Function at 0x4037c0
Capabilities:
Create process on windows
Open clipboard
Write clipboard data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x54a0f8
push eax
mov dword fs:[0], esp
sub esp, 0xe8
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x108]
mov esi, ecx
cmp edi, 0x4020020
ja 0x403c2d
je 0x403c14
lea eax, [edi - 0x4020001]
cmp eax, 0x1e
ja case.0x40401c.67239988
jmp dword [eax*4 + 0x404208]
push 1
push 0
push 0
push 0x5897d0
push str.DBManager
mov ecx, esi
call fcn.00403480
jmp 0x4041e5
push 1
push 0
push 0
push 0x5897b8
push str.DBManager
mov ecx, esi
call fcn.00403480
jmp 0x4041e5
push 1
push 0
push 0
push 0
push str.dbcnv
mov ecx, esi
call fcn.00403480
jmp 0x4041e5
push 1
push 0
push 0
push 0
push str.egrid
mov ecx, esi
call fcn.00403480
jmp 0x4041e5
mov ecx, esi
call fcn.00404520
jmp 0x4041e5
mov eax, dword [esi + 0x8b0]
push 0
push 0x71
push 0x111
mov ecx, dword [eax + 0xdc]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4041e5
push 0
push 0
push 0
push 2
mov ecx, esi
call fcn.00436200
jmp 0x4041e5
mov edx, dword [esi + 0x8b0]
push 0
push 0
push 0x87d2
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4041e5
mov ecx, dword [esi + 0x8b0]
test ecx, ecx
jne 0x4038ea
xor eax, eax
jmp 0x4041ea
push 0x81
call fcn.004763c0
jmp 0x4041e5
mov ecx, dword [esi + 0x8b0]
test ecx, ecx
jne 0x40390a
xor eax, eax
jmp 0x4041ea
push 0x82
call fcn.004763c0
jmp 0x4041e5
mov ecx, dword [esi + 0x8b0]
test ecx, ecx
jne 0x40392a
xor eax, eax
jmp 0x4041ea
push 0x84
call fcn.004763e0
jmp 0x4041e5
mov eax, dword [esi + 0x8b0]
test eax, eax
jne 0x40394a
xor eax, eax
jmp 0x4041ea
mov ecx, esi
call fcn.0045b6e0
test eax, eax
je 0x4041e5
cmp dword [eax + 0x3c], 5
jne 0x4041e5
mov ecx, dword [esi + 0x8b0]
push 0x6e
call fcn.0053fad6
jmp 0x4041e5
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 2
mov ecx, esi
call fcn.00403170
jmp 0x4041e5
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 3
mov ecx, esi
call fcn.00403170
jmp 0x4041e5
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 4
mov ecx, esi
call fcn.00403170
jmp 0x4041e5
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 6
mov ecx, esi
call fcn.00403170
jmp 0x4041e5
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 7
mov ecx, esi
call fcn.00403170
jmp 0x4041e5
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 8
mov ecx, esi
call fcn.00403170
jmp 0x4041e5
mov ebx, dword [esi + 0x398]
mov edx, dword [esi + 0x8b0]
xor ecx, ecx
push 0
test ebx, ebx
sete cl
mov dword [esi + 0x398], ecx
mov eax, dword [edx + 0x664]
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x4041e5
push 0
push 0
push 0
push 0x13
mov ecx, esi
call fcn.00436200
jmp 0x4041e5
push 0
push 0
push 0
push 0x18
mov ecx, esi
call fcn.00436200
jmp 0x4041e5
mov eax, dword [esi + 0x8b0]
push 0
add eax, 0x594
push 9
push 0x110a
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ebp, eax
test ebp, ebp
je 0x4041e5
mov edx, dword [0x5ada84]
mov dword [esp + 0x10], edx
cmp edi, 0x4020016
mov dword [esp + 0x100], 0xd
jne 0x403af6
push 0
push 1
push 0x5897a4
push 0x58978c
lea eax, [esp + 0x20]
push 0x589764
push eax
push 0
mov ecx, esi
call fcn.004388b0
test eax, eax
je 0x403add
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x403af6
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.00527eff
jmp 0x4041e5
push 0x589748
lea ecx, [esp + 0x18]
call fcn.004e2be0
mov bl, 0xe
lea ecx, [esp + 0x1c]
mov byte [esp + 0x100], bl
call fcn.00477cf0
lea edx, [esp + 0x1c]
mov ecx, esi
push edx
push ebp
mov byte [esp + 0x108], 0xf
call fcn.004610d0
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x403bd2
cmp edi, 0x4020016
push 0
jne 0x403b53
lea eax, [esp + 0x14]
