Function at 0x4230c0
Capabilities:
Access peb ldr_data
Check os version
Terminate process

Disassembly:
push esi
mov esi, ecx
push 1
mov byte [esi + 0x1c6], 1
call fcn.0041d5d0
push 0
push str.CaptchaConfirmedPage
mov ecx, esi
call fcn.0041bc70
mov eax, dword [esi]
lea ecx, [esi + 0x108]
push ecx
mov ecx, esi
call dword [eax + 4]
pop esi
ret
push esi
mov esi, ecx
mov eax, dword [esi + 0x178]
cmp eax, 0xe
jne 0x41ec4b
cmp dword [esi + 0x198], 6
jne 0x41ec8b
cmp eax, eax
je 0x41ec55
mov dword [esi + 0x198], 0
push str.SomeInterfacePage
mov ecx, esi
mov dword [esi + 0x178], 0xe
call fcn.0041bde0
mov ecx, esi
call fcn.0041da30
test al, al
jne 0x41ec8b
push 0
push str.GoToSendPage_SI_Error
mov ecx, esi
call fcn.0041bc70
mov ecx, esi
jmp fcn.0041de80
pop esi
ret
push esi
push 0
push str.Doc_PP._Exit
mov esi, ecx
call fcn.0041bc70
push 0
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov ecx, esi
jmp fcn.0041de80
push esi
push str.Error_Code._Exit.
mov esi, ecx
call fcn.0041bde0
push 0
mov ecx, esi
call fcn.0041d5d0
mov ecx, esi
jmp fcn.0041de80
push 0xffffffffffffffff
push 0x45e084
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc4
mov eax, dword [0x4774f0]
push ebx
push esi
push edi
push 1
mov esi, ecx
push 3
lea ecx, [esp + 0x30]
mov dword [esp + 0xd4], eax
call fcn.00404000
xor ebx, ebx
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xc8], 0xf
mov dword [esp + 0xc4], ebx
mov byte [esp + 0xb4], bl
lea eax, [esp + 0xc]
push eax
mov ecx, esi
mov byte [esp + 0xdc], 1
call fcn.0041b710
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xbc]
mov byte [esp + 0xe4], 2
call fcn.00403490
mov eax, dword [esp + 0x24]
mov edi, 0x10
cmp eax, edi
mov byte [esp + 0xd8], 1
jb 0x421ec9
mov ecx, dword [esp + 0x10]
push ecx
call fcn.00446038
add esp, 4
cmp byte [esi + 0x1ce], bl
je 0x422021
mov edx, dword [esp + 0xc4]
push 9
push str.InboxPage
push edx
push ebx
lea ecx, [esp + 0xc0]
call fcn.004018c0
test eax, eax
jne 0x421f2d
mov ecx, dword [esi + 0x1c0]
inc ecx
mov eax, ecx
cmp eax, 2
mov dword [esi + 0x1c0], ecx
jge 0x421f2d
push str.StartMailer_After_Parse_Crash
mov ecx, esi
mov dword [esi + 0x198], ebx
mov dword [esi + 0x1bc], ebx
call fcn.0041bef0
mov ecx, esi
call fcn.0041fed0
jmp 0x42207a
mov ecx, dword [esi + 0x188]
push ecx
push 0x46207c
lea edx, [esp + 0xb8]
push edx
lea eax, [esp + 0x3c]
push str.Exit_By_Timeout_From
push eax
call fcn.00403000
add esp, 8
push eax
call fcn.00406380
add esp, 8
push eax
call fcn.00403000
add esp, 8
mov ecx, eax
call fcn.00403320
lea ecx, [esp + 0xc]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00405580
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0x140]
mov byte [esp + 0xe4], 3
call fcn.00403490
cmp dword [esp + 0x24], edi
mov byte [esp + 0xd8], 1
jb 0x421fac
mov edx, dword [esp + 0x10]
push edx
call fcn.00446038
add esp, 4
mov eax, dword [esp + 0xc4]
push 0xb
push str.UnknownPage
push eax
push ebx
lea ecx, [esp + 0xc0]
call fcn.004018c0
test eax, eax
jne 0x421fd3
mov ecx, esi
call fcn.00421af0
lea ecx, [esp + 0xc]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00405580
cmp dword [eax + 0x18], edi
mov byte [esp + 0xd8], 4
jb 0x421ff3
mov eax, dword [eax + 4]
jmp 0x421ff6
add eax, 4
push ebx
push eax
mov ecx, esi
call fcn.0041bc70
cmp dword [esp + 0x24], edi
mov byte [esp + 0xd8], 1
jb 0x42201a
mov edx, dword [esp + 0x10]
push edx
call fcn.00446038
add esp, 4
mov ecx, esi
jmp fcn.0041de80
push ebx
push str.goToWelcomePage
mov ecx, esi
