Function at 0x435eac
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb8
push ebx
push esi
push edi
mov esi, ecx
lea edi, [ebp - 0xc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ebx, edx
mov dword [ebp - 4], eax
mov byte [ebp - 0xd], 0
mov eax, dword [ebp + 8]
call sub.rtl60.bpl__System__LStrClr_qqrpv
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov edx, ebx
call sub.rtl60.bpl__Classes_TList_Get_qqri
mov edi, eax
cmp dword [edi + 0x65], 0
jne 0x435eec
mov edx, ebx
mov eax, dword [ebp - 4]
call sym.que2.exe__Fr_class_TfrEMFPages_ObjectsToPage_qqri
cmp byte [edi + 0x1f], 0
je 0x435f1c
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0x3ff00000
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0x3ff00000
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
jmp 0x435f76
lea eax, [edi + 0x30]
lea edx, [edi + 0x20]
mov ecx, dword [edx]
mov ebx, ecx
add ebx, dword [edx + 8]
mov esi, dword [eax + 0x28]
sub esi, ebx
mov dword [ebp - 0x34], esi
fild dword [ebp - 0x34]
fild dword [eax + 8]
fdivp st(1)
fstp qword [ebp - 0x18]
wait
mov ebx, dword [edx + 4]
add ebx, dword [edx + 0xc]
mov esi, dword [eax + 0x2c]
sub esi, ebx
mov dword [ebp - 0x34], esi
fild dword [ebp - 0x34]
fild dword [eax + 0xc]
fdivp st(1)
fstp qword [ebp - 0x20]
wait
mov ebx, dword [eax + 0x18]
add ebx, ecx
mov dword [ebp - 0x34], ebx
fild dword [ebp - 0x34]
fstp qword [ebp - 0x28]
wait
mov eax, dword [eax + 0x1c]
add eax, dword [edx + 4]
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x34]
fstp qword [ebp - 0x30]
wait
mov eax, dword [edi + 0x65]
mov eax, dword [eax + 0xfc]
mov esi, dword [eax + 8]
dec esi
cmp esi, 0
jl 0x43610f
mov eax, dword [edi + 0x65]
mov eax, dword [eax + 0xfc]
mov edx, esi
call sub.rtl60.bpl__Classes_TList_Get_qqri
mov ebx, eax
push dword [ebp - 8]
push dword [ebp - 0xc]
mov eax, dword [ebx + 0x98]
add eax, dword [ebx + 0xa0]
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x34]
fmul qword [ebp - 0x20]
fadd qword [ebp - 0x30]
call sub.rtl60.bpl__System__ROUND_qqrv
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebx + 0x94]
add eax, dword [ebx + 0x9c]
mov dword [ebp - 0x48], eax
fild dword [ebp - 0x48]
fmul qword [ebp - 0x18]
fadd qword [ebp - 0x28]
call sub.rtl60.bpl__System__ROUND_qqrv
push eax
fild dword [ebx + 0x98]
fmul qword [ebp - 0x20]
fadd qword [ebp - 0x30]
call sub.rtl60.bpl__System__ROUND_qqrv
push eax
fild dword [ebx + 0x94]
fmul qword [ebp - 0x18]
fadd qword [ebp - 0x28]
call sub.rtl60.bpl__System__ROUND_qqrv
pop edx
pop ecx
call sub.rtl60.bpl__Classes_Rect_qqriiii
lea eax, [ebp - 0x44]
push eax
call sub.USER32.DLL_PtInRect
test eax, eax
je 0x436105
cmp byte [ebp + 0x10], 0
je 0x4360b2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
cmp word [eax + 0xc2], 0
je 0x43604d
mov edi, eax
mov edx, ebx
mov eax, dword [edi + 0xc4]
call dword [edi + 0xc0]
mov byte [ebp - 0xd], 1
mov edx, dword [ebx + 0x54]
mov eax, 0x436124
call sub.rtl60.bpl__System__LStrPos_qqrv
dec eax
jne 0x43610f
mov edx, dword [ebx + 0xd0]
mov eax, 0x436130
call sub.rtl60.bpl__System__LStrPos_qqrv
test eax, eax
jle 0x436085
mov eax, dword [ebp + 8]
mov edx, dword [ebx + 0xd0]
call sub.rtl60.bpl__System__LStrAsg_qqrpvpxv
jmp 0x4360ac
mov eax, dword [ebp + 8]
call sub.rtl60.bpl__System__LStrClr_qqrpv
push 1
push 0
push 0
mov eax, dword [ebx + 0xd0]
call sub.rtl60.bpl__System__LStrToPChar_qqrx17System_AnsiString
push eax
push 0
call sub.USER32.DLL_GetDesktopWindow
push eax
call sub.SHELL32.DLL_ShellExecuteA
mov byte [ebp - 0xd], 1
jmp 0x43610f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
cmp word [eax + 0xca], 0
je 0x4360d9
mov edi, eax
mov ecx, dword [ebp + 0xc]
mov edx, ebx
mov eax, dword [edi + 0xcc]
call dword [edi + 0xc8]
mov byte [ebp - 0xd], 1
mov edx, dword [ebx + 0x54]
mov eax, 0x436124
call sub.rtl60.bpl__System__LStrPos_qqrv
dec eax
jne 0x43610f
mov eax, dword [ebp + 0xc]
mov word [eax], 0xffeb
mov eax, dword [ebp + 8]
mov edx, dword [ebx + 0xd0]
call sub.rtl60.bpl__System__LStrAsg_qqrpvpxv
mov byte [ebp - 0xd], 1
jmp 0x43610f
dec esi
cmp esi, 0xffffffff
jne 0x435f8c
mov al, byte [ebp - 0xd]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc