Function at 0x40772c
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffbb0
push ebx
mov dword [ebp - 4], 1
xor eax, eax
mov dword [ebp - 8], eax
mov edx, dword [ebp + 0xc]
cmp edx, 0xf
jg 0x40776d
je 0x407798
dec edx
je 0x40793f
dec edx
je 0x407987
sub edx, 3
je 0x4078aa
sub edx, 2
je 0x4077b7
jmp 0x407e9c
sub edx, 0x111
je 0x407a3a
dec edx
je 0x407806
dec edx
je 0x407a0b
sub edx, 0x2cd
je 0x4079f8
jmp 0x407e9c
lea ecx, [ebp - 0x68]
push ecx
push dword [ebp + 8]
call sub.USER32.DLL_BeginPaint
lea eax, [ebp - 0x68]
push eax
push dword [ebp + 8]
call sub.USER32.DLL_EndPaint
xor eax, eax
jmp 0x407ebd
cmp dword [0x44f950], 0
je 0x4077d0
push dword [0x44f950]
call sub.USER32.DLL_SetFocus
jmp case.0x407a4b.1001
cmp dword [0x45afe8], 0
je 0x4077e9
push dword [0x45afe8]
call sub.USER32.DLL_SetFocus
jmp case.0x407a4b.1001
cmp dword [0x44f948], 0
je case.0x407a4b.1001
push dword [0x44f948]
call sub.USER32.DLL_SetFocus
jmp case.0x407a4b.1001
cmp dword [0x44f8c4], 0
je 0x4078a0
cmp dword [ebp + 0x10], 0xf030
je 0x407825
cmp dword [ebp + 0x10], 0xf120
jne 0x4078a0
push 0
call sub.USER32.DLL_GetSystemMetrics
mov dword [ebp - 0x20], eax
push 1
call sub.USER32.DLL_GetSystemMetrics
mov dword [ebp - 0x24], eax
push 1
push 0x28
push 0x28
mov edx, dword [ebp - 0x24]
sar edx, 1
jns 0x407849
adc edx, 0
add edx, 0xffffffec
push edx
mov ecx, dword [ebp - 0x20]
sar ecx, 1
jns 0x407857
adc ecx, 0
add ecx, 0xffffffec
push ecx
push dword [0x44f8dc]
call sub.USER32.DLL_MoveWindow
push 1
push dword [0x44f8dc]
call sub.USER32.DLL_ShowWindow
push 2
push dword [0x44f8dc]
call sub.USER32.DLL_ShowWindow
cmp dword [0x45afe8], 0
je 0x407894
push dword [0x45afe8]
call sub.USER32.DLL_SetFocus
mov dword [ebp - 4], 1
jmp case.0x407a4b.1001
xor eax, eax
mov dword [ebp - 4], eax
jmp case.0x407a4b.1001
cmp dword [ebp + 0x10], 1
je 0x407935
cmp dword [0x44f8c4], 0
je 0x407935
push 0
call sub.USER32.DLL_GetSystemMetrics
mov dword [ebp - 0x20], eax
push 1
call sub.USER32.DLL_GetSystemMetrics
mov dword [ebp - 0x24], eax
push 1
push 0x28
push 0x28
mov edx, dword [ebp - 0x24]
sar edx, 1
jns 0x4078e1
adc edx, 0
add edx, 0xffffffec
push edx
mov ecx, dword [ebp - 0x20]
sar ecx, 1
jns 0x4078ef
adc ecx, 0
add ecx, 0xffffffec
push ecx
push dword [0x44f8dc]
call sub.USER32.DLL_MoveWindow
push 1
push dword [0x44f8dc]
call sub.USER32.DLL_ShowWindow
push 2
push dword [ebp + 8]
call sub.USER32.DLL_ShowWindow
cmp dword [0x45afe8], 0
je 0x407929
push dword [0x45afe8]
call sub.USER32.DLL_SetFocus
mov dword [ebp - 4], 1
jmp case.0x407a4b.1001
xor eax, eax
mov dword [ebp - 4], eax
jmp case.0x407a4b.1001
mov edx, dword [ebp + 8]
mov dword [0x44f8dc], edx
push dword [ebp + 8]
call sub.USER32.DLL_GetMenu
mov dword [ebp - 0x14], eax
push 0x400
push 1
push dword [ebp - 0x14]
call sub.USER32.DLL_RemoveMenu
push 0
push 0x3ec
push dword [ebp - 0x14]
call sub.USER32.DLL_RemoveMenu
push 0
push 0x3eb
push dword [ebp - 0x14]
