Function at 0x475efc
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 2
add esp, 0xfffff004
push eax
dec eax
jne 0x475f05
mov eax, dword [ebp - 4]
add esp, 0xfffffff8
push ebx
push esi
push edi
mov byte [ebp - 1], cl
mov ebx, edx
mov esi, dword [ebp + 8]
cmp dword [0x4b989c], 0
je 0x475f30
xor eax, eax
jmp 0x4764d0
mov dword [0x4c7754], eax
xor edx, edx
mov byte [0x4c7858], dl
mov byte [0x4c77d8], dl
mov byte [0x4c7758], dl
mov byte [0x4c7c58], 0
mov dword [0x4c7ea4], 0
mov dword [0x4c7ea8], 0
xor eax, eax
xor edx, edx
mov dword [0x4c7ec4], eax
mov dword [0x4c7ec8], edx
mov dword [0x4c7ebc], eax
mov dword [0x4c7ec0], edx
mov dword [0x4c7eb4], eax
mov dword [0x4c7eb8], edx
mov dword [0x4c7eac], eax
mov dword [0x4c7eb0], edx
mov byte [0x4c7ed0], 0
xor ecx, ecx
mov dword [0x4c7ecc], ecx
call fcn.00495d7c
mov dword [0x4c7e9c], eax
xor eax, eax
mov dword [0x4c7750], eax
xor edx, edx
mov dword [0x4c7ed4], edx
xor ecx, ecx
mov dword [0x4c7e98], ecx
mov byte [0x4c7ea0], 0
mov byte [0x4c7ea1], 0
mov byte [0x4c7f08], 0
mov eax, dword [0x4c7754]
test eax, eax
je 0x475ff0
cmp eax, 1
je 0x475ff0
cmp eax, 2
jne 0x476021
mov dword [0x4bcb70], 0
mov dword [0x4bcb74], 0
cmp dword [0x4bc21c], 0
jne 0x476021
mov dword [0x4bcb78], 0
mov dword [0x4bcb7c], 0
cmp eax, 0xb
ja case.default.0x47602a
jmp dword [eax*4 + 0x476031]
mov dword [0x4c7f04], str.CMDWNDADD
mov byte [0x4c7ea0], 1
jmp case.default.0x47602a
mov eax, ebx
call fcn.0040b578
push eax
cmp dword [0x4c7754], 1
jne 0x47608f
mov eax, 0x20a
jmp 0x476094
mov eax, 0x20b
call fcn.004116e8
push eax
push 0x4c7758
call fcn.004908b8
add esp, 0xc
cmp dword [0x4bc21c], 0
je 0x4760b9
cmp dword [0x4bcb6c], 1
jg 0x4760d8
mov eax, 0x4ba5d4
call fcn.0045d29c
test eax, eax
jne 0x4760d4
mov ebx, dword [0x4ba7dc]
test ebx, ebx
je 0x4760d8
dec ebx
je 0x4760d8
xor eax, eax
jmp 0x4760dd
mov eax, 1
mov byte [0x4c7ea0], al
mov eax, 0x4ba5d4
call fcn.0045d29c
test eax, eax
setne dl
and edx, 1
mov byte [0x4c7ea1], dl
mov dword [0x4c7f04], 0x4a1aa8
jmp case.default.0x47602a
mov eax, ebx
call fcn.0040b578
push eax
mov eax, 0x20c
call fcn.004116e8
push eax
push 0x4c7758
call fcn.004908b8
add esp, 0xc
mov dword [0x4c7f04], 0x4a1ab2
jmp case.default.0x47602a
mov eax, ebx
call fcn.0040b578
push eax
mov eax, 0x20d
call fcn.004116e8
push eax
push 0x4c7758
call fcn.004908b8
add esp, 0xc
mov dword [0x4c7f04], 0x4a1ab2
jmp case.default.0x47602a
mov eax, ebx
call fcn.0040b578
push eax
mov eax, 0x211
call fcn.004116e8
push eax
push 0x4c7758
call fcn.004908b8
add esp, 0xc
mov dword [0x4c7f04], 0x4a1ab2
jmp case.default.0x47602a
mov eax, 0x223
call fcn.004116e8
push eax
push 0x4c7758
call fcn.0048d8e8
add esp, 8
mov dword [0x4c7f04], 0x4a1ab2
jmp case.default.0x47602a
mov eax, 0x50b
call fcn.004116e8
push eax
push 0x4c7758
call fcn.0048d8e8
add esp, 8
mov dword [0x4c7f04], 0x4a1abe
jmp case.default.0x47602a
mov dword [0x4c7f04], str.CMDWNDFIND
jmp case.default.0x47602a
mov eax, 0x543
call fcn.004116e8
push eax
push 0x4c7758
call fcn.0048d8e8
add esp, 8
mov dword [0x4c7f04], 0x4a1ab2
jmp case.default.0x47602a
mov eax, 0x556
call fcn.004116e8
push eax
push 0x4c7758
call fcn.0048d8e8
add esp, 8
mov dword [0x4c7f04], 0x4a1ab2
jmp case.default.0x47602a
mov dword [0x4c7f04], str.CMDWNDBENCH
push 5
push dword [0x4c7f04]
push dword [0x4a7028]
call sub.KERNEL32.DLL_FindResourceA
mov ebx, eax
push ebx
push dword [0x4a7028]
call sub.KERNEL32.DLL_LoadResource
mov dword [ebp - 8], eax
push ebx
push dword [0x4a7028]
call sub.KERNEL32.DLL_SizeofResource
mov edi, eax
push edi
push 0
call sub.KERNEL32.DLL_GlobalAlloc
mov ebx, eax
push edi
push dword [ebp - 8]
push ebx
call fcn.0048d6f8
add esp, 0xc
cmp dword [0x4bc21c], 1
je 0x4762a4
push dword [0x4b9890]
call sub.USER32.DLL_IsWindowVisible
test eax, eax
je 0x4762a4
xor eax, eax
jmp 0x4762a9
mov eax, 1
mov byte [ebp - 9], al
cmp byte [ebp - 9], 0
je 0x4762c2
mov edx, dword [ebx]
and edx, 0xbfffffff
or edx, 0x800a0800
mov dword [ebx], edx
push 0
test esi, esi
jne 0x4762cd
mov esi, fcn.004764dc
push esi
cmp dword [0x4bc21c], 1
jne 0x4762db
xor eax, eax
jmp 0x4762e0
mov eax, dword [0x4b9890]
push eax
push ebx
push dword [0x4a7028]
call sub.USER32.DLL_CreateDialogIndirectParamA
cmp byte [ebp - 9], 0
mov edi, eax
mov dword [0x4b989c], edi
je 0x476334
mov eax, 0x4ba0b8
mov dl, 1
call fcn.0047d9a8
push eax
push 0
push 0x80
push edi
call sub.USER32.DLL_SendMessageA
mov eax, 0x4ba0b8
xor edx, edx
call fcn.0047d9a8
push eax
push 1
push 0x80
push dword [0x4b989c]
call sub.USER32.DLL_SendMessageA
cmp dword [0x4c7754], 6
jne 0x47646f
mov byte [ebp - 0x200c], 0
cmp byte [0x4aec6c], 0
je 0x4763a3
push 0x4a1ae9
mov eax, 0x4aec6c
call fcn.0040b578
push eax
call fcn.0048d89c
add esp, 8
test eax, eax
jne 0x476379
mov eax, 0x210
call fcn.004116e8
jmp 0x476383
mov eax, 0x20f
call fcn.004116e8
push eax
push 0x4a1ae3
lea edx, [ebp - 0x200c]
push edx
call fcn.004908b8
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.00477b04
cmp byte [0x4afc6c], 0
je 0x4763d6
mov eax, 0x20e
call fcn.004116e8
push eax
push 0x4a1ae3
lea edx, [ebp - 0x200c]
push edx
call fcn.004908b8
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.00477b04
cmp dword [0x4b0900], 0
je 0x476409
mov eax, 0x214
call fcn.004116e8
push eax
push 0x4a1ae3
lea edx, [ebp - 0x200c]
push edx
call fcn.004908b8
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.00477b04
cmp byte [0x4b0a11], 0
je 0x47643c
mov eax, 0x213
call fcn.004116e8
push eax
push 0x4a1ae3
lea edx, [ebp - 0x200c]
push edx
call fcn.004908b8
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.00477b04
cmp byte [0x4b0916], 0
je 0x47646f
mov eax, 0x349
call fcn.004116e8
push eax
push 0x4a1ae3
lea edx, [ebp - 0x200c]
push edx
call fcn.004908b8
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.00477b04
cmp byte [ebp - 1], 0
je 0x47648b
push 0
push 0x6e
push 0x111
push dword [0x4b989c]
call sub.USER32.DLL_SendMessageA
jmp 0x476498
push 5
push dword [0x4b989c]
call sub.USER32.DLL_ShowWindow
push ebx
call sub.KERNEL32.DLL_GlobalFree
cmp byte [0x4c7758], 0
jne 0x4764bc
push 0x80
push 0x4c7758
push dword [0x4b989c]
call sub.USER32.DLL_GetWindowTextA
cmp dword [0x4b989c], 0
jne 0x4764c9
xor eax, eax
jmp 0x4764d0
call fcn.00476f7c
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4