Function at 0x415d94
Capabilities:
Hide graphical window

Disassembly:
sub esp, 0x13c
mov eax, dword [0x436260]
xor eax, esp
mov dword [esp + 0x138], eax
push ebx
push ebp
xor ebx, ebx
mov dword [esp + 0x24], ebx
mov eax, dword [0x437688]
mov edx, dword [eax + 0xc]
push esi
mov esi, ecx
push edi
mov ecx, 0x437688
call edx
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
add eax, 0x10
mov dword [esp + 0x18], eax
mov eax, dword [esi + 4]
push 0x3ed
push eax
mov dword [esp + 0x130], 7
mov dword [esp + 0x12c], ebx
mov word [esp + 0x11c], bx
call edi
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.00410ea0
lea edx, [esp + 0x18]
push 0x42d964
push edx
call fcn.0040f3e0
add esp, 8
test al, al
je 0x415e02
push 8
push str.wangwang
jmp 0x415e42
lea eax, [esp + 0x18]
push 0x42d8c8
push eax
call fcn.0040f3e0
add esp, 8
test al, al
je 0x415e21
push 8
push str.cnalichn
jmp 0x415e42
lea ecx, [esp + 0x18]
push 0x42d83c
push ecx
call fcn.0040f3e0
add esp, 8
test al, al
je 0x41642a
push 8
push str.cntaobao
lea ecx, [esp + 0x118]
call fcn.004022d0
mov edx, dword [0x437688]
mov eax, dword [edx + 0xc]
mov ecx, 0x437688
call eax
mov ecx, dword [esi + 4]
push 0x3ee
add eax, 0x10
push ecx
mov dword [esp + 0x24], eax
call edi
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.00410ea0
lea eax, [esp + 0x1c]
push 0x42c550
push eax
call fcn.0040f3e0
add esp, 8
test al, al
jne 0x4163e1
lea ecx, [esp + 0x1c]
push 0x42d4b4
push ecx
call fcn.0040f3e0
add esp, 8
test al, al
jne 0x4163e1
mov edx, dword [0x437688]
mov eax, dword [edx + 0xc]
mov ecx, 0x437688
call eax
mov ecx, dword [esi + 4]
push 0x3f7
add eax, 0x10
push ecx
mov dword [esp + 0x28], eax
call edi
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.00410ea0
lea eax, [esp + 0x20]
push 0x42c550
push eax
call fcn.0040f3e0
add esp, 8
test al, al
jne 0x416326
lea ecx, [esp + 0x20]
push 0x42d498
push ecx
call fcn.0040f3e0
add esp, 8
test al, al
jne 0x416326
mov ecx, dword [esi + 0x3f0]
call fcn.0040d860
mov ecx, dword [esi + 0x3f0]
movzx edx, ax
push ebx
mov dword [esp + 0x14], edx
call fcn.0040d8a0
mov eax, dword [esp + 0x20]
cmp dword [eax - 4], 1
jle 0x415f57
mov eax, dword [eax - 0xc]
push eax
lea ecx, [esp + 0x24]
call fcn.004031b0
mov eax, dword [esp + 0x20]
mov ebp, dword [esi + 0x3f0]
push ecx
mov ecx, esp
push eax
call fcn.00403090
mov ecx, ebp
call fcn.004110c0
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, dword [esi + 0x3f0]
call fcn.0040d8a0
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
call fcn.00412da0
cmp dword [eax + 0x18], 8
jb 0x415f94
mov eax, dword [eax + 4]
jmp 0x415f97
add eax, 4
push eax
lea ecx, [esp + 0x2c]
call fcn.00403090
lea ecx, [esp + 0x4c]
call fcn.004034c0
mov eax, dword [0x437688]
mov edx, dword [eax + 0xc]
mov ecx, 0x437688
call edx
add eax, 0x10
mov dword [esp + 0x24], eax
mov eax, dword [esi + 4]
push 0x3ef
push eax
call edi
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], eax
call fcn.00410ea0
mov edi, 2
cmp dword [esi + 0x474], edi
jl 0x416089
lea edx, [esp + 0x24]
push 0x42c550
push edx
call fcn.0040f3e0
add esp, 8
test al, al
jne 0x41601a
lea eax, [esp + 0x24]
push 0x42d490
push eax
call fcn.0040f3e0
add esp, 8
test al, al
je 0x41607b
push 0x42df3c
lea ecx, [esp + 0x34]
call fcn.00411750
lea ecx, [esp + 0x30]
push ecx
mov ecx, esi
call fcn.00412720
lea ecx, [esp + 0x30]
call fcn.00403470
lea ecx, [esp + 0x24]
call fcn.00403340
lea ecx, [esp + 0x28]
call fcn.004036c0
lea ecx, [esp + 0x20]
call fcn.00403340
lea ecx, [esp + 0x1c]
call fcn.00403340
lea ecx, [esp + 0x110]
call fcn.004034c0
lea ecx, [esp + 0x18]
call fcn.00403340
jmp 0x4164ac
cmp dword [esi + 0x474], edi
jl 0x416089
lea eax, [esp + 0x24]
jmp 0x41609c
push 0x42c550
lea ecx, [esp + 0x30]
mov ebx, 1
call fcn.00403a20
push eax
lea ecx, [esp + 0x14]
call fcn.0040ff80
test bl, 1
je 0x4160b7
lea ecx, [esp + 0x2c]
and ebx, 0xfffffffe
call fcn.00403340
push str.alisoft_kplan_client_click_login_button_V1003
lea ecx, [esp + 0x50]
call fcn.004023b0
lea ecx, [esp + 0x10]
or ebx, edi
call fcn.0040f3c0
push eax
lea ecx, [esp + 0xf8]
call fcn.004023b0
push str.1_0_0_7
lea ecx, [esp + 0xc0]
or ebx, 4
call fcn.004023b0
mov edi, dword [esp + 0x28]
or ebx, 8
test edi, edi
je 0x416100
mov eax, dword [edi]
jmp 0x416102
xor eax, eax
push eax
lea ecx, [esp + 0x88]
call fcn.004023b0
lea ecx, [esp + 0x1c]
or ebx, 0x10
call fcn.0040f3c0
push eax
lea ecx, [esp + 0xdc]
call fcn.004023b0
lea edx, [esp + 0x4c]
push edx
lea ebp, [esi + 0x434]
push ebp
lea eax, [esp + 0xfc]
push eax
lea ecx, [esp + 0xc8]
push ecx
lea edx, [esp + 0x94]
push edx
lea eax, [esp + 0xec]
push eax
lea ecx, [esp + 0x128]
push ecx
mov ecx, esi
or ebx, 0x20
call fcn.00414fe0
test al, al
je 0x4161e2
push str.1_0_0_7
lea ecx, [esp + 0x6c]
call fcn.004023b0
or ebx, 0x40
test edi, edi
je 0x416183
mov edi, dword [edi]
jmp 0x416185
xor edi, edi
push edi
lea ecx, [esp + 0xa4]
call fcn.004023b0
lea ecx, [esp + 0x1c]
or ebx, 0x80
call fcn.0040f3c0
push eax
lea ecx, [esp + 0x34]
call fcn.004023b0
lea edx, [esp + 0x68]
push edx
lea eax, [esp + 0xa4]
push eax
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x11c]
push edx
lea eax, [esi + 0x400]
push eax
mov ecx, esi
or ebx, 0x100
call fcn.00415350
test al, al
mov byte [esp + 0x17], 1
jne 0x4161e7
mov byte [esp + 0x17], 0
test ebx, 0x100
je 0x4161fe
lea ecx, [esp + 0x30]
and ebx, 0xfffffeff
call fcn.004034c0
test bl, bl
jns 0x416214
lea ecx, [esp + 0xa0]
and ebx, 0xffffff7f
call fcn.004034c0
test bl, 0x40
je 0x416225
lea ecx, [esp + 0x68]
and ebx, 0xffffffbf
call fcn.004034c0
test bl, 0x20
je 0x416239
lea ecx, [esp + 0xd8]
and ebx, 0xffffffdf
call fcn.004034c0
test bl, 0x10
je 0x41624d
lea ecx, [esp + 0x84]
and ebx, 0xffffffef
call fcn.004034c0
test bl, 8
je 0x416261
lea ecx, [esp + 0xbc]
and ebx, 0xfffffff7
call fcn.004034c0
test bl, 4
je 0x416275
lea ecx, [esp + 0xf4]
and ebx, 0xfffffffb
call fcn.004034c0
test bl, 2
je 0x416283
lea ecx, [esp + 0x4c]
call fcn.004034c0
cmp byte [esp + 0x17], 0
mov ecx, esi
je 0x41629f
call fcn.00413b70
mov ecx, dword [esi + 4]
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4162a4
call fcn.00412490
push str.https:__checkcode_itbu.alisoft.com_alisoft_checkcode_sessionID
lea ecx, [esp + 0x130]
call fcn.004023b0
push 0xffffffffffffffff
push 0
push ebp
lea ecx, [esp + 0x138]
call fcn.00401fd0
push str.random1243336538217
lea ecx, [esp + 0x130]
call fcn.00402420
cmp dword [esp + 0x144], 8
mov eax, dword [esp + 0x130]
jae 0x4162ef
lea eax, [esp + 0x130]
push eax
mov ecx, esi
call fcn.00412160
mov edx, dword [esi + 0x424]
mov eax, dword [esi + 0x41c]
push edx
push eax
mov ecx, esi
call fcn.00410810
lea ecx, [esp + 0x12c]
call fcn.004034c0
lea ecx, [esp + 0x10]
call fcn.00403340
jmp 0x41603d
push 0x42de28
lea ecx, [esp + 0x34]
call fcn.00411750
lea ecx, [esp + 0x30]
push ecx
mov ecx, esi
call fcn.00412720
cmp dword [esp + 0x48], 0x10
jb 0x416354
mov edx, dword [esp + 0x34]
push edx
call fcn.00418bdb
add esp, 4
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x416374
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x416394
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x128], 8
jb 0x4163ae
mov ecx, dword [esp + 0x114]
push ecx
call fcn.00418bdb
add esp, 4
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov dword [esp + 0x128], 7
mov dword [esp + 0x124], ebx
mov word [esp + 0x114], bx
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x4164a0
push 0xc
push 0x42de18
lea ecx, [esp + 0x38]
mov dword [esp + 0x50], 0xf
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
call fcn.00410cb0
lea ecx, [esp + 0x30]
push ecx
mov ecx, esi
call fcn.00412720
cmp dword [esp + 0x48], 0x10
jb 0x416374
mov edx, dword [esp + 0x34]
push edx
call fcn.00418bdb
add esp, 4
jmp 0x416374
push 0x42d7c0
lea ecx, [esp + 0x34]
call fcn.00411750
lea ecx, [esp + 0x30]
push ecx
mov ecx, esi
call fcn.00412720
cmp dword [esp + 0x48], 0x10
jb 0x416458
mov edx, dword [esp + 0x34]
push edx
call fcn.00418bdb
add esp, 4
cmp dword [esp + 0x128], 8
jb 0x416472
mov eax, dword [esp + 0x114]
push eax
call fcn.00418bdb
add esp, 4
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov dword [esp + 0x128], 7
mov dword [esp + 0x124], ebx
mov word [esp + 0x114], bx
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4164ac
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x148]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
xor eax, eax
call fcn.004192a2
add esp, 0x13c
ret 0x10