Function at 0x4071d0
Capabilities:
Check os version
Create process on windows
Get common file path
Hide graphical window

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x40ec5d
push eax
mov eax, dword [esp + 0x18]
mov dword fs:[0], esp
sub esp, 0xb80
cmp eax, 0x111
push ebx
push ebp
push esi
push edi
ja 0x408666
je 0x407afc
cmp eax, 0x10
je 0x407ad8
cmp eax, 0x4e
je 0x407a90
cmp eax, 0x110
jne case.default.0x408674
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
mov ebp, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
push 0xc
call ebp
push eax
push 0xb
call ebp
mov esi, dword [sym.imp.USER32.dll_LoadImageW]
push eax
mov eax, dword [0x424a80]
push 1
push 0x6b
push eax
call esi
push 0
push 0x32
mov edi, eax
call ebp
push eax
push 0x31
call ebp
mov ecx, dword [0x424a80]
push eax
push 1
push 0x6b
push ecx
call esi
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push eax
mov esi, dword [esp + 0xba8]
push 0
push 0x80
push esi
call ebx
push edi
push 1
push 0x80
push esi
call ebx
push 0x31
mov edi, dword [esp + 0xba4]
mov dword [edi + 0x1018], esi
call ebp
cmp eax, 0x10
jle 0x4073c5
mov ebp, dword [sym.imp.USER32.dll_GetDlgItem]
push 0xbd7
push esi
call ebp
lea ecx, [esp + 0x4c]
mov dword [esp + 0x10], eax
call fcn.00401000
lea ecx, [esp + 0x20]
call fcn.00401000
mov eax, dword [edi + 0x1018]
lea edx, [esp + 0x4c]
push edx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
lea ecx, [esp + 0x20]
push ecx
push 0xfbe
push esi
call ebp
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [edi + 0x1018]
lea edx, [esp + 0x20]
push edx
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov edx, dword [edi + 0x1018]
lea ecx, [esp + 0x28]
push ecx
push edx
call dword [sym.imp.USER32.dll_ScreenToClient]
lea ecx, [esp + 0x4c]
call fcn.00401050
mov eax, dword [esp + 0x24]
push 0
push eax
lea ecx, [esp + 0x54]
call fcn.00401050
mov edi, dword [esp + 0x18]
push eax
push 0
push 0
push 0
push edi
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [esp + 0x24]
push ecx
lea ecx, [esp + 0x50]
call fcn.00401050
push eax
push 0
push 0
lea ecx, [esp + 0x7c]
call fcn.00401010
push 0
push 0
push 0x173
push edi
mov dword [esp + 0x24], 0
call ebx
mov dword [esp + 0x14], eax
call fcn.00404650
test al, al
je 0x407391
mov edx, dword [0x424a80]
push 0x89
push edx
call dword [sym.imp.USER32.dll_LoadBitmapW]
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x6c]
call fcn.00401060
push eax
lea ecx, [esp + 0x70]
call fcn.00401050
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.00403ff0
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
add esp, 0xc
push ecx
push 0
push 0x172
push edx
jmp 0x407400
mov eax, dword [0x424a80]
push 0x89
push eax
call dword [sym.imp.USER32.dll_LoadBitmapW]
mov ebp, dword [sym.imp.USER32.dll_GetDlgItem]
push 0xbd7
push esi
mov edi, eax
call ebp
mov dword [esp + 0x10], eax
call fcn.00404650
test al, al
je 0x407402
mov ecx, dword [esp + 0x10]
push edi
push 0
push 0x172
push ecx
call ebx
mov edi, dword [esp + 0xba0]
push esi
mov ecx, edi
mov dword [0x429f60], esi
call fcn.004096e0
mov edx, dword [edi + 0x1018]
push 0xfbe
push edx
call ebp
lea ecx, [esp + 0x5c]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [edi + 0x1018]
lea edx, [esp + 0x5c]
push edx
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov edx, dword [edi + 0x1018]
lea ecx, [esp + 0x64]
push ecx
push edx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, 0x429948
mov eax, dword [esp + 0x68]
mov dword [0x42994c], eax
call fcn.0040c0d0
push 0x32
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fmul qword [0x40f3e8]
call sub.MSVCRT.dll__ftol
mov dword [0x429988], eax
mov ecx, dword [edi + 0x1018]
push ecx
mov ecx, 0x429948
call fcn.0040aef0
push 0x1c
mov ecx, 0x429e20
call fcn.0040ade0
push 0x8016
push eax
mov ecx, 0x429948
call fcn.0040c530
push 0x109
mov ecx, 0x429e20
call fcn.0040ade0
mov edi, eax
push 0x807f
push edi
mov ecx, 0x429948
call fcn.0040c530
push 0x8081
push edi
mov ecx, 0x429948
call fcn.0040c530
push 0xe
mov ecx, 0x429e20
call fcn.0040ade0
mov edi, eax
push 0x41a
push edi
mov ecx, 0x429948
call fcn.0040c530
push 0x8084
push edi
mov ecx, 0x429948
call fcn.0040c530
push 0x8082
push edi
mov ecx, 0x429948
call fcn.0040c530
push 0x8083
push edi
mov ecx, 0x429948
call fcn.0040c530
push 0x8089
push edi
mov ecx, 0x429948
call fcn.0040c530
push 0x10f
mov ecx, 0x429e20
call fcn.0040ade0
push 0x8088
push eax
mov ecx, 0x429948
call fcn.0040c530
push esi
mov ecx, dword [esp + 0xba4]
call fcn.00408c70
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
call sub.MSVCRT.dll_clock
mov edx, dword [0x427f18]
mov dword [0x429940], eax
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x80]
mov dword [esp + 0x7c], edx
rep stosd dword es:[edi], eax
mov ecx, dword [0x424a80]
lea eax, [esp + 0x7c]
push 0x80
push eax
push 0x6d
push ecx
call dword [sym.imp.USER32.dll_LoadStringW]
lea edx, [esp + 0x7c]
push 0
push edx
call fcn.0040d610
add esp, 8
mov dword [0x427f0c], eax
push 0
push eax
push 0xf1
push 0x3f7
push esi
call ebp
push eax
call ebx
mov eax, dword [0x429f50]
push eax
push str.m_set_focus
call fcn.00402750
mov ecx, dword [0x429f54]
mov dword [0x429f50], eax
push ecx
push str.m_disable
call fcn.00402750
add esp, 0x10
mov dword [0x429f54], eax
push 0
push eax
push 0xf1
push 0x3f6
push esi
call ebp
push eax
call ebx
mov ecx, dword [esp + 0xba0]
call fcn.00408860
mov edx, dword [0x429f64]
push edx
push str.start_tray
call fcn.00402750
mov dword [0x429f64], eax
mov eax, dword [0x418224]
push eax
push str.tray_if_minimize
call fcn.00402750
mov ecx, dword [0x41822c]
mov dword [0x418224], eax
push ecx
push str.show_icons_by_l_mouse
call fcn.00402750
mov edx, dword [0x418234]
mov dword [0x41822c], eax
push edx
push str.show_icons_by_r_mouse
call fcn.00402750
mov dword [0x418234], eax
mov eax, dword [0x418220]
push eax
push str.show_icons_by_contextmenu
call fcn.00402750
or edi, 0xffffffff
mov dword [0x418220], eax
push edi
push str.m_wallpaper_color
mov dword [0x41823c], edi
call fcn.00402750
mov ecx, dword [0x429f74]
mov dword [0x41823c], eax
push ecx
push str.hide_at_programstart
call fcn.00402750
mov edx, dword [0x418238]
mov dword [0x429f74], eax
push edx
push str.show_icons_by_m_mouse
call fcn.00402750
add esp, 0x40
mov dword [0x418238], eax
mov eax, dword [0x429f48]
push eax
push str.hide_icons_by_m_mouse
call fcn.00402750
