Function at 0x441bd0
Capabilities:
Contain obfuscated stackstrings
Create tcp socket
Create udp socket
Get socket status
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x565c23
mov eax, dword fs:[0]
push eax
mov eax, 0x11ac
call fcn.00528110
mov eax, dword [0x5c5ebc]
xor eax, ebp
mov dword [ebp - 0x128], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp + 0xc]
call fcn.00416520
mov ecx, dword [ebp + 0x10]
call fcn.00416520
mov eax, dword [ebp + 8]
and eax, 0xff000000
cmp eax, 0xff000000
jne 0x441c4c
mov dword [ebp - 0x119c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00415e20
mov eax, dword [ebp - 0x119c]
jmp 0x442122
push 0
push 2
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x1148], 0
mov ecx, 2
mov word [ebp - 0x1144], cx
push 0x89
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x1142], ax
mov edx, dword [ebp + 8]
mov dword [ebp - 0x1140], edx
mov byte [ebp - 0x117c], 0
mov byte [ebp - 0x117b], 0
mov byte [ebp - 0x117a], 0
mov byte [ebp - 0x1179], 0
mov byte [ebp - 0x1178], 0
mov byte [ebp - 0x1177], 1
mov byte [ebp - 0x1176], 0
mov byte [ebp - 0x1175], 0
mov byte [ebp - 0x1174], 0
mov byte [ebp - 0x1173], 0
mov byte [ebp - 0x1172], 0
mov byte [ebp - 0x1171], 0
mov byte [ebp - 0x1170], 0x20
mov byte [ebp - 0x116f], 0x43
mov byte [ebp - 0x116e], 0x4b
mov byte [ebp - 0x116d], 0x41
mov byte [ebp - 0x116c], 0x41
mov byte [ebp - 0x116b], 0x41
mov byte [ebp - 0x116a], 0x41
mov byte [ebp - 0x1169], 0x41
mov byte [ebp - 0x1168], 0x41
mov byte [ebp - 0x1167], 0x41
mov byte [ebp - 0x1166], 0x41
mov byte [ebp - 0x1165], 0x41
mov byte [ebp - 0x1164], 0x41
mov byte [ebp - 0x1163], 0x41
mov byte [ebp - 0x1162], 0x41
mov byte [ebp - 0x1161], 0x41
mov byte [ebp - 0x1160], 0x41
mov byte [ebp - 0x115f], 0x41
mov byte [ebp - 0x115e], 0x41
mov byte [ebp - 0x115d], 0x41
mov byte [ebp - 0x115c], 0x41
mov byte [ebp - 0x115b], 0x41
mov byte [ebp - 0x115a], 0x41
mov byte [ebp - 0x1159], 0x41
mov byte [ebp - 0x1158], 0x41
mov byte [ebp - 0x1157], 0x41
mov byte [ebp - 0x1156], 0x41
mov byte [ebp - 0x1155], 0x41
mov byte [ebp - 0x1154], 0x41
mov byte [ebp - 0x1153], 0x41
mov byte [ebp - 0x1152], 0x41
mov byte [ebp - 0x1151], 0x41
mov byte [ebp - 0x1150], 0x41
mov byte [ebp - 0x114f], 0
mov byte [ebp - 0x114e], 0
mov byte [ebp - 0x114d], 0x21
mov byte [ebp - 0x114c], 0
mov byte [ebp - 0x114b], 1
push 0x10
lea eax, [ebp - 0x1144]
push eax
push 0
push 0x32
lea ecx, [ebp - 0x117c]
push ecx
mov edx, dword [ebp - 0x11c]
push edx
call dword [sym.imp.WS2_32.dll_sendto]
mov dword [ebp - 0x1148], eax
mov al, byte [0x57a84e]
mov byte [ebp - 0x1134], al
push 0x1000
push 0
lea ecx, [ebp - 0x1133]
push ecx
call fcn.005281f0
add esp, 0xc
mov dword [ebp - 0x124], 1
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x1180], 0
jmp 0x441e6e
mov edx, dword [ebp - 0x1180]
add edx, 1
mov dword [ebp - 0x1180], edx
mov eax, dword [ebp - 0x1180]
cmp eax, dword [ebp - 0x114]
jae 0x441e95
mov ecx, dword [ebp - 0x1180]
mov edx, dword [ebp + ecx*4 - 0x110]
cmp edx, dword [ebp - 0x11c]
jne 0x441e93
jmp 0x441e95
jmp 0x441e5f
mov eax, dword [ebp - 0x1180]
cmp eax, dword [ebp - 0x114]
jne 0x441ece
cmp dword [ebp - 0x114], 0x40
jae 0x441ece
mov ecx, dword [ebp - 0x1180]
