Function at 0x10026fd
Capabilities:
Initialize winsock library
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1d0
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
push esi
xor esi, esi
push edi
xor edi, edi
inc edi
mov dword [ebp - 0x1a8], esi
mov dword [ebp - 0x1d0], esi
mov dword [ebp - 0x1cc], esi
mov dword [ebp - 0x1c8], esi
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1a0], esi
mov dword [ebp - 0x1a4], esi
mov dword [ebp - 0x1b0], esi
mov dword [ebp - 0x1c4], edi
mov dword [ebp - 0x1b4], esi
mov byte [ebp - 0x1c0], 0
mov byte [ebp - 0x195], 0
mov dword [ebp - 0x19c], esi
mov dword [ebp - 0x1b8], esi
call fcn.010038c8
push esi
push esi
push edi
push esi
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
mov eax, dword [ebx]
mov dword [0x10050dc], eax
lea eax, [ebp - 0x194]
push eax
push 0x101
call dword [sym.imp.WS2_32.dll_WSAStartup]
cmp eax, esi
je 0x10027bc
push eax
push dword [0x10050dc]
push 0x2716
push 2
call fcn.010037dd
add esp, 0x10
push edi
call dword [sym.imp.msvcrt.dll_exit]
call dword [sym.imp.KERNEL32.dll_GetVersion]
test eax, eax
jns 0x10027d8
mov dword [0x1005434], edi
mov dword [0x10050d8], 0x1001254
jmp 0x10027e8
mov dword [0x1005434], esi
mov dword [0x10050d8], 0x1001210
cmp dword [ebp + 8], 2
jge 0x10027f8
push 0x89
call fcn.0100261a
cmp dword [ebp + 8], edi
mov dword [ebp - 0x1bc], edi
jle 0x1002c1b
lea esi, [ebx + edi*4]
mov eax, dword [esi]
mov cl, byte [eax]
cmp cl, 0x2d
je 0x1002a97
cmp cl, 0x2f
je 0x1002a97
cmp dword [ebp - 0x1ac], 0
jne 0x10028b8
push eax
call dword [sym.imp.msvcrt.dll__strupr]
mov eax, dword [esi]
pop ecx
push 6
mov edi, 0x1001208
mov esi, eax
pop ecx
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x1002856
mov dword [ebp - 0x1ac], 1
jmp 0x1002afa
push 4
mov edi, 0x1001204
mov esi, eax
pop ecx
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x1002872
mov dword [ebp - 0x1ac], 2
jmp 0x10028ac
push 7
mov edi, 0x10011fc
mov esi, eax
pop ecx
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x100288e
mov dword [ebp - 0x1ac], 3
jmp 0x10028ac
mov esi, eax
push 7
mov edi, 0x10011f4
pop ecx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x1002bbb
mov dword [ebp - 0x1ac], 4
mov byte [ebp - 0x195], 1
jmp 0x1002afa
cmp dword [ebp - 0x1a0], 0
jne 0x1002926
mov esi, eax
push 2
mov edi, 0x10011d0
pop ecx
xor eax, eax
mov dword [ebp - 0x1a0], esi
repe cmpsb byte [esi], byte es:[edi]
jne 0x10028e2
and dword [ebp - 0x19c], eax
jmp 0x1002afa
mov esi, dword [sym.imp.msvcrt.dll_strchr]
push 0x2a
push dword [ebp - 0x1a0]
call esi
pop ecx
pop ecx
test eax, eax
jne 0x1002917
push 0x3f
push dword [ebp - 0x1a0]
call esi
pop ecx
pop ecx
test eax, eax
jne 0x1002917
mov dword [ebp - 0x19c], 2
jmp 0x1002afa
mov dword [ebp - 0x19c], 1
jmp 0x1002afa
push 0x10011ec
push eax
call dword [sym.imp.msvcrt.dll__stricmp]
pop ecx
pop ecx
test eax, eax
jne 0x1002947
mov dword [ebp - 0x1d0], 1
jmp 0x1002afa
push 0x10011e4
push dword [esi]
call dword [sym.imp.msvcrt.dll__stricmp]
pop ecx
pop ecx
test eax, eax
jne 0x1002969
mov dword [ebp - 0x1cc], 1
jmp 0x1002afa
push 0x10011e0
push dword [esi]
call dword [sym.imp.msvcrt.dll__stricmp]
pop ecx
pop ecx
test eax, eax
jne 0x100298b
mov dword [ebp - 0x1c8], 1
jmp 0x1002afa
xor eax, eax
cmp dword [ebp - 0x1d0], eax
je 0x10029a8
mov dword [ebp - 0x1d0], eax
mov eax, dword [esi]
mov dword [ebp - 0x1b0], eax
jmp 0x1002afa
cmp dword [ebp - 0x1cc], eax
je 0x10029f1
push dword [esi]
and dword [ebp - 0x1cc], 0
call dword [sym.imp.msvcrt.dll_atoi]
mov dword [ebp - 0x1c4], eax
dec eax
pop ecx
cmp eax, 0x270e
jbe 0x1002afa
push dword [ebx + edi*4]
push dword [0x10050dc]
push 0x272d
push 2
call fcn.010037dd
add esp, 0x10
push 1
jmp 0x10027b6
cmp dword [ebp - 0x1c8], eax
je 0x1002a2c
xor eax, eax
push eax
push eax
push dword [esi]
mov dword [ebp - 0x1c8], eax
call dword [sym.imp.msvcrt.dll_strtol]
add esp, 0xc
mov dword [ebp - 0x1b4], eax
test eax, eax
jne 0x1002afa
push dword [ebx + edi*4]
push dword [0x10050dc]
push 0x2731
jmp 0x10029e0
cmp dword [ebp - 0x1a4], eax
jne 0x1002bc5
mov esi, dword [esi]
push 2
mov edi, 0x10011d0
pop ecx
xor eax, eax
mov dword [ebp - 0x1a4], esi
repe cmpsb byte [esi], byte es:[edi]
jne 0x1002a59
and dword [ebp - 0x1b8], eax
jmp 0x1002afa
mov esi, dword [sym.imp.msvcrt.dll_strchr]
push 0x2a
push dword [ebp - 0x1a4]
call esi
pop ecx
pop ecx
test eax, eax
jne 0x1002a8b
push 0x3f
push dword [ebp - 0x1a4]
call esi
pop ecx
pop ecx
test eax, eax
jne 0x1002a8b
mov dword [ebp - 0x1b8], 2
jmp 0x1002afa
mov dword [ebp - 0x1b8], 1
jmp 0x1002afa
lea esi, [eax + 1]
jmp 0x1002af4
movsx eax, al
push eax
call dword [sym.imp.msvcrt.dll_toupper]
sub eax, 0x34
pop ecx
je 0x1002aea
dec eax
dec eax
je 0x1002ae6
sub eax, 0x10
je 0x1002ad3
sub eax, 0xa
jne 0x1002bd8
cmp dword [0x1005434], eax
jne 0x1002be2
mov byte [ebp - 0x1c0], 1
jmp 0x1002af3
mov dword [ebp - 0x1a8], 1
mov byte [ebp - 0x195], 1
jmp 0x1002af3
push 0x17
jmp 0x1002aec
push 2
pop eax
mov word [0x10050e0], ax
inc esi
mov al, byte [esi]
test al, al
jne 0x1002a9c
mov edi, dword [ebp - 0x1bc]
inc edi
cmp edi, dword [ebp + 8]
mov dword [ebp - 0x1bc], edi
jl 0x1002807
cmp byte [ebp - 0x195], 0
je 0x1002bec
call fcn.010039e3
test al, al
jne 0x1002bec
mov esi, dword [sym.imp.msvcrt.dll__iob]
xor eax, eax
push eax
push eax
lea ecx, [ebp - 0x19c]
push ecx
push eax
push 0x2e4
push eax
push 0x1100
mov dword [ebp - 0x19c], eax
add esi, 0x20
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
test eax, eax
jbe 0x1002baa
push 0x8000
push esi
call dword [sym.imp.msvcrt.dll__fileno]
pop ecx
push eax
call dword [sym.imp.msvcrt.dll__setmode]
mov eax, dword [ebp - 0x19c]
pop ecx
pop ecx
