Function at 0x4e1877
Capabilities:
Check http status code
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
sub esp, 0x5c
push 0x250
mov eax, 0x5d7fbe
call fcn.005234b0
mov dword [ebp + 0x50], ecx
xor ebx, ebx
lea ecx, [ebp - 0x6c]
mov dword [ebp + 0x54], ebx
call fcn.004f770a
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xd0]
call fcn.004f7540
mov byte [ebp - 4], 2
push ebx
push 0x67a054
lea ecx, [ebp + 4]
call fcn.004ac9bc
mov byte [ebp - 4], 3
push ebx
push 0x6a8cb4
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 4
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 3
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp + 4]
call fcn.004ac66a
mov esi, 0x721f18
mov ecx, esi
call fcn.004bc869
test eax, eax
mov edi, str.ping3.dyngate.com
jne 0x4e197b
push ebx
inc eax
push eax
push 0x1732
push edi
lea ecx, [ebp + 0x2c]
mov dword [0x7223a0], eax
call fcn.004ac8da
mov byte [ebp - 4], 5
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x58], esp
push ebx
push 0x69dd8c
call fcn.004ac9bc
mov byte [ebp - 4], 6
push 0xc
lea ecx, [ebp + 0x2c]
call fcn.004acb45
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x28], esp
push ebx
push eax
call fcn.004ac9bc
mov byte [ebp - 4], 7
push ebx
push ebx
mov byte [ebp - 4], 5
call fcn.004f48ca
add esp, 0x58
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
cmp dword [0x7223a4], ebx
jne 0x4e19eb
xor eax, eax
push ebx
inc eax
push eax
push 0x50
push edi
lea ecx, [ebp + 0x2c]
mov dword [0x7223a4], eax
call fcn.004ac8da
mov byte [ebp - 4], 8
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x28], esp
push ebx
push 0x69dd8c
call fcn.004ac9bc
mov byte [ebp - 4], 9
push 0xc
lea ecx, [ebp + 0x2c]
call fcn.004acb45
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x58], esp
push ebx
push eax
call fcn.004ac9bc
mov byte [ebp - 4], 0xa
push ebx
push ebx
mov byte [ebp - 4], 8
call fcn.004f48ca
add esp, 0x58
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov dword [ebp + 0x58], ebx
mov edi, 0xc8
mov ecx, esi
call fcn.004bc869
cmp eax, 1
je 0x4e1a08
cmp dword [0x7223a4], 1
jne 0x4e1a38
cmp dword [ebp + 0x58], 0xfa0
jge 0x4e1a41
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp + 0x50]
add dword [ebp + 0x58], edi
cmp byte [eax], bl
je 0x4e19f3
mov ecx, dword [ebp + 0x68]
push ebx
push edi
call fcn.004ac6f7
mov dword [ebp + 0x54], 1
jmp 0x4e2ee5
cmp dword [ebp + 0x58], 0xfa0
jl 0x4e1a57
mov ecx, esi
call fcn.004bc869
cmp eax, 1
jne 0x4e1a57
mov dword [0x7223a0], 4
mov eax, dword [ebp + 0x50]
sub esp, 0x24
add eax, 0x1c
mov ecx, esp
mov dword [ebp + 0x28], esp
push eax
call fcn.004ac698
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 2
mov ecx, esi
call fcn.004bee9c
push eax
call fcn.004dd7f2
test al, al
pop ecx
jne 0x4e1a92
cmp byte [ebp + 0x6c], bl
je 0x4e1a92
mov ecx, dword [ebp + 0x50]
call fcn.004e12c7
mov eax, dword [ebp + 0x50]
sub esp, 0x24
add eax, 0x1c
mov ecx, esp
mov dword [ebp + 0x28], esp
push eax
call fcn.004ac698
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 2
mov ecx, esi
call fcn.004bee9c
push eax
call fcn.004dd7f2
test al, al
pop ecx
jne 0x4e1acf
mov ecx, dword [ebp + 0x68]
push ebx
push edi
call fcn.004ac6f7
jmp 0x4e1a2c
cmp byte [0x7422d8], bl
je 0x4e1af5
mov ecx, dword [ebp + 0x50]
call fcn.004de381
test eax, eax
jne 0x4e1af5
mov ecx, dword [ebp + 0x50]
call fcn.004de491
test eax, eax
jne 0x4e1af5
mov byte [0x7422d8], bl
cmp byte [ebp + 0x70], bl
je 0x4e1b44
push ebx
push 1
lea ecx, [ebp + 4]
call fcn.004ac6f7
mov byte [ebp - 4], 0xd
push ebx
push str.Keepalive
