Function at 0x41270e
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Initialize winsock library
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x800
mov dword [ebp - 0x800], 0
push 0
push 0
push 0
push 0x50000002
push 0x190
push 0
lea edx, [ebp - 0x7f0]
push edx
call dword [sym.imp.NTDLL.DLL_memset]
add esp, 0xc
lea edx, [ebp - 0x7f0]
push edx
push 0x202
call dword [sym.imp.ws2_32.dll_WSAStartup]
test eax, eax
je 0x4127b7
push 0xa
push 0xd31203a
push 0x2445444f
push 0x435f524f
push 0x52524524
push 0x20244153
push 0x575f455a
push 0x494c4149
push 0x54494e49
push 0x5f4f545f
push 0x454c4241
push 0x4e555f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x3c
mov dword [ebp - 0x800], 1
jmp 0x413191
push 0
push 1
push 2
call dword [sym.imp.ws2_32.dll_socket]
cmp eax, 0xffffffff
jne 0x412826
push 0
push 0xa0d3120
push 0x3a244544
push 0x4f435f52
push 0x4f525245
push 0x24202454
push 0x454b434f
push 0x535f4554
push 0x41455243
push 0x5f4f545f
push 0x454c4241
push 0x4e555f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x3c
mov dword [ebp - 0x800], 1
jmp 0x41318b
mov dword [ebp - 0x7fc], eax
push dword [ebp + 8]
call dword [sym.imp.ws2_32.dll_gethostbyname]
test eax, eax
jne 0x4128a1
push 0
push 0xa0d3120
push 0x3a244544
push 0x4f435f52
push 0x4f525245
push 0x24202452
push 0x45565245
push 0x535f4548
push 0x545f4f54
push 0x5f544345
push 0x4e4e4f43
push 0x5f4f545f
push 0x454c4241
push 0x4e555f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x44
mov dword [ebp - 0x800], 1
jmp 0x41317f
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [esp + 4], eax
push 0x10
lea edx, [esp + 4]
push edx
push dword [ebp - 0x7fc]
call dword [sym.imp.ws2_32.dll_connect]
test eax, eax
je 0x41292b
push 0
push 0xa0d3220
push 0x3a244544
push 0x4f435f52
push 0x4f525245
push 0x24202452
push 0x45565245
push 0x535f4548
push 0x545f4f54
push 0x5f544345
push 0x4e4e4f43
push 0x5f4f545f
push 0x454c4241
push 0x4e555f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x44
mov dword [ebp - 0x800], 1
jmp 0x41317f
push 0x20
push 0x54534f50
push esp
lea edx, [ebp - 0x660]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
add esp, 8
push dword [ebp + 0xc]
lea edx, [ebp - 0x660]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
push 0
push 0x203a7473
push 0x6f480a0d
push 0x29393237
push 0x30332e30
push 0x2e332052
push 0x4c432054
push 0x454e2e20
push 0x3b373237
push 0x30352e30
push 0x2e322052
push 0x4c432054
push 0x454e2e20
push 0x3b393237
push 0x30332e35
push 0x2e332052
push 0x4c432054
push 0x454e2e20
push 0x3b43302e
push 0x3454454e
push 0x2e203b45
push 0x302e3454
push 0x454e2e20
push 0x3b302e37
push 0x2f746e65
push 0x64697254
push 0x203b3436
push 0x574f5720
push 0x3b332e36
push 0x20544e20
push 0x73776f64
push 0x6e695720
push 0x3b302e37
push 0x20454953
push 0x4d203b65
push 0x6c626974
push 0x61706d6f
push 0x63282030
push 0x2e342f61
push 0x6c6c697a
push 0x6f4d203a
push 0x746e6567
push 0x412d7265
push 0x73550a0d
push 0x7572203a
push 0x65676175
push 0x676e614c
push 0x2d747065
push 0x6363410a
push 0xd646564
push 0x6f636e65
push 0x6c72752d
push 0x6d726f66
push 0x2d777777
push 0x2d782f6e
push 0x6f697461
push 0x63696c70
push 0x7061203a
push 0x65707954
push 0x2d746e65
push 0x746e6f43
push 0xa0d2a2f
push 0x2a203a74
push 0x70656363
push 0x410a0d31
push 0x2e312f50
push 0x54544820
push esp
lea edx, [ebp - 0x660]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
add esp, 0x10c
push dword [ebp + 8]
lea edx, [ebp - 0x660]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
cmp dword [ebp + 0x20], 1
jne 0x412afa
push 0xa0d35
push 0x3932203a
push 0x6874676e
push 0x654c2d74
push 0x6e65746e
push 0x6f430a0d
push esp
lea edx, [ebp - 0x660]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
add esp, 0x18
jmp 0x412b29
push 0xa0d39
push 0x3532203a
push 0x6874676e
push 0x654c2d74
push 0x6e65746e
push 0x6f430a0d
push esp
lea edx, [ebp - 0x660]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
add esp, 0x18
push 0x3d30
push 0x610a0d0a
push 0xd656863
push 0x61632d6f
push 0x6e203a6c
push 0x6f72746e
push 0x6f432d65
push 0x68636143
push 0xa0d6576
push 0x696c412d
push 0x7065654b
push 0x203a6e6f
push 0x69746365
push 0x6e6e6f43
push esp
lea edx, [ebp - 0x660]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
add esp, 0x38
push 0
push 0x58322e25
mov dword [ebp - 0x7f4], 0
cmp dword [ebp - 0x7f4], 0x80
jae 0x412bd5
lea edx, [ebp - 0x660]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
mov ecx, dword [ebp - 0x7f4]
add ecx, dword [ebp + 0x10]
movzx ecx, byte [ecx]
push ecx
lea edx, [esp + 4]
push edx
lea edx, [ebp + eax - 0x660]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
inc dword [ebp - 0x7f4]
jmp 0x412b91
add esp, 8
cmp dword [ebp + 0x20], 1
jne 0x412c4b
push 0
push 0x3d316126
push esp
lea edx, [ebp - 0x660]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
add esp, 8
push 0
push 0x58322e25
mov dword [ebp - 0x7f4], 0
cmp dword [ebp - 0x7f4], 0x10
jae 0x412c48
lea edx, [ebp - 0x660]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
mov ecx, dword [ebp - 0x7f4]
add ecx, dword [ebp + 0x14]
movzx ecx, byte [ecx]
push ecx
lea edx, [esp + 4]
push edx
lea edx, [ebp + eax - 0x660]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
inc dword [ebp - 0x7f4]
jmp 0x412c07
add esp, 8
lea edx, [ebp - 0x660]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
push 0
push eax
lea edx, [ebp - 0x660]
push edx
push dword [ebp - 0x7fc]
call dword [sym.imp.ws2_32.dll_send]
cmp eax, 0xffffffff
jne 0x412cdb
push 0
push 0xa0d3320
push 0x3a244544
push 0x4f435f52
push 0x4f525245
push 0x24202452
push 0x45565245
push 0x535f4548
push 0x545f4f54
push 0x5f544345
push 0x4e4e4f43
push 0x5f4f545f
push 0x454c4241
push 0x4e555f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x44
mov dword [ebp - 0x800], 1
jmp 0x41317f
push 0
push 0x400
lea edx, [ebp - 0x660]
push edx
push dword [ebp - 0x7fc]
call dword [sym.imp.ws2_32.dll_recv]
cmp eax, 0xffffffff
jne 0x412d62
push 0
push 0xa0d3420
push 0x3a244544
push 0x4f435f52
push 0x4f525245
push 0x24202452
push 0x45565245
push 0x535f4548
push 0x545f4f54
push 0x5f544345
push 0x4e4e4f43
push 0x5f4f545f
push 0x454c4241
push 0x4e555f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x44
mov dword [ebp - 0x800], 1
jmp 0x41317f
mov dword [ebp - 0x7f8], eax
push 0x4b4f20
push 0x30303220
push 0x312e312f
push 0x50545448
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x658]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x654]
mov dword [ebp - 0x254], eax
mov byte [ebp - 0x251], 0
push esp
lea edx, [ebp - 0x260]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcmpiA]
add esp, 0x10
test eax, eax
je 0x412e24
push 0xa0d
push 0x31203a24
push 0x45444f43
push 0x5f524f52
push 0x52452420
push 0x2c24454c
push 0x55444f4d
push 0x5f455a49
push 0x524f4854
push 0x55415f4f
push 0x545f454c
push 0x42414e55
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x38
mov dword [ebp - 0x800], 1
jmp 0x41317f
cmp dword [ebp + 0x20], 1
jne 0x41317f
xor ecx, ecx
cmp ecx, dword [ebp - 0x7f8]
jae 0x412e48
cmp dword [ebp + ecx - 0x660], 0xa0d0a0d
je 0x412e48
inc ecx
jmp 0x412e30
cmp ecx, dword [ebp - 0x7f8]
jne 0x412eac
push 0xa0d
push 0x32203a24
push 0x45444f43
push 0x5f524f52
push 0x52452420
push 0x2c24454c
push 0x55444f4d
push 0x5f455a49
push 0x524f4854
push 0x55415f4f
push 0x545f454c
push 0x42414e55
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x38
mov dword [ebp - 0x800], 1
jmp 0x41317f
add ecx, 4
xor edx, edx
cmp ecx, dword [ebp - 0x7f8]
jae 0x412ee4
cmp edx, 0x3f
jae 0x412ee4
cmp byte [ebp + ecx - 0x660], 0xd
je 0x412ee4
cmp byte [ebp + ecx - 0x660], 0xa
je 0x412ee4
mov al, byte [ebp + ecx - 0x660]
mov byte [ebp + edx - 0x240], al
inc ecx
inc edx
jmp 0x412eb1
mov byte [ebp + edx - 0x240], 0
cmp ecx, dword [ebp - 0x7f8]
jae 0x412f0b
cmp byte [ebp + ecx - 0x660], 0xd
je 0x412f08
cmp byte [ebp + ecx - 0x660], 0xa
jne 0x412f0b
inc ecx
jmp 0x412eec
xor edx, edx
cmp ecx, dword [ebp - 0x7f8]
jae 0x412f43
cmp edx, 0x1ff
jae 0x412f43
cmp byte [ebp + ecx - 0x660], 0xd
je 0x412f43
cmp byte [ebp + ecx - 0x660], 0xa
je 0x412f43
mov al, byte [ebp + ecx - 0x660]
mov byte [ebp + edx - 0x200], al
inc ecx
inc edx
jmp 0x412f0d
mov byte [ebp + edx - 0x200], 0
cmp dword [ebp - 0x240], 0x434f4c42
jne 0x412fbf
cmp dword [ebp - 0x23c], 0x44454b
jne 0x412fbf
push 0xa0d
push 0x33203a24
push 0x45444f43
push 0x5f524f52
push 0x52452420
push 0x2c24454c
push 0x55444f4d
push 0x5f455a49
push 0x524f4854
push 0x55415f4f
push 0x545f454c
push 0x42414e55
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x38
mov dword [ebp - 0x800], 1
jmp 0x41317f
cmp dword [ebp - 0x240], 0x45544144
jne 0x413040
cmp dword [ebp - 0x23c], 0x5058455f
jne 0x413040
cmp dword [ebp - 0x238], 0x44455249
jne 0x413040
cmp byte [ebp - 0x234], 0
jne 0x413040
push 0
push 0xa0d2444
push 0x45524950
push 0x58455f4e
push 0x4f495441
push 0x5255445f
push 0x454c4946
push 0x5f534e4f
push 0x4954434e
push 0x55465245
push 0x5453414d
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x34
mov dword [ebp - 0x800], 1
jmp 0x41317f
cmp dword [ebp - 0x240], 0x4c435943
jne 0x4130dc
cmp dword [ebp - 0x23c], 0x455f5345
jne 0x4130dc
cmp dword [ebp - 0x238], 0x52495058
jne 0x4130dc
cmp word [ebp - 0x234], 0x4445
jne 0x4130dc
cmp byte [ebp - 0x232], 0
jne 0x4130dc
push 0
push 0xa0d2444
push 0x45444e45
push 0x5f53454c
push 0x4359435f
push 0x474e4954
push 0x4952575f
push 0x454c4946
push 0x5f534e4f
push 0x4954434e
push 0x55465245
push 0x5453414d
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x38
nop
nop
nop
mov dword [ebp - 0x800], 1
jmp 0x41317f
cmp dword [ebp - 0x240], 0x4f4c4c41
jne 0x413128
cmp byte [ebp - 0x23c], 0x57
jne 0x413128
cmp byte [ebp - 0x23b], 0x3a
jne 0x41310c
lea edx, [ebp - 0x23a]
push edx
push dword [ebp + 0x1c]
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
jmp 0x413112
mov ecx, dword [ebp + 0x1c]
mov byte [ecx], 0
push pe_nt_image_headers32
push dword [ebp + 0x18]
lea edx, [ebp - 0x200]
push edx
call fcn.0041269f
jmp 0x41317f
push 0xa0d
push 0x34203a24
push 0x45444f43
push 0x5f524f52
push 0x52452420
push 0x2c24454c
push 0x55444f4d
push 0x5f455a49
push 0x524f4854
push 0x55415f4f
push 0x545f454c
push 0x42414e55
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x38
mov dword [ebp - 0x800], 1
push dword [ebp - 0x7fc]
call dword [sym.imp.ws2_32.dll_closesocket]
call dword [sym.imp.ws2_32.dll_WSACleanup]
add esp, 0x10
mov eax, dword [ebp - 0x800]
leave
ret 0x1c