Function at 0x10002d00
Capabilities:
Check for time delay via gettickcount
Encode data using xor
Get socket status
Receive data
Receive data on socket
Send data
Send data on socket
Set socket configuration

Disassembly:
mov eax, 0x10334
call fcn.10003650
push ebx
push ebp
push esi
push edi
mov ebp, ecx
call fcn.10002550
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea esi, [ebp + 0xa4]
push esi
mov dword [esp + 0x44], 0x82020476
mov word [esp + 0x48], 0x64
lea edi, [ebp + 0x124]
call ebx
push edi
mov dword [esp + 0x14], eax
call ebx
mov ecx, dword [esp + 0x10]
push esi
mov edi, 8
lea eax, [ecx + eax + 2]
lea ecx, [esp + 0x4c]
push ecx
mov word [esp + 0x4e], ax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push esi
call ebx
mov esi, eax
add esi, edi
cmp esi, edi
jle 0x10002d79
mov dl, byte [esp + edi + 0x40]
xor dl, 0xd4
mov byte [esp + edi + 0x40], dl
inc edi
cmp edi, esi
jl 0x10002d69
inc esi
lea edi, [ebp + 0x124]
push edi
lea edx, [esp + esi + 0x44]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push edi
call ebx
add eax, esi
cmp esi, eax
jge 0x10002da5
mov bl, byte [esp + esi + 0x40]
xor bl, 0x4d
mov byte [esp + esi + 0x40], bl
inc esi
cmp esi, eax
jl 0x10002d95
mov esi, dword [esp + 0x46]
mov edi, dword [ebp + 0x2a8]
mov eax, 1
xor ebx, ebx
mov dword [esp + 0x240], eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
lea ecx, [esp + 0x240]
push eax
push ebx
push ecx
and esi, 0xffff
push ebx
push ebx
add esi, 8
mov dword [esp + 0x258], edi
mov dword [esp + 0x2c], ebx
call dword [sym.imp.WS2_32.dll_select]
test eax, eax
je 0x10002e8f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push ebx
lea edx, [esp + 0x44]
push esi
push edx
push edi
mov dword [esp + 0x20], eax
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x10002e8b
add ebx, eax
cmp ebx, esi
jge 0x10002e8b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x10]
cmp eax, 0x1388
jae 0x10002e8b
push 1
push 0
push 0
lea eax, [esp + 0x30]
push 0
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x10002e6b
lea ecx, [esp + 0x24]
push ecx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea edx, [esp + 0x24]
push edx
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 1
push 0
push 0
lea eax, [esp + 0x30]
push 0
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x10002e3e
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
push 0
sub ecx, ebx
lea edx, [esp + ebx + 0x44]
push ecx
push edx
push edi
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x10002e10
mov eax, ebx
jmp 0x10002e91
xor eax, eax
mov ecx, dword [esp + 0x46]
and ecx, 0xffff
add ecx, 8
cmp eax, ecx
je 0x10002eb2
pop edi
pop esi
pop ebp
mov eax, 0x14
pop ebx
add esp, 0x10334
ret
mov edi, dword [ebp + 0x2a8]
xor esi, esi
mov dword [esp + 0x10], esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov dword [esp + 0x14], eax
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
lea edx, [esp + 0x10]
push edx
push 0x4004667f
push edi
call dword [sym.imp.WS2_32.dll_ioctlsocket]
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x10002f00
call ebx
sub eax, dword [esp + 0x14]
cmp eax, 0xfa0
jb 0x10002eca
mov eax, dword [esp + 0x10]
test eax, eax
je 0x10002f29
mov eax, 0x200
push 0
sub eax, esi
lea ecx, [esp + esi + 0x44]
push eax
push ecx
push edi
call dword [sym.imp.WS2_32.dll_recv]
mov edx, dword [esp + 0x46]
add esi, eax
and edx, 0xffff
add edx, 8
cmp esi, edx
jb 0x10002ebe
cmp esi, 1
jge 0x10002f3e
pop edi
pop esi
pop ebp
mov eax, 0x14
pop ebx
add esp, 0x10334
ret
mov al, byte [esp + 0x48]
test al, al
jne 0x10002f6d
mov eax, dword [ebp + 0x2a8]
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
pop edi
mov dword [ebp + 0x2a8], 0xffffffff
pop esi
pop ebp
mov eax, 0x15
pop ebx
add esp, 0x10334
ret
lea ecx, [ebp + 0x1a4]
push ecx
mov ecx, ebp
call fcn.100032b0
xor ecx, ecx
cmp eax, ecx
jne 0x100032a1
mov dword [ebp + 0x7d2c4], ecx
mov dword [ebp + 0x7d2c0], ecx
mov dword [ebp + 0x7d2cc], ecx
mov dword [ebp + 0x7d2d0], ecx
mov dword [esp + 0x40], 0x82020476
mov word [esp + 0x44], 0x69
mov word [esp + 0x46], 8
mov dword [esp + 0x4c], 0x2800
mov edx, dword [ebp + 0x7d2cc]
mov ebx, dword [ebp + 0x2a8]
mov eax, 1
xor edi, edi
mov dword [esp + 0x240], eax
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x48], edx
mov esi, dword [esp + 0x46]
push eax
lea ecx, [esp + 0x244]
push edi
push ecx
and esi, 0xffff
push edi
push edi
add esi, 8
mov dword [esp + 0x258], ebx
mov dword [esp + 0x34], edi
call dword [sym.imp.WS2_32.dll_select]
test eax, eax
je 0x100030ab
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push edi
lea edx, [esp + 0x44]
push esi
push edx
push ebx
mov dword [esp + 0x24], eax
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x100030ab
add edi, eax
cmp edi, esi
jge 0x100030ab
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x14]
cmp eax, 0x1388
jae 0x100030ab
push 1
push 0
push 0
lea eax, [esp + 0x30]
push 0
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1000308b
lea ecx, [esp + 0x24]
push ecx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea edx, [esp + 0x24]
push edx
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 1
push 0
push 0
lea eax, [esp + 0x30]
push 0
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x1000305e
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
push 0
sub ecx, edi
lea edx, [esp + edi + 0x44]
push ecx
push edx
push ebx
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x10003030
mov eax, dword [esp + 0x46]
and eax, 0xffff
add eax, 8
cmp edi, eax
jne 0x1000321a
mov edi, dword [ebp + 0x2a8]
xor esi, esi
mov dword [esp + 0x10], esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov dword [esp + 0x14], eax
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [esp + 0x10]
push ecx
push 0x4004667f
push edi
call dword [sym.imp.WS2_32.dll_ioctlsocket]
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x1000310d
call ebx
sub eax, dword [esp + 0x14]
cmp eax, 0xfa0
jb 0x100030d7
mov eax, dword [esp + 0x10]
test eax, eax
je 0x10003140
mov edx, 0xffff
push 0
sub edx, esi
lea eax, [esp + esi + 0x348]
push edx
push eax
push edi
call dword [sym.imp.WS2_32.dll_recv]
add esi, eax
mov eax, dword [esp + 0x34a]
mov ecx, eax
and ecx, 0xffff
add ecx, 8
cmp esi, ecx
jb 0x100030cb
jmp 0x10003147
mov eax, dword [esp + 0x34a]
cmp esi, 8
jb 0x10003223
and eax, 0xffff
add eax, 8
cmp esi, eax
jne 0x10002fbb
add word [esp + 0x34a], 0xfffc
mov ecx, dword [esp + 0x34a]
mov edx, dword [esp + 0x34c]
mov eax, dword [ebp + 0x7d2c0]
and ecx, 0xffff
mov dword [ebp + 0x7d2cc], edx
mov edx, ecx
lea esi, [esp + 0x350]
lea edi, [eax + ebp + 0x2c0]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x34a]
mov esi, dword [ebp + 0x7d2cc]
mov edi, dword [ebp + 0x7d2c0]
mov edx, dword [ebp + 0x7d2c8]
and eax, 0xffff
add esi, eax
add edi, eax
mov eax, esi
mov dword [ebp + 0x7d2c0], edi
cmp edx, eax
mov ecx, edi
mov dword [ebp + 0x7d2cc], esi
je 0x1000324a
cmp ecx, 0x53555
jle 0x10002fbb
mov ecx, ebp
call fcn.100034e0
test eax, eax
jne 0x1000325e
mov eax, dword [ebp + 0x2a8]
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
pop edi
mov dword [ebp + 0x2a8], 0xffffffff
pop esi
pop ebp
mov eax, 0x36
pop ebx
add esp, 0x10334
ret
mov eax, dword [ebp + 0x2a8]
push eax
jmp 0x1000322a
mov ecx, dword [ebp + 0x2a8]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
pop edi
mov dword [ebp + 0x2a8], 0xffffffff
pop esi
pop ebp
mov eax, 0x19
pop ebx
add esp, 0x10334
ret
mov ecx, ebp
call fcn.100034e0
test eax, eax
jne 0x1000329f
mov edx, dword [ebp + 0x2a8]
push edx
jmp 0x100031fa
mov ecx, dword [ebp + 0x2b0]
mov edx, dword [ebp + 0x2a8]
push 0x11
push ecx
push edx
call dword [sym.imp.WS2_32.dll_WSAEventSelect]
test eax, eax
je 0x1000329f
mov eax, dword [ebp + 0x2a8]
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
pop edi
mov dword [ebp + 0x2a8], 0xffffffff
pop esi
pop ebp
mov eax, 4
pop ebx
add esp, 0x10334
ret
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10334
ret