Function at 0x439053
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0x74
mov eax, 0x4a95c4
call fcn.0048d015
mov ebx, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x28], edi
push dword [ebp + 0xc]
lea ecx, [ebp - 0x18]
call fcn.00401a17
mov dword [ebp - 4], edi
call fcn.0046d63c
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401764
xor esi, esi
inc esi
mov byte [ebp - 4], 1
call fcn.0046d63c
push eax
lea ecx, [ebp - 0x24]
call fcn.00401764
mov byte [ebp - 4], 2
call fcn.0046d63c
push eax
lea ecx, [ebp - 0x1c]
call fcn.00401764
mov byte [ebp - 4], 3
call fcn.0046d63c
push eax
lea ecx, [ebp - 0x20]
call fcn.00401764
mov byte [ebp - 4], 4
call fcn.0046d63c
push eax
lea ecx, [ebp - 0x30]
call fcn.00401764
mov byte [ebp - 4], 5
push esi
mov ecx, ebx
mov dword [ebp - 0x54], edi
mov dword [ebx + 0x750], esi
mov dword [ebx + 0x74c], edi
call fcn.00443838
mov eax, ebx
call fcn.00464ded
push edi
push 0x8ef
mov esi, ebx
call fcn.0043f221
lea eax, [ebp + 0xc]
mov dword [ebx + 0x4f4], edi
mov edi, dword [ebx + 0x274]
push eax
call fcn.0040d426
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.004600f3
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
mov esi, eax
call fcn.0040174a
test esi, esi
je 0x439141
mov edi, dword [ebx + 0x274]
lea eax, [ebx + 0x54]
push eax
call fcn.0040b370
mov edi, str.https:__
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0045fc0d
test eax, eax
pop ecx
pop ecx
je 0x4391a4
push 8
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
mov esi, 0x4b3f68
lea ecx, [ebp + 0xc]
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.00404cf6
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 8
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
jmp 0x4391a9
mov esi, 0x4b3f68
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0045fc0d
test eax, eax
pop ecx
pop ecx
je 0x439200
push 8
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
lea ecx, [ebp + 0xc]
push edi
push ecx
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00404cf6
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.0045fc0d
test eax, eax
pop ecx
pop ecx
je 0x439257
push 7
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
lea ecx, [ebp + 0xc]
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.00404cf6
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xc
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
mov edi, 0x4b8d10
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0045fc0d
test eax, eax
pop ecx
pop ecx
je 0x4392b3
push 6
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
lea ecx, [ebp + 0xc]
push edi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.00404cf6
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x18]
push str.http:__lockup.zonelabs.com_
push eax
call fcn.0045fc0d
test eax, eax
pop ecx
pop ecx
je 0x439436
mov ecx, ebx
call fcn.0043eff1
test eax, eax
je 0x43938e
cmp dword [ebx + 0x21c], 0
jne 0x43938e
lea ecx, [ebx + 0x5c]
push str.Err:__ZoneAlarm
call fcn.00403366
xor edi, edi
push edi
push 0x8b1
mov esi, ebx
call fcn.0043f26b
push edi
push 0x8cd
call fcn.0043f26b
push 1
mov ecx, ebx
call fcn.00443838
cmp dword [ebx + 0x260], edi
je 0x43936b
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0040174a
xor eax, eax
call fcn.0048d0ba
ret 0x10
cmp dword [ebx + 0x12c], edi
je 0x439386
push 0xb4
push edi
push 0x4d7
call fcn.004577b2
add esp, 0xc
cmp dword [ebx + 0x260], edi
jne 0x43931f
lea eax, [ebp + 8]
push 0x456
push eax
call fcn.00460bbf
mov byte [ebp - 4], 0xf
push dword [ebx + 0x1c0]
push eax
call fcn.00426ac6
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 8]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040174a
xor eax, eax
cmp dword [0x4da238], eax
mov dword [ebx + 0x2d4], 1
jne 0x4393e2
cmp dword [ebx + 0x140], eax
jne 0x4393e2
cmp dword [ebx + 0x21c], eax
je 0x4393eb
push 1
mov edi, ebx
call fcn.0044458a
xor esi, esi
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0040174a
mov eax, esi
jmp 0x439363
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.0045fc0d
