Function at 0x44c760
Capabilities:
Contain obfuscated stackstrings
Create directory
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x501cd9
mov eax, dword fs:[0]
push eax
sub esp, 0x198
mov eax, dword [0x5732cc]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0xe8], esi
mov ebx, dword [ebp + 0x14]
xor edi, edi
mov dword [ebp - 0xec], edi
mov dword [ebp - 4], edi
push 0x468ad0
call fcn.004dbbc8
add esp, 4
mov dword [ebx], 1
cmp dword [ebp + 0x10], edi
je 0x44c7d3
call fcn.004294f0
mov ecx, eax
call fcn.0048eb50
test al, al
jne 0x44c9d6
xor eax, eax
mov dword [esi + 0x34], eax
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], eax
mov dword [esi + 0x40], eax
mov dword [esi + 0x1b4], 0xffffffff
mov byte [ebp - 0xe1], al
mov byte [ebp - 0xcd], al
mov byte [esi + 0x28], al
lea eax, [esi + 0x44]
lea ebx, [esi + 0x20]
push edi
push edi
push 1
push 4
push eax
push 0xcd
mov ecx, ebx
call fcn.0045c280
test eax, eax
je 0x44c9d6
push edi
push edi
push 1
push 4
lea eax, [esi + 0x30]
push eax
push 0xcf
mov ecx, ebx
call fcn.0045c280
test eax, eax
je 0x44c9d6
lea edi, [esi + 0x2c]
push 0
push 0
push 1
push 4
push edi
push 0xd6
mov ecx, ebx
call fcn.0045c280
test eax, eax
je 0x44c9d6
test ebx, ebx
je 0x44c862
lea eax, [ebx - 0x20]
jmp 0x44c864
xor eax, eax
push 0xd3
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0
push pe_nt_image_headers32
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [esi + 0x5c], eax
lea ecx, [esi + 0x44]
call fcn.00418070
lea ecx, [esi + 0x44]
call fcn.00431570
push 0x5422ee
lea eax, [esi + 0x44]
push eax
call fcn.00422270
test al, al
jne 0x44c8c0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [esi + 0x44]
push eax
push 0xcd
mov ecx, ebx
call fcn.0045c280
mov ecx, esi
call fcn.00448ee0
test al, al
je 0x44c9d6
cmp byte [esi + 0x1ad], 0
je 0x44c9a2
mov edx, dword [0x570024]
mov dword [ebp - 0xdc], edx
mov byte [ebp - 4], 1
lea eax, [ebp - 0xdc]
push eax
mov ecx, esi
call fcn.0044b990
lea ecx, [ebp - 0xdc]
push ecx
mov ecx, edi
call fcn.0041e3d0
push 0
call fcn.0046a840
add esp, 4
push eax
lea ecx, [ebp - 0xf0]
call fcn.0041ad50
mov byte [ebp - 4], 2
lea edx, [ebp - 0xf0]
push edx
push 0x514264
call fcn.00422290
test al, al
je 0x44c984
push ecx
mov ecx, esp
mov dword [ebp - 0xb4], esp
push edi
call fcn.0041ea10
mov byte [ebp - 4], 3
mov byte [ebp - 4], 2
call fcn.0046f8d0
add esp, 4
test al, al
jne 0x44c984
lea eax, [ebp - 0xcc]
push eax
call fcn.0046f330
add esp, 4
mov byte [ebp - 4], 4
push eax
mov ecx, edi
call fcn.0041e3d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xcc]
call fcn.00416630
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf0]
call fcn.00416630
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xdc]
call fcn.00416630
mov ecx, dword [edi]
cmp dword [ecx - 8], 0
jne 0x44ca34
mov eax, dword [esi + 0x24]
push 0x413
push 0x66
push 1
push eax
mov edx, dword [esi + 4]
push edx
call fcn.00439050
add esp, 0x14
cmp eax, 1
je 0x44c9f6
mov eax, dword [esi + 0x4c]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004db901
mov esp, ebp
pop ebp
ret 0x10
lea ecx, [ebp - 0xcc]
push ecx
call fcn.0046f330
add esp, 4
mov byte [ebp - 4], 5
push eax
mov ecx, edi
call fcn.0041e3d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xcc]
call fcn.00416630
mov byte [ebp - 0xcd], 1
mov eax, dword [edi]
push eax
mov edx, dword [esi + 0x4c]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov byte [ebp - 0xce], 0
push 0
call fcn.0046a840
add esp, 4
push eax
lea ecx, [ebp - 0xdc]
call fcn.0041ad50
mov byte [ebp - 4], 6
lea eax, [ebp - 0xdc]
push eax
push 0x514264
call fcn.00422290
test al, al
je 0x44d436
push ecx
mov ecx, esp
mov dword [ebp - 0xb4], esp
push edi
call fcn.0041ea10
mov byte [ebp - 4], 7
mov byte [ebp - 4], 6
call fcn.0046f8d0
add esp, 4
test al, al
jne 0x44d436
mov byte [ebp - 0xbd], al
mov byte [ebp - 0xbe], al
push 0x5422ee
lea ecx, [ebp - 0xd8]
call fcn.0041ad50
mov byte [ebp - 4], 8
push 0x5422ee
lea ecx, [ebp - 0xc8]
call fcn.0041ad50
mov byte [ebp - 4], 9
push 0x5422ee
lea ecx, [ebp - 0xe0]
call fcn.0041ad50
mov byte [ebp - 4], 0xa
push edi
call fcn.00435110
add esp, 4
test al, al
je 0x44cb02
mov byte [ebp - 0xbd], 1
push edi
lea ecx, [ebp - 0xc8]
call fcn.0041e3d0
jmp 0x44cc98
mov eax, dword [esi + 0x44]
mov ecx, dword [edi]
push eax
push ecx
call fcn.004381e0
add esp, 8
test al, al
jne 0x44cc98
mov eax, dword [esi + 0x44]
mov edi, dword [edi]
push eax
push edi
lea ecx, [ebp - 0xcc]
push ecx
call fcn.00434c00
add esp, 0xc
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0xd8]
call fcn.0041e3d0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xcc]
call fcn.00416630
push 1
push 0
mov edi, dword [ebp - 0xd8]
push edi
call fcn.0046dc30
add esp, 0xc
test al, al
je 0x44cc98
push str.ewallet.dat
lea ecx, [ebp - 0x28]
call fcn.0041ad50
mov byte [ebp - 4], 0xc
push str.pwd_vault.dat
lea ecx, [ebp - 0x24]
call fcn.0041ad50
mov byte [ebp - 4], 0xd
push str.misc_vault.dat
lea ecx, [ebp - 0x20]
