Function at 0x405789
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
mov ecx, dword [ebp + 0x10]
push ebx
mov eax, 0x112
cmp ecx, eax
push esi
push edi
ja 0x406321
je 0x4062de
sub ecx, 6
je 0x4062b8
sub ecx, 0x10a
je 0x405d6e
dec ecx
jne 0x406523
mov edi, dword [ebp + 8]
mov eax, dword [0x49f4cc]
cmp eax, dword [edi + 0x830]
movzx ecx, word [ebp + 0x14]
jne 0x406523
mov esi, 0x1395
cmp ecx, esi
jg 0x405a99
je 0x405a25
mov eax, 0x3fb
cmp ecx, eax
jg 0x4058ec
je 0x4058bd
dec ecx
je 0x405885
dec ecx
je 0x40585a
sub ecx, 3
je 0x40586b
sub ecx, 0x3f0
je 0x40584e
sub ecx, 3
jne 0x406523
push 0
push 0
push 0xf0
push 0x3f8
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [0x426190], eax
call fcn.00403358
jmp 0x406523
mov ecx, edi
call fcn.00406de4
jmp 0x406523
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x406523
mov ecx, 0x4227c0
call fcn.0040b178
push 0
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x406523
and dword [0x415e88], 0
and dword [0x427234], 0
push 1
pop esi
push 0x32
mov dword [0x427230], esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push dword [edi + 0x830]
call dword [sym.imp.USER32.dll_EndDialog]
push esi
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x406523
push 0
push 0
push 0xf0
push eax
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
mov dword [0x415e90], eax
mov dword [0x427234], eax
push str.activ
jmp 0x405c58
mov eax, 0x403
sub ecx, eax
je 0x4059e0
sub ecx, 0x3e3
je 0x4059d1
sub ecx, 9
je 0x4059c5
sub ecx, 0xba4
je 0x40594e
dec ecx
jne 0x406523
xor esi, esi
push esi
push esi
push 0x147
push 0x1394
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
mov dword [0x49f4e0], eax
mov dword [0x49f50c], esi
push str.deactivate
jmp 0x4059b9
xor esi, esi
push esi
push esi
push 0x147
push 0x1393
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x415e98], eax
je 0x406523
cmp dword [0x415eac], eax
jne 0x40598f
push 1
pop eax
mov dword [0x49f4e8], eax
mov dword [0x415e98], eax
jmp 0x4059a7
push eax
push str.img_id
mov dword [0x49f4e8], esi
mov dword [0x415e98], eax
call fcn.00403514
pop ecx
pop ecx
mov ecx, edi
call fcn.00409c27
push dword [0x49f4e8]
push str.use_user_image
call fcn.00403514
pop ecx
pop ecx
jmp 0x406523
mov ecx, edi
call fcn.0040c85d
jmp 0x406523
push dword [ebp + 0xc]
mov ecx, edi
call fcn.0040993d
jmp 0x406523
push 0
push 0
push 0xf0
push eax
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push str.only_on_wallpaper
mov dword [0x426194], eax
call fcn.00403514
mov eax, dword [0x426194]
pop ecx
pop ecx
mov ecx, 0x427228
mov dword [0x49f480], eax
call fcn.00402a1c
jmp 0x405c5f
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0
push 0x147
push esi
push dword [ebp + 0xc]
call ebx
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, eax
mov eax, dword [0x42619c]
push 0x7f
pop ecx
mov dword [ebp - 0x21c], eax
xor eax, eax
lea edi, [ebp - 0x218]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x21c]
push eax
push edx
push 0x148
push esi
push dword [ebp + 0xc]
call ebx
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x21c]
push eax
call sub.MSVCRT.dll__wtoi
push eax
push str.deactivate_sec
mov dword [0x415ea0], eax
call fcn.00403514
add esp, 0xc
jmp 0x406523
mov eax, 0x139b
cmp ecx, eax
jg 0x405cb2
je 0x405c6b
add eax, 0xfffffffb
sub ecx, eax
je 0x405c22
dec ecx
je 0x405bd7
dec ecx
je 0x405b86
dec ecx
je 0x405b2f
dec ecx
jne 0x406523
xor esi, esi
push esi
push esi
push 0x147
push 0x139a
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x49f4d4], eax
je 0x406523
cmp eax, esi
mov dword [0x49f4d4], eax
jge 0x405b08
mov dword [0x49f4d4], esi
push 0x18
pop eax
cmp dword [0x49f4d4], eax
jle 0x405b18
mov dword [0x49f4d4], eax
mov ecx, edi
call fcn.00409c27
push dword [0x49f4d4]
push str.default_size
jmp 0x4059b9
push 0
push 0
push 0x147
push 0x1399
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x415e8c], eax
je 0x406523
test eax, eax
mov dword [0x415e8c], eax
jge 0x405b69
xor eax, eax
mov dword [0x415e8c], eax
cmp eax, 2
jle 0x405b76
push 2
pop eax
mov dword [0x415e8c], eax
push eax
mov dword [0x42b270], eax
push str.m_performance
jmp 0x4059b9
push 0
push 0
push 0x147
push 0x1398
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x415ea4], eax
je 0x406523
push eax
mov ecx, 0x427228
mov dword [0x415ea4], eax
call fcn.00402cf0
mov ecx, edi
call fcn.00409c27
push dword [0x415ea4]
push str.m_random_size
jmp 0x4059b9
push 0
push 0
push 0x147
push 0x1397
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x415eb4], eax
je 0x406523
push eax
push str.m_rotate
mov dword [0x415eb4], eax
call fcn.00403514
mov eax, dword [0x415eb4]
pop ecx
pop ecx
mov dword [0x49f47c], eax
jmp 0x406523
push 0
push 0
push 0x147
push eax
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x49f4d8], eax
je 0x406523
push eax
mov dword [0x49f4d8], eax
mov dword [0x49f490], eax
push str.m_fall
call fcn.00403514
pop ecx
pop ecx
mov ecx, edi
call fcn.00409c27
jmp 0x406523
push 0
push 0
push 0x147
push eax
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x415ea8], eax
je 0x406523
mov ecx, edi
mov dword [0x415ea8], eax
mov dword [0x427240], eax
call fcn.00409c27
push dword [0x415ea8]
push str.m_random_brightness
jmp 0x4059b9
sub ecx, 0x1e61
je 0x405d5f
dec ecx
je 0x405d14
dec ecx
je 0x405cdc
sub ecx, 0x61a5
jne 0x406523
mov ecx, edi
call fcn.00406651
jmp 0x406523
xor esi, esi
cmp dword [0x425968], esi
jne 0x405cea
push 0x14
jmp 0x405cec
push 0x15
call fcn.004031bf
pop ecx
push dword [0x40f1e8]
mov ebx, 0x49f524
push str.__seitepaypalProgram
push eax
push str._s_s_s
push ebx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
jmp 0x405d49
xor esi, esi
cmp dword [0x425968], esi
jne 0x405d27
push str._seiteLisense
push 0x14
jmp 0x405d2e
push str._seiteLizenz
push 0x15
call fcn.004031bf
pop ecx
push eax
push str._s_s
mov ebx, 0x49f524
push ebx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 5
push esi
push esi
push ebx
push str.open
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x406523
push dword [ebp + 0xc]
mov ecx, edi
call fcn.00409789
jmp 0x406523
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
mov esi, dword [ebp + 8]
mov ecx, esi
call fcn.0040a6fa
push 6
pop ecx
push dword [ebp + 0xc]
xor eax, eax
lea edi, [ebp - 0x18]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x1c], 0x1c
call dword [sym.imp.USER32.dll_GetMenu]
mov ebx, eax
test ebx, ebx
je 0x405de2
push 0x9f
push 0
mov dword [ebp - 0x18], 3
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadBitmapW]
push eax
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
push 0x1e
mov edi, eax
call dword [sym.imp.USER32.dll_GetSysColorBrush]
lea eax, [ebp - 0x1c]
push eax
push ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x10], 0x42
call fcn.00405678
pop ecx
pop ecx
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
push 0xc
call ebx
push eax
push 0xb
call ebx
mov edi, dword [sym.imp.USER32.dll_LoadImageW]
push eax
push 1
push 0x6b
push dword [0x4223b8]
call edi
push 0
push 0x32
mov dword [ebp + 8], eax
call ebx
push eax
push 0x31
call ebx
push eax
push 1
push 0x6b
push dword [0x4223b8]
call edi
mov edi, dword [ebp + 0xc]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 0
push 0x80
push edi
call ebx
push dword [ebp + 8]
push 1
push 0x80
push edi
call ebx
mov dword [esi + 0x830], edi
push edi
mov ecx, esi
mov dword [0x49f4f8], edi
call fcn.0040974a
push dword [0x415e98]
push str.img_id
call fcn.0040352c
push dword [0x415e94]
mov dword [0x415e98], eax
push str.trans
call fcn.0040352c
push 0x64
pop ecx
push dword [0x415e8c]
sub ecx, eax
push str.m_performance
mov dword [0x415e94], eax
mov dword [0x42b274], ecx
call fcn.0040352c
add esp, 0x18
test eax, eax
mov dword [0x415e8c], eax
jge 0x405eae
xor eax, eax
mov dword [0x415e8c], eax
push 2
pop ecx
cmp eax, ecx
jle 0x405ebb
mov dword [0x415e8c], ecx
push dword [0x49f4d4]
push str.default_size
call fcn.0040352c
test eax, eax
pop ecx
pop ecx
mov dword [0x49f4d4], eax
jge 0x405edd
xor eax, eax
mov dword [0x49f4d4], eax
push 0x18
pop ecx
cmp eax, ecx
jle 0x405eea
mov dword [0x49f4d4], ecx
push dword [esi + 0x14]
push str.flakes
call fcn.0040352c
mov dword [esi + 0x14], eax
push dword [0x415e90]
push str.activ
call fcn.0040352c
push dword [0x426194]
mov dword [0x415e90], eax
push str.only_on_wallpaper
call fcn.0040352c
push dword [0x415e9c]
mov dword [0x426194], eax
push str.speed
call fcn.0040352c
push dword [0x49f4e0]
mov dword [0x415e9c], eax
push str.deactivate
call fcn.0040352c
push dword [0x415ea0]
mov dword [0x49f4e0], eax
push str.deactivate_sec
call fcn.0040352c
push dword [0x49f4d8]
mov dword [0x415ea0], eax
push str.m_fall
call fcn.0040352c
push dword [0x415eb4]
mov dword [0x49f4d8], eax
push str.m_rotate
call fcn.0040352c
add esp, 0x40
push dword [0x415ea4]
mov dword [0x415eb4], eax
push str.m_random_size
call fcn.0040352c
push dword [0x415ea8]
mov dword [0x415ea4], eax
push str.m_random_brightness
call fcn.0040352c
mov ecx, dword [0x415eb4]
mov dword [0x49f47c], ecx
mov ecx, dword [0x415ea4]
add esp, 0x10
mov dword [0x42723c], ecx
push eax
mov ecx, 0x427228
mov dword [0x415ea8], eax
call fcn.00402d23
mov eax, dword [0x49f4d8]
push dword [ebp + 0xc]
mov dword [0x49f490], eax
mov eax, dword [0x426194]
mov dword [0x49f480], eax
mov eax, dword [0x415e8c]
mov dword [0x42b270], eax
mov eax, dword [0x415e90]
mov ecx, esi
mov dword [0x427234], eax
call fcn.004073fb
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov eax, dword [0x42619c]
push 0x3f
pop ecx
mov dword [ebp - 0x31c], eax
xor eax, eax
lea edi, [ebp - 0x318]
push 0x80
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x31c]
push eax
push 0x6d
push dword [0x4223b8]
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0x31c]
push 0
push eax
call fcn.0040b642
push dword [0x49f4fc]
mov dword [0x426190], eax
push str.start_tray
call fcn.0040352c
add esp, 0x10
mov dword [0x49f4fc], eax
mov eax, dword [0x426190]
push eax
push eax
mov edi, 0xf1
push edi
push 0x3f8
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebx
mov eax, dword [0x415e90]
push eax
push eax
push edi
push 0x3fb
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebx
mov eax, dword [0x426194]
push eax
push eax
push edi
push 0x403
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebx
push 0x45
pop ecx
xor eax, eax
lea edi, [ebp - 0x130]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x130]
push eax
mov dword [ebp - 0x130], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x232a
push dword [ebp + 0xc]
call edi
push 0x3eb
push dword [ebp + 0xc]
mov dword [esi + 4], eax
call edi
push 0x3ec
push dword [ebp + 0xc]
mov dword [esi + 8], eax
call edi
push 5
push 0
push 0x407
push dword [esi + 4]
mov dword [esi + 0xc], eax
call ebx
push 0x7d0
push 0
mov edi, 0x408
push edi
push dword [esi + 4]
call ebx
push 0x32
push 0
push 0x407
push dword [esi + 8]
call ebx
push 0x64
push 0
push edi
push dword [esi + 8]
call ebx
push 2
push 0
push 0x407
push dword [esi + 0xc]
call ebx
push 0x28
push 0
push edi
push dword [esi + 0xc]
call ebx
cmp dword [0x415e9c], 0x28
jle 0x40617b
mov dword [0x415e9c], 0x28
push 1
pop eax
cmp dword [0x415e9c], eax
jge 0x40618b
mov dword [0x415e9c], eax
mov eax, 0x7d0
cmp dword [esi + 0x14], eax
jle 0x406198
mov dword [esi + 0x14], eax
push 5
pop eax
cmp dword [esi + 0x14], eax
jge 0x4061a3
mov dword [esi + 0x14], eax
push 0x64
pop eax
cmp dword [0x415e94], eax
jle 0x4061b3
mov dword [0x415e94], eax
push 0xa
pop eax
cmp dword [0x415e94], eax
jge 0x4061c3
mov dword [0x415e94], eax
push dword [esi + 0x14]
mov edi, 0x405
push 0x18
push edi
push dword [esi + 4]
call ebx
mov eax, dword [esi + 0x14]
mov dword [0x49f470], eax
mov eax, dword [0x415e9c]
mov dword [0x42b260], eax
mov eax, dword [0x415e94]
push eax
push eax
push edi
push dword [esi + 8]
call ebx
push dword [0x415e9c]
push dword [0x415e94]
push edi
push dword [esi + 0xc]
call ebx
push dword [esi + 0x14]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
push 0x40f048
mov ebx, 0x49f524
push ebx
call edi
add esp, 0xc
push ebx
push 0x412
push dword [esi + 0x830]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0x64
pop eax
sub eax, dword [0x415e94]
push eax
push str._d___
push ebx
call edi
add esp, 0xc
push ebx
push 0x413
push dword [esi + 0x830]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
push dword [0x415e9c]
push 0x40f048
push ebx
call edi
add esp, 0xc
push ebx
push 0x417
push dword [esi + 0x830]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0
push 0x64
push 0x3f6
push dword [esi + 0x830]
call dword [sym.imp.USER32.dll_SetTimer]
push 0
mov ecx, 0x427228
call fcn.004021db
mov ecx, esi
call fcn.00409c27
jmp 0x406319
cmp word [ebp + 0x14], 0
je 0x4062d2
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x830]
mov dword [0x49f4cc], eax
jmp 0x406523
and dword [0x49f4cc], 0
jmp 0x406523
cmp word [ebp + 0x14], 0xf020
jne 0x406523
cmp dword [0x415eb0], 0
je 0x406319
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov ecx, dword [ebp + 8]
cmp eax, dword [ecx + 0x830]
jne 0x406319
mov ecx, 0x4227c0
call fcn.0040b178
push 0
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
pop eax
jmp 0x406525
mov eax, 0x113
cmp ecx, eax
je 0x406518
jbe 0x406523
cmp ecx, 0x115
jbe 0x406358
cmp ecx, 0x233
jne 0x406523
push dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
call fcn.0040a465
jmp 0x406523
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x232a
push dword [ebp + 0xc]
call esi
push 0x3eb
push dword [ebp + 0xc]
mov edi, eax
call esi
push 0x3ec
push dword [ebp + 0xc]
mov ebx, eax
call esi
mov ecx, dword [ebp + 0x18]
cmp ecx, edi
jne 0x40642f
mov ebx, dword [ebp + 8]
push 0
push 0
push 0x400
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, eax
cmp dword [ebx + 0x14], edx
mov dword [ebp + 0xc], edx
je 0x406319
mov eax, dword [0x42619c]
push 0x6e
mov dword [ebp - 0x1d8], eax
pop ecx
xor eax, eax
lea edi, [ebp - 0x1d4]
push 5
rep stosd dword es:[edi], eax
pop eax
cmp edx, eax
mov dword [ebx + 0x14], edx
jge 0x4063d3
mov dword [ebx + 0x14], eax
mov eax, 0x7d0
cmp dword [ebx + 0x14], eax
jle 0x4063e0
mov dword [ebx + 0x14], eax
push dword [ebx + 0x14]
push str.flakes
call fcn.00403514
pop ecx
pop ecx
push dword [ebp + 0xc]
lea eax, [ebp - 0x1d8]
push 0x40f048
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x1d8]
push eax
push 0x412
push dword [ebx + 0x830]
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov eax, dword [ebx + 0x14]
mov dword [0x49f470], eax
jmp 0x406319
cmp ecx, ebx
jne 0x4064a6
push 0
push 0
push 0x400
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x64
pop ecx
sub ecx, eax
push ecx
mov dword [0x415e94], eax
lea eax, [ebp - 0x41c]
push str._d___
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
mov eax, dword [ebp + 8]
push 0x413
push dword [eax + 0x830]
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
push dword [0x415e94]
push str.trans
call fcn.00403514
pop ecx
pop ecx
push 0x64
pop eax
sub eax, dword [0x415e94]
mov dword [0x42b274], eax
jmp 0x406319
cmp ecx, eax
jne 0x406319
push 0
push 0
push 0x400
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
mov dword [0x415e9c], eax
lea eax, [ebp - 0x41c]
push 0x40f048
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
mov eax, dword [ebp + 8]
push 0x417
push dword [eax + 0x830]
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
push dword [0x415e9c]
push str.speed
call fcn.00403514
mov eax, dword [0x415e9c]
pop ecx
pop ecx
mov dword [0x42b260], eax
jmp 0x406319
push dword [ebp + 0x14]
mov ecx, dword [ebp + 8]
call fcn.00409b84
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0x14