84
call fcn.00402c2c
mov ebx, eax
mov eax, dword [0x441804]
mov dword [eax*4 + 0x44172c], ebx
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x20]
call fcn.004382f4
pop ecx
mov eax, dword [ebp - 0x20]
mov edx, 0x43adf0
call fcn.00405df4
test eax, eax
sete dl
mov eax, dword [0x441804]
mov eax, ebx
call fcn.0040bcd8
mov eax, dword [0x441804]
mov eax, dword [eax*4 + 0x44172c]
mov byte [eax + 0x15], 0
mov eax, dword [0x441804]
xor edx, edx
mov dword [eax*4 + 0x441750], edx
jmp 0x43ad39
cmp byte [0x441912], 0
je 0x43ad39
mov eax, dword [0x441804]
mov eax, dword [eax*4 + 0x44172c]
call fcn.00402c54
mov eax, dword [0x441804]
xor edx, edx
mov dword [eax*4 + 0x44172c], edx
jmp 0x43ad39
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x20]
call fcn.004382f4
pop ecx
mov eax, dword [ebp - 0x20]
call fcn.004329d8
mov esi, eax
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.0043409c
cmp esi, eax
jge 0x43a742
test esi, esi
jl 0x43a742
mov cl, byte [0x441912]
mov edx, esi
mov eax, dword [0x441804]
call fcn.004340e8
jmp 0x43ad39
mov dword [0x441788], 0x13
jmp 0x43ad39
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x20]
call fcn.00438450
pop ecx
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x19]
lea edx, [ebp - 0x10]
call fcn.00433ffc
test al, al
je 0x43a806
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.00434454
mov dl, byte [ebp - 0x19]
mov eax, dword [ebp - 0x10]
call fcn.0043409c
mov ebx, eax
test ebx, ebx
jle 0x43a7e2
mov dl, byte [ebp - 0x19]
mov eax, dword [ebp - 0x10]
call fcn.00434130
mov esi, eax
mov cl, byte [ebp - 0x19]
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.004340e8
push 1
lea ecx, [ebp - 0x20]
mov dl, byte [ebp - 0x19]
mov eax, dword [ebp - 0x10]
call fcn.004341e0
mov ecx, dword [ebp - 0x20]
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.00434308
mov dl, byte [ebp - 0x19]
mov eax, dword [ebp - 0x10]
call fcn.00434170
dec ebx
test ebx, ebx
jne 0x43a7af
mov cl, byte [ebp - 0x19]
mov edx, esi
mov eax, dword [ebp - 0x10]
call fcn.004340e8
mov cl, byte [0x441912]
xor edx, edx
mov eax, dword [0x441804]
call fcn.004340e8
jmp 0x43ad39
mov dword [0x441788], 4
jmp 0x43ad39
push 1
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x24]
call fcn.00438450
pop ecx
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.00432a04
mov ecx, dword [ebp - 0x20]
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.004344b0
jmp 0x43ad39
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x18]
call fcn.00438450
pop ecx
cmp dword [0x441788], 0
jg 0x43ad39
push ebp
mov eax, dword [ebp + 8]
push eax
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x20]
call fcn.004382f4
pop ecx
mov eax, dword [ebp - 0x20]
call fcn.0043472c
pop ecx
movzx edx, ax
mov eax, dword [ebp - 0x18]
call fcn.0043a2d8
pop ecx
mov cl, byte [0x441912]
xor edx, edx
mov eax, dword [0x441804]
call fcn.004340e8
jmp 0x43ad39
push 0
push 0
push 0xffffffffffffffff
mov eax, dword [0x4419d4]
push eax
call sub.shell32.dll_DragQueryFileA
mov esi, eax
dec esi
test esi, esi
jl 0x43a924
inc esi
xor ebx, ebx
lea eax, [ebp - 4]
mov edx, 0x200
call fcn.004039a0
push 0x200
mov eax, dword [ebp - 4]
call fcn.00403834
push eax
push ebx
mov eax, dword [0x4419d4]
push eax
call sub.shell32.dll_DragQueryFileA
cmp byte [0x441910], 0
je 0x43a900
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.00432bf8
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 4]
call fcn.00403590
push 1
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.004325c8
mov ecx, dword [ebp - 0x20]
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.00434308
inc ebx
dec esi
jne 0x43a8ba
mov eax, dword [0x4419d4]
push eax
call sub.shell32.dll_DragFinish
xor eax, eax
mov dword [0x4419d4], eax
mov cl, byte [0x441912]
xor edx, edx
mov eax, dword [0x441804]
call fcn.004340e8
jmp 0x43ad39
push 0
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x20]
call fcn.00438450
pop ecx
mov ecx, dword [ebp - 0x20]
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.004344b0
jmp 0x43ad39
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x20]
call fcn.004382f4
pop ecx
mov ecx, dword [ebp - 0x20]
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.004343c8
jmp 0x43ad39
push 1
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x20]
call fcn.004382f4
pop ecx
mov ecx, dword [ebp - 0x20]
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.00434308
jmp 0x43ad39
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.0043426c
jmp 0x43ad39
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.00434454
