Function at 0x43093e
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0x74
mov eax, 0x49e237
call fcn.00482676
mov ebx, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x28], edi
push dword [ebp + 0xc]
lea ecx, [ebp - 0x18]
call fcn.00401a22
mov dword [ebp - 4], edi
call fcn.00462b71
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040176f
xor esi, esi
inc esi
mov byte [ebp - 4], 1
call fcn.00462b71
push eax
lea ecx, [ebp - 0x24]
call fcn.0040176f
mov byte [ebp - 4], 2
call fcn.00462b71
push eax
lea ecx, [ebp - 0x1c]
call fcn.0040176f
mov byte [ebp - 4], 3
call fcn.00462b71
push eax
lea ecx, [ebp - 0x20]
call fcn.0040176f
mov byte [ebp - 4], 4
call fcn.00462b71
push eax
lea ecx, [ebp - 0x30]
call fcn.0040176f
mov byte [ebp - 4], 5
push esi
mov ecx, ebx
mov dword [ebp - 0x54], edi
mov dword [ebx + 0x750], esi
mov dword [ebx + 0x74c], edi
call fcn.0043adec
mov eax, ebx
call fcn.0045a474
push edi
push 0x8ef
mov esi, ebx
call fcn.00436af0
lea eax, [ebp + 0xc]
mov dword [ebx + 0x4f4], edi
mov edi, dword [ebx + 0x274]
push eax
call fcn.0040d139
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.00456b20
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
mov esi, eax
call fcn.00401755
test esi, esi
je 0x430a2c
mov edi, dword [ebx + 0x274]
lea eax, [ebx + 0x54]
push eax
call fcn.0040b17b
mov edi, str.https:__
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0045663a
test eax, eax
pop ecx
pop ecx
je 0x430a8f
push 8
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
mov esi, 0x4a7f88
lea ecx, [ebp + 0xc]
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.00404afb
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 8
call fcn.004018cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.00401755
jmp 0x430a94
mov esi, 0x4a7f88
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0045663a
test eax, eax
pop ecx
pop ecx
je 0x430aeb
push 8
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
lea ecx, [ebp + 0xc]
push edi
push ecx
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00404afb
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa
call fcn.004018cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.00401755
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.0045663a
test eax, eax
pop ecx
pop ecx
je 0x430b42
push 7
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
lea ecx, [ebp + 0xc]
push esi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.00404afb
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xc
call fcn.004018cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.00401755
mov edi, 0x4ac41c
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0045663a
test eax, eax
pop ecx
pop ecx
je 0x430b9e
push 6
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.004013ad
lea ecx, [ebp + 0xc]
push edi
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.00404afb
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call fcn.004018cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.00401755
lea eax, [ebp - 0x18]
push str.http:__lockup.zonelabs.com_
push eax
call fcn.0045663a
test eax, eax
pop ecx
pop ecx
je 0x430d21
mov ecx, ebx
call fcn.004368c0
test eax, eax
je 0x430c79
cmp dword [ebx + 0x21c], 0
jne 0x430c79
lea ecx, [ebx + 0x5c]
push str.Err:__ZoneAlarm
call fcn.0040316f
xor edi, edi
push edi
push 0x8b1
mov esi, ebx
call fcn.00436b3a
push edi
push 0x8cd
call fcn.00436b3a
push 1
mov ecx, ebx
call fcn.0043adec
cmp dword [ebx + 0x260], edi
je 0x430c56
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00401755
xor eax, eax
call fcn.0048271b
ret 0x10
cmp dword [ebx + 0x12c], edi
je 0x430c71
push 0xb4
push edi
push 0x4d7
call fcn.0044e9b6
add esp, 0xc
cmp dword [ebx + 0x260], edi
jne 0x430c0a
lea eax, [ebp + 8]
push 0x456
push eax
call fcn.004575ec
mov byte [ebp - 4], 0xf
push dword [ebx + 0x1c0]
push eax
call fcn.00426459
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 8]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.00401755
xor eax, eax
cmp dword [0x4cc1dc], eax
mov dword [ebx + 0x2d4], 1
jne 0x430ccd
cmp dword [ebx + 0x140], eax
jne 0x430ccd
cmp dword [ebx + 0x21c], eax
je 0x430cd6
push 1
mov edi, ebx
call fcn.0043bb3e
xor esi, esi
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00401755
