Function at 0x4da270
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
sub esp, 0x250
mov eax, dword [0x5755c4]
xor eax, esp
mov dword [esp + 0x24c], eax
cmp dword [0x57dfa8], 0
push ebx
push ebp
mov ebp, dword [esp + 0x260]
setne bl
push esi
mov esi, dword [esp + 0x26c]
xor eax, eax
mov dword [esp + 0x10], esi
mov word [0x5dc750], ax
push edi
mov edi, dword [esp + 0x264]
test bl, bl
jne 0x4da2e9
xor ecx, ecx
mov byte [0x5ddd51], al
mov byte [0x5ddd52], al
mov byte [0x5ddd9f], al
mov byte [0x5dde30], al
mov eax, edi
mov dword [0x5da74c], eax
mov word [0x5dd850], cx
mov byte [0x5ddd50], cl
mov byte [0x5dde33], cl
jmp 0x4da2ee
mov eax, dword [0x5da74c]
cmp eax, 0xe
ja case.default.0x4da2f7
jmp dword [eax*4 + 0x4da980]
test bl, bl
jne 0x4da309
mov byte [0x5ddd51], 1
mov dword [0x5de060], str.CMDWNDADD
jmp case.default.0x4da2f7
push ebp
call fcn.00486220
push eax
xor eax, eax
cmp dword [0x5da74c], 1
setne al
add eax, 0x20f
push eax
call fcn.00497960
push eax
push 0x880
push 0x5dc750
call fcn.00402930
add esp, 0x10
test bl, bl
jne 0x4da3b5
cmp dword [0x57dfb8], 0
mov eax, dword [0x5a6674]
je 0x4da364
cmp dword [0x57efec], 1
ja 0x4da374
test eax, eax
je 0x4da374
mov byte [0x5ddd51], 0
cmp eax, 1
jne 0x4da37b
mov byte [0x5ddd51], 1
lea eax, [esp + 0x6c]
mov ecx, 0x5a6670
push eax
call fcn.00406c50
cmp byte [esp + 0x18e], 0
je 0x4da3ae
push 0x541ed0
lea eax, [esp + 0x70]
push eax
call fcn.004a1330
mov byte [0x5ddd52], 1
test eax, eax
je 0x4da3b5
mov byte [0x5ddd52], 0
mov dword [0x5de060], str.CMDWNDADD
jmp case.default.0x4da2f7
push ebp
call fcn.00486220
push eax
push 0x211
call fcn.00497960
push eax
push 0x880
push 0x5dc750
call fcn.00402930
add esp, 0x10
mov dword [0x5de060], 0x553f7c
jmp case.default.0x4da2f7
push ebp
call fcn.00486220
push eax
push 0x212
jmp 0x4da3d0
push 0x880
push 0x24e
call fcn.00497960
push eax
push 0x5dc750
call fcn.0049dc20
mov dword [0x5de060], 0x553f7c
jmp case.default.0x4da2f7
push ebp
call fcn.00486220
push eax
push 0x216
jmp 0x4da3d0
push 0x880
push 0x223
jmp 0x4da40f
push 0x880
push 0x672
jmp 0x4da40f
push 0x880
push 0x50b
call fcn.00497960
push eax
push 0x5dc750
call fcn.0049dc20
mov dword [0x5de060], 0x553f94
jmp case.default.0x4da2f7
mov dword [0x5de060], str.CMDWNDFIND
jmp case.default.0x4da2f7
push 0x880
push 0x543
jmp 0x4da40f
push 0x880
push 0x556
jmp 0x4da40f
mov dword [0x5de060], str.CMDWNDBENCH
jmp case.default.0x4da2f7
mov dword [0x5de060], str.CMDWNDREAD
test bl, bl
je 0x4da4ca
call fcn.004dc020
xor al, al
jmp 0x4da963
call fcn.004d6e40
test al, al
je 0x4da515
push ebp
mov dword [esp + 0x1c], edi
call fcn.0052551d
add esp, 4
mov dword [esp + 0x1c], eax
mov al, byte [esp + 0x26c]
mov byte [esp + 0x20], al
lea eax, [esp + 0x18]
mov dword [esp + 0x24], esi
push eax
push 0
push 0x800f
push dword [0x57cf9c]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
setne al
jmp 0x4da963
xor eax, eax
mov word [0x5da750], ax
mov word [0x5dd950], ax
mov word [0x5ddda0], ax
mov dword [0x5dde08], eax
mov dword [0x5dde0c], eax
mov dword [0x5dde28], eax
mov dword [0x5dde2c], eax
mov dword [0x5dde20], eax
mov dword [0x5dde24], eax
mov dword [0x5dde18], eax
mov dword [0x5dde1c], eax
mov dword [0x5dde10], eax
mov dword [0x5dde14], eax
mov byte [0x5ddd9d], al
mov byte [0x5ddd9e], al
mov dword [0x5dde04], eax
call fcn.00524816
mov dword [0x5ddd98], eax
xor eax, eax
mov dword [0x5da748], 0
mov word [0x5dde38], ax
mov dword [0x5ddd54], eax
call fcn.00451640
mov byte [0x5dde31], 0
mov byte [0x5dde32], 0
call fcn.004d6e90
movzx eax, al
push eax
push str.SystemProgressBar
push 0x542388
call fcn.004af130
test eax, eax
setne byte [0x5ddd53]
call fcn.00478e40
cmp eax, 0x601
sbb eax, eax
inc eax
push eax
push str.TaskbarProgressBar
push 0x542388
call fcn.004af130
test eax, eax
mov eax, dword [0x5da74c]
setne byte [0x5ddd9c]
test eax, eax
je 0x4da5f8
cmp eax, 1
je 0x4da5f8
cmp eax, 2
