Function at 0x4d1980
Capabilities:
Create process on windows
Delete file
Get common file path

Disassembly:
sub esp, 0x260
mov eax, dword [0x546560]
push ebx
mov ecx, str._table_aligncenter__tr__td__n
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
test ecx, ecx
mov dword [esp + 0x18], eax
je 0x4d19a8
push ecx
call edi
mov esi, eax
jmp 0x4d19aa
xor esi, esi
push esi
lea ecx, [esp + 0x1c]
call fcn.00405660
test eax, eax
je 0x4d19d7
mov edx, dword [esp + 0x18]
inc esi
push esi
push str._table_aligncenter__tr__td__n
push edx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0x18]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [0x546560]
mov ecx, str._br_
test ecx, ecx
mov dword [esp + 0xc], eax
je 0x4d1a1f
push ecx
call edi
mov esi, eax
test esi, esi
je 0x4d1a1f
push esi
lea ecx, [esp + 0x10]
call fcn.00405530
test eax, eax
je 0x4d1a1f
mov edx, dword [esp + 0xc]
inc esi
push esi
push str._br_
push edx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0xc]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [esp + 0xc]
lea ecx, [esp + 0x18]
push eax
mov eax, dword [eax - 8]
push eax
call fcn.00405a90
mov eax, dword [esp + 0xc]
mov edx, dword [0x546564]
mov ebx, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4d1a62
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d1a62
mov edx, dword [esp + 0xc]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [0x546560]
mov ecx, str._form_idxxx_action
test ecx, ecx
mov dword [esp + 0xc], eax
je 0x4d1aaa
push ecx
call edi
mov esi, eax
test esi, esi
je 0x4d1aaa
push esi
lea ecx, [esp + 0x10]
call fcn.00405530
test eax, eax
je 0x4d1aaa
mov edx, dword [esp + 0xc]
inc esi
push esi
push str._form_idxxx_action
push edx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0xc]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [esp + 0xc]
lea ecx, [esp + 0x18]
push eax
mov eax, dword [eax - 8]
push eax
call fcn.00405a90
mov eax, dword [esp + 0xc]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4d1ae7
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d1ae7
mov edx, dword [esp + 0xc]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [0x546560]
mov ecx, 0x553dd8
test ecx, ecx
mov dword [esp + 0x2c], eax
je 0x4d1b2f
push ecx
call edi
mov esi, eax
test esi, esi
je 0x4d1b2f
push esi
lea ecx, [esp + 0x30]
call fcn.00405530
test eax, eax
je 0x4d1b2f
mov edx, dword [esp + 0x2c]
inc esi
push esi
push 0x553dd8
push edx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0x2c]
push 0xffffffffffffffff
call fcn.00405bb0
lea eax, [esp + 0x14]
push eax
call fcn.004d0c10
mov ecx, dword [esp + 0x30]
mov esi, eax
add esp, 4
mov eax, dword [esi]
cmp ecx, eax
je 0x4d1b8c
mov edx, dword [ecx - 0xc]
test edx, edx
jge 0x4d1b5c
mov edx, dword [0x546564]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x4d1b63
mov ecx, dword [eax - 0xc]
test ecx, ecx
jge 0x4d1b73
mov ecx, dword [eax - 8]
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.00405870
jmp 0x4d1b8c
lea ecx, [esp + 0x2c]
call fcn.00412670
mov esi, dword [esi]
mov dword [esp + 0x2c], esi
add esi, 0xfffffff4
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov eax, dword [esp + 0x14]
mov ecx, dword [0x546564]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x4d1bb7
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d1bb7
mov eax, dword [esp + 0x14]
add eax, 0xfffffff4
push eax
call fcn.00531732
add esp, 4
mov ecx, dword [0x546560]
mov edx, 0x54e758
test edx, edx
mov dword [esp + 0xc], ecx
je 0x4d1c00
push edx
call edi
mov esi, eax
test esi, esi
je 0x4d1c00
push esi
lea ecx, [esp + 0x10]
call fcn.00405530
test eax, eax
je 0x4d1c00
mov eax, dword [esp + 0xc]
inc esi
push esi
push 0x54e758
push eax
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0xc]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [esp + 0xc]
push eax
mov ecx, dword [eax - 8]
push ecx
lea ecx, [esp + 0x34]
call fcn.00405a90
mov eax, dword [esp + 0xc]
mov ecx, dword [0x546564]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x4d1c3d
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d1c3d
mov eax, dword [esp + 0xc]
add eax, 0xfffffff4
push eax
call fcn.00531732
add esp, 4
mov ecx, dword [0x546560]
mov edx, str.seite
test edx, edx
mov dword [esp + 0xc], ecx
je 0x4d1c86
push edx
call edi
mov esi, eax
test esi, esi
je 0x4d1c86
push esi
lea ecx, [esp + 0x10]
call fcn.00405530
test eax, eax
je 0x4d1c86
mov eax, dword [esp + 0xc]
inc esi
push esi
push str.seite
push eax
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0xc]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [esp + 0xc]
push eax
mov ecx, dword [eax - 8]
push ecx
lea ecx, [esp + 0x34]
call fcn.00405a90
mov eax, dword [esp + 0xc]
mov ecx, dword [0x546564]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x4d1cc3
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d1cc3
mov eax, dword [esp + 0xc]
add eax, 0xfffffff4
push eax
call fcn.00531732
add esp, 4
mov ecx, dword [0x546560]
mov edx, str.Microsoft
test edx, edx
mov dword [esp + 0xc], ecx
je 0x4d1d0c
push edx
call edi
mov esi, eax
test esi, esi
je 0x4d1d0c
push esi
lea ecx, [esp + 0x10]
call fcn.00405530
test eax, eax
je 0x4d1d0c
mov eax, dword [esp + 0xc]
inc esi
push esi
push str.Microsoft
push eax
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0xc]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [esp + 0xc]
push eax
mov ecx, dword [eax - 8]
push ecx
lea ecx, [esp + 0x34]
call fcn.00405a90
mov eax, dword [esp + 0xc]
mov ecx, dword [0x546564]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x4d1d49
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d1d49
mov eax, dword [esp + 0xc]
add eax, 0xfffffff4
push eax
call fcn.00531732
add esp, 4
mov ecx, dword [0x546560]
mov edx, 0x547ff0
test edx, edx
mov dword [esp + 0xc], ecx
je 0x4d1d92
push edx
call edi
mov esi, eax
test esi, esi
je 0x4d1d92
push esi
lea ecx, [esp + 0x10]
call fcn.00405530
test eax, eax
je 0x4d1d92
mov eax, dword [esp + 0xc]
inc esi
push esi
push 0x547ff0
push eax
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0xc]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [esp + 0xc]
push eax
mov ecx, dword [eax - 8]
push ecx
lea ecx, [esp + 0x34]
call fcn.00405a90
mov eax, dword [esp + 0xc]
mov ecx, dword [0x546564]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x4d1dcf
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d1dcf
mov eax, dword [esp + 0xc]
add eax, 0xfffffff4
push eax
call fcn.00531732
add esp, 4
mov eax, dword [0x55cedc]
push eax
mov ecx, dword [eax - 8]
push ecx
lea ecx, [esp + 0x34]
call fcn.00405a90
mov edx, dword [0x546560]
mov eax, 0x547ff0
test eax, eax
mov dword [esp + 0xc], edx
je 0x4d1e2b
push eax
call edi
mov esi, eax
test esi, esi
je 0x4d1e2b
push esi
lea ecx, [esp + 0x10]
call fcn.00405530
test eax, eax
je 0x4d1e2b
mov ecx, dword [esp + 0xc]
inc esi
push esi
push 0x547ff0
push ecx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0xc]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [esp + 0xc]
lea ecx, [esp + 0x2c]
push eax
mov edx, dword [eax - 8]
push edx
call fcn.00405a90
mov eax, dword [esp + 0xc]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4d1e68
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d1e68
mov edx, dword [esp + 0xc]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [0x546560]
mov ecx, str.Autoupdate
test ecx, ecx
mov dword [esp + 0xc], eax
je 0x4d1eb0
push ecx
call edi
mov esi, eax
test esi, esi
je 0x4d1eb0
push esi
lea ecx, [esp + 0x10]
call fcn.00405530
test eax, eax
je 0x4d1eb0
mov edx, dword [esp + 0xc]
inc esi
push esi
push str.Autoupdate
push edx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0xc]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [esp + 0xc]
lea ecx, [esp + 0x2c]
push eax
mov eax, dword [eax - 8]
push eax
call fcn.00405a90
mov eax, dword [esp + 0xc]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4d1eed
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d1eed
mov edx, dword [esp + 0xc]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x18]
push eax
mov eax, dword [eax - 8]
push eax
call fcn.00405a90
mov ecx, dword [0x546560]
mov edx, str._methodpost__br__n
test edx, edx
mov dword [esp + 0xc], ecx
je 0x4d1f48
push edx
call edi
mov esi, eax
test esi, esi
je 0x4d1f48
push esi
lea ecx, [esp + 0x10]
call fcn.00405530
test eax, eax
je 0x4d1f48
mov eax, dword [esp + 0xc]
inc esi
push esi
push str._methodpost__br__n
push eax
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0xc]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [esp + 0xc]
push eax
mov ecx, dword [eax - 8]
push ecx
lea ecx, [esp + 0x20]
call fcn.00405a90
mov eax, dword [esp + 0xc]
mov ecx, dword [0x546564]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x4d1f85
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d1f85
mov eax, dword [esp + 0xc]
add eax, 0xfffffff4
push eax
call fcn.00531732
add esp, 4
mov ecx, dword [0x546560]
mov edx, 0x54e5b4
test edx, edx
mov dword [esp + 0x4c], ecx
je 0x4d1fce
push edx
call edi
mov esi, eax
test esi, esi
je 0x4d1fce
push esi
lea ecx, [esp + 0x50]
call fcn.00405530
test eax, eax
je 0x4d1fce
mov eax, dword [esp + 0x4c]
inc esi
push esi
push 0x54e5b4
push eax
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0x4c]
push 0xffffffffffffffff
call fcn.00405bb0
mov ecx, dword [0x546560]
mov edx, 0x54e5b4
test edx, edx
mov dword [esp + 0x44], ecx
je 0x4d2017
push edx
call edi
mov esi, eax
test esi, esi
je 0x4d2017
push esi
lea ecx, [esp + 0x48]
call fcn.00405530
test eax, eax
je 0x4d2017
mov eax, dword [esp + 0x44]
inc esi
push esi
push 0x54e5b4
push eax
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0x44]
push 0xffffffffffffffff
call fcn.00405bb0
mov ecx, str.1234
test ecx, ecx
je 0x4d2027
push ecx
call edi
mov esi, eax
jmp 0x4d2029
xor esi, esi
push esi
lea ecx, [esp + 0x48]
call fcn.00405660
test eax, eax
je 0x4d2056
mov edx, dword [esp + 0x44]
inc esi
push esi
push str.1234
push edx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0x44]
push 0xffffffffffffffff
call fcn.00405bb0
push 0
call fcn.00532f81
lea ecx, [eax + eax*2]
add esp, 4
lea ecx, [ecx + ecx*8]
shl ecx, 4
sub ecx, eax
mov eax, dword [0x546560]
mov dword [esp + 0x50], eax
mov dword [esp + 0xc], eax
mov eax, 0x54907c
mov dword [0x55d91c], ecx
test eax, eax
je 0x4d20c3
push eax
call edi
mov esi, eax
test esi, esi
je 0x4d20bd
push esi
lea ecx, [esp + 0x10]
call fcn.00405530
test eax, eax
je 0x4d20bd
mov ecx, dword [esp + 0xc]
inc esi
push esi
push 0x54907c
push ecx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0xc]
push 0xffffffffffffffff
call fcn.00405bb0
mov ecx, dword [0x55d91c]
mov edx, dword [esp + 0xc]
push ecx
lea eax, [esp + 0x54]
push edx
push eax
call fcn.00405cb0
mov eax, dword [esp + 0x18]
mov edx, dword [0x546564]
add esp, 0xc
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4d2101
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d2101
mov edx, dword [esp + 0xc]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
lea eax, [esp + 0x54]
push eax
call fcn.00441470
mov eax, dword [0x546560]
mov ecx, 0x5486c0
add esp, 4
mov dword [esp + 0x5c], eax
test ecx, ecx
mov dword [esp + 0x28], eax
je 0x4d215a
push ecx
call edi
mov esi, eax
test esi, esi
je 0x4d215a
push esi
lea ecx, [esp + 0x2c]
call fcn.00405530
test eax, eax
je 0x4d215a
mov edx, dword [esp + 0x28]
inc esi
push esi
push 0x5486c0
push edx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0x28]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [0x546560]
mov ecx, str._value_
test ecx, ecx
mov dword [esp + 0x3c], eax
je 0x4d21a2
push ecx
call edi
mov esi, eax
test esi, esi
je 0x4d21a2
push esi
lea ecx, [esp + 0x40]
call fcn.00405530
test eax, eax
je 0x4d21a2
mov edx, dword [esp + 0x3c]
inc esi
push esi
push str._value_
push edx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0x3c]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [0x546560]
mov ecx, str._input_typehidden_name
test ecx, ecx
mov dword [esp + 0x40], eax
je 0x4d21ea
push ecx
call edi
mov esi, eax
test esi, esi
je 0x4d21ea
push esi
lea ecx, [esp + 0x44]
call fcn.00405530
test eax, eax
je 0x4d21ea
mov edx, dword [esp + 0x40]
inc esi
push esi
push str._input_typehidden_name
push edx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0x40]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [0x546560]
mov ecx, str.Version
test ecx, ecx
mov dword [esp + 0xc], eax
je 0x4d2232
push ecx
call edi
mov esi, eax
test esi, esi
je 0x4d2232
push esi
lea ecx, [esp + 0x10]
call fcn.00405530
test eax, eax
je 0x4d2232
mov edx, dword [esp + 0xc]
inc esi
push esi
push str.Version
push edx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0xc]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [0x546560]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0xc]
push eax
mov ecx, dword [eax - 8]
mov eax, dword [esp + 0x44]
push ecx
push eax
mov edx, dword [eax - 8]
lea ecx, [esp + 0x54]
push edx
call fcn.004059f0
lea eax, [esp + 0x48]
lea ecx, [esp + 0x14]
push eax
call fcn.00405440
lea ecx, [esp + 0x48]
call fcn.00405700
mov ecx, dword [0x546560]
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x34], ecx
push eax
mov edx, dword [eax - 8]
mov eax, dword [esp + 0x18]
push edx
push eax
mov eax, dword [eax - 8]
lea ecx, [esp + 0x40]
push eax
call fcn.004059f0
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x20]
call fcn.00405440
lea ecx, [esp + 0x34]
call fcn.00405700
lea edx, [esp + 0x10]
push edx
call fcn.005004e0
mov ecx, dword [0x546560]
mov eax, dword [eax]
add esp, 4
mov dword [esp + 0x30], ecx
mov edx, dword [eax - 8]
lea ecx, [esp + 0x30]
push eax
mov eax, dword [esp + 0x20]
push edx
push eax
mov eax, dword [eax - 8]
push eax
call fcn.004059f0
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x24]
call fcn.00405440
lea ecx, [esp + 0x30]
call fcn.00405700
mov edx, dword [0x546560]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x38], edx
push eax
mov eax, dword [eax - 8]
push eax
mov eax, dword [esp + 0x28]
push eax
mov ecx, dword [eax - 8]
push ecx
lea ecx, [esp + 0x48]
call fcn.004059f0
lea edx, [esp + 0x38]
lea ecx, [esp + 0x24]
push edx
call fcn.00405440
lea ecx, [esp + 0x38]
call fcn.00405700
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x18]
push eax
mov eax, dword [eax - 8]
push eax
call fcn.00405a90
mov eax, dword [esp + 0x24]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4d2369
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d2369
mov edx, dword [esp + 0x24]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [esp + 0x20]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4d2394
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d2394
mov edx, dword [esp + 0x20]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [esp + 0x1c]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4d23bf
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d23bf
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [esp + 0x14]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4d23ea
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d23ea
mov edx, dword [esp + 0x14]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [esp + 0xc]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4d2415
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d2415
mov edx, dword [esp + 0xc]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [esp + 0x10]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4d2440
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d2440
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [esp + 0x40]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4d246b
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d246b
mov edx, dword [esp + 0x40]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [esp + 0x3c]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4d2496
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d2496
mov edx, dword [esp + 0x3c]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [esp + 0x28]
mov edx, dword [0x546564]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x4d24c1
add eax, 0xfffffff4
push eax
call ebx
test eax, eax
jg 0x4d24c1
mov edx, dword [esp + 0x28]
add edx, 0xfffffff4
push edx
call fcn.00531732
add esp, 4
mov eax, dword [0x546560]
mov ecx, 0x5486c0
test ecx, ecx
mov dword [esp + 0x40], eax
je 0x4d2509
push ecx
call edi
mov esi, eax
test esi, esi
je 0x4d2509
push esi
lea ecx, [esp + 0x44]
call fcn.00405530
test eax, eax
je 0x4d2509
mov edx, dword [esp + 0x40]
inc esi
push esi
push 0x5486c0
push edx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0x40]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [0x546560]
mov ecx, str._value_
test ecx, ecx
mov dword [esp + 0x3c], eax
je 0x4d2551
push ecx
call edi
mov esi, eax
test esi, esi
je 0x4d2551
push esi
lea ecx, [esp + 0x40]
call fcn.00405530
test eax, eax
je 0x4d2551
mov edx, dword [esp + 0x3c]
inc esi
push esi
push str._value_
push edx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0x3c]
push 0xffffffffffffffff
call fcn.00405bb0
mov eax, dword [0x546560]
mov ecx, str._input_typehidden_name
test ecx, ecx
mov dword [esp + 0x28], eax
je 0x4d2599
push ecx
call edi
mov esi, eax
test esi, esi
je 0x4d2599
push esi
lea ecx, [esp + 0x2c]
call fcn.00405530
test eax, eax
je 0x4d2599
mov edx, dword [esp + 0x28]
inc esi
push esi
push str._input_typehidden_name
push edx
call fcn.00405400
add esp, 0xc
lea ecx, [esp + 0x28]
push 0xffffffffffffffff
call fcn.00405bb0
lea eax, [esp + 0x40]
lea ecx, [esp + 0x44]
push eax
lea edx, [esp + 0x40]
push ecx
push edx
push str.Unicode
lea ecx, [esp + 0x34]
call fcn.00405730
push eax
lea eax, [esp + 0x38]
lea ecx, [esp + 0x30]
push eax
push ecx
call fcn.00412dc0
lea edx, [esp + 0x28]
push eax
push edx
call fcn.00412dc0
push eax
lea eax, [esp + 0x20]
push eax
call fcn.00412dc0
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.00412dc0
mov eax, dword [eax]
lea ecx, [esp + 0x18]
push eax
mov edx, dword [eax - 8]
push edx
call fcn.00405a90
lea ecx, [esp + 0x10]
call fcn.00405700
lea ecx, [esp + 0x14]
call fcn.00405700
lea ecx, [esp + 0x1c]
call fcn.00405700
lea ecx, [esp + 0x20]
call fcn.00405700
lea ecx, [esp + 0x24]
call fcn.00405700
lea ecx, [esp + 0x28]
call fcn.00405700
lea ecx, [esp + 0x3c]
call fcn.00405700
lea ecx, [esp + 0x40]
call fcn.00405700
push 0x5486c0
lea ecx, [esp + 0x20]
call fcn.00405730
push str._value_
lea ecx, [esp + 0x18]
call fcn.00405730
push str._input_typehidden_name
lea ecx, [esp + 0x14]
call fcn.00405730
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x14]
push eax
push 0x55d920
push ecx
push str.Portable
lea ecx, [esp + 0x44]
call fcn.00405730
push eax
lea edx, [esp + 0x20]
lea eax, [esp + 0x40]
push edx
push eax
call fcn.00412dc0
lea ecx, [esp + 0x44]
push eax
push ecx
call fcn.00412dc0
lea edx, [esp + 0x2c]
push eax
push edx
call fcn.00412dc0
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00412dc0
mov eax, dword [eax]
push eax
mov ecx, dword [eax - 8]
push ecx
lea ecx, [esp + 0x20]
call fcn.00405a90
lea ecx, [esp + 0x20]
call fcn.00405700
lea ecx, [esp + 0x24]
call fcn.00405700
lea ecx, [esp + 0x38]
call fcn.00405700
lea ecx, [esp + 0x30]
call fcn.00405700
lea ecx, [esp + 0x34]
call fcn.00405700
lea ecx, [esp + 0x10]
call fcn.00405700
lea ecx, [esp + 0x14]
call fcn.00405700
lea ecx, [esp + 0x1c]
call fcn.00405700
push 0x5486c0
lea ecx, [esp + 0x20]
call fcn.00405730
push str._value_
lea ecx, [esp + 0x18]
call fcn.00405730
push str._input_typehidden_name
lea ecx, [esp + 0x14]
call fcn.00405730
lea edx, [esp + 0x1c]
lea eax, [esp + 0x4c]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x54e6f0
lea ecx, [esp + 0x44]
call fcn.00405730
push eax
lea edx, [esp + 0x20]
lea eax, [esp + 0x40]
push edx
push eax
call fcn.00412dc0
lea ecx, [esp + 0x44]
push eax
push ecx
call fcn.00412dc0
lea edx, [esp + 0x2c]
push eax
push edx
call fcn.00412dc0
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00412dc0
push eax
lea ecx, [esp + 0x1c]
call fcn.00413220
lea ecx, [esp + 0x20]
call fcn.00405700
lea ecx, [esp + 0x24]
call fcn.00405700
lea ecx, [esp + 0x38]
call fcn.00405700
lea ecx, [esp + 0x30]
call fcn.00405700
lea ecx, [esp + 0x34]
call fcn.00405700
lea ecx, [esp + 0x10]
call fcn.00405700
lea ecx, [esp + 0x14]
call fcn.00405700
lea ecx, [esp + 0x1c]
call fcn.00405700
push 0x5486c0
lea ecx, [esp + 0x20]
call fcn.00405730
push str._value_
lea ecx, [esp + 0x18]
call fcn.00405730
push str._input_typehidden_name
lea ecx, [esp + 0x14]
call fcn.00405730
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x50]
push ecx
lea eax, [esp + 0x18]
push edx
push eax
push str.time
lea ecx, [esp + 0x44]
call fcn.00405730
lea ecx, [esp + 0x1c]
push eax
lea edx, [esp + 0x40]
push ecx
push edx
call fcn.00412dc0
push eax
lea eax, [esp + 0x48]
push eax
call fcn.00412dc0
lea ecx, [esp + 0x2c]
push eax
push ecx
call fcn.00412dc0
lea edx, [esp + 0x24]
push eax
push edx
call fcn.00412dc0
push eax
lea ecx, [esp + 0x1c]
call fcn.00413220
lea ecx, [esp + 0x20]
call fcn.00405700
lea ecx, [esp + 0x24]
call fcn.00405700
lea ecx, [esp + 0x38]
call fcn.00405700
lea ecx, [esp + 0x30]
call fcn.00405700
lea ecx, [esp + 0x34]
call fcn.00405700
lea ecx, [esp + 0x10]
call fcn.00405700
lea ecx, [esp + 0x14]
call fcn.00405700
lea ecx, [esp + 0x1c]
call fcn.00405700
push str._value_YES___n
lea ecx, [esp + 0x18]
call fcn.00405730
push str._input_typehidden_name
lea ecx, [esp + 0x14]
call fcn.00405730
lea eax, [esp + 0x14]
lea ecx, [esp + 0x24]
push eax
push str.Passiv_Autoupdate
call fcn.00405730
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x28]
push ecx
push edx
call fcn.00412dc0
push eax
lea eax, [esp + 0x24]
push eax
call fcn.00412dc0
push eax
lea ecx, [esp + 0x1c]
call fcn.00413220
lea ecx, [esp + 0x1c]
call fcn.00405700
lea ecx, [esp + 0x20]
call fcn.00405700
lea ecx, [esp + 0x24]
call fcn.00405700
lea ecx, [esp + 0x10]
call fcn.00405700
lea ecx, [esp + 0x14]
call fcn.00405700
push 0x5486c0
lea ecx, [esp + 0x20]
call fcn.00405730
push str._value_
lea ecx, [esp + 0x18]
call fcn.00405730
push str._input_typehidden_name
lea ecx, [esp + 0x14]
call fcn.00405730
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x48]
push ecx
push edx
call fcn.004d0380
add esp, 4
lea ecx, [esp + 0x38]
push eax
lea eax, [esp + 0x1c]
push eax
push str.LangName
call fcn.00405730
lea ecx, [esp + 0x1c]
push eax
lea edx, [esp + 0x40]
push ecx
push edx
call fcn.00412dc0
push eax
lea eax, [esp + 0x48]
push eax
call fcn.00412dc0
lea ecx, [esp + 0x2c]
push eax
push ecx
call fcn.00412dc0
lea edx, [esp + 0x24]
push eax
push edx
call fcn.00412dc0
push eax
lea ecx, [esp + 0x1c]
call fcn.00413220
lea ecx, [esp + 0x20]
call fcn.00405700
lea ecx, [esp + 0x24]
call fcn.00405700
lea ecx, [esp + 0x38]
call fcn.00405700
lea ecx, [esp + 0x30]
call fcn.00405700
lea ecx, [esp + 0x34]
call fcn.00405700
lea ecx, [esp + 0x48]
call fcn.00405700
lea ecx, [esp + 0x10]
call fcn.00405700
lea ecx, [esp + 0x14]
call fcn.00405700
lea ecx, [esp + 0x1c]
call fcn.00405700
lea eax, [esp + 0x58]
lea edx, [esp + 0x54]
push eax
push ecx
mov ecx, esp
push edx
call fcn.00405440
call fcn.004d04c0
add esp, 8
test eax, eax
je 0x4d2b25
mov eax, dword [0x546560]
mov edx, dword [esp + 0x60]
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x58]
push ecx
push edx
push eax
lea ecx, [esp + 0x54]
call fcn.00452250
lea ecx, [esp + 0x28]
push ecx
mov ecx, 0x55d914
call fcn.004129b0
push 0x5486c0
lea ecx, [esp + 0x20]
call fcn.00405730
push str._value_
lea ecx, [esp + 0x18]
call fcn.00405730
push str._input_typehidden_name
lea ecx, [esp + 0x14]
call fcn.00405730
lea edx, [esp + 0x1c]
lea eax, [esp + 0x28]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
push str.Ihre_SHA
lea ecx, [esp + 0x44]
call fcn.00405730
push eax
lea edx, [esp + 0x20]
lea eax, [esp + 0x40]
push edx
push eax
call fcn.00412dc0
lea ecx, [esp + 0x44]
push eax
push ecx
call fcn.00412dc0
lea edx, [esp + 0x2c]
push eax
push edx
call fcn.00412dc0
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00412dc0
push eax
lea ecx, [esp + 0x1c]
call fcn.00413220
lea ecx, [esp + 0x20]
call fcn.00405700
lea ecx, [esp + 0x24]
call fcn.00405700
lea ecx, [esp + 0x38]
call fcn.00405700
lea ecx, [esp + 0x30]
call fcn.00405700
lea ecx, [esp + 0x34]
call fcn.00405700
lea ecx, [esp + 0x10]
call fcn.00405700
lea ecx, [esp + 0x14]
call fcn.00405700
lea ecx, [esp + 0x1c]
call fcn.00405700
lea ecx, [esp + 0x28]
call fcn.00405700
push str._input_typesubmit_namexxxx_value_9658_9658__Start_Autoupdate_9668_9668___stylefont_size:20px__font_weight:bold___br__n
lea ecx, [esp + 0x14]
call fcn.00405730
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00413220
lea ecx, [esp + 0x10]
call fcn.00405700
push str.__form___td___tr___table__n
lea ecx, [esp + 0x14]
call fcn.00405730
lea edx, [esp + 0x10]
lea ecx, [esp + 0x18]
push edx
call fcn.00413220
lea ecx, [esp + 0x10]
call fcn.00405700
push str._script__n
lea ecx, [esp + 0x14]
call fcn.00405730
lea eax, [esp + 0x10]
lea ecx, [esp + 0x18]
push eax
call fcn.00413220
lea ecx, [esp + 0x10]
call fcn.00405700
push str.el_fdocument.getElementById__xxx____el_f.submit____n
lea ecx, [esp + 0x14]
call fcn.00405730
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00413220
lea ecx, [esp + 0x10]
call fcn.00405700
push str.__script__n
lea ecx, [esp + 0x14]
call fcn.00405730
lea edx, [esp + 0x10]
lea ecx, [esp + 0x18]
push edx
call fcn.00413220
lea ecx, [esp + 0x10]
call fcn.00405700
mov eax, dword [0x553d9c]
mov ecx, 0x81
mov dword [esp + 0x64], eax
xor eax, eax
lea edi, [esp + 0x68]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x64]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov edx, dword [0x55cedc]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [esp + 0x64]
push edx
push eax
call esi
push 0x546ef8
lea ecx, [esp + 0x14]
call fcn.00405730
mov eax, dword [eax]
lea ecx, [esp + 0x64]
push eax
push ecx
call esi
lea ecx, [esp + 0x10]
call fcn.00405700
push str.Autoupdate
lea ecx, [esp + 0x14]
call fcn.00405730
mov eax, dword [eax]
lea edx, [esp + 0x64]
push eax
push edx
call esi
lea ecx, [esp + 0x10]
call fcn.00405700
push str._.html
lea ecx, [esp + 0x14]
call fcn.00405730
mov eax, dword [eax]
push eax
lea eax, [esp + 0x68]
push eax
call esi
lea ecx, [esp + 0x10]
call fcn.00405700
lea ecx, [esp + 0x64]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea edx, [esp + 0x18]
lea eax, [esp + 0x64]
push edx
push ecx
mov ecx, esp
push eax
call fcn.00412740
call fcn.004d0f60
add esp, 8
call fcn.004d1040
push 5
push 0
lea ecx, [esp + 0x6c]
push 0
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov esi, dword [esp + 0x270]
push 0x28038
push esi
mov dword [0x55d924], 0
call dword [sym.imp.USER32.dll_KillTimer]
push 0x4d1740
push 0x3e8
push 0x28038
push esi
call dword [sym.imp.USER32.dll_SetTimer]
lea ecx, [esp + 0x5c]
call fcn.00405700
lea ecx, [esp + 0x54]
call fcn.00405700
lea ecx, [esp + 0x50]
call fcn.00405700
lea ecx, [esp + 0x44]
call fcn.00405700
lea ecx, [esp + 0x4c]
call fcn.00405700
lea ecx, [esp + 0x2c]
call fcn.00405700
lea ecx, [esp + 0x18]
call fcn.00405700
pop edi
pop esi
pop ebx
add esp, 0x260
ret