Function at 0x41e040
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58fd95
mov eax, dword fs:[0]
push eax
sub esp, 0xd68
mov eax, dword [0x602c90]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xd04], ecx
xor ebx, ebx
push 0x5c232c
lea ecx, [ebp - 0xcf4]
mov dword [ebp - 0xcd8], eax
mov dword [ebp - 0xcf0], ebx
call fcn.00401d80
push 0x5c232c
lea ecx, [ebp - 0xce8]
mov dword [ebp - 4], ebx
call fcn.00401d80
push 0x5c232c
lea ecx, [ebp - 0xd0c]
mov byte [ebp - 4], 1
call fcn.00401d80
mov byte [ebp - 4], 2
mov byte [ebp - 0xcd9], 1
mov byte [ebp - 0xcdd], bl
mov byte [ebp - 0xcdb], bl
mov byte [ebp - 0xcdc], bl
mov byte [ebp - 0xcda], bl
call fcn.0047977b
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x41e0f9
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [ebp - 0xd00], esi
mov byte [ebp - 4], 3
mov eax, dword [esi - 0xc]
mov edi, dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
push eax
push esi
call edi
cmp eax, ebx
jne 0x41e125
call fcn.004022b0
lea ecx, [ebp - 0xccc]
push ecx
mov ecx, dword [ebp - 0xcd8]
push str.INPUT_EMAIL_FIELD
mov dword [ebp - 0xccc], 0
call fcn.00483bcc
mov ebx, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
test eax, eax
jne 0x41e1b3
cmp dword [ebp - 0xccc], 0
je 0x41e1b3
push str.value
call ebx
mov ecx, dword [ebp - 0xccc]
mov edx, dword [ecx]
lea edi, [ebp - 0xd3c]
push edi
push 1
push eax
mov eax, dword [edx + 0x20]
push ecx
call eax
test eax, eax
jne 0x41e1a6
mov ecx, dword [ebp - 0xd34]
push ecx
lea ecx, [ebp - 0xcf4]
call fcn.00401e40
mov edx, dword [ebp - 0xd34]
mov ecx, dword [ebp - 0xcd8]
push edx
add ecx, 0x2fde4
call fcn.00401e40
mov edi, dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov byte [ebp - 0xcdd], 1
add esi, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e1d3
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
call fcn.0047977b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41e1ed
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [ebp - 0xd00], esi
mov byte [ebp - 4], 4
mov eax, dword [esi - 0xc]
push eax
push esi
call edi
test eax, eax
jne 0x41e213
call fcn.004022b0
lea ecx, [ebp - 0xccc]
push ecx
mov ecx, dword [ebp - 0xcd8]
push str.INPUT_NAME_FIELD
mov dword [ebp - 0xccc], 0
call fcn.00483bcc
test eax, eax
jne 0x41e29a
cmp dword [ebp - 0xccc], eax
je 0x41e29a
push str.value
call ebx
mov ecx, dword [ebp - 0xccc]
mov edx, dword [ecx]
lea edi, [ebp - 0xd3c]
push edi
push 1
push eax
mov eax, dword [edx + 0x20]
push ecx
call eax
test eax, eax
jne 0x41e28d
mov ecx, dword [ebp - 0xd34]
push ecx
lea ecx, [ebp - 0xce8]
call fcn.00401e40
mov edx, dword [ebp - 0xd34]
mov ecx, dword [ebp - 0xcd8]
push edx
add ecx, 0x2fde0
call fcn.00401e40
mov edi, dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov byte [ebp - 0xcdb], 1
add esi, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e2ba
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
call fcn.0047977b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41e2d4
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [ebp - 0xd00], esi
mov byte [ebp - 4], 5
mov eax, dword [esi - 0xc]
push eax
push esi
call edi
test eax, eax
jne 0x41e2fa
call fcn.004022b0
lea ecx, [ebp - 0xccc]
push ecx
mov ecx, dword [ebp - 0xcd8]
push str.INPUT_PASSWORD_FIELD
mov dword [ebp - 0xccc], 0
call fcn.00483bcc
test eax, eax
jne 0x41e381
cmp dword [ebp - 0xccc], eax
je 0x41e381
push str.value
call ebx
mov ecx, dword [ebp - 0xccc]
mov edx, dword [ecx]
lea edi, [ebp - 0xd3c]
push edi
push 1
push eax
mov eax, dword [edx + 0x20]
push ecx
call eax
test eax, eax
jne 0x41e374
mov ecx, dword [ebp - 0xd34]
push ecx
lea ecx, [ebp - 0xd0c]
call fcn.00401e40
mov edx, dword [ebp - 0xd34]
mov ecx, dword [ebp - 0xcd8]
push edx
add ecx, 0x2fde8
call fcn.00401e40
mov edi, dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov byte [ebp - 0xcdc], 1
lea eax, [esi - 0x10]
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41e3a1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
call fcn.0047977b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41e3bb
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [ebp - 0xd00], esi
mov byte [ebp - 4], 6
mov eax, dword [esi - 0xc]
push eax
push esi
call edi
test eax, eax
jne 0x41e3e1
call fcn.004022b0
lea ecx, [ebp - 0xccc]
push ecx
mov ecx, dword [ebp - 0xcd8]
push str.INPUT_ACCEPT_FIELD
mov dword [ebp - 0xccc], 0
call fcn.00483bcc
test eax, eax
jne 0x41e456
cmp dword [ebp - 0xccc], eax
je 0x41e456
push str.checked
call ebx
mov ecx, dword [ebp - 0xccc]
mov edx, dword [ecx]
lea ebx, [ebp - 0xd3c]
push ebx
push 1
push eax
mov eax, dword [edx + 0x20]
push ecx
call eax
test eax, eax
jne 0x41e44d
cmp word [ebp - 0xd34], ax
mov ecx, dword [ebp - 0xcd8]
