Function at 0x460e20
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x2a4
mov eax, dword [0x4d9540]
push esi
mov dword [esp + 8], eax
mov dword [esp + 0x1c], eax
push edi
lea eax, [esp + 0xac]
push 0x100
push eax
mov edi, ecx
push 0x80
call fcn.0040e810
mov ecx, 0x100
sub ecx, eax
cmp ecx, 1
jle 0x460e6d
lea edx, [esp + 0xac]
lea ecx, [esp + 0x20]
push edx
call fcn.004016e0
jmp 0x460ebb
push 0x1ff
lea ecx, [esp + 0x24]
mov esi, 0x200
call fcn.0040f900
test eax, eax
je 0x460eb0
push esi
push eax
push 0x80
call fcn.0040e810
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jg 0x460eb0
add esi, 0x100
lea ecx, [esp + 0x20]
lea edx, [esi - 1]
push edx
call fcn.0040f900
test eax, eax
jne 0x460e84
push 0xffffffffffffffff
lea ecx, [esp + 0x24]
call fcn.00401970
mov ax, word [esp + 0x2b4]
cmp ax, 0xe141
jne 0x460f4e
mov eax, dword [edi + 4]
push 0
push 0
push 0x10
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [esp + 0x20]
mov edx, dword [0x4d9544]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x460f0e
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x460f0e
mov edx, dword [esp + 0x20]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0xc]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4610a7
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4610a7
mov edx, dword [esp + 0xc]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
xor eax, eax
pop edi
pop esi
add esp, 0x2a4
ret 0x10
cmp ax, 0xe102
jne 0x460fec
mov eax, dword [edi + 8]
push 0
push 0
push 0x229
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [edi + 8]
push eax
push ecx
call fcn.00460a40
mov eax, dword [esp + 0x28]
mov ecx, dword [0x4d9544]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
add esp, 8
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x460fa9
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x460fa9
mov eax, dword [esp + 0x20]
add eax, 0xfffffff4
push eax
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0xc]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4619b6
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4619b6
mov edx, dword [esp + 0xc]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, 1
pop edi
pop esi
add esp, 0x2a4
ret 0x10
cmp ax, 0x8006
jne 0x461000
mov eax, dword [edi + 8]
push eax
call fcn.00460a60
add esp, 4
jmp 0x461044
cmp ax, 0xa7da
jne 0x4610bf
mov edx, dword [edi + 8]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
push ecx
push 0
push 0x229
push edx
call esi
test eax, eax
je 0x461044
mov ecx, dword [esp + 0x10]
push 0
test ecx, ecx
push eax
je 0x4610b4
mov eax, dword [edi + 8]
push 0x223
push eax
call esi
mov edx, dword [esp + 0xc]
cmp dword [edx - 8], 3
jle 0x461095
lea eax, [esp + 0xc]
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.00488620
add esp, 4
lea edx, [esp + 0x18]
push eax
push edx
call fcn.0040f0a0
mov eax, dword [eax]
mov ecx, dword [edi + 4]
push 5
push 0
push 0
push eax
push str.open
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x14]
call fcn.004014c0
lea ecx, [esp + 0x18]
call fcn.004014c0
lea ecx, [esp + 0x20]
call fcn.004014c0
lea ecx, [esp + 0xc]
call fcn.004014c0
xor eax, eax
pop edi
pop esi
add esp, 0x2a4
ret 0x10
mov ecx, dword [edi + 8]
push 0x225
push ecx
jmp 0x461042
cmp ax, 0x8031
jne 0x461284
lea ecx, [esp + 0x18]
call fcn.004a5c40
lea edx, [esp + 0x10]
push 0xe
push edx
call fcn.0048eb30
mov esi, eax
mov eax, dword [0x4d9540]
mov ecx, 0x4db54c
add esp, 8
test ecx, ecx
mov dword [esp + 0x1c], eax
jne 0x4610f9
xor eax, eax
jmp 0x461104
push 0x4db54c
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [esi]
push 0x4db54c
push eax
push ecx
mov edx, dword [ecx - 8]
lea ecx, [esp + 0x28]
push edx
call fcn.004017b0
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x24]
push eax
call fcn.00401200
lea ecx, [esp + 0x1c]
call fcn.004014c0
lea ecx, [esp + 0x28]
push ecx
call fcn.0048b750
mov edx, dword [0x4d9540]
mov eax, dword [eax]
add esp, 4
mov dword [esp + 0x2c], edx
push eax
mov eax, dword [eax - 8]
push eax
mov eax, dword [esp + 0x2c]
push eax
mov ecx, dword [eax - 8]
push ecx
lea ecx, [esp + 0x3c]
call fcn.004017b0
lea edx, [esp + 0x2c]
lea ecx, [esp + 8]
push edx
call fcn.00401200
lea ecx, [esp + 0x2c]
call fcn.004014c0
mov eax, dword [esp + 0x24]
mov edx, dword [0x4d9544]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4611a9
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4611a9
mov edx, dword [esp + 0x24]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x10]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4611d4
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4611d4
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x28]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4611ff
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4611ff
mov edx, dword [esp + 0x28]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 8]
push ecx
mov ecx, esp
mov edx, dword [eax - 0xc]
test edx, edx
jl 0x46121f
mov dword [ecx], eax
mov eax, dword [esp + 0xc]
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x461231
mov edx, dword [0x4d9540]
mov dword [ecx], edx
mov eax, dword [esp + 0xc]
push eax
call fcn.004016e0
push ecx
mov ecx, esp
push 0x4e3a5c
call fcn.004014f0
mov ecx, dword [edi + 4]
push ecx
lea ecx, [esp + 0x24]
call fcn.004a5c80
mov eax, dword [esp + 8]
mov ecx, dword [0x4d9544]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x461276
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x461276
mov eax, dword [esp + 8]
add eax, 0xfffffff4
push eax
call fcn.004c5432
add esp, 4
lea ecx, [esp + 0x18]
call fcn.004a5c70
jmp 0x461044
cmp ax, 0x8032
jne 0x46148b
lea ecx, [esp + 0x10]
push 0
push ecx
call fcn.00489e70
add esp, 8
lea ecx, [esp + 0x14]
call fcn.004a5c40
lea edx, [esp + 0x18]
push 0xe
push edx
call fcn.0048eb30
mov esi, eax
mov eax, dword [0x4d9540]
mov ecx, 0x4db54c
add esp, 8
test ecx, ecx
mov dword [esp + 0x24], eax
jne 0x4612cd
xor eax, eax
jmp 0x4612d8
push 0x4db54c
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [esi]
push 0x4db54c
push eax
push ecx
mov edx, dword [ecx - 8]
lea ecx, [esp + 0x30]
push edx
call fcn.004017b0
lea eax, [esp + 0x24]
lea ecx, [esp + 0x1c]
push eax
call fcn.00401200
lea ecx, [esp + 0x24]
call fcn.004014c0
lea ecx, [esp + 0x28]
push ecx
call fcn.0048b750
mov edx, dword [0x4d9540]
mov eax, dword [eax]
add esp, 4
mov dword [esp + 0x2c], edx
push eax
mov eax, dword [eax - 8]
push eax
mov eax, dword [esp + 0x24]
push eax
mov ecx, dword [eax - 8]
push ecx
lea ecx, [esp + 0x3c]
call fcn.004017b0
lea edx, [esp + 0x2c]
lea ecx, [esp + 8]
push edx
call fcn.00401200
lea ecx, [esp + 0x2c]
call fcn.004014c0
mov eax, dword [esp + 0x1c]
mov edx, dword [0x4d9544]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x46137d
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x46137d
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x18]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4613a8
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4613a8
mov edx, dword [esp + 0x18]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x28]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4613d3
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4613d3
mov edx, dword [esp + 0x28]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 8]
push ecx
mov ecx, esp
mov edx, dword [eax - 0xc]
test edx, edx
jl 0x4613f3
mov dword [ecx], eax
mov eax, dword [esp + 0xc]
