Function at 0x4bff9f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x44
mov eax, 0x5d16d0
call fcn.005234b0
mov esi, ecx
lea eax, [esi + 0x510]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00411742
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp dword [esi + 0x10], ebx
jne 0x4bffde
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x28], bl
je 0x4bffd7
mov ecx, dword [ebp - 0x2c]
call fcn.0040df8b
xor al, al
jmp 0x4c068f
push dword [0x721f28]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10], esp
push 0x721d38
call fcn.0041186e
mov byte [ebp - 4], 1
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce565
mov eax, dword [0x721f28]
shr eax, 3
test al, 1
je 0x4c04d0
lea ecx, [esi + 0x4e8]
call fcn.004acb45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004120e9
mov byte [ebp - 4], 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.Version
call fcn.004120e9
mov byte [ebp - 4], 3
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce7d2
push dword [esi + 0x360]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.ClientID
call fcn.004120e9
mov byte [ebp - 4], 4
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce898
push dword [esi + 0x370]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.ClientIC
call fcn.004120e9
mov byte [ebp - 4], 5
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce898
push dword [esi + 0x140]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.LicenseType
call fcn.004120e9
mov byte [ebp - 4], 6
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce898
movzx eax, byte [esi + 0x39d]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.GatewayAllowed
call fcn.004120e9
mov byte [ebp - 4], 7
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce77c
movzx eax, byte [esi + 0x478]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.ListenHttp
call fcn.004120e9
mov byte [ebp - 4], 8
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce77c
movzx eax, byte [esi + 0x479]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.useUDP
call fcn.004120e9
mov byte [ebp - 4], 9
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce77c
lea eax, [ebp - 0x50]
push eax
mov ecx, esi
call fcn.0043b695
mov byte [ebp - 4], 0xa
mov ecx, eax
call fcn.004acb45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004120e9
mov byte [ebp - 4], 0xb
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Gatewayname
call fcn.004120e9
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xa
mov ecx, esi
call fcn.004ce7d2
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x50]
call fcn.004ac66a
lea ecx, [esi + 0x454]
call fcn.004acb45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004120e9
mov byte [ebp - 4], 0xd
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.CustomRouter
call fcn.004120e9
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce7d2
lea ecx, [esi + 0xe8]
call fcn.004acb45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004120e9
mov byte [ebp - 4], 0xf
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.LastRouterPerformance
call fcn.004120e9
mov byte [ebp - 4], 0x10
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce7d2
lea ecx, [esi + 0x10c]
call fcn.004acb45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004120e9
mov byte [ebp - 4], 0x11
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.LastKeepalivePerformance
call fcn.004120e9
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce7d2
push dword [esi + 0x50c]
lea eax, [ebp - 0x50]
push eax
call fcn.004ade25
pop ecx
pop ecx
mov byte [ebp - 4], 0x13
mov ecx, eax
call fcn.004acb45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004120e9
mov byte [ebp - 4], 0x14
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.VpnIP
call fcn.004120e9
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x13
mov ecx, esi
call fcn.004ce7d2
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x50]
call fcn.004ac66a
movzx eax, byte [esi + 0x35e]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.MinimizeToTray
call fcn.004120e9
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce77c
push dword [esi + 0x98]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.TotalSessions
call fcn.004120e9
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce898
push dword [esi + 0x9c]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.TotalTrafficKilobytes
call fcn.004120e9
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce898
mov edi, 0x3e8
push edi
mov dword [ebp - 0x10], edi
call fcn.004fed14
pop ecx
push eax
lea ecx, [ebp - 0x24]
call fcn.00401899
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x24]
push ebx
call fcn.004e4b4f
add esp, 0xc
test al, al
je 0x4c038f
push ebx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x24]
lea eax, [ebp - 0x18]
push eax
call fcn.004e6474
add esp, 0x10
mov byte [ebp - 4], 0x1a
push dword [ebp - 0x10]
push dword [ebp - 0x18]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x674bd4
call fcn.004120e9
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0x1a
mov ecx, esi
call fcn.004ce8e2
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x18]
call fcn.00448c99
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x24]
mov dword [ebp - 0x10], edi
push 1
call fcn.004e4b4f
add esp, 0xc
test al, al
je 0x4c03f2
push ebx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x24]
lea eax, [ebp - 0x18]
push eax
call fcn.004e6474
add esp, 0x10
mov byte [ebp - 4], 0x1c
push dword [ebp - 0x10]
push dword [ebp - 0x18]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x674bcc
call fcn.004120e9
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 0x1c
mov ecx, esi
call fcn.004ce8e2
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x18]
call fcn.00448c99
lea ecx, [esi + 0x140]
call fcn.004c9179
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.CUse
call fcn.004120e9
mov byte [ebp - 4], 0x1e
mov byte [ebp - 4], 0x19
mov ecx, esi
call fcn.004ce77c
mov ecx, esi
call fcn.004cf77b
lea ecx, [esi + 0x3c8]
call fcn.004acb45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004120e9
mov byte [ebp - 4], 0x1f
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.ServerPasswordAES
call fcn.004120e9
mov byte [ebp - 4], 0x20
mov byte [ebp - 4], 0x19
mov ecx, esi
call fcn.004e8987
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x1c], esp
push 0x72168c
push eax
mov ecx, esi
call fcn.004bb1f5
mov byte [ebp - 4], 0x21
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.SecurityPasswordAES
call fcn.004120e9
mov byte [ebp - 4], 0x22
mov byte [ebp - 4], 0x19
mov ecx, esi
call fcn.004e8987
push dword [esi + 0x4e0]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.LimitForGetInsteadPost
call fcn.004120e9
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x19
mov ecx, esi
call fcn.004ce898
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x24]
call fcn.00448c99
mov eax, dword [esi + 0x10]
shr eax, 1
test al, 1
je 0x4c0675
movzx eax, byte [esi + 0x18]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x674a68
call fcn.004120e9
mov byte [ebp - 4], 0x24
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce77c
lea ecx, [esi + 0x310]
call fcn.004acb45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004120e9
mov byte [ebp - 4], 0x25
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.ProxyUsername
call fcn.004120e9
mov byte [ebp - 4], 0x26
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce7d2
movsx eax, word [esi + 0x2a0]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.Proxy_Type
call fcn.004120e9
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce898
lea ecx, [esi + 0x2a4]
call fcn.004acb45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004120e9
mov byte [ebp - 4], 0x28
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Proxy_IP
call fcn.004120e9
mov byte [ebp - 4], 0x29
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce7d2
lea ecx, [esi + 0x2c8]
call fcn.004acb45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004120e9
mov byte [ebp - 4], 0x2a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Proxy_Exceptions
call fcn.004120e9
mov byte [ebp - 4], 0x2b
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce7d2
lea ecx, [esi + 0x2ec]
call fcn.004acb45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004120e9
mov byte [ebp - 4], 0x2c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Proxy_IPIE
call fcn.004120e9
mov byte [ebp - 4], 0x2d
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004ce7d2
lea ecx, [esi + 0x334]
call fcn.004acb45
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.004120e9
mov byte [ebp - 4], 0x2e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.ProxyPasswordAES
call fcn.004120e9
mov byte [ebp - 4], 0x2f
mov byte [ebp - 4], bl
mov ecx, esi
call fcn.004e8987
cmp word [esi + 0x2a0], 1
jne 0x4c0675
call fcn.004c69cb
test al, al
jne 0x4c0675
mov ecx, esi
call fcn.004bccad
mov ecx, esi
call fcn.004ce3a3
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x28], bl
je 0x4c068d
mov ecx, dword [ebp - 0x2c]
call fcn.0040df8b
mov al, 1
call fcn.00523588
ret 4