Function at 0x4f9ee8
Capabilities:
Create udp socket
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb8
push ebx
push esi
push edi
mov esi, dword [ebp + 8]
mov edi, 1
xor eax, eax
mov dword [ebp - 0x18], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], 1
mov word [ebp - 0x1e], 0
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
xor eax, eax
mov dword [ebp - 4], eax
mov eax, dword [esi + 4]
test eax, eax
je 0x4f9f87
cmp byte [eax], 0x2d
jne 0x4f9f87
push 0x74
push eax
call fcn.00539518
add esp, 8
test eax, eax
je 0x4f9f3a
xor edx, edx
mov dword [ebp - 0x10], edx
push 0x6e
push dword [esi + 4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x4f9f52
mov dword [ebp - 0x14], 1
push 0x62
push dword [esi + 4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x4f9f6a
mov dword [ebp - 0x18], 1
push 0x6b
push dword [esi + 4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x4f9f82
mov dword [ebp - 0x1c], 1
mov edi, 2
cmp dword [esi + edi*4], 0
jne 0x4f9f9f
push 0
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x4fa6b8
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x28]
push dword [esi + eax*4]
call fcn.005395b8
pop ecx
cmp eax, 0x5a
jbe 0x4f9fdf
push 0
push 0x1452
call fcn.0041c35b
push eax
mov edx, dword [ebp - 0x28]
push dword [esi + edx*4]
push 0x559a58
push 0x5720e8
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
jmp 0x4fa6b8
inc edi
push dword [esi + edi*4]
call fcn.004d5474
test eax, eax
je 0x4fa013
push dword [esi + edi*4]
call fcn.00542dbc
pop ecx
mov word [ebp - 0x1e], ax
cmp word [ebp - 0x1e], 0
ja 0x4fa012
push 3
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x4fa6b8
inc edi
mov ebx, dword [esi + edi*4]
test ebx, ebx
je 0x4fa07b
push ebx
call sub.WSOCK32.dll_inet_addr
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffff
jne 0x4fa03b
push 3
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x4fa6b8
inc edi
cmp dword [esi + edi*4], 0
jne 0x4fa054
push 0
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x4fa6b8
push dword [esi + edi*4]
call fcn.00542dbc
pop ecx
mov word [ebp - 0x20], ax
cmp word [ebp - 0x20], 0
ja 0x4fa07a
push 3
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x4fa6b8
inc edi
mov eax, dword [ebp - 0x28]
push dword [esi + eax*4]
call fcn.004f9be6
mov ebx, eax
test ebx, ebx
je 0x4fa110
cmp dword [ebx + 0xf0], 0
jne 0x4fa0c5
push 0
push 0x1453
call fcn.0041c35b
push eax
mov eax, dword [ebp - 0x28]
push dword [esi + eax*4]
push 0x559a6d
push 0x5720e8
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
jmp 0x4fa6b8
cmp word [ebp - 0x1e], 0
je 0x4fa2fc
mov dx, word [ebx + 0xca]
cmp dx, word [ebp - 0x1e]
je 0x4fa2fc
movzx ecx, word [ebx + 0xca]
push ecx
mov eax, dword [ebp - 0x28]
push dword [esi + eax*4]
push 0
push 0x1451
call fcn.0041c35b
push eax
push 0x5720e8
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
jmp 0x4fa6b8
call fcn.004f999c
mov ebx, eax
test ebx, ebx
jne 0x4fa12d
push 2
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x4fa6b8
mov eax, dword [ebp - 0x28]
mov edx, dword [esi + eax*4]
push esi
push edi
mov edi, edx
mov esi, ebx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
lea eax, [ebx + 0x65]
push esi
push edi
mov esi, eax
mov edi, 0x55781c
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
mov ax, word [ebp - 0x1e]
