Function at 0x466f20
Capabilities:
Act as tcp client
Check for time delay via gettickcount
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Receive data
Receive data on socket
Send data
Send data on socket
Send http request

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d1590
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
mov eax, dword [0x64a040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x260], edi
mov dword [edi + 0x40dc], 0
call esi
mov edx, eax
mov eax, 0x10624dd3
mul edx
shr edx, 6
mov dword [edi + 0x240f0], edx
call esi
mov ecx, eax
mov dword [ebp - 4], 0
mov eax, 0x10624dd3
mul ecx
push 6
push 1
shr edx, 6
push 2
mov dword [edi + 0x240f4], edx
call dword [sym.imp.WS2_32.dll_socket]
mov dword [edi + 8], eax
cmp eax, 0xffffffff
jne 0x466fc7
push 0x645030
lea eax, [ebp - 0x254]
mov dword [ebp - 0x254], 2
push eax
call fcn.005b45c8
cmp dword [edi - 0x54], 0
jne 0x467002
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x234], xmm0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.0048efbb
mov edx, dword [edi - 0x74]
lea ecx, [edi - 0x74]
push 0
push 0x64
push eax
lea eax, [ebp - 0x234]
push eax
push 0x40000000
push 0
push 0
call dword [edx + 0x54]
mov esi, dword [ebp + 0xc]
xorps xmm0, xmm0
mov eax, 2
movdqu xmmword [ebp - 0x224], xmm0
push esi
mov word [ebp - 0x224], ax
call dword [sym.imp.WS2_32.dll_htons]
cmp byte [edi + 0x4018], 0
mov word [ebp - 0x222], ax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x220], eax
je 0x4673f4
lea ecx, [edi - 0x74]
call fcn.004678a0
movzx eax, al
test eax, eax
je 0x467066
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x268]
push 0x645020
push eax
call fcn.005b45c8
movzx eax, byte [edi + 0x4018]
dec eax
je 0x4672c7
dec eax
je 0x4671d3
dec eax
je 0x467099
push 0x645030
lea eax, [ebp - 0x270]
mov dword [ebp - 0x270], 3
push eax
call fcn.005b45c8
push 0xfc
lea eax, [ebp - 0x110]
mov dword [ebp - 0x114], 0x1000105
push 0
push eax
call fcn.005b41f0
mov eax, dword [ebp - 0x220]
add esp, 0xc
mov dword [ebp - 0x110], eax
mov ax, word [ebp - 0x222]
mov word [ebp - 0x10c], ax
lea eax, [ebp - 0x114]
push 0
push 0xa
push eax
push dword [edi + 8]
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xa
je 0x467107
push 0x645030
lea eax, [ebp - 0x278]
mov dword [ebp - 0x278], 3
push eax
call fcn.005b45c8
push 0
push 4
lea eax, [ebp - 0x114]
push eax
push dword [edi + 8]
call dword [sym.imp.WS2_32.dll_recv]
cmp eax, 4
je 0x46713b
push 0x645030
lea eax, [ebp - 0x244]
mov dword [ebp - 0x244], 3
push eax
call fcn.005b45c8
cmp byte [ebp - 0x114], 5
je 0x46715f
push 0x645030
lea eax, [ebp - 0x26c]
mov dword [ebp - 0x26c], 3
push eax
call fcn.005b45c8
cmp byte [ebp - 0x113], 0
jne 0x467183
push 0x645030
lea eax, [ebp - 0x24c]
mov dword [ebp - 0x24c], 3
push eax
call fcn.005b45c8
cmp byte [ebp - 0x111], 1
jne 0x467193
mov esi, 6
jmp 0x46719d
movsx esi, byte [ebp - 0x110]
add esi, 2
push 0
push esi
lea eax, [ebp - 0x114]
push eax
push dword [edi + 8]
call dword [sym.imp.WS2_32.dll_recv]
cmp eax, esi
je 0x4673c1
push 0x645030
lea eax, [ebp - 0x264]
mov dword [ebp - 0x264], 3
push eax
call fcn.005b45c8
push 0xfe
lea eax, [ebp - 0x112]
mov word [ebp - 0x114], 0x104
push 0
push eax
call fcn.005b41f0
mov ax, word [ebp - 0x222]
add esp, 0xc
mov word [ebp - 0x112], ax
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push 0
push 9
push eax
push dword [edi + 8]
mov byte [ebp - 0x10c], 0
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 9
je 0x467247
push 0x645030
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x23c], 3
push eax
call fcn.005b45c8
push 0
push 8
lea eax, [ebp - 0x114]
push eax
push dword [edi + 8]
call dword [sym.imp.WS2_32.dll_recv]
cmp eax, 8
je 0x46727b
push 0x645030
lea eax, [ebp - 0x274]
mov dword [ebp - 0x274], 3
push eax
call fcn.005b45c8
cmp byte [ebp - 0x114], 0
je 0x46729f
push 0x645030
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x25c], 3
push eax
call fcn.005b45c8
cmp byte [ebp - 0x113], 0x5a
je 0x4673c1
push 0x645030
lea eax, [ebp - 0x240]
mov dword [ebp - 0x240], 3
push eax
call fcn.005b45c8
mov ecx, dword [ebp + 8]
movzx eax, si
push eax
mov eax, dword [ebp + 0xb]
movzx eax, al
push eax
mov eax, dword [ebp + 0xa]
movzx eax, al
push eax
movzx eax, ch
push eax
movzx eax, cl
push eax
push str.CONNECT__d._d._d._d:_d_HTTP_1.0_r_nUser_Agent:_WHPlatform_0.1_r_n_r_n
lea eax, [ebp - 0x214]
push 0x200
push eax
call fcn.005b367e
lea esi, [ebp - 0x214]
add esp, 0x20
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x467306
push 0
sub esi, ecx
lea eax, [ebp - 0x214]
push esi
push eax
push dword [edi + 8]
call dword [sym.imp.WS2_32.dll_send]
cmp eax, esi
je 0x467341
push 0x645030
lea eax, [ebp - 0x248]
mov dword [ebp - 0x248], 3
push eax
call fcn.005b45c8
push 0
push 0x200
lea eax, [ebp - 0x214]
push eax
push dword [edi + 8]
call dword [sym.imp.WS2_32.dll_recv]
mov ecx, eax
test ecx, ecx
jle 0x46736e
cmp ecx, 0x200
jae 0x4673bc
mov byte [ebp + ecx - 0x214], 0
xor eax, eax
test ecx, ecx
jle 0x4673a1
cmp byte [ebp + eax - 0x214], 0x20
jne 0x46739c
cmp byte [ebp + eax - 0x213], 0x32
jne 0x46739c
cmp byte [ebp + eax - 0x212], 0x30
jne 0x46739c
cmp byte [ebp + eax - 0x211], 0x30
je 0x4673c1
inc eax
cmp eax, ecx
jl 0x467374
push 0x645030
lea eax, [ebp - 0x250]
mov dword [ebp - 0x250], 3
push eax
call fcn.005b45c8
call fcn.005b2d3f
push 0
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push 0x10
push 0
push 0x373
push dword [edi - 0x54]
mov byte [edi + 6], 2
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x33
push 0x373
push dword [edi - 0x54]
push dword [edi + 8]
call dword [sym.imp.WS2_32.dll_WSAAsyncSelect]
jmp 0x467468
push 0x33
push 0x373
push dword [edi - 0x54]
push dword [edi + 8]
call dword [sym.imp.WS2_32.dll_WSAAsyncSelect]
push 0x10
lea eax, [ebp - 0x224]
push eax
push dword [edi + 8]
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x467464
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
je 0x467464
push 0x645030
lea eax, [ebp - 0x258]
mov dword [ebp - 0x258], 2
push eax
call fcn.005b45c8
mov ecx, dword [ebp - 0x260]
push 0
lea ecx, [ecx - 0x74]
call fcn.004675b0
mov eax, 0x46745c
ret
mov byte [edi + 6], 1
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005b144a
mov esp, ebp
pop ebp
ret 8