Function at 0x420d60
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b7481
mov eax, dword fs:[0]
push eax
sub esp, 0x128
mov eax, dword [0x4faee4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0xf0], ebx
push 1
push 0
mov dword [ebp - 0xec], 0
call fcn.0049263f
lea esi, [ebx + 0x94]
add esp, 8
mov dword [ebp - 0x134], esi
nop dword [eax + eax]
push 1
mov ecx, esi
call fcn.00437f10
mov eax, dword [ebx + 0xb8]
lea ecx, [ebx + 0xb8]
push 0x3e8
mov eax, dword [eax]
call eax
test al, al
je 0x420dc0
push 0
mov ecx, esi
call fcn.00437f10
mov ecx, 0x5030c0
call fcn.00433bd0
mov eax, dword [0x5030bc]
test eax, eax
je 0x420e0c
mov ecx, dword [eax]
push str.options_reloaded_n
push eax
call dword [ecx + 0x18]
add esp, 8
push 0x60
call fcn.00464239
mov ebx, eax
add esp, 4
mov dword [ebp - 0x120], ebx
push str.max_log_size
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0
call fcn.0042e400
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xec], 1
push eax
mov eax, dword [0x5030c0]
mov ecx, 0x5030c0
call dword [eax + 0x14]
mov edi, eax
lea eax, [ebp - 0x88]
mov dword [ebp - 4], 2
push eax
mov dword [ebp - 0xec], 3
call fcn.00430710
push str.ft_agent.log
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 3
push eax
mov dword [ebp - 0xec], 7
call fcn.0042f670
add esp, 0x10
mov esi, eax
mov dword [ebp - 4], 4
mov ecx, edi
push 0x100000
mov dword [ebp - 0xec], 0xf
call fcn.0042e740
push eax
push 0x4e2adc
push esi
mov ecx, ebx
call fcn.004325a0
mov ecx, dword [0x5030bc]
mov dword [0x5030bc], eax
test ecx, ecx
je 0x420ee3
mov dword [ebp - 4], 9
mov eax, dword [ecx]
push 1
call dword [eax]
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x420ef8
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004046a0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x420f25
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.004046a0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x74], 0xf
mov dword [ebp - 0x78], 0
mov byte [ebp - 0x88], 0
cmp eax, 0x10
jb 0x420f58
inc eax
lea ecx, [ebp - 0xb8]
push eax
push dword [ebp - 0xb8]
call fcn.004046a0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xa4], 0xf
mov dword [ebp - 0xa8], 0
mov byte [ebp - 0xb8], 0
cmp eax, 0x10
jb 0x420f8f
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004046a0
push str.log_mode
lea ecx, [ebp - 0x40]
call fcn.0042e400
push 0x4e2a60
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0xa
call fcn.0042e400
push 0
push 1
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xb
call fcn.0042e4c0
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.0042e720
push eax
lea eax, [ebp - 0x40]
mov ecx, 0x5030c0
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00434250
mov byte [ebp - 4], 0xd
mov ecx, eax
mov esi, dword [0x5030bc]
push 1
call fcn.0042e740
push eax
mov ecx, esi
call fcn.00432970
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x42101b
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004046a0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x421048
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.004046a0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x74], 0xf
mov dword [ebp - 0x78], 0
mov byte [ebp - 0x88], 0
cmp eax, 0x10
jb 0x42107b
inc eax
lea ecx, [ebp - 0xb8]
push eax
push dword [ebp - 0xb8]
call fcn.004046a0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xa4], 0xf
mov dword [ebp - 0xa8], 0
mov byte [ebp - 0xb8], 0
cmp eax, 0x10
jb 0x4210b2
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004046a0
mov ebx, dword [ebp - 0xf0]
lea eax, [ebp - 0x70]
mov edi, dword [0x5030bc]
mov ecx, ebx
push eax
call fcn.00426190
mov dword [ebp - 4], 0xe
mov ecx, eax
mov esi, dword [edi]
call fcn.0042e730
push eax
push str.ft_agent_v_s_starting..._n
push edi
call dword [esi + 0x18]
mov dword [ebp - 4], 0xffffffff
add esp, 0xc
mov eax, dword [ebp - 0x5c]
cmp eax, 0x10
jb 0x421102
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.004046a0
