Function at 0x404e98
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Contain obfuscated stackstrings
Create tcp socket
Create udp socket
Initialize winsock library
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1f0
mov dword [ebp - 0x1f0], ecx
mov byte [ebp - 0x24], 0x45
mov byte [ebp - 0x23], 0x68
mov byte [ebp - 0x22], 0x45
mov byte [ebp - 0x21], 0x55
mov byte [ebp - 0x20], 0x48
mov byte [ebp - 0x1f], 0x52
mov byte [ebp - 0x1e], 0x4d
mov byte [ebp - 0x1d], 0x64
mov byte [ebp - 0x1c], 0x45
mov byte [ebp - 0x1b], 0x78
mov byte [ebp - 0x1a], 0x30
mov byte [ebp - 0x19], 0x53
mov byte [ebp - 0x18], 0x51
mov byte [ebp - 0x17], 0x77
mov byte [ebp - 0x16], 0x3d
mov byte [ebp - 0x15], 0x3d
mov byte [ebp - 0x14], 0
mov byte [ebp - 0x1e0], 0x31
mov byte [ebp - 0x1df], 0x4f
mov byte [ebp - 0x1de], 0x62
mov byte [ebp - 0x1dd], 0x68
mov byte [ebp - 0x1dc], 0x48
mov byte [ebp - 0x1db], 0x65
mov byte [ebp - 0x1da], 0x54
mov byte [ebp - 0x1d9], 0x4b
mov byte [ebp - 0x1d8], 0x35
mov byte [ebp - 0x1d7], 0x2b
mov byte [ebp - 0x1d6], 0x66
mov byte [ebp - 0x1d5], 0x63
mov byte [ebp - 0x1d4], 0x30
mov byte [ebp - 0x1d3], 0x42
mov byte [ebp - 0x1d2], 0x33
mov byte [ebp - 0x1d1], 0x67
mov byte [ebp - 0x1d0], 0x33
mov byte [ebp - 0x1cf], 0x4e
mov byte [ebp - 0x1ce], 0x35
mov byte [ebp - 0x1cd], 0x44
mov byte [ebp - 0x1cc], 0
push str.user32.dll
call dword [sym.imp.kernel32.dll_LoadLibraryA]
mov dword [ebp - 0x1c4], eax
push str.MessageBoxA
mov eax, dword [ebp - 0x1c4]
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [ebp - 0x1bc], eax
lea ecx, [ebp - 0x1b4]
push ecx
push 0x102
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 0x43d888
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [ebp - 0xc], eax
push 0x7e5
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0xe], ax
mov word [ebp - 0x10], 2
push str.WSOCK32.DLL
call dword [sym.imp.kernel32.dll_LoadLibraryA]
mov dword [ebp - 0x1b8], eax
push str.gethostbyname
mov edx, dword [ebp - 0x1b8]
push edx
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0xc], 0xffffffff
jne 0x405074
mov dword [ebp - 0x1e4], 0
lea eax, [ebp - 0x1e0]
push eax
call fcn.0040121c
add esp, 4
push eax
call dword [ebp - 0x1c0]
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
je 0x40506d
mov ecx, dword [ebp - 0x1e4]
movsx edx, word [ecx + 0xa]
push edx
mov eax, dword [ebp - 0x1e4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx]
push edx
lea eax, [ebp - 0xc]
push eax
call fcn.00415b30
add esp, 0xc
mov ecx, dword [ebp - 0x1e4]
mov dx, word [ecx + 8]
mov word [ebp - 0x10], dx
jmp 0x405074
xor eax, eax
jmp 0x40520d
push 0
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0x1c8], eax
push 0x10
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x1c8]
push ecx
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x4050bf
mov edx, dword [ebp - 0x1c8]
push edx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [0x442090]
add eax, 1
mov dword [0x442090], eax
xor eax, eax
jmp 0x40520d
mov ecx, 1
test ecx, ecx
je 0x405129
push 0
push 0x620
lea edx, [ebp + 8]
push edx
mov eax, dword [ebp - 0x1c8]
push eax
call dword [sym.imp.WS2_32.dll_send]
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0xffffffff
jne 0x405129
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x405106
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
jmp 0x4050bf
mov ecx, dword [ebp - 0x1c8]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
mov edx, dword [0x442090]
add edx, 1
mov dword [0x442090], edx
xor eax, eax
jmp 0x40520d
mov eax, 1
test eax, eax
je 0x405190
push 0
push 0x620
lea ecx, [ebp + 8]
push ecx
mov edx, dword [ebp - 0x1c8]
push edx
call dword [sym.imp.WS2_32.dll_recv]
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0xffffffff
jne 0x405190
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x405170
push 0x32
call dword [sym.imp.kernel32.dll_Sleep]
jmp 0x405129
mov eax, dword [ebp - 0x1c8]
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
mov ecx, dword [0x442090]
add ecx, 1
mov dword [0x442090], ecx
xor eax, eax
jmp 0x40520d
mov edx, dword [ebp - 0x1f0]
mov eax, dword [ebp + 0x518]
cmp eax, dword [edx + 0x6c]
je 0x4051d2
push 0
push 0
lea ecx, [ebp + 0x524]
push ecx
push 0
call dword [ebp - 0x1bc]
mov edx, dword [ebp - 0x1f0]
mov dword [edx + 0x78], 0
mov eax, dword [0x442090]
add eax, 1
mov dword [0x442090], eax
xor eax, eax
jmp 0x40520d
mov ecx, dword [ebp - 0x1f0]
mov edx, dword [ebp + 0x518]
mov dword [ecx + 0x74], edx
mov eax, dword [ebp - 0x1f0]
mov ecx, dword [ebp + 0x51c]
mov dword [eax + 0x78], ecx
mov edx, dword [ebp - 0x1c8]
push edx
call dword [sym.imp.WS2_32.dll_closesocket]
mov ecx, dword [ebp - 0x1f0]
call fcn.00421cb5
mov eax, 1
mov esp, ebp
pop ebp
ret 0x620