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x28]
call fcn.00478400
jmp 0x403bd2
call dword [sym.imp.USER32.dll_OpenClipboard]
cmp eax, 1
jne 0x403bd2
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
mov eax, ecx
neg eax
sbb eax, eax
and eax, esi
mov dl, byte [eax + ecx - 1]
test dl, dl
je 0x403b81
push 0
lea ecx, [esp + 0x20]
call fcn.00477ff0
call dword [sym.imp.USER32.dll_EmptyClipboard]
mov ecx, dword [esp + 0x2c]
push ecx
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
test esi, esi
je 0x403bcc
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x24]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
and eax, edi
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push eax
call fcn.00478b60
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
push 1
call dword [sym.imp.USER32.dll_SetClipboardData]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x100], bl
mov dword [esp + 0x1c], 0x55f890
call fcn.00477ef0
lea ecx, [esp + 0x14]
mov byte [esp + 0x100], 0xd
call fcn.004e2c90
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.00527eff
jmp 0x4041e5
push 1
push 0
push 0
push 0
push str.elib
mov ecx, esi
call fcn.00403480
jmp 0x4041e5
cmp edi, 0x4020030
ja 0x403ffb
je 0x403fd9
lea eax, [edi - 0x4020021]
cmp eax, 0xe
ja case.0x40401c.67239988
jmp dword [eax*4 + 0x404284]
push 1
push 0
push 0
push 0
push str.packcom
mov ecx, esi
call fcn.00403480
jmp 0x4041e5
push 1
push 0
push 0
push 0x58972c
push str.DBManager
mov ecx, esi
call fcn.00403480
jmp 0x4041e5
push 1
push 0
push 0
push 0
push str.dblang
mov ecx, esi
call fcn.00403480
jmp 0x4041e5
push 1
push 0
push 0
push 0
push 0x589720
mov ecx, esi
call fcn.00403480
jmp 0x4041e5
lea edx, [esi + 0x898]
push str.tutorial
lea eax, [esp + 0x48]
push edx
push eax
call fcn.00528194
push str._tutorial.exe
lea ecx, [esp + 0x14]
push eax
push ecx
mov dword [esp + 0x10c], 0
call fcn.00528194
lea ecx, [esp + 0x44]
mov byte [esp + 0x100], 2
call fcn.00527eff
mov edx, dword [esp + 0x10]
push edx
call fcn.004e5570
add esp, 4
test eax, eax
jne 0x403d60
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x40]
push eax
push 0x5896b0
push ecx
call fcn.004e6ca0
mov eax, dword [eax]
mov byte [esp + 0x10c], 3
push eax
call fcn.004e3020
add esp, 0x10
lea ecx, [esp + 0x40]
mov byte [esp + 0x100], 2
call fcn.00527eff
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.00527eff
jmp 0x4041e5
push 1
lea edx, [esp + 0x14]
push 0
push edx
mov ecx, esi
call fcn.004036c0
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.00527eff
jmp 0x4041e5
add esi, 0x898
push str.help
lea eax, [esp + 0x34]
push esi
push eax
call fcn.00528194
push str.esdn.chm
lea ecx, [esp + 0x14]
push eax
push ecx
mov dword [esp + 0x10c], 4
call fcn.00528194
mov bl, 6
lea ecx, [esp + 0x30]
mov byte [esp + 0x100], bl
call fcn.00527eff
mov edx, dword [esp + 0x10]
push edx
call fcn.004e5570
add esp, 4
test eax, eax
jne 0x403e2d
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x3c]
push eax
push 0x58963c
push ecx
call fcn.004e6ca0
mov eax, dword [eax]
mov byte [esp + 0x10c], 7
push eax
call fcn.004e3020
add esp, 0x10
lea ecx, [esp + 0x3c]
mov byte [esp + 0x100], bl
call fcn.00527eff
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.00527eff
jmp 0x4041e5
mov edx, dword [esp + 0x10]
push 5
push edx
call fcn.0046ff90
add esp, 8
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.00527eff
jmp 0x4041e5
mov eax, dword [0x5ada84]
mov dword [esp + 0x10], eax
mov dword [esp + 0x100], 0xa
mov dword [esp + 0x14], eax
mov eax, dword [0x5b1c44]
mov bl, 0xb
cmp eax, 2
mov byte [esp + 0x100], bl
jl 0x403e94
mov eax, dword [0x5b1c40]
lea ecx, [esp + 0x10]
add eax, 4
push eax
