Function at 0x457a40
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x502d59
mov eax, dword fs:[0]
push eax
sub esp, 0x42c
mov eax, dword [0x5732cc]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x388], esi
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x384], ebx
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x38c], edi
mov dword [ebp - 4], 0
push 0x468ad0
call fcn.004dbbc8
add esp, 4
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0xb4]
call fcn.0041f520
mov byte [ebp - 4], 1
mov byte [ebp - 4], 2
push str.Systray_PerformAction
lea eax, [ebp - 0xb4]
push eax
call fcn.0041e560
add esp, 8
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], 1
jmp 0x457b15
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb4]
call fcn.0041dc00
cmp byte [esi + 0x276], 0
jne 0x458afb
mov edx, dword [0x570024]
mov dword [ebp - 0x390], edx
mov byte [ebp - 4], 4
lea eax, [ebp - 0x390]
push eax
call fcn.0046cf50
add esp, 4
mov ecx, dword [ebp - 0x390]
cmp dword [ecx - 8], 0
jne 0x457b6c
push str.usair.billeo.com
lea ecx, [ebp - 0x390]
call fcn.004199b0
push 0
call fcn.004dfa84
add esp, 4
push edx
push eax
call fcn.004294f0
mov ecx, eax
call fcn.0048fc30
test ebx, ebx
je 0x458977
cmp byte [ebx], 0
je 0x458977
push str.URL_PARAMETERS
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x457eca
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0xb4]
call fcn.0041f520
mov ebx, 0xc
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0xd
test edi, edi
mov eax, edi
jne 0x457bdf
mov eax, 0x5422ee
push eax
push str.User_action:_Navigate_to_URL__
lea edx, [ebp - 0xb4]
push edx
call fcn.0041e560
add esp, 8
push eax
call fcn.0041e560
add esp, 8
lea eax, [ebp - 0xb4]
push eax
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x457c2e
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb4]
call fcn.0041dc00
push edi
lea ecx, [ebp - 0x388]
call fcn.0041ad50
mov byte [ebp - 4], 0xf
push str._SESSION_ID_
lea ecx, [ebp - 0x388]
call fcn.00424960
cmp eax, 0xffffffff
jne 0x457d62
lea ecx, [ebp - 0x388]
push ecx
lea ecx, [ebp - 0x384]
call fcn.0041ea10
mov byte [ebp - 4], 0x10
push str.WEB_SERVICE_HOST
lea ecx, [ebp - 0x384]
call fcn.00424960
cmp eax, 0xffffffff
je 0x457ca8
mov edx, dword [ebp - 0x390]
push edx
push str.WEB_SERVICE_HOST
lea ecx, [ebp - 0x384]
call fcn.004316b0
push 1
push 0
push 0
mov eax, dword [ebp - 0x384]
push eax
push str.open
mov ecx, dword [esi + 4]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov esi, eax
cmp esi, 0x20
jge 0x457d37
push 0xffffffffffffffff
push 1
push 2
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0xb4]
call fcn.0041f520
mov ebx, 0x11
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x12
push esi
push str.CMainWindow::PerformAction__:_ShellExecute___failed_with_error_code
lea edx, [ebp - 0xb4]
push edx
call fcn.0041e560
add esp, 8
mov ecx, eax
call fcn.004365a0
lea eax, [ebp - 0xb4]
push eax
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb4]
call fcn.0041dc00
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x384]
call fcn.00416630
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x388]
jmp 0x458ae0
lea ecx, [ebp - 0x88]
call fcn.004a5d20
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38c]
push ecx
lea ecx, [ebp - 0x88]
call fcn.004a60d0
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x38c]
cmp dword [eax - 8], 0
je 0x457e90
push eax
push str._SESSION_ID_
lea ecx, [ebp - 0x388]
call fcn.004316b0
test eax, eax
jle 0x457e90
lea edx, [ebp - 0x388]
push edx
lea ecx, [ebp - 0x384]
call fcn.0041ea10
mov byte [ebp - 4], 0x16
push str.WEB_SERVICE_HOST
lea ecx, [ebp - 0x384]
call fcn.00424960
cmp eax, 0xffffffff
je 0x457df2
mov eax, dword [ebp - 0x390]
push eax
push str.WEB_SERVICE_HOST
lea ecx, [ebp - 0x384]
call fcn.004316b0
push 1
push 0
push 0
mov ecx, dword [ebp - 0x384]
push ecx
push str.open
mov edx, dword [esi + 4]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov esi, eax
cmp esi, 0x20
jge 0x457e81
push 0xffffffffffffffff
push 1
push 2
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x17
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x18
