Function at 0x10026c0
Capabilities:
Initialize winsock library
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1d8
push ebx
push esi
push edi
push 7
xor eax, eax
pop ecx
push 7
mov edi, 0x1009d40
rep stosd dword es:[edi], eax
pop ecx
mov edi, 0x1009d20
mov dword [ebp - 8], eax
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x20], eax
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x1d8]
push eax
push 2
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x18], 0xfa0
mov dword [ebp - 0x10], 0x20
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x1002731
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x2719
push 1
call fcn.01006d2e
add esp, 0xc
jmp 0x1002945
cmp dword [ebp + 8], 2
jge 0x1002741
call fcn.010023f6
jmp 0x1002945
xor esi, esi
inc esi
cmp dword [ebp + 8], esi
jbe 0x1002837
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebx + esi*4]
mov al, byte [edi]
cmp al, 0x2d
je 0x100278d
cmp al, 0x2f
je 0x100278d
cmp dword [ebp - 8], 0
jne 0x1002841
lea eax, [ebp - 0xc]
push eax
push 0x1009d20
push dword [ebp - 4]
push edi
call fcn.01002405
test eax, eax
je 0x100284c
mov dword [ebp - 8], 1
jmp 0x1002827
movsx eax, byte [edi + 1]
cmp eax, 0x72
jg 0x10027ee
je 0x10027e5
sub eax, 0x3f
je 0x100284f
sub eax, 0x22
je 0x10027dc
sub eax, 0xb
je 0x10027c6
dec eax
dec eax
jne 0x100285b
push 0xffffffffffffffff
push 1
push esi
push dword [ebp + 8]
push ebx
call fcn.01002597
mov dword [ebp - 0x14], eax
jmp 0x100280c
push 0xfff7
push 0
push esi
push dword [ebp + 8]
push ebx
call fcn.01002597
mov dword [ebp - 0x10], eax
jmp 0x100280c
mov dword [ebp - 4], 1
jmp 0x1002827
mov dword [ebp - 0x20], 1
jmp 0x1002827
sub eax, 0x73
je 0x1002815
dec eax
je 0x100280f
sub eax, 3
jne 0x100285b
push 0xffffffffffffffff
push 0
push esi
push dword [ebp + 8]
push ebx
call fcn.01002597
mov dword [ebp - 0x18], eax
inc esi
jmp 0x1002827
or dword [ebp - 0x14], 0xffffffff
jmp 0x1002827
push 0x1009d40
inc esi
push dword [ebx + esi*4]
call fcn.010024ea
test eax, eax
je 0x1002870
inc esi
cmp esi, dword [ebp + 8]
jb 0x1002750
cmp dword [ebp - 8], 0
jne 0x100287d
push 0x271d
jmp 0x100293c
push edi
push 0x271c
jmp 0x1002722
push edi
jmp 0x1002873
call fcn.010023f6
push 0
jmp 0x1002947
push edi
push 0x271b
push 1
call fcn.01006d2e
add esp, 0xc
jmp 0x1002737
push dword [ebx + esi*4]
push 0x271a
jmp 0x1002722
xor edi, edi
push edi
push edi
push 3
push edi
push 3
push edi
push 0x10011c8
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0x28], eax
jne 0x10028ab
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x271e
jmp 0x1002722
cmp word [0x1009d40], di
jne 0x10028fd
push edi
push edi
push 0x17
call dword [sym.imp.WS2_32.dll_socket]
mov esi, eax
cmp esi, 0xffffffff
jne 0x10028d6
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push 0x271f
jmp 0x1002722
push edi
push edi
lea eax, [ebp - 0x24]
push eax
push 0x1c
push 0x1009d40
push 0x1c
push 0x1009d20
push 0xc8000014
push esi
call dword [sym.imp.WS2_32.dll_WSAIoctl]
push esi
call dword [sym.imp.WS2_32.dll_closesocket]
mov edi, dword [ebp - 0x10]
mov esi, dword [sym.imp.KERNEL32.dll_LocalAlloc]
lea eax, [edi + 0x40]
push eax
push 0
call esi
mov ebx, eax
test ebx, ebx
mov dword [ebp - 0x1c], ebx
je 0x1002937
push 0x20
pop eax
cmp eax, edi
sbb eax, eax
and eax, 0xe023
add eax, 0x201c
push eax
push 0
mov dword [ebp - 0x24], eax
call esi
test eax, eax
mov dword [ebp - 4], eax
jne 0x100294c
push 0x2720
push 1
call fcn.01006d2e
pop ecx
pop ecx
push 1
call fcn.01003383
push 6
pop ecx
mov esi, 0x1009d22
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 6
lea edi, [ebx + 0x1a]
pop ecx
mov esi, 0x1009d42
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
cmp dword [ebp - 0x20], ecx
movsw word es:[edi], word [esi]
mov dword [ebx + 0x3c], ecx
je 0x100297a
mov dword [ebx + 0x3c], 1
mov eax, dword [ebp - 0x18]
and byte [ebx + 0x38], 0
cmp dword [ebp - 0x10], ecx
mov dword [ebx + 0x34], eax
jbe 0x100299f
xor edx, edx
push 0x17
mov eax, ecx
pop esi
div esi
add dl, 0x61
mov byte [ebx + ecx + 0x40], dl
inc ecx
cmp ecx, dword [ebp - 0x10]
