Function at 0x4efde0
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
sub esp, 0x250
mov eax, dword [0x572844]
xor eax, esp
mov dword [esp + 0x24c], eax
mov eax, dword [0x57a0d4]
test eax, eax
push ebx
push ebp
mov ebp, dword [esp + 0x260]
setne bl
push esi
xor ecx, ecx
mov word [0x5db718], cx
push edi
mov edi, dword [esp + 0x270]
mov dword [esp + 0x14], edi
test eax, eax
jne 0x4efe5a
mov eax, dword [esp + 0x264]
mov byte [0x5dcd19], cl
mov byte [0x5dcd1a], cl
mov byte [0x5dcd67], cl
mov byte [0x5dcdf8], cl
mov dword [0x5d9714], eax
mov word [0x5dc818], cx
mov byte [0x5dcd18], cl
mov byte [0x5dcdfb], cl
jmp 0x4efe5f
mov eax, dword [0x5d9714]
cmp eax, 0xe
ja case.default.0x4efe68
jmp dword [eax*4 + 0x4f0564]
test bl, bl
jne 0x4eff2a
mov byte [0x5dcd19], 1
mov dword [0x5dd028], 0x555ac4
jmp case.default.0x4efe68
push ebp
call fcn.00495850
xor ecx, ecx
mov esi, eax
cmp dword [0x5d9714], 1
setne cl
add ecx, 0x20f
push ecx
call fcn.004a9c90
push esi
push eax
push 0x880
push 0x5db718
call fcn.00402c90
add esp, 0x10
test bl, bl
jne 0x4eff2a
cmp dword [0x57a0e4], 0
mov eax, dword [0x5a57ac]
je 0x4efedc
cmp dword [0x57b118], 1
ja 0x4efee9
test eax, eax
je 0x4efee9
cmp eax, 1
je 0x4efee9
xor al, al
jmp 0x4efeeb
mov al, 1
mov byte [0x5dcd19], al
mov ecx, 0x5a57a8
lea eax, [esp + 0x6c]
push eax
call fcn.004076c0
cmp byte [esp + 0x18e], 0
je 0x4eff23
push 0x5429c8
lea eax, [esp + 0x70]
push eax
call fcn.004b4410
mov byte [0x5dcd1a], 1
test eax, eax
je 0x4eff2a
mov byte [0x5dcd1a], 0
mov dword [0x5dd028], str.CMDWNDADD
jmp case.default.0x4efe68
push ebp
call fcn.00495850
push 0x211
mov esi, eax
call fcn.004a9c90
push esi
push eax
push 0x880
push 0x5db718
call fcn.00402c90
add esp, 0x10
mov dword [0x5dd028], 0x555ad8
jmp case.default.0x4efe68
push ebp
call fcn.00495850
push 0x212
jmp 0x4eff44
push 0x880
push 0x24e
call fcn.004a9c90
push eax
push 0x5db718
call fcn.004b0360
mov dword [0x5dd028], 0x555ad8
jmp case.default.0x4efe68
push ebp
call fcn.00495850
push 0x216
jmp 0x4eff44
push 0x880
push 0x223
jmp 0x4eff85
push 0x880
push 0x672
jmp 0x4eff85
push 0x880
push 0x50b
call fcn.004a9c90
push eax
push 0x5db718
call fcn.004b0360
mov dword [0x5dd028], 0x555af0
jmp case.default.0x4efe68
mov dword [0x5dd028], str.CMDWNDFIND
jmp case.default.0x4efe68
push 0x880
push 0x543
jmp 0x4eff85
push 0x880
push 0x556
jmp 0x4eff85
mov dword [0x5dd028], str.CMDWNDBENCH
jmp case.default.0x4efe68
mov dword [0x5dd028], str.CMDWNDREAD
test bl, bl
je 0x4f003f
call fcn.004f1c40
xor al, al
jmp 0x4f0546
call fcn.004ec7f0
test al, al
je 0x4f0091
mov eax, dword [esp + 0x264]
push ebp
mov dword [esp + 0x1c], eax
call fcn.005264ec
add esp, 4
mov dword [esp + 0x1c], eax
mov al, byte [esp + 0x26c]
mov byte [esp + 0x20], al
lea eax, [esp + 0x18]
