Function at 0x4c0050
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6344e2
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x6a6040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x18], esi
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x4c00b1
push str.KeyInfo
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xc], eax
test eax, eax
je 0x4c00b8
cmp dword [eax + 0xc], 0
jne 0x4c00b8
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xc], 0
mov dword [ebp - 4], 1
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x4c00f0
push str.Version
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x10], eax
test eax, eax
je 0x4c00f7
cmp dword [eax + 0xc], 0
jne 0x4c00f7
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x10], 0
mov byte [ebp - 4], 3
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 4
test eax, eax
je 0x4c012c
push str.Version2
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x14], eax
test eax, eax
je 0x4c0133
cmp dword [eax + 0xc], 0
jne 0x4c0133
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x14], 0
mov byte [ebp - 4], 5
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x4c0168
push str.KeyVerificationStatus
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x18], eax
test eax, eax
je 0x4c016f
cmp dword [eax + 0xc], 0
jne 0x4c016f
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x18], 0
mov byte [ebp - 4], 7
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 8
test eax, eax
je 0x4c01a4
push str.KeyActivationStatus
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x1c], eax
test eax, eax
je 0x4c01ab
cmp dword [eax + 0xc], 0
jne 0x4c01ab
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x1c], 0
mov byte [ebp - 4], 9
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xa
test eax, eax
je 0x4c01e0
push str.CurrentTime
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x20], eax
test eax, eax
je 0x4c01e7
cmp dword [eax + 0xc], 0
jne 0x4c01e7
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x20], 0
mov byte [ebp - 4], 0xb
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xc
test eax, eax
je 0x4c021c
push 0x663894
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x24], eax
test eax, eax
je 0x4c0223
cmp dword [eax + 0xc], 0
jne 0x4c0223
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x24], 0
mov byte [ebp - 4], 0xd
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xe
test eax, eax
je 0x4c0258
push str.InstallationTime
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x28], eax
test eax, eax
je 0x4c025f
cmp dword [eax + 0xc], 0
jne 0x4c025f
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x28], 0
mov byte [ebp - 4], 0xf
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x10
test eax, eax
je 0x4c0294
push str.EndTime
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x2c], eax
test eax, eax
je 0x4c029b
cmp dword [eax + 0xc], 0
jne 0x4c029b
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x2c], 0
mov byte [ebp - 4], 0x11
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x12
test eax, eax
je 0x4c02d0
push str.UserName
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x30], eax
test eax, eax
je 0x4c02d7
cmp dword [eax + 0xc], 0
jne 0x4c02d7
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x30], 0
mov byte [ebp - 4], 0x13
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x14
test eax, eax
je 0x4c030c
push str.Email
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x34], eax
test eax, eax
je 0x4c0313
cmp dword [eax + 0xc], 0
jne 0x4c0313
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x34], 0
mov byte [ebp - 4], 0x15
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x16
test eax, eax
je 0x4c0348
push str.Town
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x38], eax
test eax, eax
je 0x4c034f
cmp dword [eax + 0xc], 0
jne 0x4c034f
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x38], 0
mov byte [ebp - 4], 0x17
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x18
test eax, eax
je 0x4c0384
push 0x65cb44
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x3c], eax
test eax, eax
je 0x4c038b
cmp dword [eax + 0xc], 0
jne 0x4c038b
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x3c], 0
mov byte [ebp - 4], 0x19
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x1a
test eax, eax
je 0x4c03c0
push str.ACode
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x40], eax
test eax, eax
je 0x4c03c7
cmp dword [eax + 0xc], 0
jne 0x4c03c7
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x40], 0
mov byte [ebp - 4], 0x1b
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x1c
test eax, eax
je 0x4c03fc
push str.ModeName
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x44], eax
test eax, eax
je 0x4c0403
cmp dword [eax + 0xc], 0
jne 0x4c0403
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x44], 0
mov byte [ebp - 4], 0x1d
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x1e
test eax, eax
je 0x4c0438
push 0x6638c0
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x48], eax
test eax, eax
je 0x4c043f
cmp dword [eax + 0xc], 0
jne 0x4c043f
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x48], 0
mov byte [ebp - 4], 0x1f
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x20
test eax, eax
je 0x4c0474
push str.CurLogonIpsCount
