Function at 0x4055f6
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
mov esi, dword [ebp + 0x14]
push edi
call fcn.004090a5
mov edi, dword [ebp + 8]
lea esi, [edi + 0xb0]
mov dword [ebp - 8], esi
call fcn.004090a5
mov al, byte [ebp + 0x24]
mov ebx, dword [ebp + 0xc]
mov byte [edi + 4], al
mov al, byte [ebp + 0x20]
lea esi, [edi + 0x14]
mov byte [edi + 5], al
mov eax, esi
mov dword [ebp + 0x24], esi
call fcn.0040fe80
mov ebx, dword [ebp + 0x10]
lea eax, [edi + 0x20]
mov dword [ebp - 4], eax
call fcn.0040fe80
lea eax, [edi + 0x84]
push 0x46ad3e
mov dword [ebp + 0xc], eax
call fcn.0040fea9
mov eax, dword [ebp + 0x18]
xor ebx, ebx
mov dword [edi + 0x10], eax
xor eax, eax
inc ebx
lea ecx, [ebp - 0x14]
mov dword [edi + 0x90], ebx
mov byte [edi + 0xc], bl
mov dword [edi + 8], eax
mov dword [edi + 0x94], eax
mov dword [edi + 0xa8], eax
call fcn.0040fcfb
lea ecx, [ebp - 0x20]
call fcn.0040fcfb
mov eax, dword [edi + 0x10]
test eax, eax
jge 0x40569d
push eax
call fcn.00451af2
pop ecx
mov dword [edi + 0x10], eax
mov byte [edi + 0xc], 0
cmp dword [edi + 0x10], 4
jne 0x4056ad
mov eax, esi
call fcn.0040532d
mov dword [edi + 0x10], ebx
mov edx, dword [edi + 0x18]
test edx, edx
jne 0x4056f5
cmp dword [edi + 0x24], edx
jne 0x4056f5
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
mov esi, edi
call fcn.0040497c
mov eax, dword [edi]
mov eax, dword [eax]
mov esi, dword [ebp + 0x14]
mov dword [ebp + 0x24], eax
lea eax, [ebp + 0x24]
push eax
call fcn.004076dd
push dword [ebp - 0x20]
call fcn.0044f520
push dword [ebp - 0x14]
call fcn.0044f520
pop ecx
pop ecx
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret 0x20
push 0
mov eax, esi
call fcn.0040fe6a
cmp byte [eax], 0x5b
jne 0x405985
lea eax, [edx - 1]
push eax
mov eax, esi
call fcn.0040fe6a
cmp byte [eax], 0x5d
jne 0x405985
add edx, 0xfffffffe
push edx
lea eax, [ebp - 0x20]
push eax
push esi
lea edi, [ebp + 0x20]
lea eax, [ebp - 0x14]
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0x10], edx
call fcn.004054e1
test al, al
je 0x405982
push str.LAST
lea esi, [ebp - 0x14]
call fcn.0040fff1
test al, al
pop ecx
jne 0x4059de
push str.ACTIVE
call fcn.0040fff1
test al, al
pop ecx
jne 0x405a2e
push str.HANDLE
call fcn.0040fff1
test al, al
pop ecx
jne 0x405a53
push str.REGEXPTITLE
call fcn.0040fff1
test al, al
pop ecx
je 0x4057a1
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 8]
test bl, al
jne 0x405a70
or eax, 2
mov dword [ecx + 8], eax
lea esi, [ecx + 0x2c]
jmp 0x4057de
push str.CLASS
lea esi, [ebp - 0x14]
call fcn.0040fff1
test al, al
pop ecx
je 0x4057c2
mov eax, dword [ebp + 8]
or dword [eax + 8], 8
mov eax, dword [ebp + 0xc]
jmp 0x40593f
push str.REGEXPCLASS
lea esi, [ebp - 0x14]
call fcn.0040fff1
test al, al
pop ecx
je 0x4057fc
mov eax, dword [ebp + 8]
or dword [eax + 8], 0x10
lea esi, [eax + 0x58]
call fcn.00407772
lea eax, [ebp - 0x20]
mov ecx, esi
call fcn.004077c5
test eax, eax
je 0x405962
push 0xfffffffffffffffe
jmp 0x405a72
push str.XYWH
lea esi, [ebp - 0x14]
call fcn.0040fff1
test al, al
pop ecx
je 0x40582c
mov esi, dword [ebp + 8]
push dword [ebp - 0x20]
or dword [esi + 8], 0x80
call fcn.00451549
pop ecx
mov dword [esi + 0x98], eax
jmp 0x405962
push 0x46b1cc
lea esi, [ebp - 0x14]
call fcn.0040fff1
test al, al
pop ecx
je 0x40585c
mov esi, dword [ebp + 8]
push dword [ebp - 0x20]
or dword [esi + 8], 0x100
call fcn.00451549
pop ecx
mov dword [esi + 0x9c], eax
jmp 0x405962
push 0x46b1d0
lea esi, [ebp - 0x14]
call fcn.0040fff1
test al, al
pop ecx
je 0x40588c
mov esi, dword [ebp + 8]
push dword [ebp - 0x20]
or dword [esi + 8], 0x200
call fcn.00451549
pop ecx
mov dword [esi + 0xa0], eax
jmp 0x405962
push 0x46b1d4
lea esi, [ebp - 0x14]
call fcn.0040fff1
test al, al
pop ecx
je 0x4058bc
mov esi, dword [ebp + 8]
push dword [ebp - 0x20]
or dword [esi + 8], 0x400
call fcn.00451549
pop ecx
mov dword [esi + 0xa4], eax
jmp 0x405962
push 0x46b1d8
lea esi, [ebp - 0x14]
call fcn.0040fff1
test al, al
pop ecx
je 0x4058e6
mov esi, dword [ebp + 8]
push dword [ebp - 0x20]
or dword [esi + 8], 0x20
call fcn.00451549
pop ecx
mov dword [esi + 0x90], eax
jmp 0x405962
push 0x46b25c
lea esi, [ebp - 0x14]
call fcn.0040fff1
test al, al
pop ecx
je 0x405917
push 0x46ad3e
lea esi, [ebp - 0x20]
call fcn.0040fff1
test al, al
pop ecx
je 0x405a29
mov eax, dword [ebp + 8]
or dword [eax + 8], 0x40
jmp 0x405962
push str.TITLE
lea esi, [ebp - 0x14]
call fcn.0040fff1
test al, al
pop ecx
je 0x40594c
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 8]
test al, 2
jne 0x405a75
or eax, ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp + 0x24]
lea ebx, [ebp - 0x20]
call fcn.0040fe80
xor ebx, ebx
inc ebx
jmp 0x405962
push 0x46ad3e
lea esi, [ebp - 0x14]
call fcn.0040fff1
test al, al
pop ecx
je 0x405a29
push dword [ebp + 0x10]
lea eax, [ebp - 0x20]
push eax
push dword [ebp + 0x24]
lea edi, [ebp + 0x20]
lea eax, [ebp - 0x14]
call fcn.004054e1
test al, al
jne 0x40573d
mov esi, dword [ebp + 0x24]
mov edi, dword [ebp + 8]
cmp dword [edi + 8], 0
jne 0x40598e
mov dword [edi + 8], ebx
or dword [edi + 8], 4
cmp byte [edi + 0xc], 0
jne 0x4059a6
mov eax, dword [ebp - 4]
push dword [eax + 4]
push dword [eax]
call dword [sym.imp.USER32.dll_CharUpperBuffA]
test byte [edi + 8], bl
je 0x4059bc
cmp byte [edi + 0xc], 0
jne 0x4059bc
push dword [esi + 4]
push dword [esi]
call dword [sym.imp.USER32.dll_CharUpperBuffA]
cmp byte [ebp + 0x1c], 0
push edi
push 0x405ab6
je 0x405a79
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnumChildWindows]
jmp 0x405a7f
push 0x46ad3e
lea esi, [ebp - 0x20]
call fcn.0040fff1
test al, al
pop ecx
je 0x405a29
mov eax, dword [ebp + 8]
mov eax, dword [eax]
test eax, eax
je 0x405a25
mov eax, dword [eax]
mov esi, dword [ebp + 0x14]
mov dword [ebp + 0x24], eax
lea eax, [ebp + 0x24]
push eax
call fcn.004076dd
mov edi, ebx
push dword [ebp - 0x20]
call fcn.0044f520
push dword [ebp - 0x14]
call fcn.0044f520
pop ecx
pop ecx
mov eax, edi
jmp 0x4056ee
xor edi, edi
jmp 0x405a0c
or edi, 0xffffffff
jmp 0x405a0c
push 0x46ad3e
lea esi, [ebp - 0x20]
call fcn.0040fff1
test al, al
pop ecx
je 0x405a29
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
mov esi, dword [ebp + 8]
call fcn.0040497c
mov eax, dword [esi]
jmp 0x4059f9
mov edi, dword [ebp - 0x20]
lea esi, [ebp + 0x24]
call fcn.0040f73c
push dword [ebp + 0x24]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x405a25
push dword [ebp + 0x24]
jmp 0x405a47
push 0xfffffffffffffffd
pop edi
jmp 0x405a0c
push 0xfffffffffffffffc
jmp 0x405a72
call dword [sym.imp.USER32.dll_EnumWindows]
mov esi, dword [ebp - 8]
mov eax, dword [ebp + 0x14]
mov ebx, esi
call fcn.00405eb7
call fcn.004090a5
cmp dword [edi + 0xa8], 1
jl 0x405aab
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 4]
mov eax, dword [eax]
push dword [eax]
mov esi, edi
call fcn.0040497c
mov edi, dword [edi + 0xa8]
jmp 0x405a0c