Function at 0x5fd8c1ca
Capabilities:
Send data
Send data on socket

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x64
mov eax, dword [0x5fde94a8]
xor eax, esp
mov dword [esp + 0x60], eax
and dword [esp + 0xc], 0
push ebx
push esi
push edi
mov edi, edx
mov ebx, ecx
mov eax, dword [0x5fde9010]
cmp eax, 0x5fde9010
je 0x5fd8c205
test dword [eax + 0x1c], 0x100
jne 0x5fdb4ccf
lea esi, [ebx + 0x1d0]
and byte [esi + 3], 0xbf
test edi, edi
je 0x5fd8c21c
mov edx, edi
mov ecx, ebx
call fcn.5fd8c3d4
lea edx, [ebx + 0x18]
mov ecx, ebx
call fcn.5fd8c429
cmp dword [ebx + 0x1c8], 0
mov ecx, dword [ebx + 0x194]
mov dword [esp + 0x10], ecx
jne 0x5fdb4ced
mov eax, ecx
sub eax, esi
movzx edi, ax
mov eax, dword [ebx + 0x1c8]
mov dword [esp + 0x1c], edi
test eax, eax
jne 0x5fdb4d59
xor eax, eax
mov byte [ebx + 0x1bf], al
mov eax, dword [0x5fde9010]
test dword [eax + 0x1c], 0x1000000
jne 0x5fdb4d69
rol word [esi], 8
rol word [esi + 4], 8
rol word [esi + 6], 8
rol word [esi + 8], 8
rol word [esi + 0xa], 8
cmp byte [ebx + 0x1b8], 0
jne 0x5fda840e
lea edi, [ebx + 0x18]
mov ecx, edi
call fcn.5fd8c5cd
mov ecx, ebx
mov dword [esp + 0x10], eax
call fcn.5fd8c50d
test eax, eax
je 0x5fdb4e32
mov eax, dword [0x5fde9010]
cmp eax, 0x5fde9010
je 0x5fd8c2cb
test dword [eax + 0x1c], 0x400
jne 0x5fdb4e53
cmp dword [esp + 0x10], 0
je 0x5fd8c31d
cmp dword [ebp + 0xc], 0
je 0x5fd8c2fa
push dword [ebp + 0xc]
movzx eax, word [edi]
push dword [ebx + 0x17c]
push eax
push dword [ebx + 0xa0]
call sym.DNSAPI.dll_Socket_SetMulticastInterface
mov ecx, eax
mov dword [esp + 0x10], ecx
test ecx, ecx
jne 0x5fd8c36e
push dword [ebx + 0x17c]
movzx eax, word [edi]
push 1
push 1
push eax
push dword [ebx + 0xa0]
call sym.DNSAPI.dll_Socket_SetTtl
mov ecx, eax
mov dword [esp + 0x10], ecx
test ecx, ecx
jne 0x5fd8c36e
cmp dword [ebx + 0x17c], 0
mov esi, edi
push 0x10
pop ecx
lea edi, [esp + 0x20]
rep movsd dword es:[edi], dword [esi]
je 0x5fd8c33a
lea ecx, [esp + 0x20]
call fcn.5fd8c3f7
push dword [esp + 0x40]
lea eax, [esp + 0x24]
push eax
mov eax, dword [esp + 0x24]
lea esi, [ebx + 0x1d0]
push 0
movzx eax, ax
push eax
push esi
push dword [ebx + 0xa0]
call dword [sym.imp.WS2_32.dll_sendto]
cmp eax, 0xffffffff
je 0x5fdb4e77
and dword [esp + 0x10], 0
mov ax, word [esi + 0xa]
rol word [esi], 8
rol word [esi + 4], 8
rol word [esi + 6], 8
rol word [esi + 8], 8
rol ax, 8
cmp dword [esp + 0x18], 0
movzx eax, ax
mov ecx, eax
mov word [esi + 0xa], ax
jne 0x5fdb4ecf
cmp dword [0x5fde9088], 0
je 0x5fdac3c0
cmp dword [0x5fde9058], 0
jne 0x5fdb4edb
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.5fd83560
mov esp, ebp
pop ebp
ret 8
lea eax, [ebx + 0x1ce]
push edi
mov dword [esp + 0x14], eax
call dword [sym.imp.WS2_32.dll_htons]
lea ecx, [ebx + 0x1ce]
add edi, 2
mov word [ecx], ax
test di, di
je 0x5fd8c369
push 0
movzx eax, di
push eax
push ecx
push dword [ebx + 0xa0]
call dword [sym.imp.WS2_32.dll_send]
test eax, eax
je 0x5fdb4d80
cmp eax, 0xffffffff
je 0x5fdb4d80
mov ecx, dword [esp + 0x10]
sub edi, eax
add ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x5fda842b
call fcn.5fd9888f
jmp 0x5fd8c3aa
push dword [ebp + 0xc]
push dword [ebp + 8]
push edi
push dword [ebx + 0xa0]
