Function at 0x4079dc
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffbb0
push ebx
mov dword [ebp - 4], 1
xor eax, eax
mov dword [ebp - 8], eax
mov edx, dword [ebp + 0xc]
cmp edx, 0xf
jg 0x407a1d
je 0x407a48
dec edx
je 0x407bef
dec edx
je 0x407cac
sub edx, 3
je 0x407b5a
sub edx, 2
je 0x407a67
jmp 0x408120
sub edx, 0x111
je 0x407d5f
dec edx
je 0x407ab6
dec edx
je 0x407d30
sub edx, 0x2cd
je 0x407d1d
jmp 0x408120
lea ecx, [ebp - 0x68]
push ecx
push dword [ebp + 8]
call sub.USER32.DLL_BeginPaint
lea eax, [ebp - 0x68]
push eax
push dword [ebp + 8]
call sub.USER32.DLL_EndPaint
xor eax, eax
jmp 0x408141
cmp dword [0x452950], 0
je 0x407a80
push dword [0x452950]
call sub.USER32.DLL_SetFocus
jmp case.0x407d70.1001
cmp dword [0x45e8a8], 0
je 0x407a99
push dword [0x45e8a8]
call sub.USER32.DLL_SetFocus
jmp case.0x407d70.1001
cmp dword [0x452948], 0
je case.0x407d70.1001
push dword [0x452948]
call sub.USER32.DLL_SetFocus
jmp case.0x407d70.1001
cmp dword [0x4528c4], 0
je 0x407b50
cmp dword [ebp + 0x10], 0xf030
je 0x407ad5
cmp dword [ebp + 0x10], 0xf120
jne 0x407b50
push 0
call sub.USER32.DLL_GetSystemMetrics
mov dword [ebp - 0x20], eax
push 1
call sub.USER32.DLL_GetSystemMetrics
mov dword [ebp - 0x24], eax
push 1
push 0x28
push 0x28
mov edx, dword [ebp - 0x24]
sar edx, 1
jns 0x407af9
adc edx, 0
add edx, 0xffffffec
push edx
mov ecx, dword [ebp - 0x20]
sar ecx, 1
jns 0x407b07
adc ecx, 0
add ecx, 0xffffffec
push ecx
push dword [0x4528dc]
call sub.USER32.DLL_MoveWindow
push 1
push dword [0x4528dc]
call sub.USER32.DLL_ShowWindow
push 2
push dword [0x4528dc]
call sub.USER32.DLL_ShowWindow
cmp dword [0x45e8a8], 0
je 0x407b44
push dword [0x45e8a8]
call sub.USER32.DLL_SetFocus
mov dword [ebp - 4], 1
jmp case.0x407d70.1001
xor eax, eax
mov dword [ebp - 4], eax
jmp case.0x407d70.1001
cmp dword [ebp + 0x10], 1
je 0x407be5
cmp dword [0x4528c4], 0
je 0x407be5
push 0
call sub.USER32.DLL_GetSystemMetrics
mov dword [ebp - 0x20], eax
push 1
call sub.USER32.DLL_GetSystemMetrics
mov dword [ebp - 0x24], eax
push 1
push 0x28
push 0x28
mov edx, dword [ebp - 0x24]
sar edx, 1
jns 0x407b91
adc edx, 0
add edx, 0xffffffec
push edx
mov ecx, dword [ebp - 0x20]
sar ecx, 1
jns 0x407b9f
adc ecx, 0
add ecx, 0xffffffec
push ecx
push dword [0x4528dc]
call sub.USER32.DLL_MoveWindow
push 1
push dword [0x4528dc]
call sub.USER32.DLL_ShowWindow
push 2
push dword [ebp + 8]
call sub.USER32.DLL_ShowWindow
cmp dword [0x45e8a8], 0
je 0x407bd9
push dword [0x45e8a8]
call sub.USER32.DLL_SetFocus
mov dword [ebp - 4], 1
jmp case.0x407d70.1001
xor eax, eax
mov dword [ebp - 4], eax
jmp case.0x407d70.1001
mov edx, dword [ebp + 8]
mov dword [0x4528dc], edx
push dword [ebp + 8]
call sub.USER32.DLL_GetMenu
mov dword [ebp - 0x14], eax
cmp dword [0x4529a4], 0
je 0x407c77
push 0
push 0x3ed
push dword [ebp - 0x14]
call sub.USER32.DLL_RemoveMenu
push 0
push 0x3ee
push dword [ebp - 0x14]
call sub.USER32.DLL_RemoveMenu
push 0
push 0x3ef
push dword [ebp - 0x14]
call sub.USER32.DLL_RemoveMenu
push 0
push 0x3f0
push dword [ebp - 0x14]
call sub.USER32.DLL_RemoveMenu
push 0
push 0x3f1
push dword [ebp - 0x14]
call sub.USER32.DLL_RemoveMenu
push 0
push 0x3f2
push dword [ebp - 0x14]
call sub.USER32.DLL_RemoveMenu
push 0
push 0x3eb
push dword [ebp - 0x14]
call sub.USER32.DLL_RemoveMenu
jmp 0x407ca5
push 0
push 0x3e8
push dword [ebp - 0x14]
call sub.USER32.DLL_RemoveMenu
mov ecx, 8
cmp dword [0x454ad0], 0
jne 0x407c97
add ecx, 0xfffffff8
push ecx
push 0x3f0
push dword [ebp - 0x14]
call sub.USER32.DLL_CheckMenuItem
xor eax, eax
jmp 0x408141
cmp dword [0x453e98], 0
je 0x407cca
xor edx, edx
mov dword [0x453e98], edx
push 0x460
push dword [ebp + 8]
call sub.USER32.DLL_KillTimer
xor ecx, ecx
mov dword [0x4528dc], ecx
call fcn.0041d140
cmp dword [0x452948], 0
je 0x407cfa
push dword [0x452948]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x407cfa
push dword [0x452948]
call sub.USER32.DLL_DestroyWindow
xor eax, eax
mov dword [0x452948], eax
xor edx, edx
mov dword [0x45294c], edx
push 0
call sub.USER32.DLL_PostQuitMessage
push 0
call fcn.00407870
pop ecx
jmp case.0x407d70.1001
push dword [ebp + 0x14]
push dword [ebp + 0x10]
call fcn.0041cf00
add esp, 8
jmp case.0x407d70.1001
cmp dword [ebp + 0x10], 0x460
jne case.0x407d70.1001
xor ecx, ecx
mov dword [0x453e98], ecx
push 0x460
push dword [ebp + 8]
call sub.USER32.DLL_KillTimer
push dword [ebp + 8]
call sub.USER32.DLL_DestroyWindow
jmp case.0x407d70.1001
mov eax, dword [ebp + 0x10]
add eax, 0xfffffc18
cmp eax, 0xb
ja case.0x407d70.1001
jmp dword [eax*4 + 0x407d77]
push dword [ebp + 8]
call sub.USER32.DLL_DestroyWindow
jmp case.0x407d70.1001
push 1
push dword [ebp + 8]
call sub.USER32.DLL_ShowWindow
jmp case.0x407d70.1001
xor dword [0x454ad0], 1
push dword [0x4528dc]
call sub.USER32.DLL_GetMenu
mov dword [ebp - 0x14], eax
mov edx, 8
cmp dword [0x454ad0], 0
jne 0x407de9
add edx, 0xfffffff8
push edx
push 0x3f0
push dword [ebp - 0x14]
call sub.USER32.DLL_CheckMenuItem
jmp case.0x407d70.1001
push 0x4ec
push 0x469a07
call fcn.0040790c
add esp, 8
jmp case.0x407d70.1001
push 0x4ed
push 0x46af85
call fcn.0040790c
add esp, 8
jmp case.0x407d70.1001
push 0x4ee
push 0x46c503
call fcn.0040790c
add esp, 8
jmp case.0x407d70.1001
push 0x468af8
push 0x4593e2
push 0x40
push dword [0x45294c]
call fcn.00411b5c
add esp, 0x10
push 0x468d05
push str.Der_INI_Pfad_enth
push 0x40
push dword [0x45294c]
call fcn.00411b5c
add esp, 0x10
jmp case.0x407d70.1001
push str.TestCom.ht
push 0x468af8
call fcn.00404370
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je case.0x407d70.1001
push dword [ebp - 0x18]
call fcn.00404664
pop ecx
test eax, eax
jne 0x407ec2
push str.TestCom.ht
push 0x453511
push 0x40
push dword [0x45294c]
call fcn.00411b5c
add esp, 0x10
jmp 0x407efb
push 1
push 0
push 0
push dword [ebp - 0x18]
push 0x45941c
