Function at 0x406330
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ef030
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x658e64]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
lea ecx, [ebx + 0xe8]
mov esi, eax
call fcn.004022c0
mov ecx, esi
mov dword [ebx + 0x168], eax
mov dword [ebx + 0x214], 2
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406385
sub ecx, edx
lea eax, [ecx + 1]
push eax
push esi
call fcn.005d69be
push str..exe
push esi
call fcn.005cebc0
add esp, 0x10
test eax, eax
je 0x4063bd
mov cl, byte [eax]
test cl, cl
je 0x4063bd
cmp cl, 0x20
je 0x4063d1
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x4063b0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [eax], 0
je 0x4063bd
push eax
lea ecx, [ebp - 0x14]
call fcn.0040b750
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 0
call fcn.0040ba10
mov ecx, eax
call fcn.0040b970
mov eax, dword [ebp - 0x14]
or ecx, 0xffffffff
cmp dword [eax - 0xc], 1
jge 0x406408
xor esi, esi
jmp 0x40677f
push 0x632d5c
lea ecx, [ebp - 0x10]
call fcn.0040b750
mov byte [ebp - 4], 1
xor edi, edi
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax - 0xc]
test ecx, ecx
jle 0x406499
test edi, edi
js 0x4064db
cmp edi, ecx
jg 0x4064db
mov bl, byte [edi + eax]
cmp bl, 0x22
je 0x40648e
cmp bl, 0x27
je 0x40648e
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0x18], ecx
lea esi, [ecx + 1]
test esi, esi
js 0x4064db
mov ecx, dword [eax - 8]
mov edx, 1
sub edx, dword [eax - 4]
sub ecx, esi
or ecx, edx
jge 0x406473
push esi
lea ecx, [ebp - 0x10]
call fcn.00403fb0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x18]
mov byte [ecx + eax], bl
mov eax, dword [ebp - 0x10]
cmp esi, dword [eax - 8]
jg 0x4064db
mov dword [eax - 0xc], esi
mov eax, dword [ebp - 0x10]
mov byte [esi + eax], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax - 0xc]
inc edi
cmp edi, ecx
jl 0x406425
mov ebx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x10]
call fcn.0040ba10
mov ecx, eax
call fcn.0040b970
mov eax, dword [ebp - 0x10]
cmp dword [eax - 0xc], 0
jl 0x406513
push str..htm
push eax
call fcn.005d81ad
mov ecx, eax
add esp, 8
mov eax, dword [ebp - 0x10]
test ecx, ecx
je 0x4064e5
sub ecx, eax
cmp ecx, 0xffffffff
je 0x4064e5
mov dword [ebx + 0x214], 1
jmp 0x406513
push 0x80070057
call fcn.00403040
cmp dword [eax - 0xc], 0
jl 0x406513
push str..xml
push eax
call fcn.005d81ad
mov ecx, eax
add esp, 8
mov eax, dword [ebp - 0x10]
test ecx, ecx
je 0x406513
sub ecx, eax
cmp ecx, 0xffffffff
je 0x406513
mov dword [ebx + 0x214], 3
push 0x633234
lea esi, [ebx + 0x218]
mov dword [esi], 0
push eax
push esi
call fcn.005d55fb
mov ecx, dword [esi]
add esp, 0xc
test ecx, ecx
je 0x406759
test eax, eax
jne 0x406759
mov eax, dword [ebx + 0x214]
push ecx
cmp eax, 3
jne 0x406576
push str._n_____Instagram_Password_Recovery_Report_by_InstagramPasswordDecryptor____
call fcn.005d79c2
push dword [esi]
push str._n_____http:__SecurityXploded.com_instagram_password_decryptor.php____
call fcn.005d79c2
push dword [esi]
push str._n_n__xml_version1.0_encodingUTF_8___n_n_password_list_
call fcn.005d79c2
add esp, 0x18
jmp 0x406696
cmp eax, 1
jne 0x406654
push str.__DOCTYPE_html_PUBLIC_____W3C__DTD_XHTML_1.0_Transitional__EN___http:__www.w3.org_TR_xhtml1_DTD_xhtml1_transitional.dtd__
call fcn.005d79c2
push dword [esi]
push str._html_xmlns_http:__www.w3.org_1999_xhtml__
call fcn.005d79c2
push dword [esi]
push str._head___meta_http_equiv_Content_Type__content_text_html__charsetutf_8____
call fcn.005d79c2
push dword [esi]
push str._title_Instagram_Password_Recovery_Report_by_InstagramPasswordDecryptor__title_
call fcn.005d79c2
push dword [esi]
push str._style__table__border_collapse:collapse__table_layout:auto__
call fcn.005d79c2
push dword [esi]
push str.th__font_family:_Times_New_Roman___Times__serif__font_size:medium_color:white_background_color:222222__border:1px_solid_666__
call fcn.005d79c2
push dword [esi]
push str.td__font_family:Verdana_font_weight:bold__font_size:10px__height:25px__border:1px_solid_bbb__
call fcn.005d79c2
push dword [esi]
push str.tr.firstrow__background_color:ECECFF__color:red
call fcn.005d79c2
add esp, 0x40
push dword [esi]
push str.tr.secondrrow__background_color:FAFAFF__color:red
call fcn.005d79c2
push dword [esi]
push str.tr_background_color:FAFAFF__color:red___
call fcn.005d79c2
push dword [esi]
push str..footer__font_family:verdana__font_size:12px__color:black__
call fcn.005d79c2
push dword [esi]
push str.__style____head_
call fcn.005d79c2
push dword [esi]
push str._body_style_width:98___
call fcn.005d79c2
push dword [esi]
push str._br__center__h1_stylecolor:black_text_shadow:_1px_1px_2px_C0C0C0_font_family:_Arial___Instagram_Password_Recovery_Report___h1____center_
call fcn.005d79c2
push dword [esi]
push str._br__p_class_footer__style_color:6C6CFF____b_
call fcn.005d79c2
push dword [esi]
push str._table_cellspacing5_cellpadding5_width100____tr_style_height:35px____th_style_width:10___Index__th____th_style_width:30___Web_Browser__th___th_style_width:25___Instagram_Login__th___th_style_width:25___Password__th_
call fcn.005d79c2
add esp, 0x40
push dword [esi]
push 0x633840
call fcn.005d79c2
add esp, 8
jmp 0x406696
push str._n_n
call fcn.005d79c2
push dword [esi]
push str._n_n___________Instagram_Password_Recovery_Report
call fcn.005d79c2
push str.http:__www.securityxploded.com_instagram_password_decryptor.php
push str._n__s_n
push dword [esi]
call fcn.00404e00
push dword [esi]
push str._n
call fcn.005d79c2
push 0x633970
push dword [esi]
call fcn.00404e00
add esp, 0x2c
mov ecx, ebx
mov dword [ebx + 0x210], 1
call fcn.0040a200
mov eax, dword [ebx + 0x214]
cmp eax, 3
jne 0x4066d5
push dword [esi]
push str._n_n__password_list_
call fcn.005d79c2
add esp, 8
push dword [esi]
call fcn.005d1e92
add esp, 4
mov esi, 1
jmp 0x40675b
cmp eax, 1
jne 0x406728
push dword [esi]
push str.__table___br____br__
call fcn.005d79c2
push 0x62e09c
push str._hr___div_class_footer___Report_generated_by__b_InstagramPasswordDecryptor__b__Application__version__s__from
push dword [esi]
call fcn.00404e20
push str.http:__www.securityxploded.com_instagram_password_decryptor.php
push str._a_href__s__www.SecurityXploded.com.__a____div_
push dword [esi]
call fcn.00404e20
push dword [esi]
push str.__br_____body____html_
call fcn.005d79c2
add esp, 0x28
push dword [esi]
call fcn.005d1e92
add esp, 4
mov esi, 1
jmp 0x40675b
push str._n_n_n____________________________________________________________________________________
push dword [esi]
call fcn.00404e00
push 0x62e09c
push str._n_Produced_by_InstagramPasswordDecryptor_v_s_n_n_n
push dword [esi]
call fcn.00404e00
add esp, 0x14
push dword [esi]
call fcn.005d1e92
add esp, 4
mov esi, 1
jmp 0x40675b
xor esi, esi
mov byte [ebp - 4], 0
or ecx, 0xffffffff
mov edx, dword [ebp - 0x10]
mov eax, ecx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40677f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
or ecx, 0xffffffff
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x40679e
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret