Function at 0x4178d2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xa8
mov eax, 0x4f0cfd
call fcn.004ec62d
mov ebx, ecx
mov dword [ebp - 0xb4], ebx
mov edi, dword [ebp + 8]
cmp byte [edi + 8], 7
je 0x4178f9
xor al, al
jmp 0x417d6c
mov esi, str.monitoring
mov ecx, edi
push esi
call fcn.004af760
test al, al
je 0x4178f2
push esi
mov ecx, edi
call fcn.004af5f0
mov esi, eax
mov ecx, esi
call fcn.004afa70
test al, al
je 0x4178f2
mov ecx, esi
call fcn.004ae470
push str.is_monitoring
lea ecx, [ebp - 0x40]
mov esi, eax
call fcn.00408ef0
and dword [ebp - 4], 0
lea ecx, [ebp - 0x58]
push str.zipext_monitoring_config
call fcn.00408ef0
push esi
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 1
push eax
add ebx, 4
lea eax, [ebp - 0x58]
push eax
mov ecx, ebx
mov dword [ebp - 0xb0], ebx
call fcn.0042f990
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 2
call fcn.00409610
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 6
call fcn.00409610
xor eax, eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
test esi, esi
jg 0x417a68
push 0x513c80
call fcn.00408ef0
push 0x51a3ac
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xc
call fcn.00408ef0
mov esi, str.zipext_monitoring_config
mov byte [ebp - 4], 0xd
push esi
lea ecx, [ebp - 0x40]
call fcn.00408ef0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x58]
mov ecx, ebx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0042fb60
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xf
call fcn.00409610
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x13
call fcn.00409610
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x17
call fcn.00409610
push 0x51a3f4
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xb
call fcn.00408ef0
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1b
call fcn.00408ef0
push 0xffffffffffffffff
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.0042f990
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
call fcn.00409610
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x21
call fcn.00409610
jmp 0x417d2f
or dword [ebp - 0xac], 0xffffffff
push str.duration
call fcn.00409090
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 0x25
push eax
lea edx, [ebp - 0x28]
mov ecx, edi
call fcn.0041ede1
pop ecx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
mov bl, al
call fcn.00409040
test bl, bl
je 0x417afb
push 0x51a3f4
lea ecx, [ebp - 0x40]
call fcn.00408ef0
mov esi, str.zipext_monitoring_config
mov byte [ebp - 4], 0x26
push esi
lea ecx, [ebp - 0x28]
call fcn.00408ef0
mov ecx, dword [ebp - 0xb0]
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x27
push dword [ebp - 0xac]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0042f990
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x28
call fcn.00409610
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x2c
call fcn.00409610
mov byte [ebp - 4], 0xb
jmp 0x417b00
mov esi, str.zipext_monitoring_config
and dword [ebp - 0xac], 0
lea ecx, [ebp - 0x28]
push 0x51a504
call fcn.00409090
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 0x30
push eax
lea edx, [ebp - 0x28]
mov ecx, edi
call fcn.0041ee51
pop ecx
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
mov bl, al
call fcn.00409040
test bl, bl
je 0x417b93
push str.quitProtectDays
lea ecx, [ebp - 0x40]
call fcn.00408ef0
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x31
call fcn.00408ef0
mov ebx, dword [ebp - 0xb0]
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x32
mov ecx, ebx
push dword [ebp - 0xac]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0042f990
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x33
call fcn.00409610
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x37
call fcn.00409610
mov byte [ebp - 4], 0xb
jmp 0x417b99
mov ebx, dword [ebp - 0xb0]
push str.formatSet
mov ecx, edi
call fcn.004af760
test al, al
je 0x417c66
lea ecx, [ebp - 0x78]
call fcn.004a7af0
push 0x51a3ac
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x3b
call fcn.00408ef0
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x3c
call fcn.00408ef0
push str.formatSet
mov ecx, edi
mov byte [ebp - 4], 0x3d
call fcn.004af5f0
push eax
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x78]
call fcn.004a7b60
mov edx, eax
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x58]
call fcn.00433460
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x3f
push eax
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.0042fb60
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x40
call fcn.00409610
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x3d
call fcn.00409040
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x44
call fcn.00409610
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x48
call fcn.00409610
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x78], vtable.RCJson::FastWriter.0
call fcn.00409040
mov dword [ebp - 0x78], vtable.RCJson::Writer.0
mov byte [ebp - 4], 0xb
push 0x51a540
mov ecx, edi
call fcn.004af760
test al, al
je 0x417d33
lea ecx, [ebp - 0x78]
call fcn.004a7af0
push str.alertInfo
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x4d
call fcn.00408ef0
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x4e
call fcn.00408ef0
push 0x51a540
mov ecx, edi
mov byte [ebp - 4], 0x4f
call fcn.004af5f0
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x78]
call fcn.004a7b60
mov edx, eax
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0xa8]
call fcn.00433460
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x51
push eax
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.0042fb60
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x52
call fcn.00409610
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x4f
call fcn.00409040
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x56
call fcn.00409610
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x5a
call fcn.00409610
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x78], vtable.RCJson::FastWriter.0
call fcn.00409040
mov dword [ebp - 0x78], vtable.RCJson::Writer.0
mov byte [ebp - 4], 0xb
mov ecx, ebx
call fcn.0042fec0
test al, al
je 0x417d52
mov ecx, dword [ebp - 0xb4]
call fcn.004181fa
test al, al
je 0x417d52
xor ebx, ebx
inc ebx
jmp 0x417d54
xor bl, bl
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0x5f
call fcn.00409610
or dword [ebp - 4], 0xffffffff
mov al, bl
call fcn.004ec5e8
ret 4