setne al
mov byte [ebp - 0xcd9], al
mov byte [ecx + 0x2fdec], al
mov byte [ebp - 0xcda], 1
jmp 0x41e46a
mov edx, dword [ebp - 0xcd8]
mov byte [ebp - 0xcd9], 1
mov byte [edx + 0x2fdec], 1
lea eax, [esi - 0x10]
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41e48a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp byte [ebp - 0xcdd], 0
jne 0x41e4b2
cmp byte [ebp - 0xcdb], 0
jne 0x41e4b2
cmp byte [ebp - 0xcdc], 0
jne 0x41e4b2
cmp byte [ebp - 0xcda], 0
je 0x41ee65
cmp byte [ebp - 0xcdd], 0
mov bl, 1
je 0x41e5c9
mov eax, dword [ebp - 0xcf4]
cmp dword [eax - 0xc], 0
jl 0x41e528
push 0x5c4294
push eax
call fcn.00560268
add esp, 8
test eax, eax
je 0x41e528
mov edx, dword [ebp - 0xcf4]
sub eax, edx
sar eax, 1
cmp eax, 0xffffffff
je 0x41e528
mov ecx, 0x5c4298
mov eax, edx
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41e51b
test dx, dx
je 0x41e517
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41e51b
add eax, 4
add ecx, 4
test dx, dx
jne 0x41e4f5
xor eax, eax
jmp 0x41e520
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x41e5c9
call fcn.0047977b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41e542
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [ebp - 0xd00], esi
mov byte [ebp - 4], 7
mov eax, dword [esi - 0xc]
push eax
push esi
call edi
test eax, eax
jne 0x41e568
call fcn.004022b0
lea ecx, [ebp - 0xcd4]
push ecx
mov ecx, dword [ebp - 0xcd8]
push str.INPUT_EMAIL_REQUIRED
mov dword [ebp - 0xcd4], 0
call fcn.00483bcc
test eax, eax
jne 0x41e5a7
mov eax, dword [ebp - 0xcd4]
test eax, eax
je 0x41e5a7
mov edx, dword [eax]
push str.nbsp__font_colorred___font_
push eax
mov eax, dword [edx + 0xe4]
call eax
add esi, 0xfffffff0
xor bl, bl
mov byte [ebp - 4], 2
lea ecx, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41e5c9
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
cmp byte [ebp - 0xcdb], 0
je 0x41e6bb
mov eax, dword [ebp - 0xce8]
cmp dword [eax - 0xc], 0
je 0x41e61a
mov ecx, str.Full_name
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41e60d
test dx, dx
je 0x41e609
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41e60d
add eax, 4
add ecx, 4
test dx, dx
jne 0x41e5e7
xor eax, eax
jmp 0x41e612
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x41e6bb
call fcn.0047977b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41e634
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [ebp - 0xd00], esi
mov byte [ebp - 4], 8
mov eax, dword [esi - 0xc]
push eax
push esi
call edi
test eax, eax
jne 0x41e65a
call fcn.004022b0
lea ecx, [ebp - 0xcd4]
push ecx
mov ecx, dword [ebp - 0xcd8]
push str.INPUT_NAME_REQUIRED
mov dword [ebp - 0xcd4], 0
call fcn.00483bcc
test eax, eax
jne 0x41e699
mov eax, dword [ebp - 0xcd4]
test eax, eax
je 0x41e699
mov edx, dword [eax]
push str.nbsp__font_colorred___font_
push eax
mov eax, dword [edx + 0xe4]
call eax
add esi, 0xfffffff0
xor bl, bl
mov byte [ebp - 4], 2
lea ecx, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41e6bb
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
cmp byte [ebp - 0xcdc], 0
je 0x41e7b4
mov eax, dword [ebp - 0xd0c]
cmp dword [eax - 0xc], 0
je 0x41e713
mov ecx, str.Choose_a_password
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41e706
test dx, dx
je 0x41e702
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41e706
add eax, 4
add ecx, 4
test dx, dx
jne 0x41e6e0
xor eax, eax
jmp 0x41e70b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x41e7b4
call fcn.0047977b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41e72d
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [ebp - 0xd00], esi
mov byte [ebp - 4], 9
mov eax, dword [esi - 0xc]
push eax
push esi
call edi
test eax, eax
jne 0x41e753
call fcn.004022b0
lea ecx, [ebp - 0xcd4]
push ecx
mov ecx, dword [ebp - 0xcd8]
push str.INPUT_PASSWORD_REQUIRED
mov dword [ebp - 0xcd4], 0
call fcn.00483bcc
test eax, eax
jne 0x41e792
mov eax, dword [ebp - 0xcd4]
test eax, eax
je 0x41e792
mov edx, dword [eax]
push str.nbsp__font_colorred___font_
push eax
mov eax, dword [edx + 0xe4]
call eax
lea eax, [esi - 0x10]
xor bl, bl
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41e7b4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp byte [ebp - 0xcda], 0
je 0x41e871
cmp byte [ebp - 0xcd9], 0
jne 0x41e871
call fcn.0047977b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41e7e8
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [ebp - 0xd00], esi
mov byte [ebp - 4], 0xa
mov eax, dword [esi - 0xc]
push eax
push esi
call edi
test eax, eax
jne 0x41e80e
call fcn.004022b0
mov edi, dword [ebp - 0xcd8]
lea ecx, [ebp - 0xcd4]
push ecx
push str.INPUT_ACCEPT_REQUIRED
mov ecx, edi
mov dword [ebp - 0xcd4], 0
call fcn.00483bcc
test eax, eax
jne 0x41e84f
mov eax, dword [ebp - 0xcd4]
test eax, eax
je 0x41e84f
mov edx, dword [eax]
push str.nbsp__font_colorred___font_
push eax
mov eax, dword [edx + 0xe4]
call eax
add esi, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41e87f
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
jmp 0x41e87f
mov edi, dword [ebp - 0xcd8]
test bl, bl
jne 0x41e911
mov eax, dword [edi + 0x2fdf0]
cmp eax, 1
jge 0x41e911
inc eax
mov dword [edi + 0x2fdf0], eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0xd0c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41e8bb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0xce8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41e8e1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xcf4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41e90a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor al, al
jmp 0x42005f
cmp byte [ebp - 0xcdd], 0
jne 0x41e93f
cmp byte [ebp - 0xcdb], 0
jne 0x41e93f
cmp byte [ebp - 0xcdc], 0
jne 0x41e93f
cmp byte [ebp - 0xcda], 0
je 0x41ee65
mov edi, dword [ebp - 0xcd8]
mov ecx, dword [edi + 0x2fde0]
cmp dword [ecx - 0xc], 0
lea esi, [edi + 0x2fde0]
jle 0x41e993
mov eax, dword [ebp - 0xce8]
mov ecx, str.Full_name
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41e986
test dx, dx
je 0x41e982
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41e986
add eax, 4
add ecx, 4
test dx, dx
jne 0x41e960
xor eax, eax
jmp 0x41e98b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x41ea33
mov edx, dword [edi + 0x2fde4]
cmp dword [edx - 0xc], 0
jle 0x41e9df
mov eax, dword [ebp - 0xcf4]
mov ecx, 0x5c4298
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41e9d6
test dx, dx
je 0x41e9d2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41e9d6
add eax, 4
add ecx, 4
test dx, dx
jne 0x41e9b0
xor eax, eax
jmp 0x41e9db
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x41ea33
mov eax, dword [edi + 0x2fde8]
cmp dword [eax - 0xc], 0
jle 0x41ee65
mov eax, dword [ebp - 0xd0c]
mov ecx, str.Choose_a_password
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41ea26
test dx, dx
je 0x41ea22
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41ea26
add eax, 4
add ecx, 4
test dx, dx
jne 0x41ea00
xor eax, eax
jmp 0x41ea2b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41ee65
mov edi, dword [ebp - 0xcd8]
push str._get_event__nameuser_input
lea ecx, [edi + 0x154]
push ecx
lea edx, [ebp - 0xcc8]
push edx
call fcn.00420dc0
add esp, 0xc
push esi
lea eax, [ebp - 0xcd0]
push str.data_name_
push eax
mov byte [ebp - 4], 0xb
call fcn.00420ea0
add esp, 0xc
push eax
lea ecx, [ebp - 0xcc8]
push ecx
lea edx, [ebp - 0xcd4]
mov bl, 0xc
push edx
mov byte [ebp - 4], bl
call fcn.00420d00
add esp, 0xc
push eax
lea ecx, [ebp - 0xcc8]
mov byte [ebp - 4], 0xd
call fcn.00405100
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0xcd4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41eabe
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0xcd0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41eae4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [edi + 0x2fde4]
push ecx
lea edx, [ebp - 0xcd0]
push str.data_email_
push edx
call fcn.00420ea0
add esp, 0xc
push eax
lea eax, [ebp - 0xcc8]
push eax
lea ecx, [ebp - 0xcd4]
mov bl, 0xe
push ecx
mov byte [ebp - 4], bl
call fcn.00420d00
add esp, 0xc
push eax
lea ecx, [ebp - 0xcc8]
mov byte [ebp - 4], 0xf
call fcn.00405100
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0xcd4]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41eb50
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0xcd0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41eb76
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [edi + 0x2fde8]
push ecx
lea edx, [ebp - 0xcd0]
push str.data_password_
push edx
call fcn.00420ea0
add esp, 0xc
push eax
lea eax, [ebp - 0xcc8]
push eax
lea ecx, [ebp - 0xcd4]
mov bl, 0x10
push ecx
mov byte [ebp - 4], bl
call fcn.00420d00
add esp, 0xc
push eax
lea ecx, [ebp - 0xcc8]
mov byte [ebp - 4], 0x11
call fcn.00405100
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0xcd4]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41ebe2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0xcd0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ec08
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp byte [edi + 0x2fdec], 0
je 0x41ec2c
push str.true
lea ecx, [ebp - 0xd08]
call fcn.00401d80
mov byte [ebp - 4], 0x12
mov ebx, 1
jmp 0x41ec48
push str.false
lea ecx, [ebp - 0xccc]
call fcn.00401d80
mov dword [ebp - 4], 0x13
mov ebx, 2
push eax
lea ecx, [ebp - 0xcd0]
push str.data_accept_
push ecx
mov dword [ebp - 0xcf0], ebx
call fcn.00420ea0
add esp, 0xc
push eax
lea edx, [ebp - 0xcc8]
push edx
lea eax, [ebp - 0xcd4]
push eax
mov dword [ebp - 4], 0x14
call fcn.00420d00
add esp, 0xc
push eax
lea ecx, [ebp - 0xcc8]
mov byte [ebp - 4], 0x15
call fcn.00405100
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0xcd4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ecb7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0xcd0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ecdd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0x12
test bl, 2
je 0x41ed14
mov eax, dword [ebp - 0xccc]
and ebx, 0xfffffffd
add eax, 0xfffffff0
mov dword [ebp - 0xcf0], ebx
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ed14
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xb
test bl, 1
je 0x41ed42
mov eax, dword [ebp - 0xd08]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ed42
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add edi, 0x180
push edi
lea ecx, [ebp - 0xcd0]
push str.data_session_id_
push ecx
call fcn.00420ea0
add esp, 0xc
push eax
lea edx, [ebp - 0xcc8]
push edx
lea eax, [ebp - 0xcd4]
mov bl, 0x16
push eax
mov byte [ebp - 4], bl
call fcn.00420d00
add esp, 0xc
push eax
lea ecx, [ebp - 0xcc8]
mov byte [ebp - 4], 0x17
call fcn.00405100
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0xcd4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41edae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0xcd0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41edd4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea esi, [ebp - 0xd74]
call fcn.004623e0
mov bl, 0x18
push 0x5c232c
lea ecx, [ebp - 0xcd4]
mov byte [ebp - 4], bl
call fcn.00401d80
push str.AirInstaller_User_Input
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0xcc8]
push eax
mov ecx, esi
call fcn.004627d0
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0xcd4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ee30
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0xd74]
mov byte [ebp - 4], 0xb
call fcn.00462490
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0xcc8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ee65
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp byte [ebp - 0xcd9], 0
je 0x41ffe8
mov ecx, dword [ebp - 0xcf4]
cmp dword [ecx - 0xc], 0
jg 0x41ee9a
mov edx, dword [ebp - 0xd0c]
cmp dword [edx - 0xc], 0
jg 0x41ee9a
mov eax, dword [ebp - 0xce8]
cmp dword [eax - 0xc], 0
jle 0x41ffe8
mov eax, dword [ebp - 0xd04]
test eax, eax
js 0x41ffe8
mov ecx, dword [ebp - 0xcd8]
cmp eax, dword [ecx + 0x1fd38]
jge 0x41ffe8
imul eax, eax, 0xcb0
lea ecx, [eax + ecx + 0x1b8]
push ecx
lea ecx, [ebp - 0xcc4]
call fcn.00420080
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0xc6c]
add eax, 0xfffffff0
push eax
call fcn.00405370
lea esi, [eax + 0x10]
add esp, 4
mov dword [ebp - 0xcc8], esi
mov bl, 0x1b
mov byte [ebp - 4], bl
mov eax, dword [esi - 0xc]
test eax, eax
jne 0x41ef3a
lea ecx, [ebp - 0xcc8]
call fcn.004020d0
lea ecx, [ebp - 0xcc4]
call fcn.00407970
lea ecx, [ebp - 0xd0c]
call fcn.004020d0
lea ecx, [ebp - 0xce8]
call fcn.004020d0
lea ecx, [ebp - 0xcf4]
call fcn.004020d0
jmp 0x42005d
js 0x41ef96
push str.http:__
push esi
call fcn.00560268
add esp, 8
test eax, eax
je 0x41ef96
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41ef96
mov esi, dword [esi - 0xc]
add esi, 0xfffffff9
push esi
push 7
lea edx, [ebp - 0xcd0]
push edx
lea ecx, [ebp - 0xcc8]
call fcn.00405020
push eax
lea ecx, [ebp - 0xcc8]
mov byte [ebp - 4], 0x1c
call fcn.00405100
lea ecx, [ebp - 0xcd0]
mov byte [ebp - 4], bl
call fcn.004020d0
mov esi, dword [ebp - 0xcc8]
lea eax, [esi - 0x10]
push eax
call fcn.00405370
lea ebx, [eax + 0x10]
add esp, 4
mov dword [ebp - 0xcf0], ebx
mov byte [ebp - 4], 0x1d
cmp dword [ebx - 0xc], 0
jl 0x41f048
push 0x5c44fc
push ebx
call fcn.00560268
add esp, 8
test eax, eax
je 0x41f048
sub eax, ebx
sar eax, 1
mov edi, eax
cmp edi, 0xffffffff
je 0x41f048
mov eax, dword [ebx - 0xc]
sub eax, edi
push eax
push edi
lea eax, [ebp - 0xcd0]
push eax
lea ecx, [ebp - 0xcf0]
call fcn.00405020
push eax
lea ecx, [ebp - 0xcc8]
mov byte [ebp - 4], 0x1e
call fcn.00405100
lea ecx, [ebp - 0xcd0]
mov byte [ebp - 4], 0x1d
call fcn.004020d0
push edi
push 0
lea ecx, [ebp - 0xcd0]
push ecx
lea ecx, [ebp - 0xcf0]
call fcn.00405020
push eax
lea ecx, [ebp - 0xcf0]
mov byte [ebp - 4], 0x1f
call fcn.00405100
lea ecx, [ebp - 0xcd0]
mov byte [ebp - 4], 0x1d
call fcn.004020d0
mov esi, dword [ebp - 0xcc8]
lea eax, [esi - 0x10]
push eax
call fcn.00405370
add eax, 0x10
add esp, 4
mov dword [ebp - 0xd00], eax
push 0x5c232c
lea ecx, [ebp - 0xd08]
mov byte [ebp - 4], 0x20
call fcn.00401d80
mov bl, 0x21
mov byte [ebp - 4], bl
mov eax, dword [esi - 0xc]
test eax, eax
js 0x41f0b4
push 0x5c4500
push esi
call fcn.00560268
add esp, 8
test eax, eax
je 0x41f0b4
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41f0b4
mov edx, dword [ebp - 0xcf4]
push edx
push 0x5c4500
lea ecx, [ebp - 0xcc8]
call fcn.00404af0
jmp 0x41f1b9
cmp dword [esi - 0xc], 0
jl 0x41f106
push 0x5c4510
push esi
call fcn.00560268
add esp, 8
test eax, eax
je 0x41f106
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41f106
push 0x5c2268
lea ecx, [ebp - 0xccc]
call fcn.00401d80
push eax
lea eax, [ebp - 0xcc8]
push eax
lea ecx, [ebp - 0xcd0]
push ecx
mov byte [ebp - 4], 0x22
call fcn.00420d00
add esp, 0xc
mov byte [ebp - 4], 0x23
jmp 0x41f135
push 0x5c4510
lea ecx, [ebp - 0xccc]
call fcn.00401d80
push eax
lea edx, [ebp - 0xcc8]
push edx
lea eax, [ebp - 0xcd0]
push eax
mov byte [ebp - 4], 0x24
call fcn.00420d00
add esp, 0xc
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0xcc8]
call fcn.00405100
lea ecx, [ebp - 0xcd0]
call fcn.004020d0
lea ecx, [ebp - 0xccc]
mov byte [ebp - 4], bl
call fcn.004020d0
lea ecx, [ebp - 0xcf4]
push ecx
lea edx, [ebp - 0xccc]
push 0x5c4514
push edx
call fcn.00420ea0
add esp, 0xc
push eax
lea eax, [ebp - 0xcc8]
push eax
lea ecx, [ebp - 0xcd0]
push ecx
mov byte [ebp - 4], 0x26
call fcn.00420d00
add esp, 0xc
push eax
lea ecx, [ebp - 0xcc8]
mov byte [ebp - 4], 0x27
call fcn.00405100
lea ecx, [ebp - 0xcd0]
call fcn.004020d0
lea ecx, [ebp - 0xccc]
mov byte [ebp - 4], bl
call fcn.004020d0
mov esi, dword [ebp - 0xcc8]
cmp dword [esi - 0xc], 0
jl 0x41f252
push 0x5c4524
push esi
call fcn.00560268
add esp, 8
test eax, eax
je 0x41f200
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41f200
mov edx, dword [ebp - 0xce8]
push edx
push 0x5c4524
lea ecx, [ebp - 0xcc8]
call fcn.00404af0
jmp 0x41f305
cmp dword [esi - 0xc], 0
jl 0x41f252
push 0x5c4510
push esi
call fcn.00560268
add esp, 8
test eax, eax
je 0x41f252
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41f252
push 0x5c2268
lea ecx, [ebp - 0xccc]
call fcn.00401d80
push eax
lea eax, [ebp - 0xcc8]
push eax
lea ecx, [ebp - 0xcd0]
push ecx
mov byte [ebp - 4], 0x28
call fcn.00420d00
add esp, 0xc
mov byte [ebp - 4], 0x29
jmp 0x41f281
push 0x5c4510
lea ecx, [ebp - 0xccc]
call fcn.00401d80
push eax
lea edx, [ebp - 0xcc8]
push edx
lea eax, [ebp - 0xcd0]
push eax
mov byte [ebp - 4], 0x2a
call fcn.00420d00
add esp, 0xc
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [ebp - 0xcc8]
call fcn.00405100
lea ecx, [ebp - 0xcd0]
call fcn.004020d0
lea ecx, [ebp - 0xccc]
mov byte [ebp - 4], bl
call fcn.004020d0
lea ecx, [ebp - 0xce8]
push ecx
lea edx, [ebp - 0xccc]
push 0x5c4530
push edx
call fcn.00420ea0
add esp, 0xc
push eax
lea eax, [ebp - 0xcc8]
push eax
lea ecx, [ebp - 0xcd0]
push ecx
mov byte [ebp - 4], 0x2c
call fcn.00420d00
add esp, 0xc
push eax
lea ecx, [ebp - 0xcc8]
mov byte [ebp - 4], 0x2d
call fcn.00405100
lea ecx, [ebp - 0xcd0]
call fcn.004020d0
lea ecx, [ebp - 0xccc]
mov byte [ebp - 4], bl
call fcn.004020d0
mov esi, dword [ebp - 0xcc8]
cmp dword [esi - 0xc], 0
jl 0x41f39e
push str._password
push esi
call fcn.00560268
add esp, 8
test eax, eax
je 0x41f34c
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41f34c
mov edx, dword [ebp - 0xce8]
push edx
push str._password
lea ecx, [ebp - 0xcc8]
call fcn.00404af0
jmp 0x41f451
cmp dword [esi - 0xc], 0
jl 0x41f39e
push 0x5c4510
push esi
call fcn.00560268
add esp, 8
test eax, eax
je 0x41f39e
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41f39e
push 0x5c2268
lea ecx, [ebp - 0xccc]
call fcn.00401d80
push eax
lea eax, [ebp - 0xcc8]
push eax
lea ecx, [ebp - 0xcd0]
push ecx
mov byte [ebp - 4], 0x2e
call fcn.00420d00
add esp, 0xc
mov byte [ebp - 4], 0x2f
jmp 0x41f3cd
push 0x5c4510
lea ecx, [ebp - 0xccc]
call fcn.00401d80
push eax
lea edx, [ebp - 0xcc8]
push edx
lea eax, [ebp - 0xcd0]
push eax
mov byte [ebp - 4], 0x30
call fcn.00420d00
add esp, 0xc
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0xcc8]
call fcn.00405100
lea ecx, [ebp - 0xcd0]
call fcn.004020d0
lea ecx, [ebp - 0xccc]
mov byte [ebp - 4], bl
call fcn.004020d0
lea ecx, [ebp - 0xd0c]
push ecx
lea edx, [ebp - 0xccc]
push str.password
push edx
call fcn.00420ea0
add esp, 0xc
push eax
lea eax, [ebp - 0xcc8]
push eax
lea ecx, [ebp - 0xcd0]
push ecx
mov byte [ebp - 4], 0x32
call fcn.00420d00
add esp, 0xc
push eax
lea ecx, [ebp - 0xcc8]
mov byte [ebp - 4], 0x33
call fcn.00405100
lea ecx, [ebp - 0xcd0]
call fcn.004020d0
lea ecx, [ebp - 0xccc]
mov byte [ebp - 4], bl
call fcn.004020d0
mov esi, dword [ebp - 0xcc8]
cmp dword [esi - 0xc], 0
jl 0x41f4ea
push str._accepted
push esi
call fcn.00560268
add esp, 8
test eax, eax
je 0x41f498
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41f498
mov edx, dword [ebp - 0xce8]
push edx
push str._accepted
lea ecx, [ebp - 0xcc8]
call fcn.00404af0
jmp 0x41f592
cmp dword [esi - 0xc], 0
jl 0x41f4ea
push 0x5c4510
push esi
call fcn.00560268
add esp, 8
test eax, eax
je 0x41f4ea
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
je 0x41f4ea
push 0x5c2268
lea ecx, [ebp - 0xccc]
call fcn.00401d80
push eax
lea eax, [ebp - 0xcc8]
push eax
lea ecx, [ebp - 0xcd0]
push ecx
mov byte [ebp - 4], 0x34
call fcn.00420d00
add esp, 0xc
mov byte [ebp - 4], 0x35
jmp 0x41f519
push 0x5c4510
lea ecx, [ebp - 0xccc]
call fcn.00401d80
push eax
lea edx, [ebp - 0xcc8]
push edx
lea eax, [ebp - 0xcd0]
push eax
mov byte [ebp - 4], 0x36
call fcn.00420d00
add esp, 0xc
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0xcc8]
call fcn.00405100
lea ecx, [ebp - 0xcd0]
call fcn.004020d0
lea ecx, [ebp - 0xccc]
mov byte [ebp - 4], bl
call fcn.004020d0
push str.acceptedtrue
lea ecx, [ebp - 0xccc]
call fcn.00401d80
push eax
lea ecx, [ebp - 0xcc8]
push ecx
lea edx, [ebp - 0xcd0]
push edx
mov byte [ebp - 4], 0x38
call fcn.00420d00
add esp, 0xc
push eax
lea ecx, [ebp - 0xcc8]
mov byte [ebp - 4], 0x39
call fcn.00405100
lea ecx, [ebp - 0xcd0]
call fcn.004020d0
lea ecx, [ebp - 0xccc]
mov byte [ebp - 4], bl
call fcn.004020d0
mov eax, dword [ebp - 0xcc8]
add eax, 0xfffffff0
push eax
call fcn.00405370
lea edi, [eax + 0x10]
add esp, 4
mov dword [ebp - 0xd04], edi
mov bl, 0x3c
mov byte [ebp - 4], bl
cmp dword [edi - 0xc], 0
jl 0x41f647
push 0x5c4510
push edi
call fcn.00560268
add esp, 8
test eax, eax
je 0x41f647
sub eax, edi
sar eax, 1
mov esi, eax
cmp esi, 0xffffffff
je 0x41f647
mov eax, dword [edi - 0xc]
sub eax, esi
dec eax
push eax
lea eax, [esi + 1]
push eax
lea ecx, [ebp - 0xcd0]
push ecx
lea ecx, [ebp - 0xd04]
call fcn.00405020
push eax
lea ecx, [ebp - 0xd08]
mov byte [ebp - 4], 0x3d
call fcn.00405100
lea ecx, [ebp - 0xcd0]
mov byte [ebp - 4], bl
call fcn.004020d0
push esi
push 0
lea edx, [ebp - 0xccc]
push edx
lea ecx, [ebp - 0xd04]
call fcn.00405020
push eax
lea ecx, [ebp - 0xd04]
mov byte [ebp - 4], 0x3e
call fcn.00405100
lea ecx, [ebp - 0xccc]
mov byte [ebp - 4], bl
call fcn.004020d0
push str._html__n
lea ecx, [ebp - 0xcf8]
call fcn.00401d80
push str._body_onload_document.forms_form_.submit______n
push eax
lea eax, [ebp - 0xd18]
push eax
mov byte [ebp - 4], 0x3f
call fcn.00420dc0
add esp, 0xc
push str._form_actionhttp:__
push eax
lea ecx, [ebp - 0xd1c]
push ecx
mov byte [ebp - 4], 0x40
call fcn.00420dc0
add esp, 0xc
lea edx, [ebp - 0xcf0]
push edx
push eax
lea eax, [ebp - 0xd20]
push eax
mov byte [ebp - 4], 0x41
call fcn.00420d00
add esp, 0xc
push 0x5c232c
push eax
lea ecx, [ebp - 0xce4]
push ecx
mov byte [ebp - 4], 0x42
call fcn.00420dc0
add esp, 0xc
lea edx, [ebp - 0xd04]
push edx
push eax
lea eax, [ebp - 0xccc]
push eax
mov byte [ebp - 4], 0x43
call fcn.00420d00
add esp, 0xc
push str._methodpost_idform___n
push eax
lea ecx, [ebp - 0xcd0]
push ecx
mov byte [ebp - 4], 0x44
call fcn.00420dc0
add esp, 0xc
mov edx, dword [ebp - 0xcd8]
mov byte [ebp - 4], 0x45
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [edx + 0x2fc6c]
call fcn.004052b0
lea ecx, [ebp - 0xcd0]
call fcn.004020d0
lea ecx, [ebp - 0xccc]
call fcn.004020d0
lea ecx, [ebp - 0xce4]
call fcn.004020d0
lea ecx, [ebp - 0xd20]
call fcn.004020d0
lea ecx, [ebp - 0xd1c]
call fcn.004020d0
lea ecx, [ebp - 0xd18]
call fcn.004020d0
lea ecx, [ebp - 0xcf8]
mov byte [ebp - 4], bl
call fcn.004020d0
mov eax, dword [ebp - 0xd08]
add eax, 0xfffffff0
push eax
call fcn.00405370
lea esi, [eax + 0x10]
add esp, 4
mov dword [ebp - 0xccc], esi
mov byte [ebp - 4], 0x46
mov eax, dword [esi - 0xc]
test eax, eax
js 0x41faca
push 0x5c2268
push esi
call fcn.00560268
add esp, 8
test eax, eax
je 0x41faca
sub eax, esi
sar eax, 1
mov edi, eax
cmp edi, 0xffffffff
je 0x41faca
push edi
push 0
lea edx, [ebp - 0xd18]
push edx
lea ecx, [ebp - 0xccc]
call fcn.00405020
mov byte [ebp - 4], 0x47
mov esi, dword [esi - 0xc]
sub esi, edi
dec esi
push esi
inc edi
push edi
lea eax, [ebp - 0xcf8]
push eax
lea ecx, [ebp - 0xccc]
call fcn.00405020
push eax
lea ecx, [ebp - 0xccc]
mov byte [ebp - 4], 0x48
call fcn.00405100
mov byte [ebp - 4], 0x47
mov eax, dword [ebp - 0xcf8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41f816
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ebx, dword [ebp - 0xd18]
add ebx, 0xfffffff0
push ebx
call fcn.00405370
lea esi, [eax + 0x10]
add esp, 4
mov dword [ebp - 0xce4], esi
push ebx
mov byte [ebp - 4], 0x49
call fcn.00405370
add eax, 0x10
add esp, 4
mov dword [ebp - 0xcd0], eax
mov byte [ebp - 4], 0x4a
cmp dword [esi - 0xc], 0
jl 0x41fa3a
push 0x5c4674
push esi
call fcn.00560268
add esp, 8
test eax, eax
je 0x41fa3a
sub eax, esi
sar eax, 1
mov edi, eax
cmp edi, 0xffffffff
je 0x41fa3a
mov eax, dword [esi - 0xc]
sub eax, edi
dec eax
push eax
lea ecx, [edi + 1]
push ecx
lea edx, [ebp - 0xd1c]
push edx
lea ecx, [ebp - 0xce4]
call fcn.00405020
push eax
lea ecx, [ebp - 0xcd0]
mov byte [ebp - 4], 0x4b
call fcn.00405100
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0xd1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41f8cd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push edi
push 0
lea ecx, [ebp - 0xd20]
push ecx
lea ecx, [ebp - 0xce4]
call fcn.00405020
push eax
lea ecx, [ebp - 0xce4]
mov byte [ebp - 4], 0x4c
call fcn.00405100
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0xd20]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41f918
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0xce4]
push ecx
lea edx, [ebp - 0xcec]
push str._input_typehidden_name
push edx
call fcn.00420ea0
add esp, 0xc
push str._value
push eax
lea eax, [ebp - 0xcfc]
push eax
mov byte [ebp - 4], 0x4d
call fcn.00420dc0
add esp, 0xc
lea ecx, [ebp - 0xcd0]
push ecx
push eax
lea edx, [ebp - 0xd14]
push edx
mov byte [ebp - 4], 0x4e
call fcn.00420d00
add esp, 0xc
push 0x5c4678
push eax
lea eax, [ebp - 0xd10]
push eax
mov byte [ebp - 4], 0x4f
call fcn.00420dc0
add esp, 0xc
mov byte [ebp - 4], 0x50
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
mov ecx, dword [ebp - 0xcd8]
push eax
add ecx, 0x2fc6c
call fcn.004052b0
mov byte [ebp - 4], 0x4f
mov eax, dword [ebp - 0xd10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41f9c2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x4e
mov eax, dword [ebp - 0xd14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41f9e8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x4d
mov eax, dword [ebp - 0xcfc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41fa0e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0xcec]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41fa34
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [ebp - 0xce4]
mov byte [ebp - 4], 0x49
mov eax, dword [ebp - 0xcd0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41fa60
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add esi, 0xfffffff0
mov byte [ebp - 4], 0x47
lea ecx, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41fa80
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
mov byte [ebp - 4], 0x46
lea eax, [ebx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41fa9d
mov ecx, dword [ebx]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push ebx
call eax
mov esi, dword [ebp - 0xccc]
cmp dword [esi - 0xc], 0
jl 0x41faca
push 0x5c2268
push esi
call fcn.00560268
add esp, 8
test eax, eax
je 0x41faca
sub eax, esi
sar eax, 1
mov edi, eax
cmp edi, 0xffffffff
jne 0x41f7ac
add esi, 0xfffffff0
push esi
call fcn.00405370
add eax, 0x10
add esp, 4
mov dword [ebp - 0xcf8], eax
lea esi, [eax - 0x10]
push esi
mov byte [ebp - 4], 0x51
call fcn.00405370
lea edi, [eax + 0x10]
add esp, 4
mov dword [ebp - 0xce4], edi
push esi
mov byte [ebp - 4], 0x52
call fcn.00405370
add eax, 0x10
add esp, 4
mov dword [ebp - 0xcd0], eax
mov bl, 0x53
mov byte [ebp - 4], bl
cmp dword [edi - 0xc], 0
jl 0x41fc62
push 0x5c4674
push edi
call fcn.00560268
add esp, 8
test eax, eax
je 0x41fc62
sub eax, edi
sar eax, 1
mov esi, eax
cmp esi, 0xffffffff
je 0x41fc62
mov eax, dword [edi - 0xc]
sub eax, esi
dec eax
push eax
lea ecx, [esi + 1]
push ecx
lea edx, [ebp - 0xcec]
push edx
lea ecx, [ebp - 0xce4]
call fcn.00405020
push eax
lea ecx, [ebp - 0xcd0]
mov byte [ebp - 4], 0x54
call fcn.00405100
lea ecx, [ebp - 0xcec]
mov byte [ebp - 4], bl
call fcn.004020d0
push esi
push 0
lea eax, [ebp - 0xcfc]
push eax
lea ecx, [ebp - 0xce4]
call fcn.00405020
push eax
lea ecx, [ebp - 0xce4]
mov byte [ebp - 4], 0x55
call fcn.00405100
lea ecx, [ebp - 0xcfc]
mov byte [ebp - 4], bl
call fcn.004020d0
lea ecx, [ebp - 0xce4]
push ecx
lea edx, [ebp - 0xd10]
push str._input_typehidden_name
push edx
call fcn.00420ea0
add esp, 0xc
push str._value
push eax
lea eax, [ebp - 0xd14]
push eax
mov byte [ebp - 4], 0x56
call fcn.00420dc0
add esp, 0xc
lea ecx, [ebp - 0xcd0]
push ecx
push eax
lea edx, [ebp - 0xcfc]
push edx
mov byte [ebp - 4], 0x57
call fcn.00420d00
add esp, 0xc
push 0x5c4678
push eax
lea eax, [ebp - 0xcec]
push eax
mov byte [ebp - 4], 0x58
call fcn.00420dc0
add esp, 0xc
mov esi, dword [ebp - 0xcd8]
mov byte [ebp - 4], 0x59
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esi + 0x2fc6c]
call fcn.004052b0
lea ecx, [ebp - 0xcec]
call fcn.004020d0
lea ecx, [ebp - 0xcfc]
call fcn.004020d0
lea ecx, [ebp - 0xd14]
call fcn.004020d0
lea ecx, [ebp - 0xd10]
call fcn.004020d0
jmp 0x41fc68
mov esi, dword [ebp - 0xcd8]
lea ecx, [ebp - 0xcd0]
call fcn.004020d0
lea ecx, [ebp - 0xce4]
call fcn.004020d0
lea ecx, [ebp - 0xcf8]
mov byte [ebp - 4], 0x46
call fcn.004020d0
push 0x5c232c
lea ecx, [ebp - 0xd10]
call fcn.00401d80
push str.__form__n
push eax
lea ecx, [ebp - 0xd14]
push ecx
mov byte [ebp - 4], 0x5a
call fcn.00420dc0
add esp, 0xc
push str.__body__n
push eax
lea edx, [ebp - 0xcfc]
push edx
mov byte [ebp - 4], 0x5b
call fcn.00420dc0
add esp, 0xc
push str._html__n
push eax
lea eax, [ebp - 0xcec]
push eax
mov byte [ebp - 4], 0x5c
call fcn.00420dc0
add esp, 0xc
mov byte [ebp - 4], 0x5d
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
lea edi, [esi + 0x2fc6c]
push eax
mov ecx, edi
call fcn.004052b0
lea ecx, [ebp - 0xcec]
call fcn.004020d0
lea ecx, [ebp - 0xcfc]
call fcn.004020d0
lea ecx, [ebp - 0xd14]
call fcn.004020d0
lea ecx, [ebp - 0xd10]
mov byte [ebp - 4], 0x46
call fcn.004020d0
push str.userInputForm.html
lea ecx, [ebp - 0xcf8]
call fcn.00401d80
push eax
add esi, 0x160
lea ecx, [ebp - 0xcec]
push esi
push ecx
mov byte [ebp - 4], 0x5e
call fcn.00420d00
add esp, 0xc
push edi
push eax
mov byte [ebp - 4], 0x5f
call fcn.004313b0
lea ecx, [ebp - 0xcec]
call fcn.004020d0
lea ecx, [ebp - 0xcf8]
mov byte [ebp - 4], 0x46
call fcn.004020d0
push 0
push 0
push 0
push 0
push 1
push 0
lea ecx, [ebp - 0xd3c]
call fcn.0048466d
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp - 0xcf0]
mov eax, dword [ecx - 0xc]
push eax
push ecx
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
test eax, eax
jne 0x41fdb5
call fcn.004022b0
push 0
push 0
push 0x50
push 3
push eax
lea ecx, [ebp - 0xd3c]
call fcn.0048533b
mov esi, eax
push str.Content_Type:_application_x_www_form_urlencoded_r_n
lea ecx, [ebp - 0xcf8]
mov dword [ebp - 0xd1c], esi
call fcn.00401d80
push str.Accept:_text_html__application_xhtmlxml____r_n
push eax
lea edx, [ebp - 0xd10]
push edx
mov byte [ebp - 4], 0x61
call fcn.00420dc0
add esp, 0xc
push str.Referer:_http:__www.mypcbackup.com__r_n
push eax
lea eax, [ebp - 0xd14]
push eax
mov byte [ebp - 4], 0x62
call fcn.00420dc0
add esp, 0xc
push str.Accept_Language:_en_US_r_n
push eax
lea ecx, [ebp - 0xcfc]
push ecx
mov byte [ebp - 4], 0x63
call fcn.00420dc0
add esp, 0xc
push str.User_Agent:_Mozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__Trident_5.0__r_n
push eax
lea edx, [ebp - 0xcec]
push edx
mov byte [ebp - 4], 0x64
call fcn.00420dc0
add esp, 0xc
push str.Accept_Encoding:_gzip__deflate_r_n
push eax
lea eax, [ebp - 0xcd4]
push eax
mov byte [ebp - 4], 0x65
call fcn.00420dc0
add esp, 0xc
lea ecx, [ebp - 0xcec]
call fcn.004020d0
lea ecx, [ebp - 0xcfc]
call fcn.004020d0
lea ecx, [ebp - 0xd14]
call fcn.004020d0
lea ecx, [ebp - 0xd10]
call fcn.004020d0
lea ecx, [ebp - 0xcf8]
mov byte [ebp - 4], 0x6b
call fcn.004020d0
mov ecx, dword [ebp - 0xd04]
push 0xa4000000
push 0
push 0
push 1
push 0
push ecx
push 0
mov ecx, esi
call fcn.00485618
mov ebx, eax
push 0x10000000
lea edx, [ebp - 0xcd4]
push edx
mov ecx, ebx
call fcn.004845d9
lea ecx, [ebp - 0xd08]
call fcn.004206f0
mov eax, dword [ebp - 0xd08]
mov ecx, dword [eax - 0xc]
mov edi, dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
push ecx
push eax
call edi
test eax, eax
jne 0x41fef2
call fcn.004022b0
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41fef5
sub eax, edx
sar eax, 1
mov dword [ebp - 0xd18], eax
inc eax
push eax
call fcn.0056093e
mov esi, eax
mov eax, dword [ebp - 0xd08]
mov ecx, dword [eax - 0xc]
add esp, 4
push ecx
push eax
call edi
test eax, eax
jne 0x41ff2c
call fcn.004022b0
mov edi, eax
call fcn.0042bc90
mov eax, dword [ebp - 0xd18]
push eax
push esi
lea ecx, [ebp - 0xcd4]
push ecx
mov ecx, ebx
call fcn.00484c29
push esi
call fcn.00560904
add esp, 4
lea edx, [ebp - 0xd40]
push edx
mov ecx, ebx
call fcn.00483f47
lea ecx, [ebp - 0xd3c]
call fcn.00484d2c
mov eax, dword [ebx]
mov edx, dword [eax + 0x50]
mov ecx, ebx
call edx
mov ecx, dword [ebp - 0xd1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
call edx
lea ecx, [ebp - 0xcd4]
call fcn.004020d0
lea ecx, [ebp - 0xd3c]
mov byte [ebp - 4], 0x46
call fcn.00484ea8
lea ecx, [ebp - 0xccc]
call fcn.004020d0
lea ecx, [ebp - 0xd04]
call fcn.004020d0
lea ecx, [ebp - 0xd08]
call fcn.004020d0
lea ecx, [ebp - 0xd00]
call fcn.004020d0
lea ecx, [ebp - 0xcf0]
call fcn.004020d0
lea ecx, [ebp - 0xcc8]
call fcn.004020d0
lea ecx, [ebp - 0xcc4]
call fcn.00407970
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0xd0c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42000e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0xce8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x420034
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xcf4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42005d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0055f89e
mov esp, ebp
pop ebp
ret 4