Function at 0x418bc5
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x3c
mov eax, 0x50513d
call fcn.004df3ad
mov edi, ecx
mov esi, edx
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.Loading_postback_config...
call fcn.004014b0
xor ebx, ebx
mov dword [ebp - 4], ebx
push 2
or dword [ebp - 4], 0xffffffff
call fcn.004066ca
push str.Postback
lea ecx, [ebp - 0x10]
call fcn.004014b0
mov dword [ebp - 4], 1
cmp dword [ebp + 8], ebx
je 0x418c81
push str.Postback.Test
lea ecx, [ebp + 8]
call fcn.004014b0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x48]
call fcn.004d201f
mov byte [ebp - 4], 3
lea eax, [ebp - 0x48]
push eax
lea eax, [edi + 4]
call fcn.0043bd6a
cmp dword [ebp - 0x40], ebx
jle 0x418c69
test ebx, ebx
jl 0x418eb4
cmp ebx, dword [ebp - 0x40]
jge 0x418eb4
mov eax, dword [ebp - 0x44]
push dword [ebp + 8]
lea ecx, [eax + ebx*4]
call fcn.004036be
test eax, eax
je 0x418ea3
inc ebx
cmp ebx, dword [ebp - 0x40]
jl 0x418c3c
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x48]
call fcn.004d21f1
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
call fcn.004010f8
push ecx
lea ebx, [esi + 0x24]
mov ecx, esp
mov dword [ebp - 0x2c], esp
push ebx
mov dword [ebp - 0x20], ebx
call fcn.004037f2
mov byte [ebp - 4], 4
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push str.PostUrl
call fcn.004014b0
mov byte [ebp - 4], 5
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 6
lea eax, [ebp + 8]
push eax
push edi
mov byte [ebp - 4], 1
call fcn.00439663
mov byte [ebp - 4], 7
push eax
mov ecx, ebx
call fcn.004038a3
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
call fcn.004010f8
push ecx
lea ebx, [esi + 0x28]
mov ecx, esp
mov dword [ebp - 0x2c], esp
push ebx
mov dword [ebp - 0x24], ebx
call fcn.004037f2
mov byte [ebp - 4], 8
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push str.ShellUrl
call fcn.004014b0
mov byte [ebp - 4], 9
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0xa
lea eax, [ebp + 8]
push eax
push edi
mov byte [ebp - 4], 1
call fcn.00439663
mov byte [ebp - 4], 0xb
push eax
mov ecx, ebx
call fcn.004038a3
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
call fcn.004010f8
push ecx
lea ebx, [esi + 0x2c]
mov ecx, esp
mov dword [ebp - 0x2c], esp
push ebx
mov dword [ebp - 0x28], ebx
call fcn.004037f2
mov byte [ebp - 4], 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.WinInetUrl
call fcn.004014b0
mov byte [ebp - 4], 0xd
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x30], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0xe
lea eax, [ebp + 8]
push eax
push edi
mov byte [ebp - 4], 1
call fcn.00439663
mov byte [ebp - 4], 0xf
push eax
mov ecx, ebx
call fcn.004038a3
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
call fcn.004010f8
push ecx
lea ebx, [esi + 0x30]
mov ecx, esp
mov dword [ebp - 0x30], esp
push ebx
mov dword [ebp - 0x2c], ebx
call fcn.004037f2
mov byte [ebp - 4], 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.LogFileUrl
call fcn.004014b0
mov byte [ebp - 4], 0x11
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0x12
lea eax, [ebp + 8]
push eax
push edi
mov byte [ebp - 4], 1
call fcn.00439663
mov byte [ebp - 4], 0x13
push eax
mov ecx, ebx
call fcn.004038a3
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
call fcn.004010f8
and dword [ebp + 8], 0
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x5af400
call fcn.004014b0
mov byte [ebp - 4], 0x14
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Flags
call fcn.004014b0
mov byte [ebp - 4], 0x15
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004037f2
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x18]
push eax
push edi
mov byte [ebp - 4], 1
call fcn.00439663
mov byte [ebp - 4], 0x17
lea eax, [ebp + 8]
push eax
push 0x5b2cf8
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x18]
call fcn.00407fe3
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x14]
mov eax, dword [eax - 0xc]
test eax, eax
je 0x418f10
lea edi, [ebp - 0x14]
call fcn.00403491
push str.sendlog
mov ecx, eax
call fcn.004036be
test eax, eax
jne 0x418eb9
or dword [esi + 0x38], 1
jmp 0x418ed5
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x10]
call fcn.004038a3
jmp 0x418c69
call fcn.004d1f40
lea edi, [ebp - 0x14]
call fcn.00403491
push str.acceptbusyoffers
mov ecx, eax
call fcn.004036be
test eax, eax
jne 0x418ed5
or dword [esi + 0x38], 2
lea eax, [ebp + 8]
push eax
push 0x5b106c
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x18]
call fcn.00407fe3
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x14]
call fcn.004038a3
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x1c]
call fcn.004010f8
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0xc], 0
jne 0x418e85
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push str.sendlog
call fcn.004014b0
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 0x18
mov ebx, dword [ebp + 0xc]
call fcn.00401807
test eax, eax
je 0x418fb9
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
push str.sendlog
call fcn.004014b0
mov byte [ebp - 4], 0x1b
lea eax, [ebp + 8]
push eax
push ebx
mov byte [ebp - 4], 0x18
call fcn.00401855
mov byte [ebp - 4], 0x1c
push 0x5af138
mov ecx, eax
call fcn.004036be
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 0x18
lea ecx, [ebp + 8]
call fcn.004010f8
test bl, bl
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
je 0x418f9c
or dword [esi + 0x38], 1
push str.__SendLog1_overridden_from_command_line.
call fcn.004014b0
mov byte [ebp - 4], 0x1d
jmp 0x418fae
and dword [esi + 0x38], 0xfffffffe
push str.__SendLog0_overridden_from_command_line.
call fcn.004014b0
mov byte [ebp - 4], 0x1e
push 4
mov byte [ebp - 4], 0x18
call fcn.004066ca
push str.__PostUrl
lea ecx, [ebp + 8]
call fcn.004014b0
mov byte [ebp - 4], 0x1f
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
push dword [ebp - 0x20]
push eax
push ecx
call fcn.0040350d
add esp, 0xc
mov byte [ebp - 4], 0x20
push 4
pop esi
push esi
mov byte [ebp - 4], 0x1f
call fcn.004066ca
mov byte [ebp - 4], 0x18
lea ecx, [ebp + 8]
call fcn.004010f8
push str.__ShellUrl
lea ecx, [ebp + 8]
call fcn.004014b0
mov byte [ebp - 4], 0x21
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
push dword [ebp - 0x24]
push eax
push ecx
call fcn.0040350d
add esp, 0xc
mov byte [ebp - 4], 0x22
push esi
mov byte [ebp - 4], 0x21
call fcn.004066ca
mov byte [ebp - 4], 0x18
lea ecx, [ebp + 8]
call fcn.004010f8
push str.__WinInetUrl
lea ecx, [ebp + 8]
call fcn.004014b0
mov byte [ebp - 4], 0x23
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
push dword [ebp - 0x28]
push eax
push ecx
call fcn.0040350d
add esp, 0xc
mov byte [ebp - 4], 0x24
push esi
mov byte [ebp - 4], 0x23
call fcn.004066ca
mov byte [ebp - 4], 0x18
lea ecx, [ebp + 8]
call fcn.004010f8
push str.__LogFileUrl
lea ecx, [ebp + 8]
call fcn.004014b0
mov byte [ebp - 4], 0x25
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
push dword [ebp - 0x2c]
push eax
push ecx
call fcn.0040350d
add esp, 0xc
mov byte [ebp - 4], 0x26
push esi
mov byte [ebp - 4], 0x25
call fcn.004066ca
mov byte [ebp - 4], 0x18
lea ecx, [ebp + 8]
call fcn.004010f8
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x14]
call fcn.004010f8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.004010f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004010f8
xor eax, eax
inc eax
call fcn.004df44c
ret 8