Function at 0x442538
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x465052
call fcn.00451b80
mov eax, 0x4424
call fcn.00452660
push ebx
push esi
lea eax, [ebp - 0x430]
push edi
mov ebx, ecx
push eax
mov dword [ebp - 0x10], ebx
call fcn.00403e75
xor edi, edi
pop ecx
cmp eax, edi
je 0x4427f0
push 0x12
lea eax, [ebx + 4]
push dword [ebp + 0x10]
push eax
call fcn.00451bc0
lea eax, [ebp - 0x430]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.00452490
mov esi, str.WFBSGroupMag.bin
lea eax, [ebp - 0x230]
push esi
push eax
call fcn.004524a0
lea eax, [ebp - 0x230]
push eax
call fcn.00439247
add esp, 0x20
test eax, eax
jne 0x442665
push 0xa
push esi
lea eax, [ebp - 0x430]
push edi
push eax
call fcn.0043939d
lea eax, [ebp - 0x230]
push eax
call fcn.00439247
add esp, 0x14
test eax, eax
je 0x4427f0
lea esi, [ebx + 0x54]
lea eax, [ebp - 0x230]
push 1
push eax
mov ecx, esi
call fcn.004396d6
test eax, eax
je 0x4427f0
push 0x1000
lea eax, [ebp - 0x4430]
push edi
push eax
call fcn.00451f50
add esp, 0xc
mov dword [ebp - 0x4430], 0x56567878
mov eax, dword [esi]
lea ecx, [ebp - 0x4430]
push 8
push ecx
push edi
mov ecx, esi
call dword [eax + 8]
test eax, eax
jl 0x442981
add edi, 8
cmp edi, 0x1000
jl 0x442616
mov edi, 0x2000
mov eax, dword [esi]
lea ecx, [ebp - 0x4430]
push 8
push ecx
push edi
mov ecx, esi
call dword [eax + 8]
test eax, eax
jl 0x442981
add edi, 0x40
cmp edi, 0x82000
jl 0x44263f
jmp 0x442680
lea esi, [ebx + 0x54]
lea eax, [ebp - 0x230]
push 1
push eax
mov ecx, esi
call fcn.004396d6
test eax, eax
je 0x4427f0
xor edi, edi
mov eax, dword [esi]
lea ecx, [ebp - 0x3430]
push 8
push ecx
push edi
mov ecx, esi
call dword [eax + 4]
test eax, eax
jl 0x442981
cmp dword [ebp - 0x342c], 0
jbe 0x442721
push 0x3444
mov dword [ebp - 0x309e], edi
call fcn.00451b9f
pop ecx
mov dword [ebp + 0x10], eax
xor ebx, ebx
cmp eax, ebx
mov dword [ebp - 4], ebx
je 0x4426d1
lea ecx, [ebp - 0x3430]
push ecx
mov ecx, eax
call fcn.0043fa11
mov ebx, eax
or dword [ebp - 4], 0xffffffff
test ebx, ebx
je 0x4427f0
cmp dword [ebp - 0x3116], 0
je 0x4426ff
push dword [ebp - 0x3116]
call fcn.00442336
pop ecx
mov ecx, dword [ebp - 0x10]
cmp dword [ecx + 0x74], eax
jge 0x442702
mov dword [ecx + 0x74], eax
jmp 0x442702
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x342c]
add ecx, 0x44
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x14], ebx
call fcn.00446b1c
mov ebx, dword [ebp - 0x10]
add edi, 8
cmp edi, 0x1000
jl 0x442682
mov ecx, ebx
call fcn.004424d8
push 0x8000
call fcn.00451b9f
pop ecx
mov edi, eax
mov ebx, 0x2000
mov eax, dword [esi]
push 8
push edi
push ebx
mov ecx, esi
call dword [eax + 4]
test eax, eax
mov dword [ebp + 0x10], eax
jl 0x4427fa
cmp dword [edi + 8], 0
jbe 0x4427df
mov eax, dword [edi + 0x106]
and dword [edi + 0xaa], 0
and byte [edi + 0xae], 0
mov dword [edi + 0xf8], ebx
test eax, eax
jbe 0x4427a4
imul eax, eax, 0x1b7
add eax, 0x1ff
mov edx, dword [esi]
shr eax, 9
push eax
lea eax, [edi + 0x1000]
push eax
lea eax, [ebx + 8]
push eax
mov ecx, esi
call dword [edx + 4]
mov ecx, dword [ebp - 0x10]
push edi
call fcn.00442211
test eax, eax
jge 0x4427df
push 0x1000
lea eax, [ebp - 0x3430]
push 0
push eax
call fcn.00451f50
mov eax, dword [esi]
add esp, 0xc
lea ecx, [ebp - 0x3430]
push 8
push ecx
push ebx
mov ecx, esi
call dword [eax + 8]
test eax, eax
mov dword [ebp + 0x10], eax
jl 0x4427fa
add ebx, 0x40
cmp ebx, 0x82000
jl 0x442749
jmp 0x442809
mov eax, 0xc0000001
jmp 0x442981
push edi
call fcn.00431aec
mov eax, dword [ebp + 0x10]
pop ecx
jmp 0x442981
push edi
call fcn.00431aec
mov eax, dword [ebp - 0x10]
pop ecx
cmp dword [eax + 0x50], 0
je 0x44297f
mov eax, dword [eax + 0x48]
mov ecx, dword [ebp - 0x10]
mov ebx, 0x99999999
mov eax, dword [eax]
mov eax, dword [eax + 0x10]
add eax, 0x428
mov dword [ebp + 0x10], eax
lea eax, [ebp - 0x2430]
push eax
push ebx
call fcn.00441d38
test eax, eax
jge 0x44297f
mov edi, dword [sym.imp.WS2_32.dll_htons]
push 0
call edi
mov esi, dword [sym.imp.WS2_32.dll_inet_addr]
push str.77.77.77.77
call esi
push 0
mov dword [ebp - 0x2c], eax
call edi
push str.255.255.255.0
call esi
mov esi, dword [ebp + 0x10]
push dword [ebp - 0x2c]
mov ecx, 0x400
lea edi, [ebp - 0x2430]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.WS2_32.dll_ntohl]
mov dword [ebp - 0x1c], eax
call esi
push dword [ebp - 0x1c]
mov dword [ebp - 0x2420], eax
call esi
and byte [ebp - 0x241a], 0
push 1
mov dword [ebp - 0x2424], eax
pop esi
lea eax, [ebp - 0x2419]
push str.UpdateMagGroup
push eax
mov dword [ebp - 0x2126], esi
mov word [ebp - 0x214c], 4
mov dword [ebp - 0x242c], ebx
mov dword [ebp - 0x2428], 0x88888888
call fcn.00452490
pop ecx
lea eax, [ebp - 0x2430]
pop ecx
mov ecx, dword [ebp - 0x10]
push eax
call fcn.004413eb
test eax, eax
jne 0x44297f
push 0x1000
push eax
lea eax, [ebp - 0x1430]
push eax
call fcn.00451f50
mov al, byte [ebp - 0x137f]
mov ecx, dword [ebp - 0x10]
and dword [ebp - 0x138a], 0
and al, 0xfd
or al, 1
add esp, 0xc
mov byte [ebp - 0x137f], al
lea eax, [ebp - 0x1430]
push esi
push eax
mov dword [ebp - 0x1430], 0x56567878
mov dword [ebp - 0x142c], ebx
mov dword [ebp - 0x1428], 0x77777777
mov byte [ebp - 0x1424], 1
mov byte [ebp - 0x1423], 6
mov byte [ebp - 0x1422], 0x77
mov byte [ebp - 0x1421], 0x77
mov byte [ebp - 0x1420], 0x77
mov byte [ebp - 0x141f], 0x77
mov byte [ebp - 0x141e], 0x77
mov byte [ebp - 0x141d], 0x77
call fcn.00440b72
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc