Function at 0x47c8e4
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 2
add esp, 0xfffff004
push eax
dec eax
jne 0x47c8ed
mov eax, dword [ebp - 4]
add esp, 0xfffffff8
push ebx
push esi
push edi
mov byte [ebp - 1], cl
mov ebx, edx
mov esi, dword [ebp + 8]
cmp dword [0x4c144c], 0
je 0x47c918
xor eax, eax
jmp 0x47ceb2
mov dword [0x4cff7c], eax
xor edx, edx
mov byte [0x4d0080], dl
mov byte [0x4d0000], dl
mov byte [0x4cff80], dl
mov byte [0x4d0480], 0
mov dword [0x4d06cc], 0
mov dword [0x4d06d0], 0
xor eax, eax
xor edx, edx
mov dword [0x4d06ec], eax
mov dword [0x4d06f0], edx
mov dword [0x4d06e4], eax
mov dword [0x4d06e8], edx
mov dword [0x4d06dc], eax
mov dword [0x4d06e0], edx
mov dword [0x4d06d4], eax
mov dword [0x4d06d8], edx
mov byte [0x4d06f8], 0
xor ecx, ecx
mov dword [0x4d06f4], ecx
call fcn.0049cdec
mov dword [0x4d06c4], eax
xor eax, eax
mov dword [0x4cff78], eax
xor edx, edx
mov dword [0x4d06fc], edx
xor ecx, ecx
mov dword [0x4d06c0], ecx
mov byte [0x4d06c8], 0
mov byte [0x4d06c9], 0
mov byte [0x4d0730], 0
mov eax, dword [0x4cff7c]
test eax, eax
je 0x47c9d8
cmp eax, 1
je 0x47c9d8
cmp eax, 2
jne 0x47ca09
mov dword [0x4c4740], 0
mov dword [0x4c4744], 0
cmp dword [0x4c3de4], 0
jne 0x47ca09
mov dword [0x4c4748], 0
mov dword [0x4c474c], 0
cmp eax, 0xb
ja case.default.0x47ca12
jmp dword [eax*4 + 0x47ca19]
mov dword [0x4d072c], str.CMDWNDADD
mov byte [0x4d06c8], 1
jmp case.default.0x47ca12
mov eax, ebx
call fcn.0040ba30
push eax
mov eax, 0x20a
cmp dword [0x4cff7c], 1
je 0x47ca76
inc eax
call fcn.00411fe8
push eax
push 0x4cff80
call fcn.00497928
add esp, 0xc
cmp dword [0x4c3de4], 0
je 0x47ca9b
cmp dword [0x4c473c], 1
jg 0x47caba
mov eax, 0x4c219c
call fcn.0046241c
test eax, eax
jne 0x47cab6
mov ebx, dword [0x4c23a4]
test ebx, ebx
je 0x47caba
dec ebx
je 0x47caba
xor eax, eax
jmp 0x47cabf
mov eax, 1
mov byte [0x4d06c8], al
mov eax, 0x4c219c
call fcn.0046241c
test eax, eax
setne dl
and edx, 1
mov byte [0x4d06c9], dl
mov dword [0x4d072c], 0x4a9168
jmp case.default.0x47ca12
mov eax, ebx
call fcn.0040ba30
push eax
mov eax, 0x20c
call fcn.00411fe8
push eax
push 0x4cff80
call fcn.00497928
add esp, 0xc
mov dword [0x4d072c], 0x4a9172
jmp case.default.0x47ca12
mov eax, ebx
call fcn.0040ba30
push eax
mov eax, 0x20d
call fcn.00411fe8
push eax
push 0x4cff80
call fcn.00497928
add esp, 0xc
mov dword [0x4d072c], 0x4a9172
jmp case.default.0x47ca12
mov eax, ebx
call fcn.0040ba30
push eax
mov eax, 0x211
call fcn.00411fe8
push eax
push 0x4cff80
call fcn.00497928
add esp, 0xc
mov dword [0x4d072c], 0x4a9172
jmp case.default.0x47ca12
mov eax, 0x223
call fcn.00411fe8
push eax
push 0x4cff80
call fcn.004949c8
add esp, 8
mov dword [0x4d072c], 0x4a9172
jmp case.default.0x47ca12
mov eax, 0x50b
call fcn.00411fe8
push eax
push 0x4cff80
call fcn.004949c8
add esp, 8
mov dword [0x4d072c], 0x4a917e
jmp case.default.0x47ca12
mov dword [0x4d072c], str.CMDWNDFIND
jmp case.default.0x47ca12
mov eax, 0x543
call fcn.00411fe8
push eax
push 0x4cff80
call fcn.004949c8
add esp, 8
mov dword [0x4d072c], 0x4a9172
jmp case.default.0x47ca12
mov eax, 0x556
call fcn.00411fe8
push eax
push 0x4cff80
