Function at 0x43893b
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0x74
mov eax, 0x4a80a4
call fcn.0048bd85
mov ebx, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x28], edi
push dword [ebp + 0xc]
lea ecx, [ebp - 0x18]
call fcn.00401a17
mov dword [ebp - 4], edi
call fcn.0046c34c
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401764
xor esi, esi
inc esi
mov byte [ebp - 4], 1
call fcn.0046c34c
push eax
lea ecx, [ebp - 0x24]
call fcn.00401764
mov byte [ebp - 4], 2
call fcn.0046c34c
push eax
lea ecx, [ebp - 0x1c]
call fcn.00401764
mov byte [ebp - 4], 3
call fcn.0046c34c
push eax
lea ecx, [ebp - 0x20]
call fcn.00401764
mov byte [ebp - 4], 4
call fcn.0046c34c
push eax
lea ecx, [ebp - 0x30]
call fcn.00401764
mov byte [ebp - 4], 5
push esi
mov ecx, ebx
mov dword [ebp - 0x54], edi
mov dword [ebx + 0x750], esi
mov dword [ebx + 0x74c], edi
call fcn.0044310b
mov eax, ebx
call fcn.00463b2f
push edi
push 0x8ef
mov esi, ebx
call fcn.0043eb09
lea eax, [ebp + 0xc]
mov dword [ebx + 0x4f4], edi
mov edi, dword [ebx + 0x274]
push eax
call fcn.0040d2fb
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.0045ee51
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
mov esi, eax
call fcn.0040174a
test esi, esi
je 0x438a29
mov edi, dword [ebx + 0x274]
lea eax, [ebx + 0x54]
push eax
call fcn.0040b33d
mov edi, str.https:__
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0045e96b
test eax, eax
pop ecx
pop ecx
je 0x438a8c
push 8
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
mov esi, 0x4b2f58
lea ecx, [ebp + 0xc]
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.00404ce0
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 8
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
jmp 0x438a91
mov esi, 0x4b2f58
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0045e96b
test eax, eax
pop ecx
pop ecx
je 0x438ae8
push 8
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
lea ecx, [ebp + 0xc]
push edi
push ecx
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00404ce0
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.0045e96b
test eax, eax
pop ecx
pop ecx
je 0x438b3f
push 7
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
lea ecx, [ebp + 0xc]
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.00404ce0
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xc
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
mov edi, 0x4b7b40
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0045e96b
test eax, eax
pop ecx
pop ecx
je 0x438b9b
push 6
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
lea ecx, [ebp + 0xc]
push edi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.00404ce0
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x18]
push str.http:__lockup.zonelabs.com_
push eax
call fcn.0045e96b
test eax, eax
pop ecx
pop ecx
je 0x438d1e
mov ecx, ebx
call fcn.0043e8d9
test eax, eax
je 0x438c76
cmp dword [ebx + 0x21c], 0
jne 0x438c76
lea ecx, [ebx + 0x5c]
push str.Err:__ZoneAlarm
call fcn.00403370
xor edi, edi
push edi
push 0x8b1
mov esi, ebx
call fcn.0043eb53
push edi
push 0x8cd
call fcn.0043eb53
push 1
mov ecx, ebx
call fcn.0044310b
cmp dword [ebx + 0x260], edi
je 0x438c53
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0040174a
xor eax, eax
call fcn.0048be2a
ret 0x10
cmp dword [ebx + 0x12c], edi
je 0x438c6e
push 0xb4
push edi
push 0x4d7
call fcn.00456c28
add esp, 0xc
cmp dword [ebx + 0x260], edi
jne 0x438c07
lea eax, [ebp + 8]
push 0x456
push eax
call fcn.0045f91d
mov byte [ebp - 4], 0xf
push dword [ebx + 0x1c0]
push eax
call fcn.0042663f
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 8]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040174a
xor eax, eax
cmp dword [0x4d91fc], eax
mov dword [ebx + 0x2d4], 1
jne 0x438cca
cmp dword [ebx + 0x140], eax
jne 0x438cca
cmp dword [ebx + 0x21c], eax
je 0x438cd3
push 1
mov edi, ebx
call fcn.00443e5d
xor esi, esi
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0040174a
mov eax, esi
jmp 0x438c4b
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.0045e96b
test eax, eax
pop ecx
pop ecx
jne 0x438d93
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0045e96b
test eax, eax
pop ecx
pop ecx
jne 0x438d93
lea eax, [ebp - 0x18]
push str.https:__
push eax
call fcn.0045e96b
test eax, eax
pop ecx
pop ecx
jne 0x438d93
lea eax, [ebp - 0x18]
push str.ftps:__
push eax
call fcn.0045e96b
test eax, eax
pop ecx
pop ecx
jne 0x438d93
lea ecx, [ebp - 0x18]
push ecx
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0045ca9a
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x10
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
jmp 0x438e82
lea eax, [ebx + 0x54]
push eax
lea esi, [ebp - 0x50]
call fcn.0045c8ce
pop ecx
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0x11
call fcn.00461689
pop ecx
pop ecx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x4c]
call fcn.0045c8ce
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x14
call fcn.00461689
pop ecx
pop ecx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
push dword [ebp + 0xc]
push dword [ebp - 0x34]
call fcn.004870a3
test eax, eax
pop ecx
pop ecx
je 0x438e70
lea ecx, [ebp + 0xc]
lea edi, [ebp - 0x34]
call fcn.0045e820
test eax, eax
jne 0x438e70
mov ecx, edi
lea edi, [ebp + 0xc]
call fcn.0045e820
test eax, eax
jne 0x438e70
mov esi, 0x4b377c
lea eax, [ebp - 0x50]
push esi
push eax
call fcn.0045f8c4
pop ecx
pop ecx
mov byte [ebp - 4], 0x17
mov edi, dword [ebx + 0x274]
push eax
call fcn.0040b4c6
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x50]
push esi
push eax
call fcn.0045f8c4
pop ecx
pop ecx
mov byte [ebp - 4], 0x18
mov edi, dword [ebx + 0x274]
push eax
call fcn.0040b549
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.0040174a
push dword [ebx + 0x54]
lea ecx, [ebp - 0x18]
call fcn.00403e83
test eax, eax
jne 0x438f4e
lea eax, [ebx + 0x54]
push eax
lea esi, [ebp - 0x50]
call fcn.0045c8ce
pop ecx
mov byte [ebp - 4], 0x19
mov esi, dword [eax]
call fcn.004701ac
mov eax, dword [eax + 4]
xor edi, edi
push edi
push esi
push str.RedirSameURL
mov ecx, eax
call fcn.0046f5f5
neg eax
sbb al, al
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
inc al
add ecx, 0xfffffff0
mov byte [ebp + 0xf], al
call fcn.0040174a
cmp byte [ebp + 0xf], 0
je 0x438f50
lea eax, [ebp - 0x2c]
push str.Redirected_to_the_same_URL.__Dont_loop.
