Function at 0x408c5e
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [0x4ccbf8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov eax, edx
mov ebx, ecx
push eax
xor edi, edi
mov dword [ebp - 0x1c], eax
push 0x41b
push ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0x14], edi
call fcn.00449600
add esp, 0xc
test eax, eax
je 0x408cfe
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x18], esi
test esi, esi
je 0x408cfe
cmp dword [esi + 4], edi
mov ecx, 0x4b1aef
mov eax, ecx
cmovne eax, dword [esi + 4]
cmp byte [eax], 0
je 0x408cfe
mov edx, dword [esi + 0x10]
mov eax, ecx
test edx, edx
cmovne eax, edx
cmp byte [eax], 0
jne 0x408ccb
test byte [esi + 0x18], 2
je 0x408cfe
cmp dword [esi + 8], edi
mov eax, ecx
cmovne eax, dword [esi + 8]
cmp byte [eax], 0
je 0x408cfe
cmp dword [esi + 0xc], edi
cmovne ecx, dword [esi + 0xc]
cmp byte [ecx], 0
je 0x408cfe
test byte [esi + 0x18], 8
je 0x408d0f
mov edx, esi
mov ecx, ebx
call fcn.00408777
mov ecx, ebx
mov dword [esi + 0x2c], edi
call fcn.0040b9a5
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0047f41c
leave
ret
cmp dword [esi + 0x24], 0
mov edi, esi
jne 0x408f25
push 0x2a
push edx
call fcn.00480740
pop ecx
pop ecx
test eax, eax
jne 0x408cfe
push 0x3f
push dword [esi + 0x10]
call fcn.00480740
pop ecx
pop ecx
test eax, eax
jne 0x408cfe
push 0x20
push dword [esi + 0x10]
call fcn.00480740
pop ecx
pop ecx
test eax, eax
jne 0x408cfe
push 0x22
push dword [esi + 0x10]
call fcn.00480740
pop ecx
pop ecx
test eax, eax
jne 0x408cfe
push 0x7c
push dword [esi + 0x10]
call fcn.00480740
pop ecx
pop ecx
test eax, eax
jne 0x408cfe
push 0x3c
push dword [esi + 0x10]
call fcn.00480740
pop ecx
pop ecx
test eax, eax
jne 0x408cfe
push 0x3e
push dword [esi + 0x10]
call fcn.00480740
pop ecx
pop ecx
test eax, eax
jne 0x408cfe
call fcn.00435f20
test eax, eax
je 0x408df2
call fcn.00435f20
cmp dword [eax], 0
je 0x408df2
mov eax, dword [0x4edee0]
test eax, eax
je 0x408db1
mov edi, dword [eax + 0x190]
jmp 0x408db7
mov edi, dword [0x4edee4]
call fcn.00435f20
test eax, eax
je 0x408dc9
call fcn.00435f20
mov eax, dword [eax]
jmp 0x408dcb
xor eax, eax
mov ecx, str.Connect_to__s____s
push ecx
push dword [esi + 0x10]
push dword [esi + 4]
push ecx
push dword [0x4edee0]
push edi
push 0
push 0x83f
push str.D:MyProjectsProPilotTestMain.c
push 0
call eax
add esp, 0x28
push 0
push 0x405a09
call dword [sym.imp.USER32.dll_EnumWindows]
mov edi, 0x556a20
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor eax, eax
inc eax
push eax
push dword [ebp - 0x1c]
mov dword [esi + 0x24], eax
push 0x41b
push ebx
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], eax
call fcn.0044c480
add esp, 0x10
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push dword [esi + 4]
call fcn.0048c9e8
mov edx, eax
mov edi, esi
mov dword [ebp - 0xc], edx
pop ecx
mov al, byte [edx]
test al, al
je 0x408e95
push 0x5f
pop ebx
cmp al, 0x5c
je 0x408e6d
cmp al, 0x3a
je 0x408e75
cmp al, 0x3c
jne 0x408e59
mov cl, 0x28
jmp 0x408e89
cmp al, 0x3e
jne 0x408e61
mov cl, 0x29
jmp 0x408e89
cmp al, 0x22
jne 0x408e69
mov cl, 0x27
jmp 0x408e89
cmp al, 0x2f
jne 0x408e71
mov cl, bl
jmp 0x408e89
cmp al, 0x7c
jne 0x408e79
mov cl, 0x2d
jmp 0x408e89
cmp al, 0x2a
jne 0x408e81
mov cl, 0x23
jmp 0x408e89
cmp al, 0x3f
movzx ecx, al
cmove ecx, ebx
mov byte [edx], cl
inc edx
mov al, byte [edx]
test al, al
jne 0x408e49
mov edx, dword [ebp - 0xc]
mov ecx, edi
call fcn.00406030
xor ebx, ebx
test eax, eax
lea eax, [ebp - 8]
push eax
push eax
push eax
je 0x408eca
push dword [ebp - 0xc]
mov eax, dword [0x5514ec]
add eax, 0x384
push eax
push str.mstsc.exe___sSessions_s.rdp___prompt__f
lea eax, [ebp - 8]
push ebx
push eax
call fcn.00423860
add esp, 0x20
jmp 0x408edf
push dword [esi + 0x10]
lea eax, [ebp - 8]
