Function at 0x489de0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x747d14
mov eax, dword fs:[0]
push eax
sub esp, 0x144
mov eax, dword [0x81f390]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0xd4]
push 0xd
push str.GlobalSetting
mov dword [ebp - 0xc0], 0xf
mov dword [ebp - 0xc4], 0
mov byte [ebp - 0xd4], 0
call fcn.00409620
mov dword [ebp - 0xd8], vtable.wbs::StringBase_char_.0
lea eax, [ebp - 0xd8]
mov dword [ebp - 4], 0
push eax
mov ecx, esi
call fcn.00485720
test eax, eax
je 0x489e69
add eax, 4
jmp 0x489e6b
xor eax, eax
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x88], 0xf
mov dword [ebp - 0x8c], 0
mov byte [ebp - 0x9c], 0
call fcn.00404c20
mov dword [ebp - 0xa0], vtable.wbs::StringBase_char_.0
cmp dword [ebp - 0xc0], 0x10
mov byte [ebp - 4], 2
mov dword [ebp - 0xd8], vtable.wbs::StringBase_char_.0
jb 0x489ec5
push dword [ebp - 0xd4]
call fcn.006f75a9
add esp, 4
push 8
push str.Advanced
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0xc0], 0xf
push 0
mov dword [ebp - 0xc4], 0
mov byte [ebp - 0xd4], 0
call fcn.00404d40
test eax, eax
jne 0x48a439
push 7
push str.AclList
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x2c], al
call fcn.00409620
mov dword [ebp - 0x30], vtable.wbs::StringBase_char_.0
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 3
push eax
mov ecx, esi
call fcn.00485720
test eax, eax
je 0x489f3d
add eax, 4
jmp 0x489f3f
xor eax, eax
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x6c], 0xf
mov dword [ebp - 0x70], 0
mov byte [ebp - 0x80], 0
call fcn.00404c20
mov dword [ebp - 0x84], vtable.wbs::StringBase_char_.0
cmp dword [ebp - 0x18], 0x10
mov dword [ebp - 0x30], vtable.wbs::StringBase_char_.0
jb 0x489f80
push dword [ebp - 0x2c]
call fcn.006f75a9
add esp, 4
xor eax, eax
mov dword [ebp - 0x50], 7
mov dword [ebp - 0x54], 0
mov word [ebp - 0x64], ax
mov dword [ebp - 0x68], vtable.wbs::StringBase_wchar_t_.0
cmp dword [ebp - 0x6c], 0x10
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 6
cmovae eax, dword [ebp - 0x80]
push eax
call fcn.004f67e0
lea ecx, [ebp - 0x144]
call fcn.00534b20
push 4
push 0x784a40
push dword [ebp - 0x70]
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 7
push 0
call fcn.00404d40
test eax, eax
jne 0x48a0aa
mov ecx, dword [0x833348]
mov byte [ebp - 4], 8
mov eax, dword [ecx + 0x80]
add eax, 4
push eax
push dword [ecx + 0x3ec]
call fcn.0048f990
add esp, 8
jmp 0x48a11f
lea ecx, [ebp - 0xa0]
call fcn.0061b700
mov eax, 0x190
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.006f7ca4
mov esp, ebp
pop ebp
ret 4
lea eax, [ebp - 0x148]
mov dword [ebp - 0x148], 0
push eax
lea eax, [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x144]
lea ecx, [ebp - 0x144]
mov eax, dword [eax + 4]
call eax
test al, al
je 0x48a3a7
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.00543650
add esp, 8
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0xc
push eax
mov eax, dword [0x833348]
push dword [eax + 0x3ec]
call fcn.0048f990
add esp, 8
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x12c]
call fcn.00480ef0
push 0xd
push str.AccessControl
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 7
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
call fcn.00409620
mov dword [ebp - 0x30], vtable.wbs::StringBase_char_.0
mov ecx, dword [0x833348]
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ecx + 0x3ec]
call fcn.004ffeb0
cmp dword [ebp - 0x18], 0x10
mov byte [ebp - 4], 7
mov dword [ebp - 0x30], vtable.wbs::StringBase_char_.0
jb 0x48a183
push dword [ebp - 0x2c]
call fcn.006f75a9
add esp, 4
push 7
push str.Enabled
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
call fcn.00409620
mov dword [ebp - 0x30], vtable.wbs::StringBase_char_.0
mov ecx, dword [0x833348]
lea eax, [ebp - 0x30]
push 1
push eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ecx + 0x3ec]
call fcn.00501150
cmp dword [ebp - 0x18], 0x10
mov byte [ebp - 4], 7
mov dword [ebp - 0x30], vtable.wbs::StringBase_char_.0
jb 0x48a1e2
push dword [ebp - 0x2c]
call fcn.006f75a9
add esp, 4
push 0
push 0x77e880
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
