Function at 0x4b8c13
Capabilities:
Initialize winsock library

Disassembly:
push ebp
sub esp, 0x3ac
lea ebp, [esp - 4]
mov eax, dword [0x6dd9a4]
xor eax, ebp
mov dword [ebp + 0x3ac], eax
push 0x20c
mov eax, 0x5b63ae
call fcn.00518b46
mov esi, ecx
xor ebx, ebx
push ebx
mov dword [ebp - 0x14], esi
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp]
push eax
push 2
call dword [sym.imp.WSOCK32.dll_WSAStartup]
test eax, eax
je 0x4b8c82
push ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x1c], esp
push ebx
push str.WSAStartupFailed
call fcn.0049eefc
mov dword [ebp - 4], ebx
lea ecx, [esi + 0x18]
or dword [ebp - 4], 0xffffffff
call fcn.0043008c
xor al, al
jmp 0x4b91af
mov ecx, esi
call fcn.004b1ff9
mov ecx, esi
call fcn.004b78be
test al, al
jne 0x4b8ca3
push ebx
mov ecx, esi
call fcn.004b82a1
mov ecx, esi
call fcn.004b78be
lea ecx, [esi + 0x41c]
call fcn.004b6af5
lea edi, [esi + 0x3f4]
push 1
mov ecx, edi
call fcn.0049f0f1
movzx eax, ax
push eax
call fcn.00514337
test eax, eax
pop ecx
je 0x4b8f56
push 0x2e
lea eax, [ebp + 0x19c]
push eax
mov ecx, edi
call fcn.004a001e
mov dword [ebp - 4], 1
lea ecx, [ebp + 0x19c]
call fcn.00431534
cmp eax, 3
jne 0x4b8f47
mov dword [ebp - 0x18], ebx
mov esi, 0x67c6e4
mov edi, 0x6831ec
lea ecx, [ebp - 0xb0]
call fcn.004b4d07
mov byte [ebp - 4], 2
push ebx
push esi
lea ecx, [ebp - 0x40]
call fcn.0049eefc
mov byte [ebp - 4], 3
push ebx
push esi
lea ecx, [ebp - 0x1d0]
call fcn.0049eefc
mov byte [ebp - 4], 4
push ebx
push esi
lea ecx, [ebp - 0x140]
call fcn.0049eefc
mov byte [ebp - 4], 5
push ebx
push esi
lea ecx, [ebp - 0x11c]
call fcn.0049eefc
mov byte [ebp - 4], 6
push ebx
push esi
lea ecx, [ebp - 0x188]
call fcn.0049eefc
mov byte [ebp - 4], 7
push ebx
push esi
lea ecx, [ebp - 0xd4]
call fcn.0049eefc
mov byte [ebp - 4], 8
push ebx
push esi
lea ecx, [ebp - 0x1ac]
call fcn.0049eefc
mov byte [ebp - 4], 9
push ebx
push esi
lea ecx, [ebp - 0x164]
call fcn.0049eefc
mov byte [ebp - 4], 0xa
push ebx
push edi
lea ecx, [ebp - 0xf8]
call fcn.0049eefc
mov byte [ebp - 4], 0xb
push ebx
push edi
lea ecx, [ebp - 0x1f4]
call fcn.0049eefc
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x18]
inc eax
push ebx
push eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x1c], eax
call fcn.0049ecea
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x164]
push eax
push 2
lea ecx, [ebp + 0x19c]
call fcn.0043154a
push eax
lea eax, [ebp - 0xf8]
push eax
push 1
lea ecx, [ebp + 0x19c]
call fcn.0043154a
push eax
lea eax, [ebp - 0x1f4]
push eax
push dword [ebp - 0x18]
lea ecx, [ebp + 0x19c]
push ebx
call fcn.0043154a
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.004a01de
add esp, 0x3c
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0xb0]
call fcn.0049efe2
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x218]
call fcn.0049ebaa
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x64]
call fcn.0049ebaa
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1f4]
call fcn.0049ebaa
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xf8]
call fcn.0049ebaa
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x164]
call fcn.0049ebaa
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1ac]
call fcn.0049ebaa
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xd4]
call fcn.0049ebaa
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x188]
call fcn.0049ebaa
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x11c]
call fcn.0049ebaa
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x140]
call fcn.0049ebaa
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d0]
call fcn.0049ebaa
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x40]
call fcn.0049ebaa
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0xb0]
push eax
add ecx, 0x41c
call fcn.004b7094
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb0]
call fcn.004b4ec4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
cmp eax, 0x10
jb 0x4b8d07
mov esi, dword [ebp - 0x14]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x19c]
call fcn.00431b47
lea edi, [esi + 0x41c]
mov ecx, edi
call fcn.004b571f
test eax, eax
jne 0x4b8fb4
mov dword [ebp - 0x14], 0x10
lea ecx, [ebp - 0xb0]
call fcn.004b4d07
mov dword [ebp - 4], 0xf
lea eax, [esi + 0x3f4]
push eax
lea ecx, [ebp - 0xb0]
call fcn.0049efe2
lea eax, [ebp - 0xb0]
push eax
mov ecx, edi
call fcn.004b7094
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0]
call fcn.004b4ec4
dec dword [ebp - 0x14]
jne 0x4b8f6e
lea ecx, [esi + 0x18]
movzx eax, byte [ecx]
push eax
call fcn.004ba6e4
cmp byte [0x6edaca], bl
jne 0x4b9034
cmp byte [0x6edc90], bl
jne 0x4b9034
push 0x100
lea eax, [ebp + 0x1ac]
push eax
push ebx
call dword [0x6e874c]
lea eax, [ebp + 0x1ac]
push eax
lea ecx, [ebp + 0x190]
call fcn.00411ca6
mov dword [ebp - 4], 0x10
push ecx
lea eax, [ebp + 0x190]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push eax
call fcn.00404729
mov byte [ebp - 4], 0x11
push 0x6ece6c
mov byte [ebp - 4], 0x10
mov ecx, esi
call int.004b111b
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp + 0x190]
call fcn.00410446
cmp dword [esi + 0x370], ebx
jne 0x4b9067
push ebx
call fcn.00519540
push eax
call fcn.0051475b
pop ecx
pop ecx
call fcn.00514768
mov edi, eax
call fcn.00514768
imul edi, eax
push ebx
mov ecx, esi
mov dword [esi + 0x370], edi
call fcn.004b82a1
mov byte [esi + 0x48c], bl
cmp dword [0x714180], 8
mov eax, dword [0x71416c]
jae 0x4b9080
mov eax, 0x71416c
lea edi, [esi + 0x2a4]
push eax
mov ecx, edi
call fcn.0049f047
test al, al
je 0x4b909d
mov word [esi + 0x2a2], 1
jmp 0x4b90c8
cmp dword [0x71419c], 8
mov eax, dword [0x714188]
jae 0x4b90b0
mov eax, 0x714188
push eax
mov ecx, edi
call fcn.0049f047
neg al
sbb eax, eax
and eax, 0xfffffffe
inc eax
inc eax
mov word [esi + 0x2a2], ax
lea eax, [ebp - 0x64]
mov edi, 0x6ed730
push eax
mov ecx, edi
call fcn.004b4d3d
mov dword [ebp - 4], 0x12
cmp dword [eax], ebx
je 0x4b90ec
cmp dword [eax + 4], ebx
je 0x4b90ec
xor eax, eax
jmp 0x4b90ef
xor eax, eax
inc eax
cmp al, bl
sete byte [ebp - 0xd]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.0049ebaa
cmp byte [ebp - 0xd], bl
je 0x4b9130
lea eax, [ebp - 0x64]
push eax
mov ecx, edi
call fcn.004b4d3d
mov dword [ebp - 4], 0x13
push eax
lea ecx, [esi + 0x2ec]
call fcn.0049efe2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.0049ebaa
mov ecx, esi
call fcn.004b650a
lea edi, [esi + 0x490]
cmp dword [edi], ebx
je 0x4b9146
cmp dword [edi + 4], ebx
jne 0x4b9172
push ebx
push str.87.230.73.18
lea ecx, [ebp - 0x40]
call fcn.0049eefc
mov dword [ebp - 4], 0x14
lea eax, [ebp - 0x40]
push eax
mov ecx, edi
call fcn.0049efe2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.0049ebaa
add esi, 0x4b4
cmp dword [esi], ebx
je 0x4b9181
cmp dword [esi + 4], ebx
jne 0x4b91ad
push ebx
push str.87.230.73.23
lea ecx, [ebp - 0x40]
call fcn.0049eefc
mov dword [ebp - 4], 0x15
lea eax, [ebp - 0x40]
push eax
mov ecx, esi
call fcn.0049efe2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.0049ebaa
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x3ac]
xor ecx, ebp
call fcn.005112a7
add ebp, 0x3b0
leave
ret
mov ecx, 0x6ed730
jmp 0x4b8c13