Function at 0x43986c
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0x74
mov eax, 0x4aa96f
call fcn.0048e205
mov ebx, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x28], edi
push dword [ebp + 0xc]
lea ecx, [ebp - 0x18]
call fcn.00401a17
mov dword [ebp - 4], edi
call fcn.0046e7df
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401764
xor esi, esi
inc esi
mov byte [ebp - 4], 1
call fcn.0046e7df
push eax
lea ecx, [ebp - 0x24]
call fcn.00401764
mov byte [ebp - 4], 2
call fcn.0046e7df
push eax
lea ecx, [ebp - 0x1c]
call fcn.00401764
mov byte [ebp - 4], 3
call fcn.0046e7df
push eax
lea ecx, [ebp - 0x20]
call fcn.00401764
mov byte [ebp - 4], 4
call fcn.0046e7df
push eax
lea ecx, [ebp - 0x30]
call fcn.00401764
mov byte [ebp - 4], 5
push esi
mov ecx, ebx
mov dword [ebp - 0x54], edi
mov dword [ebx + 0x750], esi
mov dword [ebx + 0x74c], edi
call fcn.00444051
mov eax, ebx
call fcn.00465fa1
push edi
push 0x8ef
mov esi, ebx
call fcn.0043fa3a
lea eax, [ebp + 0xc]
mov dword [ebx + 0x4f4], edi
mov edi, dword [ebx + 0x274]
push eax
call fcn.0040d5b1
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.00461052
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
mov esi, eax
call fcn.0040174a
test esi, esi
je 0x43995a
mov edi, dword [ebx + 0x274]
lea eax, [ebx + 0x54]
push eax
call fcn.0040b4f8
mov edi, str.https:__
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
je 0x4399bd
push 8
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
mov esi, 0x4b4f68
lea ecx, [ebp + 0xc]
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.00404dd4
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 8
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
jmp 0x4399c2
mov esi, 0x4b4f68
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
je 0x439a19
push 8
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
lea ecx, [ebp + 0xc]
push edi
push ecx
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00404dd4
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
je 0x439a70
push 7
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
lea ecx, [ebp + 0xc]
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.00404dd4
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xc
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
mov edi, 0x4b9d60
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
je 0x439acc
push 6
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
lea ecx, [ebp + 0xc]
push edi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.00404dd4
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x18]
push str.http:__lockup.zonelabs.com_
push eax
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
je 0x439c4f
mov ecx, ebx
call fcn.0043f80a
test eax, eax
je 0x439ba7
cmp dword [ebx + 0x21c], 0
jne 0x439ba7
lea ecx, [ebx + 0x5c]
push str.Err:__ZoneAlarm
call fcn.00403370
xor edi, edi
push edi
push 0x8b1
mov esi, ebx
call fcn.0043fa84
push edi
push 0x8cd
call fcn.0043fa84
push 1
mov ecx, ebx
call fcn.00444051
cmp dword [ebx + 0x260], edi
je 0x439b84
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0040174a
xor eax, eax
call fcn.0048e2aa
ret 0x10
cmp dword [ebx + 0x12c], edi
je 0x439b9f
push 0xb4
push edi
push 0x4d7
call fcn.00458270
add esp, 0xc
cmp dword [ebx + 0x260], edi
jne 0x439b38
lea eax, [ebp + 8]
push 0x456
push eax
call fcn.00461b1e
mov byte [ebp - 4], 0xf
push dword [ebx + 0x1c0]
push eax
call fcn.00427149
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 8]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040174a
xor eax, eax
cmp dword [0x4db238], eax
mov dword [ebx + 0x2d4], 1
jne 0x439bfb
cmp dword [ebx + 0x140], eax
jne 0x439bfb
cmp dword [ebx + 0x21c], eax
je 0x439c04
push 1
mov edi, ebx
call fcn.00444e8b
xor esi, esi
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0040174a
mov eax, esi
jmp 0x439b7c
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
jne 0x439cc4
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
jne 0x439cc4
lea eax, [ebp - 0x18]
push str.https:__
push eax
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
jne 0x439cc4
lea eax, [ebp - 0x18]
push str.ftps:__
push eax
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
jne 0x439cc4
lea ecx, [ebp - 0x18]
push ecx
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0045ec68
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x10
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
jmp 0x439db3
lea eax, [ebx + 0x54]
push eax
lea esi, [ebp - 0x50]
call fcn.0045ea9c
pop ecx
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0x11
call fcn.00463906
pop ecx
pop ecx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x4c]
call fcn.0045ea9c
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x14
call fcn.00463906
pop ecx
pop ecx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
push dword [ebp + 0xc]
push dword [ebp - 0x34]
call fcn.00489523
test eax, eax
pop ecx
pop ecx
je 0x439da1
lea ecx, [ebp + 0xc]
lea edi, [ebp - 0x34]
call fcn.00460a21
test eax, eax
jne 0x439da1
mov ecx, edi
lea edi, [ebp + 0xc]
call fcn.00460a21
test eax, eax
jne 0x439da1
mov esi, 0x4b578c
lea eax, [ebp - 0x50]
push esi
push eax
call fcn.00461ac5
pop ecx
pop ecx
mov byte [ebp - 4], 0x17
mov edi, dword [ebx + 0x274]
push eax
call fcn.0040b681
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x50]
push esi
push eax
call fcn.00461ac5
pop ecx
pop ecx
mov byte [ebp - 4], 0x18
mov edi, dword [ebx + 0x274]
push eax
call fcn.0040b704
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.0040174a
push dword [ebx + 0x54]
lea ecx, [ebp - 0x18]
call fcn.00403f56
test eax, eax
jne 0x439e7f
lea eax, [ebx + 0x54]
push eax
lea esi, [ebp - 0x50]
call fcn.0045ea9c
pop ecx
mov byte [ebp - 4], 0x19
mov esi, dword [eax]
call fcn.0047261a
mov eax, dword [eax + 4]
xor edi, edi
push edi
push esi
push str.RedirSameURL
mov ecx, eax
call fcn.00471a63
neg eax
sbb al, al
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
inc al
add ecx, 0xfffffff0
mov byte [ebp + 0xf], al
call fcn.0040174a
cmp byte [ebp + 0xf], 0
je 0x439e81
lea eax, [ebp - 0x2c]
push str.Redirected_to_the_same_URL.__Dont_loop.
push eax
call fcn.00401a35
pop ecx
pop ecx
push edi
push 1
push edi
lea ecx, [ebp - 0x2c]
mov esi, ebx
call fcn.0043d153
cmp dword [ebx + 0x118], edi
je 0x439e4d
push edi
push edi
mov ecx, ebx
call fcn.00433e28
mov esi, eax
jmp 0x439c06
cmp dword [ebx + 0x438], edi
je 0x439e5e
mov ecx, ebx
call fcn.004374c5
jmp 0x439e46
cmp dword [ebp + 0x14], edi
je 0x439e55
lea ecx, [ebx + 0x248]
call fcn.00461052
test eax, eax
je 0x439e55
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
call fcn.004397ee
jmp 0x439e46
xor edi, edi
cmp dword [ebx + 0x438], edi
jne 0x439f57
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp + 0x14]
call fcn.0045ea9c
pop ecx
mov byte [ebp - 4], 0x1a
mov esi, dword [eax]
call fcn.0047261a
mov eax, dword [eax + 4]
push 0x4b578c
push esi
push str.CookieWebForm
lea ecx, [ebp - 0x34]
push ecx
mov ecx, eax
call fcn.00471c05
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x34]
call fcn.00461052
test eax, eax
jne 0x439f05
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x50]
call fcn.0045ebe1
pop ecx
lea ecx, [ebp - 0x34]
push ecx
mov byte [ebp - 4], 0x1d
push eax
mov dword [ebp - 0x28], 1
call fcn.00460c53
test eax, eax
pop ecx
pop ecx
mov byte [ebp + 0xf], 1
jne 0x439f09
mov byte [ebp + 0xf], 0
mov dword [ebp - 4], 0x1c
test byte [ebp - 0x28], 1
je 0x439f25
mov ecx, dword [ebp - 0x50]
and dword [ebp - 0x28], 0xfffffffe
add ecx, 0xfffffff0
call fcn.0040174a
cmp byte [ebp + 0xf], 0
je 0x439f48
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
call fcn.004397ee
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
mov esi, eax
call fcn.0040174a
jmp 0x439c06
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.0040174a
push str.:__login.
