Function at 0x4f8baa
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
sub esp, 0x14
push 0x1d8
mov eax, 0x5dbce6
call fcn.005234e3
xor ebx, ebx
mov dword [ebp], ebx
mov dword [ebp - 4], 1
mov ecx, dword [ebp + 0x48]
call fcn.004dda6c
cmp byte [0x727417], bl
jne 0x4f8c57
cmp dword [ebp + 0x24], ebx
je 0x4f8c57
cmp dword [ebp + 0x28], ebx
je 0x4f8c57
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x10], esp
lea eax, [ebp + 0x54]
push eax
call fcn.004ac698
mov byte [ebp - 4], 2
push ebx
push dword [ebp + 0x50]
push ecx
push ecx
mov dword [ebp + 0xc], esp
mov ecx, esp
call fcn.004288e8
mov byte [ebp - 4], 3
lea eax, [ebp + 4]
push eax
mov byte [ebp - 4], 1
call fcn.004d660d
add esp, 0x38
mov byte [ebp - 4], 4
cmp dword [ebp + 4], ebx
jne 0x4f8c83
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x10], esp
push ebx
push str.CCT.Failed
call fcn.004ac9bc
mov byte [ebp - 4], 5
mov byte [ebp - 4], 4
mov ecx, 0x721f30
call fcn.00430cd8
mov byte [ebp - 4], 1
lea ecx, [ebp + 4]
call fcn.00448c99
mov byte [ebp - 4], bl
lea ecx, [ebp + 0x24]
call fcn.004ac66a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x54]
call fcn.004ac66a
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add ebp, 0x18
leave
ret
push ecx
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
lea eax, [ebp + 4]
push eax
call fcn.0041df35
mov byte [ebp - 4], 6
mov byte [ebp - 4], 4
mov ecx, 0x727378
call fcn.004c5d7e
inc dword [0x721fe4]
cmp dword [ebp + 0x50], 0xa
je 0x4f8efc
movzx esi, word [0x72239c]
lea ecx, [ebp + 0x24]
call fcn.004ad8b3
movzx ecx, si
cmp eax, ecx
je 0x4f8efc
push ebx
mov esi, 0x69dd8c
push esi
lea ecx, [ebp - 0x58]
call fcn.004ac9bc
mov byte [ebp - 4], 7
push ebx
push esi
lea ecx, [ebp - 0xa0]
call fcn.004ac9bc
mov byte [ebp - 4], 8
push ebx
push esi
lea ecx, [ebp - 0x154]
call fcn.004ac9bc
mov byte [ebp - 4], 9
push ebx
push esi
lea ecx, [ebp - 0x130]
call fcn.004ac9bc
mov byte [ebp - 4], 0xa
push ebx
push esi
lea ecx, [ebp - 0x19c]
call fcn.004ac9bc
mov byte [ebp - 4], 0xb
push ebx
push esi
lea ecx, [ebp - 0x1c0]
call fcn.004ac9bc
mov byte [ebp - 4], 0xc
push ebx
push str.___S
lea ecx, [ebp - 0xe8]
call fcn.004ac9bc
mov byte [ebp - 4], 0xd
push ebx
push str.___CT
lea ecx, [ebp - 0x178]
call fcn.004ac9bc
mov byte [ebp - 4], 0xe
push ebx
push 0x6a51d4
lea ecx, [ebp - 0x10c]
call fcn.004ac9bc
mov byte [ebp - 4], 0xf
push ebx
push str.CCT.
