Function at 0x4a2c08
Capabilities:
Extract resource via kernel32 functions
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffa4
mov dword [ebp - 0x3c], eax
mov eax, 0x4d3724
call fcn.004afb5c
mov word [ebp - 0x28], 0x14
lea eax, [ebp - 4]
call fcn.00401790
push eax
inc dword [ebp - 0x1c]
call fcn.0040ac9c
pop ecx
mov word [ebp - 0x28], 8
mov word [ebp - 0x28], 0x20
lea eax, [ebp - 8]
call fcn.00401790
push eax
inc dword [ebp - 0x1c]
mov edx, str.SysWOW64_setupapi.dll
lea eax, [ebp - 0xc]
call fcn.004b9ba0
inc dword [ebp - 0x1c]
lea edx, [ebp - 0xc]
lea eax, [ebp - 4]
pop ecx
call fcn.004b9d58
dec dword [ebp - 0x1c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004b9d00
mov word [ebp - 0x28], 8
mov eax, dword [ebp - 8]
call fcn.0047695c
test al, al
jne 0x4a2ce2
mov word [ebp - 0x28], 0x2c
lea eax, [ebp - 0x14]
call fcn.00401790
push eax
inc dword [ebp - 0x1c]
mov edx, str._system32_setupapi.dll
lea eax, [ebp - 0x10]
call fcn.004b9ba0
inc dword [ebp - 0x1c]
lea edx, [ebp - 0x10]
lea eax, [ebp - 4]
pop ecx
call fcn.004b9d58
lea edx, [ebp - 0x14]
lea eax, [ebp - 8]
call fcn.004b9d30
dec dword [ebp - 0x1c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004b9d00
dec dword [ebp - 0x1c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004b9d00
lea eax, [ebp - 8]
call fcn.00408c78
push eax
call sub.KERNEL32.DLL_LoadLibraryA
mov dword [ebp - 0x40], eax
mov word [ebp - 0x28], 8
cmp dword [ebp - 0x40], 0
jne 0x4a2d33
or eax, 0xffffffff
push eax
dec dword [ebp - 0x1c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004b9d00
dec dword [ebp - 0x1c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004b9d00
pop eax
mov edx, dword [ebp - 0x38]
mov dword fs:[0], edx
jmp 0x4a2eaa
xor ecx, ecx
mov dword [ebp - 0x44], ecx
xor eax, eax
mov dword [ebp - 0x48], eax
push 5
push 0x14c2
push dword [ebp - 0x40]
call sub.KERNEL32.DLL_FindResourceA
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x4a2d9f
push dword [ebp - 0x50]
push dword [ebp - 0x40]
call sub.KERNEL32.DLL_LoadResource
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x4a2d9f
push dword [ebp - 0x4c]
call sub.KERNEL32.DLL_LockResource
mov dx, word [eax + 2]
mov word [ebp - 0x52], dx
cmp word [ebp - 0x52], 0xffff
jne 0x4a2d91
push dword [ebp - 0x4c]
call sub.KERNEL32.DLL_LockResource
add eax, 0x1e
mov dword [ebp - 0x44], eax
jmp 0x4a2d9f
push dword [ebp - 0x4c]
call sub.KERNEL32.DLL_LockResource
add eax, 0x16
mov dword [ebp - 0x44], eax
push 5
push 0x14c4
push dword [ebp - 0x40]
call sub.KERNEL32.DLL_FindResourceA
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
je 0x4a2e01
push dword [ebp - 0x58]
push dword [ebp - 0x40]
call sub.KERNEL32.DLL_LoadResource
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x4a2e01
push dword [ebp - 0x4c]
call sub.KERNEL32.DLL_LockResource
mov cx, word [eax + 2]
mov word [ebp - 0x5a], cx
cmp word [ebp - 0x5a], 0xffff
jne 0x4a2df3
push dword [ebp - 0x4c]
call sub.KERNEL32.DLL_LockResource
add eax, 0x1e
mov dword [ebp - 0x48], eax
jmp 0x4a2e01
push dword [ebp - 0x4c]
call sub.KERNEL32.DLL_LockResource
add eax, 0x16
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x44], 0
je 0x4a2e16
push dword [ebp - 0x44]
push 0
call sub.USER32.DLL_FindWindowW
mov dword [0x4d3668], eax
cmp dword [0x4d3668], 0
jne 0x4a2e34
cmp dword [ebp - 0x48], 0
je 0x4a2e34
push dword [ebp - 0x48]
push 0
call sub.USER32.DLL_FindWindowW
mov dword [0x4d3668], eax
cmp dword [0x4d3668], 0
je 0x4a2e79
jmp 0x4a2e63
push 0
push dword [0x4d3668]
call sub.USER32.DLL_ShowWindow
push 0
push 0x14b7
push 0x111
push dword [0x4d3668]
call sub.USER32.DLL_SendMessageA
push dword [0x4d3668]
call sub.USER32.DLL_IsWindow
test eax, eax
jne 0x4a2e3f
xor eax, eax
mov dword [0x4d3668], eax
mov eax, 1
push eax
dec dword [ebp - 0x1c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004b9d00
dec dword [ebp - 0x1c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004b9d00
pop eax
mov edx, dword [ebp - 0x38]
mov dword fs:[0], edx
mov esp, ebp
pop ebp
ret