call fcn.00409620
mov dword [ebp - 0x30], vtable.wbs::StringBase_char_.0
mov ecx, dword [0x833348]
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ecx + 0x3ec]
call fcn.004ffeb0
cmp dword [ebp - 0x18], 0x10
mov byte [ebp - 4], 7
mov dword [ebp - 0x30], vtable.wbs::StringBase_char_.0
jb 0x48a23f
push dword [ebp - 0x2c]
call fcn.006f75a9
add esp, 4
push 1
push 0x781be8
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
call fcn.00409620
mov dword [ebp - 0x30], vtable.wbs::StringBase_char_.0
push 0x15
push str.AdvancedAccessControl
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 0x38], 0
mov byte [ebp - 0x48], 0
call fcn.00409620
mov dword [ebp - 0x4c], vtable.wbs::StringBase_char_.0
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00529600
add esp, 8
mov dword [ebp - 0x4c], vtable.wbs::StringBase_char_.0
cmp dword [ebp - 0x34], 0x10
jb 0x48a2bf
push dword [ebp - 0x48]
call fcn.006f75a9
add esp, 4
cmp dword [ebp - 0x18], 0x10
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 0x38], 0
mov byte [ebp - 0x48], 0
mov dword [ebp - 0x30], vtable.wbs::StringBase_char_.0
jb 0x48a2e9
push dword [ebp - 0x2c]
call fcn.006f75a9
add esp, 4
mov eax, dword [0x852b94]
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 6
mov byte [eax + 8], 1
call fcn.004589a0
cmp dword [ebp - 0x50], 8
mov dword [ebp - 0x68], vtable.wbs::StringBase_wchar_t_.0
jb 0x48a319
push dword [ebp - 0x64]
call fcn.006f75a9
add esp, 4
xor eax, eax
mov dword [ebp - 0x50], 7
cmp dword [ebp - 0x6c], 0x10
mov dword [ebp - 0x54], 0
mov word [ebp - 0x64], ax
mov byte [ebp - 4], 2
mov dword [ebp - 0x84], vtable.wbs::StringBase_char_.0
jb 0x48a87e
push dword [ebp - 0x80]
call fcn.006f75a9
add esp, 4
jmp 0x48a87e
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 6
call fcn.004589a0
cmp dword [ebp - 0x50], 8
mov dword [ebp - 0x68], vtable.wbs::StringBase_wchar_t_.0
jb 0x48a3ce
push dword [ebp - 0x64]
call fcn.006f75a9
add esp, 4
xor eax, eax
mov dword [ebp - 0x50], 7
cmp dword [ebp - 0x6c], 0x10
mov dword [ebp - 0x54], 0
mov word [ebp - 0x64], ax
mov dword [ebp - 0x84], vtable.wbs::StringBase_char_.0
jb 0x48a3fd
push dword [ebp - 0x80]
call fcn.006f75a9
add esp, 4
cmp dword [ebp - 0x88], 0x10
mov dword [ebp - 0x6c], 0xf
mov dword [ebp - 0x70], 0
mov byte [ebp - 0x80], 0
mov dword [ebp - 0xa0], vtable.wbs::StringBase_char_.0
jb 0x48a087
push dword [ebp - 0x9c]
call fcn.006f75a9
add esp, 4
jmp 0x48a087
push 5
push 0x784da0
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x9c]
push 0
call fcn.00404d40
test eax, eax
jne 0x48a07c
push 0xa
push str.ClientList
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x48], al
call fcn.00409620
mov dword [ebp - 0x4c], vtable.wbs::StringBase_char_.0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x14
push eax
mov ecx, esi
call fcn.00485720
test eax, eax
je 0x48a496
add eax, 4
jmp 0x48a498
xor eax, eax
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xdc], 0xf
mov dword [ebp - 0xe0], 0
mov byte [ebp - 0xf0], 0
call fcn.00404c20
mov dword [ebp - 0xf4], vtable.wbs::StringBase_char_.0
cmp dword [ebp - 0x34], 0x10
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x4c], vtable.wbs::StringBase_char_.0
jb 0x48a4e9
push dword [ebp - 0x48]
call fcn.006f75a9
add esp, 4
push 9
push str.AccessFsb
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 0x38], 0
mov byte [ebp - 0x48], 0
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
call fcn.00409620
mov dword [ebp - 0x30], vtable.wbs::StringBase_char_.0
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x17
push eax
mov ecx, esi
call fcn.00485720
test eax, eax
je 0x48a53b
add eax, 4
jmp 0x48a53d
xor eax, eax
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x50], 0xf
mov dword [ebp - 0x54], 0
mov byte [ebp - 0x64], 0
call fcn.00404c20
mov dword [ebp - 0x68], vtable.wbs::StringBase_char_.0
cmp dword [ebp - 0x18], 0x10
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x30], vtable.wbs::StringBase_char_.0
jb 0x48a57f
push dword [ebp - 0x2c]
call fcn.006f75a9
add esp, 4
push 0x10
push str.NetworkAccessFsb
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 0x38], 0
mov byte [ebp - 0x48], 0
call fcn.00409620
mov dword [ebp - 0x4c], vtable.wbs::StringBase_char_.0
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00529600
add esp, 8
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x34], 0x10
mov dword [ebp - 0x4c], vtable.wbs::StringBase_char_.0
jb 0x48a5e9
push dword [ebp - 0x48]
call fcn.006f75a9
add esp, 4
push str.NetworkAccessFsb
lea ecx, [ebp - 0x4c]
call fcn.00406a00
cmp dword [ebp - 0x50], 0x10
lea eax, [ebp - 0x64]
push 0xa
cmovae eax, dword [ebp - 0x64]
push 0
push eax
mov byte [ebp - 4], 0x1b
call fcn.006ff2c6
mov ecx, dword [0x833348]
add esp, 0xc
mov ecx, dword [ecx + 0x3ec]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00501150
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x19
call fcn.0061b700
cmp dword [ebp - 0x50], 0x10
lea eax, [ebp - 0x64]
cmovae eax, dword [ebp - 0x64]
push eax
call fcn.006ffc82
add esp, 4
test eax, eax
mov eax, dword [0x833348]
setne cl
mov byte [eax + 0x1dc], cl
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0
push 0x780254
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1c
call fcn.00406a00
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x12c]
call fcn.0050bb40
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1f
call fcn.0061b700
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x12c]
call fcn.0050bdc0
cmp dword [ebp - 0xa8], 0
mov byte [ebp - 4], 0x20
je 0x48a726
lea esp, [esp]
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x138]
call fcn.00409c30
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x12c]
call fcn.0050bdc0
push eax
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x21
call fcn.004f59b0
cmp dword [ebp - 0x18], 0x10
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x30], vtable.wbs::StringBase_char_.0
jb 0x48a71d
push dword [ebp - 0x2c]
call fcn.006f75a9
add esp, 4
cmp dword [ebp - 0xa8], 0
jne 0x48a6d0
push str.Client
lea ecx, [ebp - 0x30]
call fcn.00406a00
mov ecx, dword [0x833348]
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x22
push eax
mov ecx, dword [ecx + 0x3ec]
call fcn.00500cd0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x20
call fcn.0061b700
push str.AccessControl
lea ecx, [ebp - 0x30]
call fcn.00406a00
mov ecx, dword [0x833348]
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ecx + 0x3ec]
call fcn.004ffeb0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x20
call fcn.0061b700
push str.Enabled
lea ecx, [ebp - 0x30]
call fcn.00406a00
mov ecx, dword [0x833348]
lea eax, [ebp - 0x30]
push 0
push eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ecx + 0x3ec]
call fcn.00501150
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x20
call fcn.0061b700
push 0x77e880
lea ecx, [ebp - 0x30]
call fcn.00406a00
mov ecx, dword [0x833348]
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0x25
mov ecx, dword [ecx + 0x3ec]
call fcn.004ffeb0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x20
call fcn.0061b700
push 0x781ba4
lea ecx, [ebp - 0x4c]
call fcn.00406a00
push str.AdvancedAccessControl
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x26
call fcn.00406a00
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00529600
add esp, 8
lea ecx, [ebp - 0x30]
call fcn.0061b700
lea ecx, [ebp - 0x4c]
call fcn.0061b700
mov eax, dword [0x852b94]
lea ecx, [ebp - 0xbc]
mov byte [eax + 8], 1
call fcn.0061b700
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x12c]
call fcn.004a1580
lea ecx, [ebp - 0x138]
call fcn.0042d4f0
lea ecx, [ebp - 0x68]
call fcn.0061b700
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 2
call fcn.0061b700
push str.HttpConfigAccessMode
lea ecx, [ebp - 0xbc]
call fcn.00406a00
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x28
push eax
lea eax, [ebp - 0xbc]
push eax
call fcn.00529600
add esp, 8
mov dword [ebp - 0xbc], vtable.wbs::StringBase_char_.0
cmp dword [ebp - 0xa4], 0x10
jb 0x48a8c9
push dword [ebp - 0xb8]
call fcn.006f75a9
add esp, 4
cmp dword [ebp - 0x88], 0x10
mov dword [ebp - 0xa0], vtable.wbs::StringBase_char_.0
jb 0x48a8ea
push dword [ebp - 0x9c]
call fcn.006f75a9
add esp, 4
xor eax, eax
jmp 0x48a08c