Function at 0x410050
Capabilities:
Enumerate gui resources
Get graphical window text

Disassembly:
sub esp, 0x980
mov eax, dword [0x70635c]
xor eax, esp
mov dword [esp + 0x97c], eax
mov eax, dword [esp + 0x98c]
push ebx
push ebp
mov ebp, dword [esp + 0x990]
push esi
push edi
mov edi, dword [esp + 0x994]
push ecx
push ebp
mov ebx, edx
push ebx
push edi
push str.Called___b____d___n____d___c____s___dwfPolicy____X_
push 0xf
push str..MaBrowsInjector.cpp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov ecx, eax
mov esi, str.MaBrowsInjector::InjectDll
call fcn.00401070
add esp, 0x18
push 0xffffffffffffffff
test edi, edi
je 0x41032d
mov edx, dword [0x70bfb8]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp ebx, 3
jne 0x410116
push str.Edge_Load
push 0x17
push str..MaBrowsInjector.cpp
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov ecx, eax
call fcn.00401070
mov edi, dword [sym.imp.USER32.dll_EnumWindows]
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 8
push ebp
push 0x4110e0
call edi
push 0xc8
mov esi, eax
call ebx
test esi, esi
jne 0x4100f0
mov eax, dword [0x70bfb8]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x41078a
push ebp
call fcn.00410810
add esp, 4
cmp eax, 0x12345
jne 0x410159
push 0x6d5d10
push 0x29
push str..MaBrowsInjector.cpp
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov ecx, eax
mov esi, str.MaBrowsInjector::InjectDll
call fcn.00401070
mov ecx, dword [0x70bfb8]
add esp, 8
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x41078a
cmp eax, 0x54321
jne 0x410315
xor edi, edi
push edi
push str.FindWindow_loop__d_
push 0x33
push str..MaBrowsInjector.cpp
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov ecx, eax
mov esi, str.MaBrowsInjector::InjectDll
call fcn.00401070
add esp, 0xc
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
call fcn.00410810
add esp, 4
cmp eax, 0x12345
je 0x410315
inc edi
cmp edi, 2
jl 0x410166
cmp ebx, 4
jne 0x410315
mov ebp, dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
push 0x6d5d54
push 0x3f
push str..MaBrowsInjector.cpp
call ebp
mov ecx, eax
call fcn.00401070
mov edx, dword [esp + 0x24]
push edx
call fcn.00410810
add esp, 0xc
cmp eax, 0x12345
jne 0x41020f
push 0x6d5d90
push 0x44
push str..MaBrowsInjector.cpp
call ebp
mov ecx, eax
call fcn.00401070
mov edx, dword [0x70bfb8]
add esp, 8
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x41076a
push 0x6d5dac
push 0x48
push str..MaBrowsInjector.cpp
call ebp
mov ecx, eax
mov esi, str.MaBrowsInjector::InjectDll
call fcn.00401070
add esp, 8
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov edi, eax
push edi
push str.h____X_
push 0x4a
push str..MaBrowsInjector.cpp
call ebp
mov ecx, eax
call fcn.00401070
xor ebx, ebx
add esp, 0xc
cmp edi, ebx
je 0x41031b
push 0x3ff
lea eax, [esp + 0x18d]
push ebx
push eax
mov byte [esp + 0x194], bl
call sub.MSVCR90.dll_memset
add esp, 0xc
push 0x3ff
lea ecx, [esp + 0x58d]
push ebx
push ecx
mov byte [esp + 0x594], bl
call sub.MSVCR90.dll_memset
add esp, 0xc
push 0x400
lea edx, [esp + 0x18c]
push edx
push edi
call dword [sym.imp.USER32.dll_GetClassNameA]
mov ecx, str.IEFrame
lea eax, [esp + 0x188]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4102d1
cmp dl, bl
je 0x4102cd
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4102d1
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x4102b1
xor eax, eax
jmp 0x4102d6
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x41031b
push 0x400
lea eax, [esp + 0x58c]
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea ecx, [esp + 0x588]
push ecx
mov ebx, 4
call fcn.00410810
mov edx, dword [0x70bfb8]
add esp, 4
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x41076a
mov ebp, dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov edx, dword [0x70bfb8]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x41076a
mov eax, dword [0x70bfb8]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp ebx, 3
jne 0x41037d
push str.Edge_Unload__
push 0x64
push str..MaBrowsInjector.cpp
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov ecx, eax
mov esi, str.MaBrowsInjector::InjectDll
call fcn.00401070
add esp, 8
push ebp
push 0x4113a0
call dword [sym.imp.USER32.dll_EnumWindows]
mov ecx, dword [0x70bfb8]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x41078a
push ebx
push 0x70bf88
push str.Ejection_Start____uid____s___n____d_
xor edi, edi
push 0x6d
push str..MaBrowsInjector.cpp
mov dword [esp + 0x38], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], edi
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov ecx, eax
mov esi, str.MaBrowsInjector::InjectDll
call fcn.00401070
push 0x18
call fcn.00606dba
add esp, 0x14
cmp eax, edi
je 0x4103cf
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0x14], ecx
mov ebp, eax
mov dword [esp + 0x1c], eax
jmp 0x4103d5
xor ebp, ebp
mov dword [esp + 0x1c], ebp
push ebp
call fcn.0040f3a0
test ebp, ebp
jne 0x4103f3
mov edx, dword [0x70bfb8]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor eax, eax
jmp 0x41078f
mov eax, 0x70bf88
lea edx, [eax + 1]
jmp 0x410400
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410400
sub eax, edx
jne 0x41051a
mov eax, dword [ebp + 8]
test eax, eax
jne 0x41041b
or ecx, 0xffffffff
jmp 0x410421
mov ecx, dword [eax + 0x13c00]
test eax, eax
jne 0x41042a
or eax, 0xffffffff
jmp 0x410430
mov eax, dword [eax + 0x13c04]
test ecx, ecx
jle 0x410509
add eax, ecx
test eax, eax
jle 0x410509
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x18]
push ebp
call fcn.0040f860
cmp eax, 0xffffffff
je 0x4104fe
cmp eax, 0xfffffffe
je 0x4104fe
mov ecx, eax
lea edx, [esp + 0x48]
mov eax, ebp
call fcn.0040fb40
mov edi, dword [esp + 0x48]
push edi
push str.pt.hWnd____X_
push 0x89
push str..MaBrowsInjector.cpp
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov ecx, eax
mov esi, str.MaBrowsInjector::InjectDll
call fcn.00401070
add esp, 0xc
cmp ebx, 1
jne 0x4104d3
push 0
push str.Chrome_RenderWidgetHostHWND
push 0
push edi
call dword [sym.imp.USER32.dll_FindWindowExA]
mov esi, eax
test esi, esi
je 0x4104fe
mov edi, ebx
cmp dword [0x70adb8], edi
jne 0x4104c8
mov ecx, esi
lea edx, [esp + 0x24]
call fcn.0040ffa0
cmp dword [0x70b9e0], edi
jne 0x4104fe
push esi
jmp 0x4104f8
test ebx, ebx
jne 0x4104fe
mov esi, 1
cmp dword [0x70adb8], esi
jne 0x4104ef
mov ecx, edi
lea edx, [esp + 0x24]
call fcn.0040ffa0
cmp dword [0x70b9e0], esi
jne 0x4104fe
push edi
call dword [sym.imp.WinICPLib.dll_int___stdcall_fnWinICPLibFree_struct_HWND____]
sub dword [esp + 0x14], 1
jne 0x410446
mov eax, dword [0x70bfb8]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x41078a
push ebp
mov ecx, 0x70bf88
call fcn.0040f940
mov dword [esp + 0x20], eax
cmp eax, 0xffffffff
je 0x41074b
cmp eax, 0xfffffffe
je 0x41074b
mov ecx, eax
lea edx, [esp + 0x48]
mov eax, ebp
call fcn.0040fb40
mov edi, dword [esp + 0x48]
push edi
push str.Ejection__pt.hWnd____X_
push 0xae
push str..MaBrowsInjector.cpp
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov ecx, eax
mov esi, str.MaBrowsInjector::InjectDll
call fcn.00401070
mov eax, dword [0x70ba7c]
add esp, 0xc
mov dword [esp + 0x18], edi
cmp eax, 1
je 0x41060f
cmp eax, 2
je 0x41060f
cmp eax, 4
jne 0x41071e
mov ebp, dword [sym.imp.USER32.dll_GetAncestor]
push 2
push edi
call ebp
call fcn.00410bf0
mov ebx, eax
push ebx
push str.hToolbarWnd____X_
push 0xc8
push str..MaBrowsInjector.cpp
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov ecx, eax
call fcn.00401070
add esp, 0xc
push 1
push ebx
mov ebx, dword [sym.imp.USER32.dll_EnableWindow]
call ebx
push 2
push edi
call ebp
mov esi, dword [sym.imp.USER32.dll_FindWindowExA]
push 0
push str.CommandBarClass
push 0
push eax
call esi
test eax, eax
je 0x41071e
push 0
push str.ReBarWindow32
push 0
push eax
call esi
test eax, eax
je 0x41071e
push 1
push eax
call ebx
jmp 0x41071e
push 5
push edi
mov dword [esp + 0x1c], 0
call dword [sym.imp.USER32.dll_GetWindow]
mov edi, eax
test edi, edi
je 0x41071e
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
mov ebp, dword [sym.imp.USER32.dll_GetClassNameA]
jmp 0x410640
push 0x103
lea ecx, [esp + 0x4d]
push 0
push ecx
mov byte [esp + 0x54], 0
call sub.MSVCR90.dll_memset
add esp, 0xc
push 0x104
lea edx, [esp + 0x4c]
push edx
push edi
call ebp
lea eax, [esp + 0x48]
push eax
push edi
push str.hChildWnd____X___clsname____s_
push 0xb9
push str..MaBrowsInjector.cpp
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov ecx, eax
mov esi, str.MaBrowsInjector::InjectDll
call fcn.00401070
add esp, 0x10
push 0x64
call ebx
mov ecx, str.Chrome_RenderWidgetHostHWND
lea eax, [esp + 0x48]
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4106c0
test dl, dl
je 0x4106bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4106c0
add eax, 2
add ecx, 2
test dl, dl
jne 0x4106a0
xor eax, eax
jmp 0x4106c5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4106d8
push edi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4106d8
mov dword [esp + 0x14], edi
push 2
push edi
call dword [sym.imp.USER32.dll_GetWindow]
mov edi, eax
test edi, edi
jne 0x410640
cmp dword [esp + 0x14], eax
je 0x41071e
mov edi, dword [esp + 0x14]
push edi
push str.hRealWnd____X_
push 0xc1
push str..MaBrowsInjector.cpp
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov ecx, eax
mov esi, str.MaBrowsInjector::InjectDll
call fcn.00401070
add esp, 0xc
mov dword [esp + 0x18], edi
mov esi, dword [esp + 0x18]
mov ecx, esi
lea edx, [esp + 0x24]
call fcn.0040ffa0
cmp dword [0x70b9e0], 1
jne 0x41073d
push esi
call dword [sym.imp.WinICPLib.dll_int___stdcall_fnWinICPLibFree_struct_HWND____]
mov ebp, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
push ebp
call fcn.0040fa40
mov esi, ebp
call fcn.0040f440
call fcn.004107b0
mov ecx, dword [0x70bfb8]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ebp, dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
push str.End___
push 0xe3
push str..MaBrowsInjector.cpp
call ebp
mov ecx, eax
mov esi, str.MaBrowsInjector::InjectDll
call fcn.00401070
add esp, 8
mov eax, 1
mov ecx, dword [esp + 0x98c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00606c9e
add esp, 0x980
ret