Function at 0x41cbf0
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
mov ecx, 5
push 0
push 0
dec ecx
jne 0x41cbf8
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x41cdb1
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_DateiList]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_HandleList]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_ClassList]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_CaptionList]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_VisibleList]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_ThreadIdList]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_PIDList]
mov edx, dword [eax]
call dword [edx + 0x44]
push 0
push sym.NLSAgtConfig.exe__Processviewer_EnumWindowsProc_qqsuii
call sub.USER32.DLL_EnumWindows
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_DateiList]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
push ebx
mov eax, sym.NLSAgtConfig.exe__Processviewer_ProcessInfo
mov ecx, 1
mov edx, dword [sym.NLSAgtConfig.exe___xp_30Processviewer_ProcessViewer__1]
call fcn.0045201c
add esp, 4
dec ebx
test ebx, ebx
jl 0x41cd96
inc ebx
mov dword [ebp - 4], ebx
xor ebx, ebx
lea ecx, [ebp - 0xc]
mov edx, ebx
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_DateiList]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.0043d87c
mov ecx, dword [ebp - 8]
mov edx, ebx
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_DateiList]
mov esi, dword [eax]
call dword [esi + 0x20]
mov eax, ebx
shl eax, 3
sub eax, ebx
mov edx, dword [sym.NLSAgtConfig.exe__Processviewer_ProcessInfo]
lea esi, [edx + eax*4]
lea ecx, [ebp - 0x10]
mov edx, ebx
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_DateiList]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x10]
mov eax, esi
call fcn.00450b00
lea ecx, [ebp - 0x14]
mov edx, ebx
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_CaptionList]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x14]
lea eax, [esi + 4]
call fcn.00450b00
lea ecx, [ebp - 0x18]
mov edx, ebx
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_VisibleList]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x18]
mov edx, 0x41cdc8
call fcn.00450ea8
sete al
mov byte [esi + 8], al
lea ecx, [ebp - 0x1c]
mov edx, ebx
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_HandleList]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x1c]
call fcn.0043ddfc
mov dword [esi + 0xc], eax
lea ecx, [ebp - 0x20]
mov edx, ebx
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_ClassList]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x20]
lea eax, [esi + 0x10]
call fcn.00450b00
lea ecx, [ebp - 0x24]
mov edx, ebx
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_ThreadIdList]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x24]
call fcn.0043ddfc
mov dword [esi + 0x14], eax
lea ecx, [ebp - 0x28]
mov edx, ebx
mov eax, dword [sym.NLSAgtConfig.exe__Processviewer_PIDList]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x28]
call fcn.0043ddfc
mov dword [esi + 0x18], eax
inc ebx
dec dword [ebp - 4]
jne 0x41cc96
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41cdb8
lea eax, [ebp - 0x28]
mov edx, 9
call fcn.00450ad0
ret