push ebx
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.5fdcdca9
jmp 0x5fd8c205
test dword [ebx + 0x1c0], 0x1000000
jne 0x5fd8c23d
cmp dword [ebp + 8], 0
jne 0x5fdb4d3d
cmp dword [0x5fde9290], 0
jne 0x5fdb4d15
cmp byte [ebx + 0x1ba], 0
je 0x5fdb4d3d
mov al, byte [ebx + 0x1d2]
and al, 0x78
cmp al, 0x28
je 0x5fdb4d3d
test edi, edi
je 0x5fd8c23d
mov ecx, edi
call fcn.5fdcda9c
test eax, eax
jne 0x5fdb4d3d
mov ecx, dword [esp + 0x10]
jmp 0x5fd8c23d
mov ecx, dword [ebx + 0x1c8]
mov eax, 0xffff
add word [esi + 0xa], ax
mov dword [esp + 0x18], 1
jmp 0x5fd8c23d
cmp ecx, eax
je 0x5fd8c256
xor eax, eax
inc eax
jmp 0x5fd8c258
push ebx
push 0x5fdb5864
mov word [ebx + 0x1ce], di
call fcn.5fdd6020
jmp 0x5fd8c270
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, eax
mov eax, dword [0x5fde9010]
mov dword [esp + 0x10], ecx
cmp ecx, 0x274a
jne 0x5fdb4dc2
test dword [eax + 0x1c], 0x10000000
je 0x5fd8c36e
cmp eax, 0x5fde9010
je 0x5fd8c36e
push ebx
push dword [ebx + 0xa0]
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x26
jmp 0x5fdb4df1
cmp ecx, 0x2736
jne 0x5fdb4e01
test dword [eax + 0x1c], 0x10000000
je 0x5fd8c36e
cmp eax, 0x5fde9010
je 0x5fd8c36e
push ebx
push dword [ebx + 0xa0]
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x27
mov edx, 0x5fd8bc80
pop ecx
call fcn.5fdc81e7
jmp 0x5fd8c36e
test dword [eax + 0x1c], 0x10000000
je 0x5fd8c36e
cmp eax, 0x5fde9010
je 0x5fd8c36e
push ecx
push dword [eax + 0x14]
mov edx, 0x5fd8bc80
push dword [eax + 0x10]
push 0x28
pop ecx
call fcn.5fdc7d09
jmp 0x5fd8c36e
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov ecx, eax
mov dword [esp + 0x10], ecx
test ecx, ecx
jne 0x5fd8c36e
mov dword [esp + 0x10], 0x273b
jmp 0x5fd8c36e
push dword [ebx + 0xc]
mov edx, 0x5fd8bc80
push dword [ebx + 8]
push dword [ebx + 0x17c]
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x29
pop ecx
call fcn.5fdc8d83
jmp 0x5fd8c2cb
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, eax
mov eax, dword [0x5fde9010]
mov dword [esp + 0x10], ecx
test dword [eax + 0x1c], 0x10000000
je 0x5fd8c36e
cmp eax, 0x5fde9010
je 0x5fdb4eb0
push ecx
push dword [eax + 0x14]
mov edx, 0x5fd8bc80
push dword [eax + 0x10]
push 0x2a
pop ecx
call fcn.5fdc7d09
lea eax, [ebx + 0x18]
push eax
push ecx
push 0x5fdb5874
call fcn.5fdd5316
push ebx
push 0x5fdb5890
call fcn.5fdd6020
jmp 0x5fd8c36e
lea eax, [ecx + 1]
mov word [esi + 0xa], ax
jmp 0x5fd8c39d
cmp byte [ebx + 0x1b8], 0
mov byte [esp + 0x17], 9
je 0x5fdb4eee
mov byte [esp + 0x17], 0xa
push 0x48
pop esi
push esi
lea eax, [esp + 0x24]
push 0
push eax
call sub.api_ms_win_core_crt_l1_1_0.dll_memset
mov al, byte [esp + 0x23]
lea edi, [esp + 0x44]
mov word [esp + 0x2c], si
add esp, 0xc
mov byte [esp + 0x24], al
mov esi, 0x5fde9508
mov eax, dword [ebx + 0x1c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [esp + 0x5c], eax
lea esi, [ebx + 0x1d0]
mov eax, dword [esp + 0x10]
lea edi, [esp + 0x50]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x20]
mov dword [esp + 0x4c], 0x20000
movsd dword es:[edi], dword [esi]
push eax
push dword [0x5fdeb72c]
push dword [0x5fdeb728]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.ntdll.dll_EtwLogTraceEvent]
jmp 0x5fd8c3b7