Function at 0x4041b0
Capabilities:
Create process on windows
Open clipboard
Write clipboard data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5de67f
push eax
mov dword fs:[0], esp
sub esp, 0x3b4
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x3d4]
mov esi, ecx
cmp edi, 0x4020023
ja 0x40467c
je 0x404670
lea eax, [edi - 0x4020001]
cmp eax, 0x21
ja case.default.0x404a8d
jmp dword [eax*4 + 0x404e14]
push 1
push 0
push 0
push 0
push str.packcom
mov ecx, esi
call fcn.00403e70
jmp 0x404df1
push 1
push 0
push 0
push 0x649a88
push str.DBManager
mov ecx, esi
call fcn.00403e70
jmp 0x404df1
push 1
push 0
push 0
push 0x649a70
push str.DBManager
mov ecx, esi
call fcn.00403e70
jmp 0x404df1
push 1
push 0
push 0
push 0
push str.dbcnv
mov ecx, esi
call fcn.00403e70
jmp 0x404df1
push 1
push 0
push 0
push 0
push str.elib
mov ecx, esi
call fcn.00403e70
jmp 0x404df1
push 1
push 0
push 0
push 0
push str.egrid
mov ecx, esi
call fcn.00403e70
jmp 0x404df1
mov ecx, esi
call fcn.004052d0
jmp 0x404df1
mov eax, dword [esi + 0x94c]
push 0
push 0x71
push 0x111
mov ecx, dword [eax + 0xdc]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x404df1
push 0
push 0
push 0
push 2
jmp 0x404dea
mov edx, dword [esi + 0x94c]
push 0
push 0
push 0x87d2
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x404df1
mov ecx, dword [esi + 0x94c]
test ecx, ecx
jne 0x404305
xor eax, eax
jmp 0x404df6
push 0x81
call fcn.0048f6f0
jmp 0x404df1
mov ecx, dword [esi + 0x94c]
test ecx, ecx
jne 0x404325
xor eax, eax
jmp 0x404df6
push 0x82
call fcn.0048f6f0
jmp 0x404df1
mov ecx, dword [esi + 0x94c]
test ecx, ecx
jne 0x404345
xor eax, eax
jmp 0x404df6
push 0x84
call fcn.0048f710
jmp 0x404df1
mov eax, dword [esi + 0x94c]
test eax, eax
jne 0x404365
xor eax, eax
jmp 0x404df6
mov ecx, esi
call fcn.004699d0
test eax, eax
je 0x404df1
cmp dword [eax + 0x3c], 5
jne 0x404df1
mov ecx, dword [esi + 0x94c]
push 0x6e
call fcn.005d401c
jmp 0x404df1
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 2
mov ecx, esi
call fcn.00403b60
jmp 0x404df1
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 3
mov ecx, esi
call fcn.00403b60
jmp 0x404df1
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 4
mov ecx, esi
call fcn.00403b60
jmp 0x404df1
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 6
mov ecx, esi
call fcn.00403b60
jmp 0x404df1
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 7
mov ecx, esi
call fcn.00403b60
jmp 0x404df1
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 8
mov ecx, esi
call fcn.00403b60
jmp 0x404df1
mov ebx, dword [esi + 0x414]
mov edx, dword [esi + 0x94c]
xor ecx, ecx
push 0
test ebx, ebx
sete cl
mov dword [esi + 0x414], ecx
mov eax, dword [edx + 0x700]
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x404df1
push 0
push 0
push 0
push 0x13
jmp 0x404dea
push 0
push 0
push 0
push 0x18
jmp 0x404dea
mov eax, dword [esi + 0x94c]
push 0
add eax, 0x630
push 9
push 0x110a
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ebp, eax
test ebp, ebp
je 0x404df1
mov edx, dword [0x6707bc]
mov dword [esp + 0x10], edx
cmp edi, 0x4020016
mov dword [esp + 0x3cc], 0xd
jne 0x404503
push 0
push 1
push 0x649a54
push 0x649a3c
lea eax, [esp + 0x20]
push 0x649a14
push eax
push 0
mov ecx, esi
call fcn.0043f470
test eax, eax
je 0x4044ea
