Function at 0x44c450
Capabilities:
Terminate process

Disassembly:
sub esp, 0x84
mov eax, dword [0x535df0]
xor eax, esp
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x8c]
push ebx
push ebp
push esi
xor ebx, ebx
xor ebp, ebp
test eax, eax
push edi
mov esi, ecx
mov dword [esp + 0x10], eax
mov edi, 0x100
je 0x44c4ec
push 0x104
call dword [sym.imp.MSVCR80.dll_malloc]
mov ecx, eax
add esp, 4
test ecx, ecx
jne 0x44c498
jmp fcn.00408a80
mov edx, dword [esp + 0x10]
mov edx, dword [edx]
mov dword [ecx], edx
mov edx, dword [esp + 0x10]
lea eax, [ecx + 4]
mov dword [edx], ecx
mov ecx, dword [esp + 0x98]
mov byte [eax], bl
mov dword [esp + 0x24], eax
mov eax, dword [esi]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], edi
mov edi, dword [esi + 8]
mov dword [esp + 0x28], eax
mov eax, dword [esi + 4]
mov esi, dword [esi + 0xc]
mov ebx, ecx
and ebx, 0xff
test edi, edi
mov dword [esp + 0x20], ebp
mov dword [esp + 0x34], esi
jg 0x44c503
push edi
push str.DATA_UNDEF_len_d
jmp 0x44c71c
push 0x100
call dword [sym.imp.MSVCR80.dll_malloc]
add esp, 4
test eax, eax
jne 0x44c4a9
jmp fcn.00408a80
test ecx, 0x200
je 0x44c6c2
cmp edi, 1
jl 0x44c728
test esi, esi
je 0x44c521
lea ecx, [eax + esi]
jmp 0x44c523
xor ecx, ecx
add eax, 1
sub edi, 1
test ecx, ecx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], edi
je 0x44c728
movzx eax, byte [ecx]
mov ebp, eax
and eax, 7
shr ebp, 3
push eax
mov eax, ebp
call fcn.004462f0
push eax
push str._s_kid_d
lea esi, [esp + 0x24]
call fcn.00402ff0
add esp, 0xc
cmp ebp, 6
je 0x44c6ba
lea eax, [esp + 0x28]
lea edi, [esp + 0x38]
call fcn.00443b30
test eax, eax
je 0x44c728
mov edi, dword [esp + 0x98]
and edi, 0x400
mov dword [esp + 0x14], edi
je 0x44c5aa
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x38]
call fcn.0043ea90
push eax
push str._sid_s
call fcn.00402ff0
add esp, 8
test ebx, ebx
je 0x44c653
cmp ebx, 0x40
jle 0x44c5c9
push 0x13b3
push str.._ssl.c
call fcn.00408a50
add esp, 8
lea ecx, [esp + 0x48]
push ecx
mov esi, ebx
lea eax, [esp + 0x2c]
call fcn.00443ae0
add esp, 4
test eax, eax
je 0x44c728
test edi, edi
je 0x44c612
mov edx, dword [esp + 0x10]
push edx
push 0x510330
lea eax, [esp + 0x50]
push 4
push eax
xor eax, eax
call fcn.00403180
push eax
push str._tls_hmac_s
lea esi, [esp + 0x30]
call fcn.00402ff0
add esp, 0x18
push 1
lea esi, [esp + 0x2c]
lea edi, [esp + 0x3c]
call fcn.00435030
add esp, 4
test eax, eax
je 0x44c728
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
push ecx
call fcn.004351d0
add esp, 4
push eax
push str._pid_s
lea esi, [esp + 0x20]
call fcn.00402ff0
mov edi, dword [esp + 0x1c]
add esp, 8
mov edx, dword [esp + 0x10]
push edx
push edi
lea edi, [esp + 0x30]
call fcn.0043b540
push eax
push 0x522c10
lea esi, [esp + 0x28]
call fcn.00402ff0
add esp, 0x10
cmp ebp, 5
je 0x44c728
lea eax, [esp + 0x14]
push eax
mov esi, 4
mov eax, edi
call fcn.00443ae0
add esp, 4
test eax, eax
je 0x44c728
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.WS2_32.dll_ntohl]
push eax
push str._pid_u
lea esi, [esp + 0x20]
call fcn.00402ff0
mov edi, dword [esp + 0x38]
add esp, 8
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x34]
test dword [esp + 0x98], 0x100
je 0x44c716
test esi, esi
je 0x44c6db
test edi, edi
jl 0x44c6db
mov ebx, edi
jmp 0x44c6dd
xor ebx, ebx
test esi, esi
je 0x44c6e9
test edi, edi
jl 0x44c6e9
add eax, esi
jmp 0x44c6eb
xor eax, eax
mov edx, dword [esp + 0x10]
push edx
push 0x510330
push 4
push eax
mov eax, 0x50
call fcn.00403180
push eax
push str._DATA__s
lea esi, [esp + 0x30]
call fcn.00402ff0
add esp, 0x18
jmp 0x44c728
push edi
push str._DATA_len_d
lea esi, [esp + 0x20]
call fcn.00402ff0
add esp, 8
mov eax, dword [esp + 0x24]
test eax, eax
je 0x44c73f
cmp dword [esp + 0x20], 0
jl 0x44c73f
mov ecx, dword [esp + 0x1c]
add eax, ecx
jmp 0x44c741
xor eax, eax
mov ecx, dword [esp + 0x8c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004dcaae
add esp, 0x84
ret