Function at 0x44ee90
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Get local ipv4 addresses
Resolve dns
Resolve function by parsing pe exports
Send data
Send data on socket
Send http request

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
push 0xffffffffffffffff
push 0x58c788
mov eax, dword fs:[0]
push eax
sub esp, 0x8c
mov eax, dword [0x600f80]
xor eax, esp
mov dword [esp + 0x84], eax
push esi
push edi
mov eax, dword [0x600f80]
xor eax, esp
push eax
lea eax, [esp + 0x98]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x10], esi
lea ecx, [esp + 0x3c]
mov dword [esp + 0x18], 0
call fcn.004893f0
push 0x288
mov dword [esp + 0xa4], 0
push 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x40], 0x288
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edi, dword [sym.imp.KERNEL32.dll_HeapAlloc]
push eax
call edi
mov dword [esp + 0xc], eax
test eax, eax
je 0x44f0e3
mov esi, dword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
lea ecx, [esp + 0x38]
push ecx
push eax
call esi
cmp eax, 0x6f
jne 0x44ef67
push dword [esp + 0xc]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push dword [esp + 0x38]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call edi
mov edi, eax
mov dword [esp + 0xc], edi
test edi, edi
jne 0x44ef6b
jmp 0x44f0df
mov edi, dword [esp + 0xc]
lea eax, [esp + 0x38]
push eax
push edi
call esi
test eax, eax
jne 0x44f0cb
cmp dword [esp + 0xc], eax
je 0x44f0df
mov eax, dword [edi + 0x1a0]
mov ecx, 2
cmp eax, 6
je 0x44ef9e
cmp eax, 0x47
jne 0x44f0ae
xorps xmm0, xmm0
mov dword [esp + 0x34], 0
lea esi, [edi + 0x1b0]
movdqa xmmword [esp + 0x54], xmm0
push esi
movdqa xmmword [esp + 0x68], xmm0
movdqa xmmword [esp + 0x78], xmm0
mov word [esp + 0x58], cx
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [esp + 0x58], eax
mov eax, str.0.0.0.0
mov cl, byte [esi]
cmp cl, byte [eax]
jne 0x44eff6
test cl, cl
je 0x44eff2
mov cl, byte [esi + 1]
cmp cl, byte [eax + 1]
jne 0x44eff6
add esi, 2
add eax, 2
test cl, cl
jne 0x44efd6
xor eax, eax
jmp 0x44effb
sbb eax, eax
or eax, 1
test eax, eax
je 0x44f0ae
lea eax, [esp + 0x34]
mov dword [esp + 0x68], 2
push eax
lea eax, [esp + 0x68]
mov dword [esp + 0x70], 1
push eax
push str.http
push str.www.bradesco.com.br
mov dword [esp + 0x80], 6
call dword [sym.imp.WS2_32.dll_getaddrinfo]
test eax, eax
jne 0x44f0ae
mov eax, dword [esp + 0x14]
test eax, eax
je 0x44f04b
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
push 0
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov esi, eax
mov dword [esp + 0x14], esi
test esi, esi
js 0x44f14f
push 0x10
lea eax, [esp + 0x58]
push eax
push esi
call dword [sym.imp.WS2_32.dll_bind]
test eax, eax
jne 0x44f0a4
mov eax, dword [esp + 0x34]
push dword [eax + 0x10]
push dword [eax + 0x18]
push esi
call dword [sym.imp.WS2_32.dll_connect]
test eax, eax
jne 0x44f0a4
push eax
push 0xf
push str.GET___HTTP_1.1
push esi
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x44f127
push dword [esp + 0x34]
call dword [sym.imp.WS2_32.dll_freeaddrinfo]
mov edi, dword [edi]
test edi, edi
jne 0x44ef85
mov esi, dword [esp + 0x14]
test esi, esi
je 0x44f0c7
push esi
call dword [sym.imp.WS2_32.dll_closesocket]
mov edi, dword [esp + 0xc]
test edi, edi
je 0x44f0df
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov esi, dword [esp + 0x10]
lea eax, [esp + 0x3c]
mov ecx, esi
push eax
call fcn.00407c40
cmp dword [esp + 0x50], 0x10
jb 0x44f102
push dword [esp + 0x3c]
call fcn.0053e195
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x98]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x84]
xor ecx, esp
call fcn.0053cd12
mov esp, ebp
pop ebp
ret
lea eax, [edi + 0x1b0]
push eax
lea ecx, [esp + 0x20]
call fcn.00407be0
push eax
lea ecx, [esp + 0x40]
call fcn.004205c0
lea ecx, [esp + 0x1c]
call fcn.00407cb0
jmp 0x44f0bc
push esi
call dword [sym.imp.WS2_32.dll_closesocket]
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x3c]
push eax
call fcn.00407c40
lea ecx, [esp + 0x3c]
call fcn.00407cb0
mov eax, dword [esp + 0x10]
jmp 0x44f104