Function at 0x434de2
Capabilities:
Create process on windows
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47af1d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5dc
mov dword [ebp - 0x5b8], ecx
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0x18]
call fcn.00402510
mov dword [ebp - 4], 0
push str.PROTOKOLLDRUCKERMODUS
call fcn.0042f963
push eax
lea ecx, [ebp - 0x18]
call fcn.00470581
push str.TEXT
lea eax, [ebp - 0x18]
push eax
call fcn.004048e0
and eax, 0xff
test eax, eax
je 0x434e4f
push 0
call fcn.00428f34
jmp 0x434e5b
call fcn.00429164
push 1
call fcn.00428f34
push 0x490eac
mov ecx, dword [ebp - 0x5b8]
add ecx, 0xa0
call fcn.00402550
push eax
call fcn.00446c3e
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x434e8f
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.00446b90
add esp, 4
push str.DATEI
mov ecx, dword [ebp - 0x5b8]
add ecx, 0x68
call fcn.00402530
test eax, eax
je 0x435475
push 0x490eb8
mov ecx, dword [ebp - 0x5b8]
add ecx, 0x9c
call fcn.00402550
push eax
call fcn.00446c3e
add esp, 8
mov edx, dword [ebp - 0x5b8]
mov dword [edx + 0x8c], eax
mov eax, dword [ebp - 0x5b8]
cmp dword [eax + 0x8c], 0
jne 0x434f2c
push 0x2817
call fcn.00416903
add esp, 4
push eax
call fcn.00434022
add esp, 4
call fcn.00428f12
test eax, eax
je 0x434f08
call fcn.00429173
mov dword [ebp - 0x588], 0xffffffff
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00470444
mov eax, dword [ebp - 0x588]
jmp 0x435665
push 0x490ebc
mov ecx, dword [ebp - 0x5b8]
add ecx, 0x68
call fcn.00402530
test eax, eax
jne 0x434f91
cmp dword [ebp + 8], 0
jne 0x434f91
push 0x202
mov ecx, dword [ebp - 0x5b8]
add ecx, 0x7c
push ecx
mov ecx, dword [ebp - 0x5b8]
add ecx, 0xb4
call fcn.00402550
push eax
mov ecx, dword [ebp - 0x5b8]
add ecx, 0x98
call fcn.00402550
push eax
mov ecx, dword [ebp - 0x5b8]
call fcn.0043655f
mov edx, dword [ebp - 0x10]
or edx, eax
mov dword [ebp - 0x10], edx
jmp 0x434fd4
push 2
mov eax, dword [ebp - 0x5b8]
add eax, 0x7c
push eax
mov ecx, dword [ebp - 0x5b8]
add ecx, 0xac
call fcn.00402550
push eax
mov ecx, dword [ebp - 0x5b8]
add ecx, 0xa0
call fcn.00402550
push eax
mov ecx, dword [ebp - 0x5b8]
call fcn.0043655f
mov ecx, dword [ebp - 0x10]
or ecx, eax
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], 0xc
jne 0x43502e
mov dword [ebp - 0x10], 0
push 0x2814
call fcn.00416903
add esp, 4
mov dword [ebp - 0xa8], eax
mov edx, dword [ebp - 0x5b8]
mov eax, dword [edx + 0xac]
push eax
mov ecx, dword [ebp - 0xa8]
push ecx
lea edx, [ebp - 0x4a8]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0x40
push str.Note
lea eax, [ebp - 0x4a8]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [ebp - 0x10], 0
je 0x43507c
push 0x2819
call fcn.00416903
add esp, 4
push eax
call fcn.00434022
add esp, 4
call fcn.00428f12
test eax, eax
je 0x435058
call fcn.00429173
mov dword [ebp - 0x58c], 0xffffffff
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00470444
mov eax, dword [ebp - 0x58c]
jmp 0x435665
cmp dword [ebp - 0x10], 0
jne 0x435117
mov ecx, dword [ebp - 0x5b8]
mov edx, dword [ecx + 0x8c]
push edx
push 0x84
lea eax, [ebp - 0x9c]
push eax
call fcn.0044876c
add esp, 0xc
test eax, eax
je 0x435117
push 0xa
lea ecx, [ebp - 0x9c]
push ecx
call fcn.00447350
add esp, 8
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 0
je 0x4350d4
mov edx, dword [ebp - 0x4ac]
mov byte [edx], 0
lea eax, [ebp - 0x9c]
push eax
push 0x490ed0
push 0x490ee0
mov ecx, dword [ebp - 0x5b8]
call fcn.00436c6d
mov ecx, dword [ebp - 0x5b8]
mov edx, dword [ecx + 0x7c]
push edx
push 0x490ef0
mov ecx, dword [ebp - 0x5b8]
call fcn.00437aa3
mov ecx, dword [ebp - 0x10]
or ecx, eax
mov dword [ebp - 0x10], ecx
jmp 0x43507c
mov edx, dword [ebp - 0x5b8]
mov eax, dword [edx + 0x7c]
push eax
mov ecx, dword [ebp - 0x5b8]
call fcn.00438214
mov ecx, dword [ebp - 0x10]
or ecx, eax
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x5b8]
mov eax, dword [edx + 0x8c]
push eax
call fcn.00446b90
add esp, 4
mov ecx, dword [ebp - 0x10]
or ecx, eax
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x5b8]
mov eax, dword [edx + 0x7c]
push eax
mov ecx, dword [ebp - 0x5b8]
call fcn.00438132
mov ecx, dword [ebp - 0x10]
or ecx, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0xa0]
call fcn.00402510
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa4]
call fcn.00402510
mov byte [ebp - 4], 2
push str.PROTOKOLLDRUCKERNAME
call fcn.0042f963
push eax
lea ecx, [ebp - 0xa0]
call fcn.00470581
push str.PROTOKOLLDRUCKERPORT
call fcn.0042f963
push eax
lea ecx, [ebp - 0xa4]
call fcn.00470581
lea ecx, [ebp - 0xa4]
call fcn.00402550
push eax
lea ecx, [ebp - 0xa0]
call fcn.00402550
push eax
push str.ELDI
mov ecx, dword [ebp - 0x5b8]
add ecx, 0xa0
call fcn.00402550
push eax
call fcn.00429182
test eax, eax
jne 0x43521f
push str.c:wineldicfgdaten_setup.dat
push 5
push str.PrinterTimeOut
push str.SETUP
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [ebp - 0x4b0], eax
mov edx, dword [ebp - 0x4b0]
push edx
mov ecx, dword [ebp - 0x5b8]
call fcn.004360c5
cmp dword [ebp - 0x10], 0
je 0x43528b
push 0x281b
call fcn.00416903
add esp, 4
push eax
call fcn.00434022
add esp, 4
call fcn.00428f12
test eax, eax
je 0x435249
call fcn.00429173
mov dword [ebp - 0x590], 0xffffffff
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa4]
call fcn.00470444
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa0]
call fcn.00470444
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00470444
mov eax, dword [ebp - 0x590]
jmp 0x435665
push str.BILDSCHIRM
mov ecx, dword [ebp - 0x5b8]
add ecx, 0x68
call fcn.00402530
test eax, eax
jne 0x435452
cmp dword [ebp + 8], 0
jne 0x435452
push str.INSECUREWINS
call fcn.0042f963
test eax, eax
je 0x435325
push 3
mov eax, dword [ebp - 0x5b8]
add eax, 0x98
push eax
push 0x3bdc
call fcn.00416903
add esp, 4
push eax
lea ecx, [ebp - 0x594]
push ecx
call fcn.00470701
mov dword [ebp - 0x5bc], eax
mov edx, dword [ebp - 0x5bc]
mov dword [ebp - 0x5c0], edx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x5c0]
call fcn.00402550
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 0x4b4], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x594]
call fcn.00470444
jmp 0x43538a
push 3
mov eax, dword [ebp - 0x5b8]
add eax, 0x98
push eax
push 0x281c
call fcn.00416903
add esp, 4
push eax
lea ecx, [ebp - 0x598]
push ecx
call fcn.00470701
mov dword [ebp - 0x5c4], eax
mov edx, dword [ebp - 0x5c4]
mov dword [ebp - 0x5c8], edx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x5c8]
call fcn.00402550
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 0x4b4], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x598]
call fcn.00470444
call fcn.00428f12
test eax, eax
je 0x435398
call fcn.00429173
cmp dword [ebp - 0x4b4], 0x20
jae 0x43540e
mov eax, dword [ebp - 0x4b4]
push eax
push str.Bildschirmausgabe:__Fehler__d
lea ecx, [ebp - 0x4f4]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x4f4]
push edx
call fcn.00434022
add esp, 4
mov dword [ebp - 0x59c], 0xffffffff
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa4]
call fcn.00470444
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa0]
call fcn.00470444
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00470444
mov eax, dword [ebp - 0x59c]
jmp 0x435665
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x5a0], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa4]
call fcn.00470444
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa0]
call fcn.00470444
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00470444
mov eax, dword [ebp - 0x5a0]
jmp 0x435665
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa4]
call fcn.00470444
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa0]
call fcn.00470444
jmp 0x435638
push 0x281e
call fcn.00416903
add esp, 4
push eax
mov ecx, dword [ebp - 0x5b8]
add ecx, 0x78
push ecx
push 0x281d
call fcn.00416903
add esp, 4
push eax
lea edx, [ebp - 0x5a4]
push edx
call fcn.00470701
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x5d0], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x5d0]
push ecx
lea edx, [ebp - 0x4fc]
push edx
call fcn.0047068d
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x5a4]
call fcn.00470444
lea ecx, [ebp - 0x4fc]
call fcn.00402550
push eax
call fcn.004488aa
add esp, 4
lea ecx, [ebp - 0x4fc]
call fcn.00402550
push eax
mov ecx, dword [ebp - 0x5b8]
add ecx, 0x9c
call fcn.00402550
push eax
call fcn.0044887c
add esp, 8
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x4f8], 0
je 0x435605
push 0x2820
call fcn.00416903
add esp, 4
push eax
lea eax, [ebp - 0x4fc]
push eax
push 0x281f
call fcn.00416903
add esp, 4
push eax
lea ecx, [ebp - 0x5a8]
call fcn.004704b2
mov dword [ebp - 0x5d4], eax
mov ecx, dword [ebp - 0x5d4]
mov dword [ebp - 0x5d8], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x5d8]
push edx
lea eax, [ebp - 0x5ac]
push eax
call fcn.00470627
mov dword [ebp - 0x5dc], eax
mov ecx, dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], ecx
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x5e0]
push edx
lea eax, [ebp - 0x5b0]
push eax
call fcn.0047068d
mov dword [ebp - 0x5e4], eax
mov ecx, dword [ebp - 0x5e4]
mov dword [ebp - 0x5e8], ecx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x5e8]
call fcn.00402550
push eax
call fcn.00434022
add esp, 4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x5b0]
call fcn.00470444
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x5ac]
call fcn.00470444
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x5a8]
call fcn.00470444
jmp 0x435629
push 0x1000
lea edx, [ebp - 0x584]
push edx
mov ecx, dword [ebp - 0x5b8]
add ecx, 0x9c
call fcn.00402550
push eax
call dword [sym.imp.KERNEL32.dll_OpenFile]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4fc]
call fcn.00470444
call fcn.00428f12
test eax, eax
je 0x435646
call fcn.00429173
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00470444
mov eax, dword [ebp - 0x5b4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4