Function at 0x412700
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
cmp dword [0x4656e4], 0
push ebx
push esi
push edi
je 0x41271c
mov eax, 1
jmp 0x412a7d
add esp, 0xfffffff8
xor ecx, ecx
add esp, 0xfffffff8
mov edx, dword [ebp + 8]
add esp, 0xfffffff8
mov dword [0x46ed60], edx
add esp, 0xfffffff8
mov byte [0x46eee4], cl
mov byte [0x46ee64], cl
mov byte [0x46ede4], cl
push 0
lea eax, [esp + 4]
mov byte [0x46ed64], cl
mov byte [0x46f2e4], 0
push eax
call fcn.004262cc
push 0x46f504
lea edx, [esp + 0xc]
push edx
call fcn.004262f8
push 0x46f4f4
lea eax, [esp + 0xc]
push eax
call fcn.004262f8
push 0x46f4ec
lea edx, [esp + 0xc]
push edx
call fcn.004262f8
push 0x46f4fc
lea ecx, [ebp - 8]
push ecx
call fcn.004262f8
add esp, 0xfffffff8
add esp, 0xfffffff8
push 0
lea eax, [esp + 4]
push eax
call fcn.004262cc
push 0x46f514
lea edx, [esp + 0xc]
push edx
call fcn.004262f8
push 0x46f50c
lea ecx, [ebp - 0x10]
push ecx
call fcn.004262f8
xor eax, eax
mov dword [0x46f51c], eax
mov dword [0x46f520], eax
mov edx, dword [0x46ed60]
cmp edx, 9
ja case.default.0x4127e3
jmp dword [edx*4 + 0x4127ea]
mov ebx, 0x45fa63
jmp case.default.0x4127e3
mov eax, dword [ebp + 0xc]
push eax
call fcn.0040809c
push eax
push 0x20a
call fcn.00408028
push eax
push 0x46ed64
call fcn.00456f9c
add esp, 0xc
mov ebx, 0x45fa6d
jmp case.default.0x4127e3
mov eax, dword [ebp + 0xc]
push eax
call fcn.0040809c
push eax
push 0x20b
call fcn.00408028
push eax
push 0x46ed64
call fcn.00456f9c
add esp, 0xc
mov ebx, 0x45fa7b
jmp case.default.0x4127e3
mov eax, dword [ebp + 0xc]
push eax
call fcn.0040809c
push eax
push 0x20c
call fcn.00408028
push eax
push 0x46ed64
call fcn.00456f9c
add esp, 0xc
mov ebx, 0x45fa89
jmp case.default.0x4127e3
mov eax, dword [ebp + 0xc]
push eax
call fcn.0040809c
push eax
push 0x211
call fcn.00408028
push eax
push 0x46ed64
call fcn.00456f9c
add esp, 0xc
mov ebx, 0x45fa96
jmp case.default.0x4127e3
mov eax, dword [ebp + 0xc]
push eax
call fcn.0040809c
push eax
push 0x20d
call fcn.00408028
push eax
push 0x46ed64
call fcn.00456f9c
add esp, 0xc
mov ebx, 0x45faa2
jmp case.default.0x4127e3
mov eax, dword [ebp + 0xc]
push eax
call fcn.0040809c
push eax
push 0x20e
call fcn.00408028
push eax
push 0x46ed64
call fcn.00456f9c
add esp, 0xc
mov ebx, 0x45faae
jmp case.default.0x4127e3
mov eax, dword [ebp + 0xc]
push eax
call fcn.0040809c
push eax
push 0x20f
call fcn.00408028
push eax
push 0x46ed64
call fcn.00456f9c
add esp, 0xc
mov ebx, 0x45faba
jmp case.default.0x4127e3
mov eax, dword [ebp + 0xc]
push eax
call fcn.0040809c
push eax
push 0x210
call fcn.00408028
push eax
push 0x46ed64
call fcn.00456f9c
add esp, 0xc
mov ebx, 0x45fac6
jmp case.default.0x4127e3
push 0x223
call fcn.00408028
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
mov esi, 0x46ed64
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov ebx, 0x45fad2
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 5
push ebx
mov eax, dword [0x466a00]
push eax
call sub.KERNEL32.dll_FindResourceA
mov ebx, eax
push ebx
mov edx, dword [0x466a00]
push edx
call sub.KERNEL32.dll_LoadResource
mov edi, eax
push ebx
mov eax, dword [0x466a00]
push eax
call sub.KERNEL32.dll_SizeofResource
mov esi, eax
push esi
push 0
call sub.KERNEL32.dll_GlobalAlloc
mov ebx, eax
push esi
push edi
push ebx
call fcn.00452dbc
add esp, 0xc
cmp dword [0x466a9c], 1
jne 0x412a02
mov eax, dword [ebx]
and eax, 0xbfffffff
or eax, 0x800a0800
mov dword [ebx], eax
push 0
push 0x412a88
cmp dword [0x466a9c], 1
jne 0x412a16
xor edx, edx
jmp 0x412a1c
mov edx, dword [0x4656d8]
push edx
push ebx
mov eax, dword [0x466a00]
push eax
call sub.USER32.dll_CreateDialogIndirectParamA
mov esi, eax
mov dword [0x4656e4], esi
cmp dword [0x466a9c], 1
je 0x412a42
push 1
push esi
call sub.USER32.dll_FlashWindow
push ebx
call sub.KERNEL32.dll_GlobalFree
cmp dword [0x46ed60], 0
jne 0x412a66
push 0x80
push 0x46ed64
mov eax, dword [0x4656e4]
push eax
call sub.USER32.dll_GetWindowTextA
cmp dword [0x4656e4], 0
jne 0x412a73
xor eax, eax
jmp 0x412a7d
call fcn.004131fc
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8