mov ecx, dword [0x5030bc]
mov eax, str.safe
cmp byte [0x4ff4f0], 0
mov esi, str.unsafe
cmove eax, esi
mov edx, dword [ecx]
push eax
push str.using__s_threads_n
push ecx
call dword [edx + 8]
push 0x422540
call fcn.004616fe
add esp, 0x10
mov ecx, ebx
call fcn.004227a0
push str.work_mode
lea ecx, [ebp - 0x88]
call fcn.0042e400
push 0x4e2a60
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0xf
call fcn.0042e400
push 0x4e2a60
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0xb8]
mov ecx, 0x5030c0
push eax
lea eax, [ebp - 0xd0]
push eax
call fcn.004343b0
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.0042e720
mov edx, eax
mov dword [ebp - 0xd4], 0xf
mov dword [ebp - 0xd8], 0
mov byte [ebp - 0xe8], 0
cmp byte [edx], 0
jne 0x4211bc
xor ecx, ecx
jmp 0x4211ca
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4211c1
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xe8]
call fcn.00404290
mov eax, dword [ebp - 0xbc]
cmp eax, 0x10
jb 0x4211f5
inc eax
lea ecx, [ebp - 0xd0]
push eax
push dword [ebp - 0xd0]
call fcn.004046a0
mov dword [ebp - 0xbc], 0xf
mov dword [ebp - 0xc0], 0
mov byte [ebp - 0xd0], 0
mov eax, dword [ebp - 0xa4]
cmp eax, 0x10
jb 0x42122e
inc eax
lea ecx, [ebp - 0xb8]
push eax
push dword [ebp - 0xb8]
call fcn.004046a0
mov dword [ebp - 0xa4], 0xf
mov dword [ebp - 0xa8], 0
mov byte [ebp - 0xb8], 0
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x74]
cmp eax, 0x10
jb 0x421268
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.004046a0
cmp dword [ebp - 0xd4], 0x10
lea ecx, [ebp - 0xe8]
mov esi, dword [ebp - 0xd8]
mov edi, 8
cmovae ecx, dword [ebp - 0xe8]
mov eax, edi
cmp esi, eax
mov dword [ebp - 0x74], 0xf
mov dword [ebp - 0x78], 0
cmovb eax, esi
mov byte [ebp - 0x88], 0
push eax
push str.emulator
push ecx
call fcn.004030d0
add esp, 0xc
test eax, eax
jne 0x4212c5
cmp edi, esi
jbe 0x4212bf
or eax, 0xffffffff
jmp 0x4212c3
sbb eax, eax
neg eax
test eax, eax
sete al
lea ecx, [ebp - 0x40]
push str.save_dir
mov byte [ebx + 0x100], al
call fcn.0042e400
push 0x4e2a60
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x16
call fcn.0042e400
push str.c:_ft_agent_tmp
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x28]
mov ecx, 0x5030c0
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.004343b0
mov ecx, eax
mov byte [ebp - 4], 0x18
call fcn.0042e720
mov edx, eax
cmp byte [edx], 0
jne 0x421321
xor ecx, ecx
jmp 0x42132f
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x421326
sub ecx, esi
push ecx
push edx
lea ecx, [ebx + 0xe8]
call fcn.00404290
mov eax, dword [ebp - 0x44]
cmp eax, 0x10
jb 0x421351
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.004046a0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
cmp eax, 0x10
jb 0x421378
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004046a0
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x4213a3
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004046a0
push 0x800
call fcn.00492600
mov ecx, dword [0x5030bc]
push eax
push str.new_maxIoFiles:__d_n
push ecx
mov edx, dword [ecx]
mov dword [ebp - 0x120], eax
call dword [edx + 8]
push 0x60
call fcn.00464239
mov ebx, eax
add esp, 0x14
mov dword [ebp - 0x12c], ebx
push str.max_log_size
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x19
call fcn.0042e400
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0xec], 0x10
push eax
mov eax, dword [0x5030c0]
mov ecx, 0x5030c0
call dword [eax + 0x14]
mov edi, eax
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x1b
push eax
mov dword [ebp - 0xec], 0x30
call fcn.00430710
push str.ft_loop.log
push eax
lea eax, [ebp - 0x58]
mov dword [ebp - 4], 0x1c
push eax
mov dword [ebp - 0xec], 0x70
call fcn.0042f670
add esp, 0x10
mov esi, eax
mov dword [ebp - 4], 0x1d
mov ecx, edi
push 0x100000
mov dword [ebp - 0xec], 0xf0
call fcn.0042e740
push eax
push 0x4e2adc
push esi
mov ecx, ebx
call fcn.004325a0
mov ebx, eax
mov dword [ebp - 0x12c], ebx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x11c], ebx
cmp eax, 0x10
jb 0x42149a
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.004046a0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
cmp eax, 0x10
jb 0x4214c1
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004046a0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x4214e8
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004046a0
mov dword [ebp - 4], 0x15
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x421516
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.004046a0
push str.log_mode
lea ecx, [ebp - 0x70]
call fcn.0042e400
push 0x4e2a60
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x22
call fcn.0042e400
push 0
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x23
call fcn.0042e4c0
mov ecx, eax
mov byte [ebp - 4], 0x24
call fcn.0042e720
push eax
lea eax, [ebp - 0x70]
mov ecx, 0x5030c0
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00434250
push 1
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.0042e740
push eax
mov ecx, ebx
call fcn.00432970
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x421590
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004046a0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x4215b7
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.004046a0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
cmp eax, 0x10
jb 0x4215de
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004046a0
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x421609
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.004046a0
push 7
push str.ft_loop
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.00404290
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x118], ebx
mov ebx, dword [ebp - 0xf0]
add ebx, 0x108
mov eax, dword [ebx + 4]
mov esi, dword [eax]
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x28]
push eax
push dword [esi + 4]
push esi
call fcn.00405910
mov ecx, 0x71c71c6
mov edx, eax
sub ecx, dword [ebx + 8]
cmp ecx, 1
jae 0x421672
push str.list_T__too_long
call fcn.004616a4
inc dword [ebx + 8]
mov dword [esi + 4], edx
mov eax, dword [edx + 4]
mov dword [eax], edx
mov ecx, dword [ebx + 4]
mov eax, dword [ecx]
mov ecx, ebx
push eax
add eax, 8
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00404f70
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x4216ae
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004046a0
push 0x60
call fcn.00464239
mov ebx, eax
add esp, 4
mov dword [ebp - 0x128], ebx
push str.max_log_size
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x27
call fcn.0042e400
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x28
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0xec], 0x100
push eax
mov eax, dword [0x5030c0]
mov ecx, 0x5030c0
call dword [eax + 0x14]
mov edi, eax
lea eax, [ebp - 0x58]
mov dword [ebp - 4], 0x29
push eax
mov dword [ebp - 0xec], 0x300
call fcn.00430710
push str.ft_recv.log
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x2a
push eax
mov dword [ebp - 0xec], 0x700
call fcn.0042f670
add esp, 0x10
mov esi, eax
mov dword [ebp - 4], 0x2b
mov ecx, edi
push 0x100000
mov dword [ebp - 0xec], 0xf00
call fcn.0042e740
push eax
push 0x4e2adc
push esi
mov ecx, ebx
call fcn.004325a0
mov ebx, eax
mov dword [ebp - 0x128], ebx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x118], ebx
cmp eax, 0x10
jb 0x421783
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004046a0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x4217aa
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.004046a0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
cmp eax, 0x10
jb 0x4217d1
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004046a0
mov dword [ebp - 4], 0x15
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x4217ff
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.004046a0
push 7
push str.ft_recv
