Function at 0x440621
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 2
add esp, 0xfffff004
push eax
dec eax
jne 0x44062a
mov eax, dword [ebp - 4]
add esp, 0xfffff6f0
push ebx
push esi
push edi
mov edi, dword [ebp + 0x14]
mov esi, 0x45f1ea
call fcn.0043376c
push dword [ebp + 8]
call sub.WSOCK32.dll_gethostbyname
test eax, eax
jne 0x440666
call fcn.00433786
or eax, 0xffffffff
jmp 0x4408fa
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
xor edx, edx
mov dl, byte [ecx]
mov ecx, dword [eax + 0xc]
mov ecx, dword [ecx]
movzx ecx, byte [ecx + 1]
shl ecx, 8
add edx, ecx
mov ecx, dword [eax + 0xc]
mov ecx, dword [ecx]
movzx ecx, byte [ecx + 2]
shl ecx, 0x10
add edx, ecx
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
xor ecx, ecx
mov cl, byte [eax + 3]
shl ecx, 0x18
add edx, ecx
mov eax, edx
mov dword [ebp - 0x2720], eax
mov word [ebp - 0x2724], 2
push 0x50
call sub.WSOCK32.dll_htons
mov word [ebp - 0x2722], ax
call fcn.00433786
push 0
push 1
push 2
call sub.WSOCK32.dll_socket
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x4406d7
mov eax, ebx
jmp 0x4408fa
push 0x10
lea edx, [ebp - 0x2724]
push edx
push ebx
call sub.WSOCK32.dll_connect
inc eax
jne 0x4406f7
push ebx
call sub.WSOCK32.dll_closesocket
or eax, 0xffffffff
jmp 0x4408fa
call fcn.0043d72f
add esp, 0xfffffff8
fstp qword [esp]
lea edx, [esi + 0x230]
push edx
lea ecx, [ebp - 0x2824]
push ecx
call fcn.004452e0
add esp, 0x10
call fcn.00401f8d
push eax
lea eax, [esi + 0x233]
push eax
lea edx, [ebp - 0x2874]
push edx
call fcn.004452e0
add esp, 0xc
call fcn.00401f64
push eax
lea ecx, [esi + 0x236]
push ecx
lea eax, [ebp - 0x28c4]
push eax
call fcn.004452e0
add esp, 0xc
lea edx, [ebp - 0x2714]
push edx
call fcn.00440562
pop ecx
lea ecx, [esi + 0x239]
push ecx
lea eax, [ebp - 0x2714]
push eax
call fcn.00440572
add esp, 8
mov edx, dword [0x45edb0]
push dword [edx]
lea ecx, [esi + 0x23f]
push ecx
lea eax, [ebp - 0x2914]
push eax
call fcn.004452e0
add esp, 0xc
lea edx, [ebp - 0x2914]
push edx
lea ecx, [ebp - 0x2714]
push ecx
call fcn.00440572
add esp, 8
lea eax, [esi + 0x242]
push eax
lea edx, [ebp - 0x2714]
push edx
call fcn.00440572
add esp, 8
lea ecx, [esi + 0x24b]
push ecx
lea eax, [ebp - 0x2714]
push eax
call fcn.00440572
add esp, 8
lea edx, [esi + 0x251]
push edx
lea ecx, [ebp - 0x2714]
push ecx
call fcn.00440572
add esp, 8
lea eax, [ebp - 0x2824]
push eax
lea edx, [ebp - 0x2714]
push edx
call fcn.00440572
add esp, 8
lea ecx, [esi + 0x255]
push ecx
lea eax, [ebp - 0x2714]
push eax
call fcn.00440572
add esp, 8
lea edx, [ebp - 0x28c4]
push edx
lea ecx, [ebp - 0x2714]
push ecx
call fcn.00440572
add esp, 8
lea eax, [esi + 0x259]
push eax
lea edx, [ebp - 0x2714]
push edx
call fcn.00440572
add esp, 8
lea ecx, [ebp - 0x2874]
push ecx
lea eax, [ebp - 0x2714]
push eax
call fcn.00440572
add esp, 8
lea edx, [esi + 0x25d]
push edx
lea ecx, [ebp - 0x2714]
push ecx
call fcn.00440572
add esp, 8
push edi
lea eax, [ebp - 0x2714]
push eax
call fcn.00440572
add esp, 8
lea edx, [esi + 0x264]
push edx
lea ecx, [ebp - 0x2714]
push ecx
call fcn.00440572
add esp, 8
lea eax, [edi + 0x32]
push eax
lea edx, [ebp - 0x2714]
push edx
call fcn.00440572
add esp, 8
lea ecx, [esi + 0x26a]
push ecx
lea eax, [ebp - 0x2714]
push eax
call fcn.00440572
add esp, 8
add edi, 0xc8
push edi
lea eax, [ebp - 0x2714]
push eax
call fcn.00440572
add esp, 8
lea edx, [ebp - 0x2714]
push edx
call fcn.004405b3
pop ecx
push dword [ebp - 4]
lea ecx, [ebp - 0x2714]
push ecx
push dword [ebp + 0xc]
push dword [ebp + 0x10]
push ebx
call fcn.0043fff8
add esp, 0x14
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret