Function at 0x411d9a
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Create tcp socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, dword [0x49e0b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 1
xor esi, esi
push esi
push esi
push 6
push 1
push 2
mov dword [ebp - 0x3c], esi
call dword [sym.imp.WS2_32.dll_WSASocketW]
mov ebx, eax
xor eax, eax
mov dword [ebp - 0x5c], esi
lea edi, [ebp - 0x58]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
cmp ebx, 0xffffffff
je 0x411f3d
mov edi, dword [sym.imp.WS2_32.dll_htons]
mov eax, 0xddf3
mov word [ebp - 0x10], ax
mov eax, 0x4660
push 2
mov word [ebp - 0xe], ax
pop eax
mov word [ebp - 0x34], ax
mov eax, dword [ebp + 0x14]
push esi
mov dword [ebp - 0x14], 0x25a207b9
mov byte [ebp - 0xc], 0x8e
mov byte [ebp - 0xb], 0xe9
mov byte [ebp - 0xa], 0x76
mov byte [ebp - 9], 0xe5
mov byte [ebp - 8], 0x8c
mov byte [ebp - 7], 0x74
mov byte [ebp - 6], 6
mov byte [ebp - 5], 0x3e
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x30], eax
call edi
mov word [ebp - 0x32], ax
push 0x10
lea eax, [ebp - 0x34]
push eax
push ebx
call dword [sym.imp.WS2_32.dll_bind]
test eax, eax
jne 0x411f3d
push 2
pop eax
push dword [ebp + 0xc]
mov word [ebp - 0x24], ax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x20], eax
call edi
mov word [ebp - 0x22], ax
cmp dword [ebp + 0x10], esi
je 0x411f25
cmp dword [ebp + 0x10], 0xffffffff
je 0x411f25
push esi
push esi
lea eax, [ebp - 0x48]
push eax
push 4
lea eax, [ebp - 0x38]
push eax
push 0x10
lea eax, [ebp - 0x14]
push eax
push 0xc8000006
push ebx
call dword [sym.imp.WS2_32.dll_WSAIoctl]
cmp eax, 0xffffffff
je 0x411f25
cmp dword [ebp - 0x38], esi
je 0x411f25
call dword [sym.imp.WS2_32.dll_WSACreateEvent]
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x5c]
push eax
push esi
push esi
push esi
push 0x10
lea eax, [ebp - 0x24]
push eax
push ebx
call dword [ebp - 0x38]
test eax, eax
jne 0x411ecb
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x3e5
jne 0x411f3d
push esi
push dword [ebp + 0x10]
xor edi, edi
inc edi
push edi
lea eax, [ebp - 0x4c]
push eax
push edi
call dword [sym.imp.WS2_32.dll_WSAWaitForMultipleEvents]
test eax, eax
je 0x411eeb
push ebx
call dword [sym.imp.KERNEL32.dll_CancelIo]
jmp 0x411f3d
lea eax, [ebp - 0x44]
push eax
push edi
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x5c]
push eax
push ebx
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x44], esi
call dword [sym.imp.WS2_32.dll_WSAGetOverlappedResult]
test eax, eax
je 0x411f3d
push esi
push esi
push 0x7010
push 0xffff
push ebx
call dword [sym.imp.WS2_32.dll_setsockopt]
test eax, eax
jne 0x411f3d
mov dword [ebp - 0x3c], edi
jmp 0x411f3d
push 0x10
lea eax, [ebp - 0x24]
push eax
push ebx
call dword [sym.imp.WS2_32.dll_connect]
test eax, eax
jne 0x411f3d
mov dword [ebp - 0x3c], 1
cmp dword [ebp - 0x4c], esi
je 0x411f4b
push dword [ebp - 0x4c]
call dword [sym.imp.WS2_32.dll_WSACloseEvent]
cmp dword [ebp - 0x3c], esi
jne 0x411f5e
cmp ebx, 0xffffffff
je 0x411f5e
push ebx
call sub.WS2_32.dll_closesocket
or ebx, 0xffffffff
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov eax, ebx
xor ecx, ebp
pop ebx
call fcn.00464d54
leave
ret