Function at 0x43ee30
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create raw socket
Create tcp socket
Create udp socket
Initialize winsock library
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b14b2
mov eax, dword fs:[0]
push eax
sub esp, 0x3f8
mov eax, dword [0x4d516c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x37c], esp
push 0x4bc1dc
call fcn.00431030
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x394], eax
mov dword [ebp - 4], 0
call fcn.0043fc90
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.004402a0
lea ecx, [ebp - 0x310]
call fcn.00430fc0
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x330]
call fcn.00430fc0
mov byte [ebp - 4], 2
mov byte [ebp - 0x331], 0
mov byte [ebp - 0x332], 0
lea ecx, [ebp - 0x2f4]
push ecx
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0
jne 0x43f504
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x36c], 0
push 0x4bc1fc
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov dword [ebp - 0x370], eax
push 0
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x368], 0
push 0x4bc20c
lea ecx, [ebp - 0x364]
call fcn.00431030
mov byte [ebp - 4], 3
cmp dword [ebp - 0x370], 0
je 0x43f1c0
mov edx, dword [ebp - 0x370]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax]
mov edx, dword [ecx]
push edx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x368]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00403340
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x48]
push edx
call fcn.00446e00
add esp, 8
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x39c], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x39c]
push ecx
lea ecx, [ebp - 0x310]
call fcn.004310b0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x48]
call fcn.004081d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c]
call fcn.004033c0
push 0x10
push 0
lea edx, [ebp - 0x348]
push edx
call fcn.00481a70
add esp, 0xc
mov eax, 2
mov word [ebp - 0x348], ax
push 0x1f90
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x346], ax
mov ecx, dword [ebp - 0x370]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx]
mov ecx, dword [eax]
mov dword [ebp - 0x344], ecx
push 0x10
lea edx, [ebp - 0x348]
push edx
mov eax, dword [ebp - 0x338]
push eax
call dword [sym.imp.WS2_32.dll_connect]
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0xffffffff
jne 0x43f041
mov byte [ebp - 0x331], 0
jmp 0x43f048
mov byte [ebp - 0x331], 1
movzx ecx, byte [ebp - 0x331]
test ecx, ecx
je 0x43f0e2
push 0x4bc210
lea edx, [ebp - 0x310]
push edx
push 0x4bc224
lea eax, [ebp - 0x64]
push eax
call fcn.00445ac0
add esp, 0xc
mov dword [ebp - 0x3a0], eax
mov ecx, dword [ebp - 0x3a0]
mov dword [ebp - 0x3a4], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x3a4]
push edx
lea eax, [ebp - 0x80]
push eax
call fcn.00445b80
add esp, 0xc
mov dword [ebp - 0x3a8], eax
mov ecx, dword [ebp - 0x3a8]
mov dword [ebp - 0x3ac], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x3ac]
push edx
lea ecx, [ebp - 0x364]
call fcn.004310b0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x80]
call fcn.004081d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x64]
call fcn.004081d0
jmp 0x43f174
push 0x4bc24c
lea eax, [ebp - 0x310]
push eax
push 0x4bc264
lea ecx, [ebp - 0x9c]
push ecx
call fcn.00445ac0
add esp, 0xc
mov dword [ebp - 0x3b0], eax
mov edx, dword [ebp - 0x3b0]
mov dword [ebp - 0x3b4], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x3b4]
push eax
lea ecx, [ebp - 0xb8]
push ecx
call fcn.00445b80
add esp, 0xc
mov dword [ebp - 0x3b8], eax
mov edx, dword [ebp - 0x3b8]
mov dword [ebp - 0x3bc], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x3bc]
push eax
lea ecx, [ebp - 0x364]
call fcn.004310b0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xb8]
call fcn.004081d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x9c]
call fcn.004081d0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x380], esp
lea edx, [ebp - 0x364]
push edx
call fcn.00408140
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x3c4], eax
mov byte [ebp - 4], 0xa
call fcn.0043fc90
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.004402a0
mov ecx, dword [ebp - 0x338]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
