Function at 0x419c3b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x64
call fcn.0041a806
test eax, eax
je 0x419c4c
add esp, 0x64
jmp eax
mov edx, dword [esp + 0x6c]
push ebx
push ebp
push esi
push edi
test edx, edx
je 0x419eea
mov ebx, dword [esp + 0x80]
test ebx, ebx
je 0x419eea
xor eax, eax
mov dword [esp + 0x20], 0x33323130
cmp dword [esp + 0x78], 2
mov edi, ebx
push 0x64
pop ecx
mov esi, eax
mov dword [esp + 0x24], 0x37363534
mov dword [esp + 0x28], 0x62613938
mov byte [esp + 0x2c], 0x63
mov dword [esp + 0x1c], ecx
mov byte [esp + 0x2d], cl
mov word [esp + 0x2e], 0x6665
mov byte [esp + 0x30], al
jne 0x419d96
cmp dword [esp + 0x84], 0x10
jae 0x419cbd
lea edi, [esp + 0x34]
push 0xa
mov ecx, eax
pop ebp
mov al, byte [ecx + edx]
lea ebx, [esi + edi]
movzx edx, al
inc esi
mov byte [esp + 0x78], al
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ebx
cmp al, 0xa
jae 0x419ce6
mov al, byte [esp + edx + 0x20]
mov edx, ebx
mov byte [edx], al
jmp 0x419d4a
mov eax, edx
xor edx, edx
div ebp
xor edx, edx
mov ebx, eax
mov eax, dword [esp + 0x14]
div ebp
lea eax, [esp + 0x20]
add eax, edx
cmp byte [esp + 0x78], 0x64
mov dword [esp + 0x18], eax
jae 0x419d1d
mov edx, dword [esp + 0x10]
mov al, byte [esp + ebx + 0x20]
mov byte [edx], al
mov eax, dword [esp + 0x18]
mov al, byte [eax]
mov byte [esi + edi], al
inc esi
jmp 0x419d4a
mov eax, dword [esp + 0x14]
xor edx, edx
div dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov al, byte [esp + eax + 0x20]
mov byte [edx], al
mov eax, ebx
cdq
idiv ebp
mov al, byte [esp + edx + 0x20]
mov byte [esi + edi], al
mov eax, dword [esp + 0x18]
mov al, byte [eax]
mov byte [esi + edi + 1], al
add esi, 2
mov edx, dword [esp + 0x7c]
mov eax, esi
mov byte [esi + edi], 0x2e
inc esi
inc ecx
cmp ecx, 4
jne 0x419cc2
mov esi, eax
mov ebp, dword [esp + 0x84]
mov ebx, dword [esp + 0x80]
cmp esi, ebp
jae 0x419eea
lea eax, [esp + 0x34]
cmp edi, eax
je 0x419d8a
push esi
push edi
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
xor eax, eax
mov byte [esi + ebx], al
mov eax, ebx
jmp 0x419ef6
cmp dword [esp + 0x78], 0x17
jne 0x419ee3
cmp dword [esp + 0x84], 0x2e
jae 0x419daf
lea edi, [esp + 0x34]
or dword [esp + 0x10], 0xffffffff
xor esi, esi
inc esi
mov ecx, eax
xor ebp, ebp
cmp word [edx + ecx*2], bp
jne 0x419dc7
inc ecx
cmp ecx, 8
jne 0x419dbb
mov edx, ecx
sub edx, eax
je 0x419ddb
cmp edx, esi
jle 0x419dd7
mov esi, edx
mov dword [esp + 0x10], eax
mov eax, ecx
jmp 0x419ddc
inc eax
mov edx, dword [esp + 0x7c]
cmp eax, 8
jne 0x419db7
mov ebp, dword [esp + 0x7c]
xor eax, eax
push 0xf
mov dword [esp + 0x7c], esi
mov edx, eax
pop ebx
mov esi, eax
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x78]
cmp ecx, edx
jne 0x419e1c
test edx, edx
jne 0x419e0b
mov byte [esi + edi], 0x3a
inc esi
mov byte [esi + edi], 0x3a
add edx, eax
inc esi
cmp edx, 8
jne 0x419dfe
jmp 0x419d61
movzx ecx, word [ebp + edx*2]
inc edx
mov ah, cl
mov al, ch
lea ecx, [esi + edi]
movzx eax, ax
inc esi
mov dword [esp + 0x7c], ecx
cmp ax, bx
ja 0x419e41
mov al, byte [esp + eax + 0x20]
mov byte [ecx], al
jmp 0x419ed0
mov ebx, dword [esp + 0x7c]
mov ecx, 0xff
push 0xf
cmp ax, cx
ja 0x419e69
mov ecx, eax
shr eax, 4
mov al, byte [esp + eax + 0x24]
mov byte [ebx], al
pop ebx
and ecx, ebx
mov al, byte [esp + ecx + 0x20]
mov byte [esi + edi], al
inc esi
jmp 0x419ed0
mov ecx, 0xfff
cmp ax, cx
mov ecx, eax
ja 0x419e9c
shr eax, 8
mov al, byte [esp + eax + 0x24]
mov byte [ebx], al
mov eax, ecx
shr eax, 4
pop ebx
and eax, ebx
and ecx, ebx
mov al, byte [esp + eax + 0x20]
mov byte [esi + edi], al
mov al, byte [esp + ecx + 0x20]
mov byte [esi + edi + 1], al
add esi, 2
jmp 0x419ed0
shr eax, 0xc
mov al, byte [esp + eax + 0x24]
mov byte [ebx], al
mov eax, ecx
shr eax, 8
pop ebx
and eax, ebx
mov al, byte [esp + eax + 0x20]
mov byte [esi + edi], al
mov eax, ecx
shr eax, 4
and ecx, ebx
and eax, ebx
mov al, byte [esp + eax + 0x20]
mov byte [esi + edi + 1], al
mov al, byte [esp + ecx + 0x20]
mov byte [esi + edi + 2], al
add esi, 3
cmp edx, 8
je 0x419d61
mov byte [esi + edi], 0x3a
inc esi
jmp 0x419df6
mov eax, 0x273f
jmp 0x419eed
push 0x57
pop eax
push eax
call dword [sym.imp.WS2_32.dll_WSASetLastError]
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x64
ret 0x10