Function at 0x401ac2
Capabilities:
Create process on windows
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x448
mov eax, dword [ebp + 0xc]
cmp eax, 2
je 0x402531
cmp eax, 0x111
je 0x402226
cmp eax, 1
jne 0x402542
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x14
mov dword [esp + 0x18], 0xc8
mov dword [esp + 0x14], 0xa
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], str.Bitte_geben_Sie_den_Link_ein:
mov dword [esp + 4], str.STATIC
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x1e
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], 0x28
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], str.Uni_Wien:
mov dword [esp + 4], str.STATIC
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0x3ea
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x1e
mov dword [esp + 0x18], 0x1f4
mov dword [esp + 0x14], 0x28
mov dword [esp + 0x10], 0x6e
mov dword [esp + 0xc], 0x508000c4
mov dword [esp + 8], 0x4740a2
mov dword [esp + 4], str.EDIT
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [0x47b138], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym.LoadLinks_HWND___
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x1e
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], 0x4b
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], str.u:space:
mov dword [esp + 4], str.STATIC
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0x3ea
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x1e
mov dword [esp + 0x18], 0x1f4
mov dword [esp + 0x14], 0x4b
mov dword [esp + 0x10], 0x6e
mov dword [esp + 0xc], 0x508000c4
mov dword [esp + 8], 0x4740a2
mov dword [esp + 4], str.EDIT
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [0x47b13c], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym.LoadLinks_HWND___
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x1e
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], 0x6e
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], str.u:find:
mov dword [esp + 4], str.STATIC
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0x3ea
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x1e
mov dword [esp + 0x18], 0x1f4
mov dword [esp + 0x14], 0x6e
mov dword [esp + 0x10], 0x6e
mov dword [esp + 0xc], 0x508000c4
mov dword [esp + 8], 0x4740a2
mov dword [esp + 4], str.EDIT
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [0x47b140], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym.LoadLinks_HWND___
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x1e
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], 0x91
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], str.Webmail:
mov dword [esp + 4], str.STATIC
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0x3ea
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x1e
mov dword [esp + 0x18], 0x1f4
mov dword [esp + 0x14], 0x91
mov dword [esp + 0x10], 0x6e
mov dword [esp + 0xc], 0x508000c4
mov dword [esp + 8], 0x4740a2
mov dword [esp + 4], str.EDIT
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [0x47b144], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym.LoadLinks_HWND___
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x1e
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], 0xb4
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], str.Moodle:
mov dword [esp + 4], str.STATIC
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0x3ea
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x1e
mov dword [esp + 0x18], 0x1f4
mov dword [esp + 0x14], 0xb4
mov dword [esp + 0x10], 0x6e
mov dword [esp + 0xc], 0x508000c4
mov dword [esp + 8], 0x4740a2
mov dword [esp + 4], str.EDIT
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [0x47b148], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym.LoadLinks_HWND___
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x1e
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], 0xd7
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], str.u:search:
mov dword [esp + 4], str.STATIC
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0x3ea
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x1e
mov dword [esp + 0x18], 0x1f4
mov dword [esp + 0x14], 0xd7
mov dword [esp + 0x10], 0x6e
mov dword [esp + 0xc], 0x508000c4
mov dword [esp + 8], 0x4740a2
mov dword [esp + 4], str.EDIT
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [0x47b14c], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym.LoadLinks_HWND___
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x1e
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], 0xfa
mov dword [esp + 0x10], 0xa
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], str.Bibliothek:
mov dword [esp + 4], str.STATIC
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0x3ea
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x1e
mov dword [esp + 0x18], 0x1f4
mov dword [esp + 0x14], 0xfa
mov dword [esp + 0x10], 0x6e
mov dword [esp + 0xc], 0x508000c4
mov dword [esp + 8], 0x4740a2
mov dword [esp + 4], str.EDIT
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [0x47b150], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym.LoadLinks_HWND___
