Function at 0x416cc0
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x445228
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
push ebx
push esi
push edi
mov eax, dword [0x455638]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00418370
add eax, 0x4c4b40
adc edx, 0
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
jmp 0x416d00
mov esi, dword [sym.imp.USER32.dll_EnumWindows]
lea eax, [ebp - 0x24]
push eax
mov bl, 1
mov edi, str.firefox.exe
push 0x416690
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], str.32770
mov dword [ebp - 0x1c], 6
mov byte [ebp - 0x18], bl
call esi
cmp byte [ebp - 0x18], 0
jne 0x416d34
xor bl, bl
lea ecx, [ebp - 0x38]
push ecx
push 0x416690
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], str.MozillaDialogClass
mov dword [ebp - 0x30], 0x12
mov byte [ebp - 0x2c], 1
call esi
cmp byte [ebp - 0x2c], 0
je 0x416d5e
test bl, bl
jne 0x416d85
mov edx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
or edx, esi
je 0x416f0d
call fcn.00418370
cmp esi, edx
ja 0x416d00
jb 0x416f0d
cmp dword [ebp - 0x48], eax
ja 0x416d00
jmp 0x416f0d
lea eax, [ebp - 0x38]
push eax
push 0x416690
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], str.MozillaWindowClass
mov dword [ebp - 0x30], 0x12
mov byte [ebp - 0x2c], 1
call esi
cmp byte [ebp - 0x2c], 0
jne 0x416f0d
call fcn.00418370
add eax, 0x1c9c380
mov ebx, edx
adc ebx, 0
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ebx
xor esi, esi
xor edi, edi
cmp edi, 0xa
jge 0x416df3
push 0
push str.MozillaDialogClass
push 0
push 0
call dword [sym.imp.USER32.dll_FindWindowExW]
mov esi, eax
test esi, esi
jne 0x416dec
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
inc edi
test esi, esi
je 0x416dc8
jmp 0x416dfb
test esi, esi
je 0x416eac
push 5
push esi
call dword [sym.imp.USER32.dll_ShowWindowAsync]
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
call dword [sym.imp.USER32.dll_SetFocus]
call fcn.00418370
mov ebx, eax
mov eax, 0
mov edi, edx
add ebx, 0x7a1200
adc edi, eax
mov byte [ebp - 0xd], al
nop
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x14]
push ecx
push 0x447380
push eax
push esi
mov dword [ebp - 4], eax
call dword [sym.imp.OLEACC.dll_AccessibleObjectFromWindow]
test eax, eax
mov eax, dword [ebp - 0x14]
js 0x416ea6
test eax, eax
je 0x416ea6
lea edx, [ebp - 0x14]
push edx
call fcn.00416900
add esp, 4
test al, al
je 0x416e71
push 0xc8
mov byte [ebp - 0xd], 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x416e87
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp byte [ebp - 0xd], 0
jne 0x416eeb
mov eax, ebx
or eax, edi
je 0x416f0d
call fcn.00418370
cmp edi, edx
jb 0x416f0d
ja 0x416ea2
cmp ebx, eax
jbe 0x416f0d
xor eax, eax
jmp 0x416e30
mov byte [ebp - 0xd], 1
jmp 0x416e74
push 0
push str.MozillaWindowClass
push 0
push 0
call dword [sym.imp.USER32.dll_FindWindowExW]
test eax, eax
je 0x416f0d
lea ecx, [ebp - 0x48]
push ecx
push 0x416690
mov dword [ebp - 0x48], str.firefox.exe
mov dword [ebp - 0x44], str.MozillaWindowClass
mov dword [ebp - 0x40], 0x12
mov byte [ebp - 0x3c], 1
call dword [sym.imp.USER32.dll_EnumWindows]
jmp 0x416eee
mov ebx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x38]
or edx, ebx
je 0x416f0d
call fcn.00418370
cmp ebx, edx
ja 0x416dc4
jb 0x416f0d
cmp dword [ebp - 0x38], eax
ja 0x416dc4
call fcn.00416810
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret