Function at 0x101d2700
Capabilities:
Connect socket
Get hostname
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
sub esp, 0x224
mov al, byte [0x101beb54]
push ebx
push ebp
push esi
push edi
mov byte [esp + 0x68], al
mov ecx, 0x18
xor eax, eax
lea edi, [esp + 0x69]
mov ebp, 1
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [esp + 0x240]
test eax, eax
jne 0x101d2741
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
add esp, 0x224
ret
mov byte [eax], 0
call fcn.101d41e0
cmp eax, 1
jne 0x101d2750
xor ebp, ebp
mov ebx, dword [esp + 0x23c]
mov ecx, 0x19
xor eax, eax
lea edi, [esp + 0xcc]
rep stosd dword es:[edi], eax
lea edi, [ebx + 2]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0xcc]
mov eax, ecx
mov esi, edi
mov edi, edx
push 0x101bc6c0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.MSVCRT.dll__stricmp]
lea ecx, [esp + 0xd0]
push ecx
call esi
add esp, 8
test eax, eax
jne 0x101d27d0
cmp ebp, 1
jne 0x101d27d0
mov edx, dword [esp + 0x240]
mov eax, dword [esp + 0x238]
push edx
push eax
call fcn.101d7cc0
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x224
ret
lea ecx, [esp + 0xcc]
push 0x101bc6c0
push ecx
call esi
add esp, 8
test eax, eax
jne 0x101d2836
test ebp, ebp
jne 0x101d2836
mov edi, 2
push 0x64
cmp word [ebx + 0x74], di
jne 0x101d2806
lea edx, [esp + 0x6c]
push edx
call fcn.101d4a80
add esp, 8
jmp 0x101d2863
lea eax, [esp + 0x6c]
push eax
call sub.WSOCK32.dll_gethostname
cmp eax, 0xffffffff
jne 0x101d2863
mov ecx, dword [0x101bd638]
mov edx, dword [0x101bd63c]
mov ax, word [0x101bd640]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], edx
mov word [esp + 0x70], ax
jmp 0x101d2863
lea edi, [esp + 0xcc]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x68]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 2
call fcn.101d4830
xor ecx, ecx
mov cx, word [ebx + 0x74]
dec ecx
cmp ecx, 7
ja case.0x101d2874.3
jmp dword [ecx*4 + 0x101d2ed4]
mov ecx, dword [esp + 0x240]
mov edx, dword [esp + 0x238]
push ecx
push ebx
push edx
call fcn.101d2fd0
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x224
ret
and eax, 1
cmp al, 1
jne 0x101d28b6
mov dword [esp + 0x10], 1
jmp 0x101d28e4
and eax, edi
cmp al, 2
je 0x101d28e0
pop edi
pop esi
pop ebp
mov eax, 0x4c
pop ebx
add esp, 0x224
ret
mov ecx, eax
and ecx, 1
cmp cl, 1
jne 0x101d28da
mov dword [esp + 0x10], 1
jmp 0x101d28e4
and eax, edi
cmp al, 2
jne 0x101d28b6
mov dword [esp + 0x10], edi
lea edx, [esp + 0x68]
push edx
call fcn.101d4890
add esp, 4
test eax, eax
jne 0x101d2900
test byte [esp + 0x10], 2
je 0x101d2900
mov dword [esp + 0x10], edi
push ebx
call fcn.101d1890
add esp, 4
cmp eax, 0xffffffff
jne 0x101d2949
cmp dword [esp + 0x10], edi
jne 0x101d291e
push 0x3e8
push edi
push 6
jmp 0x101d2922
push 0x11
push edi
push edi
call fcn.101d1600
add esp, 0xc
cmp eax, 0xffffffff
jne 0x101d293f
pop edi
pop esi
pop ebp
mov eax, 0x3f
pop ebx
add esp, 0x224
ret
push eax
push ebx
call fcn.101d18b0
add esp, 8
mov eax, dword [esp + 0x10]
push 0
cmp eax, edi
jne 0x101d2964
lea eax, [esp + 0x30]
lea ecx, [esp + 0x6c]
push eax
push ecx
call fcn.101d49c0
jmp 0x101d2973
lea edx, [esp + 0x30]
lea eax, [esp + 0x6c]
push edx
push eax
call fcn.101d45f0
add esp, 0xc
test eax, eax
je 0x101d298a