push eax
call fcn.00401a35
pop ecx
pop ecx
push edi
push 1
push edi
lea ecx, [ebp - 0x2c]
mov esi, ebx
call fcn.0043c222
cmp dword [ebx + 0x118], edi
je 0x438f1c
push edi
push edi
mov ecx, ebx
call fcn.00432f08
mov esi, eax
jmp 0x438cd5
cmp dword [ebx + 0x438], edi
je 0x438f2d
mov ecx, ebx
call fcn.00436594
jmp 0x438f15
cmp dword [ebp + 0x14], edi
je 0x438f24
lea ecx, [ebx + 0x248]
call fcn.0045ee51
test eax, eax
je 0x438f24
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
call fcn.004388bd
jmp 0x438f15
xor edi, edi
cmp dword [ebx + 0x438], edi
jne 0x439026
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp + 0x14]
call fcn.0045c8ce
pop ecx
mov byte [ebp - 4], 0x1a
mov esi, dword [eax]
call fcn.004701ac
mov eax, dword [eax + 4]
push 0x4b377c
push esi
push str.CookieWebForm
lea ecx, [ebp - 0x34]
push ecx
mov ecx, eax
call fcn.0046f797
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x34]
call fcn.0045ee51
test eax, eax
jne 0x438fd4
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x50]
call fcn.0045ca13
pop ecx
lea ecx, [ebp - 0x34]
push ecx
mov byte [ebp - 4], 0x1d
push eax
mov dword [ebp - 0x28], 1
call fcn.0045ea52
test eax, eax
pop ecx
pop ecx
mov byte [ebp + 0xf], 1
jne 0x438fd8
mov byte [ebp + 0xf], 0
mov dword [ebp - 4], 0x1c
test byte [ebp - 0x28], 1
je 0x438ff4
mov ecx, dword [ebp - 0x50]
and dword [ebp - 0x28], 0xfffffffe
add ecx, 0xfffffff0
call fcn.0040174a
cmp byte [ebp + 0xf], 0
je 0x439017
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
call fcn.004388bd
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
mov esi, eax
call fcn.0040174a
jmp 0x438cd5
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.0040174a
push str.:__login.
lea esi, [ebp - 0x18]
call fcn.0040326a
test eax, eax
jle 0x439071
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
call fcn.0045d26f
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1e
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call fcn.0045c9b4
mov byte [ebp - 4], 0x1f
jmp 0x4390a9
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0xc]
call fcn.0045d26f
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x20
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call fcn.0045c9b4
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x30]
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
push 0
push 0x2f
lea ecx, [ebp - 0x20]
call fcn.00406a9a
test eax, eax
jge 0x4390f0
push 0x4b7c8c
lea esi, [ebp - 0x20]
call fcn.0040326a
test eax, eax
jge 0x4390f0
push 0x4b7c90
call fcn.0040326a
test eax, eax
jl 0x439140
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
call fcn.0045d26f
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x22
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call fcn.0045c9b4
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x23
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
cmp dword [ebx + 0x1e8], 0
je 0x43941a
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.0046164a
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 0x24
call fcn.0046164a
add esp, 0x10
mov byte [ebp - 4], 0x25
call fcn.0046c34c
push eax
lea ecx, [ebp + 0xc]
call fcn.00401764
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x26
call fcn.0045ee51
test eax, eax
jne 0x4393f5
push dword [ebp - 0x4c]
push dword [ebp + 0x14]
call fcn.004870a3
test eax, eax
pop ecx
pop ecx
je 0x4393f5
mov esi, str.Redirect
lea eax, [ebp - 0x48]
push esi
push eax
call fcn.0045f8c4
mov byte [ebp - 4], 0x27
mov eax, dword [eax]
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x50], eax
lea eax, [ebp + 0x14]
push eax
call fcn.0045e195
add esp, 0xc
push eax
push edi
push dword [ebp - 0x50]
mov edi, dword [ebx + 0x1e8]
call fcn.00449301
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x68]
push 0x4b377c
push eax
call fcn.0045f8c4
mov edi, eax
lea eax, [ebp - 0x64]
push str.BrandSignature
push eax
mov byte [ebp - 4], 0x28
call fcn.0045f8c4
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x60]
push str.Branded
push eax
mov byte [ebp - 4], 0x29
call fcn.0045f8c4
add esp, 0x18
mov byte [ebp - 4], 0x2a
mov edi, dword [edi]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
mov eax, dword [eax]
push edi
mov edi, dword [ebx + 0x1e8]
push ecx
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.004490c9
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x58]
push 0x4b377c
push eax
mov byte [ebp - 4], 0x2b
call fcn.0045f8c4
mov edi, eax
lea eax, [ebp - 0x38]
push str.DataSignature
push eax
mov byte [ebp - 4], 0x2c
call fcn.0045f8c4
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x3c]
push str.ToGo
push eax
mov byte [ebp - 4], 0x2d
call fcn.0045f8c4
add esp, 0x18
mov byte [ebp - 4], 0x2e
mov edi, dword [edi]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
mov eax, dword [eax]
push edi
mov edi, dword [ebx + 0x1e8]
push ecx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.004490c9
mov byte [ebp - 4], 0x2f
push dword [ebp - 0x48]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.004032e0
add esp, 0xc
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x30
call fcn.004018c1
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.0045f8c4
mov byte [ebp - 4], 0x31
mov edi, dword [eax]
lea eax, [ebp + 0xc]
push eax
call fcn.0045e195
add esp, 0xc
push eax
push 0x4b5e40
push edi
mov edi, dword [ebx + 0x1e8]
call fcn.00449301
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x70]
push esi
push eax
call fcn.0045f8c4
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x32
push eax
mov ecx, dword [ebx + 0x1e8]
call fcn.00449a8d
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x33
call fcn.004018c1
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.0045f8c4
pop ecx
pop ecx
lea ecx, [ebp + 0xc]
push ecx
mov byte [ebp - 4], 0x34
mov eax, dword [eax]
mov edi, dword [ebx + 0x1e8]
push str.RedirectSignature
push eax
call fcn.00448c34
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebx + 0x1e8]
call fcn.00449dc3
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
cmp dword [ebx + 0x118], 0
jne 0x439917
lea eax, [ebp - 0x18]
push eax
lea edi, [ebx + 0x54]
push edi
mov esi, ebx
call fcn.0043c8a4
call fcn.0046c34c
push eax
lea ecx, [ebp + 0x14]
call fcn.00401764
mov byte [ebp - 4], 0x35
call fcn.0046c34c
push eax
lea ecx, [ebp - 0x4c]
call fcn.00401764
mov byte [ebp - 4], 0x36
call fcn.0046c34c
push eax
lea ecx, [ebp - 0x40]
call fcn.00401764
mov byte [ebp - 4], 0x37
call fcn.0046c34c
push eax
lea ecx, [ebp - 0x3c]
call fcn.00401764
mov byte [ebp - 4], 0x38
call fcn.0046c34c
push eax
lea ecx, [ebp - 0x38]
call fcn.00401764
mov byte [ebp - 4], 0x39
call fcn.0046c34c
push eax
lea ecx, [ebp - 0x48]
call fcn.00401764
mov byte [ebp - 4], 0x3a
call fcn.0046c34c
push eax
lea ecx, [ebp - 0x44]
call fcn.00401764
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x3b
call fcn.0045d26f
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x3c
call fcn.00461c42
pop ecx
pop ecx
push eax
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x3d
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
lea eax, [ebp - 0x70]
call fcn.0045d26f
pop ecx
push eax
mov byte [ebp - 4], 0x3e
lea eax, [ebp + 0xc]
push eax
call fcn.00461c42
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x3f
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x6c]
lea esi, [ebx + 0x58]
push eax
mov ecx, esi
call fcn.0045db12
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x40
call fcn.00461c42
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x41
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x68]
push eax
mov ecx, edi
call fcn.00461c5a
pop ecx
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x42
call fcn.0045d26f
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x43
call fcn.00461c42
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x44
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x40]
lea edi, [ebp - 0x64]
call fcn.0045c954
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0x38]
call fcn.004018c1
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x60]
push esi
push eax
call fcn.00461c42
pop ecx
pop ecx
mov ecx, eax
lea edi, [ebp + 0xc]
mov byte [ebp - 4], 0x46
call fcn.0045c954
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x47
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x3c]
lea edi, [ebp - 0x5c]
call fcn.0045c954
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x48
call fcn.004018c1
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x50]
call fcn.0045c8ce
pop ecx
mov byte [ebp - 4], 0x49
push dword [ebp - 0x40]
push dword [ebp + 0x14]
call fcn.004870a3
test eax, eax
pop ecx
pop ecx
je 0x43983f
push dword [ebp + 0x14]
push dword [ebp - 0x3c]
call fcn.004870a3
test eax, eax
pop ecx
pop ecx
jne 0x4396b6
push dword [ebp - 0x48]
push dword [ebp - 0x38]
call fcn.004870a3
test eax, eax
pop ecx
pop ecx
je 0x43983f
xor edi, edi
cmp dword [ebx + 0x498], edi
jne 0x43983f
cmp dword [ebx + 0x438], edi
jne 0x43983f
push str.:__login.