push esi
push str.CMainWindow::PerformAction__:_ShellExecute___failed_with_error_code
lea eax, [ebp - 0x434]
push eax
call fcn.0041e560
add esp, 8
mov ecx, eax
call fcn.004365a0
lea ecx, [ebp - 0x434]
push ecx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x434]
call fcn.0041dc00
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x384]
call fcn.00416630
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38c]
call fcn.00416630
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x88]
call fcn.004a6060
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x388]
jmp 0x458ae0
test edi, edi
jne 0x457f44
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x1a
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x1b
push str.ActionLink_is_Null
lea edx, [ebp - 0x434]
push edx
call fcn.0041e560
add esp, 8
lea eax, [ebp - 0x434]
push eax
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.0041dc00
jmp 0x458ae5
push str.LOGIN
push edi
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpiA]
call ebx
test eax, eax
jne 0x457fdf
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x1d
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x1e
push str.User_action:_LOCAL_ACTION_LOGIN
lea ecx, [ebp - 0x434]
push ecx
call fcn.0041e560
add esp, 8
lea edx, [ebp - 0x434]
push edx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x457fc4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.0041dc00
mov ecx, esi
call fcn.004578b0
jmp 0x458ae5
push str.LOGOUT
push edi
call ebx
test eax, eax
jne 0x458074
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x20
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x21
push str.User_action:_LOCAL_ACTION_LOGOUT
lea eax, [ebp - 0x434]
push eax
call fcn.0041e560
add esp, 8
lea ecx, [ebp - 0x434]
push ecx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x458059
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.0041dc00
mov ecx, esi
call fcn.0044fec0
jmp 0x458ae5
push str.SHOWACCOUNTS
push edi
call ebx
test eax, eax
je 0x458ae5
push str.SHOWWALLET
push edi
call ebx
test eax, eax
je 0x458ae5
push str.SHOWPASSWORDS
push edi
call ebx
test eax, eax
je 0x458ae5
push str.SHOWPREFERENCES
push edi
call ebx
test eax, eax
je 0x458ae5
push str.REFRESH
push edi
call ebx
test eax, eax
jne 0x45814a
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x23
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x24
push str.User_action:_LOCAL_ACTION_REFRESH
lea edx, [ebp - 0x434]
push edx
call fcn.0041e560
add esp, 8
lea eax, [ebp - 0x434]
push eax
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x45812e
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.0041dc00
lea ecx, [esi + 0x64]
call fcn.0042bb70
jmp 0x458ae5
push str.BACKUP
push edi
call ebx
test eax, eax
jne 0x458261
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x26
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x27
push str.User_action:_LOCAL_ACTION_BACKUP
lea ecx, [ebp - 0x434]
push ecx
call fcn.0041e560
add esp, 8
lea edx, [ebp - 0x434]
push edx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x4581c4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.0041dc00
mov eax, dword [0x570024]
mov dword [ebp - 0x384], eax
mov bl, 0x29
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x38c]
push ecx
call fcn.004294f0
mov ecx, eax
call fcn.0048f870
mov byte [ebp - 4], 0x2a
mov ecx, dword [esi + 0x8c]
mov eax, dword [eax]
lea edx, [ebp - 0x384]
push edx
push ecx
push eax
mov eax, dword [esi + 4]
push eax
call fcn.004395f0
add esp, 0x10
mov edi, eax
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x38c]
call fcn.00416630
cmp edi, 0xffffffff
je 0x458ad6
cmp edi, 1
je 0x458ad6
mov eax, dword [esi + 0x8c]
mov ecx, dword [ebp - 0x384]
push ecx
push 0x3ec
push 0x66
push 0
push eax
mov edx, dword [esi + 4]
push edx
call fcn.00439050
add esp, 0x18
jmp 0x458ad6
push str.RESTORE
push edi
call ebx
test eax, eax
jne 0x4583d2
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x2b
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x2c
push str.User_action:_LOCAL_ACTION_RESTORE
lea eax, [ebp - 0x434]
push eax
call fcn.0041e560
add esp, 8
lea ecx, [ebp - 0x434]
push ecx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x4582db
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.0041dc00
mov edx, dword [0x570024]
mov dword [ebp - 0x38c], edx
mov bl, 0x2e
mov byte [ebp - 4], bl
lea eax, [ebp - 0x384]
push eax
call fcn.004294f0
mov ecx, eax
call fcn.0048f870
mov byte [ebp - 4], 0x2f
mov ecx, dword [esi + 0x8c]
mov eax, dword [eax]
lea edx, [ebp - 0x38c]
push edx
push ecx
push eax
mov eax, dword [esi + 4]
push eax
call fcn.00439a10
add esp, 0x10
mov edi, eax
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x384]
call fcn.00416630
cmp edi, 0xffffffff
je 0x4583c3
cmp edi, 1
jne 0x4583a0
call fcn.0044fc50
mov ecx, eax
call fcn.00443740
test al, al
je 0x458369
call fcn.00431060
mov ecx, eax
call fcn.00446750
test al, al
jne 0x4583c3
push 0
call fcn.004294f0
mov ecx, eax
call fcn.0048ed70
mov eax, dword [esi + 0x8c]
push 0x414
push 0x40
push eax
mov ecx, dword [esi + 4]
push ecx
call fcn.00470420
add esp, 0x10
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x38c]
jmp 0x458ae0
mov eax, dword [esi + 0x8c]
mov edx, dword [ebp - 0x38c]
push edx
push 0x3ef
push 0x66
push 0
push eax
mov eax, dword [esi + 4]
push eax
call fcn.00439050
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x38c]
jmp 0x458ae0
push str.ENTERBILL
push edi
call ebx
test eax, eax
jne 0x458483
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x30
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x31
push str.User_action:_LOCAL_ACTION_ENTER_BILL
lea ecx, [ebp - 0x434]
push ecx
call fcn.0041e560
add esp, 8
lea edx, [ebp - 0x434]
push edx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.0041dc00
push 0
lea ecx, [ebp - 0x60]
call fcn.0045d470
mov byte [ebp - 4], 0x33
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x60]
call fcn.00452600
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x60]
call fcn.0045d550
jmp 0x458ae5
push str.SHOWABOUT
push edi
call ebx
test eax, eax
jne 0x4585a5
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x34
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x35
push str.User_action:_LOCAL_ACTION_SHOW_ABOUT_USAIRWAYS
lea eax, [ebp - 0x434]
push eax
call fcn.0041e560
add esp, 8
lea ecx, [ebp - 0x434]
push ecx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x4584fd
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.0041dc00
cmp byte [esi + 0x275], 0
jne 0x458ae5
push 0x519c70
lea ecx, [ebp - 0x38c]
call fcn.0041ad50
mov bl, 0x37
mov byte [ebp - 4], bl
mov edx, dword [ebp - 0x38c]
push edx
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x45858f
mov byte [esi + 0x275], 1
lea ecx, [ebp - 0x380]
call fcn.0041ab40
mov byte [ebp - 4], 0x38
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x380]
call fcn.00452690
mov byte [esi + 0x275], 0
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x380]
call fcn.00418d70
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x38c]
jmp 0x458ae0
push eax
call dword [sym.imp.USER32.dll_BringWindowToTop]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x38c]
jmp 0x458ae0
push str.SHOWHELP
push edi
call ebx
test eax, eax
jne 0x458638
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x39
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x3a
push str.User_action:_LOCAL_ACTION_SHOW_HELP
lea eax, [ebp - 0x434]
push eax
call fcn.0041e560
add esp, 8
lea ecx, [ebp - 0x434]
push ecx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.0041dc00
push 0xe3
call fcn.0043a140
add esp, 4
jmp 0x458ae5
push str.CHECK_FOR_UPDATES
push edi
call ebx
test eax, eax
jne 0x4586d4
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x3c
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x3d
push str.User_action:_LOCAL_ACTION_CHECK_FOR_UPDATES
lea edx, [ebp - 0x434]
push edx
call fcn.0041e560
add esp, 8
lea eax, [ebp - 0x434]
push eax
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x4586b2
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.0041dc00
mov byte [esi + 0x26d], 1
mov ecx, esi
call fcn.0044f7e0
jmp 0x458ae5
push str.EXIT
push edi
call ebx
test eax, eax
jne 0x458781
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x3f
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x40
push str.User_action:_LOCAL_ACTION_EXIT
lea ecx, [ebp - 0x434]
push ecx
call fcn.0041e560
add esp, 8
lea edx, [ebp - 0x434]
push edx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x45874e
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.0041dc00
mov ecx, esi
call fcn.0044fec0
push 0
push 0
push 0x10
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x458ae5
push str.CHECKHEALTH
push edi
call ebx
test eax, eax
jne 0x458831
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x42
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x43
push str.User_action:_LOCAL_ACTION_HEALTH_CHECK
lea ecx, [ebp - 0x434]
push ecx
call fcn.0041e560
add esp, 8
lea edx, [ebp - 0x434]
push edx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x4587fb
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.0041dc00
cmp byte [esi + 0x274], 0
jne 0x458ae5
mov byte [esi + 0x274], 1
mov ecx, esi
call fcn.004538e0
mov byte [esi + 0x274], 0
jmp 0x458ae5
push str.UNINSTALL
push edi
call ebx
push 0xffffffffffffffff
push 1
push 1
test eax, eax
jne 0x45893b
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x45
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x46
push str.User_action:_LOCAL_ACTION_UNINSTALL
lea eax, [ebp - 0x434]
push eax
call fcn.0041e560
add esp, 8
lea ecx, [ebp - 0x434]
push ecx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x4588ab
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.0041dc00
mov byte [esi + 0x276], 1
push str.Are_you_sure_you_wish_to_uninstall_the__nUS_Airways_Dividend_Miles_StoreFront_toolbar_
lea ecx, [ebp - 0x384]
call fcn.0041ad50
mov bl, 0x48
mov byte [ebp - 4], bl
push 0x514dec
lea ecx, [ebp - 0x38c]
call fcn.0041ad50
mov byte [ebp - 4], 0x49
push 0x24
mov edx, dword [ebp - 0x38c]
push edx
mov eax, dword [ebp - 0x384]
push eax
mov ecx, dword [esi + 4]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x458921
call fcn.00433800
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x38c]
call fcn.00416630
jmp 0x458ad6
mov byte [esi + 0x276], 0
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x38c]
call fcn.00416630
jmp 0x458ad6
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 0x4a
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x4b
push str.ActionLink___Else
jmp 0x457efe
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 5
mov byte [ebp - 4], bl
mov byte [ebp - 4], 6
test edi, edi
mov eax, edi
jne 0x4589ad
mov eax, 0x5422ee
push eax
push str.User_action:_Navigate_to_URL__
lea ecx, [ebp - 0x434]
push ecx
call fcn.0041e560
add esp, 8
push eax
call fcn.0041e560
add esp, 8
lea edx, [ebp - 0x434]
push edx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x4589fc
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x434]
call fcn.0041dc00
push edi
lea ecx, [ebp - 0x384]
call fcn.0041ad50
mov byte [ebp - 4], 8
push str.WEB_SERVICE_HOST
lea ecx, [ebp - 0x384]
call fcn.00424960
cmp eax, 0xffffffff
je 0x458a47
mov eax, dword [ebp - 0x390]
push eax
push str.WEB_SERVICE_HOST
lea ecx, [ebp - 0x384]
call fcn.004316b0
push 1
push 0
push 0
mov ecx, dword [ebp - 0x384]
push ecx
push str.open
mov edx, dword [esi + 4]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov esi, eax
cmp esi, 0x20
jge 0x458ad6
push 0xffffffffffffffff
push 1
push 2
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x434]
call fcn.0041f520
mov ebx, 9
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0xa
push esi
push str.CMainWindow::PerformAction__:_ShellExecute___failed_with_error_code
lea eax, [ebp - 0x434]
push eax
call fcn.0041e560
add esp, 8
mov ecx, eax
call fcn.004365a0
lea ecx, [ebp - 0x434]
push ecx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x434]
call fcn.0041dc00
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x384]
call fcn.00416630
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x390]
call fcn.00416630
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004db901
mov esp, ebp
pop ebp
ret 0xc