Function at 0x474e29
Capabilities:
Create process on windows
Enumerate gui resources

Disassembly:
push ebp
push ebx
push edi
xor eax, eax
push eax
push eax
push eax
push eax
call fcn.005423e0
lea ebp, [0x72ab78]
mov ebx, dword [ebp + 0x74]
and ebx, ebx
jne 0x4751a6
lea ebp, [0x72ab78]
push dword [ebp]
call fcn.004d925e
mov ebx, eax
and ebx, ebx
jne 0x4751a1
lea ebp, [0x72a988]
mov edx, dword [ebp + 0x9c]
xor ecx, ecx
call fcn.004fa4a0
jne 0x4751a1
lea ebp, [0x72abf8]
mov dword [ebp + 4], 1
call sub.WINMM.dll_timeGetTime
mov ebx, eax
add ebx, 0x1388
mov dword [esp], ebx
push 0xc00000
lea ebp, [0x72ab78]
push dword [ebp + 0x14]
push 0x1a
push 0x258
push 0x1a
call fcn.004802c7
push eax
push 0x258
call fcn.00480290
push eax
push 0xffffffff
call fcn.00533116
mov dword [esp + 4], eax
push edx
call fcn.00542240
pop edx
push eax
push 0x201
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.Attempting_to_start
push edx
call fcn.00542310
lea ebp, [0x72ab78]
mov edx, dword [ebp]
push edx
call fcn.00542310
mov edx, str.__please_wait_...
push edx
call fcn.00542310
call fcn.00542370
push 0x1a
push 0x258
push 0
push 0
push 0xffffffff
call fcn.004fa482
add dword [esp + 0x14], edx
call fcn.005269d5
call fcn.004fa4e0
mov dword [esp + 8], eax
push 0x10
push 0xe
mov eax, 0x61f062
push eax
push 0xffffffff
call fcn.0054167a
mov dword [esp + 0xc], eax
push dword [esp + 0xc]
push dword [esp + 0xc]
call fcn.004be492
push 1
push dword [esp + 8]
call fcn.00533a0f
push 1
push dword [esp + 8]
call fcn.005336ff
lea ebp, [0x72ab78]
mov ebx, dword [ebp + 0x34]
cmp ebx, 0xa
jne 0x474faf
mov ebp, dword [0x72b458]
mov edx, dword [ebp + 4]
xor ecx, ecx
call fcn.004fa4a0
jne 0x474faf
mov eax, 1
jmp 0x474fb1
xor eax, eax
and eax, eax
je 0x4750ac
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
lea ebp, [0x72a988]
push dword [ebp + 0x9c]
call fcn.00522f23
mov edx, str.run2Perseus.bat
push edx
call fcn.00542310
call fcn.004fa482
add dword [esp], edx
call fcn.00522fa2
call fcn.004fa4e0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x475013
jl 0x47500f
cmp ebx, 0
ja 0x475013
xor eax, eax
jmp 0x475018
mov eax, 1
or eax, eax
je 0x4750aa
push edx
call fcn.00542240
pop edx
push eax
push 1
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
lea ebp, [0x72a988]
push dword [ebp + 0x9c]
call fcn.00522f23
call fcn.00542370
push 0
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push dword [ebp + 0x9c]
call fcn.00522f23
mov edx, str.run2Perseus.bat
push edx
call fcn.00542310
call fcn.00542370
mov eax, 0x61f062
push eax
push 0
call fcn.004fa482
add dword [esp + 8], edx
call fcn.004fa482
add dword [esp + 0x10], edx
call sub.SHELL32.dll_ShellExecuteW
call fcn.004fa4e0
jmp 0x475108
push edx
call fcn.00542240
pop edx
push eax
push 1
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
