Function at 0x40d53b
Capabilities:
Create process on windows
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
cmp dword [ebp + 0xc], 0x64
push ebx
push esi
push edi
mov esi, ecx
je 0x40d688
push 0x67
pop eax
cmp dword [ebp + 0xc], eax
jne 0x40d797
xor ebx, ebx
cmp dword [esi + 0x1c48], ebx
jne 0x40d575
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x40d797
push str.Microsoft_Internet_Explorer_Netscape_Opera_Mozilla
push 0x40e5f9
mov dword [0x414f40], eax
call dword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
je 0x40d797
lea ecx, [ebp - 0x34]
call fcn.0040eed6
push 1
mov dword [ebp - 4], ebx
pop edi
mov dword [ebp - 0x14], ebx
mov ebx, dword [sym.imp.USER32.dll_GetActiveWindow]
mov dword [ebp - 0x34], 0x4108bc
mov dword [ebp - 0xc], 0x414233
mov dword [ebp - 0x18], 0x1770
mov dword [ebp - 0x10], str.Your_Internet_Browser_is_closed._r_n_Start_now_
mov dword [ebp - 8], edi
call ebx
push eax
lea ecx, [ebp - 0x34]
call fcn.0040f08d
cmp eax, edi
jne 0x40d601
xor eax, eax
cmp dword [esi + 0x1c48], eax
je 0x40d601
push 3
push 0x414f58
add esi, 0x1027
push eax
push esi
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x40d797
cmp dword [esi + 0x1c48], 0
je 0x40d797
lea ecx, [ebp - 0x68]
call fcn.0040eed6
and dword [ebp - 0x38], 0
and dword [ebp - 0x48], 0
mov dword [ebp - 0x68], 0x4108bc
mov dword [ebp - 0x40], 0x414233
mov dword [ebp - 0x4c], 0x1770
mov dword [ebp - 0x44], str.Disconnect_
mov dword [ebp - 0x3c], 2
call ebx
push eax
lea ecx, [ebp - 0x68]
call fcn.0040f08d
cmp eax, edi
jne 0x40d797
push 0x67
mov dword [esi + 0x1c50], edi
push dword [esi + 4]
call dword [sym.imp.USER32.dll_KillTimer]
push str.Disconnected_from_User_r_n
mov ecx, 0x413828
call fcn.0040f0c0
lea eax, [esi + 0x2588]
push edi
push eax
mov ecx, esi
call fcn.0040cebc
jmp 0x40d797
xor ebx, ebx
push 1
cmp dword [esi + 0x2634], ebx
pop edi
je 0x40d700
mov ecx, esi
call fcn.0040d45b
test eax, eax
je 0x40d700
mov ecx, esi
call fcn.0040dc0a
mov ecx, esi
call fcn.0040eb3f
mov eax, dword [esi + 0xd9c]
cmp eax, 0x3c
jle 0x40d6c1
cmp dword [esi + 0x19dc], eax
ja 0x40d6e0
mov eax, dword [esi + 0xda0]
cmp eax, 0x3c
jle 0x40d754
mov ecx, dword [esi + 0x19e0]
add ecx, dword [esi + 0x19dc]
cmp ecx, eax
jbe 0x40d754
push str.Time_limit_erreicht._r_n
mov ecx, 0x413828
call fcn.0040f0c0
lea eax, [esi + 0x2588]
push edi
push eax
mov ecx, esi
call fcn.0040cebc
jmp 0x40d754
cmp dword [esi + 0x1c50], ebx
jne 0x40d717
push str.Verbindung_wurde_nicht_endeckt._r_n
mov ecx, 0x413828
call fcn.0040f0c0
push 0x67
push dword [esi + 4]
call dword [sym.imp.USER32.dll_KillTimer]
push ebx
mov ecx, esi
mov dword [esi + 0x2634], ebx
call fcn.0040d911
push ebx
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, esi
call fcn.0040e7bd
push ebx
push dword [esi + 0x1c50]
push dword [esi + 0x7c]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_PostMessageA]
xor eax, eax
cmp dword [esi + 0x1c48], ebx
mov ecx, esi
sete al
push eax
call fcn.0040cbbd
mov ecx, esi
lea ebx, [esi + 0x1c58]
call fcn.0040d139
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
push edi
push 0
push dword [esi + 0x40]
call dword [sym.imp.USER32.dll_SetWindowRgn]
push ebx
push dword [esi + 0x40]
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, dword [ebp + 0x14]
mov dword [eax], edi
mov eax, dword [ebp + 0x14]
pop edi
pop esi
pop ebx
and dword [eax], 0
xor eax, eax
leave
ret 0x10