Function at 0x4388d1
Capabilities:
Create process on windows
Hide graphical window
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x444
mov eax, dword [0x617ff0]
xor eax, esp
mov dword [esp + 0x440], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov dword [esp + 0x20], ebx
mov edi, ecx
mov ebx, dword [ebp + 8]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x38], esi
cmp ebx, 0x113
jne 0x438925
cmp esi, 0x376
jne 0x4398fb
call fcn.00434c0f
xor eax, eax
jmp 0x4398e4
cmp ebx, 0x2c
jne 0x438969
mov ebx, dword [esp + 0x20]
fld qword [0x618870]
cmp dword [ebx + 0x14], 0xffffffff
jne 0x43895a
fld qword [0x5f5f20]
fmul st(1)
call fcn.00581600
fmul qword [0x5f5f28]
mov dword [ebx + 0x10], eax
call fcn.005815c0
jmp 0x4398e4
fmul qword [0x5f5f70]
fld st(0)
call fcn.00581600
jmp 0x43894d
cmp ebx, 0x18
jne 0x438c3e
test esi, esi
je 0x4398fb
mov eax, 0x5e6c6c
mov edx, str.GridWidth
push eax
push 5
pop esi
push esi
mov ecx, eax
call fcn.00434e91
push 3
pop ecx
cmp eax, ecx
jne 0x4389a7
mov dword [0x618898], ecx
mov dword [0x61889c], 2
cmp eax, esi
jne 0x4389bb
mov dword [0x618898], esi
mov dword [0x61889c], 1
push 7
pop edx
xor ebx, ebx
cmp eax, edx
jne 0x4389d0
mov dword [0x618898], edx
mov dword [0x61889c], ebx
push 9
pop edx
cmp eax, edx
jne 0x4389e3
mov dword [0x618898], edx
mov dword [0x61889c], ebx
push 0xb
pop edx
cmp eax, edx
jne 0x4389f6
mov dword [0x618898], edx
mov dword [0x61889c], ebx
push 0x10
pop edx
cmp eax, edx
jne 0x438a09
mov dword [0x618898], edx
mov dword [0x61889c], ebx
push 0x18
pop edx
cmp eax, edx
jne 0x438a1c
mov dword [0x618898], edx
mov dword [0x61889c], ebx
mov eax, 0x5e6c6c
mov edx, str.GridHeight
push eax
push ecx
mov ecx, eax
call fcn.00434e91
push 3
pop ecx
cmp eax, ecx
jne 0x438a46
mov dword [0x618890], ecx
mov dword [0x618894], 2
cmp eax, esi
jne 0x438a5a
mov dword [0x618890], esi
mov dword [0x618894], 1
push 7
pop ecx
cmp eax, ecx
jne 0x438a6d
mov dword [0x618890], ecx
mov dword [0x618894], ebx
push 9
pop ecx
cmp eax, ecx
jne 0x438a80
mov dword [0x618890], ecx
mov dword [0x618894], ebx
push 0xb
pop ecx
cmp eax, ecx
jne 0x438a93
mov dword [0x618890], ecx
mov dword [0x618894], ebx
push 0x10
pop ecx
cmp eax, ecx
jne 0x438aa6
mov dword [0x618890], ecx
mov dword [0x618894], ebx
call fcn.0041e8e4
test eax, eax
jne 0x438ab8
call fcn.0041e5f7
test eax, eax
je 0x438ac1
call fcn.0041e555
test eax, eax
je 0x438adb
push 3
pop eax
push 2
mov dword [0x618890], eax
mov dword [0x618898], eax
pop eax
mov dword [0x618894], eax
mov dword [0x61889c], eax
call fcn.0041e8e4
test eax, eax
jne 0x438aed
call fcn.0041e5f7
test eax, eax
je 0x438afa
call fcn.0041e555
test eax, eax
je 0x438b94
push 0x527
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
mov ebx, dword [sym.imp.USER32.dll_EnableWindow]
mov esi, eax
push esi
call ebx
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push esi
call edi
mov eax, dword [esp + 0x1c]
push 0x528
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov esi, eax
push 0
push esi
call ebx
push 0
push esi
call edi
mov esi, dword [esp + 0x1c]
push 0
lea edi, [esi + 0x1b0]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x16c]
mov eax, dword [esi + 0x240]
lea ecx, [esi + 0x240]
push 0
call dword [eax + 0x16c]
push 0
mov ecx, edi
call fcn.00446c78
push 0
lea ecx, [esi + 0x240]
call fcn.00446c78
mov edi, esi
push 0x3ec
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0
jmp 0x438c31
push 0x527
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, dword [sym.imp.USER32.dll_EnableWindow]
mov esi, eax
push 1
push esi
call ebx
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push 5
push esi
call edi
mov eax, dword [esp + 0x1c]
push 0x528
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov esi, eax
push 1
push esi
call ebx
push 5
push esi
call edi
mov esi, dword [esp + 0x1c]
push 1
lea edi, [esi + 0x1b0]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x16c]
mov eax, dword [esi + 0x240]
lea ecx, [esi + 0x240]
push 1
call dword [eax + 0x16c]
push 5
mov ecx, edi
call fcn.00446c78
push 5
lea ecx, [esi + 0x240]
call fcn.00446c78
mov edi, esi
mov ecx, edi
call fcn.0043c625
push 0x3ec
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 1
push eax
call ebx
mov ecx, edi
call fcn.0043c91c
mov ebx, dword [ebp + 8]
cmp ebx, 5
jne 0x43922e
push 0x3e9
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov esi, eax
lea eax, [esp + 0xa8]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0xa8]
xor ebx, ebx
sub dword [esp + 0xb0], eax
mov eax, dword [esp + 0xac]
sub dword [esp + 0xb4], eax
lea eax, [esp + 0x50]
push 1
push eax
push dword [edi + 0x20]
mov dword [esp + 0xb4], ebx
push esi
mov dword [esp + 0xbc], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
call dword [sym.imp.USER32.dll_MapWindowPoints]
push dword [edi + 0x150]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x438d53
push ebx
push ebx
push 0x18b
push dword [edi + 0x150]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [esp + 0x20]
mov eax, ebx
shr eax, 0x10
mov dword [esp + 0x2c], eax
fild dword [esp + 0x2c]
push 0x14
fstp qword [esp + 0x14]
fld qword [esp + 0x14]
fld qword [0x618870]
fmul qword [0x5f5ea0]
fsubp st(1)
call fcn.005815c0
push eax
mov eax, dword [esp + 0xb8]
sub eax, dword [esp + 0xb0]
push eax
push dword [esp + 0x60]
movzx eax, bx
sub eax, dword [esp + 0xc0]
add eax, dword [esp + 0xb8]
mov dword [esp + 0x3c], eax
fild dword [esp + 0x3c]
fstp qword [esp + 0x20]
fld qword [esp + 0x20]
fld qword [0x618870]
fmul qword [0x5f5e48]
fsubp st(1)
call fcn.005815c0
push eax
xor ebx, ebx
push ebx
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
push 1
lea eax, [esp + 0x28]
mov dword [esp + 0x28], ebx
push eax
push dword [edi + 0x20]
mov dword [esp + 0x34], ebx
push esi
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x24]
push 0x3f9
mov dword [esp + 0x30], edi
push dword [esi + 0x20]
mov dword [esp + 0x18], edi
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, eax
lea eax, [esp + 0x138]
push eax
push ebx
mov dword [esp + 0x44], ebx
call dword [sym.imp.USER32.dll_GetWindowRect]
and dword [esp + 0x24], 0
lea eax, [esp + 0x24]
and dword [esp + 0x28], 0
push 1
push eax
push dword [esi + 0x20]
push ebx
call dword [sym.imp.USER32.dll_MapWindowPoints]
push 0x18
lea eax, [esp + 0x74]
push 0
push eax
call fcn.005838b0
add esp, 0xc
lea eax, [esp + 0x70]
push eax
push 0x18
push dword [0x624190]
call dword [sym.imp.GDI32.dll_GetObjectW]
fild dword [esp + 0x74]
fstp qword [esp + 0x30]
fld qword [esp + 0x30]
fmul qword [0x618870]
call fcn.005815c0
fild dword [esp + 0x78]
mov dword [esp + 0x74], eax
fstp qword [esp + 0x30]
fld qword [esp + 0x30]
fld qword [0x618870]
fmul st(1), st(0)
fxch st(1)
call fcn.005815c0
fmul qword [0x5f5de0]
fild dword [esp + 0x74]
mov dword [esp + 0x78], eax
fstp qword [esp + 0x30]
fld qword [esp + 0x30]
fsub st(1)
fild dword [0x618898]
fstp qword [esp + 0x30]
fmul qword [esp + 0x30]
fadd st(1)
fld qword [0x5f5e18]
fadd st(1), st(0)
fxch st(1)
call fcn.005815c0
fild dword [esp + 0x78]
mov esi, eax
mov dword [esp + 0x30], esi
fstp qword [esp + 0x40]
fld qword [esp + 0x40]
fsub st(2)
fild dword [0x618890]
fstp qword [esp + 0x40]
fmul qword [esp + 0x40]
fadd st(2)
faddp st(1)
call fcn.005815c0
mov ebx, eax
mov dword [esp + 0x6c], ebx
mov eax, edi
sub eax, esi
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x40], eax
fild dword [esp + 0x40]
fstp qword [esp + 0x40]
fsubr qword [esp + 0x40]
call fcn.005815c0
fld qword [0x618870]
mov edi, eax
fmul qword [0x5f5e08]
push 0x14
mov dword [esp + 0x44], edi
fild dword [esp + 0x44]
push ebx
push esi
push dword [esp + 0x34]
fstp qword [esp + 0x50]
fadd qword [esp + 0x50]
call fcn.005815c0
push eax
push 0
push dword [esp + 0x54]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov esi, dword [esp + 0x1c]
push 0x3f9
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [esp + 0x128]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
push 0x3ec
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetDlgItem]
fld qword [0x618870]
mov esi, eax
fmul qword [0x5f5e78]
push 0x14
fld st(0)
call fcn.005815c0
fsub qword [0x5f5dd8]
push eax
call fcn.005815c0
sub ebx, dword [esp + 0x13c]
add ebx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x3c]
add eax, edi
mov dword [esp + 0x3c], eax
fild dword [esp + 0x3c]
push ebx
fstp qword [esp + 0x40]
fld qword [esp + 0x40]
fld qword [0x618870]
fmul qword [0x5f5e08]
faddp st(1)
call fcn.005815c0
push eax
push 0
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
mov edi, dword [esp + 0x1c]
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x58b
push dword [edi + 0x20]
call ebx
lea ecx, [esp + 0xd8]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0x58a
push dword [edi + 0x20]
call ebx
and dword [esp + 0x24], 0
mov esi, eax
and dword [esp + 0x28], 0
lea eax, [esp + 0x24]
push 1
push eax
push dword [edi + 0x20]
push esi
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [esp + 0xd8]
sub eax, dword [esp + 0xe0]
add eax, dword [esp + 0x2c]
cdq
sub eax, edx
mov ebx, eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x30], eax
lea eax, [esp + 0xf8]
push eax
sar ebx, 1
push esi
mov dword [esp + 0x44], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
fild dword [esp + 0x10]
mov eax, dword [esp + 0x104]
sub eax, dword [esp + 0xfc]
push 0x14
push eax
fstp qword [esp + 0x18]
fld qword [esp + 0x18]
fld qword [0x618870]
fld qword [0x5f5f08]
fmul st(1)
fsubp st(2)
fxch st(1)
call fcn.005815c0
fmul qword [0x5f5e60]
push eax
push dword [esp + 0x34]
call fcn.005815c0
push eax
push 0
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x528
push dword [edi + 0x20]
call esi
mov edi, eax
lea eax, [esp + 0x98]
push eax
push edi
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [esp + 0x1c]
push 0x527
push dword [eax + 0x20]
call esi
and dword [esp + 0x24], 0
mov esi, eax
and dword [esp + 0x28], 0
lea eax, [esp + 0x24]
push 1
push eax
mov eax, dword [esp + 0x24]
push dword [eax + 0x20]
push esi
call dword [sym.imp.USER32.dll_MapWindowPoints]
fld qword [0x618870]
fmul qword [0x5f5e08]
mov eax, dword [esp + 0xa0]
sub eax, dword [esp + 0x98]
fild dword [esp + 0x30]
add eax, 0x13
add ebx, eax
fstp qword [esp + 0x10]
fadd qword [esp + 0x10]
mov eax, dword [esp + 0xe4]
sub eax, dword [esp + 0xdc]
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fstp qword [esp + 0x10]
fadd qword [esp + 0x10]
fild dword [esp + 0x6c]
fstp qword [esp + 0x10]
fadd qword [esp + 0x10]
call fcn.005815c0
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fstp qword [esp + 0x10]
fld qword [esp + 0x10]