mov ecx, dword [0x429f7c]
mov dword [0x429f48], eax
push ecx
push str.show_icons_win_d
call fcn.00402750
mov edx, dword [0x429f80]
mov dword [0x429f7c], eax
push edx
push str.show_icons_mouse_move
call fcn.00402750
mov dword [0x429f80], eax
mov eax, dword [0x429f84]
push eax
push str.m_show_taskbar_mouse_move
call fcn.00402750
mov ecx, dword [0x429f6c]
mov dword [0x429f84], eax
push ecx
push str.task_bar_ico_rule
call fcn.00402750
mov edx, dword [0x429f8c]
mov dword [0x429f6c], eax
push edx
push str.hide_taskbar
call fcn.00402750
mov dword [0x429f8c], eax
mov eax, dword [0x429f58]
push eax
push str.topmost
call fcn.00402750
add esp, 0x38
mov dword [0x429f58], eax
push 0
push eax
push 0xf1
push 0x3f3
push esi
call ebp
push eax
call ebx
mov eax, dword [0x429f58]
push 3
push 0
push 0
test eax, eax
push 0
push 0
je 0x4077ae
mov ecx, dword [esp + 0xbb4]
push edi
mov edx, dword [ecx + 0x1018]
push edx
jmp 0x4077be
mov eax, dword [esp + 0xbb4]
push 0xfffffffffffffffe
mov ecx, dword [eax + 0x1018]
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov edx, dword [0x429f64]
push 0
push edx
push 0xf1
push 0x3f8
push esi
call ebp
push eax
call ebx
mov eax, dword [0x429f8c]
push 0
push eax
push 0xf1
push 0x3f9
push esi
call ebp
push eax
call ebx
mov ecx, dword [0x429f74]
push 0
push ecx
push 0xf1
push 0x3fa
push esi
call ebp
push eax
call ebx
mov edx, dword [0x429f48]
push 0
push edx
push 0xf1
push 0x3fb
push esi
call ebp
push eax
call ebx
mov ecx, 0x45
xor eax, eax
lea edi, [esp + 0x27c]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x27c]
mov dword [esp + 0x27c], 0x114
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [esp + 0x280], 6
jae 0x407875
push 0x4189bc
push 0x4189bc
push 0x40c
push esi
call ebp
push eax
call fcn.00406440
add esp, 0xc
push 0x3ea
push esi
call ebp
push 1
mov edi, eax
push 0
push 0x407
push edi
call ebx
push 0xf8
push 0
push 0x408
push edi
call ebx
mov ecx, dword [0x418240]
push ecx
push str.auto_hide_icons_sec
call fcn.00402750
mov ecx, dword [esp + 0xba8]
mov dword [0x418240], eax
fild dword [0x418240]
fstp qword [esp]
call fcn.00409f00
mov dword [esp + 0x14], eax
mov eax, dword [0x418240]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea edx, [eax + eax*4]
shl edx, 3
mov dword [esp + 0x10], edx
fild dword [esp + 0x10]
fmul qword [0x40f3c0]
call sub.MSVCRT.dll__ftol
and eax, 0xffff
shl eax, 0x10
push eax
push 0
push 0x401
push 0x40c
push esi
call ebp
push eax
call ebx
mov eax, dword [0x418240]
push 0
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
fmul qword [0x40f3c0]
call sub.MSVCRT.dll__ftol
push eax
push 0x402
push 0x40c
push esi
call ebp
push eax
call ebx
mov ecx, dword [esp + 0x14]
push ecx
push 1
push 0x405
push edi
call ebx
fild dword [0x418240]
sub esp, 8
lea edx, [esp + 0x4c]
fstp qword [esp]
push edx
call fcn.004070d0
mov eax, dword [eax]
add esp, 0xc
lea ecx, [esp + 0x7c]
push eax
push 0x417eac
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [esp + 0x44]
call fcn.00401b80
mov edi, dword [esp + 0xba0]
lea edx, [esp + 0x7c]
push edx
push 0x40f
mov eax, dword [edi + 0x1018]
push eax
call ebp
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
call sub.MSVCRT.dll_clock
push 1
mov dword [0x42913c], eax
call fcn.00406f80
add esp, 4
push 0
push 0xc8
push 0xfa0
push esi
call dword [sym.imp.USER32.dll_SetTimer]
mov ecx, dword [0x41822c]
push 0
push ecx
push 0xf1
push 0x1069
push esi
call ebp
push eax
call ebx
mov edx, dword [0x418238]
push 0
push edx
push 0xf1
push 0x106a
push esi
call ebp
push eax
call ebx
mov eax, dword [0x418234]
push 0
push eax
push 0xf1
push 0x106b
push esi
call ebp
push eax
call ebx
mov ecx, dword [0x418220]
push 0
push ecx
push 0xf1
push 0x89f
push esi
call ebp
push eax
call ebx
mov edx, dword [0x429f7c]
push 0
push edx
push 0xf1
push 0x106c
push esi
call ebp
push eax
call ebx
push 4
mov ecx, edi
call fcn.00409ce0
push 1
mov ecx, edi
call fcn.00409ce0
mov eax, dword [0x429f74]
test eax, eax
je 0x407a86
mov eax, dword [0x429f54]
test eax, eax
jne 0x407a86
push 0
call fcn.00406f80
mov eax, dword [0x429f8c]
add esp, 4
test eax, eax
je 0x407a86
call fcn.00406c10
mov eax, 1
jmp 0x408806
mov eax, dword [esp + 0xbb0]
cmp dword [eax + 8], 0xfffffdee
jne case.default.0x408674
cmp dword [esp + 0xbac], 0x41a
jne case.default.0x408674
test eax, eax
je case.default.0x408674
add eax, 0x10
push 0x50
push str.AutoHideDesktopIcons_FAQ
push eax
mov word [eax], 0
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
jmp case.default.0x408674
mov ecx, 0x424e90
call fcn.0040a960
mov eax, dword [esp + 0xba4]
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, 1
jmp 0x408806
mov esi, dword [esp + 0xbac]
and esi, 0xffff
cmp esi, 0x106b
jg 0x40807c
je 0x408033
mov edi, dword [esp + 0xba4]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
mov ebp, dword [sym.imp.USER32.dll_GetDlgItem]
cmp esi, 0x3fb
jg 0x407dff
cmp esi, 0x3fb
je 0x407db6
cmp esi, 0x3f7
jg 0x407ccb
je 0x407c93
cmp esi, 0x3f5
jg 0x407c82
je 0x407bf7
sub esi, 2
je case.default.0x408674
sub esi, 0x3f1
jne case.default.0x408674
push 0
push 0
push 0xf0
mov ecx, edi
push 0x3f3
push ecx
call ebp
push eax
call ebx
neg eax
sbb eax, eax
neg eax
push eax
push str.topmost
mov dword [0x429f58], eax
call fcn.00402730
mov eax, dword [0x429f58]
add esp, 8
test eax, eax
push 3
push 0
push 0
push 0
push 0
je 0x407bdc
mov edx, dword [esp + 0xbb4]
push 0xffffffffffffffff
mov eax, dword [edx + 0x1018]
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp case.default.0x408674
mov ecx, dword [esp + 0xbb4]
push 0xfffffffffffffffe
mov edx, dword [ecx + 0x1018]
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp case.default.0x408674
mov eax, dword [0x427f18]
mov ecx, 0x1ff
mov dword [esp + 0x390], eax
xor eax, eax
lea edi, [esp + 0x394]
mov esi, str._Danke
rep stosd dword es:[edi], eax
mov eax, dword [0x4276f0]
test eax, eax
je 0x407c26
mov esi, str._Thanks
lea ecx, [esp + 0x34]
push ecx
call fcn.00409fc0
mov edx, dword [0x424a88]
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x390]
push esi
push edx
push str.__seiteMicrosoft_
push eax
push str._s_s_s_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
lea ecx, [esp + 0x34]
call fcn.00401b80
push 5
push 0
lea edx, [esp + 0x398]
push 0
push edx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp case.default.0x408674
cmp esi, 0x3f6
je 0x407ef6
jmp case.default.0x408674
mov eax, dword [esp + 0xba4]