test eax, eax
pop ecx
pop ecx
jne 0x4394ab
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0045fc0d
test eax, eax
pop ecx
pop ecx
jne 0x4394ab
lea eax, [ebp - 0x18]
push str.https:__
push eax
call fcn.0045fc0d
test eax, eax
pop ecx
pop ecx
jne 0x4394ab
lea eax, [ebp - 0x18]
push str.ftps:__
push eax
call fcn.0045fc0d
test eax, eax
pop ecx
pop ecx
jne 0x4394ab
lea ecx, [ebp - 0x18]
push ecx
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0045dd09
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x10
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
jmp 0x43959a
lea eax, [ebx + 0x54]
push eax
lea esi, [ebp - 0x50]
call fcn.0045db3d
pop ecx
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0x11
call fcn.0046292b
pop ecx
pop ecx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x4c]
call fcn.0045db3d
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x14
call fcn.0046292b
pop ecx
pop ecx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
push dword [ebp + 0xc]
push dword [ebp - 0x34]
call fcn.00488333
test eax, eax
pop ecx
pop ecx
je 0x439588
lea ecx, [ebp + 0xc]
lea edi, [ebp - 0x34]
call fcn.0045fac2
test eax, eax
jne 0x439588
mov ecx, edi
lea edi, [ebp + 0xc]
call fcn.0045fac2
test eax, eax
jne 0x439588
mov esi, 0x4b478c
lea eax, [ebp - 0x50]
push esi
push eax
call fcn.00460b66
pop ecx
pop ecx
mov byte [ebp - 4], 0x17
mov edi, dword [ebx + 0x274]
push eax
call fcn.0040b4f9
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x50]
push esi
push eax
call fcn.00460b66
pop ecx
pop ecx
mov byte [ebp - 4], 0x18
mov edi, dword [ebx + 0x274]
push eax
call fcn.0040b57c
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.0040174a
push dword [ebx + 0x54]
lea ecx, [ebp - 0x18]
call fcn.00403e79
test eax, eax
jne 0x439666
lea eax, [ebx + 0x54]
push eax
lea esi, [ebp - 0x50]
call fcn.0045db3d
pop ecx
mov byte [ebp - 4], 0x19
mov esi, dword [eax]
call fcn.00471426
mov eax, dword [eax + 4]
xor edi, edi
push edi
push esi
push str.RedirSameURL
mov ecx, eax
call fcn.0047086f
neg eax
sbb al, al
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
inc al
add ecx, 0xfffffff0
mov byte [ebp + 0xf], al
call fcn.0040174a
cmp byte [ebp + 0xf], 0
je 0x439668
lea eax, [ebp - 0x2c]
push str.Redirected_to_the_same_URL.__Dont_loop.
push eax
call fcn.00401a35
pop ecx
pop ecx
push edi
push 1
push edi
lea ecx, [ebp - 0x2c]
mov esi, ebx
call fcn.0043c93a
cmp dword [ebx + 0x118], edi
je 0x439634
push edi
push edi
mov ecx, ebx
call fcn.00433620
mov esi, eax
jmp 0x4393ed
cmp dword [ebx + 0x438], edi
je 0x439645
mov ecx, ebx
call fcn.00436cac
jmp 0x43962d
cmp dword [ebp + 0x14], edi
je 0x43963c
lea ecx, [ebx + 0x248]
call fcn.004600f3
test eax, eax
je 0x43963c
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
call fcn.00438fd5
jmp 0x43962d
xor edi, edi
cmp dword [ebx + 0x438], edi
jne 0x43973e
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp + 0x14]
call fcn.0045db3d
pop ecx
mov byte [ebp - 4], 0x1a
mov esi, dword [eax]
call fcn.00471426
mov eax, dword [eax + 4]
push 0x4b478c
push esi
push str.CookieWebForm
lea ecx, [ebp - 0x34]
push ecx
mov ecx, eax
call fcn.00470a11
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x34]
call fcn.004600f3
test eax, eax
jne 0x4396ec
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x50]
call fcn.0045dc82
pop ecx
lea ecx, [ebp - 0x34]
push ecx
mov byte [ebp - 4], 0x1d
push eax
mov dword [ebp - 0x28], 1
call fcn.0045fcf4
test eax, eax
pop ecx
pop ecx
mov byte [ebp + 0xf], 1
jne 0x4396f0
mov byte [ebp + 0xf], 0
mov dword [ebp - 4], 0x1c
test byte [ebp - 0x28], 1
je 0x43970c
mov ecx, dword [ebp - 0x50]
and dword [ebp - 0x28], 0xfffffffe
add ecx, 0xfffffff0
call fcn.0040174a
cmp byte [ebp + 0xf], 0
je 0x43972f
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
call fcn.00438fd5
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
mov esi, eax
call fcn.0040174a
jmp 0x4393ed
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.0040174a
push str.:__login.
