Function at 0x438ddc
Capabilities:
Create raw socket
Get socket status
Initialize winsock library
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffd40
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00404fcc
xor eax, eax
push ebp
push 0x439099
push dword fs:[eax]
mov dword fs:[eax], esp
xor ebx, ebx
lea eax, [ebp - 0x1ac]
push eax
push 0x201
call sub.wsock32.dll_WSAStartup
test eax, eax
jne 0x43907e
push 1
push 3
push 2
call sub.wsock32.dll_socket
mov esi, eax
cmp esi, 0xffffffff
je 0x43907e
mov dword [ebp - 0xc], 0x1e
push 4
lea eax, [ebp - 0xc]
push eax
push 7
push 0
push esi
call sub.wsock32.dll_setsockopt
cmp eax, 0xffffffff
jne 0x438e5e
push 4
lea eax, [ebp - 0xc]
push eax
push 4
push 0
push esi
call sub.wsock32.dll_setsockopt
inc eax
je 0x43907e
lea eax, [ebp - 0x1bc]
mov edx, 0x10
call fcn.00407f7c
mov eax, dword [ebp - 4]
call fcn.00404fdc
mov edi, eax
push edi
call sub.wsock32.dll_inet_addr
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffff
je 0x438ea2
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1b8], eax
mov word [ebp - 0x1bc], 2
jmp 0x438ec2
push edi
call sub.wsock32.dll_gethostbyname
test eax, eax
je 0x438ec2
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x1b8], eax
mov word [ebp - 0x1bc], 2
cmp dword [ebp - 0x1b8], 0
je 0x43907e
mov eax, 0x20
call fcn.00402af0
mov dword [ebp - 8], eax
mov eax, 0x414
call fcn.00402af0
mov edi, eax
mov edx, 0x414
mov eax, edi
call fcn.00407f7c
cmp word [0x4ea464], 0xffff
jne 0x438f0a
mov word [0x4ea464], 0
jmp 0x438f11
inc word [0x4ea464]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov byte [eax], 8
mov eax, dword [ebp - 0x18]
mov byte [eax + 1], 0
mov eax, dword [ebp - 0x18]
mov word [eax + 2], 0
call sub.kernel32.dll_GetCurrentProcessId
mov edx, dword [ebp - 0x18]
mov word [edx + 4], ax
mov eax, dword [ebp - 0x18]
mov dx, word [0x4ea464]
mov word [eax + 6], dx
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0xc]
mov dword [eax + edx*4 + 8], 0xdeadbeef
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 6
jne 0x438f4c
xor eax, eax
mov dword [ebp - 0xc], 1
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
movzx edx, word [edx + ecx*2 - 2]
add eax, edx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x11
jne 0x438f6c
mov edx, eax
shr edx, 0x10
movzx eax, ax
add edx, eax
mov eax, edx
movzx eax, ax
mov edx, 0xffff
sub edx, eax
mov eax, edx
mov edx, dword [ebp - 0x18]
mov word [edx + 2], ax
push 0x10
lea eax, [ebp - 0x1bc]
push eax
push 0
push 0x20
mov eax, dword [ebp - 8]
push eax
push esi
call sub.wsock32.dll_sendto
inc eax
je 0x439065
mov dword [ebp - 0x2c0], 1
mov dword [ebp - 0x2bc], esi
mov dword [ebp - 0x14], 1
xor eax, eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x14]
push eax
push 0
push 0
lea eax, [ebp - 0x2c0]
push eax
push 0
call sub.wsock32.dll_select
test eax, eax
jle 0x439065
push 0
push 0
push 0
push 0x414
push edi
push esi
call sub.wsock32.dll_recvfrom
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffff
je 0x439065
mov al, byte [edi]
and al, 0xf
and eax, 0xff
shl eax, 2
add eax, 0x20
cmp eax, dword [ebp - 0xc]
jg 0x439065
mov al, byte [edi]
and al, 0xf
and eax, 0xff
shl eax, 2
add eax, edi
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp byte [eax], 0
jne 0x438fbf
call sub.kernel32.dll_GetCurrentProcessId
mov edx, dword [ebp - 0x1c]
cmp ax, word [edx + 4]
jne 0x438fbf
mov eax, dword [ebp - 0x1c]
mov ax, word [eax + 6]
cmp ax, word [0x4ea464]
jne 0x438fbf
mov bl, 1
mov edx, 0x414
mov eax, edi
call fcn.00402b20
mov edx, 0x20
mov eax, dword [ebp - 8]
call fcn.00402b20
call sub.wsock32.dll_WSACleanup
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4390a0
lea eax, [ebp - 4]
call fcn.00404b1c
ret