Function at 0x5600bc
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x56062d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
xor edx, edx
call fcn.0043c7d0
mov eax, dword [ebp - 4]
mov byte [eax + 0x36a], 1
xor edx, edx
push ebp
push 0x56060b
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
mov byte [eax + 0x369], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
xor edx, edx
call fcn.0043c7d0
xor edx, edx
push ebp
push 0x560173
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x324]
cmp byte [eax + 0x57], 0
je 0x560169
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x320]
cmp byte [edx + 0x57], 0
je 0x560169
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x304]
cmp byte [edx + 0x57], 0
je 0x560169
mov edx, dword [eax]
call dword [edx + 0xc4]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x56017d
mov eax, dword [ebp - 4]
call fcn.0055c7e4
mov eax, dword [ebp - 4]
cmp byte [eax + 0x369], 0
je 0x5601a5
mov eax, 0x560644
call fcn.0055bb50
call fcn.0040470c
jmp 0x560612
xor edx, edx
push ebp
push 0x5601f2
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x324]
cmp byte [eax + 0x57], 0
je 0x5601e8
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x320]
cmp byte [edx + 0x57], 0
je 0x5601e8
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x304]
cmp byte [edx + 0x57], 0
je 0x5601e8
mov edx, dword [eax]
call dword [edx + 0xc4]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5601fc
mov byte [0x727138], 1
push 0
push 0x55f4b8
call sub.user32.dll_EnumWindows
mov byte [0x727138], 0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x369], 0
je 0x560236
mov eax, 0x560660
call fcn.0055bb50
call fcn.0040470c
jmp 0x560612
mov eax, dword [ebp - 4]
cmp dword [eax + 0x348], 0
je 0x560258
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
call fcn.0040a6f4
test al, al
jne 0x560327
lea eax, [ebp - 0x14]
mov edx, dword [0x724ed8]
mov edx, dword [edx]
call fcn.00404e90
mov edx, dword [ebp - 0x14]
mov cl, 0x20
mov eax, 0x56067c
call fcn.00546a44
test al, al
je 0x56028f
mov eax, dword [ebp - 4]
add eax, 0x348
mov edx, 0x56068c
call fcn.00404cdc
jmp 0x5602a1
mov eax, dword [ebp - 4]
add eax, 0x348
mov edx, 0x56069c
call fcn.00404cdc
push 0x41030
push 0x5606ac
mov eax, dword [ebp - 4]
push dword [eax + 0x348]
push 0x5606dc
push 0x5606f0
mov eax, dword [ebp - 4]
push dword [eax + 0x348]
push 0x5606fc
push 0x5606f0
push 0x5606f0
push 0x560718
mov eax, dword [ebp - 4]
push dword [eax + 0x348]
push 0x560734
lea eax, [ebp - 0x18]
mov edx, 0xb
call fcn.00405018
mov eax, dword [ebp - 0x18]
call fcn.00405158
mov edx, eax
mov ecx, 0x560768
mov eax, dword [0x724f40]
mov eax, dword [eax]
call fcn.0046f508
mov eax, dword [0x724f40]
mov eax, dword [eax]
call fcn.0046f464
call fcn.0040470c
jmp 0x560612
mov eax, dword [ebp - 4]
cmp byte [eax + 0x369], 0
je 0x560347
mov eax, 0x56077c
call fcn.0055bb50
call fcn.0040470c
jmp 0x560612
push 0x560798
mov eax, dword [ebp - 4]
push dword [eax + 0x348]
push 0x5607b4
mov eax, dword [ebp - 4]
push dword [eax + 0x34c]
push 0x5607c0
mov eax, dword [ebp - 4]
push dword [eax + 0x344]
push 0x5607cc
lea eax, [ebp - 0x1c]
mov edx, 7
call fcn.00405018
mov eax, dword [ebp - 0x1c]
call fcn.0055bb50
push 0
mov eax, dword [ebp - 4]
push dword [eax + 0x34c]
push 0x5607c0
mov eax, dword [ebp - 4]
push dword [eax + 0x344]
push 0x5607cc
lea eax, [ebp - 0x20]
mov edx, 4
call fcn.00405018
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x348]
mov ecx, 5
call fcn.0055bc04
test eax, eax
jg 0x5603e6
mov eax, dword [0x724f40]
mov eax, dword [eax]
call fcn.0046f464
call fcn.0040470c
jmp 0x560612
mov eax, 0x5607d8
call fcn.0055bb50
call fcn.0040c440
fstp qword [ebp - 0x10]
wait
jmp 0x56043d
push 0
push 0x55f4b8
call sub.user32.dll_EnumWindows
mov eax, dword [ebp - 4]
cmp byte [eax + 0x368], 0
je 0x56041d
call fcn.0040470c
jmp 0x560612
mov eax, dword [ebp - 4]
cmp byte [eax + 0x369], 0
je 0x56043d
mov eax, 0x560808
call fcn.0055bb50
call fcn.0040470c
jmp 0x560612
mov eax, dword [ebp - 4]
cmp dword [eax + 0x360], 0
ja 0x560470
call fcn.0040c440
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call fcn.00535014
cmp edx, 0
jne 0x56046e
cmp eax, 0x3e80
jb 0x5603fb
jmp 0x560470
jl 0x5603fb
mov eax, dword [ebp - 4]
cmp dword [eax + 0x360], 0
jbe 0x560488
mov eax, 0x560824
call fcn.0055bb50
jmp 0x560492
mov eax, 0x560854
call fcn.0055bb50
mov eax, dword [ebp - 4]
cmp byte [eax + 0x368], 0
je 0x5604a8
call fcn.0040470c
jmp 0x560612
mov eax, dword [ebp - 4]
cmp byte [eax + 0x369], 0
je 0x5604c8
mov eax, 0x560888
call fcn.0055bb50
call fcn.0040470c
jmp 0x560612
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x360]
test ebx, ebx
jbe 0x5605b4
push ebx
call sub.user32.dll_IsWindow
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x5605b4
mov eax, 0x5608a4
call fcn.0055bb50
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x360], edx
call fcn.0040c440
fstp qword [ebp - 0x10]
wait
jmp 0x56055b
mov eax, dword [ebp - 4]
cmp byte [eax + 0x368], 0
je 0x560523
call fcn.0040470c
jmp 0x560612
mov eax, dword [ebp - 4]
cmp byte [eax + 0x369], 0
je 0x560543
mov eax, 0x5608d0
call fcn.0055bb50
call fcn.0040470c
jmp 0x560612
mov eax, dword [0x724f40]
mov eax, dword [eax]
call fcn.0046f1bc
push 0
push 0x55f4b8
call sub.user32.dll_EnumWindows
mov eax, dword [ebp - 4]
cmp dword [eax + 0x360], 0
ja 0x560592
call fcn.0040c440
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call fcn.00535014
cmp edx, 0
jne 0x56058c
cmp eax, 0x640
jb 0x56050d
jmp 0x560592
jl 0x56050d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x360], 0
jbe 0x5605aa
mov eax, 0x5608ec
call fcn.0055bb50
jmp 0x5605b4
mov eax, 0x56091c
call fcn.0055bb50
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x560612
mov eax, dword [ebp - 4]
mov byte [eax + 0x36a], 0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x368], 0
jne 0x56060a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov dl, 1
call fcn.0043c7d0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov edx, 1
call fcn.0043c7e0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x338]
mov dl, 1
call fcn.0043c7d0
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x560634
lea eax, [ebp - 0x20]
mov edx, 4
call fcn.00404cac
ret