Function at 0x6de842f0
Capabilities:
Create thread
Create udp socket
Send data
Send data on socket
Set socket configuration

Disassembly:
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x130
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov dword [esp], 2
call sub.WSOCK32.DLL_socket
sub esp, 0xc
cmp eax, 0xffffffff
je 0x6de846c0
mov esi, eax
mov eax, dword [0x6de94054]
mov edx, 2
mov word [esp + 0x28], dx
mov dword [esp], eax
call sub.WSOCK32.DLL_inet_addr
sub esp, 4
mov dword [esp + 0x2c], eax
movzx eax, word [0x6de94074]
mov dword [esp], eax
call sub.WSOCK32.DLL_htons
sub esp, 4
mov word [esp + 0x2a], ax
mov eax, dword [0x6de94070]
mov dword [esp + 0x10], 4
mov dword [esp + 0x50], eax
mov eax, dword [0x6de94064]
mov dword [esp + 8], 0x20
mov dword [esp + 0x54], eax
lea eax, [esp + 0x24]
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0xffff
mov dword [esp], esi
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x24], 1
call sub.WSOCK32.DLL_setsockopt
sub esp, 0x14
mov dword [esp + 8], 1
mov eax, dword [ebx + 0x24]
mov dword [esp], esi
mov dword [esp + 4], eax
call sub.WS2_32.dll_WSAEventSelect
sub esp, 0xc
cmp eax, 0xffffffff
je 0x6de846d0
lea eax, [esp + 0x28]
mov dword [ebx], esi
mov dword [esp + 0x10], eax
lea eax, [esp + 0x48]
mov dword [esp + 0x14], 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x10
mov dword [esp + 4], eax
mov dword [esp], esi
call sub.WSOCK32.DLL_sendto
sub esp, 0x18
cmp eax, 0xffffffff
je 0x6de8b1ae
lea edi, [esp + 0x58]
mov dword [esp + 4], 0x12
lea esi, [esp + 0x6a]
mov dword [esp], edi
call fcn.6de84180
mov dword [esp + 4], esi
mov dword [esp], edi
call fcn.6de89ae0
xor eax, eax
lea esi, [esi]
lea esi, [esi]
movzx edx, byte [esi + eax]
mov ecx, edx
and edx, 0xf
shr cl, 4
movzx edx, byte [edx + str.0123456789abcdef]
movzx ecx, cl
movzx ecx, byte [ecx + str.0123456789abcdef]
mov byte [esp + eax*2 + 0xab], dl
mov byte [esp + eax*2 + 0xaa], cl
add eax, 1
cmp eax, 0x20
jne 0x6de84440
mov eax, dword [0x6de94054]
lea esi, [esp + 0x8a]
mov byte [esp + 0xea], 0
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.6de89ae0
xor eax, eax
movzx edx, byte [esi + eax]
mov ecx, edx
and edx, 0xf
shr cl, 4
movzx edx, byte [edx + str.0123456789abcdef]
movzx ecx, cl
movzx ecx, byte [ecx + str.0123456789abcdef]
mov byte [esp + eax*2 + 0xcc], dl
mov byte [esp + eax*2 + 0xcb], cl
add eax, 1
cmp eax, 0x20
jne 0x6de84495
mov eax, dword [0x6de8d008]
lea esi, [esp + 0xec]
add ebx, 0x28
xor eax, 0xdeadbeee
add eax, 0x8ad
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0xaa]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0xae]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0xb2]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xb6]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0xba]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0xbe]
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0xc2]
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0xc6]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0xcb]
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0xcf]
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0xd3]
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0xd7]
mov dword [esp + 0x11c], eax
mov eax, dword [esp + 0xdb]
mov dword [esp + 0x120], eax
mov eax, dword [esp + 0xdf]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0xe3]
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0xe7]
mov dword [esp + 0x12c], eax
mov eax, 2
mov word [esp + 0x38], ax
movzx eax, word [0x6de94074]
mov dword [esp], eax
call sub.WSOCK32.DLL_htons
sub esp, 4
mov word [esp + 0x3a], ax
mov eax, dword [0x6de8d010]
mov dword [esp], eax
call sub.WSOCK32.DLL_htonl
sub esp, 4
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x38]
mov dword [esp + 4], esi
mov dword [esp + 0x14], 0x10
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x44
mov eax, dword [ebx - 0x28]
mov dword [esp], eax
call sub.WSOCK32.DLL_sendto
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
sub esp, 0x18
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x6de81500
mov dword [esp + 4], 0
mov dword [esp], 0
call esi
sub esp, 0x18
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x6de86790
mov dword [esp + 4], 0
mov dword [esp], 0
call esi
sub esp, 0x18
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, 1
sub esp, 4
add esp, 0x130
pop ebx
pop esi
pop edi
ret
add esp, 0x130
xor eax, eax
pop ebx
pop esi
pop edi
ret
mov dword [esp], esi
call sub.WSOCK32.DLL_closesocket
xor eax, eax
sub esp, 4
add esp, 0x130
pop ebx
pop esi
pop edi
ret
call sub.msvcrt.dll_abort
call sub.msvcrt.dll_abort
call sub.msvcrt.dll_abort
call sub.msvcrt.dll_abort
nop
nop
call sub.msvcrt.dll_abort
nop
nop
nop