Function at 0x4344e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd4
mov eax, dword [0x457664]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0xa4], 0x4b7e82e4
mov dword [ebp - 0xa0], 0xbd46efee
mov dword [ebp - 0x9c], 0x7d46f374
mov dword [ebp - 0x98], 0xbe464a92
mov dword [ebp - 0x94], 0xd623936c
mov dword [ebp - 0x90], 0xc346ff61
mov dword [ebp - 0x8c], 0xbe417ec1
mov dword [ebp - 0x88], 0xa3242e46
mov dword [ebp - 0x84], 0x6d410b3b
mov dword [ebp - 0x80], 0xbe4143bc
mov dword [ebp - 0x7c], 0x6d31d033
mov dword [ebp - 0x4c], 0xe470e4a9
mov dword [ebp - 0x48], 0xbd46efee
mov dword [ebp - 0x44], 0x7d465774
mov dword [ebp - 0x40], 0xfa46b378
mov dword [ebp - 0x3c], 0x7d469e6c
mov dword [ebp - 0x38], 0x1a461561
mov dword [ebp - 0x34], 0x1a419052
mov dword [ebp - 0x30], 0x7d41b746
mov dword [ebp - 0x2c], 0x3b41983b
mov dword [ebp - 0x28], 0xce410f2f
mov word [ebp - 0x24], 0x5fe0
mov dword [ebp - 0x20], 0xbd4ee3e4
mov dword [ebp - 0x1c], 0xbd46efee
mov dword [ebp - 0x18], 0x7d46bf74
mov dword [ebp - 0x14], 0x7d467278
mov dword [ebp - 0x10], 0x3b46bf6c
mov dword [ebp - 0xc], 0x1a466c61
mov dword [ebp - 8], 0xce41d052
mov dword [ebp - 0x78], 0xe470e4a9
mov dword [ebp - 0x74], 0xbd46efee
mov dword [ebp - 0x70], 0x7d464374
mov dword [ebp - 0x6c], 0x1a469f78
mov dword [ebp - 0x68], 0x3b469e6c
mov dword [ebp - 0x64], 0x3b463c61
mov dword [ebp - 0x60], 0xc3419052
mov dword [ebp - 0x5c], 0x3418246
mov dword [ebp - 0x58], 0x341983b
mov dword [ebp - 0x54], 0xce410f2f
mov word [ebp - 0x50], 0x5fe0
mov dword [ebp - 0xd4], 0xe47ce4a4
mov dword [ebp - 0xd0], 0xbd46efee
mov dword [ebp - 0xcc], 0x7d46bf74
mov dword [ebp - 0xc8], 0x3f46b378
mov dword [ebp - 0xc4], 0x7d469e6c
mov dword [ebp - 0xc0], 0x1a469a61
mov dword [ebp - 0xbc], 0x54419052
mov dword [ebp - 0xb8], 0x5441b746
mov dword [ebp - 0xb4], 0x341af3b
mov dword [ebp - 0xb0], 0x2d412b2f
mov dword [ebp - 0xac], 0x6d410e33
mov word [ebp - 0xa8], 0x6727
test edi, edi
je 0x4347fc
mov eax, dword [edi]
test eax, eax
je 0x4347fc
xor ecx, ecx
cmp cx, word [eax]
je 0x4347fc
push ecx
push ecx
push ecx
lea eax, [ebp - 0xa4]
push eax
call fcn.004201b0
mov esi, eax
push esi
push dword [edi]
call fcn.0041f520
push esi
mov ebx, eax
call fcn.0041fc30
test ebx, ebx
je 0x4346fd
mov dword [edi], ebx
mov eax, reloc.OLEAUT32.dll_SysReAllocString
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret 4
push 0
push 0
push 0
lea eax, [ebp - 0x4c]
push eax
call fcn.004201b0
mov esi, eax
push esi
push dword [edi]
call fcn.0041f520
push esi
mov ebx, eax
call fcn.0041fc30
test ebx, ebx
je 0x43473c
mov dword [edi], ebx
mov eax, closesocket
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret 4
push 0
push 0
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.004201b0
mov esi, eax
push esi
push dword [edi]
call fcn.0041f520
push esi
mov ebx, eax
call fcn.0041fc30
test ebx, ebx
je 0x43477b
mov dword [edi], ebx
mov eax, reloc.WS2_32.dll_closesocket
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret 4
push 0
push 0
push 0
lea eax, [ebp - 0x78]
push eax
call fcn.004201b0
mov esi, eax
push esi
push dword [edi]
call fcn.0041f520
push esi
mov ebx, eax
call fcn.0041fc30
test ebx, ebx
je 0x4347ba
mov dword [edi], ebx
mov eax, closesocket
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret 4
push 0
push 0
push 0
lea eax, [ebp - 0xd4]
push eax
call fcn.004201b0
mov esi, eax
push esi
push dword [edi]
call fcn.0041f520
push esi
mov ebx, eax
call fcn.0041fc30
test ebx, ebx
je 0x4347fc
mov dword [edi], ebx
mov eax, VariantClear
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00441849
mov esp, ebp
pop ebp
ret 4