fld qword [0x618870]
fmul qword [0x5f5e98]
faddp st(1)
call fcn.005815c0
push 0x15
xor ecx, ecx
mov dword [esp + 0x2c], eax
push ecx
push ecx
push eax
push ebx
push ecx
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [esp + 0x28]
xor ecx, ecx
push 0x15
push ecx
push ecx
add eax, 3
push eax
mov eax, dword [esp + 0x4c]
add eax, 9
push eax
push ecx
push edi
call dword [sym.imp.USER32.dll_SetWindowPos]
lea eax, [esp + 0x98]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
mov edi, dword [esp + 0x1c]
push 0x4c5
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x15
mov esi, eax
xor ecx, ecx
mov eax, dword [esp + 0xa4]
sub eax, dword [esp + 0x9c]
push ecx
push ecx
push dword [esp + 0x34]
add eax, 5
add eax, ebx
push eax
push ecx
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [esp + 0xa0]
sub eax, dword [esp + 0x98]
add ebx, eax
lea eax, [esp + 0x98]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x4c6
push dword [edi + 0x20]
call esi
push 0x15
mov ecx, eax
xor edx, edx
mov eax, dword [esp + 0xa4]
sub eax, dword [esp + 0x9c]
push edx
push edx
push dword [esp + 0x34]
add eax, 5
add eax, ebx
mov ebx, dword [sym.imp.USER32.dll_SetWindowPos]
push eax
push edx
push ecx
call ebx
push 0x3f6
push dword [edi + 0x20]
call esi
mov esi, eax
lea eax, [esp + 0x98]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
and dword [esp + 0x24], 0
lea eax, [esp + 0x24]
and dword [esp + 0x28], 0
push 1
push eax
push dword [edi + 0x20]
push esi
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [esp + 0x2c]
xor ecx, ecx
sub eax, dword [esp + 0x98]
sub eax, dword [esp + 0xa0]
push 0x15
push ecx
push ecx
push dword [esp + 0x34]
sub eax, 0x28
push eax
push ecx
push esi
call ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0x18
jne 0x439282
cmp dword [esp + 0x38], 0
je 0x4398fb
lea eax, [esp + 0xe8]
push eax
push dword [0x624114]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0xe8]
push eax
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [esp + 0xf4]
shl eax, 0x10
add eax, dword [esp + 0xf0]
push eax
push 0
push 5
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp ebx, 0x110
jne 0x4392e9
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x4be
push dword [edi + 0x20]
call esi
push 0x528
push dword [edi + 0x20]
call esi
push 1
push dword [0x623fe8]
mov edi, eax
push 0x30
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [sym.imp.USER32.dll_SetPropA]
push 1
push str.GREY
push edi
call esi
push 0x42d18b
push 0xfffffffffffffffc
push edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push eax
push str.SD_WNDPROC
push edi
call esi
mov ecx, edi
call fcn.004296c3
mov edi, dword [esp + 0x1c]
cmp ebx, 0x20
jne 0x43939b
lea eax, [esp + 0x108]
push eax
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [esp + 0x58]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [esp + 0x58]
push eax
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_ScreenToClient]
call fcn.00426899
test eax, eax
jne 0x4398fb
call fcn.0041e8e4
test eax, eax
jne 0x4398fb
call fcn.0041e5f7
test eax, eax
jne 0x4398fb
mov eax, dword [esp + 0x114]
add eax, 0xffffffba
cmp dword [esp + 0x5c], eax
jle 0x4398fb
fild dword [esp + 0x58]
fstp qword [esp + 0x10]
fld qword [esp + 0x10]
fild dword [esp + 0x110]
fstp qword [esp + 0x10]
fld qword [esp + 0x10]
fld qword [0x618870]
fmul qword [0x5f5f98]
fsubp st(1)
fcompi st(1)
fstp st(0)
jbe 0x4398fb
push dword [0x6240c4]
call dword [sym.imp.USER32.dll_SetCursor]
jmp 0x43891e
cmp ebx, 0x202
jne 0x4394e8
lea eax, [esp + 0x118]
