Function at 0x411da0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x7eae7d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6c
push ebx
push ebp
push esi
xor ebx, ebx
push edi
mov esi, ecx
push ebx
push 0x66
mov dword [esp + 0x20], esi
call fcn.00455da0
mov dword [esi], vtable.CResizableDialog.0
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push ebx
mov dword [esp + 0x88], ebx
call edi
push ebx
push ebx
push 0x83
push eax
call fcn.00569d80
add esp, 0x10
mov dword [esi + 0xa4], eax
push ebx
call edi
push ebx
push ebx
push 0x82
push eax
call fcn.00569d80
add esp, 0x10
lea ecx, [esi + 0xac]
mov dword [esi + 0xa8], eax
call fcn.0063b750
mov eax, dword [0x94c1a8]
mov dword [esi + 0x124], eax
mov ecx, dword [0x94c1a8]
mov dword [esi + 0x128], ecx
lea ecx, [esi + 0x130]
mov byte [esp + 0x84], 3
mov byte [esi + 0x12c], bl
mov byte [esi + 0x12e], bl
mov byte [esi + 0x12f], bl
call fcn.0040a300
lea ecx, [esi + 0x1ab0]
mov byte [esp + 0x84], 4
call fcn.00635ea0
push ebx
push ebx
push ebx
push ebx
lea ecx, [esi + 0x1c0c]
mov byte [esp + 0x94], 5
call fcn.006334b0
lea ebp, [esi + 0x1d44]
mov byte [esp + 0x84], 6
mov ecx, ebp
call fcn.007d3a8e
mov dword [ebp], vtable.CButton.0
lea ebp, [esi + 0x1d80]
mov byte [esp + 0x84], 7
mov ecx, ebp
call fcn.007d3a8e
mov dword [ebp], vtable.CButton.0
push ebx
push esi
push str.Remote_Control_Panel
lea ecx, [esi + 0x1dbc]
mov byte [esp + 0x90], 8
call fcn.005681c0
mov byte [esp + 0x84], 9
push ebx
push 0xffffffffffffffff
lea ecx, [esi + 0x2cd8]
call fcn.005e6216
push ebx
mov byte [esp + 0x88], 0xa
call edi
push ebx
push ebx
push 0x9d
push eax
call fcn.00569d80
add esp, 0x10
mov dword [esi + 0x2ce4], eax
push ebx
call edi
push ebx
push ebx
push 0x9c
push eax
call fcn.00569d80
add esp, 0x10
mov dword [esi + 0x2ce8], eax
push ebx
call edi
push ebx
push ebx
push 0x9a
push eax
call fcn.00569d80
add esp, 0x10
mov dword [esi + 0x2cec], eax
push ebx
call edi
push ebx
push ebx
push 0x9b
push eax
call fcn.00569d80
add esp, 0x10
mov dword [esi + 0x2cf0], eax
push ebx
call edi
push ebx
push ebx
push 0xa1
push eax
call fcn.00569d80
add esp, 0x10
mov dword [esi + 0x2cf4], eax
push ebx
call edi
push ebx
push ebx
push 0xa0
push eax
call fcn.00569d80
add esp, 0x10
mov dword [esi + 0x2cf8], eax
push ebx
call edi
push ebx
push ebx
push 0x9e
push eax
call fcn.00569d80
add esp, 0x10
mov dword [esi + 0x2cfc], eax
push ebx
call edi
push ebx
push ebx
push 0x9f
push eax
call fcn.00569d80
mov dword [esi + 0x2d00], eax
mov eax, vtable.CMenu.0
add esp, 0x10
mov dword [esi + 0x2d04], eax
mov dword [esi + 0x2d08], ebx
mov dword [esi + 0x2d0c], eax
mov dword [esi + 0x2d10], ebx
mov dword [esi + 0x2d14], eax
mov dword [esi + 0x2d18], ebx
lea ebp, [esi + 0x30cc]
push esi
mov ecx, ebp
mov byte [esp + 0x88], 0xd
call fcn.0048deb0
lea ecx, [esi + 0x32c0]
mov byte [esp + 0x84], 0xe
call fcn.00639750
lea ecx, [esi + 0x350c]
mov byte [esp + 0x84], 0xf
call fcn.007d1b0b
mov edx, dword [esp + 0x8c]
mov byte [esp + 0x84], 0x10
mov dword [esi + 0x3514], ebx
mov dword [esi + 0x3518], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [esi + 0x351c], eax
lea eax, [esp + 0x8c]
push eax
lea ecx, [esi + 0x3524]
call fcn.00478ac0
mov dword [esi + 0x3520], 0x852e40
lea edi, [esi + 0x3534]
push ebx
mov ecx, edi
mov byte [esp + 0x88], 0x11
call fcn.007a46dd
mov dword [edi], vtable.CCriticalSection.0
add edi, 8
push edi
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea edi, [esi + 0x3558]
push ebx
mov ecx, edi
mov byte [esp + 0x88], 0x12
mov dword [esi + 0x3554], ebx
call fcn.007a46dd
mov dword [edi], vtable.CCriticalSection.0
add edi, 8
push edi
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov byte [esi + 0x3578], bl
mov byte [esi + 0x3579], bl
mov ecx, dword [0x94c1a8]
mov dword [esi + 0x357c], ecx
mov edx, dword [0x94c1a8]
mov dword [esi + 0x3580], edx
mov dword [esi + 0x3584], ebx
mov dword [esi + 0x3588], ebx
mov byte [esi + 0x358c], bl
mov byte [esi + 0x358d], bl
mov byte [esi + 0x358e], bl
mov byte [esp + 0x84], 0x15
mov byte [esi + 0x358f], 1
mov byte [esi + 0x3590], 1
mov byte [esi + 0x3591], 1
mov byte [esi + 0x3592], 1
mov byte [esi + 0x3593], 1
mov byte [esi + 0x3594], 1
mov byte [esi + 0x3595], 1
mov byte [esi + 0x3596], 1
mov byte [esi + 0x3597], 1
mov byte [esi + 0x3598], 1
mov byte [esi + 0x3599], 1
mov byte [esi + 0x359a], 1
mov byte [esi + 0x359b], bl
lea ecx, [esi + 0x359c]
call fcn.006d09a0
lea edi, [esi + 0x35a0]
mov byte [esp + 0x84], 0x16
mov ecx, edi
mov dword [esp + 0x14], edi
call fcn.00412ca0
lea ecx, [edi + 0x74]
mov byte [esp + 0x84], 0x17
call fcn.00412e00
lea ecx, [edi + 0x98]
mov byte [esp + 0x84], 0x18
call fcn.00412e50
lea ecx, [edi + 0xd4]
mov byte [esp + 0x84], 0x19
call fcn.00412f30
lea ecx, [edi + 0x184]
mov byte [esp + 0x84], 0x1a
call fcn.004130e0
lea eax, [esp + 0x8c]
lea ecx, [edi + 0x214]
push eax
mov byte [esp + 0x88], 0x1b
mov byte [edi + 0x210], bl
call fcn.00478ac0
lea ecx, [edi + 0x224]
mov byte [esp + 0x84], 0x1c
call fcn.004130c0
lea ecx, [edi + 0x238]
mov byte [esp + 0x84], 0x1d
call fcn.00414490
lea ecx, [edi + 0x29c]
mov byte [esp + 0x84], 0x1e
call fcn.00414380
lea ecx, [edi + 0x2e0]
mov byte [esp + 0x84], 0x1f
call fcn.00414a70
lea ecx, [esp + 0x11]
lea edx, [esp + 0x12]
push ecx
push edx
lea ecx, [esi + 0x392c]
mov byte [esp + 0x8c], 0x20
mov dword [esi + 0x3928], ebx
call fcn.0043d920
mov edi, vtable.BscProfileData::SftpLastWorkingDir.0
mov dword [esi + 0x3924], edi
lea eax, [esp + 0x8c]
lea ecx, [esp + 0x13]
push eax
push ecx
lea ecx, [esi + 0x3944]
mov byte [esp + 0x8c], 0x21
mov dword [esi + 0x3940], ebx
call fcn.0043d920
mov dword [esi + 0x393c], edi
lea edx, [esp + 0x12]
lea eax, [esp + 0x11]
push edx
push eax
lea ecx, [esi + 0x395c]
mov byte [esp + 0x8c], 0x22
mov dword [esi + 0x3958], ebx
call fcn.0043e130
mov edi, vtable.BscProfileData::SftpLastXferMode.0
mov dword [esi + 0x3954], edi
mov byte [esp + 0x84], 0x23
mov dword [esi + 0x3970], ebx
lea ecx, [esp + 0x8c]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x3974]
call fcn.0043e130
mov dword [esi + 0x396c], edi
lea edi, [esi + 0x3984]
push 0x56c
mov byte [esp + 0x88], 0x24
mov dword [edi], ebx
call fcn.007d7320
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x84], 0x25
je 0x41231d
mov ecx, eax
call fcn.004518a0
jmp 0x41231f
xor eax, eax
push eax
mov ecx, edi
mov byte [esp + 0x88], 0x24
call fcn.00451860
mov al, byte [esp + 0x8c]
mov dword [esi + 0x398c], ebx
mov byte [esi + 0x3988], al
mov dword [esi + 0x3990], ebx
mov dword [esi + 0x3994], ebx
lea ecx, [esi + 0x399c]
mov byte [esp + 0x84], 0x27
mov byte [esi + 0x3998], bl
mov byte [esi + 0x3999], bl
call fcn.004128e0
lea edi, [esi + 0x3a68]
mov dword [esi + 0x3a58], ebx
mov ecx, edi
mov byte [esi + 0x3a5c], 1
mov dword [esi + 0x3a60], 0xc8
mov byte [esi + 0x3a64], bl
call fcn.004034a0
mov dword [edi], vtable.ucs2string.0
mov byte [esi + 0x3a7c], 1
mov dword [esi + 0x3a80], 0x4f
mov dword [esi + 0x3a84], 2
lea edx, [esp + 0x8c]
lea edi, [esi + 0x3a88]
push edx
lea eax, [esp + 0x17]
push ebx
lea ecx, [edi + 4]
push eax
mov byte [esp + 0x90], 0x29
mov dword [esp + 0x20], edi
mov byte [edi], bl
mov byte [edi + 1], bl
mov byte [edi + 2], bl
mov byte [edi + 3], bl
call fcn.0043b260
push 0xffffffffffffffff
push str.position
lea ecx, [edi + 0x14]
mov byte [esp + 0x8c], 0x2a
call fcn.00415e50
lea edi, [esi + 0x3ab0]
mov dword [esp + 0x8c], edi
mov cl, byte [esp + 0x8c]
mov byte [edi], bl
mov byte [edi + 1], bl
mov byte [edi + 4], cl
mov dword [edi + 8], ebx
mov dword [edi + 0xc], ebx
mov dword [edi + 0x10], ebx
lea edx, [esp + 0x13]
lea ecx, [edi + 0x14]
push edx
mov byte [esp + 0x88], 0x2c
call fcn.00478ac0
lea eax, [esp + 0x12]
lea ecx, [edi + 0x24]
push eax
mov byte [esp + 0x88], 0x2d
call fcn.00478ac0
lea ecx, [esp + 0x11]
mov byte [esp + 0x84], 0x2e
push ecx
lea ecx, [edi + 0x34]
call fcn.00478ac0
lea ecx, [edi + 0x44]
mov byte [esp + 0x84], 0x2f
call fcn.005560e0
push esi
push 0x187
mov ecx, ebp
mov byte [esp + 0x8c], 0x30
mov dword [esi], vtable.CBscDlg.0
call fcn.007d3212
lea ecx, [esi + 0x32c0]
call fcn.00639930
call fcn.00488b00
test al, al
jne 0x4127ed
mov dl, byte [esp + 0x8c]
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], dl
call fcn.00404f20
push str.PopupInformationLog
call fcn.007ac4d2
add esp, 4
lea ecx, [esp + 0x1c]
push eax
push str.PopupInformationLog
call fcn.00403980
mov byte [esp + 0x84], 0x31
call fcn.00488b30
cmp eax, ebx
je 0x4124f0
add eax, 4
jmp 0x4124f2
xor eax, eax
lea ecx, [esp + 0x14]
lea edx, [esp + 0x1c]
push ecx
push edx
push eax
lea ecx, [esp + 0x38]
call fcn.005da8c0
mov edx, dword [eax]
mov ecx, eax
mov byte [esp + 0x84], 0x32
call dword [edx + 4]
mov byte [esp + 0x8c], al
lea ecx, [esp + 0x64]
mov byte [esp + 0x84], 0x33
call fcn.0040e080
lea ecx, [esp + 0x2c]
call fcn.005d9ff0
push 1
lea ecx, [esp + 0x20]
mov byte [esp + 0x88], 0x30
call fcn.00404f20
cmp byte [esp + 0x8c], bl
je 0x412562
cmp dword [esp + 0x14], ebx
setne al
push eax
call fcn.0049b450
add esp, 4
mov cl, byte [esp + 0x8c]
push ebx
mov byte [esp + 0x20], cl
lea ecx, [esp + 0x20]
call fcn.00404f20
push str.PopupWarningLog
call fcn.007ac4d2
add esp, 4
mov edi, eax
lea ecx, [esp + 0x1c]
push 1
push edi
call fcn.00404d30
test al, al
je 0x4125b3
mov edx, dword [esp + 0x20]
push edi
push str.PopupWarningLog
push edx
call fcn.004069b0
add esp, 0xc
lea ecx, [esp + 0x1c]
push edi
call fcn.00404c90
mov byte [esp + 0x84], 0x34
call fcn.00488b30
cmp eax, ebx
je 0x4125c9
add eax, 4
jmp 0x4125cb
xor eax, eax
lea ecx, [esp + 0x14]
lea edx, [esp + 0x1c]
push ecx
push edx
push eax
lea ecx, [esp + 0x38]
call fcn.005da8c0
mov edx, dword [eax]
mov ecx, eax
mov byte [esp + 0x84], 0x35
call dword [edx + 4]
mov byte [esp + 0x8c], al
lea ecx, [esp + 0x64]
mov byte [esp + 0x84], 0x36
call fcn.0040e080
lea ecx, [esp + 0x2c]
call fcn.005d9ff0
push 1
lea ecx, [esp + 0x20]
mov byte [esp + 0x88], 0x30
call fcn.00404f20
cmp byte [esp + 0x8c], bl
je 0x41263b
cmp dword [esp + 0x14], ebx
setne al
push eax
call fcn.0049b4a0
add esp, 4
mov cl, byte [esp + 0x8c]
push ebx
mov byte [esp + 0x20], cl
lea ecx, [esp + 0x20]
call fcn.00404f20
push str.PopupErrorLog
call fcn.007ac4d2
add esp, 4
mov edi, eax
lea ecx, [esp + 0x1c]
push 1
push edi
call fcn.00404d30
test al, al
je 0x41268c
mov edx, dword [esp + 0x20]
push edi
push str.PopupErrorLog
push edx
call fcn.004069b0
add esp, 0xc
lea ecx, [esp + 0x1c]
push edi
call fcn.00404c90
mov byte [esp + 0x84], 0x37
call fcn.00488b30
cmp eax, ebx
je 0x4126a2
add eax, 4
jmp 0x4126a4
xor eax, eax
lea ecx, [esp + 0x14]
lea edx, [esp + 0x1c]
push ecx
push edx
push eax
lea ecx, [esp + 0x38]
call fcn.005da8c0
mov edx, dword [eax]
mov ecx, eax
mov byte [esp + 0x84], 0x38
call dword [edx + 4]
mov byte [esp + 0x8c], al
lea ecx, [esp + 0x64]
mov byte [esp + 0x84], 0x39
call fcn.0040e080
lea ecx, [esp + 0x2c]
call fcn.005d9ff0
push 1
lea ecx, [esp + 0x20]
mov byte [esp + 0x88], 0x30
call fcn.00404f20
cmp byte [esp + 0x8c], bl
je 0x412714
cmp dword [esp + 0x14], ebx
setne al
push eax
call fcn.0049b4d0
add esp, 4
mov cl, byte [esp + 0x8c]
push ebx
mov byte [esp + 0x20], cl
lea ecx, [esp + 0x20]
call fcn.00404f20
push str.PopupOnReconnect
call fcn.007ac4d2
add esp, 4
mov edi, eax
lea ecx, [esp + 0x1c]
push 1
push edi
call fcn.00404d30
test al, al
je 0x412765
mov edx, dword [esp + 0x20]
push edi
push str.PopupOnReconnect
push edx
call fcn.004069b0
add esp, 0xc
lea ecx, [esp + 0x1c]
push edi
call fcn.00404c90
mov byte [esp + 0x84], 0x3a
call fcn.00488b30
cmp eax, ebx
je 0x41277b
add eax, 4
jmp 0x41277d
xor eax, eax
lea ecx, [esp + 0x14]
lea edx, [esp + 0x1c]
push ecx
push edx
push eax
lea ecx, [esp + 0x38]
call fcn.005da8c0
mov edx, dword [eax]
mov ecx, eax
mov byte [esp + 0x84], 0x3b
call dword [edx + 4]
mov byte [esp + 0x8c], al
lea ecx, [esp + 0x64]
mov byte [esp + 0x84], 0x3c
call fcn.0040e080
lea ecx, [esp + 0x2c]
call fcn.005d9ff0
push 1
lea ecx, [esp + 0x20]
mov byte [esp + 0x88], 0x30
call fcn.00404f20
cmp byte [esp + 0x8c], bl
je 0x4127ed
cmp dword [esp + 0x14], ebx
setne al
push eax
call fcn.0049b500
add esp, 4
lea ecx, [esp + 0x1c]
push 0x951900
push ecx
mov ecx, 0x9518b0
call fcn.00419280
mov ecx, eax
call fcn.0057dac0
mov dl, al
mov byte [esi + 0x2d1c], al
neg dl
sbb edx, edx
mov ecx, dword [esp + 0x7c]
and edx, 0x40
mov dword [esi + 0x2d2c], 0x70
add edx, 0x40
mov dword [esi + 0x2d30], 7
neg al
sbb eax, eax
mov dword [esi + 0x2d20], edx
and eax, 0x310
mov dword [esi + 0x2d34], 0x402
add eax, 0x98
mov dword [esi + 0x3044], ebx
mov dword [esi + 0x2d24], eax
mov eax, dword [esi + 0x2cf4]
mov dword [esi + 0x2d38], eax
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x78
ret 4