Function at 0x436cb0
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Get file size
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43c90a
mov eax, dword fs:[0]
push eax
sub esp, 0x2a4
mov eax, dword [0x449464]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.004344c0
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x12c]
movsx edx, byte [ecx]
cmp edx, 0x2f
je 0x436d2f
mov eax, dword [ebp - 0x12c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x436d2f
mov edx, dword [ebp - 0x12c]
add edx, 1
mov dword [ebp - 0x12c], edx
jmp 0x436d03
mov eax, dword [ebp - 0x12c]
movsx ecx, byte [eax]
test ecx, ecx
jne 0x436d98
push 0x444f44
lea ecx, [ebp - 0x148]
call fcn.00434970
mov byte [ebp - 4], 1
lea edx, [ebp - 0x148]
push edx
mov ecx, dword [ebp - 0x27c]
add ecx, 0x10
call fcn.00434c00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x148]
call fcn.00434660
mov dword [ebp - 0x14c], 2
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00434660
mov eax, dword [ebp - 0x14c]
jmp 0x4377fb
mov eax, dword [ebp - 0x12c]
movsx ecx, byte [eax]
cmp ecx, 0x2f
jne 0x436dc4
mov edx, dword [ebp - 0x12c]
movsx eax, byte [edx]
test eax, eax
je 0x436dc4
mov ecx, dword [ebp - 0x12c]
add ecx, 1
mov dword [ebp - 0x12c], ecx
jmp 0x436d98
mov edx, dword [ebp - 0x12c]
movsx eax, byte [edx]
test eax, eax
jne 0x436e2d
push 0x444f64
lea ecx, [ebp - 0x15c]
call fcn.00434970
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x15c]
push ecx
mov ecx, dword [ebp - 0x27c]
add ecx, 0x10
call fcn.00434c00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x15c]
call fcn.00434660
mov dword [ebp - 0x160], 2
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00434660
mov eax, dword [ebp - 0x160]
jmp 0x4377fb
mov edx, dword [ebp - 0x12c]
movsx eax, byte [edx]
cmp eax, 0x2f
je 0x436e78
mov ecx, dword [ebp - 0x12c]
movsx edx, byte [ecx]
test edx, edx
je 0x436e78
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x12c]
mov dl, byte [ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x128]
add eax, 1
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x12c]
add ecx, 1
mov dword [ebp - 0x12c], ecx
jmp 0x436e2d
mov edx, dword [ebp - 0x12c]
movsx eax, byte [edx]
test eax, eax
jne 0x436ee1
push 0x444f84
lea ecx, [ebp - 0x170]
call fcn.00434970
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x170]
push ecx
mov ecx, dword [ebp - 0x27c]
add ecx, 0x10
call fcn.00434c00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x170]
call fcn.00434660
mov dword [ebp - 0x174], 2
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00434660
mov eax, dword [ebp - 0x174]
jmp 0x4377fb
mov edx, dword [ebp - 0x128]
mov byte [edx], 0
mov eax, dword [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x184]
call fcn.00434970
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x184]
push ecx
mov ecx, dword [ebp - 0x27c]
add ecx, 0x227c
call fcn.00434c00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x184]
call fcn.00434660
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp + 0x18]
mov dword [edx + 0x2290], eax
mov ecx, dword [ebp + 0x1c]
mov dword [edx + 0x2294], ecx
lea edx, [ebp - 0x124]
push edx
lea ecx, [ebp - 0x194]
call fcn.00434970
mov byte [ebp - 4], 5
lea eax, [ebp - 0x194]
push eax
mov ecx, dword [ebp - 0x27c]
add ecx, 0x21ec
call fcn.00434c00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x194]
call fcn.00434660
mov ecx, 2
mov word [ebp - 0x24], cx
push 0x50
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x22], ax
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
jne 0x437033
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jne 0x437023
push 0x444fa4
lea ecx, [ebp - 0x1a4]
call fcn.00434970
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1a4]
push ecx
mov ecx, dword [ebp - 0x27c]
add ecx, 0x10
call fcn.00434c00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1a4]
call fcn.00434660
mov dword [ebp - 0x1a8], 2
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00434660
mov eax, dword [ebp - 0x1a8]
jmp 0x4377fb
mov edx, dword [ebp - 0x130]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax]
mov edx, dword [ecx]
mov dword [ebp - 0x20], edx
push 0
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov ecx, dword [ebp - 0x27c]
mov dword [ecx + 0x21b8], eax
mov edx, dword [ebp - 0x27c]
cmp dword [edx + 0x21b8], 0xffffffff
jne 0x4370c6
mov eax, dword [ebp - 0x27c]
