Function at 0x404580
Capabilities:
Enumerate gui resources

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x38
push esi
push edi
push 0x14
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], 0
call fcn.004386f9
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push 0x4043d0
call dword [sym.imp.USER32.dll_EnumWindows]
mov esi, dword [ebp - 0x18]
mov esi, dword [esi]
cmp byte [esi + 0xd], 0
jne 0x404728
mov edi, dword [esi + 0x10]
lea eax, [ebp - 0xc]
push eax
push edi
mov dword [ebp - 0xc], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 0xc]
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 0
push 0
push 0x10
push edi
mov dword [ebp - 8], eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [ebp - 8]
test eax, eax
je 0x4046e2
xor edi, edi
push 0xbb8
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x4046d5
mov ecx, dword [ebx + 0x2c]
test ecx, ecx
je 0x4046c8
mov ax, word [0x4744b0]
lea edx, [ebp - 0x10]
mov dword [ebp - 0x38], 0
push edx
mov word [ebp - 0x38], ax
lea edx, [ebp - 0x20]
mov al, byte [str..WPEEventWindow]
mov dword [ebp - 0x24], 0xf
mov dword [ebp - 0x28], 3
mov byte [ebp - 0x36], al
mov byte [ebp - 0x35], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x38]
push edx
call dword [eax + 8]
mov edx, dword [ebp - 0x24]
cmp edx, 0x10
jb 0x4046c8
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4046be
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048e8
push edx
push ecx
call fcn.004386eb
add esp, 8
mov eax, dword [ebp - 8]
inc edi
cmp edi, 5
jl 0x404624
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
inc dword [ebp - 4]
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
je 0x404708
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x404704
cmp esi, dword [eax + 8]
jne 0x404704
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x4046f4
mov esi, eax
jmp 0x40471e
mov esi, eax
mov ecx, dword [esi]
cmp byte [ecx + 0xd], 0
jne 0x40471e
mov eax, dword [ecx]
mov esi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x404712
cmp byte [esi + 0xd], 0
je 0x4045e2
mov edi, dword [sym.imp.USER32.dll_FindWindowW]
push 0
push 0x4744b4
call edi
mov esi, eax
test esi, esi
jne 0x404779
push eax
push 0x4744b4
push eax
push 0xfffffffffffffffd
call dword [sym.imp.USER32.dll_FindWindowExW]
mov esi, eax
test esi, esi
jne 0x404779
push eax
push str.WPETrayWindow
call edi
mov esi, eax
test esi, esi
jne 0x404779
push eax
push str.WPETrayWindow
push eax
push 0xfffffffffffffffd
call dword [sym.imp.USER32.dll_FindWindowExW]
mov esi, eax
test esi, esi
je 0x4048a8
lea eax, [ebp - 0xc]
mov dword [ebp - 0xc], 0
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 0xc]
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 0
push 0
push 0x10
push esi
mov edi, eax
call dword [sym.imp.USER32.dll_PostMessageW]
test edi, edi
je 0x4048a8
cmp dword [ebx + 0x2c], 0
je 0x40488f
push 0x30
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
call fcn.00416ed0
movups xmm0, xmmword [str.core_updater_status_closing_processes_wait_quit]
mov ecx, eax
mov dword [ebp - 0x28], 0x2f
mov dword [ebp - 0x24], 0x2f
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x20], 0
movups xmmword [ecx], xmm0
mov dword [ebp - 0x1c], 0
movups xmm0, xmmword [0x474500]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [0x474510]
movq qword [ecx + 0x20], xmm0
mov eax, dword [0x474518]
mov dword [ecx + 0x28], eax
mov ax, word [0x47451c]
mov word [ecx + 0x2c], ax
mov al, byte [0x47451e]
mov byte [ecx + 0x2e], al
mov byte [ecx + 0x2f], 0
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebx + 0x2c]
test ecx, ecx
je 0x4048e3
mov eax, dword [ecx]
lea edx, [ebp - 0x10]
push edx
lea edx, [ebp - 0x20]
push edx
lea edx, [ebp - 0x38]
push edx
call dword [eax + 8]
mov edx, dword [ebp - 0x24]
cmp edx, 0x10
jb 0x40488f
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x404885
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048e8
push edx
push ecx
call fcn.004386eb
add esp, 8
push 0xbb8
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 4]
inc eax
jmp 0x4048ab
mov eax, dword [ebp - 4]
test eax, eax
jle 0x4048ba
push 0x7d0
push ebp
mov ebp, esp
sub esp, 0x1278
push ebx
push esi
adc al, byte [eax]
add byte [ebx + 0x56], dl
push edi
mov dword [ebp - 0x8a4], 1
push eax
sub eax, 0x880a
jmp 0x4048d9
xor eax, 0x3235
call 0x4048ec
add byte [0x424e3642], dh
add byte [eax], al
xor eax, 0x424e3642
dec esi
inc edx
xor dh, byte [0x5804c483]
push esi
push eax
add esp, 4
or esi, 0x828f
pop esi
imul eax, dword [ebp - 0x8a4], 0x932
add eax, 0x16f3673a
imul ecx, dword [ebp - 0x8a4], 0x932
sub eax, ecx
xor eax, 0x8a134
imul eax, dword [ebp - 0x8a4]
imul edx, dword [ebp - 0x8a4], 0x932
sub eax, edx
mov dword [ebp - 0x8a8], eax
push edx
push ecx
add esp, 4
xor edx, 0x168bc
or edx, 0x15b1a
xor edx, 0x14528
add edx, 0x10f34
pop edx
push ebx
xor ebx, 0x6e86
sub ebx, 0x8149
and ebx, 0x1129f
pop ebx
mov dword [ebp - 0x6c], 1
push eax
push ecx
add esp, 4
xor eax, 0x14bd9
jmp 0x404981
or eax, 0x155a7
pop eax
push edi
push esi
add esp, 4
sub edi, 0x1677d
and edi, 0x5ed4
xor edi, 0x97a7
pop edi
imul eax, dword [ebp - 0x6c], 0x932
add eax, 0x16f3673a
imul ecx, dword [ebp - 0x6c], 0x932
sub eax, ecx
xor eax, 0x1154
imul eax, dword [ebp - 0x6c]
imul edx, dword [ebp - 0x6c], 0x932
sub eax, edx
mov dword [ebp - 0x70], eax
push edx
push ebx
add esp, 4
call fcn.004049dc
add byte [edi + 0x4a413f45], dh
dec ecx