lea esi, [ebp - 0x18]
call fcn.0040326a
test eax, eax
jle 0x439fa2
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
call fcn.0045f43d
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1e
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call fcn.0045eb82
mov byte [ebp - 4], 0x1f
jmp 0x439fda
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0xc]
call fcn.0045f43d
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x20
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call fcn.0045eb82
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x30]
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
push 0
push 0x2f
lea ecx, [ebp - 0x20]
call fcn.00406b8e
test eax, eax
jge 0x43a021
push 0x4b9eac
lea esi, [ebp - 0x20]
call fcn.0040326a
test eax, eax
jge 0x43a021
push 0x4b9eb0
call fcn.0040326a
test eax, eax
jl 0x43a071
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
call fcn.0045f43d
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x22
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call fcn.0045eb82
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x23
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
cmp dword [ebx + 0x1e8], 0
je 0x43a34b
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.004638c7
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 0x24
call fcn.004638c7
add esp, 0x10
mov byte [ebp - 4], 0x25
call fcn.0046e7df
push eax
lea ecx, [ebp + 0xc]
call fcn.00401764
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x26
call fcn.00461052
test eax, eax
jne 0x43a326
push dword [ebp - 0x4c]
push dword [ebp + 0x14]
call fcn.00489523
test eax, eax
pop ecx
pop ecx
je 0x43a326
mov esi, str.Redirect
lea eax, [ebp - 0x48]
push esi
push eax
call fcn.00461ac5
mov byte [ebp - 4], 0x27
mov eax, dword [eax]
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x50], eax
lea eax, [ebp + 0x14]
push eax
call fcn.00460363
add esp, 0xc
push eax
push edi
push dword [ebp - 0x50]
mov edi, dword [ebx + 0x1e8]
call fcn.0044a8cd
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x68]
push 0x4b578c
push eax
call fcn.00461ac5
mov edi, eax
lea eax, [ebp - 0x64]
push str.BrandSignature
push eax
mov byte [ebp - 4], 0x28
call fcn.00461ac5
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x60]
push str.Branded
push eax
mov byte [ebp - 4], 0x29
call fcn.00461ac5
add esp, 0x18
mov byte [ebp - 4], 0x2a
mov edi, dword [edi]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
mov eax, dword [eax]
push edi
mov edi, dword [ebx + 0x1e8]
push ecx
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0044a695
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x58]
push 0x4b578c
push eax
mov byte [ebp - 4], 0x2b
call fcn.00461ac5
mov edi, eax
lea eax, [ebp - 0x38]
push str.DataSignature
push eax
mov byte [ebp - 4], 0x2c
call fcn.00461ac5
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x3c]
push str.ToGo
push eax
mov byte [ebp - 4], 0x2d
call fcn.00461ac5
add esp, 0x18
mov byte [ebp - 4], 0x2e
mov edi, dword [edi]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
mov eax, dword [eax]
push edi
mov edi, dword [ebx + 0x1e8]
push ecx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0044a695
mov byte [ebp - 4], 0x2f
push dword [ebp - 0x48]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.004032e0
add esp, 0xc
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x30
call fcn.004018c1
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.00461ac5
mov byte [ebp - 4], 0x31
mov edi, dword [eax]
lea eax, [ebp + 0xc]
push eax
call fcn.00460363
add esp, 0xc
push eax
push 0x4b7f30
push edi
mov edi, dword [ebx + 0x1e8]
call fcn.0044a8cd
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x70]
push esi
push eax
call fcn.00461ac5
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x32
push eax
mov ecx, dword [ebx + 0x1e8]
call fcn.0044b059
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x33
call fcn.004018c1
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00461ac5
pop ecx
pop ecx
lea ecx, [ebp + 0xc]
push ecx
mov byte [ebp - 4], 0x34
mov eax, dword [eax]
mov edi, dword [ebx + 0x1e8]
push str.RedirectSignature
push eax
call fcn.0044a200
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebx + 0x1e8]
call fcn.0044b38f
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
cmp dword [ebx + 0x118], 0
jne 0x43a848
lea eax, [ebp - 0x18]
push eax
lea edi, [ebx + 0x54]
push edi
mov esi, ebx
call fcn.0043d7d5
call fcn.0046e7df
push eax
lea ecx, [ebp + 0x14]
call fcn.00401764
mov byte [ebp - 4], 0x35
call fcn.0046e7df
push eax
lea ecx, [ebp - 0x4c]
call fcn.00401764
mov byte [ebp - 4], 0x36
call fcn.0046e7df
push eax
lea ecx, [ebp - 0x40]
call fcn.00401764
mov byte [ebp - 4], 0x37
call fcn.0046e7df
push eax
lea ecx, [ebp - 0x3c]
call fcn.00401764
mov byte [ebp - 4], 0x38
call fcn.0046e7df
push eax
lea ecx, [ebp - 0x38]
call fcn.00401764
mov byte [ebp - 4], 0x39
call fcn.0046e7df
push eax
lea ecx, [ebp - 0x48]
call fcn.00401764
mov byte [ebp - 4], 0x3a
call fcn.0046e7df
push eax
lea ecx, [ebp - 0x44]
call fcn.00401764
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x3b
call fcn.0045f43d
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x3c
call fcn.00463ebf
pop ecx
pop ecx
push eax
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x3d
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
lea eax, [ebp - 0x70]
call fcn.0045f43d
pop ecx
push eax
mov byte [ebp - 4], 0x3e
lea eax, [ebp + 0xc]
push eax
call fcn.00463ebf
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x3f
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x6c]
lea esi, [ebx + 0x58]
push eax
mov ecx, esi
call fcn.0045fce0
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x40
call fcn.00463ebf
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x41
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x68]
push eax
mov ecx, edi
call fcn.00463ed7
pop ecx
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x42
call fcn.0045f43d
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x43
call fcn.00463ebf
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x44
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x40]
lea edi, [ebp - 0x64]
call fcn.0045eb22
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0x38]
call fcn.004018c1
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x60]
push esi
push eax
call fcn.00463ebf
pop ecx
pop ecx
mov ecx, eax
lea edi, [ebp + 0xc]
mov byte [ebp - 4], 0x46
call fcn.0045eb22
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x47
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x3c]
lea edi, [ebp - 0x5c]
call fcn.0045eb22
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x48
call fcn.004018c1
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x50]
call fcn.0045ea9c
pop ecx
mov byte [ebp - 4], 0x49
push dword [ebp - 0x40]
push dword [ebp + 0x14]
call fcn.00489523
test eax, eax
pop ecx
pop ecx
je 0x43a770
push dword [ebp + 0x14]
push dword [ebp - 0x3c]
call fcn.00489523
test eax, eax
pop ecx
pop ecx
jne 0x43a5e7
push dword [ebp - 0x48]
push dword [ebp - 0x38]
call fcn.00489523
test eax, eax
pop ecx
pop ecx
je 0x43a770
xor edi, edi
cmp dword [ebx + 0x498], edi
jne 0x43a770
cmp dword [ebx + 0x438], edi
jne 0x43a770
push str.:__login.
lea esi, [ebp - 0x18]
call fcn.0040326a
test eax, eax
jg 0x43a770
push edi
push 0x2f
lea ecx, [ebp + 0x14]
call fcn.00406b8e
test eax, eax
jge 0x43a770
push 0x4b9eac
lea esi, [ebp + 0x14]
call fcn.0040326a
test eax, eax
jge 0x43a770
push 0x4b9eb0
call fcn.0040326a
test eax, eax
jge 0x43a770
push dword [ebp - 0x44]
push dword [ebp - 0x38]
call fcn.00489523
test eax, eax
pop ecx
pop ecx
jne 0x43a68d
lea eax, [ebp - 0x74]
push str.USERFN
push eax
call fcn.00461ac5
pop ecx
pop ecx
mov byte [ebp - 4], 0x4a
mov edi, dword [ebx + 0x274]
or dword [ebp - 0x28], 2
push eax
call fcn.0040bc08
test eax, eax
mov byte [ebp + 0xf], 1
jne 0x43a691
mov byte [ebp + 0xf], 0
mov dword [ebp - 4], 0x49
test byte [ebp - 0x28], 2
je 0x43a6a9
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
cmp byte [ebp + 0xf], 0
jne 0x43a770
push str.filefront.com
lea edi, [ebp - 0x50]
call fcn.004609e9
test eax, eax
pop ecx
je 0x43a6db
push 0x4b9ec4
lea edi, [ebp - 0x18]
call fcn.004609e9
test eax, eax
pop ecx
jne 0x43a770
push dword [ebp - 0x4c]
push dword [ebp + 0x14]
call fcn.00489523
test eax, eax
pop ecx
pop ecx
je 0x43a770
mov eax, dword [ebx + 0x274]
call fcn.0040e120
test eax, eax
jne 0x43a770
lea esi, [ebx + 0x58]
push esi
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x54], 1
call fcn.004018c1
lea ecx, [ebp - 0x1c]
call fcn.00461052
test eax, eax
je 0x43a746
lea eax, [ebp + 0xc]
push esi
push eax
call fcn.0045fd54
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x4b
call fcn.004018c1
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov esi, 0x4b63e4
push esi
lea edi, [ebp - 0x1c]
call fcn.004609e9
test eax, eax
pop ecx
jne 0x43a761
push esi
mov ecx, edi
call fcn.0040163d
mov eax, dword [ebp + 0x14]
push dword [eax - 0xc]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00401662
lea eax, [ebp - 0x18]
lea esi, [ebx + 0x54]
push eax
mov ecx, esi
call fcn.004018c1
cmp dword [ebx + 0xaec], 0
jne 0x43a7b5
push str.homestead.com_
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
jne 0x43a7a6
push esi
push dword [ebx + 0x274]
call fcn.0040a628
jmp 0x43a7b5
mov edi, dword [ebx + 0x274]
lea eax, [ebx + 0x54]
push eax
call fcn.0040a8c1
mov esi, dword [0x4db468]
call fcn.0047261a
mov eax, dword [eax + 4]
push 0
push str.NoFilenamePrompt
push esi
mov ecx, eax
call fcn.00471a63
test eax, eax
je 0x43a7ec
mov eax, dword [ebx + 0x168]
or eax, dword [ebx + 0x16c]
jne 0x43a7ec
lea ecx, [ebx + 0x58]
call fcn.00401979
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
and dword [ebx + 0x69c], 0
cmp dword [ebx + 0x27c], 0
mov dword [ebx + 0x698], 1
je 0x43a8d5
lea ecx, [ebp - 0x78]
call fcn.0046fe4a
xor ecx, ecx
mov byte [ebp - 4], 0x4d
cmp dword [ebp + 0x10], ecx
je 0x43a891
mov eax, dword [ebx + 0x274]
call fcn.0040e120
test eax, eax
jne 0x43a891
mov eax, dword [ebx + 0x27c]
push ecx
push ecx
call fcn.004105a6
push dword [ebx + 0x27c]
call fcn.0041020a
mov dword [ebp - 4], 0x4c
jmp 0x43a8bb
mov byte [ebp - 4], 5
call fcn.0046fe60
mov ecx, dword [ebx + 0x27c]
test ecx, ecx
je 0x43a8d5
mov eax, dword [ecx]
push 1
call dword [eax + 4]
xor edi, edi
cmp dword [ebx + 0x260], edi
jne 0x439c04
cmp dword [ebp - 0x54], edi
mov dword [ebx + 0x27c], edi
jne 0x43a996
mov ecx, dword [ebx + 0x274]
call fcn.0040af4a
cmp edx, edi
jg 0x43ac9f
jl 0x43a912
cmp eax, 0x3e800
jae 0x43ac9f
mov ecx, dword [ebx + 0x274]
mov eax, ecx
mov dword [ebx + 0x168], edi
mov dword [ebx + 0x16c], edi
mov dword [ebx + 0x170], edi
mov dword [ebx + 0x174], edi
mov dword [ebx + 0x160], edi
mov dword [ebx + 0x164], edi
mov dword [ebx + 0x178], edi
mov dword [ebx + 0x17c], edi
mov dword [ebx + 0x598], edi
mov dword [ebx + 0x59c], edi
mov dword [ebx + 0x180], edi
mov dword [ebx + 0x184], edi
call fcn.0040e120
test eax, eax
jne 0x43ac9f
cmp dword [ebx + 0x118], edi
jne 0x43ac9f
push edi
push edi
mov eax, ecx
call fcn.0040ae91
mov eax, dword [ebx + 0x274]
push edi
push edi
call fcn.0040b0f0
jmp 0x43ac9f
lea ecx, [ebp - 0x78]
call fcn.0046fe4a
mov byte [ebp - 4], 0x50
push dword [ebp - 0x24]
call fcn.00479cf4
mov esi, str..GetRight
push esi
lea edi, [ebp - 0x24]
call fcn.004609e9
test eax, eax
pop ecx
jne 0x43aa14
push esi
mov eax, edi
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0040145d
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x51
call fcn.0045c765
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
mov edi, eax
call fcn.0040174a
test edi, edi
je 0x43aa14
push esi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0040145d
add esp, 0xc
mov byte [ebp - 4], 0x52
push dword [eax]
call fcn.00479cf4
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov dword [ebp - 4], 0x4f
jmp 0x43aa38
mov byte [ebp - 4], 5
call fcn.0046fe60
push esi
lea edi, [ebp - 0x24]
call fcn.004609e9
test eax, eax
pop ecx
je 0x43aa65
push esi
lea edi, [ebp - 0x1c]
call fcn.004609e9
test eax, eax
pop ecx
jne 0x43aa65
push esi
mov ecx, edi
call fcn.0040163d
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00462aea
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x54
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0040174a
push 0x2d
pop edi
push edi
push 0x7c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.00460cd9
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x55
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x3c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.00460cd9
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x56
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x3e
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x10]
push eax
call fcn.00460cd9
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x57
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.0040174a
push 0x4b9edc
push str.amp_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0046293f
add esp, 0x10
mov byte [ebp - 4], 0x58
push eax
lea ecx, [ebp - 0x1c]
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
mov esi, 0x4b9ee8
push esi
push str.quot_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0046293f
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x59
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.0040174a
push esi
push str.apos_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0046293f
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5a
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.0040174a
push 0x4b606c
push str.nbsp_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0046293f
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5b
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x2f
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00460cd9
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5c
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x3f
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00460cd9
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5d
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x2a
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00460cd9
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5e
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x1c]
lea ecx, [ebx + 0x58]
push eax
call fcn.004018c1
mov ecx, dword [ebx + 0x274]
lea eax, [ebp - 0x1c]
push eax
call fcn.0040a9b3
xor edi, edi
cmp dword [ebx + 0x260], edi
jne 0x439c04
call fcn.0046e7df
push eax
lea ecx, [ebp + 0xc]
call fcn.00401764
mov byte [ebp - 4], 0x5f
call fcn.0046e7df
push eax
lea ecx, [ebp + 8]
call fcn.00401764
mov byte [ebp - 4], 0x60
cmp dword [ebx + 0xaec], edi
je 0x43ad0c
lea eax, [ebp + 8]
push eax
lea eax, [ebp + 0xc]
push eax
lea esi, [ebx + 0x54]
lea eax, [ebp + 0x14]
push esi
push eax
call fcn.0045e6cd
add esp, 0x10
push eax
mov ecx, esi
mov byte [ebp - 4], 0x61
call fcn.004018c1
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
jmp 0x43ad5f
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 0x10]
push eax
call fcn.0040d03c
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp + 0xc]
push ecx
push eax
lea eax, [ebp + 0x14]
push eax
mov byte [ebp - 4], 0x62
call fcn.0045e6cd
add esp, 0x10
lea esi, [ebx + 0x54]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x63
call fcn.004018c1
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.0040174a
xor edi, edi
lea ecx, [ebp + 0xc]
call fcn.00461052
test eax, eax
je 0x43ad77
lea ecx, [ebp + 8]
call fcn.00461052
test eax, eax
jne 0x43adb5
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 0xc]
push eax
call fcn.0040b681
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 8]
push eax
call fcn.0040b704
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebx + 0x4ac]
call fcn.004018c1
lea eax, [ebp + 8]
push eax
lea ecx, [ebx + 0x4b0]
call fcn.004018c1
xor edi, edi
cmp dword [ebx + 0xaec], edi
jne 0x43add7
push esi
push dword [ebx + 0x274]
call fcn.0040a628
mov edi, dword [ebx + 0x274]
push esi
call fcn.0040b2d5
xor edi, edi
cmp dword [ebx + 0x118], edi
jne 0x43ae46
cmp dword [0x4db238], edi
jne 0x43adfe
cmp dword [ebx + 0x140], edi
jne 0x43adfe
cmp dword [ebx + 0x21c], edi
jne 0x43adfe
xor esi, esi
inc esi
mov eax, esi
jmp 0x43ae03
xor esi, esi
xor eax, eax
inc esi
push eax
mov ecx, ebx
call fcn.00444653
test eax, eax
jne 0x43ae49
mov eax, ebx
call fcn.00459eff
test eax, eax
jne 0x43ae35
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
jmp 0x439c04
mov ecx, ebx
call fcn.0046f0d6
push eax
mov edi, ebx
call fcn.00444e8b
jmp 0x43ae1a
xor esi, esi
inc esi
cmp dword [ebx + 0x118], edi
push esi
mov ecx, ebx
je 0x43ae61
call fcn.00444051
mov dword [ebx + 0x118], esi
jmp 0x43ae66
call fcn.00444051
cmp dword [ebx + 0x260], edi
jne 0x43ae1a
cmp dword [ebx + 0x118], edi
jne 0x43ae9d
mov eax, dword [ebx + 0x274]
lea ecx, [eax + 0xf0]
cmp dword [ecx], edi
je 0x43ae97
mov dword [ecx], edi
mov dword [eax + 0xc], esi
mov dword [0x4db168], esi
mov dword [0x4db16c], esi
mov dword [ebx + 0x128], edi
cmp dword [ebx + 0x260], edi
jne 0x43ae1a
lea eax, [ebp - 0x2c]
push str.Redirected_to_New_Location
push eax
call fcn.00401a35
pop ecx
pop ecx
xor edi, edi
push edi
push 1
push edi
lea ecx, [ebp - 0x2c]
mov esi, ebx
call fcn.0043d153
cmp dword [ebx + 0x260], edi
jne 0x43ae1a
push edi
push 0x8f0
call fcn.0043fa3a
push 0x1f4
mov ecx, ebx
call fcn.0043f89f
jmp 0x43ae1a