call fcn.00528038
jmp 0x403ecc
lea ecx, [esi + 0x898]
push str.wizard
lea edx, [esp + 0x38]
push ecx
push edx
call fcn.00528194
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x104], 0xc
call fcn.00528038
lea ecx, [esp + 0x34]
mov byte [esp + 0x100], bl
call fcn.00527eff
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x10]
push eax
push 0
push 0x589630
push 0x589618
push 0x5895fc
push ecx
push 0
mov ecx, esi
call fcn.004388b0
test eax, eax
je 0x403f37
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x403f37
cmp dword [0x5b1c44], 2
jge 0x403f16
push 0xffffffffffffffff
push 2
mov ecx, 0x5b1c3c
call fcn.005269d9
mov ecx, dword [0x5b1c40]
lea eax, [esp + 0x10]
push eax
add ecx, 4
call fcn.00528038
mov edx, dword [esp + 0x10]
push 1
push edx
mov ecx, esi
call fcn.00469820
lea ecx, [esp + 0x14]
mov byte [esp + 0x100], 0xa
call fcn.00527eff
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.00527eff
jmp 0x4041e5
mov ecx, esi
call fcn.0045a9f0
jmp 0x4041e5
mov eax, dword [esi + 0x92c]
mov ecx, dword [esi + 0x894]
xor eax, ecx
jne 0x403f84
push 0x5895b0
jmp 0x403f89
push 0x589500
lea ecx, [esi + 0x90c]
call fcn.00528088
mov ecx, dword [esi + 0x8b0]
mov dword [esi + 0x910], 0x40
push 0
push 0x73
mov edx, dword [ecx + 0x1c]
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4041e5
push 0x5b0a40
mov ecx, esi
call fcn.004382b0
jmp 0x4041e5
mov ecx, esi
call fcn.00438360
jmp 0x4041e5
mov ecx, dword [0x5b1200]
xor eax, eax
test ecx, ecx
mov ecx, dword [0x5b1ac0]
sete al
mov dword [0x5b1200], eax
call fcn.00474340
jmp 0x4041e5
cmp edi, 0x4020038
ja 0x4040de
je 0x4040c5
lea eax, [edi - 0x4020032]
cmp eax, 5
ja case.0x40401c.67239988
jmp dword [eax*4 + 0x4042c0]
mov ecx, esi
call fcn.004043d0
jmp 0x4041e5
mov ecx, esi
call fcn.00404350
jmp 0x4041e5
push 0
lea ecx, [esp + 0x4c]
call fcn.00449b70
lea ecx, [esp + 0x48]
mov dword [esp + 0x100], 0x10
call fcn.005289f4
lea ecx, [esp + 0xe0]
mov dword [esp + 0x100], 0x12
mov dword [esp + 0xe0], 0x55f890
call fcn.00477ef0
lea ecx, [esp + 0xa4]
mov byte [esp + 0x100], 0x11
call fcn.005257a3
lea ecx, [esp + 0x48]
mov dword [esp + 0x100], 0xffffffff
call fcn.0052862a
jmp 0x4041e5
push 0xffffffffffffffff
mov ecx, esi
call fcn.004bbe70
jmp 0x4041e5
push 1
mov ecx, esi
call fcn.004bbe70
jmp 0x4041e5
push 1
push 0
push 0
push 0
push str.EvaDesigner
mov ecx, esi
call fcn.00403480
jmp 0x4041e5
cmp edi, 0x402003b
ja 0x4041c6
je 0x40419f
sub edi, 0x4020039
je 0x404196
dec edi
jne case.0x40401c.67239988
add esi, 0x898
push str.VReportindex.html
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.00528194
mov eax, dword [0x5b1ac0]
mov edx, dword [esp + 0x14]
push 1
push 0
mov ecx, dword [eax + 0x1c]
push 0
push edx
mov ebx, 8
push str.open
push ecx
mov dword [esp + 0x118], ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jg 0x404180
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x38]
push edx
push 0x5894a8
push eax
call fcn.004e6ca0
mov eax, dword [eax]
mov byte [esp + 0x10c], 9
push eax
call fcn.004e3020
add esp, 0x10
lea ecx, [esp + 0x38]
mov byte [esp + 0x100], bl
call fcn.00527eff
lea ecx, [esp + 0x14]
mov dword [esp + 0x100], 0xffffffff
call fcn.00527eff
jmp 0x4041e5
mov ecx, esi
call fcn.0046e5e0
jmp 0x4041e5
mov eax, dword [esi + 0x8b0]
test eax, eax
jne 0x4041ad
xor eax, eax
jmp 0x4041ea
mov ecx, esi
call fcn.0046f050
test eax, eax
jne 0x4041e5
push eax
push eax
push 9
push eax
mov ecx, esi
call fcn.00402f60
jmp 0x4041e5
cmp edi, 0x84020006
je 0x4041d2
xor eax, eax
jmp 0x4041ea
mov ecx, dword [esi + 0x8b0]
push 0
add ecx, 0x558
call fcn.00401a30
mov eax, 1
mov ecx, dword [esp + 0xf8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xf4
ret 0x10