mov edx, dword [ebp - 0x11c]
mov dword [ebp + ecx*4 - 0x110], edx
mov eax, dword [ebp - 0x114]
add eax, 1
mov dword [ebp - 0x114], eax
xor ecx, ecx
jne 0x441e53
lea edx, [ebp - 0x124]
push edx
push 0
push 0
lea eax, [ebp - 0x114]
push eax
push 0x40
call dword [sym.imp.WS2_32.dll_select]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jg 0x441f2c
mov ecx, dword [ebp - 0x11c]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
mov dword [ebp - 0x11a0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00415e20
mov eax, dword [ebp - 0x11a0]
jmp 0x442122
lea edx, [ebp - 0x114]
push edx
mov eax, dword [ebp - 0x11c]
push eax
call sub.WS2_32.dll___WSAFDIsSet
test eax, eax
je 0x4420f6
push 0
push 0x1000
lea ecx, [ebp - 0x1134]
push ecx
mov edx, dword [ebp - 0x11c]
push edx
call dword [sym.imp.WS2_32.dll_recv]
mov dword [ebp - 0x1184], eax
cmp dword [ebp - 0x1184], 0
jg 0x441fa2
mov eax, dword [ebp - 0x11c]
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
mov dword [ebp - 0x11a4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00415e20
mov eax, dword [ebp - 0x11a4]
jmp 0x442122
movsx ecx, byte [ebp - 0x10fc]
imul ecx, ecx, 0x12
lea edx, [ebp + ecx - 0x10fb]
mov dword [ebp - 0x1188], edx
mov eax, dword [ebp - 0x1188]
movzx ecx, byte [eax + 5]
push ecx
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp - 0x1188]
movzx ecx, byte [eax + 4]
push ecx
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp - 0x1188]
movzx ecx, byte [eax + 3]
push ecx
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp - 0x1188]
movzx ecx, byte [eax + 2]
push ecx
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp - 0x1188]
movzx ecx, byte [eax + 1]
push ecx
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp - 0x1188]
movzx ecx, byte [eax]
push ecx
push str._02x_s_02x_s_02x_s_02x_s_02x_s_02x
mov edx, dword [ebp + 0xc]
push edx
call fcn.004171c0
add esp, 0x34
movsx eax, byte [ebp - 0x10fc]
test eax, eax
jle 0x4420c8
mov byte [ebp - 0x1198], 0
xor ecx, ecx
mov dword [ebp - 0x1197], ecx
mov dword [ebp - 0x1193], ecx
mov dword [ebp - 0x118f], ecx
mov word [ebp - 0x118b], cx
mov byte [ebp - 0x1189], cl
push 0xf
lea edx, [ebp - 0x10fb]
push edx
lea eax, [ebp - 0x1198]
push eax
call fcn.0052b270
add esp, 0xc
mov byte [ebp - 0x1189], 0
lea ecx, [ebp - 0x1198]
push ecx
lea ecx, [ebp - 0x11a8]
call fcn.0043b7b0
mov dword [ebp - 0x11b4], eax
mov edx, dword [ebp - 0x11b4]
mov dword [ebp - 0x11b8], edx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x11b8]
call fcn.00435f60
push eax
mov ecx, dword [ebp + 0x10]
call fcn.00415e60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x11a8]
call fcn.00435f40
mov ecx, dword [ebp + 0x10]
call fcn.00442290
mov eax, dword [ebp - 0x11c]
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
mov dword [ebp - 0x11ac], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00415e20
mov eax, dword [ebp - 0x11ac]
jmp 0x442122
mov ecx, dword [ebp - 0x11c]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
mov dword [ebp - 0x11b0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.00415e20
mov eax, dword [ebp - 0x11b0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x128]
xor ecx, ebp
call fcn.00527aad
mov esp, ebp
pop ebp
ret