Function at 0x47cca0
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 2
add esp, 0xfffff004
push eax
dec eax
jne 0x47cca9
mov eax, dword [ebp - 4]
add esp, 0xfffffff8
push ebx
push esi
push edi
mov byte [ebp - 1], cl
mov ebx, edx
mov esi, dword [ebp + 8]
cmp dword [0x4c234c], 0
je 0x47ccd4
xor eax, eax
jmp 0x47d274
mov dword [0x4d0e7c], eax
xor edx, edx
mov byte [0x4d0f80], dl
mov byte [0x4d0f00], dl
mov byte [0x4d0e80], dl
mov byte [0x4d1380], 0
mov dword [0x4d15cc], 0
mov dword [0x4d15d0], 0
xor eax, eax
xor edx, edx
mov dword [0x4d15ec], eax
mov dword [0x4d15f0], edx
mov dword [0x4d15e4], eax
mov dword [0x4d15e8], edx
mov dword [0x4d15dc], eax
mov dword [0x4d15e0], edx
mov dword [0x4d15d4], eax
mov dword [0x4d15d8], edx
mov byte [0x4d15f8], 0
xor ecx, ecx
mov dword [0x4d15f4], ecx
call fcn.0049d288
mov dword [0x4d15c4], eax
xor eax, eax
mov dword [0x4d0e78], eax
xor edx, edx
mov dword [0x4d15fc], edx
xor ecx, ecx
mov dword [0x4d15c0], ecx
mov byte [0x4d15c8], 0
mov byte [0x4d15c9], 0
mov byte [0x4d1630], 0
mov eax, dword [0x4d0e7c]
test eax, eax
je 0x47cd94
cmp eax, 1
je 0x47cd94
cmp eax, 2
jne 0x47cdc5
mov dword [0x4c5640], 0
mov dword [0x4c5644], 0
cmp dword [0x4c4ce4], 0
jne 0x47cdc5
mov dword [0x4c5648], 0
mov dword [0x4c564c], 0
cmp eax, 0xb
ja case.default.0x47cdce
jmp dword [eax*4 + 0x47cdd5]
mov dword [0x4d162c], 0x4aa068
mov byte [0x4d15c8], 1
jmp case.default.0x47cdce
mov eax, ebx
call fcn.0040ba60
push eax
cmp dword [0x4d0e7c], 1
jne 0x47ce33
mov eax, 0x20a
jmp 0x47ce38
mov eax, 0x20b
call fcn.0041202c
push eax
push 0x4d0e80
call fcn.00497dc4
add esp, 0xc
cmp dword [0x4c4ce4], 0
je 0x47ce5d
cmp dword [0x4c563c], 1
jg 0x47ce7c
mov eax, 0x4c309c
call fcn.004626b0
test eax, eax
jne 0x47ce78
mov ebx, dword [0x4c32a4]
test ebx, ebx
je 0x47ce7c
dec ebx
je 0x47ce7c
xor eax, eax
jmp 0x47ce81
mov eax, 1
mov byte [0x4d15c8], al
mov eax, 0x4c309c
call fcn.004626b0
test eax, eax
setne dl
and edx, 1
mov byte [0x4d15c9], dl
mov dword [0x4d162c], 0x4aa068
jmp case.default.0x47cdce
mov eax, ebx
call fcn.0040ba60
push eax
mov eax, 0x20c
call fcn.0041202c
push eax
push 0x4d0e80
call fcn.00497dc4
add esp, 0xc
mov dword [0x4d162c], 0x4aa072
jmp case.default.0x47cdce
mov eax, ebx
call fcn.0040ba60
push eax
mov eax, 0x20d
call fcn.0041202c
push eax
push 0x4d0e80
call fcn.00497dc4
add esp, 0xc
mov dword [0x4d162c], 0x4aa072
jmp case.default.0x47cdce
mov eax, ebx
call fcn.0040ba60
push eax
mov eax, 0x211
call fcn.0041202c
push eax
push 0x4d0e80
call fcn.00497dc4
add esp, 0xc
mov dword [0x4d162c], 0x4aa072
jmp case.default.0x47cdce
mov eax, 0x223
call fcn.0041202c
push eax
push 0x4d0e80
call fcn.00494e64
add esp, 8
mov dword [0x4d162c], 0x4aa072
jmp case.default.0x47cdce
mov eax, 0x50b
call fcn.0041202c
push eax
push 0x4d0e80
call fcn.00494e64
add esp, 8
mov dword [0x4d162c], 0x4aa07e
jmp case.default.0x47cdce
mov dword [0x4d162c], 0x4aa08c
jmp case.default.0x47cdce
mov eax, 0x543
call fcn.0041202c
push eax
push 0x4d0e80
call fcn.00494e64
add esp, 8
mov dword [0x4d162c], 0x4aa072
jmp case.default.0x47cdce
mov eax, 0x556
call fcn.0041202c
push eax
push 0x4d0e80