call fcn.0041ad50
mov byte [ebp - 4], 0xe
push 0x5422ee
lea ecx, [ebp - 0x1c]
call fcn.0041ad50
mov byte [ebp - 4], 0xf
push 0x5422ee
lea ecx, [ebp - 0xc4]
call fcn.0041ad50
mov byte [ebp - 4], 0x10
mov dword [ebp - 0xfc], 0
jmp 0x44cbd0
mov ebx, dword [ebp - 0xfc]
lea ebx, [ebp + ebx*4 - 0x28]
push 0x5422ee
push ebx
call fcn.0042f870
test al, al
je 0x44cc73
push 0x5422ee
lea ecx, [ebp - 0xc4]
call fcn.004199b0
push edi
mov edx, dword [edi - 8]
push edx
lea ecx, [ebp - 0xc4]
call fcn.0041ce60
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax - 8]
cmp byte [ecx + eax - 1], 0x5c
je 0x44cc2d
push 0x514670
lea ecx, [ebp - 0xc4]
call fcn.0041d470
mov eax, dword [ebx]
push eax
mov eax, dword [eax - 8]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041ce60
push 1
push 0
mov ecx, dword [ebp - 0xc4]
push ecx
call fcn.0046dc30
add esp, 0xc
test al, al
je 0x44cf93
mov byte [ebp - 0xbd], 1
lea edx, [ebp - 0xd8]
push edx
lea ecx, [ebp - 0xc8]
call fcn.0041e3d0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xc4]
call fcn.00416630
mov byte [ebp - 4], 0xa
push fcn.00416630
push 4
push 4
lea eax, [ebp - 0x28]
push eax
call fcn.004dbfd0
push 0x5422ee
lea ecx, [ebp - 0xc4]
call fcn.0041ad50
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xcc]
push ecx
call fcn.0046f330
add esp, 4
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041e3d0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xcc]
call fcn.00416630
mov eax, dword [esi + 0x44]
push eax
mov edx, dword [ebp - 0xc4]
push edx
lea eax, [ebp - 0xcc]
push eax
call fcn.00434c00
add esp, 0xc
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0xd8]
call fcn.0041e3d0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xcc]
call fcn.00416630
lea ecx, [ebp - 0xd8]
push ecx
lea ecx, [ebp - 0xe0]
call fcn.0041e3d0
push 1
push 0
mov edi, dword [ebp - 0xd8]
push edi
call fcn.0046dc30
add esp, 0xc
test al, al
je 0x44ce62
push str.ewallet.dat
lea ecx, [ebp - 0x28]
call fcn.0041ad50
mov byte [ebp - 4], 0x14
push str.pwd_vault.dat
lea ecx, [ebp - 0x24]
call fcn.0041ad50
mov byte [ebp - 4], 0x15
push str.misc_vault.dat
lea ecx, [ebp - 0x20]
call fcn.0041ad50
mov byte [ebp - 4], 0x16
push 0x5422ee
lea ecx, [ebp - 0x1c]
call fcn.0041ad50
mov byte [ebp - 4], 0x17
push 0x5422ee
lea ecx, [ebp - 0xbc]
call fcn.0041ad50
mov byte [ebp - 4], 0x18
mov dword [ebp - 0xf8], 0
jmp 0x44cdb0
mov ebx, dword [ebp - 0xf8]
lea ebx, [ebp + ebx*4 - 0x28]
push 0x5422ee
push ebx
call fcn.0042f870
test al, al
je 0x44ce3d
push 0x5422ee
lea ecx, [ebp - 0xbc]
call fcn.004199b0
push edi
mov edx, dword [edi - 8]
push edx
lea ecx, [ebp - 0xbc]
call fcn.0041ce60
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax - 8]
cmp byte [eax + ecx - 1], 0x5c
je 0x44ce09
push 0x514670
lea ecx, [ebp - 0xbc]
call fcn.0041d470
mov eax, dword [ebx]
push eax
mov eax, dword [eax - 8]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0041ce60
push 1
push 0
mov ecx, dword [ebp - 0xbc]
push ecx
call fcn.0046dc30
add esp, 0xc
test al, al
je 0x44cf9e
mov byte [ebp - 0xbe], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xbc]
call fcn.00416630
mov byte [ebp - 4], 0x11
push fcn.00416630
push 4
push 4
lea edx, [ebp - 0x28]
push edx
call fcn.004dbfd0
cmp byte [ebp - 0xbe], 0
jne 0x44ce78
cmp byte [ebp - 0xbd], 0
je 0x44d399
lea ecx, [ebp - 0x28]
call fcn.00481680
mov byte [ebp - 4], 0x19
xor ebx, ebx
mov dword [ebp - 0xd4], ebx
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xb0]
call fcn.0049dd00
mov byte [ebp - 4], 0x1b
push 0x43ef60
call fcn.0049f500
add esp, 4
mov dword [ebp - 0xf4], ebx
mov eax, dword [0x570024]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 4], 0x1c
lea edi, [esi + 0x34]
mov ecx, edi
call fcn.00428a90
test al, al
je 0x44cefc
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + 0x44]
push ebx
push 0x431e30
lea edx, [ebp - 0xcc]
push edx
lea edx, [esi + 0x48]
push edx
push edi
push eax
push ecx
lea ecx, [ebp - 0xb0]
call fcn.0049e1f0
mov ebx, eax
mov dword [ebp - 0xf4], ebx
cmp byte [ebp - 0xbd], 0
je 0x44d131
mov eax, dword [ebp - 0xc8]
cmp dword [eax - 8], 0
je 0x44d12a
push 0x5422ee
lea ecx, [ebp - 0xbc]
call fcn.0041ad50
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0xc8]
push eax
mov ecx, dword [eax - 8]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.0041ce60
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax - 8]
cmp byte [ecx + eax - 1], 0x5c
je 0x44cf63
push 0x514670
lea ecx, [ebp - 0xbc]
call fcn.0041d470
push str.ewallet.dat
lea ecx, [ebp - 0xbc]
call fcn.0041d470
cmp ebx, 0xfffffffe
jne 0x44cfa9
mov byte [ebp - 0xbd], 0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xbc]
call fcn.00416630
jmp 0x44d131
inc dword [ebp - 0xfc]
jmp 0x44cbd0
inc dword [ebp - 0xf8]
jmp 0x44cdb0
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x1a4]
call fcn.0041f520
mov ebx, 0x1e
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x1f
push str.Login_dialog:_AuthenticatorWebService_failed.
lea edx, [ebp - 0x1a4]
push edx
call fcn.0041e560
add esp, 8
lea eax, [ebp - 0x1a4]
push eax
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x44d013
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1a4]
call fcn.0041dc00
lea edi, [esi + 0x2c]
push edi
lea ecx, [ebp - 0xf0]
call fcn.0041ea10
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xc8]
push ecx
mov ecx, edi
call fcn.0041e3d0
lea ebx, [esi + 0x34]
mov ecx, ebx
call fcn.00428a90
test al, al
je 0x44d069
mov ecx, esi
call fcn.00449a10
test al, al
je 0x44d069
push ebx
lea ecx, [ebp - 0x28]
call fcn.004847e0
test al, al
jne 0x44d081
mov ecx, ebx
call fcn.00428a90
test al, al
jne 0x44d0ef
push ebx
lea ecx, [ebp - 0x28]
call fcn.004847e0
test al, al
je 0x44d0ef
lea edx, [ebp - 0xd4]
push edx
mov eax, dword [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x28]
call fcn.00482200
test al, al
jne 0x44d0f6
lea ecx, [esi + 0x44]
mov edx, dword [ecx]
mov eax, dword [edx - 8]
mov edx, dword [edi]
mov edx, dword [edx - 8]
mov dword [ebp - 0xb4], edx
push eax
call fcn.00417430
push eax
mov eax, dword [ebp - 0xb4]
push eax
mov ecx, edi
call fcn.00417430
push eax
push ebx
call fcn.0041d140
mov ecx, eax
call fcn.004680e0
test al, al
je 0x44d0ef
lea ecx, [ebp - 0xd4]
push ecx
mov edx, dword [ebp - 0xbc]
push edx
lea ecx, [ebp - 0x28]
call fcn.00482200
test al, al
jne 0x44d0f6
mov byte [ebp - 0xbd], 0
lea eax, [ebp - 0xf0]
push eax
mov ecx, edi
call fcn.0041e3d0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xf0]
call fcn.00416630
mov ebx, dword [ebp - 0xf4]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xbc]
call fcn.00416630
jmp 0x44d131
mov byte [ebp - 0xbd], 0
cmp byte [ebp - 0xbe], 0
je 0x44d344
mov edi, dword [ebp - 0xe0]
cmp dword [edi - 8], 0
je 0x44d33d
push 0x5422ee
lea ecx, [ebp - 0xbc]
call fcn.0041ad50
mov byte [ebp - 4], 0x22
push edi
mov ecx, dword [edi - 8]
push ecx
lea ecx, [ebp - 0xbc]
call fcn.0041ce60
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax - 8]
cmp byte [ecx + eax - 1], 0x5c
je 0x44d192
push 0x514670
lea ecx, [ebp - 0xbc]
call fcn.0041d470
push str.ewallet.dat
lea ecx, [ebp - 0xbc]
call fcn.0041d470
cmp ebx, 0xfffffffe
jne 0x44d1c2
mov byte [ebp - 0xbe], 0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xbc]
call fcn.00416630
jmp 0x44d344
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x1a4]
call fcn.0041f520
mov ebx, 0x23
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x24
push str.Login_dialog:_AuthenticatorWebService_failed.
lea edx, [ebp - 0x1a4]
push edx
call fcn.0041e560
add esp, 8
lea eax, [ebp - 0x1a4]
push eax
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x44d22c
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1a4]
call fcn.0041dc00
lea edi, [esi + 0x2c]
push edi
lea ecx, [ebp - 0xf4]
call fcn.0041ea10
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xe0]
push ecx
mov ecx, edi
call fcn.0041e3d0
lea ebx, [esi + 0x34]
mov ecx, ebx
call fcn.00428a90
test al, al
je 0x44d282
mov ecx, esi
call fcn.00449a10
test al, al
je 0x44d282
push ebx
lea ecx, [ebp - 0x28]
call fcn.004847e0
test al, al
jne 0x44d29a
mov ecx, ebx
call fcn.00428a90
test al, al
jne 0x44d308
push ebx
lea ecx, [ebp - 0x28]
call fcn.004847e0
test al, al
je 0x44d308
lea edx, [ebp - 0xd4]
push edx
mov eax, dword [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x28]
call fcn.00482200
test al, al
jne 0x44d30f
lea ecx, [esi + 0x44]
mov edx, dword [ecx]
mov eax, dword [edx - 8]
mov edx, dword [edi]
mov edx, dword [edx - 8]
mov dword [ebp - 0xb4], edx
push eax
call fcn.00417430
push eax
mov eax, dword [ebp - 0xb4]
push eax
mov ecx, edi
call fcn.00417430
push eax
push ebx
call fcn.0041d140
mov ecx, eax
call fcn.004680e0
test al, al
je 0x44d308
lea ecx, [ebp - 0xd4]
push ecx
mov edx, dword [ebp - 0xbc]
push edx
lea ecx, [ebp - 0x28]
call fcn.00482200
test al, al
jne 0x44d30f
mov byte [ebp - 0xbe], 0
lea eax, [ebp - 0xf4]
push eax
mov ecx, edi
call fcn.0041e3d0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0xf4]
call fcn.00416630
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xbc]
call fcn.00416630
jmp 0x44d344
mov byte [ebp - 0xbe], 0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xcc]
call fcn.00416630
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xb0]
call fcn.0049e180
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0xd4]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x28]
call fcn.00483420
mov al, byte [ebp - 0xbd]
test al, al
jne 0x44d625
cmp byte [ebp - 0xbe], al
jne 0x44d5cc
mov eax, dword [esi + 0x24]
push 0xe8
push 0x66
push 1
push eax
mov edx, dword [esi + 4]
push edx
call fcn.00439050
add esp, 0x14
cmp eax, 1
jne 0x44d558
mov byte [ebp - 0xe1], al
lea eax, [ebp - 0xb4]
push eax
call fcn.0046f330
add esp, 4
mov byte [ebp - 4], 0x27
push eax
lea ecx, [esi + 0x2c]
call fcn.0041e3d0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xb4]
call fcn.00416630
mov edi, dword [esi + 0x2c]
push edi
mov ecx, dword [esi + 0x4c]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xc4]
call fcn.00416630
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xe0]
call fcn.00416630
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xc8]
call fcn.00416630
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd8]
call fcn.00416630
lea edi, [esi + 0x2c]
push ecx
mov ecx, esp
mov dword [ebp - 0xb4], esp
push edi
call fcn.0041ea10
mov byte [ebp - 4], 0x37
mov byte [ebp - 4], 6
call fcn.0046faf0
add esp, 4
test al, al
jne 0x44d495
mov ecx, dword [edi]
mov eax, dword [ecx - 8]
cmp byte [ecx + eax - 1], 0x5c
jne 0x44d495
dec eax
push eax
push 0
lea ecx, [ebp - 0xb4]
push ecx
mov ecx, edi
call fcn.004249b0
mov byte [ebp - 4], 0x38
push eax
mov ecx, edi
call fcn.0041e3d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb4]
call fcn.00416630
push edi
call fcn.00435110
add esp, 4
test al, al
jne 0x44db85
mov eax, dword [esi + 0x44]
mov ecx, dword [edi]
push eax
push ecx
call fcn.004381e0
add esp, 8
test al, al
jne 0x44db7e
push ecx
mov ecx, esp
mov dword [ebp - 0xb4], esp
push edi
call fcn.0041ea10
mov byte [ebp - 4], 0x39
mov byte [ebp - 4], 6
call fcn.0046faf0
add esp, 4
test al, al
jne 0x44da2e
mov eax, dword [edi]
push 1
push 0
push eax
call fcn.0046dc30
add esp, 0xc
test al, al
jne 0x44da2e
mov eax, dword [edi]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x44da2e
mov eax, dword [esi + 0x24]
push 0x11
push eax
push str.The_creation_of_vault_folder_failed._Please_click_OK_nto_let_the_application_create_vault_in_the_ndefault_location.
mov edx, dword [esi + 4]
push edx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 1
je 0x44d9eb
mov eax, dword [esi + 0x4c]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x44d5b8
mov eax, dword [esi + 0x4c]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xdc]
call fcn.00416630
jmp 0x44c9d6
cmp byte [esi + 0x59], 0
jne 0x44d572
lea edx, [ebp - 0xb4]
push edx
push 0
push 0
push 0
mov ecx, esi
call fcn.00446f80
mov eax, dword [esi + 0x4c]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xc4]
call fcn.00416630
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xe0]
call fcn.00416630
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xc8]
call fcn.00416630
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd8]
call fcn.00416630
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xdc]
call fcn.00416630
jmp 0x44c9d6
mov eax, dword [esi + 0x24]
push 0xe9
push 0x66
push 1
push eax
mov ecx, dword [esi + 4]
push ecx
call fcn.00439050
add esp, 0x14
cmp eax, 1
jne 0x44d602
lea edx, [ebp - 0xb4]
push edx
call fcn.0046f330
add esp, 4
mov byte [ebp - 4], 0x28
jmp 0x44d732
cmp byte [esi + 0x59], 0
jne 0x44d61c
lea ecx, [ebp - 0xb4]
push ecx
push 0
push 0
push 0
mov ecx, esi
call fcn.00446f80
mov edx, dword [esi + 0x4c]
push edx
jmp 0x44d576
cmp byte [ebp - 0xbe], 0
jne 0x44d6f9
lea eax, [ebp - 0xb4]
push eax
call fcn.0046f330
add esp, 4
mov byte [ebp - 4], 0x29
push eax
lea ecx, [esi + 0x2c]
call fcn.0041e3d0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xb4]
call fcn.00416630
mov eax, dword [esi + 0x24]
push 0xea
push 0x66
push 0
push eax
mov ecx, dword [esi + 4]
push ecx
call fcn.00439050
lea edx, [ebp - 0xcc]
push edx
call fcn.0046f330
mov byte [ebp - 4], 0x2a
mov ecx, dword [esi + 0x44]
mov eax, dword [eax]
push ecx
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.00434c00
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [ebp - 0xc8]
push ecx
call fcn.00434960
add esp, 0x2c
mov bl, al
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xb4]
call fcn.00416630
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xcc]
call fcn.00416630
test bl, bl
je 0x44d6db
mov edi, dword [esi + 0x2c]
push edi
mov edx, dword [esi + 0x4c]
push edx
jmp 0x44d3f4
mov eax, dword [esi + 0x24]
push 0xec
push 0x66
push 0
push eax
mov eax, dword [esi + 4]
push eax
call fcn.00439050
add esp, 0x14
jmp 0x44d57c
test al, al
je 0x44d3fa
mov eax, dword [esi + 0x24]
push 0xeb
push 0x66
push 1
push eax
mov ecx, dword [esi + 4]
push ecx
call fcn.00439050
add esp, 0x14
cmp eax, 1
je 0x44d757
lea edx, [ebp - 0xb4]
push edx
call fcn.0046f330
add esp, 4
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [esi + 0x2c]
call fcn.0041e3d0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xb4]
call fcn.00416630
mov edi, dword [esi + 0x2c]
push edi
mov eax, dword [esi + 0x4c]
push eax
jmp 0x44d3f4
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046f330
add esp, 4
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [esi + 0x2c]
call fcn.0041e3d0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xb4]
call fcn.00416630
mov eax, dword [esi + 0x2c]
push eax
mov edx, dword [esi + 0x4c]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea eax, [ebp - 0xd4]
push eax
call fcn.0046f330
mov byte [ebp - 4], 0x2e
mov eax, dword [esi + 0x44]
push eax
mov ecx, dword [ebp - 0xd4]
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.00434c00
add esp, 0x10
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041e3d0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xb4]
call fcn.00416630
push 0x5422ee
lea ecx, [ebp - 0xbc]
call fcn.0041ad50
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0xcc]
push eax
call fcn.0046f330
mov byte [ebp - 4], 0x31
mov ecx, dword [esi + 0x44]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xb4]
push ecx
call fcn.00434c00
mov byte [ebp - 4], 0x32
lea edx, [ebp - 0xbc]
push edx
push eax
call fcn.00434770
add esp, 0x18
mov bl, al
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xb4]
call fcn.00416630
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xcc]
call fcn.00416630
test bl, bl
je 0x44d9af
lea eax, [ebp - 0xcc]
push eax
call fcn.0046f330
mov byte [ebp - 4], 0x33
mov ecx, dword [esi + 0x44]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xb4]
push ecx
call fcn.00434c00
mov byte [ebp - 4], 0x34
lea edx, [ebp - 0xbc]
push edx
push eax
call fcn.00434960
add esp, 0x18
mov bl, al
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xb4]
call fcn.00416630
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xcc]
call fcn.00416630
test bl, bl
je 0x44d973
lea eax, [ebp - 0xcc]
push eax
call fcn.0046f330
mov byte [ebp - 4], 0x35
mov ecx, dword [esi + 0x44]
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xb4]
push ecx
call fcn.00434c00
mov byte [ebp - 4], 0x36
push eax
lea edx, [ebp - 0xc8]
push edx
call fcn.00434960
add esp, 0x18
mov bl, al
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xb4]
call fcn.00416630
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xcc]
call fcn.00416630
test bl, bl
je 0x44d937
mov edi, dword [esi + 0x2c]
push edi
mov eax, dword [esi + 0x4c]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xbc]
call fcn.00416630
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xd4]
call fcn.00416630
jmp 0x44d3fa
mov eax, dword [esi + 0x24]
push 0xec
push 0x66
push 0
push eax
mov ecx, dword [esi + 4]
push ecx
call fcn.00439050
add esp, 0x14
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xbc]
call fcn.00416630
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xd4]
call fcn.00416630
jmp 0x44d57c
mov eax, dword [esi + 0x24]
push 0xed
push 0x66
push 0
push eax
mov edx, dword [esi + 4]
push edx
call fcn.00439050
add esp, 0x14
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xbc]
call fcn.00416630
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xd4]
call fcn.00416630
jmp 0x44d57c
mov eax, dword [esi + 0x24]
push 0xee
push 0x66
push 0
push eax
mov eax, dword [esi + 4]
push eax
call fcn.00439050
add esp, 0x14
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xbc]
call fcn.00416630
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xd4]
call fcn.00416630
jmp 0x44d57c
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0046f330
add esp, 4
mov byte [ebp - 4], 0x3a
push eax
mov ecx, edi
call fcn.0041e3d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb4]
call fcn.00416630
mov eax, dword [edi]
push eax
mov edx, dword [esi + 0x4c]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov byte [ebp - 0xcd], 1
jmp 0x44db40
cmp byte [ebp - 0xcd], 0
jne 0x44db40
push 0x5422ee
lea ecx, [ebp - 0xc4]
call fcn.0041ad50
mov byte [ebp - 4], 0x3b
push edi
lea ecx, [ebp - 0xc4]
call fcn.0041e3d0
push 0x5422ee
lea ecx, [ebp - 0xbc]
call fcn.0041ad50
mov bl, 0x3c
mov byte [ebp - 4], bl
lea eax, [ebp - 0xb4]
push eax
call fcn.0046f330
add esp, 4
mov byte [ebp - 4], 0x3d
push eax
lea ecx, [ebp - 0xbc]
call fcn.0041e3d0
mov byte [ebp - 4], bl
lea ecx, [ebp - 0xb4]
call fcn.00416630
lea ecx, [ebp - 0xc4]
call fcn.00418070
lea ecx, [ebp - 0xc4]
call fcn.00431570
lea ecx, [ebp - 0xc4]
call fcn.004174b0
mov ecx, dword [ebp - 0xc4]
push ecx
mov ebx, dword [sym.imp.USER32.dll_CharUpperA]
call ebx
lea ecx, [ebp - 0xbc]
call fcn.00418070
lea ecx, [ebp - 0xbc]
call fcn.00431570
lea ecx, [ebp - 0xbc]
call fcn.004174b0
mov edx, dword [ebp - 0xbc]
push edx
call ebx
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call fcn.0042f850
test al, al
je 0x44db22
mov byte [ebp - 0xcd], 1
mov eax, dword [edi]
push eax
mov edx, dword [esi + 0x4c]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xbc]
call fcn.00416630
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xc4]
call fcn.00416630
mov eax, dword [esi + 0x44]
mov ecx, dword [edi]
push eax
push ecx
lea eax, [ebp - 0xb4]
push eax
call fcn.00434c00
add esp, 0xc
mov byte [ebp - 4], 0x3e
push eax
mov ecx, edi
call fcn.0041e3d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb4]
call fcn.00416630
push edi
call fcn.00435110
add esp, 4
test al, al
jne 0x44db85
mov byte [ebp - 0xce], 1
push edi
lea ecx, [ebp - 0xc8]
call fcn.0041ea10
mov byte [ebp - 4], 0x3f
push 0x514670
lea ecx, [ebp - 0xc8]
call fcn.0041d470
push str.ewallet.dat
lea ecx, [ebp - 0xc8]
call fcn.0041d470
cmp byte [ebp - 0xce], 0
je 0x44dd86
cmp byte [ebp - 0xcd], 0
jne 0x44dc15
cmp byte [ebp - 0xe1], 0
jne 0x44dc15
mov eax, dword [esi + 0x24]
mov ecx, dword [edi]
push ecx
push 0x3e9
push 0x66
push 1
push eax
mov edx, dword [esi + 4]
push edx
call fcn.00439050
add esp, 0x18
cmp eax, 1
je 0x44dc15
mov byte [ebp - 0xce], 0
mov eax, dword [esi + 0x4c]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xc8]
jmp 0x44d5b3
mov byte [ebp - 0xb5], 0
lea ecx, [ebp - 0xb5]
push ecx
mov ecx, esi
call fcn.0044c0b0
test al, al
jne 0x44dd66
cmp byte [ebp - 0xb5], al
je 0x44dc06
mov eax, dword [esi + 0x24]
push 0x41f
push 0x66
push 1
push eax
mov edx, dword [esi + 4]
push edx
call fcn.00439050
add esp, 0x14
cmp eax, 1
jne 0x44dc06
lea eax, [ebp - 0xb4]
push eax
call fcn.0046f330
add esp, 4
mov byte [ebp - 4], 0x40
push eax
mov ecx, edi
call fcn.0041e3d0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xb4]
call fcn.00416630
mov eax, dword [edi]
push eax
mov ecx, dword [esi + 0x4c]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, dword [esi + 0x44]
mov ecx, dword [edi]
push eax
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.00434c00
add esp, 0xc
mov byte [ebp - 4], 0x41
push eax
mov ecx, edi
call fcn.0041e3d0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xb4]
call fcn.00416630
push edi
lea ecx, [ebp - 0xc8]
call fcn.0041e3d0
push 0x514670
lea ecx, [ebp - 0xc8]
call fcn.0041d470
push str.ewallet.dat
lea ecx, [ebp - 0xc8]
call fcn.0041d470
push edi
call fcn.00435110
add esp, 4
test al, al
jne 0x44dd5d
mov byte [ebp - 0xb5], al
lea eax, [ebp - 0xb5]
push eax
mov ecx, esi
call fcn.0044c0b0
test al, al
jne 0x44dd4e
cmp byte [ebp - 0xb5], al
je 0x44dc06
push ecx
mov ecx, esp
mov dword [ebp - 0xb4], esp
push str.Failed_to_create_vault_in_the_Default_location._____n_Please_try_again_after_some_time.
call fcn.0041ad50
mov byte [ebp - 4], 0x42
mov eax, dword [esi + 0x24]
push 0x66
push 0
push eax
mov ecx, dword [esi + 4]
push ecx
mov byte [ebp - 4], 0x3f
call fcn.00439230
add esp, 0x14
jmp 0x44dd79
push 0
push 1
push 0x111
mov edx, dword [esi + 4]
push edx
jmp 0x44dd73
mov byte [ebp - 0xce], 0
jmp 0x44dd86
push 0
push 1
push 0x111
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
cmp byte [esi + 0x1ad], 0
je 0x44e90f
push 1
push 0x7f02
push 1
lea ecx, [ebp - 0x24]
call fcn.004477d0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x3c]
call fcn.00481680
mov byte [ebp - 4], 0x44
mov dword [ebp - 0xbc], 0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0xb0]
call fcn.0049dd00
mov byte [ebp - 4], 0x46
push 0x43ef60
call fcn.0049f500
add esp, 4
mov ecx, dword [0x570024]
mov dword [ebp - 0xc4], ecx
mov byte [ebp - 4], 0x47
lea ebx, [esi + 0x34]
mov ecx, ebx
call fcn.00428a90
test al, al
je 0x44e427
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + 0x44]
push 0
push 0x431e30
lea edx, [ebp - 0xc4]
push edx
lea edx, [esi + 0x48]
push edx
push ebx
push eax
push ecx
lea ecx, [ebp - 0xb0]
call fcn.0049e1f0
cmp eax, 0xfffffffe
jne 0x44e100
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x1a4]
call fcn.0041f520
mov ebx, 0x48
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x49
push str.Login_dialog:_invalid_credentials
lea eax, [ebp - 0x1a4]
push eax
call fcn.0041e560
add esp, 8
lea ecx, [ebp - 0x1a4]
push ecx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x44de8c
mov ebx, dword [ebp - 0xec]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1a4]
call fcn.0041dc00
mov edx, dword [0x570024]
mov dword [ebp - 0xe0], edx
mov edi, 0x4b
mov byte [ebp - 4], 0x4b
mov eax, dword [ebp - 0xc4]
cmp dword [eax - 8], 0
je 0x44ded6
lea ecx, [ebp - 0xc4]
push ecx
lea ecx, [ebp - 0xe0]
call fcn.0041e3d0
jmp 0x44deef
push 0xfa3
push 0x41c
lea edx, [ebp - 0xe0]
push edx
call fcn.00432260
add esp, 0xc
push 0x15c4
lea eax, [ebp - 0xcc]
push eax
call fcn.00432bd0
mov byte [ebp - 4], 0x4c
or ebx, 1
mov dword [ebp - 0xec], ebx
mov eax, dword [eax]
push eax
mov ecx, dword [ebp - 0xc4]
push ecx
call fcn.004dd23c
add esp, 0x10
test eax, eax
je 0x44df61
push 0x15c5
lea edx, [ebp - 0xb4]
push edx
call fcn.00432bd0
mov dword [ebp - 4], 0x4d
or ebx, 2
mov dword [ebp - 0xec], ebx
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0xc4]
push eax
call fcn.004dd23c
add esp, 0x10
test eax, eax
mov byte [ebp - 0xb5], 0
jne 0x44df68
mov byte [ebp - 0xb5], 1
mov dword [ebp - 4], 0x4c
test bl, 2
je 0x44df88
and ebx, 0xfffffffd
mov dword [ebp - 0xec], ebx
lea ecx, [ebp - 0xb4]
call fcn.00416630
mov dword [ebp - 4], edi
test bl, 1
je 0x44dfa4
and ebx, 0xfffffffe
mov dword [ebp - 0xec], ebx
lea ecx, [ebp - 0xcc]
call fcn.00416630
mov ecx, esi
cmp byte [ebp - 0xb5], 0
je 0x44dfb8
mov byte [esi + 0x1ae], 0
jmp 0x44dfbf
mov byte [esi + 0x1ae], 1
call fcn.00447210
push ecx
mov ecx, esp
mov dword [ebp - 0xb4], esp
lea edx, [ebp - 0xe0]
push edx
call fcn.0041ea10
mov byte [ebp - 4], 0x4e
mov eax, dword [esi + 0x24]
push 0x66
push 0
push eax
mov eax, dword [esi + 4]
push eax
mov byte [ebp - 4], 0x4b
call fcn.00439230
push 0x15c4
lea ecx, [ebp - 0xcc]
push ecx
call fcn.00432bd0
mov byte [ebp - 4], 0x4f
or ebx, 4
mov dword [ebp - 0xec], ebx
mov eax, dword [eax]
push eax
mov edx, dword [ebp - 0xc4]
push edx
call fcn.004dd23c
add esp, 0x24
test eax, eax
je 0x44e064
push 0x15c5
lea eax, [ebp - 0xb4]
push eax
call fcn.00432bd0
mov dword [ebp - 4], 0x50
or ebx, 8
mov dword [ebp - 0xec], ebx
mov eax, dword [eax]
push eax
mov ecx, dword [ebp - 0xc4]
push ecx
call fcn.004dd23c
add esp, 0x10
test eax, eax
mov byte [ebp - 0xb5], 0
jne 0x44e06b
mov byte [ebp - 0xb5], 1
mov dword [ebp - 4], 0x4f
test bl, 8
je 0x44e08b
and ebx, 0xfffffff7
mov dword [ebp - 0xec], ebx
lea ecx, [ebp - 0xb4]
call fcn.00416630
mov dword [ebp - 4], edi
test bl, 4
je 0x44e0a7
and ebx, 0xfffffffb
mov dword [ebp - 0xec], ebx
lea ecx, [ebp - 0xcc]
call fcn.00416630
cmp byte [ebp - 0xb5], 0
je 0x44e0ec
lea edx, [ebp - 0xcc]
push edx
call fcn.00435840
add esp, 4
mov byte [ebp - 4], 0x51
push 1
push 0
push 0
mov eax, dword [ebp - 0xcc]
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xcc]
call fcn.00416630
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xe0]
call fcn.00416630
jmp 0x44e5ca
cmp eax, 0xffffffff
jne 0x44e41f
push eax
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x1a4]
call fcn.0041f520
mov ebx, 0x52
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x53
push str.Login_dialog:_AuthenticatorWebService_failed.
lea ecx, [ebp - 0x1a4]
push ecx
call fcn.0041e560
add esp, 8
lea edx, [ebp - 0x1a4]
push edx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x44e172
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1a4]
call fcn.0041dc00
mov ecx, esi
call fcn.00449a10
test al, al
je 0x44e244
lea eax, [esi + 0x34]
push eax
lea ecx, [ebp - 0x3c]
call fcn.004847e0
test al, al
je 0x44e244
lea ecx, [ebp - 0xbc]
push ecx
mov edx, dword [ebp - 0xc8]
push edx
lea ecx, [ebp - 0x3c]
call fcn.00482200
test al, al
je 0x44e244
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x1a4]
call fcn.0041f520
mov ebx, 0x55
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x56
push str.Using_cached_credentials.
lea eax, [ebp - 0x1a4]
push eax
call fcn.0041e560
add esp, 8
lea ecx, [ebp - 0x1a4]
push ecx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x44e22c
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1a4]
call fcn.0041dc00
mov byte [esi + 0x28], 1
jmp 0x44e5ca
lea ecx, [esi + 0x44]
mov edx, dword [ecx]
mov eax, dword [edx - 8]
mov edx, dword [esi + 0x2c]
mov edx, dword [edx - 8]
mov dword [ebp - 0xb4], edx
lea ebx, [esi + 0x34]
push eax
call fcn.00417430
push eax
mov eax, dword [ebp - 0xb4]
push eax
lea ecx, [esi + 0x2c]
call fcn.00417430
push eax
push ebx
call fcn.0041d140
mov ecx, eax
call fcn.004680e0
test al, al
je 0x44e3bb
mov ecx, esi
call fcn.00449a10
test al, al
je 0x44e328
push ebx
lea ecx, [ebp - 0x3c]
call fcn.004847e0
test al, al
je 0x44e328
lea ecx, [ebp - 0xbc]
push ecx
mov edx, dword [ebp - 0xc8]
push edx
lea ecx, [ebp - 0x3c]
call fcn.00482200
test al, al
je 0x44e328
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x1a4]
call fcn.0041f520
mov ebx, 0x58
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x59
push str.Using_cached_credentials.
lea eax, [ebp - 0x1a4]
push eax
call fcn.0041e560
add esp, 8
lea ecx, [ebp - 0x1a4]
push ecx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x44e22c
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x1a4]
call fcn.0041f520
mov ebx, 0x5b
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x5c
push str.Login_with_cached_credentials_failed.
lea edx, [ebp - 0x1a4]
push edx
call fcn.0041e560
add esp, 8
lea eax, [ebp - 0x1a4]
push eax
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x44e392
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1a4]
call fcn.0041dc00
mov byte [esi + 0x28], 0
mov eax, dword [esi + 0x24]
push 0x431
push 0x66
push 0
push eax
mov ecx, dword [esi + 4]
push ecx
jmp 0x44e5c2
push 0xffffffffffffffff
push 1
push 1
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x1a4]
call fcn.0041f520
mov ebx, 0x5e
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x5f
push str.Login_with_cached_credentials_failed.
lea edx, [ebp - 0x1a4]
push edx
call fcn.0041e560
add esp, 8
lea eax, [ebp - 0x1a4]
push eax
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x44e392
test eax, eax
jne 0x44e5b1
push ebx
lea ecx, [ebp - 0x3c]
call fcn.004847e0
test al, al
je 0x44e45e
lea edx, [ebp - 0xbc]
push edx
mov eax, dword [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00482200
test al, al
je 0x44e45e
mov byte [esi + 0x28], 1
mov ecx, esi
call fcn.00449800
jmp 0x44e5ca
lea ecx, [esi + 0x44]
mov edx, dword [ecx]
mov eax, dword [edx - 8]
mov edx, dword [edi]
mov edx, dword [edx - 8]
mov dword [ebp - 0xb4], edx
push eax
call fcn.00417430
push eax
mov eax, dword [ebp - 0xb4]
push eax
mov ecx, edi
call fcn.00417430
push eax
push ebx
call fcn.0041d140
mov ecx, eax
call fcn.004680e0
test al, al
je 0x44e543
push ebx
lea ecx, [ebp - 0x3c]
call fcn.004847e0
test al, al
je 0x44e4d3
lea ecx, [ebp - 0xbc]
push ecx
mov edx, dword [ebp - 0xc8]
push edx
lea ecx, [ebp - 0x3c]
call fcn.00482200
test al, al
je 0x44e4d3
mov byte [esi + 0x28], 1
mov ecx, esi
call fcn.00449800
jmp 0x44e5ca
mov byte [esi + 0x28], 0
mov eax, dword [0x570024]
mov dword [ebp - 0xd8], eax
mov bl, 0x61
mov byte [ebp - 4], bl
push 0xfa4
push 0x41c
lea ecx, [ebp - 0xd8]
push ecx
call fcn.00432260
add esp, 8
mov ecx, esp
mov dword [ebp - 0xb4], esp
lea edx, [ebp - 0xd8]
push edx
call fcn.0041ea10
mov byte [ebp - 4], 0x62
mov eax, dword [esi + 0x24]
push 0x66
push 0
push eax
mov eax, dword [esi + 4]
push eax
mov byte [ebp - 4], bl
call fcn.00439230
add esp, 0x14
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xd8]
call fcn.00416630
jmp 0x44e5ca
mov byte [esi + 0x28], 0
mov ecx, dword [0x570024]
mov dword [ebp - 0xf0], ecx
mov bl, 0x63
mov byte [ebp - 4], bl
push 0xfa4
push 0x41c
lea edx, [ebp - 0xf0]
push edx
call fcn.00432260
add esp, 8
mov ecx, esp
mov dword [ebp - 0xb4], esp
lea eax, [ebp - 0xf0]
push eax
call fcn.0041ea10
mov byte [ebp - 4], 0x64
mov eax, dword [esi + 0x24]
push 0x66
push 0
push eax
mov ecx, dword [esi + 4]
push ecx
mov byte [ebp - 4], bl
call fcn.00439230
add esp, 0x14
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xf0]
call fcn.00416630
jmp 0x44e5ca
mov eax, dword [esi + 0x24]
push 0x431
push 0x66
push 0
push eax
mov edx, dword [esi + 4]
push edx
call fcn.00439050
add esp, 0x14
push 0xffffffffffffffff
push 1
push 1
cmp byte [esi + 0x28], 0
je 0x44e811
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x1a4]
call fcn.0041f520
mov ebx, 0x65
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x66
push str.Login_dialog:_user_authenticated
lea eax, [ebp - 0x1a4]
push eax
call fcn.0041e560
add esp, 8
lea ecx, [ebp - 0x1a4]
push ecx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x44e63e
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1a4]
call fcn.0041dc00
cmp dword [esi + 0x54], 0
je 0x44e6ca
mov eax, dword [esi + 0x54]
cmp dword [eax], 0
je 0x44e6ca
mov eax, dword [esi + 0x44]
mov ecx, dword [esi + 0x2c]
push eax
push ecx
call fcn.004381e0
add esp, 8
test al, al
je 0x44e6b2
mov eax, dword [esi + 0x44]
mov ecx, dword [esi + 0x2c]
push eax
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.004383c0
add esp, 0xc
mov byte [ebp - 4], 0x68
mov eax, dword [eax]
cmp dword [esi + 0x54], 0
je 0x44e699
mov ecx, dword [esi + 0x54]
mov ecx, dword [ecx]
jmp 0x44e69b
xor ecx, ecx
push eax
call fcn.004975a0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xb4]
call fcn.00416630
jmp 0x44e6ca
mov edx, dword [esi + 0x2c]
cmp dword [esi + 0x54], 0
je 0x44e6c2
mov eax, dword [esi + 0x54]
mov ecx, dword [eax]
jmp 0x44e6c4
xor ecx, ecx
push edx
call fcn.004975a0
mov eax, dword [esi + 0x44]
lea edi, [esi + 0x2c]
mov ecx, dword [edi]
push eax
push ecx
call fcn.004381e0
add esp, 8
test al, al
jne 0x44e75d
mov eax, dword [esi + 0x44]
mov ecx, dword [edi]
push eax
push ecx
lea eax, [ebp - 0xd4]
push eax
call fcn.00434c00
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0xd4]
push ecx
call fcn.00435110
add esp, 0x10
test al, al
jne 0x44e74e
push 1
push 0
mov edx, dword [ebp - 0xd4]
push edx
call fcn.0046dc30
add esp, 0xc
test al, al
jne 0x44e730
push 0
mov eax, dword [ebp - 0xd4]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0xd4]
push ecx
push edi
call fcn.00434df0
add esp, 8
lea edx, [ebp - 0xd4]
push edx
mov ecx, edi
call fcn.0041e3d0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xd4]
call fcn.00416630
call fcn.00431060
test eax, eax
je 0x44e784
call fcn.00431060
mov ecx, eax
call fcn.00445be0
test al, al
je 0x44e77a
push 1
jmp 0x44e77c
push 0
call fcn.00435a50
add esp, 4
mov ecx, esi
call fcn.0044a1a0
cmp dword [esi + 0x20], 0
je 0x44e8c8
mov eax, dword [esi + 0x20]
cmp dword [eax], 0
je 0x44e8c8
mov eax, dword [esi + 0x5c]
cmp dword [esi + 0x70], eax
je 0x44e7b8
xor ecx, ecx
test eax, eax
sete cl
mov dword [esi + 0x1b4], ecx
jmp 0x44e7c2
mov dword [esi + 0x1b4], 0xffffffff
movzx edx, byte [esi + 0x1af]
push edx
call fcn.00433310
add esp, 4
cmp dword [esi + 0x20], 0
je 0x44e7df
mov eax, dword [esi + 0x20]
mov ecx, dword [eax]
jmp 0x44e7e1
xor ecx, ecx
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
cmp dword [esi + 0x5c], 0
je 0x44e8c8
call fcn.00431060
test eax, eax
je 0x44e8c8
push 0xffffffffffffffff
call fcn.00431060
mov ecx, eax
call fcn.004468b0
jmp 0x44e8c8
call fcn.0041f480
mov ecx, eax
call fcn.00420010
push 1
lea ecx, [ebp - 0x1a4]
call fcn.0041f520
mov ebx, 0x6a
mov byte [ebp - 4], bl
mov byte [ebp - 4], 0x6b
push str.Login_dialog:_user_was_not_authenticated_successfully
lea eax, [ebp - 0x1a4]
push eax
call fcn.0041e560
add esp, 8
lea ecx, [ebp - 0x1a4]
push ecx
call fcn.0041f480
mov ecx, eax
call fcn.0041cfb0
mov dword [ebp - 4], ebx
jmp 0x44e875
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1a4]
call fcn.0041dc00
push 0xffffffffffffffff
push 0
push 0xb1
push 0xcd
mov edx, dword [esi + 4]
push edx
mov edi, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
call edi
push 0xffffffffffffffff
push 0
push 0xb1
push 0xcf
mov eax, dword [esi + 4]
push eax
call edi
push 0xcd
mov ecx, dword [esi + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0xc4]
call fcn.00416630
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0xb0]
call fcn.0049e180
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0xbc]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x3c]
call fcn.00483420
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x24]
call fcn.00447820
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xc8]
jmp 0x44d5b3