Function at 0x465b81
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x34
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0x14]
push edi
call fcn.004118b0
lea esi, [ebx + 0xbc]
call fcn.004118b0
mov edx, dword [ebp + 0xc]
mov al, byte [ebp + 0x24]
mov cl, byte [ebp + 0x20]
lea edi, [ebx + 0x14]
push edx
mov esi, edi
mov byte [ebx + 4], al
mov byte [ebx + 5], cl
call fcn.0040ee20
mov eax, dword [ebp + 0x10]
lea esi, [ebx + 0x24]
push eax
call fcn.0040ee20
lea eax, [ebx + 0x8c]
push 0x47f878
call fcn.00401b10
mov ecx, dword [ebp + 0x18]
xor eax, eax
mov dword [ebx + 0x10], ecx
lea ecx, [esp + 0x10]
mov dword [ebx + 0x9c], 1
mov byte [ebx + 0xc], 1
mov dword [ebx + 8], eax
mov dword [ebx + 0xa0], eax
mov dword [ebx + 0xb4], eax
call fcn.00407c40
lea ecx, [esp + 0x20]
call fcn.00407c40
lea ecx, [esp + 0x30]
call fcn.00407c40
mov eax, dword [ebx + 0x10]
test eax, eax
jge 0x465c30
push eax
call fcn.004148dc
add esp, 4
mov dword [ebx + 0x10], eax
mov byte [ebx + 0xc], 0
cmp dword [ebx + 0x10], 4
jne 0x465c43
push edi
call fcn.0045532e
mov dword [ebx + 0x10], 1
push edi
call fcn.004373b3
test al, al
je 0x465ca3
push esi
call fcn.004373b3
test al, al
je 0x465ca3
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
push ebx
call fcn.0044dcff
mov edx, dword [ebx]
mov eax, dword [edx]
mov edx, dword [ebp + 0x14]
lea ecx, [esp + 0xc]
push ecx
mov dword [esp + 0x10], eax
push edx
call fcn.00435fb4
lea ecx, [esp + 0x30]
call fcn.0040c430
lea ecx, [esp + 0x20]
call fcn.0040c430
lea ecx, [esp + 0x10]
call fcn.0040c430
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
xor edi, edi
lea esi, [ebx + 0x14]
call fcn.0040f740
cmp word [eax], 0x5b
jne 0x4660b5
mov eax, dword [ebx + 0x18]
lea edi, [eax - 1]
lea esi, [ebx + 0x14]
call fcn.0040f740
cmp word [eax], 0x5d
jne 0x4660b5
mov edi, dword [ebx + 0x18]
mov dword [esp + 0xc], 1
sub edi, 2
lea esp, [esp]
push edi
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x1c]
push edx
lea eax, [ebx + 0x14]
push eax
call fcn.00455685
test al, al
je 0x4660b5
lea eax, [esp + 0x10]
push str.LAST
push eax
call fcn.004373c1
add esp, 8
test al, al
jne 0x465fc7
lea ecx, [esp + 0x10]
push str.ACTIVE
push ecx
call fcn.004373c1
add esp, 8
test al, al
jne 0x46601d
lea edx, [esp + 0x10]
push 0x47fb14
push edx
call fcn.004373c1
add esp, 8
test al, al
jne 0x46603c
lea eax, [esp + 0x10]
push str.REGEXPTITLE
push eax
call fcn.004373c1
add esp, 8
test al, al
je 0x465dbb
mov eax, dword [ebx + 8]
test al, 1
jne 0x466063
or eax, 2
lea esi, [ebx + 0x34]
mov dword [ebx + 8], eax
call fcn.0040e8f0
lea ecx, [esp + 0x20]
push ecx
push esi
call fcn.00465aef
test eax, eax
je 0x465ce1
lea ecx, [esp + 0x30]
call fcn.0040c430
lea ecx, [esp + 0x20]
call fcn.0040c430
lea ecx, [esp + 0x10]
call fcn.0040c430
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
lea edx, [esp + 0x10]
push str.CLASS
push edx
call fcn.004373c1
add esp, 8
test al, al
je 0x465dea
or dword [ebx + 8], 8
lea eax, [esp + 0x20]
push eax
lea esi, [ebx + 0x8c]
call fcn.0040ee20
jmp 0x465ce1
lea ecx, [esp + 0x10]
push str.REGEXPCLASS
push ecx
call fcn.004373c1
add esp, 8
test al, al
je 0x465e16
or dword [ebx + 8], 0x10
lea esi, [ebx + 0x60]
call fcn.0040e8f0
lea edx, [esp + 0x20]
push edx
jmp 0x465d84
lea eax, [esp + 0x10]
push str.XYWH
push eax
call fcn.004373c1
add esp, 8
test al, al
je 0x465e4b
mov ecx, dword [esp + 0x20]
or dword [ebx + 8], 0x80
push ecx
call fcn.004145ab
add esp, 4
mov dword [ebx + 0xa4], eax
jmp 0x465ce1
lea edx, [esp + 0x10]
push 0x47fa08
push edx
call fcn.004373c1
add esp, 8
test al, al
je 0x465e80
mov eax, dword [esp + 0x20]
or dword [ebx + 8], 0x100
push eax
call fcn.004145ab
add esp, 4
mov dword [ebx + 0xa8], eax
jmp 0x465ce1
lea ecx, [esp + 0x10]
push 0x47fa0c
push ecx
call fcn.004373c1
add esp, 8
test al, al
je 0x465eb5
mov edx, dword [esp + 0x20]
or dword [ebx + 8], 0x200
push edx
call fcn.004145ab
add esp, 4
mov dword [ebx + 0xac], eax
jmp 0x465ce1
lea eax, [esp + 0x10]
push 0x47fa10
push eax
call fcn.004373c1
add esp, 8
test al, al
je 0x465eea
mov ecx, dword [esp + 0x20]
or dword [ebx + 8], 0x400
push ecx
call fcn.004145ab
add esp, 4
mov dword [ebx + 0xb0], eax
jmp 0x465ce1
lea edx, [esp + 0x10]
push 0x47fa14
push edx
call fcn.004373c1
add esp, 8
test al, al
je 0x465f1c
mov eax, dword [esp + 0x20]
or dword [ebx + 8], 0x20
push eax
call fcn.004145ab
add esp, 4
mov dword [ebx + 0x9c], eax
jmp 0x465ce1
lea ecx, [esp + 0x10]
push 0x47fafc
push ecx
call fcn.004373c1
add esp, 8
test al, al
je 0x465f51
lea edx, [esp + 0x20]
push 0x47f878
push edx
call fcn.004373c1
add esp, 8
test al, al
je 0x465fa0
or dword [ebx + 8], 0x40
jmp 0x465ce1
lea eax, [esp + 0x10]
push str.TITLE
push eax
call fcn.004373c1
add esp, 8
test al, al
je 0x465f8b
mov eax, dword [ebx + 8]
test al, 2
jne 0x46608c
lea ecx, [esp + 0x20]
or eax, 1
push ecx
lea esi, [esp + 0x34]
mov dword [ebx + 8], eax
call fcn.0040ee20
jmp 0x465ce1
lea edx, [esp + 0x10]
push edx
call fcn.0043a805
add esp, 4
test al, al
je 0x465ce1
lea ecx, [esp + 0x30]
call fcn.0040c430
lea ecx, [esp + 0x20]
call fcn.0040c430
lea ecx, [esp + 0x10]
call fcn.0040c430
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
lea eax, [esp + 0x20]
push 0x47f878
push eax
call fcn.004373c1
add esp, 8
test al, al
je 0x465fa0
mov ebx, dword [ebx]
test ebx, ebx
je 0x465ff7
mov ecx, dword [ebx]
mov eax, dword [ebp + 0x14]
lea edx, [esp + 0xc]
push edx
mov dword [esp + 0x10], ecx
push eax
jmp 0x465c75
lea ecx, [esp + 0x30]
call fcn.0040c430
lea ecx, [esp + 0x20]
call fcn.0040c430
lea ecx, [esp + 0x10]
call fcn.0040c430
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
lea ecx, [esp + 0x20]
push 0x47f878
push ecx
call fcn.004373c1
add esp, 8
test al, al
je 0x465fa0
jmp 0x465c57
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0xc]
push eax
push ecx
call fcn.0043772c
mov esi, dword [esp + 0x14]
add esp, 8
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x465ff7
push esi
jmp 0x465c5e
lea ecx, [esp + 0x30]
call fcn.0040c430
lea ecx, [esp + 0x20]
call fcn.0040c430
lea ecx, [esp + 0x10]
call fcn.0040c430
mov eax, 0xfffffffd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
lea ecx, [esp + 0x30]
call fcn.0040c430
lea ecx, [esp + 0x20]
call fcn.0040c430
lea ecx, [esp + 0x10]
call fcn.0040c430
mov eax, 0xfffffffc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
lea eax, [esp + 0x30]
push eax
call fcn.004373b3
test al, al
jne 0x4660d0
lea ecx, [esp + 0x30]
push ecx
lea esi, [ebx + 0x14]
call fcn.0040ee20
cmp dword [ebx + 8], 0
jne 0x4660dd
mov dword [ebx + 8], 1
or dword [ebx + 8], 4
cmp byte [ebx + 0xc], 0
jne 0x4660f0
lea eax, [ebx + 0x24]
push eax
call fcn.0044bfea
test byte [ebx + 8], 1
je 0x466105
cmp byte [ebx + 0xc], 0
jne 0x466105
lea eax, [ebx + 0x14]
push eax
call fcn.0044bfea
cmp byte [ebp + 0x1c], 0
push ebx
push 0x44dc86
je 0x466120
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnumChildWindows]
jmp 0x466126
call dword [sym.imp.USER32.dll_EnumWindows]
mov edi, dword [ebp + 0x14]
lea esi, [ebx + 0xbc]
push esi
push edi
call fcn.0044680c
call fcn.004118b0
cmp dword [ebx + 0xb4], 1
jl 0x466152
mov edx, dword [edi + 4]
mov eax, dword [edx]
mov ecx, dword [eax]
push ecx
push ebx
call fcn.0044dcff
mov ebx, dword [ebx + 0xb4]
lea ecx, [esp + 0x30]
call fcn.0040c430
lea ecx, [esp + 0x20]
call fcn.0040c430
lea ecx, [esp + 0x10]
call fcn.0040c430
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 0x20