pop edi
pop esi
pop ebp
mov eax, 0x3d
pop ebx
add esp, 0x224
ret
mov eax, dword [0x101bd724]
test eax, eax
je 0x101d29ab
call fcn.101d2f00
push eax
call fcn.101d07d0
add esp, 4
mov dword [0x101bd724], 0
call sub.MSVCRT.dll__getpid
mov dword [0x101bf1f4], eax
call fcn.101d2f00
cmp dword [eax], 0
je 0x101d2a21
mov esi, dword [sym.imp.KERNEL32.dll_GetVersion]
call esi
cmp eax, 0x80000000
jb 0x101d2a21
call esi
cmp eax, 0x80000000
jb 0x101d29dd
call esi
cmp al, 4
jb 0x101d2a21
cmp dword [esp + 0x10], edi
jne 0x101d2a21
push ebx
call fcn.101d1890
add esp, 4
push eax
call sub.WSOCK32.dll_closesocket
push 0x3e8
push edi
push 6
call fcn.101d1600
add esp, 0xc
cmp eax, 0xffffffff
jne 0x101d2a17
pop edi
pop esi
pop ebp
mov eax, 0x3f
pop ebx
add esp, 0x224
ret
push eax
push ebx
call fcn.101d18b0
add esp, 8
lea ecx, [esp + 0x2c]
push ecx
call fcn.101d2f00
mov edx, dword [eax]
push edx
call fcn.101d2f10
mov ebp, eax
add esp, 8
test ebp, ebp
jne 0x101d2b32
push 0x58
call dword [sym.imp.MSVCRT.dll_malloc]
mov ebp, eax
add esp, 4
test ebp, ebp
jne 0x101d2a61
pop edi
pop esi
pop ebp
mov eax, 0x40
pop ebx
add esp, 0x224
ret
cmp dword [esp + 0x10], edi
jne 0x101d2aaf
lea esi, [ebp + 8]
xor eax, eax
mov ecx, esi
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov word [esi], 6
call fcn.101d1900
push eax
call fcn.101d1730
lea edx, [esp + 0x30]
push esi
push edx
mov word [esi + 0xc], ax
call fcn.101d4930
add esp, 0xc
test eax, eax
jne 0x101d2af8
pop edi
pop esi
pop ebp
mov eax, 0x3d
pop ebx
add esp, 0x224
ret
lea eax, [ebp + 8]
xor ecx, ecx
mov edx, eax
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov word [eax], di
call fcn.101d1900
push eax
call fcn.101d1730
mov word [ebp + 0xa], ax
lea eax, [esp + 0x30]
push eax
call fcn.101d15b0
add esp, 8
cmp eax, 0xffffffff
mov dword [ebp + 0xc], eax
jne 0x101d2af8
pop edi
pop esi
pop ebp
mov eax, 0x3d
pop ebx
add esp, 0x224
ret
lea edi, [esp + 0x2c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp + 0x18]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push ebp
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [ebp], 1
call fcn.101d2f00
push eax
call fcn.101d07e0
add esp, 8
mov esi, dword [esp + 0x238]
mov dword [0x101bf1e8], 0x284
mov ecx, dword [ebp]
mov edi, esi
and ecx, 0x1fff
xor eax, eax
mov dword [0x101bf1ec], ecx
or ecx, 0xffffffff
mov dword [0x101bf1f0], 0
repne scasb al, byte es:[edi]
not ecx
mov edx, ecx
mov edi, 0x101bf1f8
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x68
mov edi, 0x101bf040
rep stosd dword es:[edi], eax
lea eax, [esp + 0x4c]
push eax
call fcn.101d26e0
mov ecx, 0x68
xor eax, eax
mov edi, 0x101bf390
mov dword [esp + 0x1c], 0
rep stosd dword es:[edi], eax
mov ecx, dword [0x101bf1e8]
mov dword [esp + 0x18], 1
push ecx
call fcn.101d1760
mov edx, dword [0x101bf1ec]
mov dword [0x101bf390], eax
push edx
call fcn.101d1760
mov dword [0x101bf394], eax
mov eax, dword [0x101bf1f0]
push eax
call fcn.101d1760
mov ecx, dword [0x101bf1f4]
mov dword [0x101bf398], eax
push ecx
call fcn.101d1760
mov dword [0x101bf39c], eax
mov edi, 0x101bf1f8
or ecx, 0xffffffff
xor eax, eax
add esp, 0x14
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea eax, [esp + 0x4c]
mov edx, ecx
mov esi, edi