call fcn.004949c8
add esp, 8
mov dword [0x4d072c], 0x4a9172
jmp case.default.0x47ca12
mov dword [0x4d072c], str.CMDWNDBENCH
push 5
push dword [0x4d072c]
push dword [0x4ae754]
call sub.KERNEL32.DLL_FindResourceA
mov ebx, eax
push ebx
push dword [0x4ae754]
call sub.KERNEL32.DLL_LoadResource
mov dword [ebp - 8], eax
push ebx
push dword [0x4ae754]
call sub.KERNEL32.DLL_SizeofResource
mov edi, eax
push edi
push 0
call sub.KERNEL32.DLL_GlobalAlloc
mov ebx, eax
push edi
push dword [ebp - 8]
push ebx
call fcn.004947d8
add esp, 0xc
cmp dword [0x4c3de4], 1
je 0x47cc86
push dword [0x4c1440]
call sub.USER32.DLL_IsWindowVisible
test eax, eax
je 0x47cc86
xor eax, eax
jmp 0x47cc8b
mov eax, 1
mov byte [ebp - 9], al
cmp byte [ebp - 9], 0
je 0x47cca4
mov edx, dword [ebx]
and edx, 0xbfffffff
or edx, 0x800a0800
mov dword [ebx], edx
push 0
test esi, esi
jne 0x47ccaf
mov esi, fcn.0047cebc
push esi
cmp dword [0x4c3de4], 1
jne 0x47ccbd
xor eax, eax
jmp 0x47ccc2
mov eax, dword [0x4c1440]
push eax
push ebx
push dword [0x4ae754]
call sub.USER32.DLL_CreateDialogIndirectParamA
cmp byte [ebp - 9], 0
mov edi, eax
mov dword [0x4c144c], edi
je 0x47cd16
mov eax, 0x4c1c80
mov dl, 1
call fcn.004845e0
push eax
push 0
push 0x80
push edi
call sub.USER32.DLL_SendMessageA
mov eax, 0x4c1c80
xor edx, edx
call fcn.004845e0
push eax
push 1
push 0x80
push dword [0x4c144c]
call sub.USER32.DLL_SendMessageA
cmp dword [0x4cff7c], 6
jne 0x47ce51
mov byte [ebp - 0x200c], 0
cmp byte [0x4b63d4], 0
je 0x47cd85
push 0x4a91a9
mov eax, 0x4b63d4
call fcn.0040ba30
push eax
call fcn.0049497c
add esp, 8
test eax, eax
jne 0x47cd5b
mov eax, 0x210
call fcn.00411fe8
jmp 0x47cd65
mov eax, 0x20f
call fcn.00411fe8
push eax
push 0x4a91a3
lea edx, [ebp - 0x200c]
push edx
call fcn.00497928
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.0047e5d0
cmp byte [0x4b73d4], 0
je 0x47cdb8
mov eax, 0x20e
call fcn.00411fe8
push eax
push 0x4a91a3
lea edx, [ebp - 0x200c]
push edx
call fcn.00497928
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.0047e5d0
cmp dword [0x4b8068], 0
je 0x47cdeb
mov eax, 0x214
call fcn.00411fe8
push eax
push 0x4a91a3
lea edx, [ebp - 0x200c]
push edx
call fcn.00497928
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.0047e5d0
cmp byte [0x4b8189], 0
je 0x47ce1e
mov eax, 0x213
call fcn.00411fe8
push eax
push 0x4a91a3
lea edx, [ebp - 0x200c]
push edx
call fcn.00497928
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.0047e5d0
cmp byte [0x4b807e], 0
je 0x47ce51
mov eax, 0x349
call fcn.00411fe8
push eax
push 0x4a91a3
lea edx, [ebp - 0x200c]
push edx
call fcn.00497928
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.0047e5d0
cmp byte [ebp - 1], 0
je 0x47ce6d
push 0
push 0x6e
push 0x111
push dword [0x4c144c]
call sub.USER32.DLL_SendMessageA
jmp 0x47ce7a
push 5
push dword [0x4c144c]
call sub.USER32.DLL_ShowWindow
push ebx
call sub.KERNEL32.DLL_GlobalFree
cmp byte [0x4cff80], 0
jne 0x47ce9e
push 0x80
push 0x4cff80
push dword [0x4c144c]
call sub.USER32.DLL_GetWindowTextA
cmp dword [0x4c144c], 0
jne 0x47ceab
xor eax, eax
jmp 0x47ceb2
call fcn.0047d960
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4