Function at 0x40360d
Capabilities:
Hide graphical window

Disassembly:
push 0xac
mov eax, 0x42ef59
call fcn.00410531
mov edi, ecx
and dword [ebp - 0xa4], 0
lea ebx, [edi + 0x198]
mov esi, 0x3e8
lea edx, [edi + 0x1e0]
lea eax, [edi + 0x1c8]
cmp dword [eax + 0x14], 8
jb 0x403646
mov ecx, dword [eax]
jmp 0x403648
mov ecx, eax
cmp dword [ebx + 0x14], 8
jb 0x403652
mov eax, dword [ebx]
jmp 0x403654
mov eax, ebx
push edi
push 0x403491
push ecx
push eax
mov ecx, edx
call fcn.00407fc6
mov cl, byte [edi + 0x1fe]
mov dword [ebp - 0xa8], eax
test cl, cl
jne 0x4036ec
test eax, eax
je 0x40376f
cmp eax, 0x12
je 0x4036e5
add eax, 0xffffffed
cmp eax, 6
ja 0x4036a0
push str.https:__update.svbrwsr.com_freeu_setup.exe
call fcn.00401124
pop ecx
push eax
push str.https:__update.svbrwsr.com_freeu_setup.exe
mov ecx, ebx
call fcn.004019b4
cmp dword [ebp - 0xa4], 0x6ddd00
ja 0x4036ec
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
add dword [ebp - 0xa4], esi
cmp dword [ebp - 0xa8], 0x11
je 0x40362b
lea eax, [edi + 0x1c8]
lea edx, [edi + 0x1e0]
cmp esi, 0xfa00
jae 0x40363c
add esi, esi
jmp 0x403630
mov byte [edi + 0x1ff], 1
xor ebx, ebx
cmp byte [edi + 0x1fe], 0
je 0x403958
cmp byte [edi + 0x1f4], 0
je 0x403958
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 5
push dword [edi + 0x144]
call esi
mov ebx, 0x43c4b0
push ebx
call fcn.00401124
pop ecx
push eax
push ebx
lea ecx, [edi + 0x174]
call fcn.004019b4
push 0xfffffffffffffff0
push dword [edi + 0x108]
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 1
push eax
push 0xfffffffffffffff0
push dword [edi + 0x108]
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0
push 0
lea ecx, [edi + 0x104]
call fcn.004075b8
push 0
push dword [edi + 0x108]
call esi
jmp 0x40399c
push dword [edi + 4]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4037df
mov eax, dword [edi + 0x16c]
mov ecx, edi
mov dword [edi + 0x170], eax
call fcn.00403035
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xfffffffffffffff0
push dword [edi + 0x108]
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 8
push eax
push 0xfffffffffffffff0
push dword [edi + 0x108]
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x1e
push 1
lea ecx, [edi + 0x104]
call fcn.004075b8
mov esi, 0x43c544
push esi
call fcn.00401124
pop ecx
push eax
push esi
lea ecx, [edi + 0x174]
call fcn.004019b4
call fcn.004014dc
lea eax, [ebp - 0xa4]
xor ebx, ebx
push eax
mov ecx, edi
mov dword [ebp - 0xa4], ebx
call fcn.004039c1
mov esi, eax
test esi, esi
je 0x403807
mov byte [edi + 0x1ff], 1
push str.SoftwareMail.RuFreeuInstaller
lea ecx, [ebp - 0x58]
call fcn.0040192c
push ecx
lea eax, [ebp - 0x58]
push eax
push ecx
lea ecx, [ebp - 0xb8]
call fcn.0040c68e
push ebx
push 1
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], ebx
call fcn.0040195d
push 0x43b248
lea ecx, [ebp - 0x88]
call fcn.0040192c
push 0x43c2d4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 1
call fcn.0040192c
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0xb8]
call fcn.0040c719
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040195d
push ebx
push 1
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 5
call fcn.0040195d
cmp dword [ebp - 0x30], 0
jne 0x4038ae
push str.freeu
call fcn.00401124
pop ecx
push eax
push str.freeu
lea ecx, [ebp - 0x40]
call fcn.004019b4
push str.attr
lea ecx, [ebp - 0xa0]
call fcn.0040192c
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 6
mov ecx, dword [edi + 0x168]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040601e
push ebx
push 1
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 8
call fcn.0040195d
cmp dword [ebp - 0x18], 0
jne 0x403909
push str.freeu
call fcn.00401124
pop ecx
push eax
push str.freeu
lea ecx, [ebp - 0x28]
call fcn.004019b4
mov edx, dword [ebp - 0xa4]
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
call fcn.004015b7
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.0040195d
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.0040195d
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xb8], 0
je 0x4036ee
push dword [ebp - 0xb8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4036ee
push dword [edi + 4]
mov esi, dword [sym.imp.USER32.dll_IsWindow]
call esi
test eax, eax
je 0x40399c
mov eax, dword [edi + 0x164]
test eax, eax
je 0x403991
push dword [eax + 4]
call esi
test eax, eax
je 0x403991
mov eax, dword [edi + 0x164]
push ebx
push 2
push 0x111
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
push dword [edi + 4]
call dword [sym.imp.USER32.dll_EndDialog]
mov eax, dword [ebp - 0xa8]
call fcn.004104db
ret