Function at 0x468a96
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x34
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0x14]
push edi
call fcn.00410790
lea esi, [ebx + 0xbc]
call fcn.00410790
mov edx, dword [ebp + 0xc]
mov al, byte [ebp + 0x24]
mov cl, byte [ebp + 0x20]
lea edi, [ebx + 0x14]
push edx
mov esi, edi
mov byte [ebx + 4], al
mov byte [ebx + 5], cl
call fcn.0040f2c0
mov eax, dword [ebp + 0x10]
lea esi, [ebx + 0x24]
push eax
call fcn.0040f2c0
lea eax, [ebx + 0x8c]
push 0x4838c0
call fcn.00406410
mov ecx, dword [ebp + 0x18]
xor eax, eax
mov dword [ebx + 0x10], ecx
lea ecx, [esp + 0x10]
mov dword [ebx + 0x9c], 1
mov byte [ebx + 0xc], 1
mov dword [ebx + 8], eax
mov dword [ebx + 0xa0], eax
mov dword [ebx + 0xb4], eax
call fcn.004061f0
lea ecx, [esp + 0x20]
call fcn.004061f0
lea ecx, [esp + 0x30]
call fcn.004061f0
mov eax, dword [ebx + 0x10]
test eax, eax
jge 0x468b45
push eax
call fcn.00417efb
add esp, 4
mov dword [ebx + 0x10], eax
mov byte [ebx + 0xc], 0
cmp dword [ebx + 0x10], 4
jne 0x468b58
push edi
call fcn.00455d7c
mov dword [ebx + 0x10], 1
push edi
call fcn.004384bf
test al, al
je 0x468bb8
push esi
call fcn.004384bf
test al, al
je 0x468bb8
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
push ebx
call fcn.00450295
mov edx, dword [ebx]
mov eax, dword [edx]
mov edx, dword [ebp + 0x14]
lea ecx, [esp + 0xc]
push ecx
mov dword [esp + 0x10], eax
push edx
call fcn.00436ae4
lea ecx, [esp + 0x30]
call fcn.004066f0
lea ecx, [esp + 0x20]
call fcn.004066f0
lea ecx, [esp + 0x10]
call fcn.004066f0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
xor edi, edi
lea esi, [ebx + 0x14]
call fcn.0040fc50
cmp word [eax], 0x5b
jne 0x468fca
mov eax, dword [ebx + 0x18]
lea edi, [eax - 1]
lea esi, [ebx + 0x14]
call fcn.0040fc50
cmp word [eax], 0x5d
jne 0x468fca
mov edi, dword [ebx + 0x18]
mov dword [esp + 0xc], 1
sub edi, 2
lea esp, [esp]
push edi
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x1c]
push edx
lea eax, [ebx + 0x14]
push eax
call fcn.004560ee
test al, al
je 0x468fca
lea eax, [esp + 0x10]
push str.LAST
push eax
call fcn.004384cd
add esp, 8
test al, al
jne 0x468edc
lea ecx, [esp + 0x10]
push str.ACTIVE
push ecx
call fcn.004384cd
add esp, 8
test al, al
jne 0x468f32
lea edx, [esp + 0x10]
push 0x483b8c
push edx
call fcn.004384cd
add esp, 8
test al, al
jne 0x468f51
lea eax, [esp + 0x10]
push str.REGEXPTITLE
push eax
call fcn.004384cd
add esp, 8
test al, al
je 0x468cd0
mov eax, dword [ebx + 8]
test al, 1
jne 0x468f78
or eax, 2
lea esi, [ebx + 0x34]
mov dword [ebx + 8], eax
call fcn.0040ec40
lea ecx, [esp + 0x20]
push ecx
push esi
call fcn.00468a04
test eax, eax
je 0x468bf6
lea ecx, [esp + 0x30]
call fcn.004066f0
lea ecx, [esp + 0x20]
call fcn.004066f0
lea ecx, [esp + 0x10]
call fcn.004066f0
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
lea edx, [esp + 0x10]
push str.CLASS
push edx
call fcn.004384cd
add esp, 8
test al, al
je 0x468cff
or dword [ebx + 8], 8
lea eax, [esp + 0x20]
push eax
lea esi, [ebx + 0x8c]
call fcn.0040f2c0
jmp 0x468bf6
lea ecx, [esp + 0x10]
push str.REGEXPCLASS
push ecx
call fcn.004384cd
add esp, 8
test al, al
je 0x468d2b
or dword [ebx + 8], 0x10
lea esi, [ebx + 0x60]
call fcn.0040ec40
lea edx, [esp + 0x20]
push edx
jmp 0x468c99
lea eax, [esp + 0x10]
push str.XYWH
push eax
call fcn.004384cd
add esp, 8
test al, al
je 0x468d60
mov ecx, dword [esp + 0x20]
or dword [ebx + 8], 0x80
push ecx
call fcn.0041521b
add esp, 4
mov dword [ebx + 0xa4], eax
jmp 0x468bf6
lea edx, [esp + 0x10]
push 0x483a80
push edx
call fcn.004384cd
add esp, 8
test al, al
je 0x468d95
mov eax, dword [esp + 0x20]
or dword [ebx + 8], 0x100
push eax
call fcn.0041521b
add esp, 4
mov dword [ebx + 0xa8], eax
jmp 0x468bf6