push 0
push 0
push 0xf0
push 0x3f7
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
neg eax
sbb eax, eax
neg eax
mov dword [0x427f0c], eax
call fcn.00402280
jmp case.default.0x408674
sub esi, 0x3f8
je 0x407d75
dec esi
je 0x407d22
dec esi
jne case.default.0x408674
mov ecx, dword [esp + 0xba4]
push 0
push 0
push 0xf0
push 0x3fa
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
neg eax
sbb eax, eax
neg eax
push eax
push str.hide_at_programstart
mov dword [0x429f74], eax
call fcn.00402730
add esp, 8
jmp case.default.0x408674
mov edx, dword [esp + 0xba4]
push 0
push 0
push 0xf0
push 0x3f9
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
neg eax
sbb eax, eax
neg eax
push eax
push str.hide_taskbar
mov dword [0x429f8c], eax
call fcn.00402730
mov eax, dword [0x429f8c]
add esp, 8
test eax, eax
jne case.default.0x408674
call fcn.00406ba0
jmp case.default.0x408674
mov eax, dword [esp + 0xba4]
push 0
push 0
push 0xf0
push 0x3f8
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
neg eax
sbb eax, eax
neg eax
push eax
push str.start_tray
mov dword [0x429f64], eax
call fcn.00402730
add esp, 8
jmp case.default.0x408674
mov ecx, dword [esp + 0xba4]
push 0
push 0
push 0xf0
push 0x3fb
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
mov dword [0x429f48], eax
push str.hide_icons_by_m_mouse
call fcn.00402730
mov ecx, dword [esp + 0xba8]
add esp, 8
push 2
call fcn.00409ce0
jmp case.default.0x408674
cmp esi, 0x7ef
jg 0x407f53
je 0x407f42
sub esi, 0x412
je 0x407eb0
sub esi, 8
je 0x407e47
sub esi, 0x3cc
jne case.default.0x408674
mov edx, dword [esp + 0xba4]
mov ecx, dword [esp + 0xba0]
push edx
call fcn.00409760
jmp case.default.0x408674
mov eax, dword [0x427f18]
mov ecx, 0x1ff
mov dword [esp + 0x390], eax
xor eax, eax
lea edi, [esp + 0x394]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x48]
push ecx
call fcn.00409fc0
mov edx, dword [0x424a88]
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x390]
push edx
push str.__seitefaq_
push eax
push str._s_s_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
lea ecx, [esp + 0x48]
call fcn.00401b80
push 5
push 0
push 0
lea edx, [esp + 0x39c]
jmp 0x408647
push 0
push 0
push 0xf0
push 0x412
push edi
call ebp
push eax
call ebx
neg eax
sbb eax, eax
neg eax
push eax
push str.disable_permanently
mov dword [0x429f78], eax
call fcn.00402730
mov edx, dword [0x429f78]
add esp, 8
push 0
push edx
push 0xf1
push 0x3f6
push edi
call ebp
push eax
call ebx
push 0
push 0
push 0xf0
push 0x3f6
push edi
call ebp
push eax
call ebx
push eax
push str.m_disable
mov dword [0x429f54], eax
call fcn.00402730
mov ecx, dword [esp + 0xba8]
add esp, 8
call fcn.00408860
mov eax, dword [0x429f54]
mov ecx, 0x424e90
mov dword [0x4256ac], eax
call fcn.0040a9f0
jmp case.default.0x408674
mov ecx, dword [esp + 0xba0]
call fcn.00409360
jmp case.default.0x408674
sub esi, 0x89f
je 0x407fea
sub esi, 0x7ca
je 0x407fa1
dec esi
jne case.default.0x408674
mov ecx, dword [esp + 0xba4]
push 0
push 0
push 0xf0
push 0x106a
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
mov dword [0x418238], eax
push str.show_icons_by_m_mouse
jmp 0x407de4
mov edx, dword [esp + 0xba4]
push 0
push 0
push 0xf0
push 0x1069
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push str.show_icons_by_l_mouse
mov dword [0x41822c], eax
call fcn.00402730
mov ecx, dword [esp + 0xba8]
add esp, 8
push 1
call fcn.00409ce0
jmp case.default.0x408674
mov eax, dword [esp + 0xba4]
push 0
push 0
push 0xf0
push 0x89f
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push str.show_icons_by_contextmenu
mov dword [0x418220], eax
call fcn.00402730
mov ecx, dword [esp + 0xba8]
add esp, 8
push 4
call fcn.00409ce0
jmp case.default.0x408674
mov ecx, dword [esp + 0xba4]
push 0
push 0
push 0xf0
push 0x106b
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push str.show_icons_by_r_mouse
mov dword [0x418234], eax
call fcn.00402730
mov ecx, dword [esp + 0xba8]
add esp, 8
push 3
call fcn.00409ce0
jmp case.default.0x408674
cmp esi, 0x8082
jg 0x4083bf
je 0x408348
cmp esi, 0x8015
jg 0x408164
je 0x408145
sub esi, 0x106c
je 0x4080fc
dec esi
je 0x4080d7
dec esi
jne case.default.0x408674
mov esi, dword [0x429f84]
xor eax, eax
test esi, esi
sete al
push eax
push str.m_show_taskbar_mouse_move
mov dword [0x429f84], eax
call fcn.00402730
add esp, 8
jmp case.default.0x408674
mov esi, dword [0x429f80]
xor eax, eax
test esi, esi
sete al
push eax
push str.show_icons_mouse_move
mov dword [0x429f80], eax
call fcn.00402730
add esp, 8
jmp case.default.0x408674
mov edx, dword [esp + 0xba4]
push 0
push 0
push 0xf0
push 0x106c
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push str.show_icons_win_d
mov dword [0x429f7c], eax
call fcn.00402730
mov ecx, dword [esp + 0xba8]
add esp, 8
push 5
call fcn.00409ce0
jmp case.default.0x408674
mov ecx, 0x424e90
call fcn.0040a960
mov eax, dword [esp + 0xba4]
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.default.0x408674
sub esi, 0x8016
je 0x408313
sub esi, 0x69
je 0x40829d
sub esi, 2
jne case.default.0x408674
lea ecx, [esp + 0x18]
call fcn.004010c0
push 0x104
lea ecx, [esp + 0x1c]
mov dword [esp + 0xb9c], 3
call fcn.00401ab0
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
or edi, 0xffffffff
lea ecx, [esp + 0x18]
push edi
call fcn.00401b40
push 0x424a88
lea ecx, [esp + 0x1c]
call fcn.00401300
push str..zip
lea ecx, [esp + 0x1c]
call fcn.00401320
push 0
push 0
push ecx
lea edx, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.004010d0
call fcn.0040dd90
add esp, 0xc
lea eax, [esp + 0x18]
lea ecx, [esp + 0x1c]
push eax
call fcn.004010d0
mov bl, 4
push 0xf1
mov byte [esp + 0xb9c], bl
call fcn.004021f0
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.00401120
push 0xf0
mov byte [esp + 0xba0], 5
call fcn.004021f0
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00401120
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
mov byte [esp + 0xba8], 6
call fcn.004010d0
mov byte [esp + 0xba4], bl
mov eax, dword [esp + 0xbac]
mov ecx, dword [eax + 0x1018]
push ecx
call fcn.0040d820
add esp, 0x10
lea ecx, [esp + 0x1c]
mov byte [esp + 0xb98], 3
call fcn.00401b80
lea ecx, [esp + 0x18]
mov dword [esp + 0xb98], edi
call fcn.00401b80
jmp case.default.0x408674
push 0xf1
call fcn.004021f0
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00401120
push 0xf0
mov dword [esp + 0xba0], 1
call fcn.004021f0
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00401120
