Function at 0x6b6460
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Create tcp socket
Initialize winsock library
Resolve dns
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2f0
push ebx
push esi
push edi
lea edi, [ebp - 0x2f0]
mov ecx, 0xbc
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x818f7c]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
mov word [ebp - 0x18], ax
xor eax, eax
mov dword [ebp - 0x16], eax
mov dword [ebp - 0x12], eax
mov dword [ebp - 0xe], eax
mov word [ebp - 0xa], ax
xor eax, eax
mov word [ebp - 0x1bc], ax
push 0x18e
push 0
lea eax, [ebp - 0x1ba]
push eax
call fcn.00533469
add esp, 0xc
mov dword [ebp - 0x1c8], 0
mov byte [ebp - 0x1d1], 0
mov byte [ebp - 0x22c], 0
push 0x4f
push 0
lea eax, [ebp - 0x22b]
push eax
call fcn.00533469
add esp, 0xc
mov eax, dword [ebp + 8]
push eax
call fcn.00532325
add esp, 4
test eax, eax
je 0x6b64ff
or eax, 0xffffffff
jmp 0x6b6748
push 0x10
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.00533469
add esp, 0xc
lea eax, [ebp - 0x1bc]
push eax
push 0x101
call fcn.00534af3
test eax, eax
je 0x6b652c
or eax, 0xffffffff
jmp 0x6b6748
cmp dword [ebp + 0xc], 0
jle 0x6b653b
cmp dword [ebp + 0xc], 0x10000
jl 0x6b6543
call fcn.006b68c0
mov dword [ebp + 0xc], eax
mov eax, 1
test eax, eax
je 0x6b65a4
mov eax, dword [ebp + 8]
push eax
call fcn.00535f02
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x6b656d
call fcn.005330c2
or eax, 0xffffffff
jmp 0x6b6748
mov eax, dword [ebp - 0x24]
movsx ecx, word [eax + 0xa]
cmp ecx, 4
jle 0x6b6585
mov eax, 4
mov ecx, dword [ebp - 0x24]
mov word [ecx + 0xa], ax
mov eax, dword [ebp - 0x24]
movsx ecx, word [eax + 0xa]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x14]
push edx
call fcn.005328b1
add esp, 0xc
jmp 0x6b65b6
lea eax, [ebp - 0x22c]
push eax
call fcn.00532fdc
add esp, 4
mov dword [ebp - 0x14], eax
push 6
push 1
push 2
call fcn.00533973
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0xffffffff
jne 0x6b65dd
call fcn.005330c2
or eax, 0xffffffff
jmp 0x6b6748
movzx eax, word [ebp + 0xc]
push eax
call fcn.00535674
mov word [ebp - 0x16], ax
mov eax, 2
mov word [ebp - 0x18], ax
push 0x10
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x1c8]
push ecx
call fcn.005329a1
test eax, eax
je 0x6b665e
mov eax, dword [ebp - 0x1c8]
push eax
call fcn.00533f95
call fcn.005330c2
push str.127.0.0.1
mov eax, dword [ebp + 8]
push eax
call fcn.0053446d
add esp, 8
test eax, eax
jne 0x6b6656
push str.10.210.27.10
mov eax, dword [ebp + 8]
push eax
call fcn.0053446d
add esp, 8
test eax, eax
je 0x6b6649
xor eax, eax
jne 0x6b6656
mov eax, dword [0x95207c]
add eax, 1
mov dword [0x95207c], eax
or eax, 0xffffffff
jmp 0x6b6748
mov byte [ebp - 0x1d1], 1
push 1
lea eax, [ebp - 0x1d1]
push eax
push 8
push 0xffff
mov ecx, dword [ebp - 0x1c8]
push ecx
call fcn.00532889
cmp dword [ebp + 0x10], 0
je 0x6b6742
push 0
push 0xfb
push 0xff
mov eax, dword [ebp - 0x1c8]
push eax
call fcn.006b6950
add esp, 0x10
push 1
push 0xfd
push 0xff
mov eax, dword [ebp - 0x1c8]
push eax
call fcn.006b6950
add esp, 0x10
push 0
push 0xfd
push 0xff
mov eax, dword [ebp - 0x1c8]
push eax
call fcn.006b6950
add esp, 0x10
push 0x1f
push 0xfb
push 0xff
mov eax, dword [ebp - 0x1c8]
push eax
call fcn.006b6950
add esp, 0x10
push 0x1f
push 0xfa
push 0xff
mov eax, dword [ebp - 0x1c8]
push eax
call fcn.006b6950
add esp, 0x10
push 0
push 0x50
push 0
mov eax, dword [ebp - 0x1c8]
push eax
call fcn.006b6950
add esp, 0x10
push pe_nt_image_headers32
push 0xff
push 0x19
mov eax, dword [ebp - 0x1c8]
push eax
call fcn.006b6950
add esp, 0x10
mov eax, dword [ebp - 0x1c8]
push edx
mov ecx, ebp
push eax
lea edx, [0x6b6778]
call fcn.0053491d
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00535561
add esp, 0x2f0
cmp ebp, esp
call fcn.00535fca
mov esp, ebp
pop ebp
ret