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0x3eb
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x14
mov dword [esp + 0x18], 0x46
mov dword [esp + 0x14], 0x122
mov dword [esp + 0x10], 0x1e
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], str.Speichern
mov dword [esp + 4], str.BUTTON
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 2
mov eax, dword [ebp + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x14
mov dword [esp + 0x18], 0x46
mov dword [esp + 0x14], 0x122
mov dword [esp + 0x10], 0x78
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], str.Abbrechen
mov dword [esp + 4], str.BUTTON
mov dword [esp], 0
call sym._CreateWindowExA_48
sub esp, 0x30
jmp 0x402567
mov eax, dword [ebp + 0x10]
movzx eax, ax
cmp eax, 2
je 0x4024bd
cmp eax, 0x3eb
jne 0x4024cd
mov dword [esp + 4], 0x20
mov dword [esp], 0x10
call method.std.operator_std::_Ios_Openmode__std::_Ios_Openmode_
mov dword [esp + 8], eax
mov dword [esp + 4], str.weblinks.txt
mov dword [esp], 0x47b040
call method.std::basic_ofstream_char__std::char_traits_char___.open_char_const__std::_Ios_Openmode_
mov dword [esp], 0x47b040
call method.std::basic_ofstream_char__std::char_traits_char___.is_open__
test al, al
je 0x402494
mov dword [ebp - 0xc], 0
jmp 0x402442
mov eax, dword [0x47b138]
mov dword [esp + 8], 0x400
lea edx, [ebp - 0x410]
mov dword [esp + 4], edx
mov dword [esp], eax
call sym._GetWindowTextA_12
sub esp, 0xc
lea eax, [ebp - 0x410]
mov dword [esp + 4], eax
mov dword [esp], 0x47b020
call fcn.0044f4b4
mov eax, dword [0x47b13c]
mov dword [esp + 8], 0x400
lea edx, [ebp - 0x410]
mov dword [esp + 4], edx
mov dword [esp], eax
call sym._GetWindowTextA_12
sub esp, 0xc
lea eax, [ebp - 0x410]
mov dword [esp + 4], eax
mov dword [esp], 0x47b024
call fcn.0044f4b4
mov eax, dword [0x47b140]
mov dword [esp + 8], 0x400
lea edx, [ebp - 0x410]
mov dword [esp + 4], edx
mov dword [esp], eax
call sym._GetWindowTextA_12
sub esp, 0xc
lea eax, [ebp - 0x410]
mov dword [esp + 4], eax
mov dword [esp], 0x47b028
call fcn.0044f4b4
mov eax, dword [0x47b144]
mov dword [esp + 8], 0x400
lea edx, [ebp - 0x410]
mov dword [esp + 4], edx
mov dword [esp], eax
call sym._GetWindowTextA_12
sub esp, 0xc
lea eax, [ebp - 0x410]
mov dword [esp + 4], eax
mov dword [esp], 0x47b02c
call fcn.0044f4b4
mov eax, dword [0x47b148]
mov dword [esp + 8], 0x400
lea edx, [ebp - 0x410]
mov dword [esp + 4], edx
mov dword [esp], eax
call sym._GetWindowTextA_12
sub esp, 0xc
lea eax, [ebp - 0x410]
mov dword [esp + 4], eax
mov dword [esp], 0x47b030
call fcn.0044f4b4
mov eax, dword [0x47b14c]
mov dword [esp + 8], 0x400
lea edx, [ebp - 0x410]
mov dword [esp + 4], edx
mov dword [esp], eax
call sym._GetWindowTextA_12
sub esp, 0xc
lea eax, [ebp - 0x410]
mov dword [esp + 4], eax
mov dword [esp], 0x47b034
call fcn.0044f4b4
mov eax, dword [0x47b150]
mov dword [esp + 8], 0x400
lea edx, [ebp - 0x410]
mov dword [esp + 4], edx
mov dword [esp], eax
call sym._GetWindowTextA_12
sub esp, 0xc
lea eax, [ebp - 0x410]
mov dword [esp + 4], eax
mov dword [esp], 0x47b038
call fcn.0044f4b4
mov eax, dword [ebp - 0xc]
shl eax, 2
add eax, 0x47b020
mov dword [esp + 4], eax
mov dword [esp], 0x47b040
call method.std::basic_ostream_char__std::char_traits_char____std::operator____char__std::char_traits_char___std.allocator_char____std::basic_ostream_char__std::char_traits_char_____std::basic_string_char__std::char_traits_char___std::allocator_char____const
mov dword [esp + 4], method.std::basic_ostream_char__std::char_traits_char____std::endl_char__std.char_traits_char____std::basic_ostream_char__std::char_traits_char____
mov dword [esp], eax
call method.std::ostream.operator___std::ostream____std::ostream__
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 6
setle al
test al, al
jne 0x40228c
mov dword [esp], 0x47b040
call method.std::basic_ofstream_char__std::char_traits_char___.close__
mov dword [esp + 0xc], 0x40
mov dword [esp + 8], str.Erfolg
mov dword [esp + 4], str.Links_erfolgreich_gespeichert_
mov dword [esp], 0
call sym._MessageBoxA_16
sub esp, 0x10
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym.LoadLinks_HWND___
jmp 0x40252f
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], str.Fehler
mov dword [esp + 4], str.Fehler_beim
mov dword [esp], 0
call sym._MessageBoxA_16
sub esp, 0x10
jmp 0x40252f
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._DestroyWindow_4
sub esp, 4
jmp 0x40252f
mov eax, dword [ebp + 0x10]
test ax, ax
je 0x40252e
mov eax, dword [ebp + 0x10]
cmp ax, 7
ja 0x40252e
mov eax, dword [ebp + 0x10]
movzx eax, ax
dec eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
shl eax, 2
add eax, 0x47b020
mov dword [esp], eax
call method.std::string.c_str___const
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], str.open
mov dword [esp], 0
call sym._ShellExecuteA_24
sub esp, 0x18
nop
jmp 0x402567
mov dword [esp], 0
call sym._PostQuitMessage_4
sub esp, 4
jmp 0x402567
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._DefWindowProcA_16
sub esp, 0x10
jmp 0x40256c
mov eax, 0
leave
ret 0x10