Function at 0x4037d0
Capabilities:
Create process on windows
Open clipboard
Write clipboard data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x54a218
push eax
mov dword fs:[0], esp
sub esp, 0xe8
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x108]
mov esi, ecx
cmp edi, 0x4020020
ja 0x403c3d
je 0x403c24
lea eax, [edi - 0x4020001]
cmp eax, 0x1e
ja case.0x40402c.67239988
jmp dword [eax*4 + 0x404218]
push 1
push 0
push 0
push 0x5897d0
push str.DBManager
mov ecx, esi
call fcn.00403490
jmp 0x4041f5
push 1
push 0
push 0
push 0x5897b8
push str.DBManager
mov ecx, esi
call fcn.00403490
jmp 0x4041f5
push 1
push 0
push 0
push 0
push str.dbcnv
mov ecx, esi
call fcn.00403490
jmp 0x4041f5
push 1
push 0
push 0
push 0
push str.egrid
mov ecx, esi
call fcn.00403490
jmp 0x4041f5
mov ecx, esi
call fcn.00404530
jmp 0x4041f5
mov eax, dword [esi + 0x8b0]
push 0
push 0x71
push 0x111
mov ecx, dword [eax + 0xdc]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4041f5
push 0
push 0
push 0
push 2
mov ecx, esi
call fcn.00436320
jmp 0x4041f5
mov edx, dword [esi + 0x8b0]
push 0
push 0
push 0x87d2
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4041f5
mov ecx, dword [esi + 0x8b0]
test ecx, ecx
jne 0x4038fa
xor eax, eax
jmp 0x4041fa
push 0x81
call fcn.004764d0
jmp 0x4041f5
mov ecx, dword [esi + 0x8b0]
test ecx, ecx
jne 0x40391a
xor eax, eax
jmp 0x4041fa
push 0x82
call fcn.004764d0
jmp 0x4041f5
mov ecx, dword [esi + 0x8b0]
test ecx, ecx
jne 0x40393a
xor eax, eax
jmp 0x4041fa
push 0x84
call fcn.004764f0
jmp 0x4041f5
mov eax, dword [esi + 0x8b0]
test eax, eax
jne 0x40395a
xor eax, eax
jmp 0x4041fa
mov ecx, esi
call fcn.0045b7e0
test eax, eax
je 0x4041f5
cmp dword [eax + 0x3c], 5
jne 0x4041f5
mov ecx, dword [esi + 0x8b0]
push 0x6e
call fcn.0053fbf9
jmp 0x4041f5
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 2
mov ecx, esi
call fcn.00403180
jmp 0x4041f5
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 3
mov ecx, esi
call fcn.00403180
jmp 0x4041f5
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 4
mov ecx, esi
call fcn.00403180
jmp 0x4041f5
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 6
mov ecx, esi
call fcn.00403180
jmp 0x4041f5
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 7
mov ecx, esi
call fcn.00403180
jmp 0x4041f5
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 8
mov ecx, esi
call fcn.00403180
jmp 0x4041f5
mov ebx, dword [esi + 0x398]
mov edx, dword [esi + 0x8b0]
xor ecx, ecx
push 0
test ebx, ebx
sete cl
mov dword [esi + 0x398], ecx
mov eax, dword [edx + 0x664]
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x4041f5
push 0
push 0
push 0
push 0x13
mov ecx, esi
call fcn.00436320
jmp 0x4041f5
push 0
push 0
push 0
push 0x18
mov ecx, esi
call fcn.00436320
jmp 0x4041f5
mov eax, dword [esi + 0x8b0]
push 0
add eax, 0x594
push 9
push 0x110a
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ebp, eax
test ebp, ebp
je 0x4041f5
mov edx, dword [0x5ada84]
mov dword [esp + 0x10], edx
cmp edi, 0x4020016
mov dword [esp + 0x100], 0xd
jne 0x403b06
push 0
push 1
push 0x5897a4
push 0x58978c
lea eax, [esp + 0x20]
push 0x589764
push eax
push 0
mov ecx, esi
call fcn.004389d0
test eax, eax
je 0x403aed
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x403b06
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.0052801f
jmp 0x4041f5
push 0x589748
lea ecx, [esp + 0x18]
call fcn.004e2ce0
mov bl, 0xe
lea ecx, [esp + 0x1c]
mov byte [esp + 0x100], bl
call fcn.00477df0
lea edx, [esp + 0x1c]
mov ecx, esi
push edx
push ebp
mov byte [esp + 0x108], 0xf
call fcn.004611d0
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x403be2
cmp edi, 0x4020016
push 0
jne 0x403b63
lea eax, [esp + 0x14]
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x28]
call fcn.00478500
jmp 0x403be2
call dword [sym.imp.USER32.dll_OpenClipboard]
cmp eax, 1
jne 0x403be2
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
mov eax, ecx
neg eax
sbb eax, eax
and eax, esi
mov dl, byte [eax + ecx - 1]
test dl, dl
je 0x403b91
push 0
lea ecx, [esp + 0x20]
call fcn.00478130
call dword [sym.imp.USER32.dll_EmptyClipboard]
mov ecx, dword [esp + 0x2c]
push ecx
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
test esi, esi
je 0x403bdc
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x24]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
and eax, edi
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push eax
call fcn.00478c60
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
push 1
call dword [sym.imp.USER32.dll_SetClipboardData]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x100], bl
mov dword [esp + 0x1c], 0x55f890
call fcn.00477ff0
lea ecx, [esp + 0x14]
mov byte [esp + 0x100], 0xd
call fcn.004e2d90
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.0052801f
jmp 0x4041f5
push 1
push 0
push 0
push 0
push str.elib
mov ecx, esi
call fcn.00403490
jmp 0x4041f5
cmp edi, 0x4020030
ja 0x40400b
je 0x403fe9
lea eax, [edi - 0x4020021]
cmp eax, 0xe
ja case.0x40402c.67239988
jmp dword [eax*4 + 0x404294]
push 1
push 0
push 0
push 0
push str.packcom
mov ecx, esi
call fcn.00403490
jmp 0x4041f5
push 1
push 0
push 0
push 0x58972c
push str.DBManager
mov ecx, esi
call fcn.00403490
jmp 0x4041f5
push 1
push 0
push 0
push 0
push str.dblang
mov ecx, esi
call fcn.00403490
jmp 0x4041f5
push 1
push 0
push 0
push 0
push 0x589720
mov ecx, esi
call fcn.00403490
jmp 0x4041f5
lea edx, [esi + 0x898]
push str.tutorial
lea eax, [esp + 0x48]
push edx
push eax
call fcn.005282b4
push str._tutorial.exe
lea ecx, [esp + 0x14]
push eax
push ecx
mov dword [esp + 0x10c], 0
call fcn.005282b4
lea ecx, [esp + 0x44]
mov byte [esp + 0x100], 2
call fcn.0052801f
mov edx, dword [esp + 0x10]
push edx
call fcn.004e5670
add esp, 4
test eax, eax
jne 0x403d70
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x40]
push eax
push 0x5896b0
push ecx
call fcn.004e6da0
mov eax, dword [eax]
mov byte [esp + 0x10c], 3
push eax
call fcn.004e3120
add esp, 0x10
lea ecx, [esp + 0x40]
mov byte [esp + 0x100], 2
call fcn.0052801f
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.0052801f
jmp 0x4041f5
push 1
lea edx, [esp + 0x14]
push 0
push edx
mov ecx, esi
call fcn.004036d0
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.0052801f
jmp 0x4041f5
add esi, 0x898
push str.help
lea eax, [esp + 0x34]
push esi
push eax
call fcn.005282b4
push str.esdn.chm
lea ecx, [esp + 0x14]
push eax
push ecx
mov dword [esp + 0x10c], 4
call fcn.005282b4
mov bl, 6
lea ecx, [esp + 0x30]
mov byte [esp + 0x100], bl
call fcn.0052801f
mov edx, dword [esp + 0x10]
push edx
call fcn.004e5670
add esp, 4
test eax, eax
jne 0x403e3d
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x3c]
push eax
push 0x58963c
push ecx
call fcn.004e6da0
mov eax, dword [eax]
mov byte [esp + 0x10c], 7
push eax
call fcn.004e3120
add esp, 0x10
lea ecx, [esp + 0x3c]
mov byte [esp + 0x100], bl
call fcn.0052801f
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.0052801f
jmp 0x4041f5
mov edx, dword [esp + 0x10]
push 5
push edx
call fcn.004700a0
add esp, 8
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.0052801f
jmp 0x4041f5
mov eax, dword [0x5ada84]
mov dword [esp + 0x10], eax
mov dword [esp + 0x100], 0xa
mov dword [esp + 0x14], eax
mov eax, dword [0x5b1c44]
mov bl, 0xb
cmp eax, 2
mov byte [esp + 0x100], bl
jl 0x403ea4
mov eax, dword [0x5b1c40]
lea ecx, [esp + 0x10]
add eax, 4
push eax
call fcn.00528158
jmp 0x403edc
lea ecx, [esi + 0x898]
push str.wizard
lea edx, [esp + 0x38]
push ecx
push edx
call fcn.005282b4
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x104], 0xc
call fcn.00528158
lea ecx, [esp + 0x34]
mov byte [esp + 0x100], bl
call fcn.0052801f
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x10]
push eax
push 0
push 0x589630
push 0x589618
push 0x5895fc
push ecx
push 0
mov ecx, esi
call fcn.004389d0
test eax, eax
je 0x403f47
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x403f47
cmp dword [0x5b1c44], 2
jge 0x403f26
push 0xffffffffffffffff
push 2
mov ecx, 0x5b1c3c
call fcn.00526af9
mov ecx, dword [0x5b1c40]
lea eax, [esp + 0x10]
push eax
add ecx, 4
call fcn.00528158
mov edx, dword [esp + 0x10]
push 1
push edx
mov ecx, esi
call fcn.00469920
lea ecx, [esp + 0x14]
mov byte [esp + 0x100], 0xa
call fcn.0052801f
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.0052801f
jmp 0x4041f5
mov ecx, esi
call fcn.0045aaf0
jmp 0x4041f5
mov eax, dword [esi + 0x92c]
mov ecx, dword [esi + 0x894]
xor eax, ecx
jne 0x403f94
push 0x5895b0
jmp 0x403f99
push 0x589500
lea ecx, [esi + 0x90c]
call fcn.005281a8
mov ecx, dword [esi + 0x8b0]
mov dword [esi + 0x910], 0x40
push 0
push 0x73
mov edx, dword [ecx + 0x1c]
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4041f5
push 0x5b0a40
mov ecx, esi
call fcn.004383d0
jmp 0x4041f5
mov ecx, esi
call fcn.00438480
jmp 0x4041f5
mov ecx, dword [0x5b1200]
xor eax, eax
test ecx, ecx
mov ecx, dword [0x5b1ac0]
sete al
mov dword [0x5b1200], eax
call fcn.00474450
jmp 0x4041f5
cmp edi, 0x4020038
ja 0x4040ee
je 0x4040d5
lea eax, [edi - 0x4020032]
cmp eax, 5
ja case.0x40402c.67239988
jmp dword [eax*4 + 0x4042d0]
mov ecx, esi
call fcn.004043e0
jmp 0x4041f5
mov ecx, esi
call fcn.00404360
jmp 0x4041f5
push 0
lea ecx, [esp + 0x4c]
call fcn.00449c70
lea ecx, [esp + 0x48]
mov dword [esp + 0x100], 0x10
call fcn.00528b14
lea ecx, [esp + 0xe0]
mov dword [esp + 0x100], 0x12
mov dword [esp + 0xe0], 0x55f890
call fcn.00477ff0
lea ecx, [esp + 0xa4]
mov byte [esp + 0x100], 0x11
call fcn.005258c3
lea ecx, [esp + 0x48]
mov dword [esp + 0x100], 0xffffffff
call fcn.0052874a
jmp 0x4041f5
push 0xffffffffffffffff
mov ecx, esi
call fcn.004bbf60
jmp 0x4041f5
push 1
mov ecx, esi
call fcn.004bbf60
jmp 0x4041f5
push 1
push 0
push 0
push 0
push str.EvaDesigner
mov ecx, esi
call fcn.00403490
jmp 0x4041f5
cmp edi, 0x402003b
ja 0x4041d6
je 0x4041af
sub edi, 0x4020039
je 0x4041a6
dec edi
jne case.0x40402c.67239988
add esi, 0x898
push str.VReportindex.html
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.005282b4
mov eax, dword [0x5b1ac0]
mov edx, dword [esp + 0x14]
push 1
push 0
mov ecx, dword [eax + 0x1c]
push 0
push edx
mov ebx, 8
push str.open
push ecx
mov dword [esp + 0x118], ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jg 0x404190
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x38]
push edx
push 0x5894a8
push eax
call fcn.004e6da0
mov eax, dword [eax]
mov byte [esp + 0x10c], 9
push eax
call fcn.004e3120
add esp, 0x10
lea ecx, [esp + 0x38]
mov byte [esp + 0x100], bl
call fcn.0052801f
lea ecx, [esp + 0x14]
mov dword [esp + 0x100], 0xffffffff
call fcn.0052801f
jmp 0x4041f5
mov ecx, esi
call fcn.0046e6e0
jmp 0x4041f5
mov eax, dword [esi + 0x8b0]
test eax, eax
jne 0x4041bd
xor eax, eax
jmp 0x4041fa
mov ecx, esi
call fcn.0046f150
test eax, eax
jne 0x4041f5
push eax
push eax
push 9
push eax
mov ecx, esi
call fcn.00402f70
jmp 0x4041f5
cmp edi, 0x84020006
je 0x4041e2
xor eax, eax
jmp 0x4041fa
mov ecx, dword [esi + 0x8b0]
push 0
add ecx, 0x558
call fcn.00401a30
mov eax, 1
mov ecx, dword [esp + 0xf8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xf4
ret 0x10