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x404503
lea ecx, [esp + 0x10]
mov dword [esp + 0x3cc], 0xffffffff
call fcn.005bc421
jmp 0x404df1
push 0x6499f8
lea ecx, [esp + 0x18]
call fcn.004ff1f0
mov bl, 0xe
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3cc], bl
call fcn.004918b0
lea edx, [esp + 0x1c]
mov ecx, esi
push edx
push ebp
mov byte [esp + 0x3d4], 0xf
call fcn.004744f0
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x4045df
cmp edi, 0x4020016
push 0
jne 0x404560
lea eax, [esp + 0x14]
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x28]
call fcn.00491fc0
jmp 0x4045df
call dword [sym.imp.USER32.dll_OpenClipboard]
cmp eax, 1
jne 0x4045df
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
mov eax, ecx
neg eax
sbb eax, eax
and eax, esi
mov dl, byte [eax + ecx - 1]
test dl, dl
je 0x40458e
push 0
lea ecx, [esp + 0x20]
call fcn.00491bb0
call dword [sym.imp.USER32.dll_EmptyClipboard]
mov ecx, dword [esp + 0x2c]
push ecx
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
test esi, esi
je 0x4045d9
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x24]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
and eax, edi
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push eax
call fcn.00492720
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
push 1
call dword [sym.imp.USER32.dll_SetClipboardData]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3cc], bl
mov dword [esp + 0x1c], 0x5f7940
call fcn.00491ab0
lea ecx, [esp + 0x14]
mov byte [esp + 0x3cc], 0xd
call fcn.004ff2a0
lea ecx, [esp + 0x10]
mov dword [esp + 0x3cc], 0xffffffff
call fcn.005bc421
jmp 0x404df1
mov edx, dword [esi + 0x9cc]
mov eax, dword [esi + 0x92c]
xor edx, eax
jne 0x404638
push 0x6498cc
jmp 0x40463d
push 0x6497e4
lea ecx, [esi + 0x9a8]
call fcn.005bc5aa
mov eax, dword [esi + 0x94c]
mov dword [esi + 0x9ac], 0x40
push 0
push 0x73
mov ecx, dword [eax + 0x1c]
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x404df1
mov ecx, esi
call fcn.00468bf0
jmp 0x404df1
cmp edi, 0x4020036
ja 0x404a6c
je 0x404a5e
lea eax, [edi - 0x4020024]
cmp eax, 0x11
ja case.default.0x404a8d
jmp dword [eax*4 + 0x404e9c]
push 1
push 0
push 0
push 0x6497d8
push str.DBManager
mov ecx, esi
call fcn.00403e70
jmp 0x404df1
push 1
push 0
push 0
push 0
push str.dblang
mov ecx, esi
call fcn.00403e70
jmp 0x404df1
push 1
push 0
push 0
push 0
push 0x6497cc
mov ecx, esi
call fcn.00403e70
jmp 0x404df1
lea edx, [esi + 0x930]
push str.tutorial
lea eax, [esp + 0x48]
push edx
push eax
call fcn.005bc6b6
push str._tutorial.exe
lea ecx, [esp + 0x14]
push eax
push ecx
mov dword [esp + 0x3d8], 0
call fcn.005bc6b6
lea ecx, [esp + 0x44]
mov byte [esp + 0x3cc], 2
call fcn.005bc421
mov edx, dword [esp + 0x10]
push edx
call fcn.00502530
add esp, 4
test eax, eax
jne 0x404796
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x3c]
push eax
push 0x64975c
push ecx
call fcn.00503c60
mov eax, dword [eax]
mov byte [esp + 0x3d8], 3
push eax
call fcn.004ff630
add esp, 0x10
lea ecx, [esp + 0x3c]
mov byte [esp + 0x3cc], 2
call fcn.005bc421
lea ecx, [esp + 0x10]
mov dword [esp + 0x3cc], 0xffffffff
call fcn.005bc421
jmp 0x404df1
push 1
lea edx, [esp + 0x14]
push 0
push edx
mov ecx, esi
call fcn.004040b0
lea ecx, [esp + 0x10]
mov dword [esp + 0x3cc], 0xffffffff
call fcn.005bc421
jmp 0x404df1
add esi, 0x930
push str.help
lea eax, [esp + 0x3c]
push esi
push eax
call fcn.005bc6b6
push str.esdn.chm
lea ecx, [esp + 0x14]
push eax
push ecx
mov dword [esp + 0x3d8], 4
call fcn.005bc6b6
mov bl, 6
lea ecx, [esp + 0x38]
mov byte [esp + 0x3cc], bl
call fcn.005bc421
mov edx, dword [esp + 0x10]
push edx
call fcn.00502530
add esp, 4
test eax, eax
jne 0x404863
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x30]
push eax
push 0x6496e8
push ecx
call fcn.00503c60
mov eax, dword [eax]
mov byte [esp + 0x3d8], 7
push eax
call fcn.004ff630
add esp, 0x10
lea ecx, [esp + 0x30]
mov byte [esp + 0x3cc], bl
call fcn.005bc421
lea ecx, [esp + 0x10]
mov dword [esp + 0x3cc], 0xffffffff
call fcn.005bc421
jmp 0x404df1
mov edx, dword [esp + 0x10]
push 5
push edx
call fcn.00488760
add esp, 8
lea ecx, [esp + 0x10]
mov dword [esp + 0x3cc], 0xffffffff
call fcn.005bc421
jmp 0x404df1
mov eax, dword [0x6707bc]
mov dword [esp + 0x10], eax
mov dword [esp + 0x3cc], 0xa
mov dword [esp + 0x14], eax
mov eax, dword [0x6761d4]
mov bl, 0xb
cmp eax, 2
mov byte [esp + 0x3cc], bl
jl 0x4048ca
mov eax, dword [0x6761d0]
lea ecx, [esp + 0x10]
add eax, 4
push eax
call fcn.005bc55a
jmp 0x404902
lea ecx, [esi + 0x930]
push str.wizard
lea edx, [esp + 0x44]
push ecx
push edx
call fcn.005bc6b6
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x3d0], 0xc
call fcn.005bc55a
lea ecx, [esp + 0x40]
mov byte [esp + 0x3cc], bl
call fcn.005bc421
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x10]
push eax
push 0
push 0x6496dc
push 0x6496c4
push 0x6496a8
push ecx
push 0
mov ecx, esi
call fcn.0043f470
test eax, eax
je 0x40496d
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x40496d
cmp dword [0x6761d4], 2
jge 0x40494c
push 0xffffffffffffffff
push 2
mov ecx, 0x6761cc
call fcn.005baefb
mov ecx, dword [0x6761d0]
lea eax, [esp + 0x10]
push eax
add ecx, 4
call fcn.005bc55a
mov edx, dword [esp + 0x10]
push 1
push edx
mov ecx, esi
call fcn.0047ebd0
lea ecx, [esp + 0x14]
mov byte [esp + 0x3cc], 0xa
call fcn.005bc421
lea ecx, [esp + 0x10]
mov dword [esp + 0x3cc], 0xffffffff
call fcn.005bc421
jmp 0x404df1
mov ecx, dword [0x6756c8]
xor eax, eax
test ecx, ecx
mov ecx, dword [0x67602c]
sete al
mov dword [0x6756c8], eax
call fcn.0048cb40
jmp 0x404df1
push 0x674ee0
mov ecx, esi
call fcn.0043ee70
jmp 0x404df1
mov ecx, esi
call fcn.0043ef20
jmp 0x404df1
push 0
mov ecx, esi
call fcn.00405120
jmp 0x404df1
mov ecx, esi
call fcn.004050a0
jmp 0x404df1
push 0
lea ecx, [esp + 0x4c]
call fcn.00453f60
lea ecx, [esp + 0x48]
mov dword [esp + 0x3cc], 0x10
call fcn.005bcf16
lea ecx, [esp + 0xe0]
mov dword [esp + 0x3cc], 0x12
mov dword [esp + 0xe0], 0x5f7940
call fcn.00491ab0
lea ecx, [esp + 0xa4]
mov byte [esp + 0x3cc], 0x11
call fcn.005b9cc5
lea ecx, [esp + 0x48]
mov dword [esp + 0x3cc], 0xffffffff
call fcn.005bcb4c
jmp 0x404df1
push 0xffffffffffffffff
mov ecx, esi
call fcn.004d85a0
jmp 0x404df1
cmp edi, 0x402003d
ja 0x404d82
je 0x404b8e
lea eax, [edi - 0x4020037]
cmp eax, 4
ja case.default.0x404a8d
jmp dword [eax*4 + 0x404ee4]
add esi, 0x930
push str.VReportindex.html
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.005bc6b6
mov eax, dword [0x67602c]
mov edx, dword [esp + 0x14]
push 1
push 0
mov ecx, dword [eax + 0x1c]
push 0
push edx
mov ebx, 8
push str.open
push ecx
mov dword [esp + 0x3e4], ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jg 0x404b11
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x34]
push edx
push 0x64965c
push eax
call fcn.00503c60
mov eax, dword [eax]
mov byte [esp + 0x3d8], 9
push eax
call fcn.004ff630
add esp, 0x10
lea ecx, [esp + 0x34]
mov byte [esp + 0x3cc], bl
call fcn.005bc421
lea ecx, [esp + 0x14]
mov dword [esp + 0x3cc], 0xffffffff
call fcn.005bc421
jmp 0x404df1
mov eax, dword [esi + 0x94c]
test eax, eax
jne 0x404b3b
xor eax, eax
jmp 0x404df6
mov ecx, esi
call fcn.00484ac0
test eax, eax
jne 0x404df1
push eax
push eax
push 9
push eax
mov ecx, esi
call fcn.00403190
jmp 0x404df1
push 1
push 0
push 0
push 0
push str.EvaDesigner
mov ecx, esi
call fcn.00403e70
jmp 0x404df1
push 1
mov ecx, esi
call fcn.004d85a0
jmp 0x404df1
mov ecx, esi
call fcn.00484030
jmp 0x404df1
mov eax, dword [esi + 0x94c]
push 0
add eax, 0x630
push 9
push 0x110a
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x404df1
mov ecx, dword [esi + 0x94c]
push eax
add ecx, 0x630
call fcn.005b9fc7
mov ecx, eax
shr ecx, 0x10
cmp ax, 0xffff
jne 0x404df1
test cx, cx
jl 0x404df1
mov edx, dword [esi + 0x48c]
movsx eax, cx
cmp eax, edx
jge 0x404df1
mov edx, dword [esi + 0x488]
mov edi, dword [edx + eax*4]
push edi
call fcn.004ffac0
add esp, 4
test eax, eax
jne 0x404df1
mov eax, dword [esi + 0x94c]
lea ecx, [esp + 0xf8]
push eax
call fcn.00454d10
lea ecx, [esp + 0xf8]
mov dword [esp + 0x3cc], 0x13
mov dword [esp + 0x158], edi
call fcn.005bcf16
lea ecx, [esp + 0x3c0]
mov dword [esp + 0x3cc], 0x22
call fcn.005bc421
lea ecx, [esp + 0x3bc]
mov byte [esp + 0x3cc], 0x21
call fcn.005bc421
lea ecx, [esp + 0x3b8]
mov byte [esp + 0x3cc], 0x20
call fcn.005bc421
lea ecx, [esp + 0x3b4]
mov byte [esp + 0x3cc], 0x1f
call fcn.005bc421
lea ecx, [esp + 0x378]
mov byte [esp + 0x3cc], 0x1e
call fcn.005d1625
lea ecx, [esp + 0x33c]
mov byte [esp + 0x3cc], 0x1d
call fcn.005d1625
lea ecx, [esp + 0x300]
mov byte [esp + 0x3cc], 0x1c
call fcn.005d1625
lea ecx, [esp + 0x2c4]
mov byte [esp + 0x3cc], 0x1b
call fcn.005d1625
lea ecx, [esp + 0x288]
mov byte [esp + 0x3cc], 0x1a
call fcn.005d1625
lea ecx, [esp + 0x24c]
mov byte [esp + 0x3cc], 0x19
call fcn.005d1625
lea ecx, [esp + 0x210]
mov byte [esp + 0x3cc], 0x18
call fcn.005d1625
lea ecx, [esp + 0x1d4]
mov byte [esp + 0x3cc], 0x17
call fcn.005d1625
lea ecx, [esp + 0x198]
mov byte [esp + 0x3cc], 0x16
call fcn.005d1625
lea ecx, [esp + 0x15c]
mov byte [esp + 0x3cc], 0x15
call fcn.005d133f
lea ecx, [esp + 0x154]
mov byte [esp + 0x3cc], 0x14
call fcn.005bc421
lea ecx, [esp + 0xf8]
mov dword [esp + 0x3cc], 0xffffffff
call fcn.005bcb4c
jmp 0x404df1
cmp edi, 0x4020041
ja 0x404dad
je 0x404da3
mov eax, edi
sub eax, 0x402003e
je 0x404dc1
sub eax, 2
jne case.default.0x404a8d
mov ecx, esi
call fcn.00488280
jmp 0x404df1
push 0
push 0
push 0
push 0x1e
jmp 0x404dea
cmp edi, 0x4020042
je 0x404de2
cmp edi, 0x84020006
je 0x404dc1
xor eax, eax
jmp 0x404df6
xor ecx, ecx
cmp edi, 0x402003e
sete cl
push ecx
mov ecx, dword [esi + 0x94c]
push 0
add ecx, 0x5f4
call fcn.00401b40
jmp 0x404df1
push 0
push 0
push 0
push 0x1f
mov ecx, esi
call fcn.0043caa0
mov eax, 1
mov ecx, dword [esp + 0x3c4]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x3c0
ret 0x10