Function at 0x41db90
Capabilities:
Connect socket
Connect udp socket
Create thread
Create udp socket
Resolve dns
Send data
Send data on socket

Disassembly:
mov eax, dword [0x46ed38]
push ebx
push ebp
push esi
push edi
xor edi, edi
cmp eax, edi
je 0x41dcaa
mov ebx, dword [esp + 0x30]
push 0x51a860
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [0x46f4b4]
cmp esi, edi
jle 0x41dc41
mov ebp, dword [0x51a850]
lea ecx, [ebp + 4]
mov eax, dword [esp + 0x14]
mov edx, 8
cmp eax, edx
jne 0x41dc29
lea eax, [ebx*8]
sub eax, ebx
lea eax, [eax + eax*4]
cmp dword [eax*8 + 0x517188], 1
jne 0x41dc29
cmp dword [ecx + 0x14], 2
jne 0x41dc29
cmp dword [ecx + 0x18], edx
jne 0x41dc29
mov edx, dword [ecx]
lea eax, [edx*8]
sub eax, edx
lea edx, [eax + eax*4]
cmp dword [edx*8 + 0x517188], 1
jne 0x41dc29
mov eax, dword [ecx + 8]
mov edx, dword [esp + 0x1c]
cmp eax, edx
jne 0x41dc29
mov dx, word [esp + 0x1a]
cmp word [ecx + 6], dx
je 0x41dcb2
mov eax, dword [ecx + 0x14]
test eax, eax
je 0x41dd20
inc edi
add ecx, 0x12c
cmp edi, esi
jl 0x41dbc9
xor edi, edi
cmp esi, dword [0x46f468]
jg 0x41dc8b
lea eax, [esi + 0xa]
cmp esi, eax
jge 0x41dc85
cmp esi, dword [0x46f468]
jge 0x41dc85
lea ecx, [esp + 0x30]
mov dword [esp + 0x30], edi
push ecx
push edi
push esi
push 0x41dea0
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [0x46f4b4]
inc esi
add edx, 0xa
cmp esi, edx
jl 0x41dc50
mov dword [0x46f4b4], esi
push 0x51a860
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x46ed38], edi
jne 0x41dba7
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
ret
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
test ecx, ecx
jne 0x41dce2
lea edi, [edi + edi*2]
push 0x51a860
lea eax, [edi + edi*4]
lea eax, [eax + eax*4]
mov dword [ebp + eax*4 + 0x18], 3
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret
lea eax, [edi + edi*2]
push 0
push ecx
push edx
lea eax, [eax + eax*4]
lea esi, [eax + eax*4]
shl esi, 2
mov ecx, dword [esi + ebp]
push ecx
call dword [sym.imp.WS2_32.dll_send]
test eax, eax
jg 0x41dd0e
mov edx, dword [0x51a850]
mov dword [esi + edx + 0x18], 3
push 0x51a860
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret
lea eax, [edi + edi*2]
lea eax, [eax + eax*4]
lea esi, [eax + eax*4]
mov eax, dword [esp + 0x14]
shl esi, 2
cmp eax, 8
mov dword [esi + ebp + 0x1c], eax
mov ecx, dword [0x51a850]
mov ebp, dword [esp + 0x28]
lea edx, [esi + ecx + 8]
mov ecx, dword [esp + 0x18]
mov dword [edx], ecx
mov ecx, dword [esp + 0x1c]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x20]
mov dword [edx + 8], ecx
mov ecx, dword [esp + 0x24]
mov dword [edx + 0xc], ecx
mov edx, dword [0x51a850]
mov dword [esi + edx], ebp
jne 0x41de2f
mov eax, dword [0x51a850]
mov dword [esi + eax + 4], ebx
lea eax, [ebx*8]
sub eax, ebx
lea ebx, [eax + eax*4]
shl ebx, 3
cmp dword [ebx + 0x517188], 1
jne 0x41de2f
lea ecx, [ebx + 0x51718c]
push ecx
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x41de14
mov eax, dword [eax + 0xc]
xor edx, edx
mov dword [esp + 0x18], edx
mov word [esp + 0x18], 2
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], edx
mov ecx, dword [eax]
mov ax, word [ebx + 0x517294]
mov edx, dword [ecx]
push eax
mov dword [esp + 0x20], edx
call dword [sym.imp.WS2_32.dll_htons]
push 0
push 2
push 2
mov word [esp + 0x26], ax
call dword [sym.imp.WS2_32.dll_socket]
lea ecx, [esp + 0x18]
mov ebx, eax
push 0x10
push ecx
push ebx
call dword [sym.imp.WS2_32.dll_connect]
mov eax, dword [ebp]
mov ebp, dword [ebp + 4]
push 0
push eax
push ebp
push ebx
call dword [sym.imp.WS2_32.dll_send]
test eax, eax
jg 0x41de26
push ebx
call dword [sym.imp.WS2_32.dll_closesocket]
push 0x51a860
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret
mov edx, dword [0x51a850]
mov dword [esi + edx], ebx
mov eax, dword [0x51a850]
mov ecx, dword [esp + 0x2c]
push 0x51a860
mov dword [esi + eax + 0x20], ecx
mov edx, dword [0x51a850]
mov dword [esi + edx + 0x18], 1
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
ret