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x4c], eax
test eax, eax
je 0x4c047b
cmp dword [eax + 0xc], 0
jne 0x4c047b
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x4c], 0
mov byte [ebp - 4], 0x21
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x22
test eax, eax
je 0x4c04b0
push str.MaxLogonIpsCount
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x50], eax
test eax, eax
je 0x4c04b7
cmp dword [eax + 0xc], 0
jne 0x4c04b7
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x50], 0
mov byte [ebp - 4], 0x23
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x24
test eax, eax
je 0x4c04ec
push str.VpnLoggedInUsersCount
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x54], eax
test eax, eax
je 0x4c04f3
cmp dword [eax + 0xc], 0
jne 0x4c04f3
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x54], 0
mov byte [ebp - 4], 0x25
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x26
test eax, eax
je 0x4c0528
push str.VpnMaxLoggedInUsersCount
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x58], eax
test eax, eax
je 0x4c052f
cmp dword [eax + 0xc], 0
jne 0x4c052f
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x58], 0
mov byte [ebp - 4], 0x27
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x28
test eax, eax
je 0x4c0564
push str.TcpConnections
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x5c], eax
test eax, eax
je 0x4c056b
cmp dword [eax + 0xc], 0
jne 0x4c056b
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x5c], 0
mov byte [ebp - 4], 0x29
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x2a
test eax, eax
je 0x4c05a0
push 0x66392c
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x60], eax
test eax, eax
je 0x4c05a7
cmp dword [eax + 0xc], 0
jne 0x4c05a7
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x60], 0
mov byte [ebp - 4], 0x2b
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x2c
test eax, eax
je 0x4c05dc
push str.Pids
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x64], eax
test eax, eax
je 0x4c05e3
cmp dword [eax + 0xc], 0
jne 0x4c05e3
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x64], 0
mov byte [ebp - 4], 0x2d
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x2e
test eax, eax
je 0x4c0618
push str.conn
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x68], eax
test eax, eax
je 0x4c061f
cmp dword [eax + 0xc], 0
jne 0x4c061f
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x68], 0
mov byte [ebp - 4], 0x2f
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x30
test eax, eax
je 0x4c0654
push 0x6579fc
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x6c], eax
test eax, eax
je 0x4c065b
cmp dword [eax + 0xc], 0
jne 0x4c065b
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x6c], 0
mov byte [ebp - 4], 0x31
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x32
test eax, eax
je 0x4c0690
push str.ModuleName
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x70], eax
test eax, eax
je 0x4c0697
cmp dword [eax + 0xc], 0
jne 0x4c0697
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x70], 0
mov byte [ebp - 4], 0x33
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x34
test eax, eax
je 0x4c06cc
push str.ModulePath
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x74], eax
test eax, eax
je 0x4c06d3
cmp dword [eax + 0xc], 0
jne 0x4c06d3
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x74], 0
mov byte [ebp - 4], 0x35
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x36
test eax, eax
je 0x4c0708
push str.UserName
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x78], eax
test eax, eax
je 0x4c070f
cmp dword [eax + 0xc], 0
jne 0x4c070f
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x78], 0
mov byte [ebp - 4], 0x37
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x38
test eax, eax
je 0x4c0744
push 0x663974
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x7c], eax
test eax, eax
je 0x4c074b
cmp dword [eax + 0xc], 0
jne 0x4c074b
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x7c], 0
mov byte [ebp - 4], 0x39
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x3a
test eax, eax
je 0x4c0783
push str.StartTime
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x80], eax
test eax, eax
je 0x4c078d
cmp dword [eax + 0xc], 0
jne 0x4c078d
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x80], 0
mov byte [ebp - 4], 0x3b
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x3c
test eax, eax
je 0x4c07c5
push str.DurationTime
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x84], eax
test eax, eax
je 0x4c07cf
cmp dword [eax + 0xc], 0
jne 0x4c07cf
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x84], 0
mov byte [ebp - 4], 0x3d
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x3e
test eax, eax
je 0x4c0807
push 0x663978
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x88], eax
test eax, eax
je 0x4c0811
cmp dword [eax + 0xc], 0
jne 0x4c0811
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x88], 0
mov byte [ebp - 4], 0x3f
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x40
test eax, eax
je 0x4c0849
push str.m_IsVisible
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x8c], eax
test eax, eax
je 0x4c0853
cmp dword [eax + 0xc], 0
jne 0x4c0853
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x8c], 0
mov byte [ebp - 4], 0x41
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x42
test eax, eax
je 0x4c088b
push str.m_IsConnected0
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x90], eax
test eax, eax
je 0x4c0895
cmp dword [eax + 0xc], 0
jne 0x4c0895
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x90], 0
mov byte [ebp - 4], 0x43
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x44
test eax, eax
je 0x4c08cd
push str.m_IsConnected1
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x94], eax
test eax, eax
je 0x4c08d7
cmp dword [eax + 0xc], 0
jne 0x4c08d7
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x94], 0
mov byte [ebp - 4], 0x45
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x46
test eax, eax
je 0x4c090f
push str.m_TimeCnt64
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x98], eax
test eax, eax
je 0x4c0919
cmp dword [eax + 0xc], 0
jne 0x4c0919
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x98], 0
mov byte [ebp - 4], 0x47
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x48
test eax, eax
je 0x4c0951
push 0x6639cc
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x9c], eax
test eax, eax
je 0x4c095b
cmp dword [eax + 0xc], 0
jne 0x4c095b
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x9c], 0
mov byte [ebp - 4], 0x49
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x4a
test eax, eax
je 0x4c0993
push str.UserId
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xa0], eax
test eax, eax
je 0x4c099d
cmp dword [eax + 0xc], 0
jne 0x4c099d
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xa0], 0
mov byte [ebp - 4], 0x4b
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x4c
test eax, eax
je 0x4c09d5
push str.Proto
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xa4], eax
test eax, eax
je 0x4c09df
cmp dword [eax + 0xc], 0
jne 0x4c09df
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xa4], 0
mov byte [ebp - 4], 0x4d
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x4e
test eax, eax
je 0x4c0a17
push str.OwningPid
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xa8], eax
test eax, eax
je 0x4c0a21
cmp dword [eax + 0xc], 0
jne 0x4c0a21
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xa8], 0
mov byte [ebp - 4], 0x4f
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x50
test eax, eax
je 0x4c0a59
push str.FirstDir
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xac], eax
test eax, eax
je 0x4c0a63
cmp dword [eax + 0xc], 0
jne 0x4c0a63
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xac], 0
mov byte [ebp - 4], 0x51
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x52
test eax, eax
je 0x4c0a9b
push str.Protocol
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xb0], eax
test eax, eax
je 0x4c0aa5
cmp dword [eax + 0xc], 0
jne 0x4c0aa5
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xb0], 0
mov byte [ebp - 4], 0x53
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x54
test eax, eax
je 0x4c0add
push str.Rule
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xb4], eax
test eax, eax
je 0x4c0ae7
cmp dword [eax + 0xc], 0
jne 0x4c0ae7
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xb4], 0
mov byte [ebp - 4], 0x55
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x56
test eax, eax
je 0x4c0b1f
push str.Shaper0
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xb8], eax
test eax, eax
je 0x4c0b29
cmp dword [eax + 0xc], 0
jne 0x4c0b29
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xb8], 0
mov byte [ebp - 4], 0x57
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x58
test eax, eax
je 0x4c0b61
push str.Shaper1
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xbc], eax
test eax, eax
je 0x4c0b6b
cmp dword [eax + 0xc], 0
jne 0x4c0b6b
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xbc], 0
mov byte [ebp - 4], 0x59
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x5a
test eax, eax
je 0x4c0ba3
push str.Shaper2
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xc0], eax
test eax, eax
je 0x4c0bad
cmp dword [eax + 0xc], 0
jne 0x4c0bad
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xc0], 0
mov byte [ebp - 4], 0x5b
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x5c
test eax, eax
je 0x4c0be5
push str.Shaper3
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xc4], eax
test eax, eax
je 0x4c0bef
cmp dword [eax + 0xc], 0
jne 0x4c0bef
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xc4], 0
mov byte [ebp - 4], 0x5d
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x5e
test eax, eax
je 0x4c0c27
push str.CreatedTimeAbs
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xc8], eax
test eax, eax
je 0x4c0c31
cmp dword [eax + 0xc], 0
jne 0x4c0c31
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xc8], 0
mov byte [ebp - 4], 0x5f
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x60
test eax, eax
je 0x4c0c69
push str.ConnectedTimeAbs
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xcc], eax
test eax, eax
je 0x4c0c73
cmp dword [eax + 0xc], 0
jne 0x4c0c73
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xcc], 0
mov byte [ebp - 4], 0x61
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x62
test eax, eax
je 0x4c0cab
push str.LastRecv
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xd0], eax
test eax, eax
je 0x4c0cb5
cmp dword [eax + 0xc], 0
jne 0x4c0cb5
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xd0], 0
