Function at 0x1000c700
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Receive data
Receive data on socket
Send data
Send data on socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x340
push esi
push edi
mov dword [ebp - 0x340], ecx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x340]
call fcn.1000a690
mov dword [ebp - 8], eax
lea ecx, [ebp - 8]
push ecx
mov ecx, dword [ebp - 0x340]
add ecx, 0x1b8a
call fcn.1000de70
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x1000c75f
mov esi, dword [ebp - 4]
add esi, 0x1c
mov ecx, 0x21
lea edi, [ebp - 0x33c]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x33c]
jmp 0x1000ca3d
push 6
push 1
push 2
call dword [sym.imp.WSOCK32.dll_socket]
mov edx, dword [ebp - 0x340]
mov dword [edx + 0x1b76], eax
push 0x10
push 0
mov eax, dword [ebp - 0x340]
add eax, 0x1b7a
push eax
call fcn.1009eb40
add esp, 0xc
mov ecx, 2
mov edx, dword [ebp - 0x340]
mov word [edx + 0x1b7a], cx
push 0x521d
call dword [sym.imp.WSOCK32.dll_htons]
mov ecx, dword [ebp - 0x340]
mov word [ecx + 0x1b7c], ax
push str.205.234.148.158
call dword [sym.imp.WSOCK32.dll_inet_addr]
mov edx, dword [ebp - 0x340]
mov dword [edx + 0x1b7e], eax
push 0x10
mov eax, dword [ebp - 0x340]
add eax, 0x1b7a
push eax
mov ecx, dword [ebp - 0x340]
mov edx, dword [ecx + 0x1b76]
push edx
call dword [sym.imp.WSOCK32.dll_connect]
test eax, eax
jne 0x1000c8ed
mov byte [ebp - 0x160], 0x30
mov byte [ebp - 0x15f], 0
push 0
mov eax, dword [ebp + 8]
push eax
call fcn.1009ec30
add esp, 4
add eax, 1
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x340]
mov eax, dword [edx + 0x1b76]
push eax
call dword [sym.imp.WSOCK32.dll_send]
push 0
push 0x40
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x340]
mov eax, dword [edx + 0x1b76]
push eax
call dword [sym.imp.WSOCK32.dll_recv]
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0x160]
push ecx
push str.BlockCategory__hs
push 0x40
lea edx, [ebp - 0x90]
push edx
call fcn.10003de0
add esp, 0x10
push 0
push 0
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x340]
call fcn.1000d660
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x118], ecx
lea edx, [ebp - 0x160]
push edx
push str.Blocked_by_category__hs
push 0x40
lea eax, [ebp - 0x114]
push eax
call fcn.10003de0
add esp, 0x10
mov ecx, dword [ebp - 0x340]
mov edx, dword [ecx + 0x1b76]
push edx
call dword [sym.imp.WSOCK32.dll_closesocket]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 8]
push ecx
mov ecx, dword [ebp - 0x340]
add ecx, 0x1b8a
call fcn.1000de10
mov eax, dword [ebp - 0x11c]
jmp 0x1000ca3d
push 0x521e
call dword [sym.imp.WSOCK32.dll_htons]
mov edx, dword [ebp - 0x340]
mov word [edx + 0x1b7c], ax
push str.205.234.148.158
call dword [sym.imp.WSOCK32.dll_inet_addr]
mov ecx, dword [ebp - 0x340]
mov dword [ecx + 0x1b7e], eax
push 0x10
mov edx, dword [ebp - 0x340]
add edx, 0x1b7a
push edx
mov eax, dword [ebp - 0x340]
mov ecx, dword [eax + 0x1b76]
push ecx
call dword [sym.imp.WSOCK32.dll_connect]
test eax, eax
jne 0x1000ca3b
mov byte [ebp - 0x2b8], 0x30
mov byte [ebp - 0x2b7], 0
push 0
mov edx, dword [ebp + 8]
push edx
call fcn.1009ec30
add esp, 4
add eax, 1
push eax
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x340]
mov edx, dword [ecx + 0x1b76]
push edx
call dword [sym.imp.WSOCK32.dll_send]
push 0
push 0x40
lea eax, [ebp - 0x2b8]
push eax
mov ecx, dword [ebp - 0x340]
mov edx, dword [ecx + 0x1b76]
push edx
call dword [sym.imp.WSOCK32.dll_recv]
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x2b8]
push eax
push str.BlockCategory__hs
push 0x40
lea ecx, [ebp - 0x1e8]
push ecx
call fcn.10003de0
add esp, 0x10
push 0
lea edx, [ebp - 0x1e8]
push edx
mov ecx, dword [ebp - 0x340]
call fcn.1000d5d0
movzx eax, al
mov dword [ebp - 0x274], eax
mov ecx, dword [ebp - 0x274]
mov dword [ebp - 0x270], ecx
lea edx, [ebp - 0x2b8]
push edx
push str.Blocked_by_category__hs
push 0x40
lea eax, [ebp - 0x26c]
push eax
call fcn.10003de0
add esp, 0x10
mov ecx, dword [ebp - 0x340]
mov edx, dword [ecx + 0x1b76]
push edx
call dword [sym.imp.WSOCK32.dll_closesocket]
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 8]
push ecx
mov ecx, dword [ebp - 0x340]
add ecx, 0x1b8a
call fcn.1000de10
mov eax, dword [ebp - 0x274]
jmp 0x1000ca3d
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4