Function at 0x4e0986
Capabilities:
Create udp socket
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb8
push ebx
push esi
push edi
mov esi, dword [ebp + 8]
mov edi, 1
xor eax, eax
mov dword [ebp - 0x18], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], 1
mov word [ebp - 0x1e], 0
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
xor eax, eax
mov dword [ebp - 4], eax
mov eax, dword [esi + 4]
test eax, eax
je 0x4e0a25
cmp byte [eax], 0x2d
jne 0x4e0a25
push 0x74
push eax
call fcn.0051833c
add esp, 8
test eax, eax
je 0x4e09d8
xor edx, edx
mov dword [ebp - 0x10], edx
push 0x6e
push dword [esi + 4]
call fcn.0051833c
add esp, 8
test eax, eax
je 0x4e09f0
mov dword [ebp - 0x14], 1
push 0x62
push dword [esi + 4]
call fcn.0051833c
add esp, 8
test eax, eax
je 0x4e0a08
mov dword [ebp - 0x18], 1
push 0x6b
push dword [esi + 4]
call fcn.0051833c
add esp, 8
test eax, eax
je 0x4e0a20
mov dword [ebp - 0x1c], 1
mov edi, 2
cmp dword [esi + edi*4], 0
jne 0x4e0a3d
push 0
push 0
push dword [esi]
push 0
call fcn.0045abd0
jmp 0x4e1156
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x28]
push dword [esi + eax*4]
call fcn.005183dc
pop ecx
cmp eax, 0x5a
jbe 0x4e0a7d
push 0
push 0x1452
call fcn.00415c87
push eax
mov edx, dword [ebp - 0x28]
push dword [esi + edx*4]
push 0x535bc8
push 0x54b69c
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
jmp 0x4e1156
inc edi
push dword [esi + edi*4]
call fcn.004bf238
test eax, eax
je 0x4e0ab1
push dword [esi + edi*4]
call fcn.0052175c
pop ecx
mov word [ebp - 0x1e], ax
cmp word [ebp - 0x1e], 0
ja 0x4e0ab0
push 3
push 0
push dword [esi]
push 0
call fcn.0045abd0
jmp 0x4e1156
inc edi
mov ebx, dword [esi + edi*4]
test ebx, ebx
je 0x4e0b19
push ebx
call sub.WSOCK32.dll_inet_addr
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffff
jne 0x4e0ad9
push 3
push 0
push dword [esi]
push 0
call fcn.0045abd0
jmp 0x4e1156
inc edi
cmp dword [esi + edi*4], 0
jne 0x4e0af2
push 0
push 0
push dword [esi]
push 0
call fcn.0045abd0
jmp 0x4e1156
push dword [esi + edi*4]
call fcn.0052175c
pop ecx
mov word [ebp - 0x20], ax
cmp word [ebp - 0x20], 0
ja 0x4e0b18
push 3
push 0
push dword [esi]
push 0
call fcn.0045abd0
jmp 0x4e1156
inc edi
mov eax, dword [ebp - 0x28]
push dword [esi + eax*4]
call fcn.004e0686
mov ebx, eax
test ebx, ebx
je 0x4e0bae
cmp dword [ebx + 0xf0], 0
jne 0x4e0b63
push 0
push 0x1453
call fcn.00415c87
push eax
mov eax, dword [ebp - 0x28]
push dword [esi + eax*4]
push 0x535bdd
push 0x54b69c
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
jmp 0x4e1156
cmp word [ebp - 0x1e], 0
je 0x4e0d9a
mov dx, word [ebx + 0xca]
cmp dx, word [ebp - 0x1e]
je 0x4e0d9a
movzx ecx, word [ebx + 0xca]
push ecx
mov eax, dword [ebp - 0x28]
push dword [esi + eax*4]
push 0
push 0x1451
call fcn.00415c87
push eax
push 0x54b69c
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
jmp 0x4e1156
call fcn.004e043c
mov ebx, eax
test ebx, ebx
jne 0x4e0bcb
push 2
push 0
push dword [esi]
push 0
call fcn.0045abd0
jmp 0x4e1156
mov eax, dword [ebp - 0x28]
mov edx, dword [esi + eax*4]
push esi
push edi
mov edi, edx
mov esi, ebx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
lea eax, [ebx + 0x65]
push esi
push edi
mov esi, eax
mov edi, 0x533e84
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov ax, word [ebp - 0x1e]
mov word [ebx + 0xca], ax
mov dword [ebx + 0xe4], 2
push 0
call fcn.00526bc8
pop ecx
mov dword [ebx + 0x110], eax
mov edx, dword [ebx + 0x110]
mov dword [ebx + 0x114], edx
mov ecx, dword [ebx + 0x110]
mov dword [ebx + 0x118], ecx
mov dword [ebx + 0xf0], 1
mov eax, dword [ebp - 0x1c]
mov dword [ebx + 0xf4], eax
mov edx, dword [ebp - 4]
mov dword [ebx + 0xf8], edx
mov cx, word [ebp - 0x20]
mov word [ebx + 0xfc], cx
xor eax, eax
mov dword [ebx + 0x100], eax
mov word [ebx + 0x104], 0
cmp word [ebp - 0x1e], 0
jne 0x4e0cf9
push 0
push 1
lea edx, [ebx + 0xca]
push edx
mov cx, word [0x52c432]
push ecx
mov ax, word [0x52c430]
push eax
call fcn.004cb44e
mov dword [ebx + 0x120], eax
cmp dword [ebx + 0x120], 0xffffffff
jne 0x4e0d82
push ebx
call fcn.004e0575
push 0
push 0x1454
call fcn.00415c87
push eax
push 0x535bf2
push 0x54b69c
call sub.USER32.dll_wsprintfA
add esp, 0xc
xor eax, eax
jmp 0x4e1156
push 0
push 2
push 2
call sub.WSOCK32.dll_socket
mov dword [ebx + 0x120], eax
cmp dword [ebx + 0x120], 0xffffffff
jne 0x4e0d3f
push ebx
call fcn.004e0575
push 0
push 0x1455
call fcn.00415c87
push eax
push 0x535c02
push 0x54b69c
call sub.USER32.dll_wsprintfA
add esp, 0xc
xor eax, eax
jmp 0x4e1156
mov dx, word [ebx + 0xca]
push edx
push dword [ebx + 0x120]
call fcn.004cb3a4
test eax, eax
jne 0x4e0d82
push ebx
call fcn.004e0575
push 0
push 0x1456
call fcn.00415c87
push eax
push str.__sockudp:__s
push 0x54b69c
call sub.USER32.dll_wsprintfA
add esp, 0xc
xor eax, eax
jmp 0x4e1156
push 0x23
push 0x438
push dword [0x537420]
push dword [ebx + 0x120]
call sub.WSOCK32.dll_WSAAsyncSelect
cmp dword [ebp - 0x18], 0
je 0x4e0dbe
cmp dword [esi + edi*4], 0
je 0x4e0dbe
push dword [esi + edi*4]
call fcn.0052175c
pop ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x4e0dbd
xor edx, edx
mov dword [ebp - 0x18], edx
inc edi
cmp dword [esi + edi*4], 0
jne 0x4e0e0a
cmp dword [ebp - 0x14], 0
jne 0x4e0de3
cmp dword [ebx + 0xf4], 0
jne 0x4e0dd9
push ebx
call fcn.004e0575
mov eax, 1
jmp 0x4e1156
mov edx, dword [ebp + 0xc]
push esi
mov esi, 0x535c22
mov edi, edx
mov eax, edi
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop esi
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x24], edx
push dword [ebp + 0xc]
call fcn.005183dc
pop ecx
mov edi, eax
jmp 0x4e0ebe
cmp dword [ebp - 0x10], 0
je 0x4e0e18
mov eax, dword [esi + edi*4]
cmp byte [eax], 0x26
je 0x4e0e5e
mov edx, dword [ebp + 0xc]
mov byte [edx], 0
push esi
push dword [ebp + 0xc]
push edi
call fcn.004bf445
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x24], ecx
push dword [ebp + 0xc]
call fcn.005183dc
pop ecx
mov edi, eax
cmp dword [ebp - 0x14], 0
je 0x4e0eb0
mov eax, dword [ebp + 0xc]
cmp byte [eax + edi - 1], 0xa
je 0x4e0eb0
push 0x535c26
push dword [ebp + 0xc]
call fcn.00518300
add esp, 8
add edi, 2
jmp 0x4e0eb0
push dword [ebp + 0x10]
push dword [esi + edi*4]
call fcn.00413c0c
test eax, eax
jne 0x4e0ea5
cmp dword [ebx + 0xf4], 0
jne 0x4e0e7c
push ebx
call fcn.004e0575
push 0
push 0x1457
call fcn.00415c87
push eax
push dword [esi + edi*4]
push 0x535c2a
push 0x54b69c
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
jmp 0x4e1156
mov edx, dword [eax]
add edx, dword [eax + 8]
mov dword [ebp - 0x24], edx
mov edi, dword [eax + 4]
cmp dword [ebp - 0x18], 0
je 0x4e0ebe
cmp edi, dword [ebp - 0x18]
jle 0x4e0ebe
mov edi, dword [ebp - 0x18]
cmp dword [ebx + 0xdc], 0
je 0x4e0f77
mov eax, dword [ebx + 0xe0]
add eax, edi
cmp eax, 0x4000
jle 0x4e0f15
cmp dword [ebx + 0xf4], 0
jne 0x4e0ee9
push ebx
call fcn.004e0575
push 0
push 0x1458
call fcn.00415c87
push eax
mov edx, dword [ebp - 0x28]
push dword [esi + edx*4]
push str.__sockudp:__s__s
push 0x54b69c
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
jmp 0x4e1156
mov edx, dword [ebx + 0xe0]
add edx, edi
add edx, 5
push edx
push dword [ebx + 0xdc]
call fcn.0052480c
add esp, 8
test eax, eax
jne 0x4e0f54
cmp dword [ebx + 0xf4], 0
jne 0x4e0f42
push ebx
call fcn.004e0575
push 2
push 0
push dword [esi]
push 0
call fcn.0045abd0
jmp 0x4e1156
mov edx, eax
mov dword [ebx + 0xdc], edx
push edi
push dword [ebp - 0x24]
add edx, dword [ebx + 0xe0]
push edx
call fcn.005181ec
add esp, 0xc
add dword [ebx + 0xe0], edi
jmp 0x4e0fc9
lea eax, [edi + 5]
push eax
call fcn.00524378
pop ecx
mov dword [ebx + 0xdc], eax
cmp dword [ebx + 0xdc], 0
jne 0x4e0fb1
cmp dword [ebx + 0xf4], 0
jne 0x4e0f9f
push ebx
call fcn.004e0575
push 2
push 0
push dword [esi]
push 0
call fcn.0045abd0
jmp 0x4e1156
push edi
push dword [ebp - 0x24]
push dword [ebx + 0xdc]
call fcn.005181ec
add esp, 0xc
mov dword [ebx + 0xe0], edi
lea eax, [ebp - 0xc]
mov dword [ebp - 0x2c], eax
lea edx, [ebp - 4]
mov dword [eax], edx
xor ecx, ecx
mov dword [eax + 4], ecx
mov word [ebp - 0x2e], 4
mov word [ebp - 0x30], 2
lea esi, [ebp - 0x38]
push 0x10
push 0
lea eax, [ebp - 0x48]
push eax
call fcn.0051825c
add esp, 0xc
mov word [ebp - 0x48], 2
movsx edx, word [esi + 0xa]
push edx
mov ecx, dword [esi + 0xc]
push dword [ecx]
lea eax, [ebp - 0x44]
push eax
call fcn.005181ec
add esp, 0xc
mov dx, word [ebp - 0x20]
push edx
call sub.WSOCK32.dll_htons
mov word [ebp - 0x46], ax
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax]
mov dword [ebp - 0x44], edx
mov eax, dword [ebx + 0xe0]
cmp eax, 0x2000
jle 0x4e103e
mov eax, 0x2000
push 0x10
lea edx, [ebp - 0x48]
push edx
push 0
push eax
push dword [ebx + 0xdc]
push dword [ebx + 0x120]
call sub.WSOCK32.dll_sendto
mov edi, eax
test edi, edi
jge 0x4e10bc
call sub.WSOCK32.dll_WSAGetLastError
cmp eax, 0x2733
jne 0x4e108c
push 0x23
push 0x438
push dword [0x537420]
push dword [ebx + 0x120]
call sub.WSOCK32.dll_WSAAsyncSelect
mov eax, 1
jmp 0x4e1156
mov dword [ebx + 0x11c], eax
movzx edx, ax
shl edx, 0x10
or edx, 2
push edx
push dword [ebx + 0x120]
push 0x438
push dword [0x537420]
call sub.USER32.dll_PostMessageA
mov eax, 1
jmp 0x4e1156
push 0
call fcn.00526bc8
pop ecx
mov dword [ebx + 0x114], eax
test edi, edi
jle 0x4e1101
add dword [ebx + 0x108], edi
cmp edi, dword [ebx + 0xe0]
jge 0x4e1101
sub dword [ebx + 0xe0], edi
push dword [ebx + 0xe0]
mov eax, dword [ebx + 0xdc]
add edi, eax
push edi
push eax
call fcn.00518210
add esp, 0xc
mov eax, 1
jmp 0x4e1156
push dword [ebx + 0xdc]
call fcn.00524270
pop ecx
xor edx, edx
mov dword [ebx + 0xdc], edx
xor ecx, ecx
mov dword [ebx + 0xe0], ecx
cmp dword [0x534d3c], 0
je 0x4e1142
cmp dword [ebx + 0xf4], 0
je 0x4e1142
push ebx
push 0
push 0x43a
push dword [0x537420]
call sub.USER32.dll_PostMessageA
cmp dword [ebx + 0xf4], 0
jne 0x4e1151
push ebx
call fcn.004e0575
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc