Function at 0x4a28d0
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Query or enumerate registry value
Resolve dns
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5565c0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1bc
push ebx
push esi
push edi
lea eax, [ebp - 0x18]
mov dword [ebp - 0x10], esp
push eax
push 0xf003f
push 0
push str.SoftwareDownloadManager_
push 0x80000001
mov dword [ebp - 4], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x4a292f
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, 0xc
xor eax, eax
lea edi, [ebp - 0x68]
lea edx, [ebp - 0x68]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], 0x32
push ecx
push edx
stosw word es:[edi], ax
mov eax, dword [ebp - 0x18]
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push 0
push 0
push str.HttpProxy
push eax
call edi
test eax, eax
je 0x4a297a
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov esi, str.0.0.0.0
lea eax, [ebp - 0x68]
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x4a29aa
test cl, cl
je 0x4a29a6
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x4a29aa
add eax, 2
add esi, 2
test cl, cl
jne 0x4a2982
xor eax, eax
jmp 0x4a29af
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4a29c6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
xor eax, eax
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x24]
mov dword [ebp - 0x20], eax
push ecx
push edx
push eax
mov word [ebp - 0x1c], ax
push eax
mov eax, dword [ebp - 0x18]
push str.HttpPort
push eax
mov dword [ebp - 0x14], 0xa
call edi
test eax, eax
je 0x4a2a07
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebp - 0x24]
push ecx
call fcn.0051c937
add esp, 4
lea edx, [ebp - 0x68]
mov esi, eax
push edx
call sub.WSOCK32.dll_gethostbyname
test eax, eax
jne 0x4a2a93
call sub.WSOCK32.dll_WSAGetLastError
mov edi, eax
lea eax, [ebp - 0x68]
push eax
call sub.WSOCK32.dll_inet_addr
cmp eax, 0xffffffff
jne 0x4a2a9a
mov edx, dword [0x5bb718]
lea ecx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0x1c8]
push edx
push eax
call fcn.0051d0e8
lea ecx, [ebp - 0x1c8]
push ecx
call fcn.00450ff0
add esp, 0x10
lea edx, [ebp - 0x1c8]
push edi
push str.Error_code___ld
push edx
call fcn.0051d0e8
lea eax, [ebp - 0x1c8]
push eax
call fcn.00450ff0
add esp, 0x10
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx]
push esi
mov dword [ebp - 0x30], eax
mov word [ebp - 0x34], 2
call sub.WSOCK32.dll_htons
push 0
push 1
push 2
mov word [ebp - 0x32], ax
call sub.WSOCK32.dll_socket
mov ecx, dword [ebp + 8]
cmp eax, 0xffffffff
mov dword [ecx], eax
jne 0x4a2b0b
call sub.WSOCK32.dll_WSAGetLastError
push eax
lea edx, [ebp - 0x88]
push str.Error_code___ld
push edx
call fcn.0051d0e8
mov eax, dword [0x5bb6a8]
push eax
call fcn.00450ff0
add esp, 0x10
lea ecx, [ebp - 0x88]
push ecx
call fcn.00450ff0
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea edx, [ebp - 0x34]
push 0x10
push edx
push eax
call sub.WSOCK32.dll_connect
cmp eax, 0xffffffff
jne 0x4a2b80
call sub.WSOCK32.dll_WSAGetLastError
push eax
lea eax, [ebp - 0xc8]
push str.Error_connecting_to_proxy._Error_code___ld
push eax
call fcn.0051d0e8
lea ecx, [ebp - 0xc8]
push ecx
call fcn.00450ff0
add esp, 0x10
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4