Function at 0x41abb0
Capabilities:
Connect socket
Get local ipv4 addresses
Get socket information
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff9c0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x63c], ecx
mov dword [ebp - 0x640], ecx
mov dword [ebp - 0x10], ecx
mov esi, edx
mov edi, eax
xor eax, eax
push ebp
push 0x41af57
push dword fs:[eax]
mov dword fs:[eax], esp
xor ebx, ebx
lea eax, [ebp - 0x10]
mov edx, 0xa
call fcn.00405120
lea eax, [ebp - 0x618]
mov edx, 0x400
call fcn.004074e4
push 0
push 0x400
lea eax, [ebp - 0x618]
push eax
push edi
call sub.wsock32.dll_recv
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x114]
mov edx, 0x104
call fcn.004074e4
lea edx, [ebp - 0x618]
lea eax, [ebp - 0x114]
mov ecx, dword [ebp - 0xc]
call fcn.004074dc
lea eax, [ebp - 0x218]
mov edx, 0x104
call fcn.004074e4
mov byte [ebp - 0x218], 5
mov byte [ebp - 0x216], 0
cmp byte [ebp - 0x114], 5
jne 0x41ac69
cmp byte [ebp - 0x112], 0
je 0x41ac6d
xor eax, eax
jmp 0x41ac6f
mov al, 1
test al, al
jne 0x41aca1
mov byte [ebp - 0x217], 1
lea eax, [ebp - 0x10]
call fcn.00405048
lea edx, [ebp - 0x218]
mov ecx, 0xa
call fcn.004074dc
mov edx, dword [ebp - 0x10]
mov eax, edi
call fcn.0041aa6c
jmp 0x41af31
mov al, byte [ebp - 0x113]
dec al
je 0x41acd9
mov byte [ebp - 0x217], 7
lea eax, [ebp - 0x10]
call fcn.00405048
lea edx, [ebp - 0x218]
mov ecx, 0xa
call fcn.004074dc
mov edx, dword [ebp - 0x10]
mov eax, edi
call fcn.0041aa6c
jmp 0x41af31
lea eax, [ebp - 0x628]
mov edx, 0x10
call fcn.004074e4
mov word [ebp - 0x628], 2
mov al, byte [ebp - 0x111]
dec al
je 0x41ad05
sub al, 2
je 0x41ad52
jmp 0x41adff
mov al, byte [ebp - 0x110]
mov byte [ebp - 0x624], al
mov al, byte [ebp - 0x10f]
mov byte [ebp - 0x623], al
mov al, byte [ebp - 0x10e]
mov byte [ebp - 0x622], al
mov al, byte [ebp - 0x10d]
mov byte [ebp - 0x621], al
mov dl, byte [ebp - 0x10b]
mov al, byte [ebp - 0x10c]
call fcn.004074c8
mov word [ebp - 0x626], ax
jmp 0x41ae2d
xor eax, eax
mov al, byte [ebp - 0x110]
mov dword [ebp - 8], eax
lea eax, [ebp - 0x63c]
push eax
lea eax, [ebp - 0x640]
lea edx, [ebp - 0x110]
mov ecx, pe_nt_image_headers32
call fcn.00404da8
mov eax, dword [ebp - 0x640]
mov ecx, dword [ebp - 8]
mov edx, 2
call fcn.00405050
mov eax, dword [ebp - 0x63c]
call fcn.00404ff0
push eax
call sub.wsock32.dll_gethostbyname
test eax, eax
jne 0x41add0
mov byte [ebp - 0x217], 1
lea eax, [ebp - 0x10]
call fcn.00405048
lea edx, [ebp - 0x218]
mov ecx, 0xa
call fcn.004074dc
mov edx, dword [ebp - 0x10]
mov eax, edi
call fcn.0041aa6c
jmp 0x41af31
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 8]
mov dl, byte [ebp + eax - 0x10e]
mov eax, dword [ebp - 8]
mov al, byte [ebp + eax - 0x10f]
call fcn.004074c8
mov word [ebp - 0x626], ax
jmp 0x41ae2d
mov byte [ebp - 0x217], 8
lea eax, [ebp - 0x10]
call fcn.00405048
lea edx, [ebp - 0x218]
mov ecx, 0xa
call fcn.004074dc
mov edx, dword [ebp - 0x10]
mov eax, edi
call fcn.0041aa6c
jmp 0x41af31
push 0x10
lea eax, [ebp - 0x628]
push eax
mov eax, dword [esi]
push eax
call sub.wsock32.dll_connect
inc eax
jne 0x41ae77
mov byte [ebp - 0x217], 4
lea eax, [ebp - 0x10]
call fcn.00405048
lea edx, [ebp - 0x218]
mov ecx, 0xa
call fcn.004074dc
mov edx, dword [ebp - 0x10]
mov eax, edi
call fcn.0041aa6c
mov eax, dword [esi]
push eax
call sub.wsock32.dll_closesocket
jmp 0x41af31
lea eax, [ebp - 0x638]
mov edx, 0x10
call fcn.004074e4
mov dword [ebp - 4], 0x10
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x638]
push eax
mov eax, dword [esi]
push eax
call sub.wsock32.dll_getsockname
mov byte [ebp - 0x215], 1
mov al, byte [ebp - 0x634]
mov byte [ebp - 0x214], al
mov al, byte [ebp - 0x633]
mov byte [ebp - 0x213], al
mov al, byte [ebp - 0x632]
mov byte [ebp - 0x212], al
mov al, byte [ebp - 0x631]
mov byte [ebp - 0x211], al
mov ax, word [ebp - 0x636]
mov edx, eax
and dx, 0xff
mov byte [ebp - 0x210], dl
movzx eax, ax
shr eax, 8
mov byte [ebp - 0x20f], al
lea eax, [ebp - 0x618]
mov edx, 0x400
call fcn.004074e4
lea edx, [ebp - 0x218]
lea eax, [ebp - 0x618]
mov ecx, 0xa
call fcn.004074dc
push 0
push 0xa
lea eax, [ebp - 0x618]
push eax
push edi
call sub.wsock32.dll_send
mov bl, 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41af5e
lea eax, [ebp - 0x640]
mov edx, 2
call fcn.00404b64
lea eax, [ebp - 0x10]
call fcn.00404b40
ret