push str.mstsc.exe__V:_s__prompt__f
push ebx
push eax
call fcn.00423860
add esp, 0x1c
cmp dword [ebp - 0xc], 0
je 0x408efb
lea eax, [ebp - 0xc]
push eax
call fcn.0041f010
push dword [ebp - 0xc]
call fcn.0048690c
pop ecx
pop ecx
mov dword [ebp - 0xc], ebx
push ebx
push 5
push dword [ebp - 8]
call fcn.00422930
add esp, 0xc
cmp dword [ebp - 8], 0
je 0x408f25
lea eax, [ebp - 8]
push eax
call fcn.0041f010
push dword [ebp - 8]
call fcn.0048690c
pop ecx
pop ecx
mov dword [ebp - 8], ebx
and dword [edi + 0x1c], 0xfffffdcb
call fcn.00435f20
test eax, eax
je 0x408f91
call fcn.00435f20
cmp dword [eax], 0
je 0x408f91
mov eax, dword [0x4edee0]
test eax, eax
je 0x408f50
mov ebx, dword [eax + 0x190]
jmp 0x408f56
mov ebx, dword [0x4edee4]
call fcn.00435f20
test eax, eax
je 0x408f68
call fcn.00435f20
mov eax, dword [eax]
jmp 0x408f6a
xor eax, eax
mov ecx, str.Logging_on_session__s____s
push ecx
push dword [esi + 0x10]
push dword [esi + 4]
push ecx
push dword [0x4edee0]
push ebx
push 0
push 0x85b
push str.D:MyProjectsProPilotTestMain.c
push 0
call eax
add esp, 0x28
mov eax, dword [0x5514ec]
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
test byte [eax + 0x5dc], 8
jne 0x408fe5
mov esi, dword [ebp - 0x10]
test dword [edi + 0x1c], 0x204
jne 0x408fe2
push 0
push 0
push 0
push 0
mov edx, edi
mov ecx, esi
call fcn.004082ac
add esp, 0x10
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x408fe2
push 0x12c
call ebx
mov ecx, dword [0x5514ec]
test byte [ecx + 0x5dc], 8
je 0x408fa8
mov esi, dword [ebp - 0x18]
test dword [edi + 0x1c], 0x200
jne 0x408ff5
push 0x12c
call ebx
mov eax, dword [0x5514ec]
test byte [eax + 0x5dc], 8
jne 0x409044
mov esi, dword [ebp - 0x10]
mov eax, dword [edi + 0x1c]
and eax, 0x206
cmp eax, 4
jne 0x409041
xor eax, eax
mov edx, edi
push eax
push eax
push eax
push eax
mov ecx, esi
call fcn.004082ac
add esp, 0x10
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x409041
push 0x12c
call ebx
mov eax, dword [0x5514ec]
test byte [eax + 0x5dc], 8
je 0x409006
mov esi, dword [ebp - 0x18]
test dword [edi + 0x1c], 0x200
jne 0x409054
push 0x12c
call ebx
mov eax, dword [0x5514ec]
test byte [eax + 0x5dc], 8
jne 0x4090a3
mov esi, dword [ebp - 0x10]
mov eax, dword [edi + 0x1c]
and eax, 0x206
cmp eax, 4
jne 0x4090a0
xor eax, eax
mov edx, edi
push eax
push eax
push eax
push eax
mov ecx, esi
call fcn.004082ac
add esp, 0x10
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x4090a0
push 0x12c
call ebx
mov eax, dword [0x5514ec]
test byte [eax + 0x5dc], 8
je 0x409065
mov esi, dword [ebp - 0x18]
test dword [edi + 0x1c], 0x200
jne 0x4090b3
push 0x12c
call ebx
mov eax, dword [0x5514ec]
test byte [eax + 0x5dc], 8
jne 0x409102
mov esi, dword [ebp - 0x10]
mov eax, dword [edi + 0x1c]
and eax, 0x206
cmp eax, 4
jne 0x4090ff
xor eax, eax
mov edx, edi
push eax
push eax
push eax
push eax
mov ecx, esi
call fcn.004082ac
add esp, 0x10
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x4090ff
push 0x12c
call ebx
mov eax, dword [0x5514ec]
test byte [eax + 0x5dc], 8
je 0x4090c4
mov esi, dword [ebp - 0x18]
mov eax, dword [0x5514ec]
xor ebx, ebx
test byte [eax + 0x5dc], 8
je 0x40911e
push ebx
push 0x405a09
call dword [sym.imp.USER32.dll_EnumWindows]
cmp dword [ebp + 8], 0
je 0x409137
mov ecx, edi
call fcn.00406eb2
mov eax, dword [0x5514ec]
and dword [eax + 0x5dc], 0xffffffbf
cmp dword [esi + 0x24], 2
je 0x409175
mov eax, dword [0x5514ec]
test byte [eax + 0x5dc], 8
je 0x409175
push 1
push dword [ebp - 0x1c]
mov dword [esi + 0x24], ebx
push 0x41b
push dword [ebp - 0x10]
mov dword [edi + 0x28], ebx
call fcn.0044c480
mov eax, dword [0x5514ec]
add esp, 0x10
mov dword [ebp - 0x14], ebx
and dword [eax + 0x5dc], 0xffffffbf
mov ecx, dword [ebp - 0x10]
mov dword [edi + 0x2c], ebx
call fcn.0040b9a5
mov eax, dword [ebp - 0x14]
jmp 0x408d00