push 0
call sub.SHELL32.DLL_ShellExecuteA
cmp eax, 0x20
jg 0x407efb
push 0x45942f
push str.HyperTerminal
push 0x45379c
push 0x40
push dword [0x45294c]
call fcn.00411b5c
add esp, 0x14
push dword [ebp - 0x18]
call fcn.00443384
pop ecx
jmp case.0x407d70.1001
push str.IDM_REGISTR_r_n
call fcn.00403934
pop ecx
cmp dword [0x4528d8], 2
jne 0x407f71
call fcn.00402fbc
push eax
push str.Das_Programm_l
lea ecx, [ebp - 0x450]
push ecx
call fcn.00447d04
add esp, 0xc
call fcn.00402820
test eax, eax
je 0x408090
push 0x45943e
lea eax, [ebp - 0x450]
push eax
call fcn.00444280
add esp, 8
push 0x459441
lea edx, [ebp - 0x450]
push edx
call fcn.00444280
add esp, 8
jmp 0x408090
test word [0xf480a4], 0x35f
je 0x407f85
cmp dword [0x4528d8], 0
je 0x407fd3
push 0x45946d
lea ecx, [ebp - 0x450]
push ecx
call fcn.0044435c
add esp, 8
call fcn.00402820
test eax, eax
je 0x408090
push 0x459486
lea eax, [ebp - 0x450]
push eax
call fcn.00444280
add esp, 8
push 0x459489
lea edx, [ebp - 0x450]
push edx
call fcn.00444280
add esp, 8
jmp 0x408090
push 0x4594b5
lea ecx, [ebp - 0x450]
push ecx
call fcn.0044435c
add esp, 8
xor eax, eax
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov edx, 1
shl edx, cl
movzx eax, word [0xf480a4]
and edx, eax
je 0x408056
mov edx, dword [ebp - 0x28]
push dword [edx*4 + 0x453a0c]
call fcn.0044438c
pop ecx
mov ebx, 0x3e6
sub ebx, eax
lea eax, [ebp - 0x450]
push eax
call fcn.0044438c
pop ecx
cmp ebx, eax
jbe 0x408056
push 0x4594d7
lea edx, [ebp - 0x450]
push edx
call fcn.00444280
add esp, 8
mov ecx, dword [ebp - 0x28]
push dword [ecx*4 + 0x453a0c]
lea eax, [ebp - 0x450]
push eax
call fcn.00444280
add esp, 8
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xa
jl 0x407fec
call fcn.00402820
test eax, eax
je 0x408090
push 0x4594d9
lea edx, [ebp - 0x450]
push edx
call fcn.00444280
add esp, 8
push str.Wollen_Sie_die_Registrierungsdaten
lea ecx, [ebp - 0x450]
push ecx
call fcn.00444280
add esp, 8
lea eax, [ebp - 0x450]
push eax
push 0x44
call sub.USER32.DLL_GetFocus
push eax
call fcn.00411b5c
add esp, 0xc
cmp eax, 6
jne case.0x407d70.1001
push str.setup.exe
push 0x468af8
call fcn.00404370
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je case.0x407d70.1001
push dword [ebp - 0x18]
call fcn.00404664
pop ecx
test eax, eax
jne 0x4080f0
push str.setup.exe
push 0x453511
push 0x40
push dword [0x45294c]
call fcn.00411b5c
add esp, 0x10
jmp 0x408103
push 0x459507
push dword [ebp - 0x18]
push dword [ebp + 8]
call fcn.0040d6e4
add esp, 0xc
push dword [ebp - 0x18]
call fcn.00443384
pop ecx
jmp case.0x407d70.1001
push str.IDM_TUTOR_r_n
call fcn.00403934
pop ecx
call fcn.004181c4
jmp case.0x407d70.1001
xor edx, edx
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0
je 0x408130
mov eax, dword [ebp - 8]
jmp 0x408141
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call sub.USER32.DLL_DefWindowProcA
pop ebx
mov esp, ebp
pop ebp
ret 0x10