lea ecx, [ebp - 0x7c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x10
push ebx
mov eax, dword [ebp + 4]
mov eax, dword [eax + 0x21c]
mov eax, dword [eax + 0x29c]
push ebx
push eax
lea ecx, [ebp - 0x34]
call fcn.004ac6f7
mov esi, eax
mov byte [ebp - 4], 0x11
mov eax, dword [ebp + 4]
mov eax, dword [eax + 0x2c]
push ebx
push eax
lea ecx, [ebp - 0xc4]
call fcn.004ac6f7
mov edi, eax
mov byte [ebp - 4], 0x12
push dword [ebp + 0x50]
lea eax, [ebp - 0x1e4]
push eax
call fcn.004d6913
mov byte [ebp - 4], 0x13
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x10], esp
lea edx, [ebp - 0x58]
push edx
lea edx, [ebp - 0xa0]
push edx
lea edx, [ebp - 0x154]
push edx
lea edx, [ebp - 0x130]
push edx
lea edx, [ebp - 0x19c]
push edx
lea edx, [ebp - 0x1c0]
push edx
push esi
lea edx, [ebp - 0xe8]
push edx
push edi
lea edx, [ebp - 0x178]
push edx
lea edx, [ebp + 0x24]
push edx
lea edx, [ebp - 0x10c]
push edx
push eax
lea eax, [ebp - 0x7c]
push eax
push ecx
call fcn.004add2f
add esp, 0x3c
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x13
mov esi, 0x721f18
mov ecx, esi
call fcn.004112c4
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1e4]
call fcn.004ac66a
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xc4]
call fcn.004ac66a
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x34]
call fcn.004ac66a
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x7c]
call fcn.004ac66a
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x10c]
call fcn.004ac66a
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x178]
call fcn.004ac66a
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xe8]
call fcn.004ac66a
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1c0]
call fcn.004ac66a
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x19c]
call fcn.004ac66a
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x130]
call fcn.004ac66a
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x154]
call fcn.004ac66a
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa0]
call fcn.004ac66a
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x58]
call fcn.004ac66a
jmp 0x4f8f01
mov esi, 0x721f18
mov eax, dword [ebp + 4]
mov dword [eax + 0x248], 2
mov al, byte [ebp + 0x7c]
mov ecx, dword [ebp + 4]
mov byte [ecx + 0x2da], al
cmp dword [ebp + 0x50], 7
jne 0x4f8fdb
lea eax, [ebp - 0x78]
push eax
mov ecx, 0x7220d0
call fcn.004f8b14
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x78], ebx
jne 0x4f8f75
mov byte [ebp + 0x17], bl
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x78]
call fcn.0044762b
mov byte [ebp - 4], 1
lea ecx, [ebp + 4]
call fcn.00448c99
mov byte [ebp - 4], bl
lea ecx, [ebp + 0x24]
call fcn.004ac66a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x54]
call fcn.004ac66a
mov al, byte [ebp + 0x17]
jmp 0x4f8c70
lea eax, [ebp + 4]
push eax
mov ecx, dword [ebp + 0x48]
call fcn.004c503a
cmp byte [ebp + 0x4c], bl
jne 0x4f8f8d
mov eax, dword [ebp + 4]
mov byte [eax + 0x20], 1
mov eax, dword [ebp + 4]
mov byte [eax + 0x238], 1
mov dword [eax + 0x23c], 3
push ecx
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
lea eax, [ebp + 4]
push eax
call fcn.0041df35
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x78]
call fcn.004f8b46
push dword [ebp + 0x4c]
mov ecx, dword [ebp + 4]
push ecx
push 0x4dc180
call fcn.004d6ae1
mov byte [ebp + 0x17], 1
jmp 0x4f8f3e
push str._GATEWAY_
lea ecx, [ebp + 0x24]
call fcn.004acb07
test al, al
je 0x4f9011
push ebx
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.004bdbdf
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp + 0x24]
call fcn.004acaa2
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x34]
call fcn.004ac66a
lea ecx, [ebp + 0x24]
call fcn.004ad8b3
mov dword [ebp + 0xc], eax
cmp eax, 0xffffffff
jne 0x4f9150
mov dword [ebp + 0xc], ebx
mov ecx, esi
call fcn.004bc869
cmp eax, 1
jne 0x4f90a3
mov edi, 0xc8
cmp dword [ebp + 0xc], 0x7d0
jge 0x4f9061
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
add dword [ebp + 0xc], edi
mov ecx, esi
call fcn.004bc869
cmp eax, 1
je 0x4f9039
cmp dword [ebp + 0xc], 0x7d0
jl 0x4f90a3
cmp dword [ebp + 0x50], 0xa
je 0x4f908d
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x10], esp
push ebx
push str.CCT.Pingtimeout
call fcn.004ac9bc
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 4
mov ecx, 0x721f30
call fcn.004cbdaf
mov ecx, esi
call fcn.004bc869
cmp eax, 1
jne 0x4f90a3
mov dword [0x7223a0], 4
mov ecx, esi
call fcn.004bc869
cmp eax, 3
je 0x4f90bb
mov ecx, esi
call fcn.004bc869
cmp eax, 6
jne 0x4f90d0
test byte [0x722394], 2
jne 0x4f90d0
mov dword [ebp + 0xc], 0x1732
jmp 0x4f9150
mov ecx, esi
call fcn.004bc869
cmp eax, 2
jne 0x4f9120
sub esp, 0x24
mov eax, esp
mov dword [ebp + 0x10], esp
push eax
mov ecx, esi
call fcn.0043b695
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0x24]
call fcn.004ad86b
mov byte [ebp - 4], 0x1a
mov dword [ebp], 1
mov dword [ebp - 4], 0x1b
mov ecx, eax
call fcn.0043f82b
cmp al, bl
je 0x4f9120
mov al, 1
mov byte [ebp + 0x17], al
jmp 0x4f9125
mov byte [ebp + 0x17], bl
mov al, bl
mov dword [ebp - 4], 4
test byte [ebp], 1
je 0x4f9141
and dword [ebp], 0xfffffffe
lea ecx, [ebp - 0x34]
call fcn.004ac66a
mov al, byte [ebp + 0x17]
neg al
sbb eax, eax
and eax, 0x16e2
add eax, 0x50
mov dword [ebp + 0xc], eax
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0x24]
call fcn.004ad86b
mov byte [ebp - 4], 0x1c
mov ecx, eax
call fcn.004acb45
push ebx
push eax
lea ecx, [ebp - 0x58]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x58]
push eax
mov ecx, dword [ebp + 4]
add ecx, 0x24c
call fcn.004acaa2
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x58]
call fcn.004ac66a
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x34]
call fcn.004ac66a
mov eax, dword [ebp + 4]
mov edi, dword [ebp + 0xc]
mov dword [eax + 0x270], edi
cmp dword [ebp + 0x78], ebx
jne 0x4f91d9
cmp edi, 0x50
jne 0x4f91d9
cmp byte [0x7222b0], bl
jne 0x4f91d2
cmp dword [ebp + 0x50], 0xd
je 0x4f91d2
cmp dword [ebp + 0x50], 0xa
je 0x4f91d2
test byte [0x722394], 4
je 0x4f91d9
mov dword [ebp + 0x78], 3
cmp dword [ebp + 0x50], 0xa
je 0x4f9291
push ebx
push 0x6a1910
lea ecx, [ebp - 0xa0]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1e
push ebx
push str.CCT.Connect.
lea ecx, [ebp - 0x58]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1f
push ebx
push ebx
push edi
lea ecx, [ebp - 0xc4]
call fcn.004ac6f7
mov edi, eax
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0x24]
call fcn.004ad86b
mov byte [ebp - 4], 0x21
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x10], esp
push edi
lea edx, [ebp - 0xa0]
push edx
push eax
lea eax, [ebp - 0x58]
push eax
push ecx
call fcn.004adcdd
add esp, 0x14
mov byte [ebp - 4], 0x22
mov byte [ebp - 4], 0x21
mov ecx, esi
call fcn.004112c4
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x34]
call fcn.004ac66a
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xc4]
call fcn.004ac66a
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x58]
call fcn.004ac66a
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa0]
call fcn.004ac66a
lea eax, [ebp + 4]
push eax
mov edi, dword [ebp + 0x48]
mov ecx, edi
call fcn.004c503a
mov byte [ebp + 0x10], 1
cmp dword [ebp + 0x50], 0xa
jne 0x4f92ac
mov byte [ebp + 0x10], bl
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0x24]
call fcn.004ad86b
mov byte [ebp - 4], 0x23
mov eax, dword [eax]
mov ecx, dword [ebp + 4]
mov ecx, dword [ecx + 0x21c]
push dword [ebp + 0x10]
push dword [ebp + 0x78]
push ebx
push dword [ebp + 0xc]
push eax
call fcn.004edf73
test eax, eax
setne byte [ebp + 0x17]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x34]
call fcn.004ac66a
cmp byte [ebp + 0x17], bl
je 0x4f93c2
mov byte [ebp - 4], 0x24
cmp dword [ebp + 0x50], 0xa
je 0x4f9327
mov eax, dword [ebp + 4]
push dword [eax + 0x21c]
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x10], esp
push ebx
push str.CCT.ConnectFailed
call fcn.004ac9bc
mov byte [ebp - 4], 0x25
mov byte [ebp - 4], 0x24
mov ecx, esi
call fcn.0041122b
push ebx
mov ecx, dword [ebp + 4]
call fcn.004d59f4
mov dword [ebp - 4], 4
jmp 0x4f937c
cmp dword [ebp + 0xc], 0x1732
jne 0x4f9399
mov ecx, esi
call fcn.004bc869
cmp eax, 6
je 0x4f93b2
mov dword [0x7223a0], ebx
jmp 0x4f93b2
cmp dword [ebp + 0xc], 0x50
jne 0x4f93b2
cmp dword [0x7223a4], 5
jne 0x4f93b2
mov dword [0x7223a4], 3
mov ecx, dword [ebp + 0x48]
call fcn.004dda6c
mov byte [ebp + 0x17], bl
jmp 0x4f8f4a
cmp dword [ebp + 0x50], 0xa
je 0x4f93f3
mov eax, dword [ebp + 4]
push dword [eax + 0x21c]
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x10], esp
push ebx
push str.CCT.Connected
call fcn.004ac9bc
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 4
mov ecx, esi
call fcn.004112c4
cmp byte [ebp + 0x4c], bl
jne 0x4f93ff
mov eax, dword [ebp + 4]
mov byte [eax + 0x20], 1
mov eax, dword [edi]
push dword [ebp + 0x4c]
push eax
push 0x4dc180
mov ecx, dword [ebp + 4]
call fcn.004d6ae1
mov byte [ebp - 4], 1
lea ecx, [ebp + 4]
call fcn.00448c99
mov byte [ebp - 4], bl
lea ecx, [ebp + 0x24]
call fcn.004ac66a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x54]
call fcn.004ac66a
mov al, 1
jmp 0x4f8c70