Function at 0x47f950
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Receive data
Receive data on socket
Resolve dns

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x431
push 0
push 0
dec ecx
jne 0x47f958
push ecx
push ebx
push esi
push edi
mov edi, eax
xor eax, eax
push ebp
push 0x47fd56
push dword fs:[eax]
mov dword fs:[eax], esp
xor ebx, ebx
cmp dword [edi + 0x48], 0
jne 0x47fd0b
push 0
push 1
push 2
call sub.wsock32.dll_socket
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffff
je 0x47fd0b
mov word [ebp - 0x216c], 2
mov eax, dword [0x49248c]
movzx eax, word [eax]
push eax
call sub.wsock32.dll_htons
mov word [ebp - 0x216a], ax
mov eax, dword [0x4925e8]
mov eax, dword [eax]
push eax
call sub.wsock32.dll_inet_addr
mov esi, eax
mov dword [ebp - 0x2168], esi
inc esi
jne 0x47f9ef
mov eax, dword [0x4925e8]
mov eax, dword [eax]
push eax
call sub.wsock32.dll_gethostbyname
test eax, eax
je 0x47fd0b
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x2168], eax
push 0x10
lea eax, [ebp - 0x216c]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.wsock32.dll_connect
push 0
push 0x2000
lea eax, [ebp - 0x2010]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.wsock32.dll_recv
inc eax
je 0x47fcdc
lea edx, [ebp - 0x2174]
mov eax, dword [edi + 0x44]
call fcn.00409d60
mov ecx, dword [ebp - 0x2174]
lea eax, [ebp - 0x2170]
mov edx, 0x47fd6c
call fcn.00405864
mov edx, dword [ebp - 0x2170]
mov eax, dword [ebp - 4]
call fcn.00474dbc
push 0
push 0x2000
lea eax, [ebp - 0x2010]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.wsock32.dll_recv
inc eax
je 0x47fcdc
jmp 0x47fcd2
lea eax, [ebp - 0x2010]
xor ecx, ecx
mov edx, 0x2000
call fcn.00403af4
push 0
push 0x2000
lea eax, [ebp - 0x2010]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.wsock32.dll_recv
mov esi, eax
test esi, esi
jg 0x47fab5
cmp byte [edi + 0x40], 0
jne 0x47fab5
mov eax, edi
call fcn.0041fe98
jmp 0x47fcdc
lea eax, [ebp - 0x217c]
lea edx, [ebp - 0x2010]
call fcn.00405e3c
mov eax, dword [ebp - 0x217c]
lea edx, [ebp - 0x2178]
call fcn.00409bc0
mov edx, dword [ebp - 0x2178]
lea eax, [ebp - 8]
call fcn.004057d4
lea eax, [ebp - 0x2180]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2180]
mov edx, 0x47fd80
call fcn.00405974
jne 0x47fbbc
lea eax, [ebp - 8]
mov ecx, 7
mov edx, 1
call fcn.00405a84
mov eax, dword [0x492338]
push eax
mov edx, dword [ebp - 8]
mov eax, 0x47fd90
call fcn.00405b28
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov edx, dword [ebp - 8]
mov eax, 0x47fd90
call fcn.00405b28
mov ecx, eax
lea eax, [ebp - 8]
mov edx, 1
call fcn.00405a84
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.004055c8
mov ecx, dword [0x492338]
mov ecx, dword [ecx]
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x10]
call fcn.00405864
mov edx, dword [ebp - 0xc]
lea eax, [ebp - 0x215c]
call fcn.00403770
mov eax, dword [0x49268c]
mov byte [eax], 1
mov edx, 1
lea eax, [ebp - 0x215c]
call fcn.00403e84
call fcn.0040305c
mov bl, 1
push ebp
call fcn.0047f930
pop ecx
jmp 0x47fcd2
lea eax, [ebp - 0x2184]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2184]
mov edx, 0x47fd9c
call fcn.00405974
jne 0x47fc1b
lea eax, [ebp - 8]
mov ecx, 7
mov edx, 1
call fcn.00405a84
test bl, bl
je 0x47fc0d
lea eax, [ebp - 0x215c]
call fcn.00403918
call fcn.0040305c
xor ebx, ebx
push ebp
call fcn.0047f930
pop ecx
jmp 0x47fcd2
lea eax, [ebp - 0x2188]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x2188]
mov edx, 0x47fdac
call fcn.00405974
jne 0x47fc67
mov byte [edi + 0x40], 1
push 2
mov eax, dword [ebp - 4]
push eax
call sub.wsock32.dll_shutdown
mov eax, dword [ebp - 4]
push eax
call sub.wsock32.dll_closesocket
mov eax, edi
call fcn.0041fe98
jmp 0x47fcdc
lea eax, [ebp - 0x218c]
push eax
mov ecx, 7
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00405a44
mov eax, dword [ebp - 0x218c]
mov edx, 0x47fdbc
call fcn.00405974
jne 0x47fcb1
test bl, bl
je 0x47fca6
lea eax, [ebp - 0x215c]
call fcn.00403918
call fcn.0040305c
xor ebx, ebx
push ebp
call fcn.0047f930
pop ecx
jmp 0x47fcd2
push 0
lea edx, [ebp - 0x2010]
mov ecx, esi
lea eax, [ebp - 0x215c]
call fcn.004038f8
call fcn.0040305c
push ebp
call fcn.0047f930
pop ecx
cmp byte [edi + 0xd], 0
je 0x47fa74
test bl, bl
je 0x47fcf0
lea eax, [ebp - 0x215c]
call fcn.00403918
call fcn.0040305c
push 2
mov eax, dword [ebp - 4]
push eax
call sub.wsock32.dll_shutdown
mov eax, dword [ebp - 4]
push eax
call sub.wsock32.dll_closesocket
mov eax, edi
call fcn.0041fe98
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47fd5d
lea eax, [ebp - 0x218c]
mov edx, 4
call fcn.00405554
lea eax, [ebp - 0x217c]
mov edx, 2
call fcn.00405d40
lea eax, [ebp - 0x2174]
mov edx, 2
call fcn.00405554
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00405554
ret