Function at 0x461b50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x7f89fc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x124
push esi
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.BscX11TunnelingResponder.1.0
mov dword [esi + 4], vtable.BscX11TunnelingResponder.0
mov al, byte [esi + 0x5d8]
mov dword [esp + 0x130], 0
test al, al
je 0x461efc
mov ecx, dword [esi + 0x3c]
mov eax, dword [esi + 0x38]
push ebx
push ebp
push edi
push 0
push 0xa
push ecx
push eax
lea eax, [esp + 0x114]
push eax
call fcn.005871c0
mov edi, eax
mov ecx, dword [esi + 0x34]
mov eax, dword [esi + 0x30]
push 0
push 0xa
push ecx
lea ecx, [esp + 0x104]
push eax
push ecx
mov byte [esp + 0x164], 1
call fcn.005871c0
add esp, 0x28
mov ebp, eax
lea edx, [esp + 0xc4]
lea ecx, [esi + 0x15c]
push edx
mov byte [esp + 0x140], 2
call fcn.00692460
mov ebx, eax
lea eax, [esp + 0xa4]
lea ecx, [esi + 0x1b4]
push eax
mov byte [esp + 0x140], 3
call fcn.00692460
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x84]
mov byte [esp + 0x13c], 4
push ecx
mov ecx, esi
call fcn.00461a60
push eax
lea edx, [esp + 0x68]
push 0x90193c
push edx
mov byte [esp + 0x148], 5
call fcn.0044e080
push str._connection_from
push eax
lea eax, [esp + 0x68]
mov byte [esp + 0x150], 6
push eax
call fcn.0044de30
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0xcc]
push ecx
push eax
push edx
mov byte [esp + 0x160], 7
call fcn.0044df50
push 0x9018ac
push eax
lea eax, [esp + 0x70]
mov byte [esp + 0x168], 8
push eax
call fcn.0044de30
push ebx
lea ecx, [esp + 0xc8]
push eax
mov byte [esp + 0x174], 9
push ecx
call fcn.0044df50
push str.__sent:
lea edx, [esp + 0x114]
push eax
push edx
mov byte [esp + 0x184], 0xa
call fcn.0044de30
add esp, 0x48
push ebp
push eax
lea eax, [esp + 0x7c]
mov byte [esp + 0x144], 0xb
push eax
call fcn.0044df50
push str.__received:
lea ecx, [esp + 0x104]
push eax
push ecx
mov byte [esp + 0x154], 0xc
call fcn.0044de30
push edi
lea edx, [esp + 0x140]
push eax
push edx
mov byte [esp + 0x160], 0xd
call fcn.0044df50
add esp, 0x24
mov edi, eax
mov bl, 0xe
mov byte [esp + 0x13c], bl
call dword [sym.imp.KERNEL32.dll_GetACP]
mov ebp, eax
push 0x8fb874
lea eax, [esp + 0x118]
push edi
push eax
call fcn.0044de30
add esp, 0xc
mov edi, eax
lea ecx, [esp + 0x1c]
call fcn.004034c0
lea ecx, [esp + 0x13]
mov byte [esp + 0x13c], 0x10
push ecx
lea ecx, [esp + 0x38]
mov dword [esp + 0x34], ebp
call fcn.00478ac0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x13c], 0x11
mov dword [esp + 0x1c], vtable.dbcsstring.0
call fcn.00577bc0
push 0xffffffffffffffff
push 0
push edi
lea ecx, [esp + 0x28]
call fcn.00421480
push 0
lea edx, [esp + 0x20]
push 2
push edx
mov byte [esp + 0x148], 0x12
call fcn.0048e9a0
add esp, 0xc
lea ecx, [esp + 0x34]
mov byte [esp + 0x13c], 0xf
push 1
call fcn.00404c40
push 1
lea ecx, [esp + 0x24]
call fcn.00404c40
mov byte [esp + 0x13c], bl
push 1
lea ecx, [esp + 0x118]
call fcn.00404c40
push 1
lea ecx, [esp + 0x128]
mov byte [esp + 0x140], 0xd
call fcn.00404c40
push 1
lea ecx, [esp + 0xf8]
mov byte [esp + 0x140], 0xc
call fcn.00404c40
push 1
lea ecx, [esp + 0x78]
mov byte [esp + 0x140], 0xb
call fcn.00404c40
push 1
lea ecx, [esp + 0xd8]
mov byte [esp + 0x140], 0xa
call fcn.00404c40
push 1
lea ecx, [esp + 0x98]
mov byte [esp + 0x140], 9
call fcn.00404c40
push 1
lea ecx, [esp + 0x48]
mov byte [esp + 0x140], 8
call fcn.00404c40
push 1
lea ecx, [esp + 0xb8]
mov byte [esp + 0x140], 7
call fcn.00404c40
push 1
lea ecx, [esp + 0x58]
mov byte [esp + 0x140], 6
call fcn.00404c40
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x140], 5
call fcn.00404c40
push 1
lea ecx, [esp + 0x88]
mov byte [esp + 0x140], 4
call fcn.00404c40
push 1
lea ecx, [esp + 0xa8]
mov byte [esp + 0x140], 3
call fcn.00404c40
push 1
lea ecx, [esp + 0xc8]
mov byte [esp + 0x140], 2
call fcn.00404c40
push 1
lea ecx, [esp + 0xe8]
mov byte [esp + 0x140], 1
call fcn.00404c40
push 1
lea ecx, [esp + 0x108]
mov byte [esp + 0x140], 0
call fcn.00404c40
pop edi
pop ebp
pop ebx
mov ecx, esi
mov dword [esp + 0x130], 0xffffffff
call fcn.0047c1c0
mov ecx, dword [esp + 0x128]
pop esi
mov dword fs:[0], ecx
add esp, 0x130
ret