mov eax, esi
jmp 0x430c4e
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.0045663a
test eax, eax
pop ecx
pop ecx
jne 0x430d96
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0045663a
test eax, eax
pop ecx
pop ecx
jne 0x430d96
lea eax, [ebp - 0x18]
push str.https:__
push eax
call fcn.0045663a
test eax, eax
pop ecx
pop ecx
jne 0x430d96
lea eax, [ebp - 0x18]
push str.ftps:__
push eax
call fcn.0045663a
test eax, eax
pop ecx
pop ecx
jne 0x430d96
lea ecx, [ebp - 0x18]
push ecx
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0045480e
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x10
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
jmp 0x430e85
lea eax, [ebx + 0x54]
push eax
lea esi, [ebp - 0x50]
call fcn.00454642
pop ecx
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0x11
call fcn.00459087
pop ecx
pop ecx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.00401755
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x4c]
call fcn.00454642
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x14
call fcn.00459087
pop ecx
pop ecx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.00401755
push dword [ebp + 0xc]
push dword [ebp - 0x34]
call fcn.0047da13
test eax, eax
pop ecx
pop ecx
je 0x430e73
lea ecx, [ebp + 0xc]
lea edi, [ebp - 0x34]
call fcn.004564ef
test eax, eax
jne 0x430e73
mov ecx, edi
lea edi, [ebp + 0xc]
call fcn.004564ef
test eax, eax
jne 0x430e73
mov esi, 0x4a87ac
lea eax, [ebp - 0x50]
push esi
push eax
call fcn.00457593
pop ecx
pop ecx
mov byte [ebp - 4], 0x17
mov edi, dword [ebx + 0x274]
push eax
call fcn.0040b304
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.00401755
lea eax, [ebp - 0x50]
push esi
push eax
call fcn.00457593
pop ecx
pop ecx
mov byte [ebp - 4], 0x18
mov edi, dword [ebx + 0x274]
push eax
call fcn.0040b387
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.00401755
push dword [ebx + 0x54]
lea ecx, [ebp - 0x18]
call fcn.00403c82
test eax, eax
jne 0x430f51
lea eax, [ebx + 0x54]
push eax
lea esi, [ebp - 0x50]
call fcn.00454642
pop ecx
mov byte [ebp - 4], 0x19
mov esi, dword [eax]
call fcn.00466a93
mov eax, dword [eax + 4]
xor edi, edi
push edi
push esi
push str.RedirSameURL
mov ecx, eax
call fcn.00465edc
neg eax
sbb al, al
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x50]
inc al
add ecx, 0xfffffff0
mov byte [ebp + 0xf], al
call fcn.00401755
cmp byte [ebp + 0xf], 0
je 0x430f53
lea eax, [ebp - 0x2c]
push str.Redirected_to_the_same_URL.__Dont_loop.
push eax
call fcn.00401a40
pop ecx
pop ecx
push edi
push 1
push edi
lea ecx, [ebp - 0x2c]
mov esi, ebx
call fcn.00434209
cmp dword [ebx + 0x118], edi
je 0x430f1f
push edi
push edi
mov ecx, ebx
call fcn.0042af0b
mov esi, eax
jmp 0x430cd8
cmp dword [ebx + 0x438], edi
je 0x430f30
mov ecx, ebx
call fcn.0042e597
jmp 0x430f18
cmp dword [ebp + 0x14], edi
je 0x430f27
lea ecx, [ebx + 0x248]
call fcn.00456b20
test eax, eax
je 0x430f27
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
call fcn.004308c0
jmp 0x430f18
xor edi, edi
cmp dword [ebx + 0x438], edi
jne 0x431029
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp + 0x14]
call fcn.00454642
pop ecx
mov byte [ebp - 4], 0x1a
mov esi, dword [eax]
call fcn.00466a93
mov eax, dword [eax + 4]
push 0x4a87ac
push esi
push str.CookieWebForm
lea ecx, [ebp - 0x34]
push ecx
mov ecx, eax
call fcn.0046607e
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.00401755
lea ecx, [ebp - 0x34]
call fcn.00456b20
test eax, eax
jne 0x430fd7
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x50]
call fcn.00454787
pop ecx
lea ecx, [ebp - 0x34]
push ecx
mov byte [ebp - 4], 0x1d
push eax
mov dword [ebp - 0x28], 1
call fcn.00456721
test eax, eax
pop ecx
pop ecx
mov byte [ebp + 0xf], 1
jne 0x430fdb
mov byte [ebp + 0xf], 0
mov dword [ebp - 4], 0x1c
test byte [ebp - 0x28], 1
je 0x430ff7
mov ecx, dword [ebp - 0x50]
and dword [ebp - 0x28], 0xfffffffe
add ecx, 0xfffffff0
call fcn.00401755
cmp byte [ebp + 0xf], 0
je 0x43101a
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
call fcn.004308c0
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
mov esi, eax
call fcn.00401755
jmp 0x430cd8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.00401755
push str.:__login.