mov byte [ebp - 4], 0x63
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x64
test eax, eax
je 0x4c0ced
push str.LastSent
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xd4], eax
test eax, eax
je 0x4c0cf7
cmp dword [eax + 0xc], 0
jne 0x4c0cf7
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xd4], 0
mov byte [ebp - 4], 0x65
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x66
test eax, eax
je 0x4c0d2f
push str.ConnectionClosedTimeAbs
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xd8], eax
test eax, eax
je 0x4c0d39
cmp dword [eax + 0xc], 0
jne 0x4c0d39
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xd8], 0
mov byte [ebp - 4], 0x67
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x68
test eax, eax
je 0x4c0d71
push str.CreatedTimeRel
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xdc], eax
test eax, eax
je 0x4c0d7b
cmp dword [eax + 0xc], 0
jne 0x4c0d7b
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xdc], 0
mov byte [ebp - 4], 0x69
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x6a
test eax, eax
je 0x4c0db3
push str.ConnectedTimeRel
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xe0], eax
test eax, eax
je 0x4c0dbd
cmp dword [eax + 0xc], 0
jne 0x4c0dbd
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xe0], 0
mov byte [ebp - 4], 0x6b
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x6c
test eax, eax
je 0x4c0df5
push str.RcvTo
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xe4], eax
test eax, eax
je 0x4c0dff
cmp dword [eax + 0xc], 0
jne 0x4c0dff
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xe4], 0
mov byte [ebp - 4], 0x6d
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x6e
test eax, eax
je 0x4c0e37
push str.SentTo
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0xe8], eax
test eax, eax
je 0x4c0e41
cmp dword [eax + 0xc], 0
jne 0x4c0e41
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xe8], 0
mov byte [ebp - 4], 0x6f
call fcn.005a45d0
mov dword [ebp - 0x14], eax
test eax, eax
je 0x4c0e82
mov dword [eax], 1
xor ecx, ecx
mov dword [eax + 0xc], 0
mov dword [eax + 4], 0
mov word [eax + 0x10], cx
mov dword [esi + 0xec], eax
test eax, eax
je 0x4c0e8c
cmp dword [eax + 0xc], ecx
jne 0x4c0e8c
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0xec], 0
push fcn.004250c0
push fcn.00406030
push 0x32
push 4
lea eax, [esi + 0xf0]
mov byte [ebp - 4], 0x71
push eax
call fcn.00606f18
push fcn.004250c0
push fcn.00406030
push 4
push 4
lea eax, [esi + 0x1b8]
mov byte [ebp - 4], 0x72
push eax
call fcn.00606f18
push fcn.004250c0
push fcn.00406030
push 4
push 4
lea eax, [esi + 0x1c8]
mov byte [ebp - 4], 0x73
push eax
call fcn.00606f18
push fcn.004250c0
push fcn.00406030
push 4
push 4
lea eax, [esi + 0x1d8]
mov byte [ebp - 4], 0x74
push eax
call fcn.00606f18
push fcn.004250c0
push fcn.00406030
push 4
push 4
lea eax, [esi + 0x1e8]
mov byte [ebp - 4], 0x75
push eax
call fcn.00606f18
push fcn.004250c0
push fcn.00406030
push 4
push 4
lea eax, [esi + 0x1f8]
mov byte [ebp - 4], 0x76
push eax
call fcn.00606f18
push fcn.004250c0
push fcn.00406030
push 4
push 4
lea eax, [esi + 0x208]
mov byte [ebp - 4], 0x77
push eax
call fcn.00606f18
mov byte [ebp - 4], 0x78
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x79
test eax, eax
je 0x4c0f96
push str.LocalInfo
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x218], eax
test eax, eax
je 0x4c0fa0
cmp dword [eax + 0xc], 0
jne 0x4c0fa0
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x218], 0
mov byte [ebp - 4], 0x7a
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x7b
test eax, eax
je 0x4c0fd8
push str.Level
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x21c], eax
test eax, eax
je 0x4c0fe2
cmp dword [eax + 0xc], 0
jne 0x4c0fe2
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x21c], 0
mov byte [ebp - 4], 0x7c
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x7d
test eax, eax
je 0x4c101a
push str.State
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x220], eax
test eax, eax
je 0x4c1024
cmp dword [eax + 0xc], 0
jne 0x4c1024
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x220], 0
mov byte [ebp - 4], 0x7e
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x7f
test eax, eax
je 0x4c105c
push str.Send
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x224], eax
test eax, eax
je 0x4c1066
cmp dword [eax + 0xc], 0
jne 0x4c1066
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x224], 0
mov byte [ebp - 4], 0x80
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x81
test eax, eax
je 0x4c109e
push str.Recv
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x228], eax
test eax, eax
je 0x4c10a8
cmp dword [eax + 0xc], 0
jne 0x4c10a8
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x228], 0
mov byte [ebp - 4], 0x82
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x83
test eax, eax
je 0x4c10e0
push str.Route
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x22c], eax
test eax, eax
je 0x4c10ea
cmp dword [eax + 0xc], 0
jne 0x4c10ea
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x22c], 0
mov byte [ebp - 4], 0x84
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x85
test eax, eax
je 0x4c1122
push 0x663aac
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x230], eax
test eax, eax
je 0x4c112c
cmp dword [eax + 0xc], 0
jne 0x4c112c
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x230], 0
mov byte [ebp - 4], 0x86
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x87
test eax, eax
je 0x4c1164
push 0x6535a8
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x234], eax
test eax, eax
je 0x4c116e
cmp dword [eax + 0xc], 0
jne 0x4c116e
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x234], 0
mov byte [ebp - 4], 0x88
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x89
test eax, eax
je 0x4c11a6
push str.name
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x238], eax
test eax, eax
je 0x4c11b0
cmp dword [eax + 0xc], 0
jne 0x4c11b0
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x238], 0
mov byte [ebp - 4], 0x8a
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x8b
test eax, eax
je 0x4c11e8
push str.TcpIp2DnsNameMap
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x23c], eax
test eax, eax
je 0x4c11f2
cmp dword [eax + 0xc], 0
jne 0x4c11f2
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x23c], 0
mov byte [ebp - 4], 0x8c
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x8d
test eax, eax
je 0x4c122a
push str.TcpIp2DnsNameMap6
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x240], eax
test eax, eax
je 0x4c1234
cmp dword [eax + 0xc], 0
jne 0x4c1234
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x240], 0
mov byte [ebp - 4], 0x8e
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x8f
test eax, eax
je 0x4c126c
push str.CLOSED
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x244], eax
test eax, eax
je 0x4c1276
cmp dword [eax + 0xc], 0
jne 0x4c1276
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x244], 0
mov byte [ebp - 4], 0x90
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x91
test eax, eax
je 0x4c12ae
push str.LISTEN
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x248], eax
test eax, eax
je 0x4c12b8
cmp dword [eax + 0xc], 0
jne 0x4c12b8
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x248], 0
mov byte [ebp - 4], 0x92
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x93
test eax, eax
je 0x4c12f0
push str.SYN_SENT
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x24c], eax
test eax, eax
je 0x4c12fa
cmp dword [eax + 0xc], 0
jne 0x4c12fa
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x24c], 0
mov byte [ebp - 4], 0x94
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x95
test eax, eax
je 0x4c1332
push str.SYN_RECEIVED
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x250], eax
test eax, eax
je 0x4c133c
cmp dword [eax + 0xc], 0
jne 0x4c133c
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x250], 0
mov byte [ebp - 4], 0x96
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x97
test eax, eax
je 0x4c1374
push str.ESTABLISHED
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x254], eax
test eax, eax
je 0x4c137e
cmp dword [eax + 0xc], 0
jne 0x4c137e
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x254], 0
mov byte [ebp - 4], 0x98
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x99
test eax, eax
je 0x4c13b6
push str.FIN_WAIT_1
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x258], eax
test eax, eax
je 0x4c13c0
cmp dword [eax + 0xc], 0
jne 0x4c13c0
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x258], 0
mov byte [ebp - 4], 0x9a
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x9b
test eax, eax
je 0x4c13f8
push str.FIN_WAIT_2
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x25c], eax
test eax, eax
je 0x4c1402
cmp dword [eax + 0xc], 0
jne 0x4c1402
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x25c], 0
mov byte [ebp - 4], 0x9c
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x9d
test eax, eax
je 0x4c143a
push str.CLOSE_WAIT
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x260], eax
test eax, eax
je 0x4c1444
cmp dword [eax + 0xc], 0
jne 0x4c1444
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x260], 0
mov byte [ebp - 4], 0x9e
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x9f
test eax, eax
je 0x4c147c
push str.CLOSING
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x264], eax
test eax, eax
je 0x4c1486
cmp dword [eax + 0xc], 0
jne 0x4c1486
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x264], 0
mov byte [ebp - 4], 0xa0
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xa1
test eax, eax
je 0x4c14be
push str.LAST_ACK
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x268], eax
test eax, eax
je 0x4c14c8
cmp dword [eax + 0xc], 0
jne 0x4c14c8
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x268], 0
mov byte [ebp - 4], 0xa2
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xa3
test eax, eax
je 0x4c1500
push str.TIME_WAIT
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x26c], eax
test eax, eax
je 0x4c150a
cmp dword [eax + 0xc], 0
jne 0x4c150a
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x26c], 0
mov byte [ebp - 4], 0xa4
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xa5
test eax, eax
je 0x4c1542
push str.DELETE_TCB
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x270], eax
test eax, eax
je 0x4c154c
cmp dword [eax + 0xc], 0
jne 0x4c154c
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x270], 0
mov byte [ebp - 4], 0xa6
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xa7
test eax, eax
je 0x4c1584
push str.unknown_state
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x274], eax
test eax, eax
je 0x4c158e
cmp dword [eax + 0xc], 0
jne 0x4c158e
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x274], 0
mov byte [ebp - 4], 0xa8
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xa9
test eax, eax
je 0x4c15c6
push str.UdpDynamic
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x278], eax
test eax, eax
je 0x4c15d0
cmp dword [eax + 0xc], 0
jne 0x4c15d0
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x278], 0
mov byte [ebp - 4], 0xaa
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xab
test eax, eax
je 0x4c1608
push str.CreatedTimeAbs
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x27c], eax
test eax, eax
je 0x4c1612
cmp dword [eax + 0xc], 0
jne 0x4c1612
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x27c], 0
mov byte [ebp - 4], 0xac
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xad
test eax, eax
je 0x4c164a
push str.Tr0TimeAbs
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x280], eax
test eax, eax
je 0x4c1654
cmp dword [eax + 0xc], 0
jne 0x4c1654
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x280], 0
mov byte [ebp - 4], 0xae
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xaf
test eax, eax
je 0x4c168c
push str.Tr1TimeAbs
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x284], eax
test eax, eax
je 0x4c1696
cmp dword [eax + 0xc], 0
jne 0x4c1696
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x284], 0
mov byte [ebp - 4], 0xb0
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xb1
test eax, eax
je 0x4c16ce
push str.CreatedTimeRel
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x288], eax
test eax, eax
je 0x4c16d8
cmp dword [eax + 0xc], 0
jne 0x4c16d8
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x288], 0
mov byte [ebp - 4], 0xb2
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xb3
test eax, eax
je 0x4c1710
push str.Tr0TimeRel
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x28c], eax
test eax, eax
je 0x4c171a
cmp dword [eax + 0xc], 0
jne 0x4c171a
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x28c], 0
mov byte [ebp - 4], 0xb4
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xb5
test eax, eax
je 0x4c1752
push str.Tr1TimeRel
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x290], eax
test eax, eax
je 0x4c175c
cmp dword [eax + 0xc], 0
jne 0x4c175c
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x290], 0
mov dword [esi + 0x294], 0
mov byte [ebp - 4], 0xb7
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xb8
test eax, eax
je 0x4c179e
push str.UdpIp2DnsNameMap
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x298], eax
test eax, eax
je 0x4c17a8
cmp dword [eax + 0xc], 0
jne 0x4c17a8
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x298], 0
push fcn.004250c0
push fcn.00406030
push 2
push 4
lea eax, [esi + 0x29c]
mov byte [ebp - 4], 0xb9
push eax
call fcn.00606f18
push fcn.004250c0
push fcn.00406030
push 2
push 4
lea eax, [esi + 0x2a4]
mov byte [ebp - 4], 0xba
push eax
call fcn.00606f18
push fcn.004250c0
push fcn.00406030
push 2
push 4
lea eax, [esi + 0x2ac]
mov byte [ebp - 4], 0xbb
push eax
call fcn.00606f18
push fcn.004250c0
push fcn.00406030
push 2
push 4
lea eax, [esi + 0x2b4]
mov byte [ebp - 4], 0xbc
push eax
call fcn.00606f18
push fcn.004250c0
push fcn.00406030
push 2
push 4
lea eax, [esi + 0x2bc]
mov byte [ebp - 4], 0xbd
push eax
call fcn.00606f18
push fcn.004250c0
push fcn.00406030
push 2
push 4
lea eax, [esi + 0x2c4]
mov byte [ebp - 4], 0xbe
push eax
call fcn.00606f18
mov byte [ebp - 4], 0xbf
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xc0
test eax, eax
je 0x4c1894
push str.Usage
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x2cc], eax
test eax, eax
je 0x4c189e
cmp dword [eax + 0xc], 0
jne 0x4c189e
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x2cc], 0
mov byte [ebp - 4], 0xc1
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xc2
test eax, eax
je 0x4c18d6
push str.StringsStatInfo
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x2d0], eax
test eax, eax
je 0x4c18e0
cmp dword [eax + 0xc], 0
jne 0x4c18e0
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x2d0], 0
mov byte [ebp - 4], 0xc3
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xc4
test eax, eax
je 0x4c1918
push str.TUIStatInfo
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x2d4], eax
test eax, eax
je 0x4c1922
cmp dword [eax + 0xc], 0
jne 0x4c1922
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x2d4], 0
mov byte [ebp - 4], 0xc5
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xc6
test eax, eax
je 0x4c195a
push str.HttpStatInfo
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x2d8], eax
test eax, eax
je 0x4c1964
cmp dword [eax + 0xc], 0
jne 0x4c1964
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x2d8], 0
mov byte [ebp - 4], 0xc7
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xc8
test eax, eax
je 0x4c199c
push str.PagefileUsage
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x2dc], eax
test eax, eax
je 0x4c19a6
cmp dword [eax + 0xc], 0
jne 0x4c19a6
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x2dc], 0
mov byte [ebp - 4], 0xc9
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xca
test eax, eax
je 0x4c19de
push str.PeakPagefileUsage
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x2e0], eax
test eax, eax
je 0x4c19e8
cmp dword [eax + 0xc], 0
jne 0x4c19e8
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x2e0], 0
mov byte [ebp - 4], 0xcb
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xcc
test eax, eax
je 0x4c1a20
push str.kernel
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x2e4], eax
test eax, eax
je 0x4c1a2a
cmp dword [eax + 0xc], 0
jne 0x4c1a2a
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x2e4], 0
mov byte [ebp - 4], 0xcd
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xce
test eax, eax
je 0x4c1a62
push str.user
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x2e8], eax
test eax, eax
je 0x4c1a6c
cmp dword [eax + 0xc], 0
jne 0x4c1a6c
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x2e8], 0
mov byte [ebp - 4], 0xcf
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xd0
test eax, eax
je 0x4c1aa4
push str.summ
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x2ec], eax
test eax, eax
je 0x4c1aae
cmp dword [eax + 0xc], 0
jne 0x4c1aae
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x2ec], 0
mov byte [ebp - 4], 0xd1
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xd2
test eax, eax
je 0x4c1ae6
push str.cores
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x2f0], eax
test eax, eax
je 0x4c1af0
cmp dword [eax + 0xc], 0
jne 0x4c1af0
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x2f0], 0
mov byte [ebp - 4], 0xd3
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xd4
test eax, eax
je 0x4c1b28
push str.LogonIps
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x2f4], eax
test eax, eax
je 0x4c1b32
cmp dword [eax + 0xc], 0
jne 0x4c1b32
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x2f4], 0
mov byte [ebp - 4], 0xd5
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xd6
test eax, eax
je 0x4c1b6a
push str.Time
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x2f8], eax
test eax, eax
je 0x4c1b74
cmp dword [eax + 0xc], 0
jne 0x4c1b74
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x2f8], 0
mov byte [ebp - 4], 0xd7
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xd8
test eax, eax
je 0x4c1bac
push str.LogonIp
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x2fc], eax
test eax, eax
je 0x4c1bb6
cmp dword [eax + 0xc], 0
jne 0x4c1bb6
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x2fc], 0
mov byte [ebp - 4], 0xd9
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xda
test eax, eax
je 0x4c1bee
push 0x656cf8
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x300], eax
test eax, eax
je 0x4c1bf8
cmp dword [eax + 0xc], 0
jne 0x4c1bf8
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x300], 0
mov byte [ebp - 4], 0xdb
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xdc
test eax, eax
je 0x4c1c30
push 0x65a85c
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x304], eax
test eax, eax
je 0x4c1c3a
cmp dword [eax + 0xc], 0
jne 0x4c1c3a
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x304], 0
mov byte [ebp - 4], 0xdd
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xde
test eax, eax
je 0x4c1c72
push 0x65a870
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x308], eax
test eax, eax
je 0x4c1c7c
cmp dword [eax + 0xc], 0
jne 0x4c1c7c
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x308], 0
mov byte [ebp - 4], 0xdf
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xe0
test eax, eax
je 0x4c1cb4
push 0x663c4c
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x30c], eax
test eax, eax
je 0x4c1cbe
cmp dword [eax + 0xc], 0
jne 0x4c1cbe
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x30c], 0
mov byte [ebp - 4], 0xe1
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xe2
test eax, eax
je 0x4c1cf6
push str.LastActivityTime
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x310], eax
test eax, eax
je 0x4c1d00
cmp dword [eax + 0xc], 0
jne 0x4c1d00
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x310], 0
mov byte [ebp - 4], 0xe3
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xe4
test eax, eax
je 0x4c1d38
push str.CacheInfo
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x314], eax
test eax, eax
je 0x4c1d42
cmp dword [eax + 0xc], 0
jne 0x4c1d42
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x314], 0
mov byte [ebp - 4], 0xe5
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xe6
test eax, eax
je 0x4c1d7a
push str.cache
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x318], eax
test eax, eax
je 0x4c1d84
cmp dword [eax + 0xc], 0
jne 0x4c1d84
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x318], 0
mov byte [ebp - 4], 0xe7
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xe8
test eax, eax
je 0x4c1dbc
push str.FileSize
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x31c], eax
test eax, eax
je 0x4c1dc6
cmp dword [eax + 0xc], 0
jne 0x4c1dc6
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x31c], 0
mov byte [ebp - 4], 0xe9
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xea
test eax, eax
je 0x4c1dfe
push str.CompletedFiles
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x320], eax
test eax, eax
je 0x4c1e08
cmp dword [eax + 0xc], 0
jne 0x4c1e08
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x320], 0
mov byte [ebp - 4], 0xeb
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xec
test eax, eax
je 0x4c1e40
push str.CompletedSize
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x324], eax
test eax, eax
je 0x4c1e4a
cmp dword [eax + 0xc], 0
jne 0x4c1e4a
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x324], 0
mov byte [ebp - 4], 0xed
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xee
test eax, eax
je 0x4c1e82
push str.InCompletedFiles
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x328], eax
test eax, eax
je 0x4c1e8c
cmp dword [eax + 0xc], 0
jne 0x4c1e8c
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x328], 0
mov byte [ebp - 4], 0xef
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xf0
test eax, eax
je 0x4c1ec4
push str.InCompletedSize
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x32c], eax
test eax, eax
je 0x4c1ece
cmp dword [eax + 0xc], 0
jne 0x4c1ece
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x32c], 0
mov byte [ebp - 4], 0xf1
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xf2
test eax, eax
je 0x4c1f06
push str.nSegmentsListsFiles
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x330], eax
test eax, eax
je 0x4c1f10
cmp dword [eax + 0xc], 0
jne 0x4c1f10
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x330], 0
mov byte [ebp - 4], 0xf3
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xf4
test eax, eax
je 0x4c1f48
push str.SegmentsListsSize
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x334], eax
test eax, eax
je 0x4c1f52
cmp dword [eax + 0xc], 0
jne 0x4c1f52
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x334], 0
mov byte [ebp - 4], 0xf5
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xf6
test eax, eax
je 0x4c1f8a
push str.nFiles
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x338], eax
test eax, eax
je 0x4c1f94
cmp dword [eax + 0xc], 0
jne 0x4c1f94
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x338], 0
mov byte [ebp - 4], 0xf7
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xf8
test eax, eax
je 0x4c1fcc
push str.UsedSize
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x33c], eax
test eax, eax
je 0x4c1fd6
cmp dword [eax + 0xc], 0
jne 0x4c1fd6
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x33c], 0
mov byte [ebp - 4], 0xf9
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xfa
test eax, eax
je 0x4c200e
push str.nRefs
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x340], eax
test eax, eax
je 0x4c2018
cmp dword [eax + 0xc], 0
jne 0x4c2018
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x340], 0
mov byte [ebp - 4], 0xfb
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xfc
test eax, eax
je 0x4c2050
push str.UsersStat
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x344], eax
test eax, eax
je 0x4c205a
cmp dword [eax + 0xc], 0
jne 0x4c205a
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x344], 0
mov byte [ebp - 4], 0xfd
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xfe
test eax, eax
je 0x4c2092
push str.UserStat
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x348], eax
test eax, eax
je 0x4c209c
cmp dword [eax + 0xc], 0
jne 0x4c209c
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x348], 0
mov byte [ebp - 4], 0xff
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0x100
test eax, eax
je 0x4c20d7
push str.Balance
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x34c], eax
test eax, eax
je 0x4c20e1
cmp dword [eax + 0xc], 0
jne 0x4c20e1
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x34c], 0
mov dword [ebp - 4], 0x101
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x4c211c
push str.MinBalance
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x350], eax
test eax, eax
je 0x4c2126
cmp dword [eax + 0xc], 0
jne 0x4c2126
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x350], 0
mov byte [ebp - 4], 3
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 4
test eax, eax
je 0x4c215e
push str.LastLogin
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x354], eax
test eax, eax
je 0x4c2168
cmp dword [eax + 0xc], 0
jne 0x4c2168
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x354], 0
mov byte [ebp - 4], 5
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x4c21a0
push str.TimeLimit
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x358], eax
test eax, eax
je 0x4c21aa
cmp dword [eax + 0xc], 0
jne 0x4c21aa
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x358], 0
mov byte [ebp - 4], 7
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 8
test eax, eax
je 0x4c21e2
push str.ConnX
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x35c], eax
test eax, eax
je 0x4c21ec
cmp dword [eax + 0xc], 0
jne 0x4c21ec
push ecx
mov ecx, eax
call fcn.005a47b0
mov dword [esi + 0x35c], 0
mov byte [ebp - 4], 9
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xa
test eax, eax
je 0x4c2224
push str.ConnMax
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x360], eax
test eax, eax
je 0x4c222e
cmp dword [eax + 0xc], 0
jne 0x4c222e
mov dword [esi + 0x360], 0
mov byte [ebp - 4], 0xb
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xc
test eax, eax
je 0x4c2266
push str.LastAddition
mov ecx, eax
call fcn.005a5480
mov dword [esi + 0x364], eax
test eax, eax
je 0x4c2270
mov dword [esi + 0x364], 0
mov byte [ebp - 4], 0xd
call fcn.005a45d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xe
test eax, eax
je 0x4c22a8