call sub.USER32.DLL_RemoveMenu
xor eax, eax
jmp 0x407ebd
cmp dword [0x450dac], 0
je 0x4079a5
xor edx, edx
mov dword [0x450dac], edx
push 0x460
push dword [ebp + 8]
call sub.USER32.DLL_KillTimer
xor ecx, ecx
mov dword [0x44f8dc], ecx
call fcn.0041c4f8
cmp dword [0x44f948], 0
je 0x4079d5
push dword [0x44f948]
call sub.USER32.DLL_IsWindow
test eax, eax
je 0x4079d5
push dword [0x44f948]
call sub.USER32.DLL_DestroyWindow
xor eax, eax
mov dword [0x44f948], eax
xor edx, edx
mov dword [0x44f94c], edx
push 0
call sub.USER32.DLL_PostQuitMessage
push 0
call fcn.004075c0
pop ecx
jmp case.0x407a4b.1001
push dword [ebp + 0x14]
push dword [ebp + 0x10]
call fcn.0041c2b8
add esp, 8
jmp case.0x407a4b.1001
cmp dword [ebp + 0x10], 0x460
jne case.0x407a4b.1001
xor ecx, ecx
mov dword [0x450dac], ecx
push 0x460
push dword [ebp + 8]
call sub.USER32.DLL_KillTimer
push dword [ebp + 8]
call sub.USER32.DLL_DestroyWindow
jmp case.0x407a4b.1001
mov eax, dword [ebp + 0x10]
add eax, 0xfffffc18
cmp eax, 0xb
ja case.0x407a4b.1001
jmp dword [eax*4 + 0x407a52]
push dword [ebp + 8]
call sub.USER32.DLL_DestroyWindow
jmp case.0x407a4b.1001
cmp dword [0x44f94c], 0
je case.0x407a4b.1001
push 1
push dword [0x44f94c]
call sub.USER32.DLL_ShowWindow
jmp case.0x407a4b.1001
xor dword [0x4519e4], 1
push dword [0x44f8dc]
call sub.USER32.DLL_GetMenu
mov dword [ebp - 0x14], eax
mov edx, 8
cmp dword [0x4519e4], 0
jne 0x407ad4
add edx, 0xfffffff8
push edx
push 0x3f0
push dword [ebp - 0x14]
call sub.USER32.DLL_CheckMenuItem
jmp case.0x407a4b.1001
push 0x4ec
push 0x465fd7
call fcn.0040765c
add esp, 8
jmp case.0x407a4b.1001
push 0x4ed
push 0x467555
call fcn.0040765c
add esp, 8
jmp case.0x407a4b.1001
push 0x4ee
push 0x468ad3
call fcn.0040765c
add esp, 8
jmp case.0x407a4b.1001
push 0x4650c8
push 0x456225
push 0x40
push dword [0x44f94c]
call fcn.0041124c
add esp, 0x10
push 0x4652d5
push 0x456244
push 0x40
push dword [0x44f94c]
call fcn.0041124c
add esp, 0x10
jmp case.0x407a4b.1001
push str.TestCom.ht
push 0x4650c8
call fcn.00404358
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je case.0x407a4b.1001
push dword [ebp - 0x18]
call fcn.0040464c
pop ecx
test eax, eax
jne 0x407bad
push str.TestCom.ht
push 0x450425
push 0x40
push dword [0x44f94c]
call fcn.0041124c
add esp, 0x10
jmp 0x407be6
push 1
push 0
push 0
push dword [ebp - 0x18]
push 0x45625f
push 0
call sub.SHELL32.DLL_ShellExecuteA
cmp eax, 0x20
jg 0x407be6
push 0x456272
push str.HyperTerminal
push 0x4506b0
push 0x40
push dword [0x44f94c]
call fcn.0041124c
add esp, 0x14
push dword [ebp - 0x18]
call fcn.0044066c
pop ecx
jmp case.0x407a4b.1001
push str.IDM_REGISTR_r_n
call fcn.0040391c
pop ecx
cmp dword [0x44f8d8], 2
jne 0x407c4f
call fcn.00402fa4
push eax
push str.Das_Programm_Demo_Version_l
lea ecx, [ebp - 0x450]
push ecx
call fcn.00444f70
add esp, 0xc
push 0x456281
lea eax, [ebp - 0x450]
push eax
call fcn.004414ec
add esp, 8
push 0x456284
lea edx, [ebp - 0x450]
push edx
call fcn.004414ec