mov word [ebx + 0xca], ax
mov dword [ebx + 0xe4], 2
push 0
call fcn.00548d28
pop ecx
mov dword [ebx + 0x110], eax
mov edx, dword [ebx + 0x110]
mov dword [ebx + 0x114], edx
mov ecx, dword [ebx + 0x110]
mov dword [ebx + 0x118], ecx
mov dword [ebx + 0xf0], 1
mov eax, dword [ebp - 0x1c]
mov dword [ebx + 0xf4], eax
mov edx, dword [ebp - 4]
mov dword [ebx + 0xf8], edx
mov cx, word [ebp - 0x20]
mov word [ebx + 0xfc], cx
xor eax, eax
mov dword [ebx + 0x100], eax
mov word [ebx + 0x104], 0
cmp word [ebp - 0x1e], 0
jne 0x4fa25b
push 0
push 1
lea edx, [ebx + 0xca]
push edx
mov cx, word [0x54f356]
push ecx
mov ax, word [0x54f354]
push eax
call fcn.004e3612
mov dword [ebx + 0x120], eax
cmp dword [ebx + 0x120], 0xffffffff
jne 0x4fa2e4
push ebx
call fcn.004f9ad5
push 0
push 0x1454
call fcn.0041c35b
push eax
push 0x559a82
push 0x5720e8
call sub.USER32.dll_wsprintfA
add esp, 0xc
xor eax, eax
jmp 0x4fa6b8
push 0
push 2
push 2
call sub.WSOCK32.dll_socket
mov dword [ebx + 0x120], eax
cmp dword [ebx + 0x120], 0xffffffff
jne 0x4fa2a1
push ebx
call fcn.004f9ad5
push 0
push 0x1455
call fcn.0041c35b
push eax
push 0x559a92
push 0x5720e8
call sub.USER32.dll_wsprintfA
add esp, 0xc
xor eax, eax
jmp 0x4fa6b8
mov dx, word [ebx + 0xca]
push edx
push dword [ebx + 0x120]
call fcn.004e3568
test eax, eax
jne 0x4fa2e4
push ebx
call fcn.004f9ad5
push 0
push 0x1456
call fcn.0041c35b
push eax
push str.__sockudp:__s
push 0x5720e8
call sub.USER32.dll_wsprintfA
add esp, 0xc
xor eax, eax
jmp 0x4fa6b8
push 0x23
push 0x438
push dword [0x55b3c8]
push dword [ebx + 0x120]
call sub.WSOCK32.dll_WSAAsyncSelect
cmp dword [ebp - 0x18], 0
je 0x4fa320
cmp dword [esi + edi*4], 0
je 0x4fa320
push dword [esi + edi*4]
call fcn.00542dbc
pop ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x4fa31f
xor edx, edx
mov dword [ebp - 0x18], edx
inc edi
cmp dword [esi + edi*4], 0
jne 0x4fa36c
cmp dword [ebp - 0x14], 0
jne 0x4fa345
cmp dword [ebx + 0xf4], 0
jne 0x4fa33b
push ebx
call fcn.004f9ad5
mov eax, 1
jmp 0x4fa6b8
mov edx, dword [ebp + 0xc]
push esi
mov esi, 0x559ab2
mov edi, edx
mov eax, edi
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop esi
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x24], edx
push dword [ebp + 0xc]
call fcn.005395b8
pop ecx
mov edi, eax
jmp 0x4fa420
cmp dword [ebp - 0x10], 0
je 0x4fa37a
mov eax, dword [esi + edi*4]
cmp byte [eax], 0x26
je 0x4fa3c0
mov edx, dword [ebp + 0xc]
mov byte [edx], 0
push esi
push dword [ebp + 0xc]
push edi
call fcn.004d5691
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x24], ecx
push dword [ebp + 0xc]
call fcn.005395b8
pop ecx
mov edi, eax
cmp dword [ebp - 0x14], 0
je 0x4fa412
mov eax, dword [ebp + 0xc]
cmp byte [eax + edi - 1], 0xa
je 0x4fa412
push 0x559ab6
push dword [ebp + 0xc]
call fcn.005394dc
add esp, 8
add edi, 2
jmp 0x4fa412
push dword [ebp + 0x10]
push dword [esi + edi*4]
call fcn.0041a1a8
test eax, eax
jne 0x4fa407
cmp dword [ebx + 0xf4], 0
jne 0x4fa3de
push ebx
call fcn.004f9ad5
push 0
push 0x1457
call fcn.0041c35b
push eax
push dword [esi + edi*4]
push 0x559aba
push 0x5720e8
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
jmp 0x4fa6b8
mov edx, dword [eax]
add edx, dword [eax + 0xc]
mov dword [ebp - 0x24], edx
mov edi, dword [eax + 8]
cmp dword [ebp - 0x18], 0
je 0x4fa420