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0xe
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0xd
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp + 4]
call fcn.004ac66a
mov edi, dword [0x722050]
push ebx
mov ecx, 0x721f90
call fcn.004cc25d
sub eax, edi
push eax
lea ecx, [ebp + 4]
call fcn.004ac7aa
mov byte [ebp - 4], 0xf
push ebx
push str.Runtime
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x10
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0xf
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp + 4]
call fcn.004ac66a
mov ecx, 0x722058
call fcn.004c9179
test al, al
je 0x4e1bf7
push ebx
push 1
lea ecx, [ebp + 4]
call fcn.004ac6f7
mov byte [ebp - 4], 0x11
push ebx
push str.Commercial
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x12
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x11
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp + 4]
call fcn.004ac66a
lea eax, [ebp - 0x30]
push eax
mov ecx, esi
call fcn.0044098a
mov byte [ebp - 4], 0x13
cmp dword [eax], ebx
je 0x4e1c13
cmp dword [eax + 4], ebx
je 0x4e1c13
xor eax, eax
jmp 0x4e1c16
xor eax, eax
inc eax
cmp al, bl
sete byte [ebp + 0x5f]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x30]
call fcn.004ac66a
cmp byte [ebp + 0x5f], bl
mov edi, str.Router
je 0x4e1c75
push ebx
push edi
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x30]
push eax
mov ecx, esi
call fcn.0044098a
mov byte [ebp - 4], 0x15
push ebx
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x30]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov dword [ebp - 4], 2
mov ecx, esi
call fcn.004bc869
cmp eax, 3
je 0x4e1ccb
mov ecx, esi
call fcn.004bc869
cmp eax, 6
je 0x4e1ccb
push ebx
push ebx
lea ecx, [ebp + 4]
call fcn.004ac6f7
mov byte [ebp - 4], 0x1b
push ebx
push str.TCPOUT
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1c
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x1b
jmp 0x4e1d01
push ebx
push 1
lea ecx, [ebp + 4]
call fcn.004ac6f7
mov byte [ebp - 4], 0x19
push ebx
push str.TCPOUT
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1a
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x19
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp + 4]
call fcn.004ac66a
mov eax, dword [0x7223a4]
cmp eax, 5
je 0x4e1d5c
cmp eax, 7
je 0x4e1d5c
push ebx
push 1
lea ecx, [ebp + 4]
call fcn.004ac6f7
mov byte [ebp - 4], 0x1f
push ebx
push str.HTTPOUT
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x20
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x1f
jmp 0x4e1d92
push ebx
push 2
lea ecx, [ebp + 4]
call fcn.004ac6f7
mov byte [ebp - 4], 0x1d
push ebx
push str.HTTPOUT
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1e
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x1d
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp + 4]
call fcn.004ac66a
mov eax, dword [0x727474]
cmp eax, ebx
je 0x4e1e6b
cmp dword [eax + 0x38], ebx
je 0x4e1e6b
push ebx
push 0x69ee08
lea ecx, [ebp + 4]
call fcn.004ac9bc
mov byte [ebp - 4], 0x21
push ebx
push str.Client
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x22
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x21
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp + 4]
call fcn.004ac66a
push ebx
push str.VPNMAC
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x23
mov esi, dword [0x727474]
push ecx
push ecx
add esi, 0x30
mov edi, esp
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x30]
push eax
movsw word es:[edi], word [esi]
call fcn.004c8e4a
add esp, 0xc
mov byte [ebp - 4], 0x24
push ebx
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x30]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov esi, 0x721f18
jmp 0x4e1f74
cmp byte [0x7222b1], bl
push ebx
lea ecx, [ebp + 4]
je 0x4e1ead
push edi
call fcn.004ac9bc
mov byte [ebp - 4], 0x25
push ebx
push str.Client
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x26
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x25
jmp 0x4e1f60
cmp byte [0x7222b3], bl
je 0x4e1eec
push str.TVQSC
call fcn.004ac9bc
mov byte [ebp - 4], 0x29
push ebx
push str.Client
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x2a
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x29
jmp 0x4e1f60
cmp byte [0x7222b2], bl
je 0x4e1f2b
push str.TVQS
call fcn.004ac9bc
mov byte [ebp - 4], 0x2b
push ebx
push str.Client
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x2c
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x2b
jmp 0x4e1f60
push 0x67a560
call fcn.004ac9bc
mov byte [ebp - 4], 0x2d
push ebx
push str.Client
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x2e
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x2d
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp + 4]
call fcn.004ac66a
mov ecx, esi
call fcn.004bc801
test al, al
je 0x4e1f92
mov ecx, esi
call fcn.004bc820
cmp eax, 0x190
je 0x4e1f92
xor eax, eax
inc eax
jmp 0x4e1f9b
mov dword [ebp - 4], 2
xor eax, eax
push ebx
push eax
lea ecx, [ebp + 4]
call fcn.004ac6f7
mov byte [ebp - 4], 0x35
push ebx
push 0x67a7c4
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x36
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x35
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp + 4]
call fcn.004ac66a
push ebx
mov ecx, esi
call fcn.004bc820
push eax
lea ecx, [ebp + 4]
call fcn.004ac6f7
mov byte [ebp - 4], 0x37
push ebx
push str.GWLevel
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x38
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x37
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp + 4]
call fcn.004ac66a
push ebx
mov ecx, 0x722058
call fcn.004c9164
push eax
lea ecx, [ebp + 4]
call fcn.004ac6f7
mov byte [ebp - 4], 0x39
push ebx
push str.LicenseType
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x3a
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x39
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp + 4]
call fcn.004ac66a
push ebx
push 0x67a050
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0x30]
push eax
mov ecx, esi
call fcn.004bc730
mov byte [ebp - 4], 0x3c
push ebx
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x30]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
lea ecx, [ebp - 0x160]
call fcn.004ac634
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x13c]
call fcn.004ac634
mov byte [ebp - 4], 0x3e
push ebx
mov edi, 0x6a1910
push edi
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x3f
push ebx
push 0x50
lea ecx, [ebp - 0x1cc]
call fcn.004ac6f7
mov dword [ebp + 0x58], eax
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0xf4]
push 3
push eax
call fcn.004c34b3
mov byte [ebp - 4], 0x41
push dword [ebp + 0x58]
lea ecx, [ebp + 0x2c]
push ecx
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004adc95
add esp, 0x18
mov byte [ebp - 4], 0x42
push eax
lea ecx, [ebp - 0x160]
call fcn.004acaa2
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x30]
call fcn.004ac66a
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0xf4]
call fcn.004ac66a
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x1cc]
call fcn.004ac66a
mov byte [ebp - 4], 0x3e
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
push ebx
push edi
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x43
push ebx
push 0x1732
lea ecx, [ebp - 0x1cc]
call fcn.004ac6f7
mov edi, eax
mov byte [ebp - 4], 0x44
lea eax, [ebp - 0xf4]
push 3
push eax
call fcn.004c34b3
mov byte [ebp - 4], 0x45
push edi
lea ecx, [ebp + 0x2c]
push ecx
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004adc95
add esp, 0x18
mov byte [ebp - 4], 0x46
push eax
lea ecx, [ebp - 0x13c]
call fcn.004acaa2
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x30]
call fcn.004ac66a
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0xf4]
call fcn.004ac66a
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x1cc]
call fcn.004ac66a
mov byte [ebp - 4], 0x3e
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
push ebx
push 0x50
call fcn.004e8322
test eax, eax
pop ecx
pop ecx
je 0x4e224f
push ebx
push str.HTTPIN
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x47
push ebx
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x3e
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
push ebx
push 0x1732
call fcn.004e8322
test eax, eax
pop ecx
pop ecx
je 0x4e2292
push ebx
push str.TCPIN
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x48
push ebx
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x3e
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x721f90
call fcn.004dd78b
mov byte [ebp - 4], 0x49
cmp dword [eax], ebx
je 0x4e22b1
cmp dword [eax + 4], ebx
je 0x4e22b1
xor eax, eax
jmp 0x4e22b4
xor eax, eax
inc eax
cmp al, bl
sete byte [ebp + 0x5f]
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x30]
call fcn.004ac66a
cmp byte [ebp + 0x5f], bl
je 0x4e233d
push ebx
push str.LastKeepalivePerformance
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x4a
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x721f90
call fcn.004dd78b
mov byte [ebp - 4], 0x4b
push ebx
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x30]
call fcn.004ac66a
mov byte [ebp - 4], 0x3e
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x28], esp
push ebx
mov edi, 0x69dd8c
push edi
call fcn.004ac9bc
mov byte [ebp - 4], 0x4c
mov byte [ebp - 4], 0x3e
mov ecx, 0x721f90
call fcn.004d0858
jmp 0x4e2342
mov edi, 0x69dd8c
push 0x73f15c
mov ecx, esi
call fcn.004bb12e
cmp eax, ebx
je 0x4e239b
push ebx
push eax
lea ecx, [ebp + 4]
call fcn.004ac6f7
mov byte [ebp - 4], 0x4d
push ebx
push str.UsageEnvironment
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x4e
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x4d
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov byte [ebp - 4], 0x3e
lea ecx, [ebp + 4]
call fcn.004ac66a
push ebx
push str.NoOfActiveKeepalive
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x4f
push ebx
push dword [0x721fcc]
lea ecx, [ebp - 0x30]
call fcn.004ac6f7
mov byte [ebp - 4], 0x50
push ebx
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x30]
call fcn.004ac66a
mov byte [ebp - 4], 0x3e
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
lea eax, [ebp - 0x1a0]
push 0x484
push eax
call fcn.004b9340
pop ecx
pop ecx
mov byte [ebp - 4], 0x51
cmp dword [eax + 0x18], 8
jb 0x4e2408
mov eax, dword [eax + 4]
jmp 0x4e240b
add eax, 4
push ebx
push eax
lea ecx, [ebp + 4]
call fcn.004ac9bc
mov byte [ebp - 4], 0x52
push ebx
push str.Language
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x53
push ebx
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f7746
mov byte [ebp - 4], 0x52
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov byte [ebp - 4], 0x51
lea ecx, [ebp + 4]
call fcn.004ac66a
mov byte [ebp - 4], 0x3e
push ebx
push 1
lea ecx, [ebp - 0x1a0]
call fcn.00410779
mov ecx, dword [ebp + 0x50]
push ebx
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004ddb22
cmp dword [ebp - 0xd0], ebx
jne 0x4e2dee
push ecx
mov ecx, esp
mov dword [ebp + 0x28], esp
push 0x679f08
call fcn.00411379
mov byte [ebp - 4], 0x54
push 0x73f15c
mov byte [ebp - 4], 0x3e
mov ecx, esi
call fcn.004ba3bc
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.004ac9bc
mov byte [ebp - 4], 0x55
push ebx
push edi
lea ecx, [ebp - 0xf4]
call fcn.004ac9bc
mov byte [ebp - 4], 0x56
push ebx
push edi
lea ecx, [ebp - 0x1cc]
call fcn.004ac9bc
mov byte [ebp - 4], 0x57
push ebx
push edi
lea ecx, [ebp - 0x238]
call fcn.004ac9bc
mov byte [ebp - 4], 0x58
push ebx
push edi
lea ecx, [ebp - 0x214]
call fcn.004ac9bc
mov byte [ebp - 4], 0x59
push ebx
push edi
lea ecx, [ebp - 0x25c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x5a
push ebx
push edi
lea ecx, [ebp - 0x1a8]
call fcn.004ac9bc
mov byte [ebp - 4], 0x5b
push ebx
push edi
lea ecx, [ebp - 0x118]
call fcn.004ac9bc
mov byte [ebp - 4], 0x5c
push ebx
push 0x6ab700
lea ecx, [ebp - 0x184]
call fcn.004ac9bc
mov byte [ebp - 4], 0x5d
push ebx
push 0x69ec70
lea ecx, [ebp + 4]
call fcn.004ac9bc
mov byte [ebp - 4], 0x5e
push ebx
push str.MC.L
lea ecx, [ebp + 0x2c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x5f
push ebx
push ebx
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x90]
call fcn.004ac6f7
mov dword [ebp + 0x58], eax
mov byte [ebp - 4], 0x60
lea eax, [ebp - 0x1f0]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f6999
mov byte [ebp - 4], 0x61
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x28], esp
lea edx, [ebp - 0x30]
push edx
lea edx, [ebp - 0xf4]
push edx
lea edx, [ebp - 0x1cc]
push edx
lea edx, [ebp - 0x238]
push edx
lea edx, [ebp - 0x214]
push edx
lea edx, [ebp - 0x25c]
push edx
lea edx, [ebp - 0x1a8]
push edx
lea edx, [ebp - 0x118]
push edx
lea edx, [ebp - 0xcc]
push edx
lea edx, [ebp - 0x184]
push edx
push dword [ebp + 0x58]
lea edx, [ebp + 4]
push edx
push eax
lea eax, [ebp + 0x2c]
push eax
push ecx
call fcn.004add2f
add esp, 0x3c
mov byte [ebp - 4], 0x62
mov byte [ebp - 4], 0x61
mov ecx, esi
call fcn.004112c4
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x1f0]
call fcn.004ac66a
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x90]
call fcn.004ac66a
mov byte [ebp - 4], 0x5e
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
mov byte [ebp - 4], 0x5d
lea ecx, [ebp + 4]
call fcn.004ac66a
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x184]
call fcn.004ac66a
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x118]
call fcn.004ac66a
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x1a8]
call fcn.004ac66a
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x25c]
call fcn.004ac66a
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x214]
call fcn.004ac66a
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x238]
call fcn.004ac66a
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x1cc]
call fcn.004ac66a
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xf4]
call fcn.004ac66a
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x30]
call fcn.004ac66a
push 0x67a2ec
lea ecx, [ebp - 0xcc]
call fcn.004acb07
test al, al
je 0x4e274b
mov edi, dword [ebp + 0x50]
push ebx
sub esp, 0x24
lea eax, [edi + 0x1c]
mov ecx, esp
mov dword [ebp + 0x28], esp
push eax
call fcn.004ac698
mov byte [ebp - 4], 0x63
mov byte [ebp - 4], 0x3e
mov ecx, esi
call fcn.004bedff
cmp byte [ebp + 0x6c], bl
je 0x4e2eb2
mov ecx, edi
call fcn.004e12c7
test eax, eax
jle 0x4e2eb2
cmp byte [0x7422d8], bl
je 0x4e2732
mov ecx, edi
call fcn.004de381
test eax, eax
jne 0x4e2732
mov ecx, edi
call fcn.004de491
test eax, eax
jne 0x4e2732
mov byte [0x7422d8], bl
push dword [ebp + 0x78]
mov ecx, edi
push dword [ebp + 0x74]
push dword [ebp + 0x70]
push ebx
push dword [ebp + 0x68]
call fcn.004e1877
jmp 0x4e2ec0
push str.BLOCKED
lea ecx, [ebp - 0xcc]
call fcn.004acb07
test al, al
je 0x4e276f
push ebx
mov ecx, 0x7220d0
call fcn.004c4dcf
jmp 0x4e2eb2
push 2
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0xd0]
call fcn.004f757d
mov byte [ebp - 4], 0x64
push ebx
mov ecx, eax
call fcn.004ad7d0
mov dword [ebp + 0x58], eax
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x90]
call fcn.004ac66a
cmp dword [ebp + 0x58], ebx
jge 0x4e27fa
cmp byte [ebp + 0x70], bl
je 0x4e27fa
sub esp, 0x1c
mov eax, esp
mov dword [ebp + 0x28], esp
push 0x45a
push eax
call fcn.004b9340
mov byte [ebp - 4], 0x65
sub esp, 0x14
mov eax, esp
mov dword [ebp], esp
push 0x45b
push eax
call fcn.004b9340
pop ecx
pop ecx
mov byte [ebp - 4], 0x66
mov byte [ebp - 4], 0x3e
mov ecx, 0x7220d0
call fcn.004c4c6c
push dword [ebp + 0x58]
call fcn.00526286
pop ecx
mov dword [ebp + 0x58], eax
jmp 0x4e2904
lea eax, [ebp - 0x90]
push eax
mov ecx, 0x722058
call fcn.0043b66b
mov byte [ebp - 4], 0x67
push edi
mov ecx, eax
mov dword [ebp + 0x54], 0x20
call fcn.004acb1a
test al, al
je 0x4e2836
mov eax, dword [ebp + 0x58]
cdq
mov ecx, 0x3e8
idiv ecx
mov byte [ebp + 0x5f], 1
cmp eax, 0x1f
jne 0x4e2839
mov byte [ebp + 0x5f], bl
mov dword [ebp - 4], 0x3e
mov dword [ebp + 0x54], 0x20
and dword [ebp + 0x54], 0xffffffdf
lea ecx, [ebp - 0x90]
call fcn.004ac66a
cmp byte [ebp + 0x5f], bl
je 0x4e2904
lea eax, [ebp - 0x90]
push eax
mov ecx, 0x722058
call fcn.0043b66b
mov byte [ebp - 4], 0x68
push str.00_00000_000000_000000
mov ecx, eax
call fcn.004acb1a
mov byte [ebp + 0x5f], al
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x90]
call fcn.004ac66a
cmp byte [ebp + 0x5f], bl
je 0x4e2904
sub esp, 0x1c
mov ecx, esp
mov dword [ebp], esp
push 0x69e834
call fcn.004120e9
mov byte [ebp - 4], 0x69
lea eax, [ebp - 0x1a0]
push 0x47b
push eax
call fcn.004b9340
pop ecx
pop ecx
mov byte [ebp - 4], 0x6a
cmp dword [eax + 0x18], 8
jb 0x4e28cf
mov eax, dword [eax + 4]
jmp 0x4e28d2
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp + 0x28], esp
push eax
call fcn.004120e9
mov byte [ebp - 4], 0x6b
mov byte [ebp - 4], 0x6c
mov ecx, 0x7220d0
call fcn.004c4c6c
mov byte [ebp - 4], 0x3e
push ebx
push 1
lea ecx, [ebp - 0x1a0]
call fcn.00410779
push dword [ebp + 0x58]
mov ecx, 0x722058
call fcn.004c9e6b
push 3
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.004f757d
mov byte [ebp - 4], 0x6d
lea eax, [ebp + 0x2c]
push eax
mov ecx, 0x722060
call fcn.004acaa2
push 4
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0xd0]
call fcn.004f757d
mov byte [ebp - 4], 0x6e
push 5
lea eax, [ebp + 4]
push eax
lea ecx, [ebp - 0xd0]
call fcn.004f757d
mov byte [ebp - 4], 0x6f
push 7
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0xd0]
call fcn.004f757d
mov byte [ebp - 4], 0x70
push ebx
mov ecx, eax
call fcn.004ad7d0
mov dword [ebp + 0x58], eax
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x90]
call fcn.004ac66a
push 9
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0xd0]
call fcn.004f757d
mov byte [ebp - 4], 0x71
cmp dword [eax], ebx
je 0x4e29b8
cmp dword [eax + 4], ebx
je 0x4e29b8
xor eax, eax
jmp 0x4e29bb
xor eax, eax
inc eax
cmp al, bl
sete byte [ebp + 0x5f]
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x90]
call fcn.004ac66a
cmp byte [ebp + 0x5f], bl
je 0x4e2a4f
mov edi, dword [ebp + 0x74]
cmp edi, ebx
je 0x4e2a16
push 8
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0xd0]
call fcn.004f757d
mov byte [ebp - 4], 0x72
mov ecx, eax
call fcn.004ad732
mov dword [edi], eax
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x90]
call fcn.004ac66a
cmp dword [edi], ebx
jne 0x4e2a16
mov dword [edi], 1
mov edi, dword [ebp + 0x78]
cmp edi, ebx
je 0x4e2a62
push 9
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0xd0]
call fcn.004f757d
mov byte [ebp - 4], 0x73
mov ecx, eax
call fcn.004ad732
mov dword [edi], eax
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x90]
call fcn.004ac66a
jmp 0x4e2a62
mov eax, dword [ebp + 0x74]
cmp eax, ebx
je 0x4e2a59
or dword [eax], 0xffffffff
mov eax, dword [ebp + 0x78]
cmp eax, ebx
je 0x4e2a62
mov dword [eax], ebx
push 0xc
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0xd0]
call fcn.004f757d
mov byte [ebp - 4], 0x74
cmp dword [eax], ebx
je 0x4e2a87
cmp dword [eax + 4], ebx
je 0x4e2a87
xor eax, eax
jmp 0x4e2a8a
xor eax, eax
inc eax
cmp al, bl
sete byte [ebp + 0x5f]
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x90]
call fcn.004ac66a
cmp byte [ebp + 0x5f], bl
je 0x4e2ac9
sub esp, 0x24
mov eax, esp
mov dword [ebp], esp
push 0xc
push eax
lea ecx, [ebp - 0xd0]
call fcn.004f757d
mov byte [ebp - 4], 0x75
mov byte [ebp - 4], 0x6f
mov ecx, esi
call fcn.004dd80b
push 0xd
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0xd0]
call fcn.004f757d
mov byte [ebp - 4], 0x76
cmp dword [eax], ebx
je 0x4e2aee
cmp dword [eax + 4], ebx
je 0x4e2aee
xor eax, eax
jmp 0x4e2af1
xor eax, eax
inc eax
cmp al, bl
sete byte [ebp + 0x5f]
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x90]
call fcn.004ac66a
cmp byte [ebp + 0x5f], bl
je 0x4e2b30
sub esp, 0x24
mov eax, esp
mov dword [ebp], esp
push 0xd
push eax
lea ecx, [ebp - 0xd0]
call fcn.004f757d
mov byte [ebp - 4], 0x77
mov byte [ebp - 4], 0x6f
mov ecx, esi
call fcn.004dd83e
push 0xa
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0xd0]
call fcn.004f757d
mov byte [ebp - 4], 0x78
cmp dword [ebp - 0x184], ebx
je 0x4e2b6a
cmp dword [ebp - 0x180], ebx
je 0x4e2b6a
lea eax, [ebp - 0x184]
push eax
call fcn.004ade7b
pop ecx
mov dword [0x722424], eax
mov ecx, dword [0x73fd54]
call fcn.004e46eb
cmp dword [ebp + 0x58], ebx
mov edi, eax
je 0x4e2b85
cmp dword [ebp + 0x58], edi
je 0x4e2ca2
cmp byte [ebp + 0x6c], bl
je 0x4e2bee
mov ecx, dword [ebp + 0x50]
call fcn.004de381
mov ecx, dword [ebp + 0x50]
call fcn.004de491
push dword [ebp + 0x78]
mov ecx, dword [ebp + 0x50]
push dword [ebp + 0x74]
push dword [ebp + 0x70]
push ebx
push dword [ebp + 0x68]
call fcn.004e1877
or dword [ebp + 0x54], 1
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x184]
call fcn.004ac66a
mov byte [ebp - 4], 0x6e
lea ecx, [ebp + 4]
call fcn.004ac66a
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x118]
call fcn.004ac66a
mov byte [ebp - 4], 0x3e
lea ecx, [ebp + 0x2c]
call fcn.004ac66a
jmp 0x4e2ec7
push ebx
push str._MH
lea ecx, [ebp - 0xf4]
call fcn.004ac9bc
mov byte [ebp - 4], 0x79
push ebx
push str.MC.Login.WrongKey_SH
lea ecx, [ebp - 0x30]
call fcn.004ac9bc
mov byte [ebp - 4], 0x7a
push ebx
push ebx
push edi
lea ecx, [ebp - 0x1f0]
call fcn.004ac6f7
mov edi, eax
mov byte [ebp - 4], 0x7b
push ebx
push dword [ebp + 0x58]
lea ecx, [ebp - 0x90]
call fcn.004ac6f7
mov byte [ebp - 4], 0x7c
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x6c], esp
push edi
lea edx, [ebp - 0xf4]
push edx
push eax
lea eax, [ebp - 0x30]
push eax
push ecx
call fcn.004adcdd
add esp, 0x14
mov byte [ebp - 4], 0x7d
mov byte [ebp - 4], 0x7c
mov ecx, esi
call fcn.0041122b
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x90]
call fcn.004ac66a
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x1f0]
call fcn.004ac66a
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x30]
call fcn.004ac66a
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0xf4]
call fcn.004ac66a
cmp dword [ebp + 4], ebx
je 0x4e2cdf
cmp dword [ebp + 8], ebx
je 0x4e2cdf
mov ecx, esi
call fcn.0043b6b3
test al, al
je 0x4e2cdf
sub esp, 0x24
lea eax, [ebp + 4]
mov ecx, esp
mov dword [ebp + 0x6c], esp
push eax
call fcn.004ac698
mov byte [ebp - 4], 0x7e
mov byte [ebp - 4], 0x78
mov ecx, esi
call fcn.004bf4ce
push ebx
mov ecx, esi
call fcn.004bff9f
mov ecx, dword [0x7224e0]
cmp ecx, ebx
je 0x4e2cee
call fcn.004e8809
xor edi, edi
inc edi
mov esi, 0x7220d0
push edi
mov ecx, esi
call fcn.004c4dcf
push ebx
push ebx
push 3
sub esp, 0x1c
mov eax, esp
mov dword [ebp + 0x6c], esp
push 0x491
push eax
call fcn.004b9340
pop ecx
pop ecx
mov byte [ebp - 4], 0x7f
mov byte [ebp - 4], 0x78
mov ecx, esi
call fcn.004c4e06
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x6c], esp
push ebx
push 2
call fcn.004ac6f7
mov byte [ebp - 4], 0x80
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x118]
call fcn.0043f82b
cmp al, bl
je 0x4e2db7
push 6
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0xd0]
call fcn.004f757d
mov byte [ebp - 4], 0x81
push ebx
push 0x6a2cac
lea ecx, [ebp - 0x30]
call fcn.004ac9bc
mov byte [ebp - 4], 0x82
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x118]
push eax
push dword [ebp + 0x68]
call fcn.004adc95
or dword [ebp + 0x54], edi
add esp, 0x10
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x30]
call fcn.004ac66a
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0xf4]
call fcn.004ac66a
jmp 0x4e2bb3
cmp dword [ebp - 0x118], ebx
je 0x4e2dde
cmp dword [ebp - 0x114], ebx
je 0x4e2dde
mov ecx, dword [ebp + 0x68]
lea eax, [ebp - 0x118]
push eax
call fcn.004ac698
or dword [ebp + 0x54], edi
jmp 0x4e2bb3
mov ecx, dword [ebp + 0x68]
push ebx
push 0x6a17d4
call fcn.004ac9bc
jmp 0x4e2dd6
push ebx
mov ecx, 0x7220d0
call fcn.004c4dcf
push ebx
push 0x69ec70
lea ecx, [ebp - 0xf4]
call fcn.004ac9bc
mov byte [ebp - 4], 0x83
push ebx
push str.MC.L
lea ecx, [ebp - 0x30]
call fcn.004ac9bc
mov byte [ebp - 4], 0x84
push ebx
push ebx
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x1f0]
call fcn.004ac6f7
mov edi, eax
mov byte [ebp - 4], 0x85
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004f6999
mov byte [ebp - 4], 0x86
sub esp, 0x24
mov ecx, esp
mov dword [ebp + 0x6c], esp
push edi
lea edx, [ebp - 0xf4]
push edx
push eax
lea eax, [ebp - 0x30]
push eax
push ecx
call fcn.004adcdd
add esp, 0x14
mov byte [ebp - 4], 0x87
mov byte [ebp - 4], 0x86
mov ecx, esi
call fcn.0041122b
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x90]
call fcn.004ac66a
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x1f0]
call fcn.004ac66a
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x30]
call fcn.004ac66a
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0xf4]
call fcn.004ac66a
mov ecx, dword [ebp + 0x68]
push ebx
push 0xc8
call fcn.004ac6f7
mov dword [ebp + 0x54], 1
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x13c]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x160]
call fcn.004ac66a
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd0]
call fcn.004f6c6f
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x6c]
call fcn.004f74fc
mov eax, dword [ebp + 0x68]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add ebp, 0x60
leave
ret 0x14