mov dword [eax + 0x21b8], 0
push 0x444fd0
lea ecx, [ebp - 0x1b8]
call fcn.00434970
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1b8]
push ecx
mov ecx, dword [ebp - 0x27c]
add ecx, 0x10
call fcn.00434c00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1b8]
call fcn.00434660
mov dword [ebp - 0x1bc], 2
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00434660
mov eax, dword [ebp - 0x1bc]
jmp 0x4377fb
call dword [sym.imp.WS2_32.dll_WSACreateEvent]
mov edx, dword [ebp - 0x27c]
mov dword [edx + 0x21bc], eax
mov eax, dword [ebp - 0x27c]
cmp dword [eax + 0x21bc], 0
jne 0x43717a
mov ecx, dword [ebp - 0x27c]
mov edx, dword [ecx + 0x21b8]
push edx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [ebp - 0x27c]
mov dword [eax + 0x21b8], 0
mov ecx, dword [ebp - 0x27c]
mov dword [ecx + 0x21bc], 0
push 0x445000
lea ecx, [ebp - 0x1cc]
call fcn.00434970
mov byte [ebp - 4], 8
lea edx, [ebp - 0x1cc]
push edx
mov ecx, dword [ebp - 0x27c]
add ecx, 0x10
call fcn.00434c00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1cc]
call fcn.00434660
mov dword [ebp - 0x1d0], 2
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00434660
mov eax, dword [ebp - 0x1d0]
jmp 0x4377fb
push 0x31
mov eax, dword [ebp - 0x27c]
mov ecx, dword [eax + 0x21bc]
push ecx
mov edx, dword [ebp - 0x27c]
mov eax, dword [edx + 0x21b8]
push eax
call dword [sym.imp.WS2_32.dll_WSAEventSelect]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
jne 0x43724b
mov ecx, dword [ebp - 0x27c]
mov edx, dword [ecx + 0x21b8]
push edx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [ebp - 0x27c]
mov dword [eax + 0x21b8], 0
mov ecx, dword [ebp - 0x27c]
mov edx, dword [ecx + 0x21bc]
push edx
call dword [sym.imp.WS2_32.dll_WSACloseEvent]
mov eax, dword [ebp - 0x27c]
mov dword [eax + 0x21bc], 0
push 0x445030
lea ecx, [ebp - 0x1e0]
call fcn.00434970
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e0]
push ecx
mov ecx, dword [ebp - 0x27c]
add ecx, 0x10
call fcn.00434c00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1e0]
call fcn.00434660
mov dword [ebp - 0x1e4], 2
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00434660
mov eax, dword [ebp - 0x1e4]
jmp 0x4377fb
push 0x10
lea edx, [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x27c]
mov ecx, dword [eax + 0x21b8]
push ecx
call dword [sym.imp.WS2_32.dll_connect]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
jne 0x43732a
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x2733
jne 0x437288
jmp 0x43732a
mov edx, dword [ebp - 0x27c]
mov eax, dword [edx + 0x21b8]
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
mov ecx, dword [ebp - 0x27c]
mov dword [ecx + 0x21b8], 0
mov edx, dword [ebp - 0x27c]
mov eax, dword [edx + 0x21bc]
push eax
call dword [sym.imp.WS2_32.dll_WSACloseEvent]
mov ecx, dword [ebp - 0x27c]
mov dword [ecx + 0x21bc], 0
push 0x445060
lea ecx, [ebp - 0x1f4]
call fcn.00434970
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x1f4]
push edx
mov ecx, dword [ebp - 0x27c]
add ecx, 0x10
call fcn.00434c00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1f4]
call fcn.00434660
mov dword [ebp - 0x1f8], 2
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00434660
mov eax, dword [ebp - 0x1f8]
jmp 0x4377fb
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp - 0x280]
mov edx, dword [ebp - 0x280]
mov eax, dword [ecx + 0x2290]
or eax, dword [edx + 0x2294]
je 0x43777f
push 0x44508c
lea ecx, [ebp - 0x208]
call fcn.00434920
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x27c]
add ecx, 0x227c
call fcn.00434460
push eax
lea ecx, [ebp - 0x208]
push ecx
mov ecx, dword [ebp - 0x27c]
add ecx, 0x227c
call fcn.004347b0
add eax, 1
push eax
mov ecx, dword [ebp - 0x27c]
add ecx, 0x227c
lea edx, [ebp - 0x218]
call fcn.004349c0
mov dword [ebp - 0x284], eax
mov edx, dword [ebp - 0x284]
mov dword [ebp - 0x288], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x288]
push eax
mov ecx, dword [ebp - 0x27c]
add ecx, 0x226c
call fcn.00434c00
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x218]
call fcn.00434660
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x208]
call fcn.00434660
mov ecx, dword [ebp - 0x27c]
mov dword [ecx + 0x2298], 0
mov dword [ecx + 0x229c], 0
mov edx, dword [ebp - 0x27c]
add edx, 0x226c
push edx
lea eax, [ebp - 0x228]
push eax
mov ecx, dword [ebp - 0x27c]
add ecx, 0x225c
call fcn.00434b10
mov dword [ebp - 0x28c], eax
push 0
push 0x80
push 1
push 0
push 0
push 0x40000000
mov ecx, dword [ebp - 0x28c]
call fcn.00434550
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ecx, dword [ebp - 0x27c]
mov dword [ecx + 0x22a0], eax
lea ecx, [ebp - 0x228]
call fcn.00434660
mov edx, dword [ebp - 0x27c]
cmp dword [edx + 0x22a0], 0xffffffff
jne 0x437760
mov eax, dword [ebp - 0x27c]
add eax, 0x226c
push eax
lea ecx, [ebp - 0x238]
push ecx
mov ecx, dword [ebp - 0x27c]
add ecx, 0x225c
call fcn.00434b10
mov dword [ebp - 0x290], eax
push 0
push 0x80
push 4
push 0
push 0
push 0x40000000
mov ecx, dword [ebp - 0x290]
call fcn.00434550
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edx, dword [ebp - 0x27c]
mov dword [edx + 0x22a0], eax
lea ecx, [ebp - 0x238]
call fcn.00434660
mov eax, dword [ebp - 0x27c]
cmp dword [eax + 0x22a0], 0xffffffff
jne 0x437640
mov ecx, dword [ebp - 0x27c]
mov edx, dword [ecx + 0x21b8]
push edx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [ebp - 0x27c]
mov dword [eax + 0x21b8], 0
mov ecx, dword [ebp - 0x27c]
mov edx, dword [ecx + 0x21bc]
push edx
call dword [sym.imp.WS2_32.dll_WSACloseEvent]
mov eax, dword [ebp - 0x27c]
mov dword [eax + 0x21bc], 0
push 0x445090
lea ecx, [ebp - 0x248]
call fcn.00434970
mov dword [ebp - 0x294], eax
mov ecx, dword [ebp - 0x294]
mov dword [ebp - 0x298], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x27c]
add edx, 0x225c
push edx
lea eax, [ebp - 0x258]
push eax
mov ecx, dword [ebp - 0x298]
call fcn.00434b10
mov dword [ebp - 0x29c], eax
mov ecx, dword [ebp - 0x29c]
mov dword [ebp - 0x2a0], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x27c]
add edx, 0x226c
push edx
lea eax, [ebp - 0x268]
push eax
mov ecx, dword [ebp - 0x2a0]
call fcn.00434b10
mov dword [ebp - 0x2a4], eax
mov ecx, dword [ebp - 0x2a4]
mov dword [ebp - 0x2a8], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x2a8]
push edx
mov ecx, dword [ebp - 0x27c]
add ecx, 0x10
call fcn.00434c00
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x268]
call fcn.00434660
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x258]
call fcn.00434660
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x248]
call fcn.00434660
mov dword [ebp - 0x26c], 2
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00434660
mov eax, dword [ebp - 0x26c]
jmp 0x4377fb
lea eax, [ebp - 0x134]
push eax
mov ecx, dword [ebp - 0x27c]
mov edx, dword [ecx + 0x22a0]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x134]
xor edx, edx
mov cl, 0x20
call fcn.0043c5e0
mov ecx, dword [ebp - 0x138]
xor esi, esi
or eax, ecx
or edx, esi
mov ecx, dword [ebp - 0x27c]
mov dword [ecx + 0x2298], eax
mov dword [ecx + 0x229c], edx
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x2ac], edx
mov dword [ebp - 0x2b0], eax
mov ecx, dword [ebp - 0x2ac]
mov edx, dword [ebp - 0x2b0]
mov eax, dword [ecx + 0x2298]
cmp eax, dword [edx + 0x2290]
jne 0x437747
mov ecx, dword [ebp - 0x2ac]
mov edx, dword [ebp - 0x2b0]
mov eax, dword [ecx + 0x229c]
cmp eax, dword [edx + 0x2294]
jne 0x437747
mov ecx, dword [ebp - 0x27c]
mov edx, dword [ecx + 0x21b8]
push edx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [ebp - 0x27c]
mov dword [eax + 0x21b8], 0
mov ecx, dword [ebp - 0x27c]
mov edx, dword [ecx + 0x21bc]
push edx
call dword [sym.imp.WS2_32.dll_WSACloseEvent]
mov eax, dword [ebp - 0x27c]
mov dword [eax + 0x21bc], 0
mov dword [ebp - 0x270], 3
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00434660
mov eax, dword [ebp - 0x270]
jmp 0x4377fb
push 2
push 0
push 0
mov ecx, dword [ebp - 0x27c]
mov edx, dword [ecx + 0x22a0]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [ebp - 0x27c]
mov ecx, dword [eax + 0x229c]
push ecx
mov edx, dword [eax + 0x2298]
push edx
mov ecx, dword [ebp - 0x27c]
call fcn.00436080
mov eax, dword [ebp - 0x27c]
mov byte [eax + 0x22a4], 0
mov ecx, dword [ebp - 0x27c]
cmp dword [ecx + 0x22a8], 0
je 0x4377dc
mov edx, dword [ebp - 0x27c]
mov eax, dword [edx + 0x22a8]
mov dword [ebp - 0x274], eax
mov ecx, dword [ebp - 0x274]
push ecx
call fcn.00403ca1
add esp, 4
mov edx, dword [ebp - 0x27c]
mov dword [edx + 0x22a8], 0
mov eax, dword [ebp - 0x27c]
mov dword [eax + 0x22ac], 0
mov dword [ebp - 0x278], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00434660
mov eax, dword [ebp - 0x278]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00403c87
mov esp, ebp
pop ebp
ret 0x18