call fcn.00494e64
add esp, 8
mov dword [0x4d162c], 0x4aa072
jmp case.default.0x47cdce
mov dword [0x4d162c], 0x4aa097
push 5
push dword [0x4d162c]
push dword [0x4af654]
call sub.KERNEL32.DLL_FindResourceA
mov ebx, eax
push ebx
push dword [0x4af654]
call sub.KERNEL32.DLL_LoadResource
mov dword [ebp - 8], eax
push ebx
push dword [0x4af654]
call sub.KERNEL32.DLL_SizeofResource
mov edi, eax
push edi
push 0
call sub.KERNEL32.DLL_GlobalAlloc
mov ebx, eax
push edi
push dword [ebp - 8]
push ebx
call fcn.00494c74
add esp, 0xc
cmp dword [0x4c4ce4], 1
je 0x47d048
push dword [0x4c2340]
call sub.USER32.DLL_IsWindowVisible
test eax, eax
je 0x47d048
xor eax, eax
jmp 0x47d04d
mov eax, 1
mov byte [ebp - 9], al
cmp byte [ebp - 9], 0
je 0x47d066
mov edx, dword [ebx]
and edx, 0xbfffffff
or edx, 0x800a0800
mov dword [ebx], edx
push 0
test esi, esi
jne 0x47d071
mov esi, fcn.0047d280
push esi
cmp dword [0x4c4ce4], 1
jne 0x47d07f
xor eax, eax
jmp 0x47d084
mov eax, dword [0x4c2340]
push eax
push ebx
push dword [0x4af654]
call sub.USER32.DLL_CreateDialogIndirectParamA
cmp byte [ebp - 9], 0
mov edi, eax
mov dword [0x4c234c], edi
je 0x47d0d8
mov eax, 0x4c2b80
mov dl, 1
call fcn.004849dc
push eax
push 0
push 0x80
push edi
call sub.USER32.DLL_SendMessageA
mov eax, 0x4c2b80
xor edx, edx
call fcn.004849dc
push eax
push 1
push 0x80
push dword [0x4c234c]
call sub.USER32.DLL_SendMessageA
cmp dword [0x4d0e7c], 6
jne 0x47d213
mov byte [ebp - 0x200c], 0
cmp byte [0x4b72d4], 0
je 0x47d147
push 0x4aa0a9
mov eax, 0x4b72d4
call fcn.0040ba60
push eax
call fcn.00494e18
add esp, 8
test eax, eax
jne 0x47d11d
mov eax, 0x210
call fcn.0041202c
jmp 0x47d127
mov eax, 0x20f
call fcn.0041202c
push eax
push 0x4aa0a3
lea edx, [ebp - 0x200c]
push edx
call fcn.00497dc4
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.0047e9a0
cmp byte [0x4b82d4], 0
je 0x47d17a
mov eax, 0x20e
call fcn.0041202c
push eax
push 0x4aa0a3
lea edx, [ebp - 0x200c]
push edx
call fcn.00497dc4
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.0047e9a0
cmp dword [0x4b8f68], 0
je 0x47d1ad
mov eax, 0x214
call fcn.0041202c
push eax
push 0x4aa0a3
lea edx, [ebp - 0x200c]
push edx
call fcn.00497dc4
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.0047e9a0
cmp byte [0x4b9089], 0
je 0x47d1e0
mov eax, 0x213
call fcn.0041202c
push eax
push 0x4aa0a3
lea edx, [ebp - 0x200c]
push edx
call fcn.00497dc4
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.0047e9a0
cmp byte [0x4b8f7e], 0
je 0x47d213
mov eax, 0x349
call fcn.0041202c
push eax
push 0x4aa0a3
lea edx, [ebp - 0x200c]
push edx
call fcn.00497dc4
add esp, 0xc
lea eax, [ebp - 0x200c]
call fcn.0047e9a0
cmp byte [ebp - 1], 0
je 0x47d22f
push 0
push 0x6e
push 0x111
push dword [0x4c234c]
call sub.USER32.DLL_SendMessageA
jmp 0x47d23c
push 5
push dword [0x4c234c]
call sub.USER32.DLL_ShowWindow
push ebx
call sub.KERNEL32.DLL_GlobalFree
cmp byte [0x4d0e80], 0
jne 0x47d260
push 0x80
push 0x4d0e80
push dword [0x4c234c]
call sub.USER32.DLL_GetWindowTextA
cmp dword [0x4c234c], 0
jne 0x47d26d
xor eax, eax
jmp 0x47d274
call fcn.0047dd2c
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4