Function at 0x4d8980
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
sub esp, 0x250
mov eax, dword [0x5513d4]
xor eax, esp
mov dword [esp + 0x24c], eax
cmp dword [0x558ab4], 0
push ebx
push ebp
mov ebp, dword [esp + 0x260]
setne bl
push esi
mov esi, dword [esp + 0x26c]
xor eax, eax
mov dword [esp + 0x10], esi
mov word [0x5b1270], ax
push edi
mov edi, dword [esp + 0x264]
test bl, bl
jne 0x4d89f9
xor ecx, ecx
mov byte [0x5b2871], al
mov byte [0x5b2872], al
mov byte [0x5b28bf], al
mov byte [0x5b2950], al
mov eax, edi
mov dword [0x5af26c], eax
mov word [0x5b2370], cx
mov byte [0x5b2870], cl
mov byte [0x5b2953], cl
jmp 0x4d89fe
mov eax, dword [0x5af26c]
cmp eax, 0xe
ja case.default.0x4d8a07
jmp dword [eax*4 + 0x4d9090]
test bl, bl
jne 0x4d8a19
mov byte [0x5b2871], 1
mov dword [0x5b2b80], str.CMDWNDADD
jmp case.default.0x4d8a07
push ebp
call fcn.00485280
push eax
xor eax, eax
cmp dword [0x5af26c], 1
setne al
add eax, 0x20f
push eax
call fcn.00496b20
push eax
push 0x880
push 0x5b1270
call fcn.004027c0
add esp, 0x10
test bl, bl
jne 0x4d8ac5
cmp dword [0x558bac], 0
mov eax, dword [0x57b20c]
je 0x4d8a74
cmp dword [0x559be0], 1
ja 0x4d8a84
test eax, eax
je 0x4d8a84
mov byte [0x5b2871], 0
cmp eax, 1
jne 0x4d8a8b
mov byte [0x5b2871], 1
lea eax, [esp + 0x6c]
mov ecx, 0x57b208
push eax
call fcn.004066f0
cmp byte [esp + 0x18e], 0
je 0x4d8abe
push 0x5247ec
lea eax, [esp + 0x70]
push eax
call fcn.004a05e0
mov byte [0x5b2872], 1
test eax, eax
je 0x4d8ac5
mov byte [0x5b2872], 0
mov dword [0x5b2b80], str.CMDWNDADD
jmp case.default.0x4d8a07
push ebp
call fcn.00485280
push eax
push 0x211
call fcn.00496b20
push eax
push 0x880
push 0x5b1270
call fcn.004027c0
add esp, 0x10
mov dword [0x5b2b80], 0x5363c8
jmp case.default.0x4d8a07
push ebp
call fcn.00485280
push eax
push 0x212
jmp 0x4d8ae0
push 0x880
push 0x24e
call fcn.00496b20
push eax
push 0x5b1270
call fcn.0049ce90
mov dword [0x5b2b80], 0x5363c8
jmp case.default.0x4d8a07
push ebp
call fcn.00485280
push eax
push 0x216
jmp 0x4d8ae0
push 0x880
push 0x223
jmp 0x4d8b1f
push 0x880
push 0x672
jmp 0x4d8b1f
push 0x880
push 0x50b
call fcn.00496b20
push eax
push 0x5b1270
call fcn.0049ce90
mov dword [0x5b2b80], 0x5363e0
jmp case.default.0x4d8a07
mov dword [0x5b2b80], str.CMDWNDFIND
jmp case.default.0x4d8a07
push 0x880
push 0x543
jmp 0x4d8b1f
push 0x880
push 0x556
jmp 0x4d8b1f
mov dword [0x5b2b80], str.CMDWNDBENCH
jmp case.default.0x4d8a07
mov dword [0x5b2b80], str.CMDWNDREAD
test bl, bl
je 0x4d8bda
call fcn.004da730
xor al, al
jmp 0x4d9073
call fcn.004d57e0
test al, al
je 0x4d8c25
push ebp
mov dword [esp + 0x1c], edi
call fcn.005097cd
add esp, 4
mov dword [esp + 0x1c], eax
mov al, byte [esp + 0x26c]
mov byte [esp + 0x20], al
lea eax, [esp + 0x18]
mov dword [esp + 0x24], esi
push eax
push 0
push 0x800f
push dword [0x558aa8]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
setne al
jmp 0x4d9073
xor eax, eax
mov word [0x5af270], ax
mov word [0x5b2470], ax
mov word [0x5b28c0], ax
mov dword [0x5b2928], eax
mov dword [0x5b292c], eax
mov dword [0x5b2948], eax
mov dword [0x5b294c], eax
mov dword [0x5b2940], eax
mov dword [0x5b2944], eax
mov dword [0x5b2938], eax
mov dword [0x5b293c], eax
mov dword [0x5b2930], eax
mov dword [0x5b2934], eax
mov byte [0x5b28bd], al
mov byte [0x5b28be], al
mov dword [0x5b2924], eax
call fcn.00509526
mov dword [0x5b28b8], eax
xor eax, eax
mov dword [0x5af268], 0
mov word [0x5b2958], ax
mov dword [0x5b2874], eax
call fcn.00450f00
mov byte [0x5b2951], 0
mov byte [0x5b2952], 0
call fcn.004d5830
movzx eax, al
push eax
push str.SystemProgressBar
push 0x524cb0
call fcn.004ae540
test eax, eax
setne byte [0x5b2873]
call fcn.00477ef0
cmp eax, 0x601
sbb eax, eax
inc eax
push eax
push str.TaskbarProgressBar
push 0x524cb0
call fcn.004ae540
test eax, eax
mov eax, dword [0x5af26c]
setne byte [0x5b28bc]
test eax, eax
je 0x4d8d08
cmp eax, 1
je 0x4d8d08
cmp eax, 2
jne 0x4d8d39
cmp dword [0x558bac], 0
mov dword [0x559be8], 0
mov dword [0x559bec], 0
jne 0x4d8d39
mov dword [0x559c00], 0
mov dword [0x559c04], 0
push 5
push dword [0x5b2b80]
push dword [0x58c1f8]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
push esi
push dword [0x58c1f8]
call dword [sym.imp.KERNEL32.dll_LoadResource]
push esi
push dword [0x58c1f8]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push esi
mov ebx, eax
push edi
push ebx
call fcn.00504fb0
add esp, 0xc
cmp dword [0x558bac], 1
je 0x4d8da3
push dword [0x558aa8]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4d8da3
mov byte [esp + 0x13], 0
jmp 0x4d8de1
cmp dword [0x5af26c], 0xe
mov byte [esp + 0x13], 1
je 0x4d8de1
mov ecx, dword [ebx]
mov eax, ecx
and eax, 0xffff0000
cmp eax, 0xffff0000
jne 0x4d8dd3
mov eax, dword [ebx + 0xc]
and eax, 0x3ff5f7ff
or eax, 0x800a0800
mov dword [ebx + 0xc], eax
jmp 0x4d8de1
and ecx, 0x3ff5f7ff
or ecx, 0x800a0800
mov dword [ebx], ecx
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4d8dee
mov eax, fcn.004d7970
push 0
push eax
mov eax, dword [0x558bac]
dec eax
neg eax
sbb eax, eax
and eax, dword [0x558aa8]
push eax
push ebx
push dword [0x58c1f8]
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamW]
cmp byte [esp + 0x13], 0
mov dword [0x558ab4], eax
je 0x4d8e5b
push 1
mov ecx, 0x57fff8
call fcn.004b7fc0
push eax
push 0
push 0x80
push dword [0x558ab4]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
mov ecx, 0x57fff8
call fcn.004b7fc0
push eax
push 1
push 0x80
push dword [0x558ab4]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5af26c], 0xe
jne 0x4d8e8f
push 0
push 0x9a
push dword [0x558ab4]
call fcn.0040ff30
push 0
push 0xa3
push dword [0x558ab4]
call fcn.0040ff30
mov byte [0x5b2950], 1
cmp dword [0x5af26c], 8
jne 0x4d8f74
cmp dword [0x56a6ec], 0
jne 0x4d8f74
cmp word [0x5655b8], 0
je 0x4d8f10
push 0x5655b8
mov esi, 0x526860
call fcn.00485280
mov cx, word [eax]
cmp cx, word [esi]
jne 0x4d8ee8
test cx, cx
je 0x4d8ee4
mov cx, word [eax + 2]
cmp cx, word [esi + 2]
jne 0x4d8ee8
add eax, 4
add esi, 4
test cx, cx
jne 0x4d8ec2
xor eax, eax
jmp 0x4d8eed
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4d8ef8
push 0x215
jmp 0x4d8efd
push 0x214
call fcn.00496b20
push eax
push str.___s
call fcn.004d71d0
add esp, 8
cmp word [0x5675be], 0
je 0x4d8f32
push 0x213
call fcn.00496b20
push eax
push str.___s
call fcn.004d71d0
add esp, 8
cmp dword [0x56a6e8], 0
je 0x4d8f53
push 0x218
call fcn.00496b20
push eax
push str.___s
call fcn.004d71d0
add esp, 8
cmp byte [0x56a9b8], 0
je 0x4d8f74
push 0x217
call fcn.00496b20
push eax
push str.___s
call fcn.004d71d0
add esp, 8
cmp byte [esp + 0x26c], 0
je 0x4d8f98
push 0
push 0xa8
push 0x111
push dword [0x558ab4]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x4d8fd9
mov esi, dword [0x5af26c]
sub esi, 0xe
neg esi
sbb esi, esi
and esi, 5
cmp byte [esp + 0x13], 0
je 0x4d8fcc
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
test byte [esp + 0x54], 1
je 0x4d8fcc
movzx eax, word [esp + 0x58]
neg eax
sbb eax, eax
and esi, eax
push esi
push dword [0x558ab4]
call dword [sym.imp.USER32.dll_ShowWindow]
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [0x5af26c]
test eax, eax
je 0x4d8ff8
cmp eax, 1
je 0x4d8ff8
cmp eax, 2
je 0x4d8ff8
cmp eax, 0xe
jne 0x4d9031
push ebp
push 0xa6
push dword [0x558ab4]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0xa6
push dword [0x558ab4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call fcn.0044dfc0
push 0x800
push ebp
push 0x5b0270
call fcn.0049ce90
cmp word [0x5b1270], 0
jne 0x4d9051
push 0x880
push 0x5b1270
push dword [0x558ab4]
call dword [sym.imp.USER32.dll_GetWindowTextW]
cmp dword [0x558ab4], 0
je 0x4d8bd3
call fcn.004da730
cmp dword [0x5af26c], 0
jne 0x4d9071
call fcn.004daa80
mov al, 1
mov ecx, dword [esp + 0x25c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00502f8e
add esp, 0x250
ret 0x10