jne 0x4da629
cmp dword [0x57dfb8], 0
mov dword [0x57eff0], 0
mov dword [0x57eff4], 0
jne 0x4da629
mov dword [0x57f008], 0
mov dword [0x57f00c], 0
push 5
push dword [0x5de060]
push dword [0x5b76d8]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
push esi
push dword [0x5b76d8]
call dword [sym.imp.KERNEL32.dll_LoadResource]
push esi
push dword [0x5b76d8]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push esi
mov ebx, eax
push edi
push ebx
call fcn.0051ff80
add esp, 0xc
cmp dword [0x57dfb8], 1
je 0x4da693
push dword [0x57cf9c]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4da693
mov byte [esp + 0x13], 0
jmp 0x4da6d1
cmp dword [0x5da74c], 0xe
mov byte [esp + 0x13], 1
je 0x4da6d1
mov ecx, dword [ebx]
mov eax, ecx
and eax, 0xffff0000
cmp eax, 0xffff0000
jne 0x4da6c3
mov eax, dword [ebx + 0xc]
and eax, 0x3ff5f7ff
or eax, 0x800a0800
mov dword [ebx + 0xc], eax
jmp 0x4da6d1
and ecx, 0x3ff5f7ff
or ecx, 0x800a0800
mov dword [ebx], ecx
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4da6de
mov eax, fcn.004d9180
push 0
push eax
mov eax, dword [0x57dfb8]
dec eax
neg eax
sbb eax, eax
and eax, dword [0x57cf9c]
push eax
push ebx
push dword [0x5b76d8]
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamW]
cmp byte [esp + 0x13], 0
mov dword [0x57dfa8], eax
je 0x4da74b
push 1
mov ecx, 0x5ab4d8
call fcn.004b8ea0
push eax
push 0
push 0x80
push dword [0x57dfa8]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
mov ecx, 0x5ab4d8
call fcn.004b8ea0
push eax
push 1
push 0x80
push dword [0x57dfa8]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5da74c], 0xe
jne 0x4da77f
push 0
push 0x9a
push dword [0x57dfa8]
call fcn.00410430
push 0
push 0xa3
push dword [0x57dfa8]
call fcn.00410430
mov byte [0x5dde30], 1
cmp dword [0x5da74c], 8
jne 0x4da864
cmp dword [0x591adc], 0
jne 0x4da864
cmp word [0x58c9a8], 0
je 0x4da800
push 0x58c9a8
mov esi, 0x543e90
call fcn.00486220
mov cx, word [eax]
cmp cx, word [esi]
jne 0x4da7d8
test cx, cx
je 0x4da7d4
mov cx, word [eax + 2]
cmp cx, word [esi + 2]
jne 0x4da7d8
add eax, 4
add esi, 4
test cx, cx
jne 0x4da7b2
xor eax, eax
jmp 0x4da7dd
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4da7e8
push 0x215
jmp 0x4da7ed
push 0x214
call fcn.00497960
push eax
push str.___s
call fcn.004d89d0
add esp, 8
cmp word [0x58e9ae], 0
je 0x4da822
push 0x213
call fcn.00497960
push eax
push str.___s
call fcn.004d89d0
add esp, 8
cmp dword [0x591ad8], 0
je 0x4da843
push 0x218
call fcn.00497960
push eax
push str.___s
call fcn.004d89d0
add esp, 8
cmp byte [0x591da8], 0
je 0x4da864
push 0x217
call fcn.00497960
push eax
push str.___s
call fcn.004d89d0
add esp, 8
cmp byte [esp + 0x26c], 0
je 0x4da888
push 0
push 0xa8
push 0x111
push dword [0x57dfa8]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x4da8c9
mov esi, dword [0x5da74c]
sub esi, 0xe
neg esi
sbb esi, esi
and esi, 5
cmp byte [esp + 0x13], 0
je 0x4da8bc
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
test byte [esp + 0x54], 1
je 0x4da8bc
movzx eax, word [esp + 0x58]
neg eax
sbb eax, eax
and esi, eax
push esi
push dword [0x57dfa8]
call dword [sym.imp.USER32.dll_ShowWindow]
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [0x5da74c]
test eax, eax
je 0x4da8e8
cmp eax, 1
je 0x4da8e8
cmp eax, 2
je 0x4da8e8
cmp eax, 0xe
jne 0x4da921
push ebp
push 0xa6
push dword [0x57dfa8]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0xa6
push dword [0x57dfa8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.0044e720
push 0x800
push ebp
push 0x5db750
call fcn.0049dc20
cmp word [0x5dc750], 0
jne 0x4da941
push 0x880
push 0x5dc750
push dword [0x57dfa8]
call dword [sym.imp.USER32.dll_GetWindowTextW]
cmp dword [0x57dfa8], 0
je 0x4da4c3
call fcn.004dc020
cmp dword [0x5da74c], 0
jne 0x4da961
call fcn.004dc370
mov al, 1
mov ecx, dword [esp + 0x25c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00507712
add esp, 0x250
ret 0x10