mov edi, 0x101bf3a0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x18], 3
jge 0x101d2e8a
mov eax, dword [esp + 0x10]
mov esi, 2
cmp eax, esi
jne 0x101d2c7e
lea ecx, [ebp + 8]
push 0x10
push ecx
push ebx
call fcn.101d1890
add esp, 4
push eax
call sub.WSOCK32.dll_connect
mov eax, dword [esp + 0x14]
test eax, eax
je 0x101d2cb5
push 0
push 0x1a0
push 0x101bf390
push ebx
call fcn.101d1890
add esp, 4
push eax
call sub.WSOCK32.dll_send
cmp eax, 0x1a0
jne 0x101d2e55
jmp 0x101d2cb5
mov eax, dword [esp + 0x14]
test eax, eax
je 0x101d2cb5
lea edx, [ebp + 8]
push 0x10
push edx
push 0
push 0x1a0
push 0x101bf390
push ebx
call fcn.101d1890
add esp, 4
push eax
call fcn.101d16b0
add esp, 0x18
cmp eax, 0x1a0
jne 0x101d2e5a
xor edi, edi
push ebx
mov dword [esp + 0x18], edi
mov dword [esp + 0x134], edi
call fcn.101d1890
mov ecx, dword [esp + 0x134]
mov edx, dword [esp + 0x20]
add esp, 4
mov dword [esp + 0x28], edi
mov dword [esp + ecx*4 + 0x134], eax
mov ecx, dword [esp + 0x130]
mov eax, dword [edx]
inc ecx
mov dword [esp + 0x130], ecx
lea ecx, [esp + 0x24]
push ecx
push edi
lea edx, [esp + 0x138]
push edi
push edx
push ebx
mov dword [esp + 0x38], eax
call fcn.101d1890
add esp, 4
inc eax
push eax
call fcn.101d1630
add esp, 0x14
cmp eax, 0xffffffff
je 0x101d2e7a
cmp eax, edi
je 0x101d2e38
mov ecx, 0x68
xor eax, eax
mov edi, 0x101bf390
mov dword [esp + 0x20], 0x10
rep stosd dword es:[edi], eax
cmp dword [esp + 0x10], esi
jne 0x101d2d6d
push 0
push 0x1a0
push 0x101bf390
push ebx
call fcn.101d1890
add esp, 4
push eax
call sub.WSOCK32.dll_recv
cmp eax, 0x1a0
jne 0x101d2e6a
jmp 0x101d2d9e
lea eax, [esp + 0x20]
lea ecx, [esp + 0x58]
push eax
push ecx
push 0
push 0x1a0
push 0x101bf390
push ebx
call fcn.101d1890
add esp, 4
push eax
call fcn.101d16f0
add esp, 0x18
cmp eax, 0xffffffff
je 0x101d2e6a
mov edx, dword [0x101bf390]
push edx
call fcn.101d1760
mov dword [0x101bf040], eax
mov eax, dword [0x101bf394]
push eax
call fcn.101d1760
mov ecx, dword [0x101bf398]
mov dword [0x101bf044], eax
push ecx
call fcn.101d1760
mov edx, dword [0x101bf39c]
mov dword [0x101bf048], eax
push edx
call fcn.101d1760
mov dword [0x101bf04c], eax
mov edi, 0x101bf3a0
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x101bf050
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0x10]
and ecx, 3
cmp eax, 1
rep movsb byte es:[edi], byte [esi]
jne 0x101d2e24
mov eax, dword [ebp + 0xc]
lea edx, [ebp + 0xc]
lea ecx, [esp + 0x5c]
cmp eax, dword [ecx]
jne 0x101d2c21
mov ecx, dword [0x101bf044]
mov eax, dword [0x101bf1ec]
cmp ecx, eax
je 0x101d2e9a
jmp 0x101d2c21
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
inc ecx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], ecx
add eax, 4
jmp 0x101d2c1d
call sub.WSOCK32.dll_WSAGetLastError
pop edi
pop esi
pop ebp
mov eax, 0x3e
pop ebx
add esp, 0x224
ret
pop edi
pop esi
pop ebp
mov eax, 0x6c
pop ebx
add esp, 0x224
ret
pop edi
pop esi
pop ebp
mov eax, 0x6d
pop ebx
add esp, 0x224
ret
pop edi
pop esi
pop ebp
mov eax, 0x3c
pop ebx
add esp, 0x224
ret
mov ecx, dword [ebp]
mov edi, 0x101bf050
inc ecx
xor eax, eax
mov dword [ebp], ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, dword [esp + 0x240]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x224
ret