Function at 0x1004ee57
Capabilities:
Extract resource via kernel32 functions
Get common file path
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov dword [ebp - 0xc], 8
mov dword [ebp - 0x14], 0x525d2d91
mov dword [ebp - 0x14], 0xe13a6c9c
mov dword [ebp - 0x14], 0xb44cf592
push ebx
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], 0xfffffff7
mov dword [ebp - 0x14], 2
mov dword [ebp - 0x14], 0x1a7a81a8
mov dword [ebp - 0x14], 0xfffffffe
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
push esi
push edi
xor edi, edi
mov esi, ecx
inc edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], edi
push 0xfffffffffffffffb
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], 0xd06bde64
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], 3
cmp dword [ebp - 0xc], ebx
jl 0x1004ef4a
push 2
lea ecx, [ebp - 0x24]
call fcn.10016f46
mov dword [ebp - 8], 8
mov dword [ebp - 8], ebx
jmp 0x1004eef7
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x30], 0xfffffffd
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x1004eee9
mov dword [ebp - 8], ebx
jmp 0x1004ef12
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x24]
mov dword [eax + ecx*4], 0x23371247
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1004ef02
cmp dword [ebp - 0x30], ebx
je 0x1004ef26
mov eax, dword [ebp - 0x24]
cmp dword [eax], ebx
mov eax, edi
jne 0x1004ef28
mov eax, ebx
mov dword [ebp - 8], eax
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x1004ef3d
push ebx
push edi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
lea ecx, [ebp - 0x24]
call fcn.100177a1
dec dword [ebp - 0xc]
jns 0x1004eed3
dec dword [ebp - 0x14]
push edi
push 0x2d4a
push esi
push 0x2f6f
call fcn.1004993b
mov dword [ebp - 0x14], edi
add esp, 0x10
mov dword [ebp - 0x14], 0xcdbe8e56
mov dword [ebp - 0x14], 0x318d5816
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], 0x5de05dae
mov dword [ebp - 0x14], 6
mov dword [ebp - 0xc], 0xcf33
mov dword [ebp - 0xc], ebx
jmp 0x1004ef9d
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x18], 0x585b7f3
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x1004ef8f
inc dword [ebp - 0x14]
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x1004efb9
push 0x511
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push esi
call fcn.100318d2
mov dword [ebp - 8], 5
mov esi, eax
mov dword [ebp - 0x14], 7
pop ecx
mov dword [ebp - 0xc], ebx
jmp 0x1004efdf
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x10], edi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x1004efd5
mov dword [ebp - 0x10], edi
xor edx, edx
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
mov eax, dword [ebp - 8]
cmp ecx, eax
mov eax, dword [ebp - 8]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 8]
setg cl
xor edx, edx
cmp eax, ecx
setne dl
xor ecx, ecx
sub edx, dword [ebp - 8]
imul edx, dword [ebp - 8]
cmp edx, 0x46c2
setl cl
xor eax, eax
cmp ecx, edi
setge al
cmp eax, 0xd5493e
je 0x1004f02e
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
xor edx, edx
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
add ecx, eax
mov eax, dword [ebp - 8]
cmp ecx, eax
sete dl
cmp dword [ebp - 8], edx
je 0x1004f052
mov eax, ebx
cmp dword [ebp - 0x10], ebx
je 0x1004f054
mov eax, edi
cmp eax, dword [ebp - 8]
jge 0x1004f079
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x1004f068
push ebx
call dword [sym.imp.USER32.dll_IsRectEmpty]
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x1004f0c9
push ebx
call dword [sym.imp.KERNEL32.dll_LockResource]
jmp 0x1004f0c9
mov dword [ebp - 0xc], 0x72737ae9
mov dword [ebp - 0x14], 0xffffffff
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x1004f0a2
push 0x2302
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov eax, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
cmp eax, ecx
mov eax, dword [ebp - 0xc]
setg dl
xor ebx, ebx
cmp edx, edi
setl bl
xor ecx, ecx
cmp ebx, eax
setge cl
mov dword [ebp - 0x14], ecx
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret