Function at 0x416741
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x254
mov eax, dword [0x592bb0]
xor eax, esp
mov dword [esp + 0x250], eax
push ebx
push esi
push edi
mov esi, ecx
push fcn.004191b9
mov dword [esp + 0x14], esi
call fcn.0051a63f
pop ecx
call fcn.00408f19
push 0x771c
push str.Dont_display_this_item
call fcn.0040925b
mov edi, eax
push edi
call fcn.00403454
add esp, 0xc
push eax
push edi
mov ecx, 0x5ab2b0
call fcn.004033e3
push 0x7781
push str.Display_as_a_link
call fcn.0040925b
mov edi, eax
push edi
call fcn.00403454
add esp, 0xc
push eax
push edi
mov ecx, 0x5ab2b4
call fcn.004033e3
push 0x7782
push str.Display_as_a_menu
call fcn.0040925b
mov edi, eax
push edi
call fcn.00403454
add esp, 0xc
push eax
push edi
mov ecx, 0x5ab2b8
call fcn.004033e3
lea eax, [esp + 0x18]
push eax
call fcn.00518d0a
pop ecx
lea eax, [esp + 0x18]
push eax
call fcn.0051a901
mov dword [esp + 0x18], eax
xor eax, eax
xor ebx, ebx
mov byte [esp + 0x24], bl
lea edi, [esp + 0x25]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
pop ecx
stosb byte es:[edi], al
push 1
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
push ebx
push ebx
push 1
lea eax, [esp + 0x2c]
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
push str.START8_WAIT
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push 0x7f
push str.DWMAPI.DLL
mov dword [0x59b354], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, esi
mov dword [0x59b358], eax
call fcn.0041952d
push 0x3ed
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x416291
mov edi, eax
push 0xfffffffffffffffc
push edi
mov dword [0x5ab25c], edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push eax
push str.SD_WNDPROC
push edi
call dword [sym.imp.USER32.dll_SetPropA]
call fcn.0045e41a
test eax, eax
je 0x4168a4
push ebx
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.00417042
mov dword [0x59469c], eax
mov eax, dword [esi + 0x20]
push 0x59b35c
mov dword [0x5ab294], eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
call fcn.0041401f
fld qword [0x5946a8]
push str.Segoe_UI_light
fmul qword [0x571548]
push ebx
push 6
push ebx
push 4
push 1
push ebx
push ebx
push ebx
mov edi, 0x190
push edi
push ebx
push ebx
push ebx
call fcn.0051d1e0
mov esi, dword [sym.imp.GDI32.dll_CreateFontW]
push eax
call esi
fld qword [0x5946a8]
push str.Segoe_UI
fmul qword [0x571540]
push ebx
push 6
push ebx
push 4
push 1
push ebx
push ebx
push ebx
push edi
push ebx
push ebx
push ebx
mov dword [0x59b3bc], eax
call fcn.0051d1e0
push eax
call esi
fld qword [0x5946a8]
push str.Segoe_UI_light
fmul qword [0x571540]
push ebx
push 6
push ebx
push 4
push 1
push ebx
push ebx
push ebx
push edi
push ebx
push ebx
push ebx
mov dword [0x59b3b8], eax
call fcn.0051d1e0
push eax
call esi
fld qword [0x5946a8]
push str.Segoe_UI_light
fmul qword [0x571538]
push ebx
push 6
push ebx
push 4
push 1
push ebx
push ebx
push ebx
push edi
push ebx
push ebx
mov dword [0x59b3b4], eax
push ebx
call fcn.0051d1e0
push eax
call esi
fld qword [0x5946a8]
push str.Segoe_UI
fmul qword [0x571530]
push ebx
push 6
push ebx
push 4
push 1
push ebx
push ebx
push ebx
push edi
push ebx
push ebx
push ebx
mov dword [0x59b3b0], eax
call fcn.0051d1e0
push eax
call esi
fld qword [0x5946a8]
push str.Segoe_UI
fmul qword [0x571530]
push ebx
push 6
push ebx