mov dword [esp + 0x24], edi
push eax
push 0
push 0x800f
push dword [0x57a0c8]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
setne al
jmp 0x4f0546
xor eax, eax
mov word [0x5d9718], ax
mov word [0x5dc918], ax
mov word [0x5dcd68], ax
mov dword [0x5dcdd0], eax
mov dword [0x5dcdd4], eax
mov dword [0x5dcdf0], eax
mov dword [0x5dcdf4], eax
mov dword [0x5dcde8], eax
mov dword [0x5dcdec], eax
mov dword [0x5dcde0], eax
mov dword [0x5dcde4], eax
mov dword [0x5dcdd8], eax
mov dword [0x5dcddc], eax
mov byte [0x5dcd65], al
mov byte [0x5dcd66], al
mov dword [0x5dcdcc], eax
call fcn.005258b5
mov dword [0x5dcd60], eax
xor eax, eax
mov dword [0x5d9710], 0
mov word [0x5dce00], ax
mov dword [0x5dcd1c], eax
call fcn.0045be00
mov byte [0x5dcdf9], 0
mov byte [0x5dcdfa], 0
call fcn.004ec840
movzx eax, al
push eax
push str.SystemProgressBar
push 0x542e7c
call fcn.004c2f20
test eax, eax
setne byte [0x5dcd1b]
call fcn.004881b0
cmp eax, 0x601
sbb eax, eax
inc eax
push eax
push str.TaskbarProgressBar
push 0x542e7c
call fcn.004c2f20
test eax, eax
mov eax, dword [0x5d9714]
setne byte [0x5dcd64]
test eax, eax
je 0x4f0174
cmp eax, 1
je 0x4f0174
cmp eax, 2
jne 0x4f01a5
cmp dword [0x57a0e4], 0
mov dword [0x57b120], 0
mov dword [0x57b124], 0
jne 0x4f01a5
mov dword [0x57b138], 0
mov dword [0x57b13c], 0
push 5
push dword [0x5dd028]
push dword [0x5b6818]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
push esi
push dword [0x5b6818]
call dword [sym.imp.KERNEL32.dll_LoadResource]
push esi
push dword [0x5b6818]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push esi
mov ebx, eax
push edi
push ebx
call fcn.0051f6b0
add esp, 0xc
cmp dword [0x57a0e4], 1
je 0x4f020f
push dword [0x57a0c8]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4f020f
mov byte [esp + 0x13], 0
jmp 0x4f024d
cmp dword [0x5d9714], 0xe
mov byte [esp + 0x13], 1
je 0x4f024d
mov ecx, dword [ebx]
mov eax, ecx
and eax, 0xffff0000
cmp eax, 0xffff0000
jne 0x4f023f
mov eax, dword [ebx + 0xc]
and eax, 0x3ff5f7ff
or eax, 0x800a0800
mov dword [ebx + 0xc], eax
jmp 0x4f024d
and ecx, 0x3ff5f7ff
or ecx, 0x800a0800
mov dword [ebx], ecx
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4f025a
mov eax, fcn.004eeca0
push 0
push eax
mov eax, dword [0x57a0e4]
dec eax
neg eax
sbb eax, eax
and eax, dword [0x57a0c8]
push eax
push ebx
push dword [0x5b6818]
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamW]
cmp byte [esp + 0x13], 0
mov dword [0x57a0d4], eax
je 0x4f02c7
push 1
mov ecx, 0x5aa610
call fcn.004cdb80
push eax
push 0
push 0x80
push dword [0x57a0d4]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
mov ecx, 0x5aa610
call fcn.004cdb80
push eax
push 1
push 0x80
push dword [0x57a0d4]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5d9714], 0xe
jne 0x4f02fb
push 0
push 0x9a
push dword [0x57a0d4]
call fcn.00410d50
push 0
push 0xa3
push dword [0x57a0d4]
call fcn.00410d50
mov byte [0x5dcdf8], 1
cmp dword [0x5d9714], 8
jne 0x4f03dc
cmp dword [0x58fc08], 0
jne 0x4f03dc
cmp word [0x589ad0], 0
je 0x4f0378
push 0x589ad0
mov esi, 0x545778
call fcn.00495850
mov edi, edi
mov cx, word [eax]
cmp cx, word [esi]
jne 0x4f0356
test cx, cx
je 0x4f0352
mov cx, word [eax + 2]
cmp cx, word [esi + 2]
jne 0x4f0356
add eax, 4
add esi, 4
test cx, cx
jne 0x4f0330
xor eax, eax
jmp 0x4f035b
sbb eax, eax
or eax, 1
neg eax
sbb eax, eax
add eax, 0x215
push eax
call fcn.004a9c90
push eax
push str.___s
call fcn.004ee4d0
add esp, 8
cmp word [0x58bad6], 0
je 0x4f039a
push 0x213
call fcn.004a9c90
push eax
push str.___s
call fcn.004ee4d0
add esp, 8
cmp dword [0x58fc04], 0
je 0x4f03bb
push 0x218
call fcn.004a9c90
push eax
push str.___s
call fcn.004ee4d0
add esp, 8
cmp byte [0x58fed8], 0
je 0x4f03dc
push 0x217
call fcn.004a9c90
push eax
push str.___s
call fcn.004ee4d0
add esp, 8
cmp byte [esp + 0x26c], 0
je 0x4f0400
push 0
push 0xa8
push 0x111
push dword [0x57a0d4]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x4f0441
mov esi, dword [0x5d9714]
sub esi, 0xe
neg esi
sbb esi, esi
and esi, 5
cmp byte [esp + 0x13], 0
je 0x4f0434
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
test byte [esp + 0x54], 1
je 0x4f0434
movzx eax, word [esp + 0x58]
neg eax
sbb eax, eax
and esi, eax
push esi
push dword [0x57a0d4]
call dword [sym.imp.USER32.dll_ShowWindow]
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [0x5d9714]
test eax, eax
je 0x4f0460
cmp eax, 1
je 0x4f0460
cmp eax, 2
je 0x4f0460
cmp eax, 0xe
jne 0x4f0499
push ebp
push 0xa6
push dword [0x57a0d4]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0xa6
push dword [0x57a0d4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.004cbe30
push 0x800
push ebp
push 0x5da718
call fcn.004b0360
cmp word [0x5db718], 0
jne 0x4f04b9
push 0x880
push 0x5db718
push dword [0x57a0d4]
call dword [sym.imp.USER32.dll_GetWindowTextW]
cmp dword [0x57a0d4], 0
je 0x4f0038
call fcn.004f1c40
mov eax, dword [0x5d9714]
cmp eax, 0xe
je 0x4f04e7
push 0
push dword [0x57a0d4]
call fcn.004ee460
mov eax, dword [0x5d9714]
test eax, eax
jne 0x4f0544
cmp byte [0x5dcdfa], al
jne 0x4f0544
cmp byte [0x594fcc], al
je 0x4f0544
mov eax, dword [0x57a0ec]
test eax, eax
je 0x4f0544
xor esi, esi
push 0xa
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x4f0531
cmp byte [0x57a0e2], 0
jne 0x4f053d
call fcn.00458ec0
inc esi
cmp esi, 0x14
jae 0x4f053d
mov eax, dword [0x57a0ec]
jmp 0x4f0506
push dword [0x57a0ec]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [0x5dcdfa], 1
mov al, 1
mov ecx, dword [esp + 0x25c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0051dca8
add esp, 0x250
ret 0x10