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.00404290
mov byte [ebp - 4], 0x30
mov esi, dword [ebp - 0xf0]
add esi, 0x108
mov dword [ebp - 0x114], ebx
mov eax, dword [esi + 4]
mov edi, dword [eax]
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x28]
push eax
push dword [edi + 4]
push edi
call fcn.00405910
mov ecx, 0x71c71c6
mov edx, eax
sub ecx, dword [esi + 8]
cmp ecx, 1
jae 0x421868
push str.list_T__too_long
call fcn.004616a4
inc dword [esi + 8]
mov dword [edi + 4], edx
mov eax, dword [edx + 4]
mov dword [eax], edx
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
mov ecx, esi
push eax
add eax, 8
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00404f70
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x4218a4
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004046a0
push 0x60
call fcn.00464239
mov ebx, eax
add esp, 4
mov dword [ebp - 0xf4], ebx
push str.max_log_size
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x31
call fcn.0042e400
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x32
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0xec], 0x1000
push eax
mov eax, dword [0x5030c0]
mov ecx, 0x5030c0
call dword [eax + 0x14]
mov edi, eax
lea eax, [ebp - 0x58]
mov dword [ebp - 4], 0x33
push eax
mov dword [ebp - 0xec], 0x3000
call fcn.00430710
push str.ft_send.log
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 0x34
push eax
mov dword [ebp - 0xec], 0x7000
call fcn.0042f670
add esp, 0x10
mov esi, eax
mov dword [ebp - 4], 0x35
mov ecx, edi
push 0x100000
mov dword [ebp - 0xec], 0xf000
call fcn.0042e740
push eax
push 0x4e2adc
push esi
mov ecx, ebx
call fcn.004325a0
mov ebx, eax
mov dword [ebp - 0xf4], ebx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x114], ebx
cmp eax, 0x10
jb 0x421979
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004046a0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
cmp eax, 0x10
jb 0x4219a0
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.004046a0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
cmp eax, 0x10
jb 0x4219c7
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004046a0
mov dword [ebp - 4], 0x15
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x4219f5
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.004046a0
push 7
push str.ft_send
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.00404290
mov byte [ebp - 4], 0x3a
mov edi, dword [ebp - 0xf0]
mov eax, dword [edi + 0x10c]
mov dword [ebp - 0xec], ebx
lea ebx, [edi + 0x108]
mov esi, dword [eax]
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x28]
push eax
push dword [esi + 4]
push esi
call fcn.00405910
mov ecx, eax
mov eax, 0x71c71c6
sub eax, dword [ebx + 8]
cmp eax, 1
jae 0x421a61
push str.list_T__too_long
call fcn.004616a4
inc dword [ebx + 8]
mov dword [esi + 4], ecx
mov eax, dword [ecx + 4]
mov dword [eax], ecx
mov ecx, dword [ebx + 4]
mov eax, dword [ecx]
mov ecx, ebx
push eax
add eax, 8
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00404f70
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x421a9d
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004046a0
push 0x60
call fcn.00464239
mov esi, eax
mov dword [ebp - 0xfc], esi
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x3b
push eax
call fcn.00430710
push str.ft_proc.log
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x3c
push eax
mov dword [ebp - 0xec], 0x10000
call fcn.0042f670
add esp, 0x14
push 0x100000
push 0x4e2adc
mov dword [ebp - 4], 0x3d
mov ecx, esi
push eax
mov dword [ebp - 0xec], 0x30000
call fcn.004325a0
mov dword [ebp - 4], 0x3f
lea ecx, [ebp - 0x110]
push eax
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
call fcn.0041a910
mov dword [ebp - 4], 0x40
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x421b3f
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004046a0
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 0x42
mov eax, dword [ebp - 0x44]