jmp 0x43ad39
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x20]
call fcn.00438450
pop ecx
mov eax, dword [ebp - 0x20]
call fcn.00433048
mov esi, eax
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x20]
call fcn.00438450
pop ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp + 8]
add eax, 0xffffffe0
call fcn.00403590
cmp dword [0x441788], 0
jne 0x43ad39
lea eax, [ebp - 0xc]
push eax
push 0x20019
push 0
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x20]
call fcn.00403834
push eax
push esi
call sub.advapi32.dll_RegOpenKeyExA
test eax, eax
jne 0x43ad39
xor esi, esi
jmp 0x43aa73
push 1
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.004325c8
mov ecx, dword [ebp - 0x20]
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.00434308
inc esi
push ebp
cmp ebx, 0x46
sete dl
mov eax, esi
call fcn.0043a260
pop ecx
test eax, eax
je 0x43aa52
mov eax, dword [ebp - 0xc]
push eax
call sub.advapi32.dll_RegCloseKey
jmp 0x43ad39
push 0
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x20]
call fcn.004382f4
pop ecx
mov ecx, dword [ebp - 0x20]
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.00434308
jmp 0x43ad39
call fcn.0042ed80
call fcn.0042e740
xor eax, eax
push ebp
push 0x43ab6f
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0042ed80
call fcn.0042e6b4
cmp byte [0x441912], 0
je 0x43ab05
mov eax, dword [0x441804]
mov eax, dword [eax*4 + 0x44172c]
mov edx, dword [eax]
call dword [edx + 0x44]
push eax
call fcn.0042ed80
pop edx
call fcn.0042e87c
jmp 0x43ab57
mov edx, dword [0x441804]
mov eax, dword [0x4419a4]
call fcn.0040f7a4
mov esi, eax
mov eax, esi
mov edx, 0x4275fc
call fcn.00402c9c
test al, al
je 0x43ab40
mov eax, dword [esi + 0xfc]
mov edx, dword [eax]
call dword [edx + 0x44]
push eax
call fcn.0042ed80
pop edx
call fcn.0042e87c
jmp 0x43ab57
mov eax, dword [esi + 0xfc]
mov edx, dword [eax]
call dword [edx + 0x44]
push eax
call fcn.0042ed80
pop edx
call fcn.0042e87c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x43ad39
call fcn.0042ed80
call fcn.0042e714
ret
call fcn.0042ed80
mov dx, 1
call fcn.0042ed48
mov byte [0x441794], al
cmp byte [0x441794], 0
je 0x43ad39
call fcn.0042ed80
call fcn.0042e740
xor eax, eax
push ebp
push 0x43ac40
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0042ed80
mov dx, 1
call fcn.0042ec74
mov ebx, eax
push ebx
call sub.kernel32.dll_GlobalLock
mov edi, eax
cmp byte [0x441912], 0
je 0x43abe4
mov eax, dword [0x441804]
mov eax, dword [eax*4 + 0x44172c]
mov edx, edi
mov ecx, dword [eax]
call dword [ecx + 0x64]
jmp 0x43ac22
mov edx, dword [0x441804]
mov eax, dword [0x4419a4]
call fcn.0040f7a4
mov esi, eax
mov eax, esi
mov edx, 0x4275fc
call fcn.00402c9c
test al, al
je 0x43ac15
mov eax, dword [esi + 0xfc]
mov edx, edi
mov ecx, dword [eax]
call dword [ecx + 0x64]
jmp 0x43ac22
mov eax, dword [esi + 0xfc]
mov edx, edi
mov ecx, dword [eax]
call dword [ecx + 0x64]
push ebx
call sub.kernel32.dll_GlobalUnlock
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x43ad39
call fcn.0042ed80
call fcn.0042e714
ret
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.00434454
lea ecx, [ebp - 0x20]
mov edx, dword [0x441784]
inc edx
mov eax, dword [0x4419a8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp + 8]
add eax, 0xfffffff4
call fcn.00403590
mov eax, dword [ebp + 8]
cmp dword [eax - 0xc], 0
je 0x43acc1
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0xc]
cmp byte [eax], 0x22
jne 0x43acc1
push 1
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0xc]
mov ecx, 0x3ff
mov edx, 2
call fcn.00403874
mov ecx, dword [ebp - 0x20]
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.00434308
inc dword [0x441784]
mov eax, dword [ebp + 8]
cmp dword [eax - 0xc], 0
je 0x43ad39
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0xc]
cmp byte [eax], 0x22
je 0x43ac57
jmp 0x43ad39
mov dl, byte [0x441912]
mov eax, dword [0x441804]
call fcn.00434454
xor eax, eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 8]
push eax
lea edx, [ebp - 0x24]
mov eax, 0x43ae00
call fcn.00438420
pop ecx
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.00405d4c
mov edx, dword [ebp - 0x20]
mov eax, 0x44180c
call fcn.0040354c
lea eax, [ebp - 0x14]
push eax
push 0x434590
call sub.user32.dll_EnumWindows
jmp 0x43ad39
cmp dword [0x441788], 0
jne 0x43ad39
mov dword [0x441788], 4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x43ad6b
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0040351c
lea eax, [ebp - 0x18]
call fcn.004034fc
lea eax, [ebp - 4]
call fcn.004034fc
ret