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x1002b79
sub eax, ecx
push eax
push dword [ebp - 0x19c]
push dword [ebp - 0x19c]
call dword [sym.imp.USER32.dll_CharToOemBuffA]
push dword [ebp - 0x19c]
push 0x10011dc
push esi
call dword [sym.imp.msvcrt.dll_fprintf]
add esp, 0xc
push dword [ebp - 0x19c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x10029ea
push 0xcb
jmp 0x10027f3
push dword [ebx + edi*4]
push dword [0x10050dc]
push 0x2715
jmp 0x10029e0
push 0xb6
jmp 0x10027f3
push 0xa1
jmp 0x10027f3
cmp dword [ebp - 0x1a8], 0
je 0x1002c1b
call fcn.01002607
test eax, eax
je 0x1002c0d
push eax
push 0x2720
push 2
call fcn.01003926
jmp 0x1002c1b
push 0x2742
push 1
call fcn.010037dd
pop ecx
pop ecx
mov eax, dword [ebp - 0x1ac]
dec eax
pop edi
pop esi
pop ebx
je 0x1002de9
dec eax
je 0x1002d45
dec eax
je 0x1002ce8
dec eax
je 0x1002c53
cmp dword [ebp - 0x1a8], 0
jne 0x1002e0b
push 0x199
jmp 0x10027f3
xor eax, eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1a0], eax
je 0x1002cde
cmp dword [ebp - 0x1a4], eax
je 0x1002cde
cmp dword [ebp - 0x19c], 2
jne 0x1002cde
cmp dword [ebp - 0x1b8], 2
jne 0x1002cde
push dword [ebp - 0x1b4]
push 1
push eax
push dword [ebp - 0x1b0]
push dword [ebp - 0x1a0]
call fcn.01001d33
test eax, eax
jne 0x1002cd3
push dword [ebp - 0x1b4]
lea eax, [ebp - 0x1bc]
push eax
push dword [ebp - 0x1c0]
push dword [ebp - 0x1c4]
push dword [ebp - 0x1a4]
push dword [ebp - 0x1b0]
push dword [ebp - 0x1a0]
call fcn.01001a10
test eax, eax
je 0x1002dcf
push eax
push 0x2721
jmp 0x1002e04
push 0x17d
jmp 0x10027f3
cmp dword [ebp - 0x19c], 1
je 0x1002d3b
xor eax, eax
cmp dword [ebp - 0x1a0], eax
je 0x1002d3b
cmp dword [ebp - 0x19c], eax
jne 0x1002d09
mov dword [ebp - 0x1a0], eax
push dword [ebp - 0x1b4]
push 1
push dword [ebp - 0x1a4]
push dword [ebp - 0x1b0]
push dword [ebp - 0x1a0]
call fcn.01001d33
test eax, eax
je 0x1002dcf
push eax
push 0x271f
jmp 0x1002e04
push 0x163
jmp 0x10027f3
xor eax, eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a0], eax
je 0x1002ddf
cmp dword [ebp - 0x19c], 2
jne 0x1002ddf
cmp dword [ebp - 0x1a4], eax
je 0x1002ddf
cmp dword [ebp - 0x1b8], 2
jne 0x1002ddf
push dword [ebp - 0x1b4]
lea eax, [ebp - 0x1a8]
push eax
push dword [ebp - 0x1c0]
push dword [ebp - 0x1c4]
push dword [ebp - 0x1a4]
push dword [ebp - 0x1b0]
push dword [ebp - 0x1a0]
call fcn.01001a10
test eax, eax
je 0x1002daf
push eax
push 0x271e
jmp 0x1002e04
cmp dword [ebp - 0x1a8], 0
je 0x1002dcf
push dword [ebp - 0x1a8]
push 0x2723
push 2
call fcn.010037dd
add esp, 0xc
jmp 0x1002e0b
push 0x2742
push 1
call fcn.010037dd
pop ecx
pop ecx
jmp 0x1002e0b
push 0x149
jmp 0x10027f3
push dword [ebp - 0x1a4]
push dword [ebp - 0x1a0]
call fcn.010024a9
test eax, eax
je 0x1002e0b
push eax
push 0x2722
push 2
call fcn.01003926
mov ecx, dword [ebp - 4]
xor ecx, ebp
xor eax, eax
call fcn.010032ed
leave
ret