lea esi, [ebp - 0x18]
call fcn.0040326a
test eax, eax
jg 0x43983f
push edi
push 0x2f
lea ecx, [ebp + 0x14]
call fcn.00406a9a
test eax, eax
jge 0x43983f
push 0x4b7c8c
lea esi, [ebp + 0x14]
call fcn.0040326a
test eax, eax
jge 0x43983f
push 0x4b7c90
call fcn.0040326a
test eax, eax
jge 0x43983f
push dword [ebp - 0x44]
push dword [ebp - 0x38]
call fcn.004870a3
test eax, eax
pop ecx
pop ecx
jne 0x43975c
lea eax, [ebp - 0x74]
push str.USERFN
push eax
call fcn.0045f8c4
pop ecx
pop ecx
mov byte [ebp - 4], 0x4a
mov edi, dword [ebx + 0x274]
or dword [ebp - 0x28], 2
push eax
call fcn.0040ba4d
test eax, eax
mov byte [ebp + 0xf], 1
jne 0x439760
mov byte [ebp + 0xf], 0
mov dword [ebp - 4], 0x49
test byte [ebp - 0x28], 2
je 0x439778
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
cmp byte [ebp + 0xf], 0
jne 0x43983f
push str.filefront.com
lea edi, [ebp - 0x50]
call fcn.0045e7e8
test eax, eax
pop ecx
je 0x4397aa
push 0x4b7ca4
lea edi, [ebp - 0x18]
call fcn.0045e7e8
test eax, eax
pop ecx
jne 0x43983f
push dword [ebp - 0x4c]
push dword [ebp + 0x14]
call fcn.004870a3
test eax, eax
pop ecx
pop ecx
je 0x43983f
mov eax, dword [ebx + 0x274]
call fcn.0040de6a
test eax, eax
jne 0x43983f
lea esi, [ebx + 0x58]
push esi
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x54], 1
call fcn.004018c1
lea ecx, [ebp - 0x1c]
call fcn.0045ee51
test eax, eax
je 0x439815
lea eax, [ebp + 0xc]
push esi
push eax
call fcn.0045db86
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x4b
call fcn.004018c1
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov esi, 0x4b43bc
push esi
lea edi, [ebp - 0x1c]
call fcn.0045e7e8
test eax, eax
pop ecx
jne 0x439830
push esi
mov ecx, edi
call fcn.0040163d
mov eax, dword [ebp + 0x14]
push dword [eax - 0xc]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00401662
lea eax, [ebp - 0x18]
lea esi, [ebx + 0x54]
push eax
mov ecx, esi
call fcn.004018c1
cmp dword [ebx + 0xaec], 0
jne 0x439884
push str.homestead.com_
push esi
call fcn.0045ea14
test eax, eax
pop ecx
pop ecx
jne 0x439875
push esi
push dword [ebx + 0x274]
call fcn.0040a4f4
jmp 0x439884
mov edi, dword [ebx + 0x274]
lea eax, [ebx + 0x54]
push eax
call fcn.0040a78d
mov esi, dword [0x4d9428]
call fcn.004701ac
mov eax, dword [eax + 4]
push 0
push str.NoFilenamePrompt
push esi
mov ecx, eax
call fcn.0046f5f5
test eax, eax
je 0x4398bb
mov eax, dword [ebx + 0x168]
or eax, dword [ebx + 0x16c]
jne 0x4398bb
lea ecx, [ebx + 0x58]
call fcn.00401979
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
and dword [ebx + 0x69c], 0
cmp dword [ebx + 0x27c], 0
mov dword [ebx + 0x698], 1
je 0x4399a4
lea ecx, [ebp - 0x78]
call fcn.0046d9dc
xor ecx, ecx
mov byte [ebp - 4], 0x4d
cmp dword [ebp + 0x10], ecx
je 0x439960
mov eax, dword [ebx + 0x274]
call fcn.0040de6a
test eax, eax
jne 0x439960
mov eax, dword [ebx + 0x27c]
push ecx
push ecx
call fcn.004102e0
push dword [ebx + 0x27c]
call fcn.0040ff4c
mov dword [ebp - 4], 0x4c
jmp 0x43998a
mov byte [ebp - 4], 5
call fcn.0046d9f2
mov ecx, dword [ebx + 0x27c]
test ecx, ecx
je 0x4399a4
mov eax, dword [ecx]
push 1
call dword [eax + 4]
xor edi, edi
cmp dword [ebx + 0x260], edi
jne 0x438cd3
cmp dword [ebp - 0x54], edi
mov dword [ebx + 0x27c], edi
jne 0x439a65
mov ecx, dword [ebx + 0x274]
call fcn.0040ad98
cmp edx, edi
jg 0x439d6e
jl 0x4399e1
cmp eax, 0x3e800
jae 0x439d6e
mov ecx, dword [ebx + 0x274]
mov eax, ecx
mov dword [ebx + 0x168], edi
mov dword [ebx + 0x16c], edi
mov dword [ebx + 0x170], edi
mov dword [ebx + 0x174], edi
mov dword [ebx + 0x160], edi
mov dword [ebx + 0x164], edi
mov dword [ebx + 0x178], edi
mov dword [ebx + 0x17c], edi
mov dword [ebx + 0x598], edi
mov dword [ebx + 0x59c], edi
mov dword [ebx + 0x180], edi
mov dword [ebx + 0x184], edi
call fcn.0040de6a
test eax, eax
jne 0x439d6e
cmp dword [ebx + 0x118], edi
jne 0x439d6e
push edi
push edi
mov eax, ecx
call fcn.0040acdf
mov eax, dword [ebx + 0x274]
push edi
push edi
call fcn.0040af3e
jmp 0x439d6e
lea ecx, [ebp - 0x78]
call fcn.0046d9dc
mov byte [ebp - 4], 0x50
push dword [ebp - 0x24]
call fcn.00476a18
mov esi, str..GetRight
push esi
lea edi, [ebp - 0x24]
call fcn.0045e7e8
test eax, eax
pop ecx
jne 0x439ae3
push esi
mov eax, edi
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0040145d
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x51
call fcn.0045a872
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
mov edi, eax
call fcn.0040174a
test edi, edi
je 0x439ae3
push esi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0040145d
add esp, 0xc
mov byte [ebp - 4], 0x52
push dword [eax]
call fcn.00476a18
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov dword [ebp - 4], 0x4f
jmp 0x439b07
mov byte [ebp - 4], 5
call fcn.0046d9f2
push esi
lea edi, [ebp - 0x24]
call fcn.0045e7e8
test eax, eax
pop ecx
je 0x439b34
push esi
lea edi, [ebp - 0x1c]
call fcn.0045e7e8
test eax, eax
pop ecx
jne 0x439b34
push esi
mov ecx, edi
call fcn.0040163d
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004608e9
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x54
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0040174a
push 0x2d
pop edi
push edi
push 0x7c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0045ead8
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x55
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x3c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.0045ead8
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x56
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x3e
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x10]
push eax
call fcn.0045ead8
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x57
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.0040174a
push 0x4b7cbc
push str.amp_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0046073e
add esp, 0x10
mov byte [ebp - 4], 0x58
push eax
lea ecx, [ebp - 0x1c]
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
mov esi, 0x4b7cc8
push esi
push str.quot_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0046073e
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x59
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.0040174a
push esi
push str.apos_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0046073e
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5a
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.0040174a
push 0x4b405c
push str.nbsp_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0046073e
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5b
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x2f
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.0045ead8
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5c
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x3f
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.0045ead8
