Function at 0x475ac0
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 2
add esp, 0xfffff004
push eax
dec eax
jne 0x475ac9
mov eax, dword [ebp - 4]
add esp, 0xfffffff8
push ebx
push esi
push edi
mov byte [ebp - 1], cl
mov ebx, edx
mov esi, dword [ebp + 8]
cmp dword [0x4b9824], 0
je 0x475af4
xor eax, eax
jmp 0x476094
mov dword [0x4c96dc], eax
xor edx, edx
mov byte [0x4c97e0], dl
mov byte [0x4c9760], dl
mov byte [0x4c96e0], dl
mov byte [0x4c9be0], 0
mov dword [0x4c9e2c], 0
mov dword [0x4c9e30], 0
xor eax, eax
xor edx, edx
mov dword [0x4c9e4c], eax
mov dword [0x4c9e50], edx
mov dword [0x4c9e44], eax
mov dword [0x4c9e48], edx
mov dword [0x4c9e3c], eax
mov dword [0x4c9e40], edx
mov dword [0x4c9e34], eax
mov dword [0x4c9e38], edx
mov byte [0x4c9e58], 0
xor ecx, ecx
mov dword [0x4c9e54], ecx
call fcn.004957b8
mov dword [0x4c9e24], eax
xor eax, eax
mov dword [0x4c96d8], eax
xor edx, edx
mov dword [0x4c9e5c], edx
xor ecx, ecx
mov dword [0x4c9e20], ecx
mov byte [0x4c9e28], 0
mov byte [0x4c9e29], 0
mov byte [0x4c9e90], 0
mov eax, dword [0x4c96dc]
test eax, eax
je 0x475bb4
cmp eax, 1
je 0x475bb4
cmp eax, 2
jne 0x475be5
mov dword [0x4bcaf8], 0
mov dword [0x4bcafc], 0
cmp dword [0x4bc1a4], 0
jne 0x475be5
mov dword [0x4bcb00], 0
mov dword [0x4bcb04], 0
cmp eax, 0xb
ja case.default.0x475bee
jmp dword [eax*4 + 0x475bf5]
mov dword [0x4c9e8c], 0x4a1a30
mov byte [0x4c9e28], 1
jmp case.default.0x475bee
mov eax, ebx
call fcn.0040b590
push eax
cmp dword [0x4c96dc], 1
jne 0x475c53
mov eax, 0x20a
jmp 0x475c58
mov eax, 0x20b
call fcn.004117b8
push eax
push 0x4c96e0
call fcn.004902f4
add esp, 0xc
cmp dword [0x4bc1a4], 0
je 0x475c7d
cmp dword [0x4bcaf4], 1
jg 0x475c9c
mov eax, 0x4ba55c
call fcn.0045d1d0
test eax, eax
jne 0x475c98
mov ebx, dword [0x4ba764]
test ebx, ebx
je 0x475c9c
dec ebx
je 0x475c9c
xor eax, eax
jmp 0x475ca1
mov eax, 1
mov byte [0x4c9e28], al
mov eax, 0x4ba55c
call fcn.0045d1d0
test eax, eax
setne dl
and edx, 1
mov byte [0x4c9e29], dl
mov dword [0x4c9e8c], 0x4a1a30
jmp case.default.0x475bee
mov eax, ebx
call fcn.0040b590
push eax
mov eax, 0x20c
call fcn.004117b8
push eax
push 0x4c96e0
call fcn.004902f4
add esp, 0xc
mov dword [0x4c9e8c], 0x4a1a3a
jmp case.default.0x475bee
mov eax, ebx
call fcn.0040b590
push eax
mov eax, 0x20d
call fcn.004117b8
push eax
push 0x4c96e0
call fcn.004902f4
add esp, 0xc
mov dword [0x4c9e8c], 0x4a1a3a
jmp case.default.0x475bee
mov eax, ebx
call fcn.0040b590
push eax
mov eax, 0x211
call fcn.004117b8
push eax
push 0x4c96e0
call fcn.004902f4
add esp, 0xc
mov dword [0x4c9e8c], 0x4a1a3a
jmp case.default.0x475bee
mov eax, 0x223
call fcn.004117b8
push eax
push 0x4c96e0
call fcn.0048d424
add esp, 8
mov dword [0x4c9e8c], 0x4a1a3a
jmp case.default.0x475bee
mov eax, 0x50b
call fcn.004117b8
push eax
push 0x4c96e0
call fcn.0048d424
add esp, 8
mov dword [0x4c9e8c], 0x4a1a46
jmp case.default.0x475bee
mov dword [0x4c9e8c], 0x4a1a54
jmp case.default.0x475bee
mov eax, 0x543
call fcn.004117b8
push eax
push 0x4c96e0
call fcn.0048d424
add esp, 8
mov dword [0x4c9e8c], 0x4a1a3a
jmp case.default.0x475bee
mov eax, 0x556
call fcn.004117b8
push eax
push 0x4c96e0
call fcn.0048d424
add esp, 8
mov dword [0x4c9e8c], 0x4a1a3a
jmp case.default.0x475bee
mov dword [0x4c9e8c], 0x4a1a5f
push 5
push dword [0x4c9e8c]
push dword [0x4a6fb0]
call sub.KERNEL32.DLL_FindResourceA
mov ebx, eax
push ebx
push dword [0x4a6fb0]
call sub.KERNEL32.DLL_LoadResource
mov dword [ebp - 8], eax
push ebx
push dword [0x4a6fb0]
call sub.KERNEL32.DLL_SizeofResource
mov edi, eax
push edi
push 0
call sub.KERNEL32.DLL_GlobalAlloc
mov ebx, eax
push edi
push dword [ebp - 8]
push ebx
call fcn.0048d234
add esp, 0xc
cmp dword [0x4bc1a4], 1
je 0x475e68
push dword [0x4b9818]
call sub.USER32.DLL_IsWindowVisible
test eax, eax
je 0x475e68
xor eax, eax
jmp 0x475e6d
mov eax, 1
mov byte [ebp - 9], al
cmp byte [ebp - 9], 0
je 0x475e86
mov edx, dword [ebx]
and edx, 0xbfffffff
or edx, 0x800a0800
mov dword [ebx], edx
push 0
test esi, esi
jne 0x475e91
mov esi, fcn.004760a0
push esi
cmp dword [0x4bc1a4], 1
jne 0x475e9f
xor eax, eax
jmp 0x475ea4
mov eax, dword [0x4b9818]
push eax
push ebx
push dword [0x4a6fb0]
call sub.USER32.DLL_CreateDialogIndirectParamA
cmp byte [ebp - 9], 0
mov edi, eax
mov dword [0x4b9824], edi
je 0x475ef8
mov eax, 0x4ba040
mov dl, 1
call fcn.0047d4e8
push eax
push 0
push 0x80
push edi
call sub.USER32.DLL_SendMessageA
mov eax, 0x4ba040
xor edx, edx
call fcn.0047d4e8
push eax
push 1
push 0x80
push dword [0x4b9824]
call sub.USER32.DLL_SendMessageA
cmp dword [0x4c96dc], 6
jne 0x476033
mov byte [ebp - 0x200c], 0
cmp byte [0x4aebf4], 0
je 0x475f67
push 0x4a1a71
mov eax, 0x4aebf4
call fcn.0040b590
push eax
call fcn.0048d3d8
add esp, 8
test eax, eax
jne 0x475f3d
mov eax, 0x210
call fcn.004117b8
jmp 0x475f47
mov eax, 0x20f
call fcn.004117b8
push eax
push 0x4a1a6b
lea edx, [ebp - 0x200c]
push edx
call fcn.004902f4
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.004776c4
cmp byte [0x4afbf4], 0
je 0x475f9a
mov eax, 0x20e
call fcn.004117b8
push eax
push 0x4a1a6b
lea edx, [ebp - 0x200c]
push edx
call fcn.004902f4
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.004776c4
cmp dword [0x4b0888], 0
je 0x475fcd
mov eax, 0x214
call fcn.004117b8
push eax
push 0x4a1a6b
lea edx, [ebp - 0x200c]
push edx
call fcn.004902f4
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.004776c4
cmp byte [0x4b0999], 0
je 0x476000
mov eax, 0x213
call fcn.004117b8
push eax
push 0x4a1a6b
lea edx, [ebp - 0x200c]
push edx
call fcn.004902f4
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.004776c4
cmp byte [0x4b089e], 0
je 0x476033
mov eax, 0x349
call fcn.004117b8
push eax
push 0x4a1a6b
lea edx, [ebp - 0x200c]
push edx
call fcn.004902f4
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.004776c4
cmp byte [ebp - 1], 0
je 0x47604f
push 0
push 0x6e
push 0x111
push dword [0x4b9824]
call sub.USER32.DLL_SendMessageA
jmp 0x47605c
push 5
push dword [0x4b9824]
call sub.USER32.DLL_ShowWindow
push ebx
call sub.KERNEL32.DLL_GlobalFree
cmp byte [0x4c96e0], 0
jne 0x476080
push 0x80
push 0x4c96e0
push dword [0x4b9824]
call sub.USER32.DLL_GetWindowTextA
cmp dword [0x4b9824], 0
jne 0x47608d
xor eax, eax
jmp 0x476094
call fcn.00476b3c
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4