cmp eax, 0x10
jb 0x421b6a
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.004046a0
push str.log_mode
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
call fcn.0042e400
push 0x4e2a60
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x43
call fcn.0042e400
push 0
push 1
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x44
call fcn.0042e4c0
mov ecx, eax
mov byte [ebp - 4], 0x45
call fcn.0042e720
push eax
lea eax, [ebp - 0x70]
mov ecx, 0x5030c0
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0xd0]
push eax
call fcn.00434250
push 1
mov ecx, eax
mov byte [ebp - 4], 0x46
call fcn.0042e740
mov ecx, dword [ebp - 0x110]
push eax
call fcn.00432970
mov eax, dword [ebp - 0xbc]
cmp eax, 0x10
jb 0x421c09
inc eax
lea ecx, [ebp - 0xd0]
push eax
push dword [ebp - 0xd0]
call fcn.004046a0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xbc], 0xf
mov dword [ebp - 0xc0], 0
mov byte [ebp - 0xd0], 0
cmp eax, 0x10
jb 0x421c3f
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.004046a0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x74], 0xf
mov dword [ebp - 0x78], 0
mov byte [ebp - 0x88], 0
cmp eax, 0x10
jb 0x421c69
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004046a0
mov byte [ebp - 4], 0x42
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp eax, 0x10
jb 0x421c94
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.004046a0
push 7
push str.ft_proc
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.00404290
sub esp, 8
mov ecx, esp
mov dword [ebp - 0xec], ecx
mov byte [ebp - 4], 0x48
mov esi, dword [ebp - 0x10c]
mov dword [ecx], 0
mov dword [ecx + 4], 0
test esi, esi
je 0x421cdf
lock inc dword [esi + 4]
mov esi, dword [ecx + 4]
test esi, esi
je 0x421d0d
or eax, 0xffffffff
lock xadd dword [esi + 4], eax
jne 0x421d0d
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
jne 0x421d07
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0xec]
mov eax, dword [ebp - 0x10c]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x110]
mov dword [ecx], eax
lea eax, [ebp - 0x28]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x47
call fcn.00403450
mov byte [ebp - 4], 0x42
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x421d46
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004046a0
push 0x60
call fcn.00464239
mov esi, eax
mov dword [ebp - 0xfc], esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x49
push eax
call fcn.00430710
push str.ft_tasks.log
push eax
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x4a
push eax
mov dword [ebp - 0xec], 0x40000
call fcn.0042f670
add esp, 0x14
push 0x6400000
push 0x4e2adc
mov dword [ebp - 4], 0x4b
mov ecx, esi
push eax
mov dword [ebp - 0xec], 0xc0000
call fcn.004325a0
mov dword [ebp - 4], 0x4d
lea ecx, [ebp - 0x108]
push eax
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0
call fcn.0041a910
mov dword [ebp - 4], 0x4e
mov eax, dword [ebp - 0xbc]
cmp eax, 0x10
jb 0x421df4
inc eax
lea ecx, [ebp - 0xd0]
push eax
push dword [ebp - 0xd0]
call fcn.004046a0
push 0
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xbc], 0xf
call fcn.00404760
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x50
call fcn.00403230
push str.log_mode
lea ecx, [ebp - 0x70]
call fcn.0042e400
push 0x4e2a60
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x51
call fcn.0042e400
push 0
push 1
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x52
call fcn.0042e4c0
mov ecx, eax
mov byte [ebp - 4], 0x53
call fcn.0042e720
push eax
lea eax, [ebp - 0x70]
mov ecx, 0x5030c0
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00434250
push 1
mov ecx, eax
mov byte [ebp - 4], 0x54
call fcn.0042e740
mov ecx, dword [ebp - 0x108]
push eax
call fcn.00432970
lea ecx, [ebp - 0x58]
call fcn.00403230
lea ecx, [ebp - 0x88]
call fcn.00403230
lea ecx, [ebp - 0xa0]
call fcn.00403230
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x50
call fcn.00403230
push str.ft_tasks