lea esi, [ebp - 0x18]
call fcn.00403260
test eax, eax
jle 0x439789
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
call fcn.0045e4de
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1e
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call fcn.0045dc23
mov byte [ebp - 4], 0x1f
jmp 0x4397c1
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0xc]
call fcn.0045e4de
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x20
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call fcn.0045dc23
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x30]
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
push 0
push 0x2f
lea ecx, [ebp - 0x20]
call fcn.00406acd
test eax, eax
jge 0x439808
push 0x4b8e5c
lea esi, [ebp - 0x20]
call fcn.00403260
test eax, eax
jge 0x439808
push 0x4b8e60
call fcn.00403260
test eax, eax
jl 0x439858
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
call fcn.0045e4de
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x22
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call fcn.0045dc23
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x23
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
cmp dword [ebx + 0x1e8], 0
je 0x439b32
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.004628ec
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 0x24
call fcn.004628ec
add esp, 0x10
mov byte [ebp - 4], 0x25
call fcn.0046d63c
push eax
lea ecx, [ebp + 0xc]
call fcn.00401764
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x26
call fcn.004600f3
test eax, eax
jne 0x439b0d
push dword [ebp - 0x4c]
push dword [ebp + 0x14]
call fcn.00488333
test eax, eax
pop ecx
pop ecx
je 0x439b0d
mov esi, str.Redirect
lea eax, [ebp - 0x48]
push esi
push eax
call fcn.00460b66
mov byte [ebp - 4], 0x27
mov eax, dword [eax]
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x50], eax
lea eax, [ebp + 0x14]
push eax
call fcn.0045f404
add esp, 0xc
push eax
push edi
push dword [ebp - 0x50]
mov edi, dword [ebx + 0x1e8]
call fcn.00449e2c
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x68]
push 0x4b478c
push eax
call fcn.00460b66
mov edi, eax
lea eax, [ebp - 0x64]
push str.BrandSignature
push eax
mov byte [ebp - 4], 0x28
call fcn.00460b66
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x60]
push str.Branded
push eax
mov byte [ebp - 4], 0x29
call fcn.00460b66
add esp, 0x18
mov byte [ebp - 4], 0x2a
mov edi, dword [edi]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
mov eax, dword [eax]
push edi
mov edi, dword [ebx + 0x1e8]
push ecx
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00449bf4
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x58]
push 0x4b478c
push eax
mov byte [ebp - 4], 0x2b
call fcn.00460b66
mov edi, eax
lea eax, [ebp - 0x38]
push str.DataSignature
push eax
mov byte [ebp - 4], 0x2c
call fcn.00460b66
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x3c]
push str.ToGo
push eax
mov byte [ebp - 4], 0x2d
call fcn.00460b66
add esp, 0x18
mov byte [ebp - 4], 0x2e
mov edi, dword [edi]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
mov eax, dword [eax]
push edi
mov edi, dword [ebx + 0x1e8]
push ecx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00449bf4
mov byte [ebp - 4], 0x2f
push dword [ebp - 0x48]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.004032d6
add esp, 0xc
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x30
call fcn.004018c1
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.00460b66
mov byte [ebp - 4], 0x31
mov edi, dword [eax]
lea eax, [ebp + 0xc]
push eax
call fcn.0045f404
add esp, 0xc
push eax
push 0x4b6ec8
push edi
mov edi, dword [ebx + 0x1e8]
call fcn.00449e2c
