Function at 0x4d9e80
Capabilities:
Contain obfuscated stackstrings
Get common file path
Get disk information
Get geographical location
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x530cc7
mov eax, dword fs:[0]
push eax
sub esp, 0xb3c
mov eax, dword [0x57a734]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x8a8], edi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x8a4], esi
mov dword [ebp - 0x6b4], 0
mov dword [ebp - 0x6b0], 0xf
mov byte [ebp - 0x6c4], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x624], 0
mov dword [ebp - 0x620], 0xf
mov byte [ebp - 0x634], 0
mov dword [ebp - 0x66c], 0
mov dword [ebp - 0x668], 0xf
mov byte [ebp - 0x67c], 0
lea ecx, [ebp - 0x868]
mov byte [ebp - 4], 2
call fcn.004e1d60
lea ecx, [ebp - 0x77c]
mov byte [ebp - 4], 3
call fcn.004e09c0
push 0
lea ecx, [ebp - 0x8a0]
mov byte [ebp - 4], 4
call fcn.00438f00
push 0
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 5
call fcn.00438f00
lea ecx, [ebp - 0x7f0]
mov byte [ebp - 4], 6
call fcn.0043c680
mov dword [ebp - 0x654], 0
mov dword [ebp - 0x650], 0xf
mov byte [ebp - 0x664], 0
sub esp, 0x18
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x870], esp
push 0x14
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.SoftDataReport_begin
mov byte [ecx], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 9
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WebLog::SoftDataReport
mov byte [ecx], 0
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 8
call fcn.004d8ce0
mov ecx, esi
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x5a8], 0xf
mov byte [ebp - 0x5bc], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4da000
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x5bc]
call fcn.004df530
push 0xc
push str.Arg_jsonStr:
lea ecx, [ebp - 0x5d4]
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x5c4], 0
mov dword [ebp - 0x5c0], 0xf
mov byte [ebp - 0x5d4], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0xb
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5bc]
push ecx
lea ecx, [ebp - 0x5d4]
push ecx
push eax
call fcn.004d1730
sub esp, 0xc
mov byte [ebp - 4], 0xc
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WebLog::SoftDataReport
mov byte [ecx], 0
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0xb
call fcn.004d8ce0
mov edx, dword [ebp - 0x5c0]
mov byte [ebp - 4], 0xa
cmp edx, 0x10
jb 0x4da0d9
mov ecx, dword [ebp - 0x5d4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4da0cf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4dd0eb
push edx
push ecx
call fcn.004e3aa8
add esp, 8
mov edx, dword [ebp - 0x5a8]
mov dword [ebp - 0x5c4], 0
mov dword [ebp - 0x5c0], 0xf
mov byte [ebp - 0x5d4], 0
mov byte [ebp - 4], 8
cmp edx, 0x10
jb 0x4da132
mov ecx, dword [ebp - 0x5bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4da128
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4dd0f0
push edx
push ecx
call fcn.004e3aa8
add esp, 8
cmp dword [0x57a6c4], 0
jne 0x4da251
push 0x40
lea eax, [ebp - 0x50]
push 0
push eax
call fcn.004fce20
add esp, 0xc
lea eax, [ebp - 0x5fc]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
je 0x4da187
push 0
mov dword [ebp - 0x5c4], 0
mov dword [ebp - 0x5c0], 0xf
mov byte [ebp - 0x5d4], 0
push 0x539527
jmp 0x4da21e
movzx eax, byte [ebp - 0x5ed]
push eax
movzx eax, byte [ebp - 0x5ee]
push eax
movzx eax, byte [ebp - 0x5ef]
push eax
movzx eax, byte [ebp - 0x5f0]
push eax
movzx eax, byte [ebp - 0x5f1]
push eax
movzx eax, byte [ebp - 0x5f2]
push eax
movzx eax, byte [ebp - 0x5f3]
push eax
movzx eax, byte [ebp - 0x5f4]
push eax
movzx eax, word [ebp - 0x5f6]
push eax
movzx eax, word [ebp - 0x5f8]
push eax
push dword [ebp - 0x5fc]
lea eax, [ebp - 0x50]
push str._08X_04X_04x_02X_02X_02X_02X_02X_02X_02X_02X
push eax
call fcn.00402b87
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x5c4], 0
add esp, 0x34
mov dword [ebp - 0x5c0], 0xf
mov byte [ebp - 0x5d4], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4da210
sub ecx, edx
lea eax, [ebp - 0x50]
push ecx
push eax
lea ecx, [ebp - 0x5d4]
call fcn.004df530
mov ecx, 0x57a6b4
call fcn.004df170
movups xmm0, xmmword [ebp - 0x5d4]
movups xmmword [0x57a6b4], xmm0
movq xmm0, qword [ebp - 0x5c4]
movq qword [0x57a6c4], xmm0
push 0x57a6b4
lea ecx, [ebp - 0x5a4]
call fcn.00409c55
mov esi, eax
push 0xb
push str.session_id:
lea ecx, [ebp - 0x5d4]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x5c4], 0
mov dword [ebp - 0x5c0], 0xf
mov byte [ebp - 0x5d4], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0xe
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5d4]
push esi
push ecx
push eax
call fcn.004d1730
sub esp, 0xc
mov byte [ebp - 4], 0xf
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WebLog::SoftDataReport
mov byte [ecx], 0
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0xe
call fcn.004d8ce0
mov edx, dword [ebp - 0x5c0]
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x4da320
mov ecx, dword [ebp - 0x5d4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4da316
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4dd0f5
push edx
push ecx
call fcn.004e3aa8
add esp, 8
mov edx, dword [ebp - 0x590]
mov dword [ebp - 0x5c4], 0
mov dword [ebp - 0x5c0], 0xf
mov byte [ebp - 0x5d4], 0
mov byte [ebp - 4], 8
cmp edx, 0x10
jb 0x4da379
mov ecx, dword [ebp - 0x5a4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4da36f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4dd0fa
push edx
push ecx
call fcn.004e3aa8
add esp, 8
push 3
push 0x54b35c
lea ecx, [ebp - 0x6ac]
mov dword [ebp - 0x69c], 0
mov dword [ebp - 0x698], 0xf
mov byte [ebp - 0x6ac], 0
call fcn.004df530
push 0x27
push str.https:__analytics.afirstsoft.cn_collect
lea ecx, [ebp - 0x61c]
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x60c], 0
mov dword [ebp - 0x608], 0xf
mov byte [ebp - 0x61c], 0
call fcn.004df530
lea eax, [edi + 0x1f0]
mov byte [ebp - 4], 0x11
push str._test
push eax
lea eax, [ebp - 0x5a4]
push eax
call fcn.004d1a40
add esp, 0xc
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x12
jb 0x4da402
mov eax, dword [eax]
push 1
push 0x40
push 1
push eax
lea ecx, [ebp - 0xa88]
call fcn.004d2190
mov edx, dword [ebp - 0x590]
mov byte [ebp - 4], 0x14
cmp edx, 8
jb 0x4da458
mov ecx, dword [ebp - 0x5a4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4da44e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4dd0ff
push edx
push ecx
call fcn.004e3aa8
add esp, 8
xor eax, eax
mov dword [ebp - 0x594], 0
mov word [ebp - 0x5a4], ax
mov eax, dword [ebp - 0xa88]
mov dword [ebp - 0x590], 7
mov eax, dword [eax + 4]
cmp dword [ebp + eax - 0xa7c], 0
jne 0x4da49a
push 0x2e
push str.https:__analytics_test.afirstsoft.cn_collector
lea ecx, [ebp - 0x61c]
call fcn.004df530
lea ecx, [ebp - 0xa88]
call fcn.00409c7b
push 4
push str.url:
lea ecx, [ebp - 0x5bc]
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x5a8], 0xf
mov byte [ebp - 0x5bc], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov esi, esp
mov dword [ebp - 0x86c], esp
mov dword [ebp - 0x870], esi
lea eax, [ebp - 0x61c]
cmp dword [ebp - 0x608], 0x10
lea ecx, [ebp - 0x5bc]
push dword [ebp - 0x60c]
cmovae eax, dword [ebp - 0x61c]
push eax
call fcn.004df250
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
sub esp, 0x18
mov byte [ebp - 4], 0x16
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WebLog::SoftDataReport
mov byte [ecx], 0
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0x15
call fcn.004d8ce0
mov edx, dword [ebp - 0x5a8]
mov byte [ebp - 4], 0x14
cmp edx, 0x10
jb 0x4da5ab
mov ecx, dword [ebp - 0x5bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4da5a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4dd104
push edx
push ecx
call fcn.004e3aa8
add esp, 8
mov edx, dword [ebp - 0x8a4]
mov ecx, edx
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x5a8], 0xf
mov byte [ebp - 0x5bc], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4da5d1
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x5bc]
call fcn.004df530
push 1
lea eax, [ebp - 0x8a0]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x5bc]
push eax
lea ecx, [ebp - 0x7f0]
call fcn.0043c7b0
mov edx, dword [ebp - 0x5a8]
mov byte [ebp - 4], 0x14
cmp edx, 0x10
jb 0x4da644
mov ecx, dword [ebp - 0x5bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4da63a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4dd109
push edx
push ecx
call fcn.004e3aa8
add esp, 8
lea esi, [edi + 0x208]
push 0x539527
push esi
mov dword [ebp - 0x870], esi
call fcn.004d16a0
add esp, 8
test al, al
je 0x4da8c6
push 0x104
lea eax, [ebp - 0x58c]
push eax
call dword [sym.imp.KERNEL32.DLL_GetWindowsDirectoryW]
test eax, eax
je 0x4da7bd
mov ax, word [ebp - 0x58c]
mov word [ebp - 0x5f4], ax
xor eax, eax
mov word [ebp - 0x5ee], ax
lea eax, [ebp - 0x384]
push 0x104
push eax
lea eax, [ebp - 0x5f4]
mov dword [ebp - 0x5f2], 0x5c003a
push eax
call dword [sym.imp.KERNEL32.DLL_GetVolumeNameForVolumeMountPointW]
test eax, eax
je 0x4da7bd
lea eax, [ebp - 0x384]
push 0x7b
push eax
call fcn.004fe97d
mov dword [ebp - 0x8a4], eax
lea eax, [ebp - 0x384]
push 0x7d
push eax
call fcn.004fe97d
mov ecx, dword [ebp - 0x8a4]
add esp, 0x10
test ecx, ecx
je 0x4da7bd
test eax, eax
je 0x4da7bd
cmp eax, ecx
jbe 0x4da7bd
xor edx, edx
push ecx
lea ecx, [ebp - 0x5bc]
mov word [eax], dx
call fcn.004d2480
cmp dword [ebp - 0x5a8], 8
lea edx, [ebp - 0x5bc]
mov eax, dword [ebp - 0x5ac]
lea esi, [ebp - 0x5bc]
cmovae edx, dword [ebp - 0x5bc]
lea ecx, [ebp - 0x5d4]
cmovae esi, dword [ebp - 0x5bc]
add esi, 2
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x5c4], 0
lea edi, [edx + eax*2]
mov dword [ebp - 0x5c0], 0xf
mov eax, edi
mov byte [ebp - 0x5d4], 0
sub eax, esi
sar eax, 1
push eax
call fcn.00412c85
push dword [ebp - 0x86c]
lea ecx, [ebp - 0x5d4]
push edi
push esi
call fcn.004d1b00
lea eax, [ebp - 0x5d4]
push eax
lea ecx, [ebp - 0x5ec]
call fcn.00409bb7
lea ecx, [ebp - 0x5d4]
call fcn.00409b5c
lea ecx, [ebp - 0x5bc]
call fcn.00402143
mov edi, dword [ebp - 0x8a8]
mov esi, dword [ebp - 0x870]
jmp 0x4da7ea
push 0
push 0x539527
lea ecx, [ebp - 0x5ec]
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5d8], 0xf
mov byte [ebp - 0x5ec], 0
call fcn.004df530
cmp dword [ebp - 0x5dc], 0
mov byte [ebp - 4], 0x19
je 0x4da874
sub esp, 0x18
lea eax, [ebp - 0x5ec]
mov ecx, esp
push eax
call fcn.00409c55
lea eax, [ebp - 0x5d4]
push eax
call fcn.004e2ab0
add esp, 0x1c
cmp dword [ebp - 0x5c0], 0x10
lea eax, [ebp - 0x5d4]
push dword [ebp - 0x5c4]
cmovae eax, dword [ebp - 0x5d4]
lea ecx, [ebp - 0x634]
push eax
mov byte [ebp - 4], 0x1a
call fcn.004df530
lea eax, [ebp - 0x5d4]
cmp esi, eax
je 0x4da867
cmp dword [ebp - 0x5c0], 0x10
mov ecx, esi
push dword [ebp - 0x5c4]
cmovae eax, dword [ebp - 0x5d4]
push eax
call fcn.004df530
lea ecx, [ebp - 0x5d4]
call fcn.00409b5c
jmp 0x4da886
push 0
push 0x539527
lea ecx, [ebp - 0x634]
call fcn.004df530
mov edx, dword [ebp - 0x5d8]
mov byte [ebp - 4], 0x14
cmp edx, 0x10
jb 0x4da8e9
mov ecx, dword [ebp - 0x5ec]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4da8ba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4dd10e
push edx
push ecx
call fcn.004e3aa8
add esp, 8
jmp 0x4da8e9
lea eax, [ebp - 0x634]
cmp eax, esi
je 0x4da8e9
cmp dword [esi + 0x14], 0x10
mov eax, esi
jb 0x4da8da
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x634]
push eax
call fcn.004df530
push 0xc
push str.mac_address:
lea ecx, [ebp - 0x5bc]
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x5a8], 0xf
mov byte [ebp - 0x5bc], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0x1b
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x6c4]
push ecx
lea ecx, [ebp - 0x5bc]
push ecx
push eax
call fcn.00412c5e
sub esp, 0xc
mov byte [ebp - 4], 0x1c
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WebLog::SoftDataReport
mov byte [ecx], 0
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0x1b
call fcn.004d8ce0
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 4], 0x14
call fcn.00409b5c
push 4
push str.uid:
lea ecx, [ebp - 0x5bc]
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x5a8], 0xf
mov byte [ebp - 0x5bc], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0x1d
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x634]
push ecx
lea ecx, [ebp - 0x5bc]
push ecx
push eax
call fcn.00412c5e
sub esp, 0xc
mov byte [ebp - 4], 0x1e
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WebLog::SoftDataReport
mov byte [ecx], 0
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0x1d
call fcn.004d8ce0
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 4], 0x14
call fcn.00409b5c
lea eax, [ebp - 0x5fc]
push eax
call dword [sym.imp.KERNEL32.DLL_GetLocalTime]
movzx eax, word [ebp - 0x5f0]
mov dword [ebp - 0x34], eax
movzx eax, word [ebp - 0x5f2]
mov dword [ebp - 0x30], eax
movzx eax, word [ebp - 0x5f4]
mov dword [ebp - 0x2c], eax
movzx eax, word [ebp - 0x5f6]
mov dword [ebp - 0x28], eax
movzx eax, word [ebp - 0x5fa]
dec eax
mov dword [ebp - 0x24], eax
xorps xmm0, xmm0
movzx eax, word [ebp - 0x5fc]
sub eax, 0x76c
movq qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x14], 0
call fcn.00514868
add esp, 4
push 0
push 0x3e8
push edx
push eax
call fcn.004e4280
mov ecx, eax
mov esi, edx
movzx eax, word [ebp - 0x5ee]
cdq
add ecx, eax
lea eax, [ebp - 0x17c]
push 0xa
push eax
adc esi, edx
mov dword [ebp - 0x8a4], ecx
push ecx
mov dword [ebp - 0x8a8], esi
call fcn.00518e3b
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x5dc], 0
add esp, 0xc
mov dword [ebp - 0x5d8], 0xf
mov byte [ebp - 0x5ec], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4daad3
sub ecx, edx
lea eax, [ebp - 0x17c]
push ecx
push eax
lea ecx, [ebp - 0x5ec]
call fcn.004df530
push 0xa
push str.timestamp:
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x5a8], 0xf
mov byte [ebp - 0x5bc], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0x20
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5ec]
push ecx
lea ecx, [ebp - 0x5bc]
push ecx
push eax
call fcn.004d1730
sub esp, 0xc
mov byte [ebp - 4], 0x21
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WebLog::SoftDataReport
mov byte [ecx], 0
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0x20
call fcn.004d8ce0
lea ecx, [ebp - 0x5bc]
call fcn.00409b5c
lea ecx, [ebp - 0x5ec]
mov byte [ebp - 4], 0x14
call fcn.00409b5c
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x868]
call fcn.004e25a0
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x28]
call fcn.00409c55
mov esi, eax
push 0xb
push str.os_version:
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x5a8], 0xf
mov byte [ebp - 0x5bc], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0x23
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5bc]
push esi
push ecx
push eax
call fcn.004d1730
sub esp, 0xc
mov byte [ebp - 4], 0x24
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
push str.WebLog::SoftDataReport
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0x23
call fcn.004d8ce0
lea ecx, [ebp - 0x5bc]
call fcn.00409b5c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x14
call fcn.00409b5c
push 3
push 0x54b3fc
lea ecx, [ebp - 0x5bc]
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x5a8], 0xf
mov byte [ebp - 0x5bc], 0
call fcn.004df530
lea eax, [ebp - 0x5bc]
mov byte [ebp - 4], 0x25
push 0x54b400
push eax
call fcn.004d16a0
add esp, 8
test al, al
je 0x4db96a
sub esp, 0x18
lea eax, [ebp - 0x634]
mov ecx, esp
mov dword [ebp - 0x86c], esp
push eax
call fcn.00439170
push 0x54b40c
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x26
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004392f0
push 0
lea ecx, [ebp - 0x5a4]
call fcn.00438fe0
sub esp, 0x18
mov byte [ebp - 4], 0x27
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5a4]
push ecx
push 0x54b410
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b410
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x28
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x27
call fcn.004392f0
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0x25
call fcn.00439220
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x86c], esp
push 0x539527
call fcn.004390a0
push 0x54b414
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x29
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004392f0
push 0x539527
lea ecx, [ebp - 0x5a4]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x2a
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5a4]
push ecx
push 0x54b418
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b418
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x2b
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x2a
call fcn.004392f0
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x5a4]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x2c
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5a4]
push ecx
push 0x54b420
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b420
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x2d
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x2c
call fcn.004392f0
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x5a4]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x2e
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5a4]
push ecx
push str.channel
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.channel
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x2f
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x2e
call fcn.004392f0
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x5a4]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x30
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5a4]
push ecx
push 0x54b430
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
mov byte [ebp - 4], 0x31
push 0x54b430
push str.common
lea ecx, [ebp - 0x888]
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x30
call fcn.004392f0
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0x25
call fcn.00439220
sub esp, 0x18
lea eax, [ebp - 0x6c4]
mov ecx, esp
mov dword [ebp - 0x86c], esp
push eax
call fcn.00439170
push 0x54b438
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x32
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004392f0
sub esp, 0x18
lea eax, [ebp - 0x6ac]
mov ecx, esp
mov dword [ebp - 0x86c], esp
push eax
call fcn.00439170
push 0x54b43c
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x33
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004392f0
sub esp, 0x18
lea eax, [ebp - 0x67c]
mov ecx, esp
mov dword [ebp - 0x86c], esp
push eax
call fcn.00439170
push str.os_version
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x34
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004392f0
push 0x539527
lea ecx, [ebp - 0x5a4]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x35
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5a4]
push ecx
push 0x54b44c
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b44c
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x888]
push str.common
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x35
call fcn.004392f0
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x5a4]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x37
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5a4]
push ecx
push 0x54b454
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b454
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x38
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x37
call fcn.004392f0