lea esi, [ebp - 0x18]
call fcn.00403069
test eax, eax
jle 0x431074
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
call fcn.00454fe3
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1e
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call fcn.00454728
mov byte [ebp - 4], 0x1f
jmp 0x4310ac
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0xc]
call fcn.00454fe3
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x20
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call fcn.00454728
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x30]
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
push 0
push 0x2f
lea ecx, [ebp - 0x20]
call fcn.004068d8
test eax, eax
jge 0x4310f3
push 0x4ac570
lea esi, [ebp - 0x20]
call fcn.00403069
test eax, eax
jge 0x4310f3
push 0x4ac574
call fcn.00403069
test eax, eax
jl 0x431143
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp + 0xc]
call fcn.00454fe3
pop ecx
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x22
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
lea ecx, [ebp - 0x20]
lea edi, [ebp + 0xc]
call fcn.00454728
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x23
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
cmp dword [ebx + 0x1e8], 0
je 0x43141d
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.00459048
lea eax, [ebx + 0x54]
push eax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 0x24
call fcn.00459048
add esp, 0x10
mov byte [ebp - 4], 0x25
call fcn.00462b71
push eax
lea ecx, [ebp + 0xc]
call fcn.0040176f
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x26
call fcn.00456b20
test eax, eax
jne 0x4313f8
push dword [ebp - 0x4c]
push dword [ebp + 0x14]
call fcn.0047da13
test eax, eax
pop ecx
pop ecx
je 0x4313f8
mov esi, str.Redirect
lea eax, [ebp - 0x48]
push esi
push eax
call fcn.00457593
mov byte [ebp - 4], 0x27
mov eax, dword [eax]
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x50], eax
lea eax, [ebp + 0x14]
push eax
call fcn.00455e64
add esp, 0xc
push eax
push edi
push dword [ebp - 0x50]
mov edi, dword [ebx + 0x1e8]
call fcn.00440ff9
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.00401755
lea eax, [ebp - 0x68]
push 0x4a87ac
push eax
call fcn.00457593
mov edi, eax
lea eax, [ebp - 0x64]
push str.BrandSignature
push eax
mov byte [ebp - 4], 0x28
call fcn.00457593
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x60]
push str.Branded
push eax
mov byte [ebp - 4], 0x29
call fcn.00457593
add esp, 0x18
mov byte [ebp - 4], 0x2a
mov edi, dword [edi]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
mov eax, dword [eax]
push edi
mov edi, dword [ebx + 0x1e8]
push ecx
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00440dc1
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x58]
push 0x4a87ac
push eax
mov byte [ebp - 4], 0x2b
call fcn.00457593
mov edi, eax
lea eax, [ebp - 0x38]
push str.DataSignature
push eax
mov byte [ebp - 4], 0x2c
call fcn.00457593
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x3c]
push str.ToGo
push eax
mov byte [ebp - 4], 0x2d
call fcn.00457593
add esp, 0x18
mov byte [ebp - 4], 0x2e
mov edi, dword [edi]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
mov eax, dword [eax]
push edi
mov edi, dword [ebx + 0x1e8]
push ecx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00440dc1
mov byte [ebp - 4], 0x2f
push dword [ebp - 0x48]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.004030df
add esp, 0xc
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x30
call fcn.004018cc
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.00401755
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.00457593
mov byte [ebp - 4], 0x31
mov edi, dword [eax]
lea eax, [ebp + 0xc]
push eax
call fcn.00455e64
add esp, 0xc
push eax
push 0x4aae70
push edi
mov edi, dword [ebx + 0x1e8]
call fcn.00440ff9
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.00401755
lea eax, [ebp - 0x70]
push esi
push eax
call fcn.00457593
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x32
push eax
mov ecx, dword [ebx + 0x1e8]
call fcn.00441785
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x33
call fcn.004018cc
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.00401755
lea eax, [ebp - 0x74]
push esi
push eax
call fcn.00457593
pop ecx
pop ecx
lea ecx, [ebp + 0xc]
push ecx
mov byte [ebp - 4], 0x34
mov eax, dword [eax]
mov edi, dword [ebx + 0x1e8]
push str.RedirectSignature
push eax
call fcn.0044092c
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebx + 0x1e8]
call fcn.00441abb
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.00401755
cmp dword [ebx + 0x118], 0
jne 0x43191a
lea eax, [ebp - 0x18]
push eax
lea edi, [ebx + 0x54]
push edi
mov esi, ebx
call fcn.0043488b
call fcn.00462b71
push eax
lea ecx, [ebp + 0x14]
call fcn.0040176f
mov byte [ebp - 4], 0x35
call fcn.00462b71
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040176f
mov byte [ebp - 4], 0x36
call fcn.00462b71
push eax
lea ecx, [ebp - 0x40]
call fcn.0040176f
mov byte [ebp - 4], 0x37
call fcn.00462b71
push eax
lea ecx, [ebp - 0x3c]
call fcn.0040176f
mov byte [ebp - 4], 0x38
call fcn.00462b71
push eax
lea ecx, [ebp - 0x38]
call fcn.0040176f
mov byte [ebp - 4], 0x39
call fcn.00462b71
push eax
lea ecx, [ebp - 0x48]
call fcn.0040176f
mov byte [ebp - 4], 0x3a
call fcn.00462b71
push eax
lea ecx, [ebp - 0x44]
call fcn.0040176f
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x3b
call fcn.00454fe3
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x3c
call fcn.00459640
pop ecx
pop ecx
push eax
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x3d
call fcn.004018cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.00401755
push edi
lea eax, [ebp - 0x70]
call fcn.00454fe3
pop ecx
push eax
mov byte [ebp - 4], 0x3e
lea eax, [ebp + 0xc]
push eax
call fcn.00459640
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x3f
call fcn.004018cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.00401755
lea eax, [ebp - 0x6c]
lea esi, [ebx + 0x58]
push eax
mov ecx, esi
call fcn.004557e1
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x40
call fcn.00459640
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x41
call fcn.004018cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.00401755
lea eax, [ebp - 0x68]
push eax
mov ecx, edi
call fcn.00459658
pop ecx
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x42
call fcn.00454fe3
pop ecx
push eax
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x43
call fcn.00459640
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x44
call fcn.004018cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.00401755
lea ecx, [ebp - 0x40]
lea edi, [ebp - 0x64]
call fcn.004546c8
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0x38]
call fcn.004018cc
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.00401755
lea eax, [ebp - 0x60]
push esi
push eax
call fcn.00459640
pop ecx
pop ecx
mov ecx, eax
lea edi, [ebp + 0xc]
mov byte [ebp - 4], 0x46
call fcn.004546c8
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x47
call fcn.004018cc
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.00401755
lea ecx, [ebp - 0x3c]
lea edi, [ebp - 0x5c]
call fcn.004546c8
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x48
call fcn.004018cc
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.00401755
lea eax, [ebp - 0x18]
push eax
lea esi, [ebp - 0x50]
call fcn.00454642
pop ecx
mov byte [ebp - 4], 0x49
push dword [ebp - 0x40]
push dword [ebp + 0x14]
call fcn.0047da13
test eax, eax
pop ecx
pop ecx
je 0x431842
push dword [ebp + 0x14]
push dword [ebp - 0x3c]
call fcn.0047da13
test eax, eax
pop ecx
pop ecx
jne 0x4316b9
push dword [ebp - 0x48]
push dword [ebp - 0x38]
call fcn.0047da13
test eax, eax
pop ecx
pop ecx
je 0x431842
xor edi, edi
cmp dword [ebx + 0x498], edi
jne 0x431842
cmp dword [ebx + 0x438], edi
jne 0x431842
push str.:__login.