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x70]
push esi
push eax
call fcn.00460b66
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x32
push eax
mov ecx, dword [ebx + 0x1e8]
call fcn.0044a5b8
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x33
call fcn.004018c1
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00460b66
pop ecx
pop ecx
lea ecx, [ebp + 0xc]
push ecx
mov byte [ebp - 4], 0x34
mov eax, dword [eax]
mov edi, dword [ebx + 0x1e8]
push str.RedirectSignature
push eax
call fcn.0044975f
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebx + 0x1e8]
call fcn.0044a8ee
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
cmp dword [ebx + 0x118], 0
jne 0x43a02f
lea eax, [ebp - 0x18]
push eax
lea edi, [ebx + 0x54]
push edi
mov esi, ebx
call fcn.0043cfbc
call fcn.0046d63c
push eax
lea ecx, [ebp + 0x14]
call fcn.00401764
mov byte [ebp - 4], 0x35
call fcn.0046d63c
push eax
lea ecx, [ebp - 0x4c]
call fcn.00401764
mov byte [ebp - 4], 0x36
call fcn.0046d63c
push eax
lea ecx, [ebp - 0x40]
call fcn.00401764
mov byte [ebp - 4], 0x37
call fcn.0046d63c
push eax
lea ecx, [ebp - 0x3c]
call fcn.00401764
mov byte [ebp - 4], 0x38
call fcn.0046d63c
push eax
lea ecx, [ebp - 0x38]
call fcn.00401764
mov byte [ebp - 4], 0x39
call fcn.0046d63c
push eax
lea ecx, [ebp - 0x48]
call fcn.00401764
mov byte [ebp - 4], 0x3a
call fcn.0046d63c
push eax
lea ecx, [ebp - 0x44]
call fcn.00401764
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x3b
call fcn.0045e4de
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x3c
call fcn.00462ee4
pop ecx
pop ecx
push eax
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x3d
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
lea eax, [ebp - 0x70]
call fcn.0045e4de
pop ecx
push eax
mov byte [ebp - 4], 0x3e
lea eax, [ebp + 0xc]
push eax
call fcn.00462ee4
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x3f
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x6c]
lea esi, [ebx + 0x58]
push eax
mov ecx, esi
call fcn.0045ed81
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x40
call fcn.00462ee4
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x41
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x68]
push eax
mov ecx, edi
call fcn.00462efc
pop ecx
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x42
call fcn.0045e4de
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x43
call fcn.00462ee4
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x44
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x40]
lea edi, [ebp - 0x64]
call fcn.0045dbc3
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0x38]
call fcn.004018c1
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x60]
push esi
push eax
call fcn.00462ee4
pop ecx
pop ecx
mov ecx, eax
lea edi, [ebp + 0xc]
mov byte [ebp - 4], 0x46
call fcn.0045dbc3
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x47
call fcn.004018c1
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [ebp - 0x3c]
lea edi, [ebp - 0x5c]
call fcn.0045dbc3
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x48
call fcn.004018c1
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x50]
call fcn.0045db3d
pop ecx
mov byte [ebp - 4], 0x49
push dword [ebp - 0x40]
push dword [ebp + 0x14]
call fcn.00488333
test eax, eax
pop ecx
pop ecx
je 0x439f57
push dword [ebp + 0x14]
push dword [ebp - 0x3c]
call fcn.00488333
test eax, eax
pop ecx
pop ecx
jne 0x439dce
push dword [ebp - 0x48]
push dword [ebp - 0x38]
call fcn.00488333
test eax, eax
pop ecx
pop ecx
je 0x439f57
xor edi, edi
cmp dword [ebx + 0x498], edi
jne 0x439f57
cmp dword [ebx + 0x438], edi
jne 0x439f57
push str.:__login.
