Function at 0x4cda6f
Capabilities:
Contain obfuscated stackstrings
Initialize winsock library

Disassembly:
push ebp
sub esp, 0x3ac
lea ebp, [esp - 4]
mov eax, dword [0x70b744]
xor eax, ebp
mov dword [ebp + 0x3ac], eax
push 0x20c
mov eax, 0x5d180b
call fcn.005234b0
mov esi, ecx
xor ebx, ebx
push ebx
mov dword [ebp - 0x14], esi
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp]
push eax
push 2
call dword [sym.imp.WSOCK32.dll_WSAStartup]
test eax, eax
je 0x4c0980
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push str.WSAStartupFailed
call fcn.004ac9bc
mov dword [ebp - 4], ebx
lea ecx, [esi + 0x18]
or dword [ebp - 4], 0xffffffff
call fcn.00430cd8
xor al, al
jmp 0x4c0ead
mov ecx, esi
call fcn.004bbc7e
mov ecx, esi
call fcn.004bf5bc
test al, al
jne 0x4c09a1
push ebx
mov ecx, esi
call fcn.004bff9f
mov ecx, esi
call fcn.004bf5bc
lea ecx, [esi + 0x41c]
call fcn.004be6f0
lea edi, [esi + 0x3f4]
push 1
mov ecx, edi
call fcn.004acbb1
movzx eax, ax
push eax
call fcn.00520523
test eax, eax
pop ecx
je 0x4c0c54
push 0x2e
lea eax, [ebp + 0x19c]
push eax
mov ecx, edi
call fcn.004adb6f
mov dword [ebp - 4], 1
lea ecx, [ebp + 0x19c]
call fcn.00436f6a
cmp eax, 3
jne 0x4c0c45
mov dword [ebp - 0x18], ebx
mov esi, 0x69dd8c
mov edi, 0x6a51d4
lea ecx, [ebp - 0xb0]
call fcn.004bc54c
mov byte [ebp - 4], 2
push ebx
push esi
lea ecx, [ebp - 0x40]
call fcn.004ac9bc
mov byte [ebp - 4], 3
push ebx
push esi
lea ecx, [ebp - 0x1d0]
call fcn.004ac9bc
mov byte [ebp - 4], 4
push ebx
push esi
lea ecx, [ebp - 0x140]
call fcn.004ac9bc
mov byte [ebp - 4], 5
push ebx
push esi
lea ecx, [ebp - 0x11c]
call fcn.004ac9bc
mov byte [ebp - 4], 6
push ebx
push esi
lea ecx, [ebp - 0x188]
call fcn.004ac9bc
mov byte [ebp - 4], 7
push ebx
push esi
lea ecx, [ebp - 0xd4]
call fcn.004ac9bc
mov byte [ebp - 4], 8
push ebx
push esi
lea ecx, [ebp - 0x1ac]
call fcn.004ac9bc
mov byte [ebp - 4], 9
push ebx
push esi
lea ecx, [ebp - 0x164]
call fcn.004ac9bc
mov byte [ebp - 4], 0xa
push ebx
push edi
lea ecx, [ebp - 0xf8]
call fcn.004ac9bc
mov byte [ebp - 4], 0xb
push ebx
push edi
lea ecx, [ebp - 0x1f4]
call fcn.004ac9bc
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x18]
inc eax
push ebx
push eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x1c], eax
call fcn.004ac7aa
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x164]
push eax
push 2
lea ecx, [ebp + 0x19c]
call fcn.00436f80
push eax
lea eax, [ebp - 0xf8]
push eax
push 1
lea ecx, [ebp + 0x19c]
call fcn.00436f80
push eax
lea eax, [ebp - 0x1f4]
push eax
push dword [ebp - 0x18]
lea ecx, [ebp + 0x19c]
push ebx
call fcn.00436f80
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.004add2f
add esp, 0x3c
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0xb0]
call fcn.004acaa2
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x218]
call fcn.004ac66a
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x64]
call fcn.004ac66a
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1f4]
call fcn.004ac66a
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xf8]
call fcn.004ac66a
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x164]
call fcn.004ac66a
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1ac]
call fcn.004ac66a
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xd4]
call fcn.004ac66a
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x188]
call fcn.004ac66a
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x11c]
call fcn.004ac66a
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x140]
call fcn.004ac66a
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d0]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x40]
call fcn.004ac66a
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0xb0]
push eax
add ecx, 0x41c
call fcn.004bed8c
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.004f6556
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
cmp eax, 0x10
jb 0x4c0a05
mov esi, dword [ebp - 0x14]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x19c]
call fcn.004381fe
lea edi, [esi + 0x41c]
mov ecx, edi
call fcn.004bcf36
test eax, eax
jne 0x4c0cb2
mov dword [ebp - 0x14], 0x10
lea ecx, [ebp - 0xb0]
call fcn.004bc54c
mov dword [ebp - 4], 0xf
lea eax, [esi + 0x3f4]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004acaa2
lea eax, [ebp - 0xb0]
push eax
mov ecx, edi
call fcn.004bed8c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0]
call fcn.004f6556
dec dword [ebp - 0x14]
jne 0x4c0c6c
lea ecx, [esi + 0x18]
movzx eax, byte [ecx]
push eax
call fcn.004c39f0
cmp byte [0x7222b2], bl
jne 0x4c0d32
cmp byte [0x72247c], bl
jne 0x4c0d32
push 0x100
lea eax, [ebp + 0x1ac]
push eax
push ebx
call dword [0x71f66c]
lea eax, [ebp + 0x1ac]
push eax
lea ecx, [ebp + 0x190]
call fcn.004120e9
mov dword [ebp - 4], 0x10
push ecx
lea eax, [ebp + 0x190]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.0040484b
mov byte [ebp - 4], 0x11
push 0x721654
mov byte [ebp - 4], 0x10
mov ecx, esi
call fcn.004ba3bc
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp + 0x190]
call fcn.00410779
cmp dword [esi + 0x370], ebx
jne 0x4c0d65
push ebx
call fcn.00523a6b
push eax
call fcn.005209bf
pop ecx
pop ecx
call fcn.005209cc
mov edi, eax
call fcn.005209cc
imul edi, eax
push ebx
mov ecx, esi
mov dword [esi + 0x370], edi
call fcn.004bff9f
mov byte [esi + 0x490], bl
cmp dword [0x74b27c], 8
mov eax, dword [0x74b268]
jae 0x4c0d7e
mov eax, 0x74b268
lea edi, [esi + 0x2a4]
push eax
mov ecx, edi
call fcn.004acb07
test al, al
je 0x4c0d9b
mov word [esi + 0x2a2], 1
jmp 0x4c0dc6
cmp dword [0x74b298], 8
mov eax, dword [0x74b284]
jae 0x4c0dae
mov eax, 0x74b284
push eax
mov ecx, edi
call fcn.004acb07
neg al
sbb eax, eax
and eax, 0xfffffffe
inc eax
inc eax
mov word [esi + 0x2a2], ax
lea eax, [ebp - 0x64]
mov edi, 0x721f18
push eax
mov ecx, edi
call fcn.004bc582
mov dword [ebp - 4], 0x12
cmp dword [eax], ebx
je 0x4c0dea
cmp dword [eax + 4], ebx
je 0x4c0dea
xor eax, eax
jmp 0x4c0ded
xor eax, eax
inc eax
cmp al, bl
sete byte [ebp - 0xd]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.004ac66a
cmp byte [ebp - 0xd], bl
je 0x4c0e2e
lea eax, [ebp - 0x64]
push eax
mov ecx, edi
call fcn.004bc582
mov dword [ebp - 4], 0x13
push eax
lea ecx, [esi + 0x2ec]
call fcn.004acaa2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.004ac66a
mov ecx, esi
call fcn.004bde87
lea edi, [esi + 0x494]
cmp dword [edi], ebx
je 0x4c0e44
cmp dword [edi + 4], ebx
jne 0x4c0e70
push ebx
push str.87.230.73.18
lea ecx, [ebp - 0x40]
call fcn.004ac9bc
mov dword [ebp - 4], 0x14
lea eax, [ebp - 0x40]
push eax
mov ecx, edi
call fcn.004acaa2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.004ac66a
add esi, 0x4b8
cmp dword [esi], ebx
je 0x4c0e7f
cmp dword [esi + 4], ebx
jne 0x4c0eab
push ebx
push str.87.230.73.23
lea ecx, [ebp - 0x40]
call fcn.004ac9bc
mov dword [ebp - 4], 0x15
lea eax, [ebp - 0x40]
push eax
mov ecx, esi
call fcn.004acaa2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.004ac66a
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x3ac]
xor ecx, ebp
call fcn.0051d721
add ebp, 0x3b0
leave
ret
mov ecx, 0x721f18
jmp 0x4c0911