jmp 0x43f1fb
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x384], esp
push str.ls.funshion.com:IP
call fcn.00431030
mov dword [ebp - 0x3c8], eax
mov edx, dword [ebp - 0x3c8]
mov dword [ebp - 0x3cc], edx
mov byte [ebp - 4], 0xb
call fcn.0043fc90
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.004402a0
push 0x4bc2cc
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0
je 0x43f4b4
mov eax, dword [ebp - 0x36c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx]
mov eax, dword [edx]
push eax
call dword [sym.imp.WS2_32.dll_inet_ntoa]
mov dword [ebp - 0x368], eax
mov ecx, dword [ebp - 0x368]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00403340
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0xd4]
push edx
lea eax, [ebp - 0xf0]
push eax
call fcn.00446e00
add esp, 8
mov dword [ebp - 0x3d0], eax
mov ecx, dword [ebp - 0x3d0]
mov dword [ebp - 0x3d4], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x3d4]
push edx
lea ecx, [ebp - 0x330]
call fcn.004310b0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xf0]
call fcn.004081d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xd4]
call fcn.004033c0
push 0
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0x338], eax
push 0x10
push 0
lea eax, [ebp - 0x348]
push eax
call fcn.00481a70
add esp, 0xc
mov ecx, 2
mov word [ebp - 0x348], cx
push 0x1f40
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x346], ax
mov edx, dword [ebp - 0x36c]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax]
mov edx, dword [ecx]
mov dword [ebp - 0x344], edx
push 0x10
lea eax, [ebp - 0x348]
push eax
mov ecx, dword [ebp - 0x338]
push ecx
call dword [sym.imp.WS2_32.dll_connect]
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0xffffffff
jne 0x43f329
mov byte [ebp - 0x332], 0
jmp 0x43f330
mov byte [ebp - 0x332], 1
movzx edx, byte [ebp - 0x331]
test edx, edx
je 0x43f3d6
push 0x4bc2e0
lea eax, [ebp - 0x330]
push eax
push 0x4bc2f4
lea ecx, [ebp - 0x10c]
push ecx
call fcn.00445ac0
add esp, 0xc
mov dword [ebp - 0x3d8], eax
mov edx, dword [ebp - 0x3d8]
mov dword [ebp - 0x3dc], edx
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x3dc]
push eax
lea ecx, [ebp - 0x128]
push ecx
call fcn.00445b80
add esp, 0xc
mov dword [ebp - 0x3e0], eax
mov edx, dword [ebp - 0x3e0]
mov dword [ebp - 0x3e4], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x3e4]
push eax
lea ecx, [ebp - 0x364]
call fcn.004310b0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x128]
call fcn.004081d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10c]
call fcn.004081d0
jmp 0x43f468
push 0x4bc320
lea ecx, [ebp - 0x330]
push ecx
push 0x4bc338
lea edx, [ebp - 0x144]
push edx
call fcn.00445ac0
add esp, 0xc
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x3ec], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x3ec]
push ecx
lea edx, [ebp - 0x160]
push edx
call fcn.00445b80
add esp, 0xc
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x3f4], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x3f4]
push ecx
lea ecx, [ebp - 0x364]
call fcn.004310b0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x160]
call fcn.004081d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x144]
call fcn.004081d0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x388], esp
lea edx, [ebp - 0x364]
push edx
call fcn.00408140
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x3fc], eax
mov byte [ebp - 4], 0x12
call fcn.0043fc90
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.004402a0
mov ecx, dword [ebp - 0x338]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
jmp 0x43f4ef
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x38c], esp
push str.ls3.funshion.com:IP
call fcn.00431030
mov dword [ebp - 0x400], eax
mov edx, dword [ebp - 0x400]
mov dword [ebp - 0x404], edx
mov byte [ebp - 4], 0x13
call fcn.0043fc90
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.004402a0
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x364]
call fcn.004081d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x330]
call fcn.004081d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x310]
call fcn.004081d0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00480a0c
mov esp, ebp
pop ebp
ret