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5d
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x2a
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0045ead8
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5e
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x1c]
lea ecx, [ebx + 0x58]
push eax
call fcn.004018c1
mov ecx, dword [ebx + 0x274]
lea eax, [ebp - 0x1c]
push eax
call fcn.0040a87f
xor edi, edi
cmp dword [ebx + 0x260], edi
jne 0x438cd3
call fcn.0046c34c
push eax
lea ecx, [ebp + 0xc]
call fcn.00401764
mov byte [ebp - 4], 0x5f
call fcn.0046c34c
push eax
lea ecx, [ebp + 8]
call fcn.00401764
mov byte [ebp - 4], 0x60
cmp dword [ebx + 0xaec], edi
je 0x439ddb
lea eax, [ebp + 8]
push eax
lea eax, [ebp + 0xc]
push eax
lea esi, [ebx + 0x54]
lea eax, [ebp + 0x14]
push esi
push eax
call fcn.0045c4ff
add esp, 0x10
push eax
mov ecx, esi
mov byte [ebp - 4], 0x61
call fcn.004018c1
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
jmp 0x439e2e
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 0x10]
push eax
call fcn.0040ce81
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp + 0xc]
push ecx
push eax
lea eax, [ebp + 0x14]
push eax
mov byte [ebp - 4], 0x62
call fcn.0045c4ff
add esp, 0x10
lea esi, [ebx + 0x54]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x63
call fcn.004018c1
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.0040174a
xor edi, edi
lea ecx, [ebp + 0xc]
call fcn.0045ee51
test eax, eax
je 0x439e46
lea ecx, [ebp + 8]
call fcn.0045ee51
test eax, eax
jne 0x439e84
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 0xc]
push eax
call fcn.0040b4c6
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 8]
push eax
call fcn.0040b549
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebx + 0x4ac]
call fcn.004018c1
lea eax, [ebp + 8]
push eax
lea ecx, [ebx + 0x4b0]
call fcn.004018c1
xor edi, edi
cmp dword [ebx + 0xaec], edi
jne 0x439ea6
push esi
push dword [ebx + 0x274]
call fcn.0040a4f4
mov edi, dword [ebx + 0x274]
push esi
call fcn.0040b11a
xor edi, edi
cmp dword [ebx + 0x118], edi
jne 0x439f15
cmp dword [0x4d91fc], edi
jne 0x439ecd
cmp dword [ebx + 0x140], edi
jne 0x439ecd
cmp dword [ebx + 0x21c], edi
jne 0x439ecd
xor esi, esi
inc esi
mov eax, esi
jmp 0x439ed2
xor esi, esi
xor eax, eax
inc esi
push eax
mov ecx, ebx
call fcn.0044370d
test eax, eax
jne 0x439f18
mov eax, ebx
call fcn.004583f3
test eax, eax
jne 0x439f04
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
jmp 0x438cd3
mov ecx, ebx
call fcn.0046cc4c
push eax
mov edi, ebx
call fcn.00443e5d
jmp 0x439ee9
xor esi, esi
inc esi
cmp dword [ebx + 0x118], edi
push esi
mov ecx, ebx
je 0x439f30
call fcn.0044310b
mov dword [ebx + 0x118], esi
jmp 0x439f35
call fcn.0044310b
cmp dword [ebx + 0x260], edi
jne 0x439ee9
cmp dword [ebx + 0x118], edi
jne 0x439f6c
mov eax, dword [ebx + 0x274]
lea ecx, [eax + 0xe8]
cmp dword [ecx], edi
je 0x439f66
mov dword [ecx], edi
mov dword [eax + 0xc], esi
mov dword [0x4d9140], esi
mov dword [0x4d9144], esi
mov dword [ebx + 0x128], edi
cmp dword [ebx + 0x260], edi
jne 0x439ee9
lea eax, [ebp - 0x2c]
push str.Redirected_to_New_Location
push eax
call fcn.00401a35
pop ecx
pop ecx
xor edi, edi
push edi
push 1
push edi
lea ecx, [ebp - 0x2c]
mov esi, ebx
call fcn.0043c222
cmp dword [ebx + 0x260], edi
jne 0x439ee9
push edi
push 0x8f0
call fcn.0043eb09
push 0x1f4
mov ecx, ebx
call fcn.0043e96e
jmp 0x439ee9