Function at 0x474dde
Capabilities:
Create process on windows
Enumerate gui resources

Disassembly:
push ebp
push ebx
push edi
xor eax, eax
push eax
push eax
push eax
push eax
call fcn.005423e0
lea ebp, [0x72ab68]
mov ebx, dword [ebp + 0x74]
and ebx, ebx
jne 0x47515b
lea ebp, [0x72ab68]
push dword [ebp]
call fcn.004d9213
mov ebx, eax
and ebx, ebx
jne 0x475156
lea ebp, [0x72a978]
mov edx, dword [ebp + 0x9c]
xor ecx, ecx
call fcn.004fa4a0
jne 0x475156
lea ebp, [0x72abe8]
mov dword [ebp + 4], 1
call sub.WINMM.dll_timeGetTime
mov ebx, eax
add ebx, 0x1388
mov dword [esp], ebx
push 0xc00000
lea ebp, [0x72ab68]
push dword [ebp + 0x14]
push 0x1a
push 0x258
push 0x1a
call fcn.0048027c
push eax
push 0x258
call fcn.00480245
push eax
push 0xffffffff
call fcn.00533116
mov dword [esp + 4], eax
push edx
call fcn.00542240
pop edx
push eax
push 0x201
push edx
call fcn.00542240
pop edx
push eax
mov edx, str.Attempting_to_start
push edx
call fcn.00542310
lea ebp, [0x72ab68]
mov edx, dword [ebp]
push edx
call fcn.00542310
mov edx, str.__please_wait_...
push edx
call fcn.00542310
call fcn.00542370
push 0x1a
push 0x258
push 0
push 0
push 0xffffffff
call fcn.004fa482
add dword [esp + 0x14], edx
call fcn.005269d5
call fcn.004fa4e0
mov dword [esp + 8], eax
push 0x10
push 0xe
mov eax, 0x61f062
push eax
push 0xffffffff
call fcn.0054167a
mov dword [esp + 0xc], eax
push dword [esp + 0xc]
push dword [esp + 0xc]
call fcn.004be447
push 1
push dword [esp + 8]
call fcn.00533a0f
push 1
push dword [esp + 8]
call fcn.005336ff
lea ebp, [0x72ab68]
mov ebx, dword [ebp + 0x34]
cmp ebx, 0xa
jne 0x474f64
mov ebp, dword [0x72b448]
mov edx, dword [ebp + 4]
xor ecx, ecx
call fcn.004fa4a0
jne 0x474f64
mov eax, 1
jmp 0x474f66
xor eax, eax
and eax, eax
je 0x475061
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
lea ebp, [0x72a978]
push dword [ebp + 0x9c]
call fcn.00522f23
mov edx, str.run2Perseus.bat
push edx
call fcn.00542310
call fcn.004fa482
add dword [esp], edx
call fcn.00522fa2
call fcn.004fa4e0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x474fc8
jl 0x474fc4
cmp ebx, 0
ja 0x474fc8
xor eax, eax
jmp 0x474fcd
mov eax, 1
or eax, eax
je 0x47505f
push edx
call fcn.00542240
pop edx
push eax
push 1
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
lea ebp, [0x72a978]
push dword [ebp + 0x9c]
call fcn.00522f23
call fcn.00542370
push 0
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push dword [ebp + 0x9c]
call fcn.00522f23
mov edx, str.run2Perseus.bat
push edx
call fcn.00542310
call fcn.00542370
mov eax, 0x61f062
push eax
push 0
call fcn.004fa482
add dword [esp + 8], edx
call fcn.004fa482
add dword [esp + 0x10], edx
call sub.SHELL32.dll_ShellExecuteW
call fcn.004fa4e0
jmp 0x4750bd
push edx
call fcn.00542240
pop edx
push eax
push 1
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
