Function at 0x4056bd
Capabilities:
Create process on windows
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
mov eax, dword [ebp + 0xc]
push ebx
push esi
cmp eax, 0x15
push edi
ja 0x405736
je 0x405710
dec eax
dec eax
je 0x4056f2
sub eax, 0xe
je 0x4056ee
dec eax
dec eax
jne 0x4058a2
push 0xfffffffffffffffd
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x405709
push 0xfffffffffffffffe
jmp 0x4056e6
mov eax, dword [0x4178f4]
test eax, eax
je 0x405709
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
and dword [0x4178f4], 0
xor eax, eax
jmp 0x405905
mov eax, dword [0x4178f4]
test eax, eax
je 0x405709
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push 0xf
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [0x4178f4], eax
jmp 0x405709
cmp eax, 0x19
je 0x405892
cmp eax, 0x116
je 0x405863
cmp eax, 0x1ff
jbe 0x4058a2
cmp eax, 0x201
ja 0x4058a2
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, 0x3db
push ebx
push dword [ebp + 8]
call esi
mov edi, eax
test edi, edi
jne 0x40578b
push 0x3dc
push dword [ebp + 8]
call esi
mov edi, eax
test edi, edi
je 0x4058a2
lea eax, [ebp - 0x10]
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov esi, dword [sym.imp.USER32.dll_ScreenToClient]
lea eax, [ebp - 0x10]
push eax
push dword [ebp + 8]
call esi
lea eax, [ebp - 8]
push eax
push dword [ebp + 8]
call esi
movzx eax, word [ebp + 0x14]
cmp eax, dword [ebp - 0x10]
jl 0x4058a2
cmp eax, dword [ebp - 8]
jge 0x4058a2
mov eax, dword [ebp + 0x14]
shr eax, 0x10
cmp eax, dword [ebp - 0xc]
jl 0x4058a2
cmp eax, dword [ebp - 4]
jge 0x4058a2
cmp dword [ebp + 0xc], 0x200
jne 0x4057fb
mov eax, dword [0x4318c0]
push dword [eax + 0x67a4]
call dword [sym.imp.USER32.dll_SetCursor]
jmp 0x4058a2
push edi
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
sub eax, ebx
je 0x40583b
dec eax
jne 0x4058a2
lea eax, [ebp - 0x110]
push 0x100
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowTextA]
xor eax, eax
push 5
push eax
lea ecx, [ebp - 0x110]
push eax
push ecx
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x4058a2
mov eax, dword [0x4318c0]
push 1
push 0
push dword [eax + 0x67a0]
push 0x20
push str.About...
push str.This_self_extracting_zip_file_was_created_with_the_Xceed_Absolute_Packager_v1.1.___the_software_that_makes_it_easy_to_create_high_quality_zip_files_that_can_unzip_their_own_contents._n_nDiscover_Absolute_Packager_for_yourself___get_the_free_trial_version_from_Xceed_Softwares_web_site_at:
push dword [ebp + 8]
call fcn.00407437
add esp, 0x1c
jmp 0x4058a2
mov esi, dword [sym.imp.USER32.dll_EnableMenuItem]
push 1
push 0xf000
push dword [ebp + 0x10]
call esi
push 1
push 0xf030
push dword [ebp + 0x10]
call esi
push 1
push 0xf020
push dword [ebp + 0x10]
call esi
jmp 0x405709
mov eax, dword [ebp + 0x14]
shr eax, 0x10
cmp eax, 3
je 0x4058d8
cmp eax, 6
je 0x4058b6
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x405905
movzx eax, word [ebp + 0x14]
push 0xfffffffffffffff4
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
cmp eax, 0x3dc
jne 0x4058d8
push 0xff0000
push dword [ebp + 0x10]
call dword [sym.imp.GDI32.dll_SetTextColor]
cmp dword [0x4178f4], 0
jne 0x4058f5
push 0xf
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [0x4178f4], eax
push 1
push dword [ebp + 0x10]
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, dword [0x4178f4]
pop edi
pop esi
pop ebx
leave
ret 0x10