Function at 0x402b09
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x340
mov ecx, dword [ebp + 0x10]
push ebx
push esi
cmp ecx, 0x110
push edi
je 0x403067
cmp ecx, 0x111
je 0x402cf8
cmp ecx, 0x112
je 0x402cc5
mov eax, 0x113
cmp ecx, eax
je 0x402c88
jbe 0x403060
cmp ecx, 0x115
ja 0x403060
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x232a
push dword [ebp + 0xc]
call esi
mov edi, 0x3eb
mov ebx, eax
push edi
push dword [ebp + 0xc]
call esi
push edi
mov dword [ebp + 0x14], eax
push dword [ebp + 0xc]
call esi
mov eax, dword [ebp + 0x18]
cmp eax, ebx
jne 0x402bf0
push 0
push 0
push 0x400
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, eax
cmp dword [0x416c7c], edi
je 0x4035d8
push edi
lea eax, [ebp - 0x340]
push 0x409778
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x340]
push eax
mov eax, dword [ebp + 8]
push 0x412
push dword [eax + 0x1018]
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
push edi
push edi
mov ecx, 0x416ba8
call fcn.004055ca
call fcn.0040563d
jmp 0x4035d8
cmp eax, dword [ebp + 0x14]
jne 0x4035d8
push 0
push 0
push 0x400
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x64
mov dword [ebp + 0xc], eax
fild dword [ebp + 0xc]
pop ecx
sub ecx, eax
lea eax, [ebp - 0x340]
fstp qword [0x416bc0]
push ecx
push str._d___
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x340]
push eax
mov eax, dword [ebp + 8]
push 0x413
push dword [eax + 0x1018]
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
fld qword [0x416bc0]
call sub.MSVCRT.dll__ftol
push eax
push str.transparency
call fcn.004020f3
mov eax, dword [0x416c80]
pop ecx
pop ecx
mov ecx, dword [0x416c7c]
dec dword [0x416c7c]
push eax
push ecx
mov ecx, 0x416ba8
call fcn.004055ca
jmp 0x4035d8
mov esi, 0x7d0
cmp dword [ebp + 0x14], esi
jne 0x403060
mov ebx, dword [ebp + 8]
push esi
push dword [ebx + 0x1018]
lea edi, [ebx + 0x1018]
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, ebx
call fcn.00404168
push 0
push 0x14
push esi
push dword [edi]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x403060
cmp word [ebp + 0x14], 0xf020
jne 0x403060
cmp dword [0x40980c], 0
je 0x4035d8
mov ecx, 0x4139f0
call fcn.0040467f
push 0
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4035d8
movzx ecx, word [ebp + 0x14]
mov eax, 0x3f9
cmp ecx, eax
jg 0x402eeb
je 0x402ede
add eax, 0xfffffffa
cmp ecx, eax
jg 0x402e01
je 0x402dcb
dec ecx
je 0x402dad
dec ecx
je 0x402d97
sub ecx, 3
je 0x402d7d
sub ecx, 0x79
je 0x402d6e
sub ecx, 0x374
jne 0x403060
push 0
push 0
push 0xf0
push 0x3f2
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
mov dword [0x416bd0], eax
push str.show_sec
jmp 0x402f4d
mov ecx, 0x416ba8
call fcn.00405020
jmp 0x403060
mov ecx, 0x4139f0
call fcn.0040467f
push 0
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x403060
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x403060
jmp 0x402cde
mov eax, dword [ebp + 8]
push 1
push dword [eax + 0x1018]
call dword [sym.imp.USER32.dll_EndDialog]
push 1
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x403060
push 0
push 0
push 0x147
push eax
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x416bb0], eax
je 0x403060
push eax
mov ecx, 0x416ba8
call fcn.0040510b
jmp 0x403060
sub ecx, 0x3f5
je 0x402eb2
dec ecx
je 0x402e75
dec ecx
je 0x402e47
dec ecx
jne 0x403060
push 0
push 0
push 0xf0
push 0x3f8
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [0x416b8c], eax
call fcn.00401f37
jmp 0x403060
push 0
push 0
push 0xf0
push 0x3f7
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
mov dword [0x40981c], eax
push str.show_at_mouse_3x
jmp 0x402f4d
push 0
push 0
push 0xf0
push 0x3f6
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, 0x416ba8
mov dword [0x416bb4], eax
call fcn.00405020
push dword [0x416bb4]
push str.topmost
jmp 0x402f4d
xor esi, esi
push 5
cmp dword [0x416364], esi
push esi
push esi
jne 0x402eda
push 0x17
call fcn.00401e00
pop ecx
push eax
push 0x4097d4
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x403060
push 0x18
jmp 0x402ec2
mov ecx, dword [ebp + 8]
call fcn.0040401b
jmp 0x403060
mov eax, 0xbca
cmp ecx, eax
jg 0x402fe5
je 0x402fbb
mov eax, 0x3fa
sub ecx, eax
je 0x402f94
sub ecx, 0x3e7
je 0x402f69
sub ecx, 5
je 0x402f59
sub ecx, 0x3e3
jne 0x403060