lea esi, [ebp - 0x18]
call fcn.00403069
test eax, eax
jg 0x431842
push edi
push 0x2f
lea ecx, [ebp + 0x14]
call fcn.004068d8
test eax, eax
jge 0x431842
push 0x4ac570
lea esi, [ebp + 0x14]
call fcn.00403069
test eax, eax
jge 0x431842
push 0x4ac574
call fcn.00403069
test eax, eax
jge 0x431842
push dword [ebp - 0x44]
push dword [ebp - 0x38]
call fcn.0047da13
test eax, eax
pop ecx
pop ecx
jne 0x43175f
lea eax, [ebp - 0x74]
push str.USERFN
push eax
call fcn.00457593
pop ecx
pop ecx
mov byte [ebp - 4], 0x4a
mov edi, dword [ebx + 0x274]
or dword [ebp - 0x28], 2
push eax
call fcn.0040b88b
test eax, eax
mov byte [ebp + 0xf], 1
jne 0x431763
mov byte [ebp + 0xf], 0
mov dword [ebp - 4], 0x49
test byte [ebp - 0x28], 2
je 0x43177b
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.00401755
cmp byte [ebp + 0xf], 0
jne 0x431842
push str.filefront.com
lea edi, [ebp - 0x50]
call fcn.004564b7
test eax, eax
pop ecx
je 0x4317ad
push 0x4ac588
lea edi, [ebp - 0x18]
call fcn.004564b7
test eax, eax
pop ecx
jne 0x431842
push dword [ebp - 0x4c]
push dword [ebp + 0x14]
call fcn.0047da13
test eax, eax
pop ecx
pop ecx
je 0x431842
mov eax, dword [ebx + 0x274]
call fcn.0040dca8
test eax, eax
jne 0x431842
lea esi, [ebx + 0x58]
push esi
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x54], 1
call fcn.004018cc
lea ecx, [ebp - 0x1c]
call fcn.00456b20
test eax, eax
je 0x431818
lea eax, [ebp + 0xc]
push esi
push eax
call fcn.00455855
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x4b
call fcn.004018cc
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
mov esi, 0x4a93ec
push esi
lea edi, [ebp - 0x1c]
call fcn.004564b7
test eax, eax
pop ecx
jne 0x431833
push esi
mov ecx, edi
call fcn.0040163d
mov eax, dword [ebp + 0x14]
push dword [eax - 0xc]
lea ecx, [ebp - 0x1c]
push eax
call fcn.00401662
lea eax, [ebp - 0x18]
lea esi, [ebx + 0x54]
push eax
mov ecx, esi
call fcn.004018cc
cmp dword [ebx + 0xaec], 0
jne 0x431887
push str.homestead.com_
push esi
call fcn.004566e3
test eax, eax
pop ecx
pop ecx
jne 0x431878
push esi
push dword [ebx + 0x274]
call fcn.0040a332
jmp 0x431887
mov edi, dword [ebx + 0x274]
lea eax, [ebx + 0x54]
push eax
call fcn.0040a5cb
mov esi, dword [0x4cc408]
call fcn.00466a93
mov eax, dword [eax + 4]
push 0
push str.NoFilenamePrompt
push esi
mov ecx, eax
call fcn.00465edc
test eax, eax
je 0x4318be
mov eax, dword [ebx + 0x168]
or eax, dword [ebx + 0x16c]
jne 0x4318be
lea ecx, [ebx + 0x58]
call fcn.00401984
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.00401755
and dword [ebx + 0x69c], 0
cmp dword [ebx + 0x27c], 0
mov dword [ebx + 0x698], 1
je 0x4319a7
lea ecx, [ebp - 0x78]
call fcn.00463ff6
xor ecx, ecx
mov byte [ebp - 4], 0x4d
cmp dword [ebp + 0x10], ecx
je 0x431963
mov eax, dword [ebx + 0x274]
call fcn.0040dca8
test eax, eax
jne 0x431963
mov eax, dword [ebx + 0x27c]
push ecx
push ecx
call fcn.0041011e
push dword [ebx + 0x27c]
call fcn.0040fd8a
mov dword [ebp - 4], 0x4c
jmp 0x43198d
mov byte [ebp - 4], 5
call fcn.0046400c
mov ecx, dword [ebx + 0x27c]
test ecx, ecx
je 0x4319a7
mov eax, dword [ecx]
push 1
call dword [eax + 4]
xor edi, edi
cmp dword [ebx + 0x260], edi
jne 0x430cd6
cmp dword [ebp - 0x54], edi
mov dword [ebx + 0x27c], edi
jne 0x431a68
mov ecx, dword [ebx + 0x274]
call fcn.0040abd6
cmp edx, edi
jg 0x431d71
jl 0x4319e4
cmp eax, 0x3e800
jae 0x431d71
mov ecx, dword [ebx + 0x274]
mov eax, ecx
mov dword [ebx + 0x168], edi
mov dword [ebx + 0x16c], edi
mov dword [ebx + 0x170], edi
mov dword [ebx + 0x174], edi