jb 0x1002989
push 0x1009d20
xor esi, esi
call fcn.0100254c
cmp dword [ebp - 0xc], esi
push eax
je 0x10029c5
push dword [ebp - 0xc]
push 0x2721
push 1
call fcn.01006d2e
add esp, 0x10
jmp 0x10029d4
push 0x2722
push 1
call fcn.01006d2e
add esp, 0xc
cmp word [0x1009d40], si
je 0x10029f7
push 0x1009d40
call fcn.0100254c
push eax
push 0x2723
push 1
call fcn.01006d2e
add esp, 0xc
push dword [ebp - 0x10]
push 0x2724
push 1
call fcn.01006d2e
add esp, 0xc
push 1
push 0x1002689
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
cmp dword [ebp - 0x14], esi
mov dword [ebp - 8], esi
jbe 0x1002ca0
jmp 0x1002a27
mov ebx, dword [ebp - 0x1c]
push 0
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
push dword [ebp - 4]
add eax, 0x40
push eax
push ebx
push 0x120000
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x1002c67
mov ebx, dword [ebp - 0x2c]
cmp ebx, 0x24
jb 0x1002c67
mov esi, dword [ebp - 4]
push 6
pop ecx
mov word [ebp - 0x48], 0x17
lea edi, [ebp - 0x46]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
add ebx, 0xffffffdc
inc dword [0x1009b28]
push 4
pop ecx
mov edi, 0x1001aa4
lea esi, [ebp - 0x40]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0x1002aa3
lea eax, [ebp - 0x48]
push eax
call fcn.0100254c
push eax
push 0x2727
push 1
call fcn.01006d2e
add esp, 0xc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
test eax, eax
jne 0x1002b89
push ebx
push 0x2728
push 1
call fcn.01006d2e
mov edx, dword [ebp - 0x10]
add esp, 0xc
cmp ebx, edx
je 0x1002af4
push edx
push 0x2729
push 1
call fcn.01006d2e
add esp, 0xc
mov esi, dword [ebp - 4]
mov eax, dword [esi + 0x20]
test eax, eax
je 0x1002b34
push eax
push 0x272b
push 1
call fcn.01006d2e
add esp, 0xc
jmp 0x1002b42
mov eax, dword [ebp - 0x1c]
and dword [ebp - 0xc], 0
add eax, 0x40
test edx, edx
jbe 0x1002ad8
mov esi, dword [ebp - 4]
lea ecx, [esi + 0x24]
mov edi, ecx
sub edi, eax
mov cl, byte [eax]
mov bl, byte [edi + eax]
inc eax
cmp cl, bl
jne 0x1002b20
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jb 0x1002b0c
jmp 0x1002adb
push dword [ebp - 0xc]
push 0x272a
push 1
call fcn.01006d2e
add esp, 0xc
jmp 0x1002adb
push 0x272c
push 1
call fcn.01006d2e
pop ecx
pop ecx
push 0x272d
push 1
call fcn.01006d2e
inc dword [0x1009b2c]
mov eax, dword [esi + 0x20]
add dword [0x1009b34], eax
mov eax, dword [esi + 0x20]
cmp eax, dword [section..data]
pop ecx
pop ecx
jae 0x1002b6f
mov dword [section..data], eax
mov esi, dword [esi + 0x20]
cmp esi, dword [0x1009b30]
jbe 0x1002c41
mov dword [0x1009b30], esi
jmp 0x1002c41
push eax
call fcn.010023c8
push eax
push 0x272e
push 1
call fcn.01006d2e
add esp, 0xc
push 4
mov eax, 0x1001aa4
pop ecx
mov edi, eax
lea esi, [ebp - 0x40]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
jne 0x1002c41
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0x1c]
cmp ecx, 0x2afa
jne 0x1002bd6
mov esi, 0x1009d28
push esi
call fcn.01001ae0
test eax, eax
jne 0x1002c24
push esi
jmp 0x1002c12
cmp ecx, 0x2b07
jne 0x1002c2b
push 4
mov edi, eax
mov ebx, 0x1009d28
pop ecx
mov esi, ebx
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x1002bf7
push 0x2730
jmp 0x1002c38
cmp dword [0x1009d38], 0
je 0x1002c07
push 0x2731
jmp 0x1002c38
push ebx
call fcn.01001ae0
test eax, eax
jne 0x1002c24
push ebx
call fcn.01001afc
test eax, eax
jne 0x1002c24
cmp byte [0x1009d28], 0xff
jne 0x1002c41
push 0x272f
jmp 0x1002c38
cmp ecx, 0x2b04
jne 0x1002c41
push 0x2732
push 1
call fcn.01006d2e
pop ecx
pop ecx
mov eax, dword [ebp - 0x14]
dec eax
cmp dword [ebp - 8], eax
jae 0x1002c91
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20]
cmp eax, 0x3e8
jae 0x1002c91
mov ecx, 0x3e8
sub ecx, eax
push ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1002c91
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x2af8
push eax
jae 0x1002c7c
push 0x2725
jmp 0x1002c87
call fcn.010023c8
push eax
push 0x2726
push 1
call fcn.01006d2e
add esp, 0xc
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x14]
jb 0x1002a24
call fcn.010025f1
xor eax, eax
cmp dword [0x1009b2c], eax
pop edi
pop esi
sete al
pop ebx
leave
ret