push eax
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetClientRect]
mov esi, dword [esp + 0x20]
mov eax, esi
shr eax, 0x10
mov dword [esp + 0x10], eax
call fcn.00426899
test eax, eax
jne 0x4398ff
call fcn.0041e8e4
test eax, eax
jne 0x4398ff
call fcn.0041e5f7
test eax, eax
jne 0x4398ff
mov ecx, dword [esp + 0x124]
mov eax, dword [esp + 0x10]
add ecx, 0xffffffba
cwde
cmp eax, ecx
jle 0x4398ff
movsx eax, si
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fstp qword [esp + 0x10]
fld qword [esp + 0x10]
fild dword [esp + 0x120]
fstp qword [esp + 0x10]
fld qword [esp + 0x10]
fld qword [0x618870]
fmul qword [0x5f5f98]
fsubp st(1)
fcompi st(1)
fstp st(0)
jbe 0x4398ff
push 0x104
lea eax, [esp + 0x14c]
push 0
push eax
call fcn.005838b0
add esp, 0xc
lea ecx, [esp + 0x148]
call fcn.0040c651
cmp byte [esp + 0x148], 0
je 0x4394ca
lea eax, [esp + 0x250]
push str.http:__redirects.stardock.com_multiplicity_3.0_purchase
push eax
call fcn.00589e60
lea eax, [esp + 0x258]
push str._affiliate_
push eax
call fcn.00589e70
lea eax, [esp + 0x158]
push eax
lea eax, [esp + 0x264]
push eax
call fcn.00589e70
add esp, 0x18
mov eax, 0x5e66b6
push 3
push eax
push eax
lea eax, [esp + 0x25c]
push eax
push str.open
push dword [edi + 0x20]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x4398ff
push 3
mov eax, 0x5e66b6
push eax
push eax
push str.http:__redirects.stardock.com_multiplicity_3.0_purchase
push str.open
push dword [edi + 0x20]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x4394ec
mov esi, dword [esp + 0x20]
cmp ebx, 0x14
jne 0x4398bb
lea eax, [esp + 0x88]
push eax
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [esp + 0x38]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edx, dword [esp + 0x94]
mov ebx, eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x10], ebx
call fcn.00431777
push eax
push ebx
mov dword [esp + 0x44], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov esi, dword [sym.imp.GDI32.dll_CreateRectRgn]
push 1
push 1
push 0
push 0
mov dword [esp + 0x40], eax
call esi
push eax
push ebx
mov dword [esp + 0x34], eax
call dword [sym.imp.GDI32.dll_GetClipRgn]
mov edi, eax
mov eax, dword [esp + 0x94]
add eax, 0xfffffff6
push eax
mov eax, dword [esp + 0x94]
add eax, 0xfffffff6
push eax
push 8
push 8
call esi
push 4
mov esi, eax
push esi
push ebx
call dword [sym.imp.GDI32.dll_ExtSelectClipRgn]
push esi
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
call esi
push dword [0x6b5bc4]
lea eax, [esp + 0x8c]
push eax
push ebx
call dword [sym.imp.USER32.dll_FillRect]
cmp edi, 1
jne 0x4395b0
mov edi, dword [esp + 0x2c]
push edi
push ebx
call dword [sym.imp.GDI32.dll_SelectClipRgn]
jmp 0x4395bd
push 0
push ebx
call dword [sym.imp.GDI32.dll_SelectClipRgn]
mov edi, dword [esp + 0x2c]
push edi
call esi
push 0x11
pop eax
push 8
mov dword [esp + 0x64], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x20]
pop ebx
sub dword [esp + 0x88], ebx
push 0x3e9
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_GetDlgItem]
lea esi, [esp + 0x88]
lea edi, [esp + 0x40]
movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0xc8]
push ecx
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0xcc]
sub dword [esp + 0xd4], eax
mov edi, dword [esp + 0xd0]
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x4c]
sub edx, ebx
sub edi, dword [esp + 0xc8]
sub eax, ebx
mov esi, dword [esp + 0x44]
mov ecx, edx
and dword [esp + 0xc8], 0
sub ecx, edi
and dword [esp + 0xcc], 0
add esi, ebx
push eax
push edx
sub ecx, 0x14
mov dword [esp + 0xd8], edi