push 0
push 0
push 0xf0
push 0xbc9
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
mov dword [0x409810], eax
push str.show_at_program_start
call fcn.004020f3
pop ecx
pop ecx
jmp 0x403060
push dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
call fcn.00403e22
jmp 0x403060
push 0
push 0
push 0xf0
push 0x7e1
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
mov dword [0x409818], eax
push str.show_at_ctrl_alt_y
jmp 0x402f4d
push 0
push 0
push 0xf0
push eax
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
mov dword [0x409814], eax
push str.show_at_ctrl_alt_z
jmp 0x402f4d
push 0
push 0
push 0xf0
push eax
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
mov dword [0x416cbc], eax
push str.start_tray
jmp 0x402f4d
sub ecx, 0x1069
je 0x403058
sub ecx, 0xdf8
je 0x40304b
dec ecx
je 0x40300c
dec ecx
jne 0x403060
xor esi, esi
push str._seitepaypal
cmp dword [0x416364], esi
jne 0x403024
jmp 0x40301b
xor esi, esi
cmp dword [0x416364], esi
jne 0x40301f
push str._seiteLisense
push 0x14
jmp 0x403026
push str._seiteLizenz
push 0x15
call fcn.00401e00
pop ecx
mov ebx, 0x416ce0
push eax
push str._s_s
push ebx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 5
push esi
push esi
push ebx
jmp 0x402ec9
push dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
call fcn.00403c70
jmp 0x403060
mov ecx, dword [ebp + 8]
call fcn.004042bf
xor eax, eax
jmp 0x4035db
xor esi, esi
push esi
call dword [sym.imp.ole32.dll_OleInitialize]
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
push esi
push 0xc
call ebx
push eax
push 0xb
call ebx
mov edi, dword [sym.imp.USER32.dll_LoadImageW]
push eax
push 1
push 0x6b
push dword [0x4135e8]
call edi
push esi
push 0x32
mov dword [ebp + 0x14], eax
call ebx
push eax
push 0x31
call ebx
push eax
push 1
push 0x6b
push dword [0x4135e8]
call edi
mov edi, dword [ebp + 0xc]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push esi
push 0x80
push edi
call ebx
push dword [ebp + 0x14]
push 1
push 0x80
push edi
call ebx
mov ecx, dword [ebp + 8]
push edi
mov dword [ecx + 0x1018], edi
mov dword [0x416cb8], edi
call fcn.00403c31
mov ecx, dword [ebp + 8]
push edi
call fcn.00403630
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov eax, dword [0x416b94]
push 0x3f
mov dword [ebp - 0x140], eax
pop ecx
xor eax, eax
lea edi, [ebp - 0x13c]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x140]
push 0x80
push eax
push 0x6d
push dword [0x4135e8]
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0x140]
push esi
push eax
call fcn.004058b3
pop ecx
mov edi, 0x416b98
pop ecx
mov dword [0x416b8c], eax
push dword [0x4135e8]
mov ecx, edi
push 0x4098b8
push str.bitmap9.jpg
call fcn.0040149e
mov ecx, edi
call fcn.00401589
mov ecx, edi
mov dword [ebp - 8], eax
call fcn.004015b9
mov edi, eax
mov eax, dword [ebp - 8]
push esi
mov dword [ebp - 0x3c], eax
push esi
push esi
lea eax, [ebp - 0x40]
push esi
push eax
push esi
mov dword [ebp - 0x40], 0x28
mov dword [ebp - 0x38], edi
mov word [ebp - 0x34], 1
mov word [ebp - 0x32], 0x20
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
call dword [sym.imp.GDI32.dll_CreateDIBSection]
push esi
mov dword [ebp + 0x10], eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [ebp + 0x10]
mov dword [ebp + 0x14], eax
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
push esi
mov dword [ebp + 0x18], eax
push dword [0x416ba4]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
sub esp, 0x10
mov dword [ebp - 0xc], edi
lea esi, [ebp - 0x18]
mov edi, esp
mov dword [ebp - 0x10], eax
push dword [ebp + 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, 0x416b98
movsd dword es:[edi], dword [esi]
call fcn.004010b2
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 0x14]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
push dword [ebp + 0x10]
mov eax, dword [ebp + 8]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0x172
push 0x410
push dword [eax + 0x1018]
call esi
push eax
call ebx
push dword [0x416cbc]
push str.start_tray
call fcn.0040210b
push dword [0x40980c]
mov dword [0x416cbc], eax
push str.tray_if_minimize
call fcn.0040210b
push dword [0x416bb4]
mov dword [0x40980c], eax
push str.topmost
call fcn.0040210b
push dword [0x416bd0]
mov dword [0x416bb4], eax
push str.show_sec
call fcn.0040210b
push dword [0x416bb8]
mov dword [0x416bd0], eax
push str.fix_pos
call fcn.0040210b
push dword [0x409810]
mov dword [0x416bb8], 1
push str.show_at_program_start
call fcn.0040210b
push dword [0x409814]
mov dword [0x409810], eax
push str.show_at_ctrl_alt_z
call fcn.0040210b
push dword [0x409818]
mov dword [0x409814], eax
push str.show_at_ctrl_alt_y
call fcn.0040210b
add esp, 0x40
mov dword [0x409818], eax
push dword [0x40981c]
push str.show_at_mouse_3x
call fcn.0040210b
pop ecx
mov dword [0x40981c], eax
mov eax, dword [0x416bb4]
pop ecx
push eax
mov edi, 0xf1
push eax
push edi
push 0x3f6
push dword [ebp + 0xc]
call esi
push eax
call ebx
mov eax, dword [0x416bd0]
push eax
push eax
push edi
push 0x3f2
push dword [ebp + 0xc]
call esi
push eax
call ebx
mov eax, dword [0x40981c]
push eax
push eax
push edi
push 0x3f7
push dword [ebp + 0xc]
call esi
push eax
call ebx
mov eax, dword [0x416b8c]
push eax
push eax
push edi
push 0x3f8
push dword [ebp + 0xc]
call esi
push eax
call ebx
mov eax, dword [0x416cbc]
push eax
push eax
push edi
push 0xbca
push dword [ebp + 0xc]
call esi
push eax
call ebx
mov eax, dword [0x409818]
push eax
push eax
push edi
push 0x7e1
push dword [ebp + 0xc]
call esi
push eax
call ebx
mov eax, dword [0x409814]
push eax
push eax
push edi
push 0x3fa
push dword [ebp + 0xc]
call esi
push eax
call ebx
mov eax, dword [0x409810]
push eax
push eax
push edi
push 0xbc9
push dword [ebp + 0xc]
call esi
push eax
call ebx
push 1
push 1
push edi
push 0x3fb
push dword [ebp + 0xc]
call esi
push eax
call ebx
push 0x45
xor eax, eax
pop ecx
lea edi, [ebp - 0x254]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x254]
mov dword [ebp - 0x254], 0x114
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 0x232a
push dword [ebp + 0xc]
call esi
mov edi, 0x3eb
mov dword [ebp + 0x14], eax
push edi
push dword [ebp + 0xc]
call esi
push edi
mov dword [ebp + 0x10], eax
push dword [ebp + 0xc]
call esi
push 0x40
push 0
push 0x407
push dword [ebp + 0x14]
call ebx
push 0x400
add edi, 0x1d
push 0
push edi
push dword [ebp + 0x14]
call ebx
push 0xa
push 0
push 0x407
push dword [ebp + 0x10]
call ebx
push 0x64
push 0
push edi
push dword [ebp + 0x10]
call ebx
push dword [0x416c7c]
mov edi, 0x409864
push edi
call fcn.0040210b
push dword [0x416bb0]
mov dword [0x416c7c], eax
mov dword [0x416c80], eax
mov dword [0x416c24], 1
push str.img_id
call fcn.0040210b
push dword [0x416bc8]
and dword [0x416c58], 0
fld1
push str.point_x
mov dword [0x416bb0], eax
fstp dword [0x416c90]
call fcn.0040210b
push dword [0x416bcc]
mov dword [0x416bc8], eax
push str.point_y
call fcn.0040210b
fld qword [0x416bc0]
mov dword [0x416bcc], eax
call sub.MSVCRT.dll__ftol
push eax
push str.transparency
call fcn.0040210b
mov dword [ebp + 0x18], eax
add esp, 0x28
fild dword [ebp + 0x18]
push dword [ebp + 0xc]
fstp qword [0x416bc0]
fld dword [0x416c90]
push ecx
mov ecx, 0x416ba8
fstp dword [esp]
push dword [0x416c80]
push dword [0x416c7c]
call fcn.00404e43
push dword [0x416c7c]
push edi
call fcn.0040210b
pop ecx
mov dword [0x416c7c], 0x6f
pop ecx
mov ecx, dword [0x416c80]
push ecx
push eax
mov ecx, 0x416ba8
call fcn.004055ca
mov eax, dword [0x416c7c]
mov edi, 0x405
push eax
push eax
push edi
push dword [ebp + 0x14]
call ebx
fld qword [0x416bc0]
call sub.MSVCRT.dll__ftol
push eax
push eax
push edi
push dword [ebp + 0x10]
call ebx
push dword [0x416c7c]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
mov ebx, 0x416ce0
push 0x409778
push ebx
call edi
mov eax, dword [ebp + 8]
add esp, 0xc
push ebx
push 0x412
push dword [eax + 0x1018]
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
fld qword [0x416bc0]
call sub.MSVCRT.dll__ftol
push 0x64
pop ecx
sub ecx, eax
push ecx
push str._d___
push ebx
call edi
mov edi, dword [ebp + 8]
add esp, 0xc
push ebx
push 0x413
push dword [edi + 0x1018]
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
xor esi, esi
cmp dword [0x415234], esi
jne 0x4035c4
cmp dword [0x409810], esi
je 0x4035c4
push esi
push 0x7e
push 0x111
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_PostMessageW]
push esi
push 0x14
push 0x7d0
push dword [edi + 0x1018]
call dword [sym.imp.USER32.dll_SetTimer]
push 1
pop eax
pop edi
pop esi
pop ebx
leave
ret 0x14