add esp, 8
jmp 0x407d6b
test word [0xf446da], 0x35f
je 0x407c63
cmp dword [0x44f8d8], 0
je 0x407ca4
push 0x4562b0
lea ecx, [ebp - 0x450]
push ecx
call fcn.004415c8
add esp, 8
push 0x4562c9
lea eax, [ebp - 0x450]
push eax
call fcn.004414ec
add esp, 8
push 0x4562cc
lea edx, [ebp - 0x450]
push edx
call fcn.004414ec
add esp, 8
jmp 0x407d6b
push 0x4562f8
lea ecx, [ebp - 0x450]
push ecx
call fcn.004415c8
add esp, 8
xor eax, eax
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov edx, 1
shl edx, cl
movzx eax, word [0xf446da]
and edx, eax
je 0x407d36
mov ecx, dword [ebp - 0x28]
mov edx, 1
shl edx, cl
cmp edx, 0x20
je 0x407d36
mov eax, dword [ebp - 0x28]
push dword [eax*4 + 0x450920]
call fcn.004415f8
pop ecx
mov ebx, 0x3e6
sub ebx, eax
lea eax, [ebp - 0x450]
push eax
call fcn.004415f8
pop ecx
cmp ebx, eax
jbe 0x407d36
push 0x45631a
lea edx, [ebp - 0x450]
push edx
call fcn.004414ec
add esp, 8
mov ecx, dword [ebp - 0x28]
push dword [ecx*4 + 0x450920]
lea eax, [ebp - 0x450]
push eax
call fcn.004414ec
add esp, 8
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xa
jl 0x407cbd
push 0x45631c
lea edx, [ebp - 0x450]
push edx
call fcn.004414ec
add esp, 8
push str.Wollen_Sie_die_Registrierungsdaten
lea ecx, [ebp - 0x450]
push ecx
call fcn.004414ec
add esp, 8
lea eax, [ebp - 0x450]
push eax
push 0x44
call sub.USER32.DLL_GetFocus
push eax
call fcn.0041124c
add esp, 0xc
cmp eax, 6
jne case.0x407a4b.1001
push str.setup.exe
push 0x4650c8
call fcn.00404358
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je case.0x407a4b.1001
push dword [ebp - 0x18]
call fcn.0040464c
pop ecx
test eax, eax
jne 0x407dd6
push str.setup.exe
push 0x450425
push 0x40
push dword [0x44f94c]
call fcn.0041124c
add esp, 0x10
jmp case.0x407a4b.1001
push 0x45634a
push dword [ebp - 0x18]
push dword [ebp + 8]
call fcn.0040cd98
add esp, 0xc
jmp case.0x407a4b.1001
push str.netviewerk.exe
push 0x4650c8
call fcn.00404358
add esp, 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je case.0x407a4b.1001
push dword [ebp - 0x18]
push str.IDM_REMOTE___s__r_n
call fcn.0040391c
add esp, 8
push dword [ebp - 0x18]
call fcn.0040464c
pop ecx
test eax, eax
jne 0x407e46
push str.netviewerk.exe
push 0x450425
push 0x40
push dword [0x44f94c]
call fcn.0041124c
add esp, 0x10
jmp 0x407e7f
push 1
push 0
push 0
push dword [ebp - 0x18]
push 0x456365
push 0
call sub.SHELL32.DLL_ShellExecuteA
cmp eax, 0x20
jg 0x407e7f
push 0x45636a
push str.netviewerk.exe
push 0x4506b0
push 0x40
push dword [0x44f94c]
call fcn.0041124c
add esp, 0x14
push dword [ebp - 0x18]
call fcn.0044066c
pop ecx
jmp case.0x407a4b.1001
push str.IDM_TUTOR_r_n
call fcn.0040391c
pop ecx
call fcn.00417bc8
jmp case.0x407a4b.1001
xor edx, edx
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0
je 0x407eac
mov eax, dword [ebp - 8]
jmp 0x407ebd
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call sub.USER32.DLL_DefWindowProcA
pop ebx
mov esp, ebp
pop ebp
ret 0x10