lea ebp, [0x72a978]
push dword [ebp + 0x9c]
call fcn.00522f23
call fcn.00542370
push 0
push dword [ebp + 0x9c]
mov eax, str.open
push eax
push 0
call fcn.004fa482
add dword [esp + 0x10], edx
call sub.SHELL32.dll_ShellExecuteW
call fcn.004fa4e0
mov eax, 1
push eax
call fcn.004b4ad5
push 0xfa
call sub.KERNEL32.dll_Sleep
push 0
lea eax, [0x461583]
push eax
call sub.USER32.dll_EnumWindows
lea ebp, [0x72ab68]
push dword [ebp]
call fcn.004d9213
and eax, eax
je 0x47510b
lea ebp, [0x72a850]
cmp dword [ebp + 0x88], 0
je 0x47510b
mov eax, 1
jmp 0x47510d
xor eax, eax
and eax, eax
jne 0x47511f
call sub.WINMM.dll_timeGetTime
mov ebx, eax
cmp ebx, dword [esp]
jg 0x47511f
jmp 0x475126
mov eax, 1
jmp 0x475128
xor eax, eax
and eax, eax
je 0x4750c8
lea ebp, [0x72a850]
mov dword [ebp + 0x88], 0
push dword [esp + 4]
call fcn.0053300e
push dword [esp + 0xc]
call fcn.0041c195
xor eax, eax
push eax
call fcn.004b4ad5
jmp 0x475320
lea ebp, [0x72abe8]
cmp dword [ebp + 0x102], 0
je 0x475320
mov eax, str.CATSync_Full.exe
push eax
call fcn.004d9213
mov ebx, eax
and ebx, ebx
jne 0x475320
call sub.WINMM.dll_timeGetTime
mov ebx, eax
add ebx, 0x1388
mov dword [esp], ebx
push 0xc00000
lea ebp, [0x72ab68]
push dword [ebp + 0x14]
push 0x1a
push 0x258
push 0x1a
call fcn.0048027c
push eax
push 0x258
call fcn.00480245
push eax
push 0xffffffff
call fcn.00533116
mov dword [esp + 4], eax
push 0x201
mov eax, str.Attempting_to_start_CatSync__please_wait_...
push eax
push 0x1a
push 0x258
push 0
push 0
push 0xffffffff
call fcn.005269d5
mov dword [esp + 8], eax
push 0x10
push 0xe
mov eax, 0x61f062
push eax
push 0xffffffff
call fcn.0054167a
mov dword [esp + 0xc], eax
push dword [esp + 0xc]
push dword [esp + 0xc]
call fcn.004be447
push 1
push dword [esp + 8]
call fcn.00533a0f
push 1
push dword [esp + 8]
call fcn.005336ff
push 1
mov eax, str.C:Program_Files__x86_CAT_Sync_Full_
push eax
push 0
lea ebp, [0x72a978]
push dword [ebp + 0x70]
mov eax, str.open
push eax
push 0
call sub.SHELL32.dll_ShellExecuteW
mov eax, 1
push eax
call fcn.004b4ad5
push 0xfa
call sub.KERNEL32.dll_Sleep
push 0
lea eax, [0x461583]
push eax
call sub.USER32.dll_EnumWindows
mov eax, str.CATSync_Full.exe
push eax
call fcn.004d9213
and eax, eax
je 0x4752b7
lea ebp, [0x72a850]
cmp dword [ebp + 0x8c], 0
je 0x4752b7
mov eax, 1
jmp 0x4752b9
xor eax, eax
and eax, eax
jne 0x4752cb
call sub.WINMM.dll_timeGetTime
mov ebx, eax
cmp ebx, dword [esp]
jg 0x4752cb
jmp 0x4752d2
mov eax, 1
jmp 0x4752d4
xor eax, eax
and eax, eax
je 0x475277
lea ebp, [0x72a850]
mov dword [ebp + 0x8c], 0
push dword [esp + 4]
call fcn.0053300e
push dword [esp + 0xc]
call fcn.0041c195
xor eax, eax
push eax
call fcn.004b4ad5
lea ebp, [0x72aa4c]
mov dword [ebp + 0xc], 0
push 0
lea eax, [0x48c73c]
push eax
call fcn.004fbc99
xor eax, eax
add esp, 0x10
pop edi
pop ebx
pop ebp
ret