Function at 0x48c886
Capabilities:
Create directory
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffc18
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
push dword [ebx + 0x3b0]
call fcn.00412773
test eax, eax
jne 0x48c8b3
push 0
push ebx
call fcn.0048bdab
xor eax, eax
jmp 0x48cbf4
cmp dword [ebx + 0x37c], 0
jne 0x48c98a
lea edx, [ebx + 0x37c]
push edx
push 0
push 0x577e2a
lea ecx, [ebx + 0x234]
push ecx
call fcn.00482188
cmp dword [ebx + 0x37c], 0
je 0x48c98a
cmp byte [0x577e2a], 0
je 0x48c98a
lea eax, [ebx + 4]
mov edi, eax
mov esi, 0x578211
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x578211
call fcn.004d3933
test eax, eax
je 0x48c98a
push 0x578211
push 0x577e2a
call fcn.0054c1f4
add esp, 8
push 0x577e2a
call fcn.0042e417
push 0x577e2a
push 0x104
lea eax, [ebx + 0x130]
push eax
call fcn.0042e322
push 0x577e2a
call fcn.0042e464
cmp byte [0x577e2a], 0
je 0x48c98a
push 2
push 0x577e2a
call fcn.0042c9b5
test eax, eax
jne 0x48c98a
push 0
push 0x577e2a
call sub.KERNEL32.dll_CreateDirectoryA
push ebx
call fcn.0048c4ae
test eax, eax
jne 0x48c9ad
push ebx
call fcn.0048be97
test eax, eax
je 0x48c9a6
push 0
push ebx
call fcn.0048bdab
xor eax, eax
jmp 0x48cbf4
push dword [ebx + 0x3b0]
call fcn.00412773
test eax, eax
jne 0x48c9cb
push 0
push ebx
call fcn.0048bdab
xor eax, eax
jmp 0x48cbf4
mov dword [ebx + 0x33c], 2
xor edx, edx
mov dword [ebx + 0x3a4], edx
xor ecx, ecx
mov dword [ebx + 0x344], ecx
xor eax, eax
mov dword [ebx + 0x380], eax
mov edx, dword [0x561c04]
mov dword [ebx + 0x384], edx
lea ecx, [ebx + 0x234]
push ecx
lea eax, [ebx + 4]
push eax
push 0x56435e
lea edx, [ebp - 0x3e8]
push edx
call sub.USER32.dll_wsprintfA
add esp, 0x10
push ebx
call fcn.0048c7ce
mov esi, eax
mov dword [ebx], esi
test esi, esi
jne 0x48ca55
push dword [ebx + 0x3b0]
push 0
push 2
push 3
lea eax, [ebp - 0x3e8]
push eax
call fcn.00524566
mov esi, eax
mov dword [ebx], esi
test esi, esi
jne 0x48ca64
push 0
push ebx
call fcn.0048bdab
xor eax, eax
jmp 0x48cbf4
push 0
push dword [ebx]
call fcn.0051dd0a
push eax
call fcn.00515490
cmp dword [0x562164], 0
jbe 0x48cb45
mov dword [ebx + 0x33c], 3
mov edx, dword [0x562164]
mov dword [ebx + 0x360], edx
push ebx
call fcn.0048c433
xor ecx, ecx
mov dword [0x562164], ecx
push 0
push 0xb59
call fcn.0042c564
push eax
lea eax, [ebp - 0x3e8]
push eax
call sub.USER32.dll_wsprintfA
add esp, 8
lea edx, [ebp - 0x3e8]
push edx
push 1
push 1
push 1
push 2
push ebx
call fcn.00517489
cmp dword [ebx + 0x374], 0
jne 0x48cb6f
mov ax, word [ebx + 0x34c]
test ax, ax
je 0x48cb03
push dword [ebx + 0x360]
movzx edx, ax
push edx
lea ecx, [ebx + 4]
push ecx
push 0x564369
lea eax, [ebp - 0x3e8]
push eax
call sub.USER32.dll_wsprintfA
add esp, 0x14
jmp 0x48cb2f
push dword [ebx + 0x340]
push dword [ebx + 0x360]
movzx edx, word [ebx + 0x34c]
push edx
lea ecx, [ebx + 4]
push ecx
push 0x564394
lea eax, [ebp - 0x3e8]
push eax
call sub.USER32.dll_wsprintfA
add esp, 0x18
push dword [ebx + 0x3b0]
push 0
lea edx, [ebp - 0x3e8]
push edx
call fcn.00525f63
jmp 0x48cb6f
push 0
push 0xb5a
call fcn.0042c564
push eax
push 1
push 1
push 1
push 2
push ebx
call fcn.00517489
cmp dword [ebx + 0x374], 0
jne 0x48cb6f
push ebx
call fcn.0048cd73
cmp dword [ebx + 0x374], 0
je 0x48cbef
push dword [ebx + 0x360]
mov eax, dword [ebx + 0x3b0]
imul edx, dword [eax + 0xb84], 0x64
add edx, eax
add edx, 0xa58
push edx
push str.121__s__lu_n
lea ecx, [ebp - 0x3e8]
push ecx
call sub.USER32.dll_wsprintfA
add esp, 0x10
push 0
lea eax, [ebp - 0x3e8]
push eax
call fcn.0054c2d0
pop ecx
push eax
lea edx, [ebp - 0x3e8]
push edx
push dword [ebx + 0x3a8]
call sub.WSOCK32.dll_send
push ebx
call fcn.0048d083
cmp dword [0x569980], 0
je 0x48cbef
push 3
push 0
lea ecx, [ebx + 0xcc]
push ecx
lea eax, [ebx + 4]
push eax
push dword [ebx]
call fcn.0047177d
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4