Function at 0x4f1820
Capabilities:
Connect socket
Resolve dns

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffbf0
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x410], ebx
mov dword [ebp - 0x40c], ebx
mov dword [ebp - 0x408], ebx
mov dword [ebp - 0x404], ebx
mov edi, ecx
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x4f1b65
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebx]
test eax, eax
jne 0x4f19b6
mov eax, esi
call fcn.00409b08
mov ecx, eax
inc ecx
lea eax, [ebp - 0x400]
mov edx, esi
call fcn.004e79e8
lea eax, [ebp - 0x18]
mov ecx, 0x10
xor edx, edx
call fcn.004e79f0
mov word [ebp - 0x18], 2
lea eax, [ebp - 0x400]
call fcn.00409d7c
lea eax, [ebp - 0x400]
mov dl, 0x3a
call fcn.00409ce4
mov esi, eax
test esi, esi
je 0x4f18ce
mov byte [esi], 0
lea eax, [ebp - 0x404]
lea edx, [esi + 1]
call fcn.00403f04
mov eax, dword [ebp - 0x404]
xor edx, edx
call fcn.00409518
mov edi, eax
lea eax, [ebp - 0x408]
lea edx, [ebp - 0x400]
mov ecx, 0x3e8
call fcn.00403f7c
mov eax, dword [ebp - 0x408]
call fcn.004f17ac
dec eax
jne 0x4f1909
lea eax, [ebp - 0x400]
push eax
call sub.wsock32.dll_inet_addr
mov dword [ebp - 0x14], eax
mov word [ebp - 0x18], 2
jmp 0x4f1936
xor eax, eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x400]
push eax
call sub.wsock32.dll_gethostbyname
test eax, eax
jne 0x4f1926
or ebx, 0xffffffff
jmp 0x4f1b47
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov word [ebp - 0x18], 2
push 0
push 1
movzx eax, word [ebp - 0x18]
push eax
call sub.wsock32.dll_socket
mov esi, eax
cmp dword [ebp + 8], 0
jne 0x4f1955
xor edx, edx
mov eax, esi
call fcn.004f1414
mov eax, ebx
call fcn.004f1218
cmp esi, 0xffffffff
jne 0x4f1969
or ebx, 0xffffffff
jmp 0x4f1b47
push edi
call sub.wsock32.dll_htons
mov word [ebp - 0x16], ax
push 0x10
lea eax, [ebp - 0x18]
push eax
push esi
call sub.wsock32.dll_connect
mov edi, eax
mov eax, ebx
call fcn.004f1218
test edi, edi
je 0x4f19af
mov eax, ebx
call fcn.004f1808
test eax, eax
jne 0x4f19a5
push esi
call sub.wsock32.dll_closesocket
or ebx, 0xffffffff
jmp 0x4f1b47
mov dword [ebx + 0x4030], 1
mov ebx, esi
jmp 0x4f1b47
dec eax
jne 0x4f1b44
mov eax, esi
call fcn.00409b08
mov ecx, eax
inc ecx
lea eax, [ebp - 0x400]
mov edx, esi
call fcn.004e79e8
lea eax, [ebp - 0x18]
mov ecx, 0x10
xor edx, edx
call fcn.004e79f0
mov word [ebp - 0x18], 2
lea eax, [ebp - 0x400]
call fcn.00409d7c
lea eax, [ebp - 0x400]
mov dl, 0x3a
call fcn.00409ce4
mov esi, eax
test esi, esi
je 0x4f1a27
mov byte [esi], 0
lea eax, [ebp - 0x40c]
lea edx, [esi + 1]
call fcn.00403f04
mov eax, dword [ebp - 0x40c]
xor edx, edx
call fcn.00409518
mov edi, eax
lea eax, [ebp - 0x410]
lea edx, [ebp - 0x400]
mov ecx, 0x3e8
call fcn.00403f7c
mov eax, dword [ebp - 0x410]
call fcn.004f17ac
dec eax
jne 0x4f1a62
lea eax, [ebp - 0x400]
push eax
call sub.wsock32.dll_inet_addr
mov dword [ebp - 0x14], eax
mov word [ebp - 0x18], 2
jmp 0x4f1a8f
xor eax, eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x400]
push eax
call sub.wsock32.dll_gethostbyname
test eax, eax
jne 0x4f1a7f
or ebx, 0xffffffff
jmp 0x4f1b47
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov word [ebp - 0x18], 2
xor ecx, ecx
xor edx, edx
xor eax, eax
call fcn.004ed2b8
mov esi, eax
cmp dword [ebp + 8], 0
jne 0x4f1aad
xor edx, edx
mov eax, esi
call fcn.004f1414
jmp 0x4f1ac0
lea edx, [ebp - 0x410]
or ecx, 0xffffffff
mov eax, 0x4f1b80
call fcn.004ea0b8
mov eax, ebx
call fcn.004f1218
cmp esi, 0xffffffff
jne 0x4f1ad1
or ebx, 0xffffffff
jmp 0x4f1b47
push edi
call sub.wsock32.dll_htons
mov word [ebp - 0x16], ax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], eax
mov ax, word [ebp - 0x16]
mov word [ebp - 6], ax
mov eax, dword [ebp - 4]
push eax
mov ax, word [ebp - 6]
push eax
xor ecx, ecx
xor edx, edx
mov eax, esi
call fcn.004edd2c
mov edi, eax
mov eax, ebx
call fcn.004f1218
test edi, edi
je 0x4f1b32
mov eax, ebx
call fcn.004f1808
test eax, eax
jne 0x4f1b28
mov cx, word [ebp - 6]
mov edx, dword [ebp - 4]
mov eax, esi
call fcn.004ee1c8
or ebx, 0xffffffff
jmp 0x4f1b47
mov dword [ebx + 0x4030], 1
mov eax, dword [ebp - 4]
mov dword [ebx + 8], eax
mov ax, word [ebp - 6]
mov word [ebx + 0xc], ax
mov ebx, esi
jmp 0x4f1b47
or ebx, 0xffffffff
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4f1b6c
lea eax, [ebp - 0x410]
mov edx, 4
call fcn.00403d60
ret