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x461405
mov edx, dword [0x4d9540]
mov dword [ecx], edx
mov eax, dword [esp + 0xc]
push eax
call fcn.004016e0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
push edx
call fcn.00401200
mov eax, dword [edi + 4]
lea ecx, [esp + 0x1c]
push eax
call fcn.004a5c80
mov eax, dword [esp + 8]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x46144a
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x46144a
mov edx, dword [esp + 8]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
lea ecx, [esp + 0x14]
call fcn.004a5c70
mov eax, dword [esp + 0x10]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x461044
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x461044
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
jmp 0x461044
cmp ax, 0x800a
jne 0x4614e0
push 1
lea ecx, [esp + 0x34]
call fcn.00403560
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov esi, eax
lea eax, [esp + 0x30]
lea ecx, [esp + 0x38]
push eax
push ecx
push 0x4edfe0
call fcn.0040bbb0
mov edx, dword [0x4edfe8]
push 0
push 0x410630
push esi
push 0xca
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
lea ecx, [esp + 0x4c]
call fcn.0040d9f0
jmp 0x461044
cmp ax, 0x800e
jne 0x461605
lea eax, [esp + 0x14]
push 0xc
push eax
call fcn.0048eb30
mov ecx, dword [0x4d9540]
mov edx, str._KontaktBetreff
add esp, 8
mov esi, eax
test edx, edx
mov dword [esp + 0x10], ecx
jne 0x461512
xor eax, eax
jmp 0x46151d
push str._KontaktBetreff
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [esi]
push ecx
mov ecx, dword [ecx - 8]
push ecx
push str._KontaktBetreff
push eax
lea ecx, [esp + 0x20]
call fcn.004017b0
lea edx, [esp + 0x10]
lea ecx, [esp + 8]
push edx
call fcn.00401200
lea ecx, [esp + 0x10]
call fcn.004014c0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 8]
cmp ecx, eax
je 0x4615a0
mov edx, dword [ecx - 0xc]
test edx, edx
jge 0x46156a
mov edx, dword [0x4d9544]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x461571
mov ecx, dword [eax - 0xc]
test ecx, ecx
jge 0x461581
push eax
mov eax, dword [eax - 8]
push eax
lea ecx, [esp + 0x14]
call fcn.00401630
jmp 0x46159c
lea ecx, [esp + 0xc]
call fcn.0040e950
mov eax, dword [esp + 8]
mov dword [esp + 0xc], eax
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov eax, dword [esp + 8]
mov edx, dword [0x4d9544]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4615cd
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x4615cd
mov edx, dword [esp + 8]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x14]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x461044
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x461044
mov edx, dword [esp + 0x14]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
jmp 0x461044
cmp ax, 0x800d
jne 0x461633
mov eax, str._Kontakt
test eax, eax
je 0x46161f
push str._Kontakt
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str._Kontakt
push eax
lea ecx, [esp + 0x14]
call fcn.00401630
jmp 0x461044
cmp ax, 0x808f
jne 0x461773
mov eax, dword [0x4ecbf4]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov ecx, dword [eax - 0xc]
test ecx, ecx
jl 0x46165b
mov dword [esp + 0x1c], eax
add eax, 0xfffffff4
push eax
call esi
jmp 0x46166f
mov ecx, dword [0x4d9540]
push eax
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x20]
call fcn.004016e0
mov edx, dword [0x4d9540]
mov eax, 0x4db4f8
test eax, eax
mov dword [esp + 0x10], edx
je 0x46168d
push 0x4db4f8
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [esp + 0x1c]
push ecx
mov ecx, dword [ecx - 8]
push ecx
push 0x4db4f8
push eax
lea ecx, [esp + 0x20]
call fcn.004017b0
lea edx, [esp + 0x10]
lea ecx, [esp + 8]
push edx
call fcn.00401200
lea ecx, [esp + 0x10]
call fcn.004014c0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 8]
cmp ecx, eax
je 0x46170e
mov edx, dword [ecx - 0xc]
test edx, edx
jge 0x4616dc
mov edx, dword [0x4d9544]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x4616e3
mov ecx, dword [eax - 0xc]
test ecx, ecx
jge 0x4616f3
push eax
mov eax, dword [eax - 8]
push eax
lea ecx, [esp + 0x14]
call fcn.00401630
jmp 0x46170a
lea ecx, [esp + 0xc]
call fcn.0040e950
mov eax, dword [esp + 8]
mov dword [esp + 0xc], eax
add eax, 0xfffffff4
push eax
call esi
mov eax, dword [esp + 8]
mov edx, dword [0x4d9544]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x46173b
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x46173b
mov edx, dword [esp + 8]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x1c]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x461044
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x461044
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
jmp 0x461044
cmp ax, 0x8090
jne 0x46183a
mov eax, dword [0x4dcab0]
test eax, eax
mov eax, str.Thanks
jne 0x461790
mov eax, str.Danke
push eax
lea ecx, [esp + 0x1c]
call fcn.004014f0
lea eax, [esp + 0x18]
lea ecx, [esp + 0x24]
push eax
push 0x4dad70
call fcn.004014f0
push eax
push 0x4ecbf4
lea ecx, [esp + 0x1c]
push str._seiteFreeware_
push ecx
call fcn.0040f340
lea edx, [esp + 0x30]
push eax
push edx
call fcn.0040f0a0
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.0040f0a0
push eax
lea ecx, [esp + 0x10]
call fcn.0040ec90
mov eax, dword [esp + 0x14]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x461811
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x461811
mov edx, dword [esp + 0x14]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
lea ecx, [esp + 0x28]
call fcn.004014c0
lea ecx, [esp + 0x10]
call fcn.004014c0
lea ecx, [esp + 0x24]
call fcn.004014c0
lea ecx, [esp + 0x18]
call fcn.004014c0
jmp 0x461044
cmp ax, 0x800c
jne 0x461853
push str._Freeware
lea ecx, [esp + 0x10]
call fcn.004016e0
jmp 0x461044
cmp ax, 0x800f
jne 0x461899
lea eax, [esp + 0x18]
push 0xd
push eax
call fcn.0048eb30
add esp, 8
lea ecx, [esp + 0x14]
push eax
push str._KontaktBetreff
push ecx
call fcn.0040f340
push eax
lea ecx, [esp + 0x10]
call fcn.0040ec90
lea ecx, [esp + 0x14]
call fcn.004014c0
lea ecx, [esp + 0x18]
call fcn.004014c0
jmp 0x461044
cmp ax, 0x852c
jne 0x461912
push str.faq0
lea ecx, [esp + 0x1c]
call fcn.004014f0
push str._seitefaq_
lea ecx, [esp + 0x18]
call fcn.004014f0
lea edx, [esp + 0x18]
lea eax, [esp + 0x14]
push edx
push 0x4ecbf4
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.0040f0a0
lea edx, [esp + 0x2c]
push eax
push edx
call fcn.0040f0a0
push eax
lea ecx, [esp + 0x10]
call fcn.0040ec90
lea ecx, [esp + 0x28]
call fcn.004014c0
lea ecx, [esp + 0x10]
call fcn.004014c0
lea ecx, [esp + 0x14]
call fcn.004014c0
lea ecx, [esp + 0x18]
call fcn.004014c0
jmp 0x461044
cmp ax, 0x8593
jne 0x46195b
push str._pageWindows_Info_
lea ecx, [esp + 0x18]
call fcn.004014f0
lea eax, [esp + 0x14]
push 0x4ecbf4
lea ecx, [esp + 0x1c]
push eax
push ecx
call fcn.0040f0a0
push eax
lea ecx, [esp + 0x10]
call fcn.0040ec90
lea ecx, [esp + 0x18]
call fcn.004014c0
lea ecx, [esp + 0x14]
call fcn.004014c0
jmp 0x461044
cmp ax, 0xe146
jne 0x461972
mov edx, dword [edi + 4]
push edx
call fcn.004786c0
add esp, 4
jmp 0x461044
cmp ax, 0xe150
jne 0x461987
mov eax, dword [edi + 8]
push 0
push 0
push 0x224
push eax
jmp 0x46199e
cmp ax, 0xe151
jne 0x461044
mov ecx, dword [edi + 8]
push 1
push 0
push 0x224
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [esp + 0x20]
call fcn.004014c0
lea ecx, [esp + 0xc]
call fcn.004014c0
pop edi
mov eax, 1
pop esi
add esp, 0x2a4
ret 0x10