push esi
push ecx
mov dword [esp + 0x50], ecx
call dword [sym.imp.GDI32.dll_CreateRectRgn]
sub esp, 0x10
mov edx, dword [0x6240cc]
mov edi, esp
lea esi, [esp + 0x98]
sub esp, 0x10
mov ebx, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [esp + 0x80]
sub esp, 0x14
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x44]
mov ecx, edi
call fcn.004170fc
xor esi, esi
push esi
push edi
call dword [sym.imp.GDI32.dll_SelectClipRgn]
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
call fcn.0041e8e4
fld qword [0x5f5e30]
test eax, eax
jne 0x4397ef
fstp st(0)
call fcn.0041e5f7
mov ebx, dword [esp + 0x1c]
test eax, eax
jne 0x4397e7
lea eax, [esp + 0xb8]
push eax
push dword [ebx + 0x20]
call dword [sym.imp.USER32.dll_GetClientRect]
fld qword [0x618870]
fmul qword [0x5f5e30]
fild dword [esp + 0x40]
fstp qword [esp + 0x10]
fld qword [esp + 0x10]
fsub st(1)
call fcn.005815c0
fild dword [esp + 0xb8]
mov dword [esp + 0xc0], eax
fstp qword [esp + 0x10]
fadd qword [esp + 0x10]
call fcn.005815c0
fild dword [esp + 0xc4]
mov dword [esp + 0xb8], eax
fstp qword [esp + 0x10]
fld qword [esp + 0x10]
fld qword [0x618870]
fmul qword [0x5f5e08]
fsubp st(1)
call fcn.005815c0
mov dword [esp + 0xc4], eax
fild dword [esp + 0xc4]
fstp qword [esp + 0x10]
fld qword [esp + 0x10]
fld qword [0x618870]
fmul qword [0x5f5ef0]
fsubp st(1)
call fcn.005815c0
push dword [0x624000]
mov dword [esp + 0xc0], eax
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x4d4640
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
call fcn.00426899
test eax, eax
jne 0x4397e7
push 1
push edi
call dword [sym.imp.GDI32.dll_SetBkMode]
mov esi, dword [sym.imp.USER32.dll_DrawTextW]
lea eax, [esp + 0xb8]
push 0x11
push eax
push 0xffffffffffffffff
push str.Need_to_control_more_computers_
push edi
call esi
push 0xcf7101
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
push 0x29
lea eax, [esp + 0xbc]
push eax
push 0xffffffffffffffff
push str.Click_here_to_visit_our_website_for_upgrade_options.
push edi
call esi
fld qword [0x5f5e30]
xor esi, esi
jmp 0x4397f3
fld qword [0x5f5e30]
jmp 0x4397f3
mov ebx, dword [esp + 0x1c]
cmp dword [0x618868], 0
je 0x439865
fld qword [0x618870]
fmul qword [0x5f5de0]
add dword [esp + 0x8c], 8
fild dword [esp + 0x8c]
fstp qword [esp + 0x10]
fadd qword [esp + 0x10]
call fcn.005815c0
fmul qword [0x618870]
fild dword [esp + 0x88]
mov dword [esp + 0x94], eax
fstp qword [esp + 0x10]
fadd qword [esp + 0x10]
call fcn.005815c0
push esi
mov dword [esp + 0x94], eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
lea eax, [esp + 0x8c]
push eax
push edi
call dword [sym.imp.USER32.dll_FillRect]
jmp 0x439867
fstp st(0)
lea eax, [esp + 0x88]
push eax
push dword [ebx + 0x20]
call dword [sym.imp.USER32.dll_GetClientRect]
push 0xcc0020
push esi
push esi
push edi
push dword [esp + 0xa4]
push dword [esp + 0xa4]
push esi
push esi
push dword [esp + 0x58]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [esp + 0x30]
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
push dword [esp + 0x3c]
call dword [sym.imp.GDI32.dll_DeleteObject]
xor eax, eax
inc eax
jmp 0x4398e4
cmp ebx, 0x134
je 0x4398df
cmp ebx, 0x136
je 0x4398d3
cmp ebx, 0x138
jne 0x4398ff
push 1
push dword [esp + 0x3c]
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, dword [0x6b5bc8]
mov ecx, dword [esp + 0x44c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00580b5b
mov esp, ebp
pop ebp
ret 0xc
mov esi, dword [esp + 0x20]
push esi
push dword [esp + 0x3c]
mov ecx, edi
push ebx
call fcn.00444086
jmp 0x4398e4