cmp edi, dword [ebp - 0x18]
jle 0x4fa420
mov edi, dword [ebp - 0x18]
cmp dword [ebx + 0xdc], 0
je 0x4fa4d9
mov eax, dword [ebx + 0xe0]
add eax, edi
cmp eax, 0x4000
jle 0x4fa477
cmp dword [ebx + 0xf4], 0
jne 0x4fa44b
push ebx
call fcn.004f9ad5
push 0
push 0x1458
call fcn.0041c35b
push eax
mov edx, dword [ebp - 0x28]
push dword [esi + edx*4]
push str.__sockudp:__s__s
push 0x5720e8
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
jmp 0x4fa6b8
mov edx, dword [ebx + 0xe0]
add edx, edi
add edx, 5
push edx
push dword [ebx + 0xdc]
call fcn.00545f18
add esp, 8
test eax, eax
jne 0x4fa4b6
cmp dword [ebx + 0xf4], 0
jne 0x4fa4a4
push ebx
call fcn.004f9ad5
push 2
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x4fa6b8
mov edx, eax
mov dword [ebx + 0xdc], edx
push edi
push dword [ebp - 0x24]
add edx, dword [ebx + 0xe0]
push edx
call fcn.005393c8
add esp, 0xc
add dword [ebx + 0xe0], edi
jmp 0x4fa52b
lea eax, [edi + 0xa]
push eax
call fcn.00545a4c
pop ecx
mov dword [ebx + 0xdc], eax
cmp dword [ebx + 0xdc], 0
jne 0x4fa513
cmp dword [ebx + 0xf4], 0
jne 0x4fa501
push ebx
call fcn.004f9ad5
push 2
push 0
push dword [esi]
push 0
call fcn.00467118
jmp 0x4fa6b8
push edi
push dword [ebp - 0x24]
push dword [ebx + 0xdc]
call fcn.005393c8
add esp, 0xc
mov dword [ebx + 0xe0], edi
lea eax, [ebp - 0xc]
mov dword [ebp - 0x2c], eax
lea edx, [ebp - 4]
mov dword [eax], edx
xor ecx, ecx
mov dword [eax + 4], ecx
mov word [ebp - 0x2e], 4
mov word [ebp - 0x30], 2
lea esi, [ebp - 0x38]
push 0x10
push 0
lea eax, [ebp - 0x48]
push eax
call fcn.00539438
add esp, 0xc
mov word [ebp - 0x48], 2
movsx edx, word [esi + 0xa]
push edx
mov ecx, dword [esi + 0xc]
push dword [ecx]
lea eax, [ebp - 0x44]
push eax
call fcn.005393c8
add esp, 0xc
mov dx, word [ebp - 0x20]
push edx
call sub.WSOCK32.dll_htons
mov word [ebp - 0x46], ax
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
mov edx, dword [eax]
mov dword [ebp - 0x44], edx
mov eax, dword [ebx + 0xe0]
cmp eax, 0x2000
jle 0x4fa5a0
mov eax, 0x2000
push 0x10
lea edx, [ebp - 0x48]
push edx
push 0
push eax
push dword [ebx + 0xdc]
push dword [ebx + 0x120]
call sub.WSOCK32.dll_sendto
mov edi, eax
test edi, edi
jge 0x4fa61e
call sub.WSOCK32.dll_WSAGetLastError
cmp eax, 0x2733
jne 0x4fa5ee
push 0x23
push 0x438
push dword [0x55b3c8]
push dword [ebx + 0x120]
call sub.WSOCK32.dll_WSAAsyncSelect
mov eax, 1
jmp 0x4fa6b8
mov dword [ebx + 0x11c], eax
movzx edx, ax
shl edx, 0x10
or edx, 2
push edx
push dword [ebx + 0x120]
push 0x438
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
mov eax, 1
jmp 0x4fa6b8
push 0
call fcn.00548d28
pop ecx
mov dword [ebx + 0x114], eax
test edi, edi
jle 0x4fa663
add dword [ebx + 0x108], edi
cmp edi, dword [ebx + 0xe0]
jge 0x4fa663
sub dword [ebx + 0xe0], edi
push dword [ebx + 0xe0]
mov eax, dword [ebx + 0xdc]
add edi, eax
push edi
push eax
call fcn.005393ec
add esp, 0xc
mov eax, 1
jmp 0x4fa6b8
push dword [ebx + 0xdc]
call fcn.00545938
pop ecx
xor edx, edx
mov dword [ebx + 0xdc], edx
xor ecx, ecx
mov dword [ebx + 0xe0], ecx
cmp dword [0x558a48], 0
je 0x4fa6a4
cmp dword [ebx + 0xf4], 0
je 0x4fa6a4
push ebx
push 0
push 0x43a
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
cmp dword [ebx + 0xf4], 0
jne 0x4fa6b3
push ebx
call fcn.004f9ad5
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc