Function at 0x402260
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket
Send http request
Send http request with host header
Set socket configuration

Disassembly:
sub esp, 0x5c8
mov eax, dword [0x41a36c]
push ebx
push ebp
push esi
push edi
push str.login.uudama.com
mov dword [esp + 0x1c], eax
call sub.WS2_32.dll_gethostbyname
test eax, eax
je 0x402661
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx]
push str._02x
lea ecx, [esp + 0x230]
push ecx
push 0x422798
mov dword [0x41a3b0], eax
mov byte [esp + 0x1f], 4
call fcn.004016b0
push eax
push 0x41a354
lea edx, [esp + 0x40]
push str.GET__Upload_Login.aspx_U_sP_s_HTTP_1.1_r_nUser_Agent:_MSIE_8.0_r_nHost:_login.uudama.com:9000_r_n_r_n
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
mov ebp, dword [sym.imp.WS2_32.dll_socket]
mov ebx, dword [sym.imp.WS2_32.dll_connect]
add esp, 0x1c
mov dword [esp + 0x14], eax
push 0
push 1
push 2
call ebp
push 4
push 0x40f40c
push 0x1006
mov esi, eax
push 0xffff
push esi
call sub.WS2_32.dll_setsockopt
push 4
push 0x40f410
push 0x80
push 0xffff
push esi
call sub.WS2_32.dll_setsockopt
push 0x10
push 0x41a3ac
push esi
call ebx
mov eax, dword [esp + 0x14]
push 0
push eax
lea ecx, [esp + 0x34]
push ecx
push esi
call dword [sym.imp.WS2_32.dll_send]
push 0
push 0x5ac
lea edx, [esp + 0x34]
push edx
push esi
call dword [sym.imp.WS2_32.dll_recv]
push esi
mov edi, eax
call dword [sym.imp.WS2_32.dll_closesocket]
test edi, edi
jg 0x402369
dec byte [esp + 0x13]
jne 0x4022d6
push 0x2710
push 0
push 0x1000
push 0
push 0x40f740
jmp 0x402674
lea eax, [esp + 0x2c]
push 0x40f738
push eax
mov byte [esp + edi + 0x34], 0
call dword [sym.imp.MSVCRT.dll_strstr]
lea esi, [eax + 4]
lea ecx, [esp + 0x34]
sub ecx, esi
add edi, ecx
add esp, 8
cmp edi, 0x32
jle 0x4025b1
push edi
push esi
push 0x4227b0
mov dword [0x419f24], edi
call sub.MSVCRT.dll_memcpy
push esi
call dword [sym.imp.MSVCRT.dll_atol]
push 0x4227b0
lea edx, [esp + 0x40]
push str.GET__bull_GetUUHash.php_user_s_HTTP_1.1_r_nHost:_223.4.49.18_r_n_r_n
push edx
mov dword [0x422844], eax
mov dword [esp + 0x38], 0x50000002
mov dword [esp + 0x3c], 0x123104df
mov byte [esp + 0x2f], 4
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x1c
mov dword [esp + 0x14], eax
push 0
push 1
push 2
call ebp
push 4
push 0x40f40c
push 0x1006
mov esi, eax
push 0xffff
push esi
call sub.WS2_32.dll_setsockopt
push 4
push 0x40f410
push 0x80
push 0xffff
push esi
call sub.WS2_32.dll_setsockopt
push 0x10
lea eax, [esp + 0x20]
push eax
push esi
call ebx
mov ecx, dword [esp + 0x14]
push 0
push ecx
lea edx, [esp + 0x34]
push edx
push esi
call dword [sym.imp.WS2_32.dll_send]
push 0
push 0x5ac
lea eax, [esp + 0x34]
push eax
push esi
call dword [sym.imp.WS2_32.dll_recv]
push esi
mov edi, eax
call dword [sym.imp.WS2_32.dll_closesocket]
test edi, edi
jg 0x402477
dec byte [esp + 0x13]
jne 0x4023e4
push 0x2710
push 0
push 0x1000
push 0
push 0x40f6dc
jmp 0x402674
lea ecx, [esp + 0x2c]
push 0x40f738
push ecx
call dword [sym.imp.MSVCRT.dll_strstr]
add eax, 4
sub edi, eax
lea edx, [esp + edi + 0x34]
add esp, 8
cmp edx, 0x40
jne 0x40245f
movq xmm0, qword [eax]
movq qword [0x415e54], xmm0
movq xmm0, qword [eax + 8]
movq qword [0x415e5c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [0x415e64], xmm0
movq xmm0, qword [eax + 0x18]
movq qword [0x415e6c], xmm0
movq xmm0, qword [eax + 0x20]
movq qword [0x419eec], xmm0
movq xmm0, qword [eax + 0x28]
movq qword [0x419ef4], xmm0
movq xmm0, qword [eax + 0x30]
movq qword [0x419efc], xmm0
movq xmm0, qword [eax + 0x38]
push str.upload.uuwise.net
movq qword [0x419f04], xmm0
call sub.WS2_32.dll_gethostbyname
test eax, eax
je 0x402661
mov eax, dword [eax + 0xc]
mov ecx, dword [eax]
mov eax, dword [esp + 0x18]
mov edx, dword [ecx]
push 0
push 1
push 0xf1
push 0x3ed
push eax
mov dword [0x41a3b0], edx
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov ecx, dword [0x41a374]
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
push 1
push ecx
call esi
mov edx, dword [0x41a378]
push 1
push edx
call esi
mov eax, dword [0x41a374]
mov esi, dword [sym.imp.USER32.dll_SetWindowTextA]
push 0x41a354
push eax
call esi
mov ecx, dword [0x41a378]
push 0x422798
push ecx
call esi
mov edx, dword [0x41a374]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0x17
push 0xc5
push edx
call esi
mov eax, dword [0x41a378]
push 0
push 0x17
push 0xc5
push eax
call esi
or byte [0x415d72], 0x20
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x5c8
ret
push esi
call dword [sym.imp.MSVCRT.dll_atol]
add eax, 6
add esp, 4
cmp eax, 5
ja case.0x4025c7.5
jmp dword [eax*4 + 0x402690]
push 0
push 0x1000
push 0
push 0x40f6b0
push 0
call dword [sym.imp.USER32.dll_MessageBoxExW]
and byte [0x415d72], 0xdf
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x5c8
ret
push 0
push 0x1000
push 0
push 0x40f698
push 0
call dword [sym.imp.USER32.dll_MessageBoxExW]
and byte [0x415d72], 0xdf
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x5c8
ret
push 0
push 0x1000
push 0
push 0x40f680
push 0
call dword [sym.imp.USER32.dll_MessageBoxExW]
and byte [0x415d72], 0xdf
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x5c8
ret
push 0x2710
push 0
push 0x1000
push 0
push 0x40f66c
jmp 0x402674
push 0x2710
push 0
push 0x1000
push 0
push 0x40f64c
push 0
call dword [0x41a044]
and byte [0x415d72], 0xdf
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x5c8
ret