lea ecx, [ebp - 0xa0]
call fcn.00406d20
sub esp, 8
mov byte [ebp - 4], 0x55
lea eax, [ebp - 0x108]
mov ecx, esp
push eax
call fcn.00408510
lea eax, [ebp - 0xa0]
mov ecx, ebx
push eax
call fcn.00403450
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x50
call fcn.00403230
push str.ft_file
lea ecx, [ebp - 0xa0]
call fcn.00406d20
lea ecx, [ebp - 0x100]
call fcn.00408460
mov byte [ebp - 4], 0x57
mov ecx, ebx
push dword [eax]
lea eax, [ebp - 0xa0]
push eax
call fcn.00403520
lea ecx, [ebp - 0x100]
call fcn.00403c50
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x50
call fcn.00403230
push str.use_x4_whitelist
lea ecx, [ebp - 0x40]
call fcn.0042e400
push 0x4e2a60
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x58
call fcn.0042e400
push 0x4e51d8
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x59
push eax
lea eax, [ebp - 0xa0]
mov ecx, 0x5030c0
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004343b0
push 0
mov ecx, eax
mov byte [ebp - 4], 0x5a
call fcn.0042e840
lea ecx, [ebp - 0x70]
mov byte [ebp - 0xf5], al
call fcn.00403230
lea ecx, [ebp - 0xa0]
call fcn.00403230
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x50
call fcn.00403230
mov eax, dword [0x5030bc]
mov cl, byte [edi + 0x100]
test cl, cl
mov ecx, dword [eax]
je 0x422248
push str.STARTING_IN_EMULATOR_MODE_n
push eax
call dword [ecx + 0x18]
add esp, 8
lea ecx, [ebp - 0x70]
push str.port_min
call fcn.0042e400
push 0x4e2a60
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x5b
call fcn.0042e400
push 0x4e520c
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x5c
push eax
lea eax, [ebp - 0xa0]
mov ecx, 0x5030c0
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.004343b0
push 0xffffffffffffffff
mov ecx, eax
mov byte [ebp - 4], 0x5d
call fcn.0042e740
lea ecx, [ebp - 0x58]
mov dword [ebp - 0xf0], eax
call fcn.00403230
lea ecx, [ebp - 0xa0]
call fcn.00403230
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x50
call fcn.00403230
push str.port_max
lea ecx, [ebp - 0x40]
call fcn.0042e400
push 0x4e2a60
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x5e
call fcn.0042e400
push 0x4e520c
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x5f
push eax
lea eax, [ebp - 0xa0]
mov ecx, 0x5030c0
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004343b0
push 0xffffffffffffffff
mov ecx, eax
mov byte [ebp - 4], 0x60
call fcn.0042e740
mov esi, eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0xf4], esi
call fcn.00403230
lea ecx, [ebp - 0xa0]
call fcn.00403230
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x50
call fcn.00403230
mov eax, dword [ebp - 0xf0]
cmp eax, esi
jg 0x42218f
mov dword [ebp - 0xec], eax
nop dword [eax]
nop dword [eax + eax]
lea eax, [ebp - 0x108]
mov dword [ebp - 0xf0], edi
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0xec]
push eax
push ebx
lea edx, [ebp - 0xf0]
lea ecx, [ebp - 0x100]
call fcn.004232f0
add esp, 0x1c
push eax
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 0x61
push eax
lea ecx, [edi + 0xe0]
call fcn.00422c10
mov ecx, eax
call fcn.00422c30
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x50
call fcn.00403c50
lea eax, [ebp - 0xec]
push eax
lea ecx, [edi + 0xe0]
call fcn.00422c10
push dword [ebp - 0xec]
mov ecx, dword [eax]
call fcn.0040a660
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp eax, dword [ebp - 0xf4]
jle 0x4220e0
jmp 0x4224bc
mov eax, dword [0x5030bc]
push str.Port_min_is_bigger_then_port_max._Starting_with_default_port
push eax
mov ecx, dword [eax]
call dword [ecx + 0x18]
lea eax, [ebp - 0x108]
mov dword [ebp - 0xf4], 0
push eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0xf0], edi
push eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0xec], 0
push eax
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0xf4]
push eax
push ebx
lea edx, [ebp - 0xf0]
lea ecx, [ebp - 0x100]
call fcn.004232f0
add esp, 0x24
push eax
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 0x62
push eax
lea ecx, [edi + 0xe0]
call fcn.00422c10
mov ecx, eax
call fcn.00422c30
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x50
call fcn.00403c50
lea eax, [ebp - 0xf4]
mov dword [ebp - 0xf4], 0
push eax
lea ecx, [edi + 0xe0]
call fcn.00422c10
mov ecx, dword [eax]
jmp 0x4224b5
push str.STARTING_IN_NORMAL_MODE_n
push eax
call dword [ecx + 0x18]
add esp, 8
lea ecx, [ebp - 0x70]
push str.listen_port
call fcn.0042e400
push 0x4e2a60
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x63
call fcn.0042e400
push 0x4e520c
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x64
push eax
lea eax, [ebp - 0xa0]
mov ecx, 0x5030c0
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.004343b0
push 0xffffffffffffffff
mov ecx, eax
mov byte [ebp - 4], 0x65
call fcn.0042e740
lea ecx, [ebp - 0x40]
mov edi, eax
call fcn.00403230
lea ecx, [ebp - 0xa0]
call fcn.00403230
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x50
call fcn.00403230
push 0x210
call fcn.00464239
mov esi, eax
mov dword [ebp - 0xfc], esi
push ecx
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x66
mov ecx, esp
push eax
call fcn.00408510
sub esp, 8
lea eax, [ebp - 0x110]
mov ecx, esp
push eax
call fcn.00408510
push dword [ebp - 0xf4]
mov ecx, esi
push dword [ebp - 0x128]
push dword [ebp - 0x12c]
push edi
mov edi, dword [ebp - 0xf0]
push ebx
push edi
call fcn.00409850
cmp byte [ebp - 0xf5], 0
mov byte [ebp - 4], 0x50
mov dword [edi + 0xdc], eax
je 0x4224af
lea ecx, [ebp - 0x100]
call fcn.0043f090
push str.SOFTWARERenome_Smartx4agentmodulescore
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x67
call fcn.00406d20
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x68
push eax
push reloc.WS2_32.dll_bind
lea ecx, [ebp - 0x100]
call fcn.0043f110
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x67
mov bl, al
call fcn.00403230
test bl, bl
je 0x422487
push str.server_address
lea ecx, [ebp - 0x70]
call fcn.00406d20
push 0x4e2a60
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x69
push eax
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x100]
call fcn.0043f3e0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x6b
call fcn.00403230
push str.secondary_server_address
lea ecx, [ebp - 0x40]
call fcn.00406d20
push 0x4e2a60
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x6c
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x100]
call fcn.0043f3e0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x6e
call fcn.00403230
cmp dword [ebp - 0x90], 0
je 0x422472
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x70]
call fcn.00403e50
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x70]
push eax
push ecx
lea ecx, [ebp - 0x124]
call fcn.00422cc0
push fcn.00403230
push 1
push 0x18
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x71
push eax
call fcn.0046453c
cmp dword [ebp - 0x48], 0
je 0x422455
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x124]
call fcn.004233c0
mov ecx, dword [edi + 0xdc]
lea eax, [ebp - 0x124]
push eax
call fcn.0040a8c0
lea ecx, [ebp - 0x124]
call fcn.0040a350
lea ecx, [ebp - 0x58]
call fcn.00403230
lea ecx, [ebp - 0xa0]
call fcn.00403230
jmp 0x4224a0
mov eax, dword [0x5030bc]
push dword [ebp - 0x120]
push str.unable_to_open_x4agent_configuration_key_n
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
add esp, 0xc
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x50
call fcn.0043f0a0
mov ecx, dword [edi + 0xdc]
push 0
call fcn.0040a660
mov eax, dword [0x5030bc]
push str.15:14:22
push str.Aug__6_2021
push str.ft_agent_build__s___s_started_n
mov edx, dword [eax]
push eax
call dword [edx + 0x18]
mov ecx, dword [ebp - 0x134]
add esp, 0x10
push 0xffffffffffffffff
call fcn.00437b60
lea ecx, [ebp - 0x108]
call fcn.00403c50
lea ecx, [ebp - 0x110]
call fcn.00403c50
lea ecx, [ebp - 0xe8]
call fcn.00403230
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00464228
mov esp, ebp
pop ebp
ret