lea esi, [ebp - 0x18]
call fcn.00403260
test eax, eax
jg 0x439f57
push edi
push 0x2f
lea ecx, [ebp + 0x14]
call fcn.00406acd
test eax, eax
jge 0x439f57
push 0x4b8e5c
lea esi, [ebp + 0x14]
call fcn.00403260
test eax, eax
jge 0x439f57
push 0x4b8e60
call fcn.00403260
test eax, eax
jge 0x439f57
push dword [ebp - 0x44]
push dword [ebp - 0x38]
call fcn.00488333
test eax, eax
pop ecx
pop ecx
jne 0x439e74
lea eax, [ebp - 0x74]
push str.USERFN
push eax
call fcn.00460b66
pop ecx
pop ecx
mov byte [ebp - 4], 0x4a
mov edi, dword [ebx + 0x274]
or dword [ebp - 0x28], 2
push eax
call fcn.0040ba80
test eax, eax
mov byte [ebp + 0xf], 1
jne 0x439e78
mov byte [ebp + 0xf], 0
mov dword [ebp - 4], 0x49
test byte [ebp - 0x28], 2
je 0x439e90
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
cmp byte [ebp + 0xf], 0
jne 0x439f57
push str.filefront.com
lea edi, [ebp - 0x50]
call fcn.0045fa8a
test eax, eax
pop ecx
je 0x439ec2
push 0x4b8e74
lea edi, [ebp - 0x18]
call fcn.0045fa8a
test eax, eax
pop ecx
jne 0x439f57
push dword [ebp - 0x4c]
push dword [ebp + 0x14]
call fcn.00488333
test eax, eax
pop ecx
pop ecx
je 0x439f57
mov eax, dword [ebx + 0x274]
call fcn.0040df95
test eax, eax
jne 0x439f57
lea esi, [ebx + 0x58]
push esi
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x54], 1
call fcn.004018c1
lea ecx, [ebp - 0x1c]
call fcn.004600f3
test eax, eax
je 0x439f2d
lea eax, [ebp + 0xc]
push esi
push eax
call fcn.0045edf5
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x4b
call fcn.004018c1
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov esi, 0x4b53cc
push esi
lea edi, [ebp - 0x1c]
call fcn.0045fa8a
test eax, eax
pop ecx
jne 0x439f48
push esi
mov ecx, edi
call fcn.0040163d
mov eax, dword [ebp + 0x14]
push dword [eax - 0xc]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00401662
lea eax, [ebp - 0x18]
lea esi, [ebx + 0x54]
push eax
mov ecx, esi
call fcn.004018c1
cmp dword [ebx + 0xaec], 0
jne 0x439f9c
push str.homestead.com_
push esi
call fcn.0045fcb6
test eax, eax
pop ecx
pop ecx
jne 0x439f8d
push esi
push dword [ebx + 0x274]
call fcn.0040a527
jmp 0x439f9c
mov edi, dword [ebx + 0x274]
lea eax, [ebx + 0x54]
push eax
call fcn.0040a7c0
mov esi, dword [0x4da468]
call fcn.00471426
mov eax, dword [eax + 4]
push 0
push str.NoFilenamePrompt
push esi
mov ecx, eax
call fcn.0047086f
test eax, eax
je 0x439fd3
mov eax, dword [ebx + 0x168]
or eax, dword [ebx + 0x16c]
jne 0x439fd3
lea ecx, [ebx + 0x58]
call fcn.00401979
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
and dword [ebx + 0x69c], 0
cmp dword [ebx + 0x27c], 0
mov dword [ebx + 0x698], 1
je 0x43a0bc
lea ecx, [ebp - 0x78]
call fcn.0046ec72
xor ecx, ecx
mov byte [ebp - 4], 0x4d
cmp dword [ebp + 0x10], ecx
je 0x43a078
mov eax, dword [ebx + 0x274]
call fcn.0040df95
test eax, eax
jne 0x43a078
mov eax, dword [ebx + 0x27c]
push ecx
push ecx
call fcn.00410418
push dword [ebx + 0x27c]
call fcn.0041007c
mov dword [ebp - 4], 0x4c
jmp 0x43a0a2
mov byte [ebp - 4], 5
call fcn.0046ec88
mov ecx, dword [ebx + 0x27c]
test ecx, ecx
je 0x43a0bc
mov eax, dword [ecx]
push 1
call dword [eax + 4]
xor edi, edi
cmp dword [ebx + 0x260], edi
jne 0x4393eb
cmp dword [ebp - 0x54], edi
mov dword [ebx + 0x27c], edi
jne 0x43a17d
mov ecx, dword [ebx + 0x274]
call fcn.0040adcb
cmp edx, edi
jg 0x43a486
jl 0x43a0f9
cmp eax, 0x3e800
jae 0x43a486
mov ecx, dword [ebx + 0x274]
mov eax, ecx
mov dword [ebx + 0x168], edi
mov dword [ebx + 0x16c], edi
mov dword [ebx + 0x170], edi
mov dword [ebx + 0x174], edi
mov dword [ebx + 0x160], edi
mov dword [ebx + 0x164], edi
mov dword [ebx + 0x178], edi
mov dword [ebx + 0x17c], edi
mov dword [ebx + 0x598], edi
mov dword [ebx + 0x59c], edi
mov dword [ebx + 0x180], edi
mov dword [ebx + 0x184], edi
call fcn.0040df95
test eax, eax
jne 0x43a486
cmp dword [ebx + 0x118], edi
jne 0x43a486
push edi
push edi
mov eax, ecx
call fcn.0040ad12
mov eax, dword [ebx + 0x274]
push edi
push edi
call fcn.0040af71
jmp 0x43a486
lea ecx, [ebp - 0x78]
call fcn.0046ec72
mov byte [ebp - 4], 0x50
push dword [ebp - 0x24]
call fcn.00477ce4
mov esi, str..GetRight
push esi
lea edi, [ebp - 0x24]
call fcn.0045fa8a
test eax, eax
pop ecx
jne 0x43a1fb
push esi
mov eax, edi
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0040145d
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x51
call fcn.0045b9d9
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
mov edi, eax
call fcn.0040174a
test edi, edi
je 0x43a1fb
push esi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0040145d
add esp, 0xc
mov byte [ebp - 4], 0x52
push dword [eax]
call fcn.00477ce4
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
mov dword [ebp - 4], 0x4f
jmp 0x43a21f
mov byte [ebp - 4], 5
call fcn.0046ec88
push esi
lea edi, [ebp - 0x24]
call fcn.0045fa8a
test eax, eax
pop ecx
je 0x43a24c
push esi
lea edi, [ebp - 0x1c]
call fcn.0045fa8a
test eax, eax
pop ecx
jne 0x43a24c
push esi
mov ecx, edi
call fcn.0040163d
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00461b8b
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x54
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0040174a
push 0x2d
pop edi
push edi
push 0x7c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0045fd7a
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x55
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x3c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.0045fd7a
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x56
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x3e
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x10]
push eax
call fcn.0045fd7a
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x57
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.0040174a
push 0x4b8e8c
push str.amp_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004619e0
add esp, 0x10
mov byte [ebp - 4], 0x58
push eax
lea ecx, [ebp - 0x1c]
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.0040174a
mov esi, 0x4b8e98
push esi
push str.quot_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004619e0
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x59
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.0040174a
push esi
push str.apos_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004619e0
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5a
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.0040174a
push 0x4b506c
push str.nbsp_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.004619e0
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5b
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x2f
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.0045fd7a
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5c
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x3f
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.0045fd7a
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5d
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 0x2a
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0045fd7a
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5e
call fcn.004018c1
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [ebp - 0x1c]
lea ecx, [ebx + 0x58]
push eax
call fcn.004018c1
mov ecx, dword [ebx + 0x274]
lea eax, [ebp - 0x1c]
push eax
call fcn.0040a8b2
xor edi, edi
cmp dword [ebx + 0x260], edi
jne 0x4393eb
call fcn.0046d63c
push eax
lea ecx, [ebp + 0xc]
call fcn.00401764
mov byte [ebp - 4], 0x5f
call fcn.0046d63c
push eax
lea ecx, [ebp + 8]
call fcn.00401764
mov byte [ebp - 4], 0x60
cmp dword [ebx + 0xaec], edi
je 0x43a4f3
lea eax, [ebp + 8]
push eax
lea eax, [ebp + 0xc]
push eax
lea esi, [ebx + 0x54]
lea eax, [ebp + 0x14]
push esi
push eax
call fcn.0045d76e
add esp, 0x10
push eax
mov ecx, esi
mov byte [ebp - 4], 0x61
call fcn.004018c1
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
jmp 0x43a546
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 0x10]
push eax
call fcn.0040ceb4
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp + 0xc]
push ecx
push eax
lea eax, [ebp + 0x14]
push eax
mov byte [ebp - 4], 0x62
call fcn.0045d76e
add esp, 0x10
lea esi, [ebx + 0x54]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x63
call fcn.004018c1
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.0040174a
xor edi, edi
lea ecx, [ebp + 0xc]
call fcn.004600f3
test eax, eax
je 0x43a55e
lea ecx, [ebp + 8]
call fcn.004600f3
test eax, eax
jne 0x43a59c
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 0xc]
push eax
call fcn.0040b4f9
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 8]
push eax
call fcn.0040b57c
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebx + 0x4ac]
call fcn.004018c1
lea eax, [ebp + 8]
push eax
lea ecx, [ebx + 0x4b0]
call fcn.004018c1
xor edi, edi
cmp dword [ebx + 0xaec], edi
jne 0x43a5be
push esi
push dword [ebx + 0x274]
call fcn.0040a527
mov edi, dword [ebx + 0x274]
push esi
call fcn.0040b14d
xor edi, edi
cmp dword [ebx + 0x118], edi
jne 0x43a62d
cmp dword [0x4da238], edi
jne 0x43a5e5
cmp dword [ebx + 0x140], edi
jne 0x43a5e5
cmp dword [ebx + 0x21c], edi
jne 0x43a5e5
xor esi, esi
inc esi
mov eax, esi
jmp 0x43a5ea
xor esi, esi
xor eax, eax
inc esi
push eax
mov ecx, ebx
call fcn.00443e3a
test eax, eax
jne 0x43a630
mov eax, ebx
call fcn.0045939e
test eax, eax
jne 0x43a61c
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040174a
jmp 0x4393eb
mov ecx, ebx
call fcn.0046df02
push eax
mov edi, ebx
call fcn.0044458a
jmp 0x43a601
xor esi, esi
inc esi
cmp dword [ebx + 0x118], edi
push esi
mov ecx, ebx
je 0x43a648
call fcn.00443838
mov dword [ebx + 0x118], esi
jmp 0x43a64d
call fcn.00443838
cmp dword [ebx + 0x260], edi
jne 0x43a601
cmp dword [ebx + 0x118], edi
jne 0x43a684
mov eax, dword [ebx + 0x274]
lea ecx, [eax + 0xe8]
cmp dword [ecx], edi
je 0x43a67e
mov dword [ecx], edi
mov dword [eax + 0xc], esi
mov dword [0x4da168], esi
mov dword [0x4da16c], esi
mov dword [ebx + 0x128], edi
cmp dword [ebx + 0x260], edi
jne 0x43a601
lea eax, [ebp - 0x2c]
push str.Redirected_to_New_Location
push eax
call fcn.00401a35
pop ecx
pop ecx
xor edi, edi
push edi
push 1
push edi
lea ecx, [ebp - 0x2c]
mov esi, ebx
call fcn.0043c93a
cmp dword [ebx + 0x260], edi
jne 0x43a601
push edi
push 0x8f0
call fcn.0043f221
push 0x1f4
mov ecx, ebx
call fcn.0043f086
jmp 0x43a601