push ecx
mov byte [esp + 0xba4], 2
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x427f18
call fcn.00401120
mov dword [esp + 0xba4], 0xffffffff
mov edx, dword [esp + 0xbac]
mov eax, dword [edx + 0x1018]
push eax
call fcn.0040d820
add esp, 0x10
jmp case.default.0x408674
push 1
call fcn.00406f80
add esp, 4
call fcn.00406ba0
mov ecx, dword [esp + 0xba0]
push 0x8016
mov edx, dword [ecx + 0x1018]
push edx
call dword [sym.imp.USER32.dll_EndDialog]
push 1
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp case.default.0x408674
mov eax, dword [0x427f18]
mov ecx, 0x1ff
mov dword [esp + 0x390], eax
xor eax, eax
lea edi, [esp + 0x394]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x3c]
push ecx
call fcn.00409fc0
mov edx, dword [0x424a88]
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x390]
push edx
push str.__seiteMicrosoft_
push eax
push str._s_s_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
lea ecx, [esp + 0x3c]
call fcn.00401b80
push 5
push 0
lea edx, [esp + 0x398]
push 0
push edx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp case.default.0x408674
lea eax, [esi - 0x8083]
cmp eax, 8
ja case.default.0x408674
jmp dword [eax*4 + 0x408824]
push 1
call fcn.00406f80
add esp, 4
call fcn.00406ba0
mov eax, dword [esp + 0xba0]
push esi
mov ecx, dword [eax + 0x1018]
push ecx
call dword [sym.imp.USER32.dll_EndDialog]
push 1
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp case.default.0x408674
mov ecx, dword [esp + 0xba0]
call fcn.0040a1b0
jmp case.default.0x408674
mov eax, dword [0x41823c]
or edi, 0xffffffff
cmp eax, edi
jne 0x408471
mov ecx, dword [esp + 0xba0]
push edi
call fcn.0040a3a0
push eax
push str.m_wallpaper_color
mov dword [0x41823c], eax
call fcn.00402730
add esp, 8
mov eax, dword [0x429f54]
test eax, eax
jne case.default.0x408674
push 0x64
mov dword [0x429f54], 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [0x429f54], 0
jmp case.default.0x408674
push edi
push str.m_wallpaper_color
mov dword [0x41823c], edi
call fcn.00402730
push 1
push 1
call fcn.00406e70
add esp, 0x10
jmp 0x408443
mov esi, dword [0x429f6c]
xor eax, eax
test esi, esi
sete al
push eax
push str.task_bar_ico_rule
mov dword [0x429f6c], eax
call fcn.00402730
add esp, 8
jmp case.default.0x408674
mov edx, dword [0x427f18]
mov ecx, 0x1ff
xor eax, eax
lea edi, [esp + 0x394]
mov dword [esp + 0x390], edx
rep stosd dword es:[edi], eax
mov eax, dword [0x4276f0]
test eax, eax
jne 0x4084df
push 0x17
jmp 0x4084e1
push 0x18
call fcn.00402000
add esp, 4
push 0x4189bc
push eax
lea eax, [esp + 0x398]
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [esp + 0x390]
push 5
push 0
push 0
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp case.default.0x408674
mov edx, dword [0x427f18]
mov ecx, 0x1ff
xor eax, eax
lea edi, [esp + 0x394]
mov dword [esp + 0x390], edx
rep stosd dword es:[edi], eax
mov eax, dword [0x4276f0]
test eax, eax
jne 0x40854f
push 0x14
jmp 0x408551
push 0x15
call fcn.00402000
mov ecx, dword [0x424a88]
add esp, 4
lea edx, [esp + 0x390]
push str._History
push ecx
push str.__seiteMicrosoft_
push eax
push str._s_s_s_s
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
lea eax, [esp + 0x390]
push 5
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp case.default.0x408674
mov ecx, dword [0x427f18]
xor eax, eax
mov dword [esp + 0x390], ecx
mov ecx, 0x1ff
lea edi, [esp + 0x394]
rep stosd dword es:[edi], eax
mov eax, dword [0x4276f0]
test eax, eax
mov eax, str._Lizenz
je 0x4085d1
mov eax, str._Eula
push eax
lea ecx, [esp + 0x3c]
call fcn.00401190
mov esi, eax
lea edx, [esp + 0x30]
mov dword [esp + 0xb98], 0
push edx
call fcn.00409fc0
mov ecx, dword [esi]
mov edx, dword [0x424a88]
mov eax, dword [eax]
add esp, 4
push ecx
push edx
push str.__seiteMicrosoft_
push eax
lea ecx, [esp + 0x3a0]
push str._s_s_s_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
lea ecx, [esp + 0x30]
call fcn.00401b80
lea ecx, [esp + 0x38]
mov dword [esp + 0xb98], 0xffffffff
call fcn.00401b80
push 5
push 0
push 0
lea edx, [esp + 0x39c]
mov eax, dword [esp + 0xbac]
push edx
push str.open
mov ecx, dword [eax + 0x1018]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp case.default.0x408674
add eax, 0xfffffeee
cmp eax, 3
ja case.default.0x408674
jmp dword [eax*4 + 0x408848]
mov esi, dword [esp + 0xba0]
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0
mov edx, dword [esi + 0x1018]
push 0x400
push 0x3ea
push edx
call ebx
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
sub esp, 8
mov ecx, esi
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
fstp qword [esp]
call fcn.00409f60
mov edi, eax
mov ecx, esi
mov dword [esp + 0x10], edi
fild dword [esp + 0x10]
fstp qword [esp + 0x20]
mov ebp, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
push ebp
push eax
call fcn.00409f00
push ebp
lea edx, [esp + 0x44]
mov ecx, dword [esp + 0x24]
push ecx
push edx
call fcn.004070d0
mov eax, dword [eax]
add esp, 0xc
lea ecx, [esp + 0x7c]
push eax
push 0x417eac
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [esp + 0x40]
call fcn.00401b80
mov eax, dword [esi + 0x1018]
lea edx, [esp + 0x7c]
push edx
push 0x40f
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
cmp dword [0x418240], edi
je 0x408796
push edi
push str.auto_hide_icons_sec
mov dword [0x418240], edi
call fcn.00402730
add esp, 8
call sub.MSVCRT.dll_clock
mov dword [0x429940], eax
mov eax, dword [0x418240]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 3
mov dword [esp + 0x1c], ecx
fild dword [esp + 0x1c]
fmul qword [0x40f3c0]
call sub.MSVCRT.dll__ftol
mov edx, dword [esp + 0xba4]
and eax, 0xffff
shl eax, 0x10
push eax
push 0
push 0x401
push 0x40c
push edx
call ebx
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
jmp 0x408806
cmp word [esp + 0xbac], 0xf020
jne case.default.0x408674
mov eax, dword [0x418224]
test eax, eax
je 0x4087e1
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov ecx, dword [esp + 0xba0]
cmp eax, dword [ecx + 0x1018]
jne 0x4087e1
mov ecx, 0x424e90
call fcn.0040a960
mov edx, dword [esp + 0xba4]
push 0
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, 1
jmp 0x408806
mov eax, dword [0x429f78]
test eax, eax
je 0x4087f6
call fcn.004061b0
mov eax, dword [0x429f54]
test eax, eax
jne case.default.0x408674
call fcn.00406fc0
xor eax, eax
mov ecx, dword [esp + 0xb90]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xb8c
ret 0x14