Function at 0x100fae5
Capabilities:
Create raw socket
Initialize winsock library
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c8
and byte [ebp - 0x138], 0
push ebx
push esi
push edi
push 0x3f
pop ecx
xor eax, eax
lea edi, [ebp - 0x137]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x1006594
xor edi, edi
inc edi
xor esi, esi
push edi
mov ebx, 0x3e8
push 0x8000
mov dword [ebp - 0x18], 0x10
mov dword [ebp - 0x10], ebx
mov dword [ebp - 8], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x14], esi
call fcn.0100e994
lea eax, [ebp - 0x2c8]
push eax
push 0x102
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x100fb7f
call fcn.0100dece
push eax
lea eax, [ebp - 0x138]
push 0x100657c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x138]
push eax
push edi
push 0x4000000
call fcn.0100e994
mov ebx, edi
jmp 0x100feb2
push esi
push esi
push esi
push edi
push 3
push 2
call dword [sym.imp.WS2_32.dll_WSASocketA]
cmp eax, 0xffffffff
mov dword [ebp - 4], eax
jne 0x100fbca
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
lea eax, [ebp - 0x138]
push 0x1006564
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x138]
push eax
push edi
push 0x4000000
call fcn.0100e994
mov ebx, edi
jmp 0x100fea3
mov esi, dword [sym.imp.WS2_32.dll_setsockopt]
push 4
lea ecx, [ebp - 0x10]
push ecx
push 0x1006
mov edi, 0xffff
push edi
push eax
call esi
cmp eax, 0xffffffff
jne 0x100fbf7
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push 0x1006540
jmp 0x100fc1c
push 4
lea eax, [ebp - 0x10]
push eax
push 0x1005
push edi
push dword [ebp - 4]
mov dword [ebp - 0x10], ebx
call esi
cmp eax, 0xffffffff
jne 0x100fc47
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push 0x1006520
lea eax, [ebp - 0x138]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x138]
push eax
push 1
push 0x4000000
call fcn.0100e994
push 2
pop ebx
jmp 0x100fea3
push dword [ebp + 8]
xor eax, eax
lea edi, [ebp - 0x28]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x100fc79
movsx ecx, word [eax + 0xa]
mov edx, dword [eax + 0xc]
mov esi, dword [edx]
mov edx, ecx
shr ecx, 2
lea edi, [ebp - 0x24]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x100fc7d
and dword [ebp - 0x24], 0
test eax, eax
je 0x100fc8b
mov ax, word [eax + 8]
mov word [ebp - 0x28], ax
jmp 0x100fc91
mov word [ebp - 0x28], 2
push dword [ebp - 0x24]
call dword [sym.imp.WS2_32.dll_inet_ntoa]
mov ebx, 0x400
push ebx
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edi, dword [sym.imp.KERNEL32.dll_HeapAlloc]
push eax
call edi
push ebx
push 8
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call edi
test esi, esi
mov dword [ebp + 8], eax
jne 0x100fcd4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x1006500
jmp 0x100fce4
test eax, eax
jne 0x100fcf5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x10064e0
push 1
call fcn.0100c07e
add esp, 0xc
push 3
jmp 0x100fe78
push 0x2c
xor eax, eax
mov ecx, 0x100
mov edi, esi
push esi
rep stosd dword es:[edi], eax
call fcn.0100faa0
xor edi, edi
mov word [esi + 2], di
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 8], eax
mov ax, word [ebp - 8]
inc dword [ebp - 8]
push 0x2c
push esi
mov word [esi + 6], ax
call fcn.0100fa4d
push 0x10
mov word [esi + 2], ax
lea eax, [ebp - 0x28]
push eax
push edi
push 0x2c
push esi
push dword [ebp - 4]
call dword [sym.imp.WS2_32.dll_sendto]
cmp eax, 0xffffffff
jne 0x100fd70
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x274c
jne 0x100fe29
push 0x10064d4
push 1
push 0x8000000
call fcn.0100e994
inc dword [ebp - 0xc]
jmp 0x100fe0e
cmp eax, 0x2c
jge 0x100fd9e
push eax
lea eax, [ebp - 0x138]
push 0x10064c4
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x138]
push eax
push 1
push 0x8000000
call fcn.0100e994
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x38]
push eax
push edi
push ebx
push dword [ebp + 8]
push dword [ebp - 4]
call dword [sym.imp.WS2_32.dll_recvfrom]
cmp eax, 0xffffffff
jne 0x100fde0
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x274c
jne 0x100fe5c
push 0x10064d4
push 1
push 0x8000000
call fcn.0100e994
inc dword [ebp - 0x14]
jmp 0x100fe0e
lea ecx, [ebp - 0x38]
push ecx
push eax
push dword [ebp + 8]
call fcn.0100f929
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov edi, eax
push 0x1f4
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor edi, edi
cmp word [ebp - 8], 3
jb 0x100fd08
cmp dword [ebp - 0x14], 3
je 0x100fe76
cmp dword [ebp - 0xc], 3
je 0x100fe76
xor ebx, ebx
jmp 0x100fe79
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
lea eax, [ebp - 0x138]
push 0x10064b0
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x138]
xor ebx, ebx
push eax
inc ebx
push ebx
push 0x8000000
call fcn.0100e994
jmp 0x100fe79
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
xor ebx, ebx
push 0x1006498
inc ebx
push ebx
call fcn.0100c07e
add esp, 0xc
jmp 0x100fe79
push 2
pop ebx
test esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x100fe8f
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call edi
cmp dword [ebp + 8], 0
je 0x100fea3
push dword [ebp + 8]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call edi
cmp dword [ebp - 4], 0xffffffff
je 0x100feb2
push dword [ebp - 4]
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
push ebx
push 0x1006480
push 1
call fcn.0100c07e
push ebx
lea eax, [ebp - 0x138]
push 0x100646c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea eax, [ebp - 0x138]
push eax
push 1
push 0x8000000
call fcn.0100e994
pop edi
pop esi
mov eax, ebx
pop ebx
leave
ret 4