Function at 0x4337e4
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x98
mov eax, dword [0x47e520]
push ebx
push esi
mov esi, ecx
push edi
push 0x80
lea ecx, [ebp - 0x1c]
mov dword [ebp - 8], eax
mov dword [ebp - 0x1c], eax
call fcn.00408b26
mov ax, word [ebp + 0xc]
cmp ax, 0xe141
jne 0x433825
xor ebx, ebx
push ebx
push ebx
push 0x10
push dword [esi + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x4338a3
cmp ax, 0xe102
jne 0x43384d
xor ebx, ebx
push ebx
push ebx
push 0x229
push dword [esi + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push dword [esi + 8]
call fcn.00433618
pop ecx
pop ecx
push 1
pop ebx
jmp 0x4338a3
xor ebx, ebx
cmp ax, 0x8006
jne 0x4338bc
push dword [esi + 8]
call fcn.0043362e
pop ecx
mov eax, dword [ebp - 8]
cmp dword [eax - 8], 3
jle 0x4338a3
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 4]
push eax
call fcn.00449c20
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004015b6
push 5
push ebx
push ebx
push dword [eax]
push str.open
push dword [esi + 4]
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp + 0xc]
call fcn.0040139c
lea ecx, [ebp - 4]
call fcn.0040139c
lea ecx, [ebp - 0x1c]
call fcn.0040139c
lea ecx, [ebp - 8]
call fcn.0040139c
pop edi
mov eax, ebx
pop esi
pop ebx
leave
ret 0x10
cmp ax, 0xa7da
jne 0x4338fb
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp + 0xc]
push eax
push ebx
push 0x229
mov dword [ebp + 0xc], ebx
push dword [esi + 8]
call edi
cmp eax, ebx
je 0x43385e
cmp dword [ebp + 0xc], ebx
push ebx
push eax
je 0x4338f4
push 0x223
push dword [esi + 8]
call edi
jmp 0x43385e
push 0x225
jmp 0x4338ea
cmp ax, 0x8031
jne 0x4339ae
lea ecx, [ebp - 0x18]
call fcn.0045839f
lea eax, [ebp - 0x10]
push eax
call fcn.0044ade5
pop ecx
push eax
push 0x48042c
lea eax, [ebp - 0x14]
push 0xe
push eax
call fcn.0044bfce
pop ecx
pop ecx
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.00408569
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004015b6
lea ecx, [ebp - 0xc]
call fcn.0040139c
lea ecx, [ebp - 0x14]
call fcn.0040139c
lea ecx, [ebp - 0x10]
call fcn.0040139c
mov eax, dword [ebp + 0xc]
push ecx
mov ecx, esp
cmp dword [eax - 0xc], ebx
jl 0x433972
mov dword [ecx], eax
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x433981
mov eax, dword [0x47e520]
mov dword [ecx], eax
push dword [ebp + 0xc]
call fcn.0040833f
push ecx
mov ecx, esp
push 0x488b98
call fcn.004013c8
push dword [esi + 4]
lea ecx, [ebp - 0x18]
call fcn.004583cb
lea ecx, [ebp + 0xc]
call fcn.0040139c
lea ecx, [ebp - 0x18]
call fcn.004583c4
jmp 0x43385e
cmp ax, 0x8032
jne 0x433a74
lea eax, [ebp - 0xc]
push ebx
push eax
call fcn.0044a4e0
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
call fcn.0045839f
lea eax, [ebp - 4]
push eax
call fcn.0044ade5
pop ecx
push eax
push 0x48042c
lea eax, [ebp - 0x14]
push 0xe
push eax
call fcn.0044bfce
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00408569
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004015b6
lea ecx, [ebp - 0x10]
call fcn.0040139c
lea ecx, [ebp - 0x14]
call fcn.0040139c
lea ecx, [ebp - 4]
call fcn.0040139c
mov eax, dword [ebp + 0xc]
push ecx
mov ecx, esp
cmp dword [eax - 0xc], ebx
jl 0x433a31
mov dword [ecx], eax
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x433a40
mov eax, dword [0x47e520]
mov dword [ecx], eax
push dword [ebp + 0xc]
call fcn.0040833f
push ecx
lea eax, [ebp - 0xc]
mov ecx, esp
push eax
call fcn.00401356
push dword [esi + 4]
lea ecx, [ebp - 0x18]
call fcn.004583cb
lea ecx, [ebp + 0xc]
call fcn.0040139c
lea ecx, [ebp - 0x18]
call fcn.004583c4
lea ecx, [ebp - 0xc]
call fcn.0040139c
jmp 0x43385e
cmp ax, 0x800a
jne 0x433acc
push 1
lea ecx, [ebp - 0x98]
call fcn.00402477
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov edi, eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x90]
push eax
push 0x492fe0
call fcn.00405ea5
push ebx
push 0x408f00
push edi
push 0xca
push dword [0x492fe8]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
lea ecx, [ebp - 0x7c]
call fcn.004077b1
jmp 0x43385e
cmp ax, 0x800e
jne 0x433b07
lea eax, [ebp - 4]
push 0xc
push eax
call fcn.0044bfce
pop ecx
pop ecx
push eax
lea eax, [ebp + 0xc]
push str._KontaktBetreff
push eax
call fcn.004085b5
push eax
lea ecx, [ebp - 8]
call fcn.00401522
lea ecx, [ebp + 0xc]
call fcn.0040139c
lea ecx, [ebp - 4]
jmp 0x433a6a
cmp ax, 0x800d
jne 0x433b2e
mov edi, str._Kontakt
mov eax, edi
test eax, eax
je 0x433b1f
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
push eax
lea ecx, [ebp - 8]
call fcn.0040148d
jmp 0x43385e
cmp ax, 0x808f
jne 0x433b8a
mov eax, dword [0x491c1c]
cmp dword [eax - 0xc], ebx
jl 0x433b4d
mov dword [ebp + 0xc], eax
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x433b5f
mov ecx, dword [0x47e520]
push eax
mov dword [ebp + 0xc], ecx
lea ecx, [ebp + 0xc]
call fcn.0040833f
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 4]
push 0x4803d8
push eax
call fcn.004085b5
push eax
lea ecx, [ebp - 8]
call fcn.00401522
lea ecx, [ebp - 4]
call fcn.0040139c
lea ecx, [ebp + 0xc]
jmp 0x433a6a
cmp ax, 0x8090
jne 0x433c19
cmp dword [0x4819a8], ebx
mov eax, str.Thanks
jne 0x433ba6
mov eax, str.Danke
push eax
lea ecx, [ebp + 0xc]
call fcn.004013c8
lea eax, [ebp + 0xc]
lea ecx, [ebp - 0xc]
push eax
push 0x47fc70
call fcn.004013c8
push eax
push 0x491c1c
lea eax, [ebp - 0x14]
push str._seiteFreeware_
push eax
call fcn.004085b5
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004015b6
push eax
lea eax, [ebp - 4]
push eax
call fcn.004015b6
push eax
lea ecx, [ebp - 8]
call fcn.00401522
lea ecx, [ebp - 4]
call fcn.0040139c
lea ecx, [ebp - 0x10]
call fcn.0040139c
lea ecx, [ebp - 0x14]
call fcn.0040139c
lea ecx, [ebp - 0xc]
call fcn.0040139c
lea ecx, [ebp + 0xc]
jmp 0x433a6a
cmp ax, 0x800c
jne 0x433c31
push str._Freeware
lea ecx, [ebp - 8]
call fcn.0040833f
jmp 0x43385e
cmp ax, 0x800f
jne 0x433c6c
lea eax, [ebp - 4]
push 0xd
push eax
call fcn.0044bfce
pop ecx
pop ecx
push eax
lea eax, [ebp + 0xc]
push str._KontaktBetreff
push eax
call fcn.004085b5
push eax
lea ecx, [ebp - 8]
call fcn.00401522
lea ecx, [ebp + 0xc]
call fcn.0040139c
lea ecx, [ebp - 4]
jmp 0x433a6a
cmp ax, 0x852c
jne 0x433cd5
push str.faq0
lea ecx, [ebp - 0xc]
call fcn.004013c8
push str._seitefaq_
lea ecx, [ebp + 0xc]
call fcn.004013c8
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp + 0xc]
push 0x491c1c
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004015b6
push eax
lea eax, [ebp - 4]
push eax
call fcn.004015b6
push eax
lea ecx, [ebp - 8]
call fcn.00401522
lea ecx, [ebp - 4]
call fcn.0040139c
lea ecx, [ebp - 0x10]
call fcn.0040139c
lea ecx, [ebp + 0xc]
call fcn.0040139c
lea ecx, [ebp - 0xc]
jmp 0x433a6a
cmp ax, 0x8593
jne 0x433d13
push str._pageWindows_Info_
lea ecx, [ebp + 0xc]
call fcn.004013c8
lea eax, [ebp + 0xc]
push 0x491c1c
push eax
lea eax, [ebp - 4]
push eax
call fcn.004015b6
push eax
lea ecx, [ebp - 8]
call fcn.00401522
lea ecx, [ebp - 4]
call fcn.0040139c
lea ecx, [ebp + 0xc]
jmp 0x433a6a
cmp ax, 0xe146
jne 0x433d26
push dword [esi + 4]
call fcn.0044083b
jmp 0x43385d
cmp ax, 0xe150
jne 0x433d43
xor ebx, ebx
push ebx
push ebx
push 0x224
push dword [esi + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x433848
cmp ax, 0xe151
jne 0x43385e
push 1
pop ebx
push ebx
push 0
push 0x224
push dword [esi + 8]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4338a3