Function at 0x481c50
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Create tcp socket
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c7fe3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x98
push ebx
push esi
push edi
mov dword [ebp - 0x18], ecx
lea ebx, [ecx + 4]
mov edi, 0x618f08
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
mov dword [ebp - 0x10], esp
dec ecx
push 1
mov dword [ebp - 0x20], ecx
push ecx
mov ecx, ebx
mov byte [ebp - 0x11], 1
mov dword [ebp - 4], 0
call fcn.004831a0
test al, al
je 0x481cc8
mov eax, dword [ebp - 0x20]
mov edi, dword [ebx + 4]
mov ecx, eax
mov esi, 0x618f08
mov edx, ecx
push eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, ebx
call fcn.00483180
mov edi, dword [ebp - 0x18]
cmp dword [edi + 0x28], 0xffffffff
je 0x481cd7
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
push 6
mov ebx, 2
push 1
push ebx
call dword [sym.imp.WS2_32.dll_socket]
cmp eax, 0xffffffff
mov dword [edi + 0x28], eax
jne 0x481d04
lea ecx, [ebp - 0x30]
push 0x5b1880
push ecx
mov dword [ebp - 0x30], 1
call fcn.00494080
mov eax, dword [0x618ed0]
test eax, eax
jne 0x481d85
mov edx, dword [ebp + 0xc]
mov word [ebp - 0x60], bx
push edx
call dword [sym.imp.WS2_32.dll_htons]
mov esi, dword [ebp + 8]
mov word [ebp - 0x5e], ax
push esi
call dword [sym.imp.WS2_32.dll_inet_addr]
cmp eax, 0xffffffff
mov dword [ebp - 0x5c], eax
jne 0x481d46
push esi
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x481d70
mov eax, dword [eax + 0xc]
mov ecx, dword [eax]
mov edx, dword [ecx]
mov dword [ebp - 0x5c], edx
mov edx, dword [edi + 0x28]
lea ecx, [ebp - 0x60]
push 0x10
push ecx
push edx
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x481f26
lea eax, [ebp - 0x24]
push 0x5b1880
push eax
mov dword [ebp - 0x24], ebx
call fcn.00494080
lea eax, [ebp - 0x2c]
push 0x5b1880
push eax
mov dword [ebp - 0x2c], 3
call fcn.00494080
lea ecx, [ebp - 0xa4]
call fcn.00483620
mov esi, dword [0x618ee0]
mov byte [ebp - 4], 1
test esi, esi
jne 0x481da3
mov esi, 0x618f08
mov cl, byte [ebp + 0xf]
push 0
mov byte [ebp - 0x50], cl
lea ecx, [ebp - 0x50]
call fcn.004845a0
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
lea ecx, [ebp - 0x50]
push ebx
call fcn.004831a0
test al, al
je 0x481dec
mov edi, dword [ebp - 0x4c]
mov ecx, ebx
mov edx, ecx
push ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x50]
call fcn.00483180
mov esi, dword [0x618edc]
mov byte [ebp - 4], 2
test esi, esi
jne 0x481dff
mov esi, 0x618f08
mov al, byte [ebp + 0xf]
push 0
lea ecx, [ebp - 0x40]
mov byte [ebp - 0x40], al
call fcn.004845a0
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
lea ecx, [ebp - 0x40]
push ebx
call fcn.004831a0
test al, al
je 0x481e48
mov edi, dword [ebp - 0x3c]
mov ecx, ebx
mov edx, ecx
push ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x40]
call fcn.00483180
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x40]
push eax
push ecx
mov ecx, 0x618eb8
mov byte [ebp - 4], 3
call fcn.004834e0
push eax
lea eax, [ebp - 0x19]
sub esp, 0x10
mov ecx, 0x618eb8
mov edx, esp
mov dword [ebp - 0x68], esp
push eax
mov dword [ebp - 0x20], edx
call fcn.004834f0
mov ecx, dword [ebp - 0x20]
push eax
call fcn.00482ca0
mov ecx, 0x618eb8
mov byte [ebp - 4], 4
call fcn.004834d0
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 3
call fcn.00483730
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.004845a0
mov ecx, dword [ebp - 0x4c]
mov byte [ebp - 4], 1
test ecx, ecx
je 0x481ed3
mov al, byte [ecx - 1]
dec ecx
test al, al
je 0x481eca
cmp al, 0xff
je 0x481eca
dec al
mov byte [ecx], al
jmp 0x481ed3
push ecx
call fcn.004b80af
add esp, 4
mov edx, dword [ebp + 0xc]
lea eax, [ebp + 0xf]
push edx
mov edx, dword [ebp + 8]
sub esp, 0x10
mov ecx, esp
mov dword [ebp + 0xc], esp
push eax
push edx
call fcn.00482ca0
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x28]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.00483930
test eax, eax
jne 0x481f17
lea edx, [ebp - 0x28]
push 0x5b1880
push edx
mov dword [ebp - 0x28], 2
call fcn.00494080
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0
call fcn.00483690
mov ecx, dword [ebp - 0x18]
mov al, byte [ebp - 0x11]
pop edi
pop esi
mov byte [ecx + 0x14], al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8