Function at 0x4056cd
Capabilities:
Create process on windows
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
mov eax, dword [ebp + 0xc]
push ebx
push esi
cmp eax, 0x15
push edi
ja 0x405746
je 0x405720
dec eax
dec eax
je 0x405702
sub eax, 0xe
je 0x4056fe
dec eax
dec eax
jne 0x4058b2
push 0xfffffffffffffffd
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x405719
push 0xfffffffffffffffe
jmp 0x4056f6
mov eax, dword [0x4178f4]
test eax, eax
je 0x405719
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
and dword [0x4178f4], 0
xor eax, eax
jmp 0x405915
mov eax, dword [0x4178f4]
test eax, eax
je 0x405719
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push 0xf
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [0x4178f4], eax
jmp 0x405719
cmp eax, 0x19
je 0x4058a2
cmp eax, 0x116
je 0x405873
cmp eax, 0x1ff
jbe 0x4058b2
cmp eax, 0x201
ja 0x4058b2
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, 0x3db
push ebx
push dword [ebp + 8]
call esi
mov edi, eax
test edi, edi
jne 0x40579b
push 0x3dc
push dword [ebp + 8]
call esi
mov edi, eax
test edi, edi
je 0x4058b2
lea eax, [ebp - 0x10]
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov esi, dword [sym.imp.USER32.dll_ScreenToClient]
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call esi
lea eax, [ebp - 8]
push eax
push dword [ebp + 8]
call esi
movzx eax, word [ebp + 0x14]
cmp eax, dword [ebp - 0x10]
jl 0x4058b2
cmp eax, dword [ebp - 8]
jge 0x4058b2
mov eax, dword [ebp + 0x14]
shr eax, 0x10
cmp eax, dword [ebp - 0xc]
jl 0x4058b2
cmp eax, dword [ebp - 4]
jge 0x4058b2
cmp dword [ebp + 0xc], 0x200
jne 0x40580b
mov eax, dword [0x4318c0]
push dword [eax + 0x67a4]
call dword [sym.imp.USER32.dll_SetCursor]
jmp 0x4058b2
push edi
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
sub eax, ebx
je 0x40584b
dec eax
jne 0x4058b2
lea eax, [ebp - 0x110]
push 0x100
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowTextA]
xor eax, eax
push 5
push eax
lea ecx, [ebp - 0x110]
push eax
push ecx
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x4058b2
mov eax, dword [0x4318c0]
push 1
push 0
push dword [eax + 0x67a0]
push 0x20
push str.About...
push str.This_self_extracting_zip_file_was_created_with_the_Xceed_Absolute_Packager_v1.1.___the_software_that_makes_it_easy_to_create_high_quality_zip_files_that_can_unzip_their_own_contents._n_nDiscover_Absolute_Packager_for_yourself___get_the_free_trial_version_from_Xceed_Softwares_web_site_at:
push dword [ebp + 8]
call fcn.00407447
add esp, 0x1c
jmp 0x4058b2
mov esi, dword [sym.imp.USER32.dll_EnableMenuItem]
push 1
push 0xf000
push dword [ebp + 0x10]
call esi
push 1
push 0xf030
push dword [ebp + 0x10]
call esi
push 1
push 0xf020
push dword [ebp + 0x10]
call esi
jmp 0x405719
mov eax, dword [ebp + 0x14]
shr eax, 0x10
cmp eax, 3
je 0x4058e8
cmp eax, 6
je 0x4058c6
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x405915
movzx eax, word [ebp + 0x14]
push 0xfffffffffffffff4
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
cmp eax, 0x3dc
jne 0x4058e8
push 0xff0000
push dword [ebp + 0x10]
call dword [sym.imp.GDI32.dll_SetTextColor]
cmp dword [0x4178f4], 0
jne 0x405905
push 0xf
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [0x4178f4], eax
push 1
push dword [ebp + 0x10]
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, dword [0x4178f4]
pop edi
pop esi
pop ebx
leave
ret 0x10