lea ecx, [esp + 0x10]
push 0x483a84
push ecx
call fcn.004384cd
add esp, 8
test al, al
je 0x468dca
mov edx, dword [esp + 0x20]
or dword [ebx + 8], 0x200
push edx
call fcn.0041521b
add esp, 4
mov dword [ebx + 0xac], eax
jmp 0x468bf6
lea eax, [esp + 0x10]
push 0x483a88
push eax
call fcn.004384cd
add esp, 8
test al, al
je 0x468dff
mov ecx, dword [esp + 0x20]
or dword [ebx + 8], 0x400
push ecx
call fcn.0041521b
add esp, 4
mov dword [ebx + 0xb0], eax
jmp 0x468bf6
lea edx, [esp + 0x10]
push 0x483a8c
push edx
call fcn.004384cd
add esp, 8
test al, al
je 0x468e31
mov eax, dword [esp + 0x20]
or dword [ebx + 8], 0x20
push eax
call fcn.0041521b
add esp, 4
mov dword [ebx + 0x9c], eax
jmp 0x468bf6
lea ecx, [esp + 0x10]
push 0x483b74
push ecx
call fcn.004384cd
add esp, 8
test al, al
je 0x468e66
lea edx, [esp + 0x20]
push 0x4838c0
push edx
call fcn.004384cd
add esp, 8
test al, al
je 0x468eb5
or dword [ebx + 8], 0x40
jmp 0x468bf6
lea eax, [esp + 0x10]
push str.TITLE
push eax
call fcn.004384cd
add esp, 8
test al, al
je 0x468ea0
mov eax, dword [ebx + 8]
test al, 2
jne 0x468fa1
lea ecx, [esp + 0x20]
or eax, 1
push ecx
lea esi, [esp + 0x34]
mov dword [ebx + 8], eax
call fcn.0040f2c0
jmp 0x468bf6
lea edx, [esp + 0x10]
push edx
call fcn.0043bc2f
add esp, 4
test al, al
je 0x468bf6
lea ecx, [esp + 0x30]
call fcn.004066f0
lea ecx, [esp + 0x20]
call fcn.004066f0
lea ecx, [esp + 0x10]
call fcn.004066f0
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
lea eax, [esp + 0x20]
push 0x4838c0
push eax
call fcn.004384cd
add esp, 8
test al, al
je 0x468eb5
mov ebx, dword [ebx]
test ebx, ebx
je 0x468f0c
mov ecx, dword [ebx]
mov eax, dword [ebp + 0x14]
lea edx, [esp + 0xc]
push edx
mov dword [esp + 0x10], ecx
push eax
jmp 0x468b8a
lea ecx, [esp + 0x30]
call fcn.004066f0
lea ecx, [esp + 0x20]
call fcn.004066f0
lea ecx, [esp + 0x10]
call fcn.004066f0
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
lea ecx, [esp + 0x20]
push 0x4838c0
push ecx
call fcn.004384cd
add esp, 8
test al, al
je 0x468eb5
jmp 0x468b6c
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0xc]
push eax
push ecx
call fcn.00438845
mov esi, dword [esp + 0x14]
add esp, 8
push esi
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x468f0c
push esi
jmp 0x468b73
lea ecx, [esp + 0x30]
call fcn.004066f0
lea ecx, [esp + 0x20]
call fcn.004066f0
lea ecx, [esp + 0x10]
call fcn.004066f0
mov eax, 0xfffffffd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
lea ecx, [esp + 0x30]
call fcn.004066f0
lea ecx, [esp + 0x20]
call fcn.004066f0
lea ecx, [esp + 0x10]
call fcn.004066f0
mov eax, 0xfffffffc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
lea eax, [esp + 0x30]
push eax
call fcn.004384bf
test al, al
jne 0x468fe5
lea ecx, [esp + 0x30]
push ecx
lea esi, [ebx + 0x14]
call fcn.0040f2c0
cmp dword [ebx + 8], 0
jne 0x468ff2
mov dword [ebx + 8], 1
or dword [ebx + 8], 4
cmp byte [ebx + 0xc], 0
jne 0x469005
lea eax, [ebx + 0x24]
push eax
call fcn.0044ded2
test byte [ebx + 8], 1
je 0x46901a
cmp byte [ebx + 0xc], 0
jne 0x46901a
lea eax, [ebx + 0x14]
push eax
call fcn.0044ded2
cmp byte [ebp + 0x1c], 0
push ebx
push 0x44fd2c
je 0x469035
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnumChildWindows]
jmp 0x46903b
call dword [sym.imp.USER32.dll_EnumWindows]
mov edi, dword [ebp + 0x14]
lea esi, [ebx + 0xbc]
push esi
push edi
call fcn.004484c1
call fcn.00410790
cmp dword [ebx + 0xb4], 1
jl 0x469067
mov edx, dword [edi + 4]
mov eax, dword [edx]
mov ecx, dword [eax]
push ecx
push ebx
call fcn.00450295
mov ebx, dword [ebx + 0xb4]
lea ecx, [esp + 0x30]
call fcn.004066f0
lea ecx, [esp + 0x20]
call fcn.004066f0
lea ecx, [esp + 0x10]
call fcn.004066f0
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 0x20