Function at 0x42298a
Capabilities:
Create process on windows
Get common file path
Write and execute a file
Write file on windows

Disassembly:
sub esp, 0x214
push ebx
push ebp
push esi
mov esi, 0x4e20
push edi
push esi
call fcn.0049d5ae
pop ecx
xor ebp, ebp
push ebp
push ebp
push esi
push eax
push 0xffffffffffffffff
mov dword [esp + 0x28], eax
push dword [esp + 0x240]
push ebp
push ebp
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [0x4bd5dc]
mov ecx, 0x81
mov dword [esp + 0x1c], eax
xor eax, eax
lea edi, [esp + 0x20]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x1c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push dword [esp + 0x22c]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [esp + 0x20]
push eax
call esi
lea eax, [esp + 0x1c]
push str._error_report.html
push eax
call esi
push ebp
push ebp
push 2
push ebp
push ebp
lea eax, [esp + 0x30]
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
or ecx, 0xffffffff
cmp ebx, ecx
mov dword [esp + 0x10], ebp
je 0x422d4d
lea eax, [esp + 0x10]
push ebp
mov edx, str._table_aligncenter__tr__td__n
push eax
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str._br__n
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str._form_idxxx_action
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
mov edi, dword [esp + 0x228]
lea eax, [esp + 0x10]
push ebp
push eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push dword [esp + 0x234]
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str._seiteKontakt
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str._methodpost__br__n
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str._input_typehidden_nameismyhdokdata_img_value_
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str._input_typehidden_nameismyhdokdata_img_value_
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, 0x4b2520
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str._input_typehidden_nameBetreff_value_
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str.Bug_Report
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
mov edi, dword [esp + 0x14]
lea eax, [esp + 0x10]
push ebp
push eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push dword [esp + 0x20]
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, 0x4b2520
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str._textarea_0_NAMEIhre_Frage__
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str.Bug_Report:
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
mov edi, dword [esp + 0x14]
lea eax, [esp + 0x10]
push ebp
push eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push dword [esp + 0x20]
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, 0x4b15b0
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, 0x4b24b4
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x18]
push eax
call fcn.00468ed9
mov edi, 0x4e20
push edi
call fcn.0049d5ae
pop ecx
mov dword [esp + 0x18], eax
pop ecx
push ebp
lea ecx, [esp + 0x1c]
call fcn.00403c58
push ebp
push ebp
push edi
mov edi, dword [esp + 0x20]
push edi
push 0xffffffffffffffff
push eax
push ebp
push ebp
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [esp + 0x10]
push ebp
push eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push dword [esp + 0x20]
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str.__textarea_
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, 0x4b15b0
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, 0x4b15b0
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str.__form___td___tr___table__n
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str._script__n
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str.el_fdocument.getElementById__xxx____el_f.submit____n
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
lea eax, [esp + 0x10]
push ebp
mov edx, str.__script__n
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push ebx
call esi
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x18]
call fcn.004038fb
push 5
push ebp
lea eax, [esp + 0x24]
push ebp
push eax
push str.open
push ebp
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x214
ret