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x5a4]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x39
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5a4]
push ecx
push str.county
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.county
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x3a
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x39
call fcn.004392f0
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x5ec]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5ec]
push ecx
push str.city
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
mov byte [ebp - 4], 0x3c
push str.city
push str.common
lea ecx, [ebp - 0x888]
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x3b
call fcn.004392f0
lea ecx, [ebp - 0x5ec]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x5d4]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x3d
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5d4]
push ecx
push 0x54b474
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b474
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x3e
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x3d
call fcn.004392f0
lea ecx, [ebp - 0x5d4]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x604]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x3f
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x604]
push ecx
push 0x54b47c
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b47c
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x40
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x3f
call fcn.004392f0
lea ecx, [ebp - 0x604]
mov byte [ebp - 4], 0x25
call fcn.00439220
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x86c], esp
push 0x57a6b4
call fcn.00439170
push str.session_id
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x41
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004392f0
push 0x539527
lea ecx, [ebp - 0x8f0]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x42
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x8f0]
push ecx
push 0x54b490
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b490
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x43
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x42
call fcn.004392f0
lea ecx, [ebp - 0x8f0]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x8d8]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x44
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x8d8]
push ecx
push 0x54b4a0
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b4a0
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x45
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x44
call fcn.004392f0
lea ecx, [ebp - 0x8d8]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x8c0]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x46
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x8c0]
push ecx
push 0x54b4ac
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b4ac
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x47
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x46
call fcn.004392f0
lea ecx, [ebp - 0x8c0]
mov byte [ebp - 4], 0x25
call fcn.00439220
push str.entry
lea ecx, [ebp - 0x8a0]
call fcn.0043a820
test al, al
je 0x4db4cc
push 0x539527
lea ecx, [ebp - 0x8c0]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x48
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x8c0]
push ecx
push str.entry
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.entry
push str.start
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x49
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x48
call fcn.004392f0
lea ecx, [ebp - 0x8c0]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x8c0]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x4a
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x8c0]
push ecx
push 0x54b4d0
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b4d0
push 0x54b4c8
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x4b
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x4a
call fcn.004392f0
lea ecx, [ebp - 0x8c0]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x8d8]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x4c
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x8d8]
push ecx
push 0x54b4dc
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b4dc
push 0x54b4c8
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x4d
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x4c
call fcn.004392f0
lea ecx, [ebp - 0x8d8]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x8f0]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x4e
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x8f0]
push ecx
push 0x54b4e8
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b4e8
push 0x54b4c8
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x4f
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x4e
call fcn.004392f0
lea ecx, [ebp - 0x8f0]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x5a4]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x50
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5a4]
push ecx
push 0x54b4f8
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b4f8
push 0x54b4c8
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x51
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x50
call fcn.004392f0
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x5ec]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x52
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5ec]
push ecx
push str.page_id
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.page_id
push str.page
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x53
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x52
call fcn.004392f0
lea ecx, [ebp - 0x5ec]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x5d4]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x54
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5d4]
push ecx
push str.during_time
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.during_time
push str.page
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x55
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x54
call fcn.004392f0
lea ecx, [ebp - 0x5d4]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x604]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x56
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x604]
push ecx
push str.last_page_id
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.last_page_id
push str.page
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x57
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x56
call fcn.004392f0
lea ecx, [ebp - 0x604]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x920]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x58
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x920]
push ecx
push str.error_code
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.error_code
push 0x54b534
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x59
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x58
call fcn.004392f0
lea ecx, [ebp - 0x920]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x908]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x5a
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x908]
push ecx
push 0x54b544
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b544
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x888]
push 0x54b534
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x5a
call fcn.004392f0
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x25
call fcn.00439220
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x86c], esp
push dword [ebp - 0x8a8]
push dword [ebp - 0x8a4]
call fcn.00439020
push 0x54b548
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x5c
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004392f0
push 0x539527
lea ecx, [ebp - 0x938]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x5d
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x938]
push ecx
push str.displays
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.displays
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x5e
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x5d
call fcn.004392f0
lea ecx, [ebp - 0x938]
mov byte [ebp - 4], 0x25
call fcn.00439220
jmp 0x4dc99b
lea eax, [ebp - 0x5bc]
push 0x54b3fc
push eax
call fcn.004d16a0
add esp, 8
test al, al
je 0x4dc99b
sub esp, 0x18
lea eax, [ebp - 0x634]
mov ecx, esp
mov dword [ebp - 0x86c], esp
push eax
call fcn.00439170
push 0x54b40c
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x5f
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004392f0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x86c], esp
push 0x57a6b4
call fcn.00439170
push str.session_id
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x60
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004392f0
push 0
lea ecx, [ebp - 0x938]
call fcn.00438fe0
sub esp, 0x18
mov byte [ebp - 4], 0x61
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x938]
push ecx
push 0x54b410
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b410
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x62
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x61
call fcn.004392f0
lea ecx, [ebp - 0x938]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x908]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x63
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x908]
push ecx
push 0x54b418
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b418
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x64
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x63
call fcn.004392f0
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x920]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x65
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x920]
push ecx
push 0x54b420
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b420
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x66
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x65
call fcn.004392f0
lea ecx, [ebp - 0x920]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x8c0]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x67
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x8c0]
push ecx
push str.channel
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.channel
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x68
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x67
call fcn.004392f0
lea ecx, [ebp - 0x8c0]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0
lea ecx, [ebp - 0x8d8]
call fcn.00438fe0
sub esp, 0x18
mov byte [ebp - 4], 0x69
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x8d8]
push ecx
push 0x54b430
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
mov byte [ebp - 4], 0x6a
push 0x54b430
push str.common
lea ecx, [ebp - 0x888]
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x69
call fcn.004392f0
lea ecx, [ebp - 0x8d8]
mov byte [ebp - 4], 0x25
call fcn.00439220
sub esp, 0x18
lea eax, [ebp - 0x6c4]
mov ecx, esp
mov dword [ebp - 0x86c], esp
push eax
call fcn.00439170
push 0x54b438
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x6b
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004392f0
sub esp, 0x18
lea eax, [ebp - 0x6ac]
mov ecx, esp
mov dword [ebp - 0x86c], esp
push eax
call fcn.00439170
push 0x54b43c
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x6c
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004392f0
sub esp, 0x18
lea eax, [ebp - 0x67c]
mov ecx, esp
mov dword [ebp - 0x86c], esp
push eax
call fcn.00439170
push str.os_version
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x6d
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004392f0
push 0x539527
lea ecx, [ebp - 0x8f0]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x6e
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x8f0]
push ecx
push 0x54b44c
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b44c
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x888]
push str.common
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x6e
call fcn.004392f0
lea ecx, [ebp - 0x8f0]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x5a4]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x70
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5a4]
push ecx
push 0x54b454
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b454
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x71
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x70
call fcn.004392f0
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x5ec]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x72
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5ec]
push ecx
push 0x54b474
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b474
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x73
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x72
call fcn.004392f0
lea ecx, [ebp - 0x5ec]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x5d4]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x74
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5d4]
push ecx
push 0x54b47c
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
mov byte [ebp - 4], 0x75
push 0x54b47c
push str.common
lea ecx, [ebp - 0x888]
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x74
call fcn.004392f0
lea ecx, [ebp - 0x5d4]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0
lea ecx, [ebp - 0x604]
call fcn.00438f00
sub esp, 0x18
mov byte [ebp - 4], 0x76
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x604]
push ecx
push str.is_vip
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.is_vip
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x77
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x76
call fcn.004392f0
lea ecx, [ebp - 0x604]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0
lea ecx, [ebp - 0x9b0]
call fcn.00438f00
sub esp, 0x18
mov byte [ebp - 4], 0x78
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x9b0]
push ecx
push str.is_login
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.is_login
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x79
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.004392f0
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0
lea ecx, [ebp - 0x9c8]
call fcn.00438f00
sub esp, 0x18
mov byte [ebp - 4], 0x7a
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x9c8]
push ecx
push str.user_id
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.user_id
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x7b
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x7a
call fcn.004392f0
lea ecx, [ebp - 0x9c8]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0
lea ecx, [ebp - 0x950]
call fcn.00438f00
sub esp, 0x18
mov byte [ebp - 4], 0x7c
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x950]
push ecx
push 0x54b574
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b574
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x7d
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x7c
call fcn.004392f0
lea ecx, [ebp - 0x950]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0
lea ecx, [ebp - 0x968]
call fcn.00438f00
sub esp, 0x18
mov byte [ebp - 4], 0x7e
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x968]
push ecx
push 0x54b584
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b584
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x7f
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x7e
call fcn.004392f0
lea ecx, [ebp - 0x968]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0
lea ecx, [ebp - 0x980]
call fcn.00438f00
sub esp, 0x18
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x980]
mov dword [ebp - 0x86c], esp
mov eax, esp
push ecx
push 0x54b590
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b590
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x81
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x80
call fcn.004392f0
lea ecx, [ebp - 0x980]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x998]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x82
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x998]
push ecx
push 0x54b490
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b490
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x83
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x82
call fcn.004392f0
lea ecx, [ebp - 0x998]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x64c]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x84
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x64c]
push ecx
push 0x54b4a0
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b4a0
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x85
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x84
call fcn.004392f0
lea ecx, [ebp - 0x64c]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x28]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x86
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x28]
push ecx
push 0x54b4ac
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b4ac
push str.common
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x87
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x86
call fcn.004392f0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x25
call fcn.00439220
push str.entry
lea ecx, [ebp - 0x8a0]
call fcn.0043a820
test al, al
je 0x4dc31b
push 0x539527
lea ecx, [ebp - 0x28]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x88
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x28]
push ecx
push str.entry
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.entry
push str.start
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x89
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x88
call fcn.004392f0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0
lea ecx, [ebp - 0x28]
call fcn.00438f00
sub esp, 0x18
mov byte [ebp - 4], 0x8a
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x28]
push ecx
push 0x54b4c8
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b4c8
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x8b
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x8a
call fcn.004392f0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x25
call fcn.00439220
push str.monitor_type
lea ecx, [ebp - 0x8a0]
call fcn.0043a820
test al, al
je 0x4dc960
push 0x539527
lea ecx, [ebp - 0x28]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x8c
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x28]
push ecx
push str.monitor_type
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.monitor_type
push str.monitor
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x8d
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x8c
call fcn.004392f0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x64c]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x8e
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x64c]
push ecx
push str.monitor_guid
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.guid
push str.monitor
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x8f
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x8e
call fcn.004392f0
lea ecx, [ebp - 0x64c]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0
push 0
lea ecx, [ebp - 0x998]
call fcn.00439020
sub esp, 0x18
mov byte [ebp - 4], 0x90
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x998]
push ecx
push str.monitor_start_time
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.start_time
push str.param
push str.monitor
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x91
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x90
call fcn.004392f0
lea ecx, [ebp - 0x998]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0
push 0
lea ecx, [ebp - 0x980]
call fcn.00439020
sub esp, 0x18
mov byte [ebp - 4], 0x92
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x980]
push ecx
push str.monitor_error_time
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.error_time
push str.param
push str.monitor
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x93
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x92
call fcn.004392f0
lea ecx, [ebp - 0x980]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0
lea ecx, [ebp - 0x968]
call fcn.00438fe0
sub esp, 0x18
mov byte [ebp - 4], 0x94
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x968]
push ecx
push str.monitor_line_id
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.line_id
push str.param
push str.monitor
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x95
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x94
call fcn.004392f0
lea ecx, [ebp - 0x968]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x950]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x96
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x950]
push ecx
push str.monitor_error_code
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.error_code
push str.param
push str.monitor
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x97
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x96
call fcn.004392f0
lea ecx, [ebp - 0x950]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x9c8]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x98
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x9c8]
push ecx
push str.monitor_total_memory
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.total_memory
push str.param
push str.monitor
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x99
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x98
call fcn.004392f0
lea ecx, [ebp - 0x9c8]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x9b0]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0x9a
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x9b0]
push ecx
push str.monitor_remain_memory
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.remain_memory
push str.param
push str.monitor
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x9b
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x9a
call fcn.004392f0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x9b0]
call fcn.00439220
push 0
lea ecx, [ebp - 0x938]
call fcn.00438fe0
sub esp, 0x18
mov byte [ebp - 4], 0x9c
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x938]
push ecx
push str.monitor_main_pid
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.parent_pid
push 0x54b68c
push str.param
push str.monitor
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x9d
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x9c
call fcn.004392f0
lea ecx, [ebp - 0x938]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0
lea ecx, [ebp - 0x908]
call fcn.00438fe0
sub esp, 0x18
mov byte [ebp - 4], 0x9e
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x908]
push ecx
push str.monitor_sub_pid
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push 0x54b410
push 0x54b68c
push str.param
push str.monitor
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x9f
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x9e
call fcn.004392f0
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x920]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0xa0
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x920]
push ecx
push str.monitor_ext1
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.ext_others
push 0x54b68c
push str.param
push str.monitor
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0xa1
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0xa0
call fcn.004392f0
lea ecx, [ebp - 0x920]
mov byte [ebp - 4], 0x25
call fcn.00439220
push 0x539527
lea ecx, [ebp - 0x8c0]
call fcn.004390a0
sub esp, 0x18
mov byte [ebp - 4], 0xa2
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x8c0]
push ecx
push str.monitor_user_ext
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0043a7e0
push str.user_ext
push str.param
push str.monitor
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0xa3
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0xa2
call fcn.004392f0
lea ecx, [ebp - 0x8c0]
mov byte [ebp - 4], 0x25
call fcn.00439220
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x86c], esp
push dword [ebp - 0x8a8]
push dword [ebp - 0x8a4]
call fcn.00439020
push 0x54b548
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0xa4
call fcn.0043a760
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004392f0
push str.proxy.txt
lea eax, [edi + 0x1f0]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004d1a40
add esp, 0xc
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0xa5
jb 0x4dc9bf
mov eax, dword [eax]
push 1
push 0x40
push 1
push eax
lea ecx, [ebp - 0xb48]
call fcn.004d2190
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa7
call fcn.00402143
lea eax, [ebp - 0x664]
push eax
lea eax, [ebp - 0xb48]
push eax
call fcn.004d1470
add esp, 8
lea ecx, [ebp - 0xb48]
call fcn.00409c7b
cmp dword [ebp - 0x654], 0
je 0x4dcad6
push 1
sub esp, 0x18
lea eax, [ebp - 0x664]
mov ecx, esp
push eax
call fcn.00409c55
lea ecx, [ebp - 0x77c]
call fcn.004e1ae0
lea eax, [ebp - 0x664]
push eax
lea ecx, [ebp - 0x64c]
call fcn.00409c55
mov esi, eax
push 0xa
push str.set_proxy:
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0xa8
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 0xf
mov byte [ebp - 0x5a4], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0xa9
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5a4]
push esi
push ecx
push eax
call fcn.004d1730
sub esp, 0xc
mov byte [ebp - 4], 0xaa
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WebLog::SoftDataReport
mov byte [ecx], 0
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0xa9
call fcn.004d8ce0
lea ecx, [ebp - 0x5a4]
call fcn.00409b5c
lea ecx, [ebp - 0x64c]
mov byte [ebp - 4], 0xa7
call fcn.00409b5c
lea eax, [ebp - 0x6dc]
push eax
lea ecx, [ebp - 0x888]
call fcn.0043af20
push 0x2c
push str.Content_Type:application_json__charsetutf_8
lea ecx, [ebp - 0x694]
mov byte [ebp - 4], 0xab
mov dword [ebp - 0x684], 0
mov dword [ebp - 0x680], 0xf
mov byte [ebp - 0x694], 0
call fcn.004df530
lea eax, [ebp - 0x6dc]
mov byte [ebp - 4], 0xac
push eax
lea ecx, [ebp - 0x28]
call fcn.00409c55
mov esi, eax
push 0xa
push str.post_data:
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0xad
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 0xf
mov byte [ebp - 0x5a4], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0xae
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5a4]
push esi
push ecx
push eax
call fcn.004d1730
sub esp, 0xc
mov byte [ebp - 4], 0xaf
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WebLog::SoftDataReport
mov byte [ecx], 0
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0xae
call fcn.004d8ce0
lea ecx, [ebp - 0x5a4]
call fcn.00409b5c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xac
call fcn.00409b5c
lea eax, [ebp - 0x694]
push eax
lea ecx, [ebp - 0x64c]
call fcn.00409c55
mov esi, eax
push 0xc
push str.post_header:
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0xb0
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 0xf
mov byte [ebp - 0x5a4], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0xb1
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5a4]
push esi
push ecx
push eax
call fcn.004d1730
sub esp, 0xc
mov byte [ebp - 4], 0xb2
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WebLog::SoftDataReport
mov byte [ecx], 0
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0xb1
call fcn.004d8ce0
lea ecx, [ebp - 0x5a4]
call fcn.00409b5c
lea ecx, [ebp - 0x64c]
mov byte [ebp - 4], 0xac
call fcn.00409b5c
lea eax, [ebp - 0x6dc]
push eax
lea eax, [ebp - 0x694]
push eax
lea eax, [ebp - 0x61c]
push eax
lea ecx, [ebp - 0x77c]
call fcn.004e1350
mov esi, eax
lea eax, [ebp - 0x118]
push 0xa
push eax
push esi
call fcn.00518e3b
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x5dc], 0
add esp, 0xc
mov dword [ebp - 0x5d8], 0xf
mov byte [ebp - 0x5ec], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4dccd0
sub ecx, edx
lea eax, [ebp - 0x118]
push ecx
push eax
lea ecx, [ebp - 0x5ec]
call fcn.004df530
push 0xc
push str.post_result:
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0xb3
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 0xf
mov byte [ebp - 0x5a4], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0xb4
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5ec]
push ecx
lea ecx, [ebp - 0x5a4]
push ecx
push eax
call fcn.004d1730
sub esp, 0xc
mov byte [ebp - 4], 0xb5
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WebLog::SoftDataReport
mov byte [ecx], 0
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0xb4
call fcn.004d8ce0
lea ecx, [ebp - 0x5a4]
call fcn.00409b5c
lea ecx, [ebp - 0x5ec]
mov byte [ebp - 4], 0xac
call fcn.00409b5c
test esi, esi
je 0x4dcded
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x86c], esp
push 0x12
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.SoftDataReport_end
mov byte [ecx], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0xb6
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WebLog::SoftDataReport
mov byte [ecx], 0
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0xac
call fcn.004d8ce0
jmp 0x4dd01c
lea ecx, [ebp - 0x77c]
call fcn.004e1240
push 0xa
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x870], eax
push ecx
push eax
call fcn.00518e3b
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x5dc], 0
add esp, 0xc
mov dword [ebp - 0x5d8], 0xf
mov byte [ebp - 0x5ec], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4dce34
sub ecx, edx
lea eax, [ebp - 0xb4]
push ecx
push eax
lea ecx, [ebp - 0x5ec]
call fcn.004df530
push 0xe
push str.response_code:
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0xb7
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 0xf
mov byte [ebp - 0x5a4], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0xb8
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5ec]
push ecx
lea ecx, [ebp - 0x5a4]
push ecx
push eax
call fcn.004d1730
sub esp, 0xc
mov byte [ebp - 4], 0xb9
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WebLog::SoftDataReport
mov byte [ecx], 0
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0xb8
call fcn.004d8ce0
lea ecx, [ebp - 0x5a4]
call fcn.00409b5c
lea ecx, [ebp - 0x5ec]
mov byte [ebp - 4], 0xac
call fcn.00409b5c
lea eax, [ebp - 0x6f4]
push eax
lea ecx, [ebp - 0x77c]
call fcn.004e12b0
lea eax, [ebp - 0x6f4]
mov byte [ebp - 4], 0xba
push eax
lea ecx, [ebp - 0x28]
call fcn.00409c55
mov esi, eax
push 0x11
push str.response_content:
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0xbb
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 0xf
mov byte [ebp - 0x5a4], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0xbc
mov eax, esp
mov dword [ebp - 0x86c], esp
lea ecx, [ebp - 0x5a4]
push esi
push ecx
push eax
call fcn.004d1730
sub esp, 0xc
mov byte [ebp - 4], 0xbd
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
push 0x16
push str.WebLog::SoftDataReport
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0xbc
call fcn.004d8ce0
lea ecx, [ebp - 0x5a4]
call fcn.00409b5c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xba
call fcn.00409b5c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x86c], esp
push 0x12
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.SoftDataReport_end
mov byte [ecx], 0
call fcn.004df530
sub esp, 0x18
mov byte [ebp - 4], 0xbe
mov ecx, esp
push 0x16
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.WebLog::SoftDataReport
mov byte [ecx], 0
call fcn.004df530
mov ecx, edi
mov byte [ebp - 4], 0xba
call fcn.004d8ce0
mov esi, dword [ebp - 0x870]
lea ecx, [ebp - 0x6f4]
add esi, 0xffffff38
call fcn.00409b5c
lea ecx, [ebp - 0x694]
call fcn.00409b5c
lea ecx, [ebp - 0x6dc]
call fcn.00409b5c
lea ecx, [ebp - 0xb48]
call fcn.0040b526
lea ecx, [ebp - 0x5bc]
call fcn.00409b5c
lea ecx, [ebp - 0xa88]
call fcn.0040b526
lea ecx, [ebp - 0x61c]
call fcn.00409b5c
lea ecx, [ebp - 0x6ac]
call fcn.00409b5c
lea ecx, [ebp - 0x664]
call fcn.00409b5c
lea ecx, [ebp - 0x7f0]
call fcn.004331a3
lea ecx, [ebp - 0x888]
call fcn.00439220
lea ecx, [ebp - 0x8a0]
call fcn.00439220
lea ecx, [ebp - 0x77c]
call fcn.004e0ae0
lea ecx, [ebp - 0x868]
call fcn.004e1e40
lea ecx, [ebp - 0x67c]
call fcn.00409b5c
lea ecx, [ebp - 0x634]
call fcn.00409b5c
lea ecx, [ebp - 0x6c4]
call fcn.00409b5c
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e36f8
mov esp, ebp
pop ebp
ret 4
call fcn.005001e5
call fcn.005001e5
call fcn.005001e5
call fcn.005001e5
call fcn.005001e5
call fcn.005001e5
call fcn.005001e5
call fcn.005001e5
int3