Function at 0x4a27f0
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
mov eax, 0x120c
call fcn.004c1320
mov eax, dword [0x4eb0b4]
xor eax, esp
mov dword [esp + 0x1208], eax
mov ecx, dword [esp + 0x1214]
mov eax, dword [esp + 0x121c]
push ebx
push ebp
xor ebp, ebp
cmp dword [0x532b4c], ebp
push esi
setne bl
xor edx, edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov word [0x56d740], dx
test bl, bl
jne 0x4a2860
mov eax, dword [esp + 0x121c]
mov byte [0x56d1f7], dl
mov byte [0x56d1f6], dl
mov byte [0x56cf31], dl
mov dword [0x570040], eax
mov word [0x56d640], dx
jmp 0x4a2865
mov eax, dword [0x570040]
cmp eax, 0xb
ja case.default.0x4a286e
jmp dword [eax*4 + 0x4a2ea4]
mov dword [0x56cf34], str.CMDWNDADD
test bl, bl
jne 0x4a2bef
mov byte [0x56d1f7], 1
xor eax, eax
xor ecx, ecx
xor edx, edx
mov byte [0x56f840], 0
mov word [0x56e840], cx
mov word [0x56d240], dx
mov word [0x56d190], ax
mov dword [0x56d188], ebp
mov dword [0x56d18c], ebp
mov dword [0x56d168], ebp
mov dword [0x56d16c], ebp
mov dword [0x56d170], ebp
mov dword [0x56d174], ebp
mov dword [0x56d178], ebp
mov dword [0x56d17c], ebp
mov dword [0x56d180], ebp
mov dword [0x56d184], ebp
mov byte [0x56cf33], al
mov byte [0x56cf32], al
mov dword [0x56cf64], ebp
call fcn.004c2d35
xor ecx, ecx
mov dword [0x56d1f8], eax
mov dword [0x570044], ebp
mov word [0x56cf68], cx
mov dword [0x56d1fc], ebp
call fcn.0045dc70
mov byte [0x56cf30], 0
call fcn.0049eef0
movzx edx, al
push edx
push str.SystemProgressBar
push 0x4d8920
call fcn.0046c8f0
test eax, eax
setne al
mov byte [0x56d1f5], al
call fcn.0044b3b0
cmp eax, 0x601
sbb ecx, ecx
inc ecx
push ecx
push str.TaskbarProgressBar
push 0x4d8920
call fcn.0046c8f0
test eax, eax
mov eax, dword [0x570040]
setne dl
mov byte [0x56d1f4], dl
cmp eax, ebp
je 0x4a2983
cmp eax, 1
je 0x4a2983
cmp eax, 2
jne 0x4a29a3
mov dword [0x534c10], ebp
mov dword [0x534c14], ebp
cmp dword [0x533b6c], ebp
jne 0x4a29a3
mov dword [0x533be8], ebp
mov dword [0x533bec], ebp
mov eax, dword [0x56cf34]
mov ecx, dword [0x51ef04]
push edi
push 5
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edx, dword [0x51ef04]
mov esi, eax
push esi
push edx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov edi, eax
mov eax, dword [0x51ef04]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
push esi
push ebp
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push esi
mov ebp, eax
push edi
push ebp
call fcn.004c2480
add esp, 0xc
cmp dword [0x533b6c], 1
je 0x4a2bfb
mov ecx, dword [0x534ca4]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4a2bfb
xor bl, bl
jmp 0x4a2c2f
push ecx
call fcn.00460620
push eax
xor eax, eax
mov esi, 1
cmp dword [0x570040], esi
setne al
add eax, 0x20f
push eax
call fcn.00475570
push eax
push 0x56d740
mov edx, 0x880
call fcn.0041cb70
add esp, 0xc
test bl, bl
jne 0x4a2ab3
cmp dword [0x533b6c], ebp
je 0x4a2a61
cmp dword [0x533bf4], esi
ja 0x4a2a88
cmp dword [0x54181c], ebp
je 0x4a2a88
mov ecx, 0x541610
call fcn.00415340
test eax, eax
jne 0x4a2a7f
cmp dword [0x54181c], esi
je 0x4a2a88
mov byte [0x56d1f7], 0
jmp 0x4a2a8f
mov byte [0x56d1f7], 1
mov ecx, 0x541610
call fcn.00415340
test eax, eax
je 0x4a2aac
mov byte [0x56d1f6], 1
cmp dword [0x54181c], ebp
jne 0x4a2ab3
mov byte [0x56d1f6], 0
mov dword [0x56cf34], str.CMDWNDADD
jmp case.default.0x4a286e
push ecx
call fcn.00460620
push eax
push 0x211
call fcn.00475570
push eax
push 0x56d740
mov edx, 0x880
call fcn.0041cb70
add esp, 0xc
mov dword [0x56cf34], 0x4dde60
jmp case.default.0x4a286e
push ecx
call fcn.00460620
push eax
push 0x212
jmp 0x4a2ace
push ecx
call fcn.00460620
push eax
push 0x216
jmp 0x4a2ace
push 0x223
call fcn.00475570
mov edx, 0x56d740
movzx ecx, word [eax]
mov word [edx], cx
add eax, 2
add edx, 2
cmp cx, bp
jne 0x4a2b20
mov dword [0x56cf34], str.CMDWNDOTHER
jmp case.default.0x4a286e
push 0x50b
call fcn.00475570
mov edx, 0x56d740
nop
movzx ecx, word [eax]
mov word [edx], cx
add eax, 2
add edx, 2
cmp cx, bp
jne 0x4a2b50
mov dword [0x56cf34], str.CMDWNDCONVERT
jmp case.default.0x4a286e
mov dword [0x56cf34], str.CMDWNDFIND
jmp case.default.0x4a286e
push 0x543
call fcn.00475570
mov edx, 0x56d740
jmp 0x4a2b90
movzx ecx, word [eax]
mov word [edx], cx
add eax, 2
add edx, 2
cmp cx, bp
jne 0x4a2b90
mov dword [0x56cf34], str.CMDWNDOTHER
jmp case.default.0x4a286e
push 0x556
call fcn.00475570
mov edx, 0x56d740
lea esp, [esp]
movzx ecx, word [eax]
mov word [edx], cx
add eax, 2
add edx, 2
cmp cx, bp
jne 0x4a2bc0
mov dword [0x56cf34], str.CMDWNDOTHER
jmp case.default.0x4a286e
mov dword [0x56cf34], str.CMDWNDBENCH
test bl, bl
je 0x4a288e
call fcn.004a06c0
xor al, al
jmp 0x4a2e87
mov eax, dword [ebp]
mov edx, eax
and edx, 0xffff0000
mov bl, 1
cmp edx, 0xffff0000
jne 0x4a2c22
mov eax, dword [ebp + 0xc]
and eax, 0x3ff5f7ff
or eax, 0x800a0800
mov dword [ebp + 0xc], eax
jmp 0x4a2c2f
and eax, 0x3ff5f7ff
or eax, 0x800a0800
mov dword [ebp], eax
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4a2c3c
mov eax, fcn.004a1be0
mov ecx, dword [0x533b6c]
mov edx, dword [0x51ef04]
dec ecx
neg ecx
push 0
sbb ecx, ecx
and ecx, dword [0x534ca4]
push eax
push ecx
push ebp
push edx
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamW]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [0x532b4c], eax
test bl, bl
je 0x4a2ca7
push 1
mov ecx, 0x543fb0
call fcn.00480e90
push eax
mov eax, dword [0x532b4c]
push 0
push 0x80
push eax
call edi
push 0
mov ecx, 0x543fb0
call fcn.00480e90
mov ecx, dword [0x532b4c]
push eax
push 1
push 0x80
push ecx
call edi
cmp dword [0x570040], 6
jne 0x4a2d82
cmp word [0x546068], 0
je 0x4a2d1e
push 0x546068
mov esi, 0x4d7ec0
call fcn.00460620
lea ecx, [ecx]
mov cx, word [eax]
cmp cx, word [esi]
jne 0x4a2cf6
test cx, cx
je 0x4a2cf2
mov cx, word [eax + 2]
cmp cx, word [esi + 2]
jne 0x4a2cf6
add eax, 4
add esi, 4
test cx, cx
jne 0x4a2cd0
xor eax, eax
jmp 0x4a2cfb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4a2d06
push 0x215
jmp 0x4a2d0b
push 0x214
call fcn.00475570
push eax
push 0x4dde08
call fcn.004a00f0
add esp, 8
cmp word [0x54806e], 0
je 0x4a2d40
push 0x213
call fcn.00475570
push eax
push 0x4dde08
call fcn.004a00f0
add esp, 8
cmp dword [0x54b194], 0
je 0x4a2d61
push 0x218
call fcn.00475570
push eax
push 0x4dde08
call fcn.004a00f0
add esp, 8
cmp byte [0x54b330], 0
je 0x4a2d82
push 0x217
call fcn.00475570
push eax
push 0x4dde08
call fcn.004a00f0
add esp, 8
cmp byte [esp + 0x1228], 0
je 0x4a2da0
mov edx, dword [0x532b4c]
push 0
push 0x6e
push 0x111
push edx
call edi
jmp 0x4a2dae
mov eax, dword [0x532b4c]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push ebp
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [0x570040]
test eax, eax
je 0x4a2dc8
cmp eax, 1
je 0x4a2dc8
cmp eax, 2
jne 0x4a2e01
mov ecx, dword [esp + 0x10]
push ecx
push 0x28a
call fcn.00475570
push eax
lea edx, [esp + 0x20]
push edx
mov edx, 0x900
call fcn.0041cb70
mov ecx, dword [0x532b4c]
add esp, 0xc
lea eax, [esp + 0x18]
push eax
push 0xa5
push ecx
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp word [0x56d740], 0
jne 0x4a2e22
mov edx, dword [0x532b4c]
push 0x880
push 0x56d740
push edx
call dword [sym.imp.USER32.dll_GetWindowTextW]
cmp dword [0x532b4c], 0
jne 0x4a2e2f
xor al, al
jmp 0x4a2e86
call fcn.004a06c0
cmp byte [0x54f41c], 0
je 0x4a2e84
cmp dword [0x534c9c], 0
je 0x4a2e84
mov edi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor esi, esi
mov edi, edi
mov eax, dword [0x534c9c]
push 0xa
push eax
call edi
cmp eax, 0x102
jne 0x4a2e77
cmp byte [0x534c20], 0
jne 0x4a2e84
call fcn.00453710
inc esi
cmp esi, 0x14
jb 0x4a2e50
jmp 0x4a2e84
mov ecx, dword [0x534c9c]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov al, 1
pop edi
mov ecx, dword [esp + 0x1214]
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004c1302
add esp, 0x120c
ret 0x10