mov dword [ebx + 0x160], edi
mov dword [ebx + 0x164], edi
mov dword [ebx + 0x178], edi
mov dword [ebx + 0x17c], edi
mov dword [ebx + 0x598], edi
mov dword [ebx + 0x59c], edi
mov dword [ebx + 0x180], edi
mov dword [ebx + 0x184], edi
call fcn.0040dca8
test eax, eax
jne 0x431d71
cmp dword [ebx + 0x118], edi
jne 0x431d71
push edi
push edi
mov eax, ecx
call fcn.0040ab1d
mov eax, dword [ebx + 0x274]
push edi
push edi
call fcn.0040ad7c
jmp 0x431d71
lea ecx, [ebp - 0x78]
call fcn.00463ff6
mov byte [ebp - 4], 0x50
push dword [ebp - 0x24]
call fcn.0046d4ee
mov esi, str..GetRight
push esi
lea edi, [ebp - 0x24]
call fcn.004564b7
test eax, eax
pop ecx
jne 0x431ae6
push esi
mov eax, edi
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0040145d
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x51
call fcn.004525e6
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
mov edi, eax
call fcn.00401755
test edi, edi
je 0x431ae6
push esi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0040145d
add esp, 0xc
mov byte [ebp - 4], 0x52
push dword [eax]
call fcn.0046d4ee
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
mov dword [ebp - 4], 0x4f
jmp 0x431b0a
mov byte [ebp - 4], 5
call fcn.0046400c
push esi
lea edi, [ebp - 0x24]
call fcn.004564b7
test eax, eax
pop ecx
je 0x431b37
push esi
lea edi, [ebp - 0x1c]
call fcn.004564b7
test eax, eax
pop ecx
jne 0x431b37
push esi
mov ecx, edi
call fcn.0040163d
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004583c3
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x54
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00401755
push 0x2d
pop edi
push edi
push 0x7c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004567a7
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x55
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
push edi
push 0x3c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.004567a7
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x56
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.00401755
push edi
push 0x3e
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x10]
push eax
call fcn.004567a7
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x57
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.00401755
push 0x4ac5a0
push str.amp_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00458218
add esp, 0x10
mov byte [ebp - 4], 0x58
push eax
lea ecx, [ebp - 0x1c]
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.00401755
mov esi, 0x4ac5ac
push esi
push str.quot_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.00458218
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x59
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.00401755
push esi
push str.apos_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00458218
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5a
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.00401755
push 0x4a908c
push str.nbsp_
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.00458218
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5b
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.00401755
push edi
push 0x2f
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.004567a7
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5c
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.00401755
push edi
push 0x3f
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004567a7
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5d
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.00401755
push edi
push 0x2a
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.004567a7
add esp, 0x10
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x5e
call fcn.004018cc
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.00401755
lea eax, [ebp - 0x1c]
lea ecx, [ebx + 0x58]
push eax
call fcn.004018cc
mov ecx, dword [ebx + 0x274]
lea eax, [ebp - 0x1c]
push eax
call fcn.0040a6bd
xor edi, edi
cmp dword [ebx + 0x260], edi
jne 0x430cd6
call fcn.00462b71
push eax
lea ecx, [ebp + 0xc]
call fcn.0040176f
mov byte [ebp - 4], 0x5f
call fcn.00462b71
push eax
lea ecx, [ebp + 8]
call fcn.0040176f
mov byte [ebp - 4], 0x60
cmp dword [ebx + 0xaec], edi
je 0x431dde
lea eax, [ebp + 8]
push eax
lea eax, [ebp + 0xc]
push eax
lea esi, [ebx + 0x54]
lea eax, [ebp + 0x14]
push esi
push eax
call fcn.00454273
add esp, 0x10
push eax
mov ecx, esi
mov byte [ebp - 4], 0x61
call fcn.004018cc
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.00401755
jmp 0x431e31
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 0x10]
push eax
call fcn.0040ccbf
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp + 0xc]
push ecx
push eax
lea eax, [ebp + 0x14]
push eax
mov byte [ebp - 4], 0x62
call fcn.00454273
add esp, 0x10
lea esi, [ebx + 0x54]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x63
call fcn.004018cc
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.00401755
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.00401755
xor edi, edi
lea ecx, [ebp + 0xc]
call fcn.00456b20
test eax, eax
je 0x431e49
lea ecx, [ebp + 8]
call fcn.00456b20
test eax, eax
jne 0x431e87
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 0xc]
push eax
call fcn.0040b304
mov edi, dword [ebx + 0x274]
lea eax, [ebp + 8]
push eax
call fcn.0040b387
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebx + 0x4ac]
call fcn.004018cc
lea eax, [ebp + 8]
push eax
lea ecx, [ebx + 0x4b0]
call fcn.004018cc
xor edi, edi
cmp dword [ebx + 0xaec], edi
jne 0x431ea9
push esi
push dword [ebx + 0x274]
call fcn.0040a332
mov edi, dword [ebx + 0x274]
push esi
call fcn.0040af58
xor edi, edi
cmp dword [ebx + 0x118], edi
jne 0x431f18
cmp dword [0x4cc1dc], edi
jne 0x431ed0
cmp dword [ebx + 0x140], edi
jne 0x431ed0
cmp dword [ebx + 0x21c], edi
jne 0x431ed0
xor esi, esi
inc esi
mov eax, esi
jmp 0x431ed5
xor esi, esi
xor eax, eax
inc esi
push eax
mov ecx, ebx
call fcn.0043b3ee
test eax, eax
jne 0x431f1b
mov eax, ebx
call fcn.00450181
test eax, eax
jne 0x431f07
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00401755
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00401755
jmp 0x430cd6
mov ecx, ebx
call fcn.00463243
push eax
mov edi, ebx
call fcn.0043bb3e
jmp 0x431eec
xor esi, esi
inc esi
cmp dword [ebx + 0x118], edi
push esi
mov ecx, ebx
je 0x431f33
call fcn.0043adec
mov dword [ebx + 0x118], esi
jmp 0x431f38
call fcn.0043adec
cmp dword [ebx + 0x260], edi
jne 0x431eec
cmp dword [ebx + 0x118], edi
jne 0x431f6f
mov eax, dword [ebx + 0x274]
lea ecx, [eax + 0xe8]
cmp dword [ecx], edi
je 0x431f69
mov dword [ecx], edi
mov dword [eax + 0xc], esi
mov dword [0x4cc128], esi
mov dword [0x4cc12c], esi
mov dword [ebx + 0x128], edi
cmp dword [ebx + 0x260], edi
jne 0x431eec
lea eax, [ebp - 0x2c]
push str.Redirected_to_New_Location
push eax
call fcn.00401a40
pop ecx
pop ecx
xor edi, edi
push edi
push 1
push edi
lea ecx, [ebp - 0x2c]
mov esi, ebx
call fcn.00434209
cmp dword [ebx + 0x260], edi
jne 0x431eec
push edi
push 0x8f0
call fcn.00436af0
push 0x1f4
mov ecx, ebx
call fcn.00436955
jmp 0x431eec