mov byte [esi + 0x1ce], 1
call fcn.0041bc70
mov ecx, esi
call fcn.0041ae40
mov eax, dword [esi]
push 4
mov ecx, esi
mov dword [esi + 0x198], ebx
mov dword [esi + 0x1bc], ebx
call dword [eax + 0x20]
mov edx, dword [esi]
push 5
mov ecx, esi
call dword [edx + 0x20]
mov eax, dword [esi + 0x190]
mov edx, dword [esi]
push 0x1d4c0
push 1
mov ecx, esi
mov dword [esi + 0x194], eax
mov dword [esi + 0x190], ebx
call dword [edx + 0x1c]
cmp dword [esp + 0xc8], edi
jb 0x422093
mov eax, dword [esp + 0xb4]
push eax
call fcn.00446038
add esp, 4
lea ecx, [esp + 0x7c]
mov byte [esp + 0xb4], bl
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xc8], 0xf
mov dword [esp + 0xd8], 0xffffffff
call fcn.004026f0
lea ecx, [esp + 0x7c]
mov dword [esp + 0x7c], 0x460c84
call fcn.0043ef7a
mov ecx, dword [esp + 0xd0]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0xc4]
pop ebx
call fcn.004305ce
add esp, 0xd0
ret
push 0xffffffffffffffff
push 0x45e175
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd4
mov eax, dword [0x4774f0]
push esi
mov esi, ecx
mov dword [esp + 0xd4], eax
mov eax, dword [esi + 0x178]
cmp eax, 5
jne 0x422c92
cmp dword [esi + 0x198], 6
jne 0x422f48
push ebx
xor ebx, ebx
cmp eax, 5
je 0x422ca0
mov dword [esi + 0x198], ebx
push edi
mov dword [esi + 0x178], 5
mov dword [esp + 0xc], ebx
mov dword [esp + 0xe8], ebx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0xd8], 0xf
mov dword [esp + 0xd4], ebx
mov byte [esp + 0xc4], bl
push 1
push 3
lea ecx, [esp + 0x40]
mov byte [esp + 0xf0], 3
call fcn.00404000
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
mov byte [esp + 0xec], 4
call dword [eax]
mov edi, dword [eax]
cmp edi, ebx
je 0x422d0b
mov edx, dword [edi]
push edi
call dword [edx + 4]
mov eax, dword [esp + 0xc]
cmp eax, ebx
je 0x422d19
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x14]
cmp eax, ebx
mov dword [esp + 0xc], edi
je 0x422d2b
mov edx, dword [eax]
push eax
call dword [edx + 8]
cmp dword [esp + 0xc], ebx
push ebp
je 0x422d89
push str.error
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esi + 4]
call fcn.00412450
mov edi, dword [eax]
cmp edi, ebx
je 0x422d55
mov edx, dword [edi]
push edi
call dword [edx + 4]
mov eax, dword [esp + 0x18]
cmp eax, ebx
mov dword [esp + 0x1c], edi
je 0x422d67
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp edi, ebx
je 0x422d89
mov edx, dword [edi]
lea eax, [esp + 0x14]
push eax
push edi
call dword [edx + 0xf0]
test eax, eax
jne 0x422d89
mov eax, dword [esp + 0x14]
cmp eax, ebx
jne 0x422e09
push 0xa
push str.some_error
lea ecx, [esp + 0xcc]
call fcn.00403690
mov eax, dword [esi + 0x188]
lea edx, [esp + 0xc4]
push edx
push str.._Message_:
push eax
lea ecx, [esp + 0x50]
push str.ErrorSendPage_at
push ecx
call fcn.00403000
add esp, 8
mov ecx, eax
call fcn.00403320
push eax
call fcn.00403000
add esp, 8
push eax
call fcn.00406380
add esp, 8
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x40]
call fcn.00405580
mov ecx, dword [eax + 0x18]
mov edi, 0x10
cmp ecx, edi
mov byte [esp + 0xec], 7
jb 0x42308d
mov eax, dword [eax + 4]
jmp 0x423090
push eax
lea ecx, [esp + 0x24]
push ecx
call fcn.00412a10
add esp, 8
or ebp, 0xffffffff
push ebp
push ebx
push eax
lea ecx, [esp + 0xd0]
mov byte [esp + 0xf8], 5
call fcn.00403490
lea ecx, [esp + 0x20]
mov byte [esp + 0xec], 4
call fcn.00402e40
lea edx, [esp + 0xc4]
push str._You_have_sent_the_maximum_number_of_messages_allowed_in_a_24_hour_period._To_save_this_message_to_send_later__click_Save_draft_above.
push edx
call fcn.00402d50
add esp, 8
test al, al
je 0x422ec0
mov eax, dword [esi + 0x188]
push eax
lea ecx, [esp + 0x48]
push str.Messages_Limit_Exceeded_At_Mail
push ecx
call fcn.00403000
add esp, 8
mov ecx, eax
call fcn.00403320
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x40]
call fcn.00405580
cmp dword [eax + 0x18], 0x10
mov byte [esp + 0xec], 6
jb 0x422e9c
mov eax, dword [eax + 4]
jmp 0x422e9f
add eax, 4
push ebx
push eax
mov ecx, esi
call fcn.0041bc70
lea ecx, [esp + 0x20]
mov byte [esp + 0xec], 4
call fcn.00402e40
mov ecx, esi
jmp fcn.0041de80
push ebx
push str.confirm_your_e_mail_account
lea ecx, [esp + 0xcc]
call fcn.004074a0
cmp eax, ebp
je 0x422f6a
mov ecx, esi
call fcn.0041e020
lea ecx, [esp + 0x90]
mov byte [esp + 0xec], 3
call fcn.004026f0
lea ecx, [esp + 0x90]
mov dword [esp + 0x90], 0x460c84
call fcn.0043ef7a
lea ecx, [esp + 0xc4]
call fcn.00402e40
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [edi]
push edi
mov byte [esp + 0xf0], bl
call dword [ecx + 8]
mov eax, dword [esp + 0x10]
cmp eax, ebx
mov dword [esp + 0xec], ebp
je 0x422f45
mov edx, dword [eax]
push eax
call dword [edx + 8]
pop ebp
pop edi
pop ebx
mov ecx, dword [esp + 0xd8]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0xd4]
pop esi
call fcn.004305ce
add esp, 0xe0
ret
push ebx
push str.not_in_the_correct_e_mail_format
lea ecx, [esp + 0xcc]
call fcn.004074a0
cmp eax, ebp
je 0x422ff9
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
call fcn.004229e0
lea ecx, [esp + 0x90]
mov byte [esp + 0xec], 3
call fcn.004026f0
lea ecx, [esp + 0x90]
mov dword [esp + 0x90], 0x460c84
call fcn.0043ef7a
lea ecx, [esp + 0xc4]
call fcn.00402e40
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edx, dword [edi]
push edi
mov byte [esp + 0xf0], bl
call dword [edx + 8]
mov eax, dword [esp + 0x10]
cmp eax, ebx
mov dword [esp + 0xec], ebp
je 0x422f45
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x422f45
push ebx
push str.blocked_from_sending
lea ecx, [esp + 0xcc]
call fcn.004074a0
cmp eax, ebp
je 0x423018
mov ecx, esi
call fcn.00420f20
jmp 0x423039
push ebx
push str.the_server_was_busy
lea ecx, [esp + 0xcc]
call fcn.004074a0
cmp eax, ebp
je 0x422d9c
mov ecx, esi
call fcn.00420620
lea ecx, [esp + 0x90]
mov byte [esp + 0xec], 3
call fcn.004026f0
lea ecx, [esp + 0x90]
mov dword [esp + 0x90], 0x460c84
call fcn.0043ef7a
lea ecx, [esp + 0xc4]
call fcn.00402e40
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [edi]
push edi
mov byte [esp + 0xf0], bl
call dword [eax + 8]
jmp 0x422fdb
add eax, 4
push ebx
push eax
mov ecx, esi
call fcn.0041bc70
cmp dword [esp + 0x38], edi
mov byte [esp + 0xec], 4
jb 0x4230b4
mov eax, dword [esp + 0x24]
push eax
call fcn.00446038
add esp, 4
mov ecx, esi
jmp fcn.0041de80
push esi
mov esi, ecx
mov eax, dword [esi]
call dword [eax + 0x14]
test al, al
je 0x4230d3
mov ecx, esi
jmp 0x41f700
mov eax, dword [esi + 0x198]
cmp eax, 0xa
lea ecx, [eax + 1]
mov dword [esi + 0x198], ecx
jle 0x4230ef
mov ecx, esi
pop esi
jmp 0x421e20
cmp ecx, 4
jge 0x4230ff
mov ecx, esi
call fcn.00418890
test al, al
je 0x42316b
mov ecx, esi
call fcn.004170b0
test al, al
mov ecx, esi
je 0x423111
jmp 0x41fe80
call fcn.0041a0a0
test al, al
mov ecx, esi
je 0x423122
pop esi
jmp 0x422c50
call fcn.00417960
test al, al
mov ecx, esi
je 0x423133
pop esi
jmp fcn.004227c0
call fcn.00417de0
test al, al
mov ecx, esi
je 0x423144
pop esi
jmp fcn.004200f0
call fcn.00418040
test al, al
mov ecx, esi
je 0x42316d
mov edx, dword [esi]
push 4
call dword [edx + 0x20]
mov ecx, esi
call fcn.0041e340
mov eax, dword [esi]
push 0x1388
push 4
mov ecx, esi
call dword [eax + 0x1c]
pop esi
ret
call fcn.00418190
test al, al
mov ecx, esi
je 0x42317e
pop esi
jmp 0x41e7f0
call fcn.00418ef0
test al, al
je 0x42316b
mov ecx, esi
pop esi
jmp 0x41ec30