push 4
push 1
push ebx
push ebx
push ebx
push edi
push ebx
push ebx
push ebx
mov dword [0x59b3c4], eax
mov dword [0x59b3c0], eax
call fcn.0051d1e0
push eax
call esi
fld qword [0x5946a8]
push str.Segoe_UI
fmul qword [0x571528]
push ebx
push 6
push ebx
push 4
push 1
push ebx
push ebx
push ebx
push edi
push ebx
push ebx
push ebx
mov dword [0x59b3ac], eax
call fcn.0051d1e0
push eax
call esi
fld qword [0x5946a8]
push str.Segoe_UI
fmul qword [0x571530]
push ebx
push 6
push ebx
push 4
push 1
push ebx
push ebx
push ebx
push edi
push ebx
push ebx
push ebx
mov dword [0x59b3c8], eax
call fcn.0051d1e0
push eax
call esi
mov dword [0x59b3a4], eax
fld qword [0x5946a8]
push str.Segoe_UI_light
fmul qword [0x571520]
push ebx
push 5
push ebx
push 4
push 1
push ebx
push ebx
push ebx
push edi
push ebx
push ebx
push ebx
call fcn.0051d1e0
push eax
call esi
fld qword [0x5946a8]
push str.Segoe_UI_light
fmul qword [0x571518]
push ebx
push 5
push ebx
push 4
push 1
push ebx
push ebx
push ebx
push edi
push ebx
push ebx
push ebx
mov dword [0x59b398], eax
call fcn.0051d1e0
push eax
call esi
fld qword [0x5946a8]
push str.Segoe_UI_light
fmul qword [0x571510]
push ebx
push 5
push ebx
push 4
push 1
push 1
push ebx
push ebx
push edi
push ebx
push ebx
push ebx
mov dword [0x59b394], eax
call fcn.0051d1e0
push eax
call esi
fld qword [0x5946a8]
push str.Segoe_UI_light
fmul qword [0x571510]
push ebx
push 5
push ebx
push 4
push 1
push ebx
push ebx
push ebx
push edi
push ebx
push ebx
push ebx
mov dword [0x59b390], eax
call fcn.0051d1e0
push eax
call esi
push str.Segoe_UI_light
push ebx
push 5
push ebx
mov dword [0x59b3cc], eax
push 4
fld qword [0x5946a8]
push 1
fmul qword [0x571530]
push ebx
push ebx
push ebx
push edi
push ebx
push ebx
push ebx
call fcn.0051d1e0
push eax
call esi
fld qword [0x5946a8]
push str.Segoe_UI
fmul qword [0x5714f0]
push ebx
push 5
push ebx
push 4
push 1
push ebx
push ebx
push ebx
push edi
push ebx
push ebx
push ebx
mov dword [0x59b38c], eax
call fcn.0051d1e0
push eax
call esi
fld qword [0x5946a8]
push str.Segoe_UI_SemiBold
fmul qword [0x571510]
push ebx
push 5
push ebx
push 4
push 1
push ebx
push ebx
push ebx
push edi
push ebx
push ebx
push ebx
mov dword [0x59b3a0], eax
call fcn.0051d1e0
push eax
call esi
fld qword [0x5946a8]
push str.Segoe_UI_light
fmul qword [0x5714b0]
push ebx
push 6
push ebx
push 4
push 1
push ebx
push ebx
push ebx
push edi
push ebx
push ebx
push ebx
mov dword [0x59b39c], eax
call fcn.0051d1e0
push eax
call esi
mov esi, dword [esp + 0x10]
push 0x3ea
push dword [esi + 0x20]
mov dword [0x59b3a8], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 1
push dword [0x59b3b4]
mov dword [esp + 0x14], eax
push 0x30
push eax
call edi
push 1
push str.SD_COL1
push dword [esp + 0x14]
call dword [sym.imp.USER32.dll_SetPropA]
push 0x4162e2
push 0xfffffffffffffffc
push dword [esp + 0x14]
call dword [sym.imp.USER32.dll_SetWindowLongW]
push eax
push str.SD_WNDPROC
push dword [esp + 0x14]
call dword [sym.imp.USER32.dll_SetPropA]
fld qword [0x5946a8]
fmul qword [0x571548]
call fcn.0051d216
movzx eax, ax
push eax
push 0xffffffffffffffff
push 0x1a0
push dword [esi + 0xe0]
call edi
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x28], esp
push str.General
call fcn.00402b62
lea eax, [esp + 0x50]
push eax
call fcn.00414a79
add esp, 0x20
cmp dword [eax + 0x14], 8
jb 0x416c4e
mov eax, dword [eax]
push eax
mov eax, dword [esp + 0x14]
push ebx
push 0x180
push dword [eax + 0xe0]
call edi
push 1
xor edi, edi
lea esi, [esp + 0x38]
mov dword [esp + 0x10], eax
call fcn.00402c49
mov eax, dword [esp + 0x10]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 2
push dword [esp + 0x10]
push 0x19a
push dword [eax + 0xe0]
call edi
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x28], esp
push str.Search
call fcn.00402b62
lea eax, [esp + 0x50]
push eax
call fcn.00414a79
add esp, 0x20
cmp dword [eax + 0x14], 8
jb 0x416cb7
mov eax, dword [eax]
push eax
mov eax, dword [esp + 0x14]
push ebx
push 0x180
push dword [eax + 0xe0]
call edi
push 1
xor edi, edi
lea esi, [esp + 0x38]
mov dword [esp + 0x10], eax
call fcn.00402c49
mov eax, dword [esp + 0x10]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 3
push dword [esp + 0x10]
push 0x19a
push dword [eax + 0xe0]
call edi
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x28], esp
push str.About
call fcn.00402b62
lea eax, [esp + 0x50]
push eax
call fcn.00414a79
add esp, 0x20
cmp dword [eax + 0x14], 8
jb 0x416d20
mov eax, dword [eax]
push eax
mov eax, dword [esp + 0x14]
push ebx
push 0x180
push dword [eax + 0xe0]
call edi
push 1
xor edi, edi
lea esi, [esp + 0x38]
mov dword [esp + 0x10], eax
call fcn.00402c49
mov esi, dword [esp + 0x10]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 1
push dword [esp + 0x10]
push 0x19a
push dword [esi + 0xe0]
call edi
push ebx
push ebx
push 0x186
push dword [esi + 0xe0]
call edi
mov ecx, esi
call fcn.00418277
mov eax, dword [esi + 0xe0]
mov dword [0x5ab290], eax
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x14], 0x71
jle 0x416eac
push 0x104
lea eax, [esp + 0x54]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0x50]
push 0x5c
push eax
call fcn.005187a3
pop ecx
pop ecx
cmp eax, ebx
je 0x416dbf
xor ecx, ecx
mov word [eax], cx
lea edi, [esp + 0x50]
sub edi, 2
mov ax, word [edi + 2]
add edi, 2
cmp ax, bx
jne 0x416dc6
push 7
pop ecx
mov esi, str.Start8_32.dll
rep movsd dword es:[edi], dword [esi]
lea eax, [esp + 0x50]
push eax
movsw word es:[edi], word [esi]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x416e15
lea ecx, [esp + 0x50]
call fcn.00416461
test eax, eax
jne 0x416e15
push 1
push ebx
push ebx
push str.http:__www.stardock.com_products_start10_update.asp
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push ebx
call fcn.005199b8
push 0x104
lea eax, [esp + 0x54]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0x50]
push 0x5c
push eax
call fcn.005187a3
pop ecx
pop ecx
cmp eax, ebx
je 0x416e44
xor ecx, ecx
mov word [eax], cx
lea edi, [esp + 0x50]
sub edi, 2
mov ax, word [edi + 2]
add edi, 2
cmp ax, bx
jne 0x416e4b
push 7
pop ecx
mov esi, str.Start8_64.dll
rep movsd dword es:[edi], dword [esi]
lea eax, [esp + 0x50]
push eax
movsw word es:[edi], word [esi]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x416e83
lea ecx, [esp + 0x50]
call fcn.00416461
test eax, eax
je 0x416dfa
push 0x104
lea eax, [esp + 0x54]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [esp + 0x50]
call fcn.00416461
test eax, eax
je 0x416dfa
mov ecx, dword [esp + 0x25c]
pop edi
pop esi
xor eax, eax
pop ebx
xor ecx, esp
inc eax
call fcn.005182a2
mov esp, ebp
pop ebp
ret