lea ebp, [0x72a988]
push dword [ebp + 0x9c]
call fcn.00522f23
call fcn.00542370
push 0
push dword [ebp + 0x9c]
mov eax, 0x623e60
push eax
push 0
call fcn.004fa482
add dword [esp + 0x10], edx
call sub.SHELL32.dll_ShellExecuteW
call fcn.004fa4e0
mov eax, 1
push eax
call fcn.004b4b20
push 0xfa
call sub.KERNEL32.dll_Sleep
push 0
lea eax, [0x4615ce]
push eax
call sub.USER32.dll_EnumWindows
lea ebp, [0x72ab78]
push dword [ebp]
call fcn.004d925e
and eax, eax
je 0x475156
lea ebp, [0x72a860]
cmp dword [ebp + 0x88], 0
je 0x475156
mov eax, 1
jmp 0x475158
xor eax, eax
and eax, eax
jne 0x47516a
call sub.WINMM.dll_timeGetTime
mov ebx, eax
cmp ebx, dword [esp]
jg 0x47516a
jmp 0x475171
mov eax, 1
jmp 0x475173
xor eax, eax
and eax, eax
je 0x475113
lea ebp, [0x72a860]
mov dword [ebp + 0x88], 0
push dword [esp + 4]
call fcn.0053300e
push dword [esp + 0xc]
call fcn.0041c1e0
xor eax, eax
push eax
call fcn.004b4b20
jmp 0x47536b
lea ebp, [0x72abf8]
cmp dword [ebp + 0x102], 0
je 0x47536b
mov eax, str.CATSync_Full.exe
push eax
call fcn.004d925e
mov ebx, eax
and ebx, ebx
jne 0x47536b
call sub.WINMM.dll_timeGetTime
mov ebx, eax
add ebx, 0x1388
mov dword [esp], ebx
push 0xc00000
lea ebp, [0x72ab78]
push dword [ebp + 0x14]
push 0x1a
push 0x258
push 0x1a
call fcn.004802c7
push eax
push 0x258
call fcn.00480290
push eax
push 0xffffffff
call fcn.00533116
mov dword [esp + 4], eax
push 0x201
mov eax, str.Attempting_to_start_CatSync__please_wait_...
push eax
push 0x1a
push 0x258
push 0
push 0
push 0xffffffff
call fcn.005269d5
mov dword [esp + 8], eax
push 0x10
push 0xe
mov eax, 0x61f062
push eax
push 0xffffffff
call fcn.0054167a
mov dword [esp + 0xc], eax
push dword [esp + 0xc]
push dword [esp + 0xc]
call fcn.004be492
push 1
push dword [esp + 8]
call fcn.00533a0f
push 1
push dword [esp + 8]
call fcn.005336ff
push 1
mov eax, str.C:Program_Files__x86_CAT_Sync_Full_
push eax
push 0
lea ebp, [0x72a988]
push dword [ebp + 0x70]
mov eax, 0x623e60
push eax
push 0
call sub.SHELL32.dll_ShellExecuteW
mov eax, 1
push eax
call fcn.004b4b20
push 0xfa
call sub.KERNEL32.dll_Sleep
push 0
lea eax, [0x4615ce]
push eax
call sub.USER32.dll_EnumWindows
mov eax, str.CATSync_Full.exe
push eax
call fcn.004d925e
and eax, eax
je 0x475302
lea ebp, [0x72a860]
cmp dword [ebp + 0x8c], 0
je 0x475302
mov eax, 1
jmp 0x475304
xor eax, eax
and eax, eax
jne 0x475316
call sub.WINMM.dll_timeGetTime
mov ebx, eax
cmp ebx, dword [esp]
jg 0x475316
jmp 0x47531d
mov eax, 1
jmp 0x47531f
xor eax, eax
and eax, eax
je 0x4752c2
lea ebp, [0x72a860]
mov dword [ebp + 0x8c], 0
push dword [esp + 4]
call fcn.0053300e
push dword [esp + 0xc]
call fcn.0041c1e0
xor eax, eax
push eax
call fcn.004b4b20
lea ebp, [0x72aa5c]
mov dword [ebp + 0xc], 0
push 0
lea eax, [0x48c787]
push eax
call fcn.004fbc99
xor eax, eax
add esp, 0x10
pop edi
pop ebx
pop ebp
ret