Function at 0x10018520
Capabilities:
Create tcp socket
Create udp socket
Initialize winsock library
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1bc
mov eax, dword [0x1005a014]
xor eax, esp
mov dword [esp + 0x1b8], eax
push ebx
push esi
push edi
push 0x10052680
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1008a06c], eax
test eax, eax
je 0x100186a5
push str.NtQueryValueKey
push eax
call esi
push str.NtQueryKey
push dword [0x1008a06c]
call esi
push str.LdrQueryImageFileKeyOption
push dword [0x1008a06c]
call esi
mov dword [0x100897a4], eax
mov eax, dword [0x10089678]
and eax, 0x40
or eax, 0
je 0x100185fb
push str.NtCreatePort
push dword [0x1008a06c]
call esi
push str.NtAlpcCreatePort
push dword [0x1008a06c]
mov dword [0x1008979c], eax
call esi
push str.NtCreateWaitablePort
push dword [0x1008a06c]
mov dword [0x10089798], eax
call esi
push str.NtConnectPort
push dword [0x1008a06c]
mov dword [0x10089794], eax
call esi
push str.NtSecureConnectPort
push dword [0x1008a06c]
mov dword [0x10089790], eax
call esi
push str.NtAlpcConnectPort
push dword [0x1008a06c]
mov dword [0x1008978c], eax
call esi
mov dword [0x10089788], eax
push str.NtSetInformationFile
push dword [0x1008a06c]
call esi
push str.NtQueryInformationFile
push dword [0x1008a06c]
mov dword [0x1005b824], eax
call esi
push str.NtQueryInformationByName
push dword [0x1008a06c]
mov dword [0x1005b828], eax
call esi
push str.NtQueryDirectoryFile
push dword [0x1008a06c]
call esi
push str.NtQueryAttributesFile
push dword [0x1008a06c]
mov dword [0x1005b820], eax
call esi
push 0x100527bc
push dword [0x1008a06c]
call esi
push 0x100527d8
push dword [0x1008a06c]
mov dword [0x1005aae0], eax
call esi
push 0x100527e8
push dword [0x1008a06c]
mov dword [0x1005aa80], eax
call esi
push str.NtReadFile
push dword [0x1008a06c]
mov dword [0x1005aa84], eax
call esi
push str.NtWriteFile
push dword [0x1008a06c]
mov dword [0x1005b830], eax
call esi
mov dword [0x1005b82c], eax
call fcn.10027a30
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.10027f00
push 0x1005280c
mov edx, 0x10011470
mov ecx, 0x100897d4
call fcn.10017a90
add esp, 4
mov edx, 0x100116d0
mov ecx, 0x100897d8
push 0x1005281c
call fcn.10017a90
add esp, 4
mov edx, 0x10011930
mov ecx, 0x100897a4
push str.LdrQueryImageFileKeyOption
call fcn.10017a90
add esp, 4
mov edx, 0x10016e40
mov ecx, 0x100897b4
push 0x1005282c
call fcn.10017a90
mov eax, dword [0x10089678]
add esp, 4
and eax, 4
or eax, 0
je 0x1001885f
push 0x100527bc
mov edx, 0x10011a30
mov ecx, 0x1005aae0
call fcn.10017a90
add esp, 4
mov edx, 0x10011ba0
mov ecx, 0x1005aadc
push str.EnumProcesses
call fcn.10017a90
add esp, 4
mov edx, 0x10011cd0
mov ecx, 0x1005aad8
push 0x10052848
call fcn.10017a90
add esp, 4
mov edx, 0x10011db0
mov ecx, 0x1005aad4
push 0x10052858
call fcn.10017a90
add esp, 4
mov edx, 0x10011e90
mov ecx, 0x1005aad0
push 0x10052868
call fcn.10017a90
add esp, 4
mov edx, 0x10011f70
mov ecx, 0x1005aacc
push 0x10052878
call fcn.10017a90
add esp, 4
mov edx, 0x10012050
mov ecx, 0x1005aac8
push 0x10052888
call fcn.10017a90
add esp, 4
mov edx, 0x10012130
mov ecx, 0x1005aac4
push 0x10052898
call fcn.10017a90
add esp, 4
mov edx, 0x10012210
mov ecx, 0x1005aac0
push 0x100528a8
call fcn.10017a90
add esp, 4
mov edx, 0x100122f0
mov ecx, 0x1005aabc
push 0x100528b8
call fcn.10017a90
add esp, 4
mov edx, 0x100123d0
mov ecx, 0x1005aab8
push 0x100528c8
call fcn.10017a90
add esp, 4
mov edx, 0x100124b0
mov ecx, 0x1005aab4
push 0x100528d8
call fcn.10017a90
add esp, 4
mov edx, 0x10012590
mov ecx, 0x1005aab0
push 0x100528e8
call fcn.10017a90
add esp, 4
mov edx, 0x10012670
mov ecx, 0x1005aaac
push 0x100528f8
jmp 0x10018883
mov ecx, dword [0x10089678]
mov eax, dword [0x1008967c]
and ecx, 8
and eax, 0x20
or ecx, eax
je 0x1001888b
push 0x100527bc
mov edx, 0x10011a30
mov ecx, 0x1005aae0
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x10
or eax, 0
je 0x100188f4
push 0x10052908
mov edx, 0x10012750
mov ecx, 0x100897dc
call fcn.10017a90
add esp, 4
mov edx, 0x10012a10
mov ecx, 0x100897e0
push 0x10052920
call fcn.10017a90
add esp, 4
mov edx, 0x10012c70
mov ecx, 0x100897e4
push 0x10052938
call fcn.10017a90
add esp, 4
mov edx, 0x10012d50
mov ecx, 0x100897e8
push 0x10052950
call fcn.10017a90
add esp, 4
mov ecx, dword [0x1008967c]
xor eax, eax
and ecx, 0x10
or eax, ecx
je 0x10018a6a
push 0x10052968
mov edx, 0x10012fc0
mov ecx, 0x100897ec
call fcn.10017a90
add esp, 4
mov edx, 0x10013080
mov ecx, 0x100897f0
push 0x10052974
call fcn.10017a90
add esp, 4
mov edx, 0x10013140
mov ecx, 0x100897f4
push 0x10052980
call fcn.10017a90
add esp, 4
mov edx, 0x10013480
mov ecx, 0x100897f8
push 0x10052990
call fcn.10017a90
add esp, 4
mov edx, 0x10013540
mov ecx, 0x100897fc
push 0x100529a4
call fcn.10017a90
add esp, 4
mov edx, 0x10013600
mov ecx, 0x10089800
push 0x100529b8
call fcn.10017a90
add esp, 4
mov edx, 0x100136a0
mov ecx, 0x10089804
push 0x100529c0
call fcn.10017a90
add esp, 4
mov edx, 0x10013740
mov ecx, 0x10089808
push 0x100529cc
call fcn.10017a90
add esp, 4
mov edx, 0x100137f0
mov ecx, 0x1008980c
push 0x100529e0
call fcn.10017a90
add esp, 4
mov edx, 0x100138a0
mov ecx, 0x10089810
push 0x100529f0
call fcn.10017a90
add esp, 4
mov edx, 0x100139b0
mov ecx, 0x10089814
push 0x10052a04
call fcn.10017a90
add esp, 4
mov edx, 0x10013ab0
mov ecx, 0x10089818
push 0x10052a14
call fcn.10017a90
add esp, 4
mov edx, 0x10013b70
mov ecx, 0x1008981c
push 0x10052a20
call fcn.10017a90
add esp, 4
push str.coreutils_sh.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x1008a174], eax
test eax, eax
je 0x10018a6a
push str.get_use_software_opengl
push eax
call esi
push str.get_use_software_opengl
mov edx, 0x10013c10
mov dword [0x100897a0], eax
mov ecx, 0x100897a0
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x20
or eax, 0
je 0x10018b05
push 0x10052a60
mov edx, 0x10013c30
mov ecx, 0x10089820
call fcn.10017a90
add esp, 4
mov edx, 0x10013ce0
mov ecx, 0x10089824
push 0x10052a6c
call fcn.10017a90
add esp, 4
mov edx, 0x10013d90
mov ecx, 0x10089828
push 0x10052a80
call fcn.10017a90
add esp, 4
mov edx, 0x10013e40
mov ecx, 0x1008982c
push 0x10052a8c
call fcn.10017a90
add esp, 4
mov edx, 0x10013ef0
mov ecx, 0x10089830
push 0x10052a98
call fcn.10017a90
add esp, 4
mov edx, 0x10013fa0
mov ecx, 0x10089834
push 0x10052aa8
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x40
or eax, 0
je 0x10018dc2
push 0x10052ab8
mov edx, 0x10014050
mov ecx, 0x1005aaa8
call fcn.10017a90
add esp, 4
mov edx, 0x10014100
mov ecx, 0x1005aaa4
push 0x10052ad0
call fcn.10017a90
add esp, 4
mov edx, 0x100141b0
mov ecx, 0x10089838
push 0x10052ae8
call fcn.10017a90
add esp, 4
mov edx, 0x10014270
mov ecx, 0x1008983c
push 0x10052af8
call fcn.10017a90
add esp, 4
mov edx, 0x10014330
mov ecx, 0x10089840
push 0x10052b08
call fcn.10017a90
add esp, 4
mov edx, 0x100143d0
mov ecx, 0x10089844
push 0x10052b20
call fcn.10017a90
add esp, 4
mov edx, 0x10014470
mov ecx, 0x10089848
push 0x10052b38
call fcn.10017a90
add esp, 4
mov edx, 0x10014540
mov ecx, 0x1008984c
push 0x10052b4c
call fcn.10017a90
add esp, 4
mov edx, 0x10014610
mov ecx, 0x10089850
push 0x10052b60
call fcn.10017a90
add esp, 4
mov edx, 0x100146d0
mov ecx, 0x10089854
push 0x10052b70
call fcn.10017a90
add esp, 4
mov edx, 0x10014790
mov ecx, 0x10089858
push 0x10052b80
call fcn.10017a90
add esp, 4
mov edx, 0x10014850
mov ecx, 0x1008985c
push 0x10052b90
call fcn.10017a90
add esp, 4
mov edx, 0x10014910
mov ecx, 0x10089860
push 0x10052ba0
call fcn.10017a90
add esp, 4
mov edx, 0x100149d0
mov ecx, 0x10089864
push 0x10052bb4
call fcn.10017a90
add esp, 4
mov edx, 0x10014a90
mov ecx, 0x10089868
push 0x10052bc8
call fcn.10017a90
add esp, 4
mov edx, 0x10014a90
mov ecx, 0x10089868
push 0x10052bc8
call fcn.10017a90
add esp, 4
push 0x10052be0
mov edx, 0x10014b50
mov ecx, 0x1008986c
call fcn.10017a90
add esp, 4
mov edx, 0x10014c00
mov ecx, 0x10089870
push str.RegisterActiveObject
call fcn.10017a90
add esp, 4
mov edx, 0x10014d50
mov ecx, 0x10089874
push 0x10052c10
call fcn.10017a90
add esp, 4
mov edx, 0x10014f60
mov ecx, 0x10089878
push 0x10052c28
call fcn.10017a90
add esp, 4
mov edx, 0x100151f0
mov ecx, 0x1008979c
push str.NtCreatePort
call fcn.10017a90
add esp, 4
mov edx, 0x100152b0
mov ecx, 0x10089798
push str.NtAlpcCreatePort
call fcn.10017a90
add esp, 4
mov edx, 0x10015370
mov ecx, 0x10089794
push str.NtCreateWaitablePort
call fcn.10017a90
add esp, 4
mov edx, 0x10015430
mov ecx, 0x10089790
push str.NtConnectPort
call fcn.10017a90
add esp, 4
mov edx, 0x10015510
mov ecx, 0x1008978c
push str.NtSecureConnectPort
call fcn.10017a90
add esp, 4
mov edx, 0x100155f0
mov ecx, 0x10089788
push str.NtAlpcConnectPort
call fcn.10017a90
add esp, 4
mov edx, 0x100156e0
mov ecx, 0x1008987c
push 0x10052c44
call fcn.10017a90
add esp, 4
mov edx, 0x10015920
mov ecx, 0x10089880
push 0x10052c58
call fcn.10017a90
add esp, 4
mov edx, 0x10015ac0
mov ecx, 0x10089884
push 0x10052c6c
call fcn.10017a90
add esp, 4
mov edx, 0x10015b70
mov ecx, 0x10089888
push 0x10052c7c
jmp 0x10018e03
mov eax, dword [0x10089678]
and eax, 0x80
or eax, 0
je 0x10018de2
push str.NtAlpcConnectPort
mov edx, 0x100155f0
mov ecx, 0x10089788
jmp 0x10018d7b
mov ecx, dword [0x1008967c]
xor eax, eax
and ecx, 0x80
or eax, ecx
je 0x10018e0b
push 0x10052c58
mov edx, 0x10015920
mov ecx, 0x10089880
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 1
or eax, 0
je 0x10018ed4
push 0x10052c8c
mov edx, 0x10015c20
mov ecx, 0x1008988c
call fcn.10017a90
add esp, 4
mov edx, 0x10015d80
mov ecx, 0x10089890
push 0x10052ca0
call fcn.10017a90
add esp, 4
mov edx, 0x10016060
mov ecx, 0x10089898
push 0x10052cb4
call fcn.10017a90
add esp, 4
mov edx, 0x100162c0
mov ecx, 0x1008989c
push 0x10052cc4
call fcn.10017a90
add esp, 4
mov edx, 0x10016520
mov ecx, 0x100898a0
push 0x10052cd4
call fcn.10017a90
add esp, 4
mov edx, 0x10016750
mov ecx, 0x100898a4
push 0x10052ce4
call fcn.10017a90
add esp, 4
mov edx, 0x10016980
mov ecx, 0x1005aaa0
push str.LoadMUILibraryA
call fcn.10017a90
add esp, 4
mov edx, 0x10016be0
mov ecx, 0x1005aa9c
push str.LoadMUILibraryW
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 2
or eax, 0
je 0x10018f0f
push 0x10052d14
mov edx, 0x10015ee0
mov ecx, 0x10089894
call fcn.10017a90
add esp, 4
mov edx, 0x10016f80
mov ecx, 0x100897c4
push 0x10052d24
call fcn.10017a90
add esp, 4
mov edx, dword [0x1008967c]
xor eax, eax
mov ecx, edx
and ecx, 0x10
or eax, ecx
jne 0x10018f27
and edx, 4
or eax, edx
je 0x10018f3e
push 0x10052d3c
mov edx, 0x10016f90
mov ecx, 0x100898a8
call fcn.10017a90
add esp, 4
mov ecx, dword [0x1008967c]
xor eax, eax
and ecx, 4
or eax, ecx
je 0x10018fc0
push 0x10052d50
mov edx, 0x100170b0
mov ecx, 0x100898ac
call fcn.10017a90
add esp, 4
mov edx, 0x10017140
mov ecx, 0x100898b0
push 0x10052d70
call fcn.10017a90
add esp, 4
mov edx, 0x10017220
mov ecx, 0x100898b4
push 0x10052d88
call fcn.10017a90
add esp, 4
mov edx, 0x10017300
mov ecx, 0x1005aa98
push 0x10052da0
call fcn.10017a90
add esp, 4
mov edx, 0x100173e0
mov ecx, 0x1005aa94
push 0x10052dbc
call fcn.10017a90
add esp, 4
mov ecx, dword [0x1008967c]
xor eax, eax
and ecx, 0x200
or eax, ecx
je 0x1001902e
push 0x10052dd8
mov edx, 0x100174d0
mov ecx, 0x100898b8
call fcn.10017a90
add esp, 4
mov edx, 0x100175b0
mov ecx, 0x100898bc
push 0x10052df4
call fcn.10017a90
add esp, 4
mov edx, 0x100177a0
mov ecx, 0x100898c0
push 0x10052e10
call fcn.10017a90
add esp, 4
mov edx, 0x100179a0
mov ecx, 0x100898c4
push 0x10052e24
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x100
or eax, 0
je 0x10019099
push 0x10052e38
mov edx, 0x10001e70
mov ecx, 0x100898c8
call fcn.10017a90
add esp, 4
mov edx, 0x10002130
mov ecx, 0x100898cc
push 0x10052e4c
call fcn.10017a90
add esp, 4
mov edx, 0x100023e0
mov ecx, 0x100898d0
push 0x10052e60
call fcn.10017a90
add esp, 4
mov edx, 0x10002570
mov ecx, 0x100898d4
push 0x10052e74
call fcn.10017a90
add esp, 4
mov ecx, dword [0x10089678]
mov eax, dword [0x1008967c]
and ecx, 0xc0200
and eax, 8
or ecx, eax
je 0x100190df
push 0x10052e88
mov edx, 0x10002700
mov ecx, 0x100898d8
call fcn.10017a90
add esp, 4
mov edx, 0x10002e20
mov ecx, 0x100897a8
push 0x10052e94
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x200
or eax, 0
je 0x10019279
push 0x10052ea0
mov edx, 0x10003580
mov ecx, 0x100898dc
call fcn.10017a90
add esp, 4
mov edx, 0x100039b0
mov ecx, 0x100898e0
push 0x10052eac
call fcn.10017a90
add esp, 4
mov edx, 0x10003b90
mov ecx, 0x100898e4
push 0x10052eb4
call fcn.10017a90
add esp, 4
mov edx, 0x10003f50
mov ecx, 0x100898e8
push 0x10052ebc
call fcn.10017a90
add esp, 4
mov edx, 0x10004160
mov ecx, 0x100898ec
push 0x10052ed0
call fcn.10017a90
add esp, 4
mov edx, 0x10004370
mov ecx, 0x100898f0
push 0x10052ee4
call fcn.10017a90
add esp, 4
mov edx, 0x10004530
mov ecx, 0x100898f4
push 0x10052ef0
call fcn.10017a90
add esp, 4
mov edx, 0x10004700
mov ecx, 0x100898f8
push 0x10052efc
call fcn.10017a90
add esp, 4
mov edx, 0x10004a10
mov ecx, 0x100898fc
push 0x10052f08
call fcn.10017a90
add esp, 4
mov edx, 0x10004d20
mov ecx, 0x10089900
push 0x10052f14
call fcn.10017a90
add esp, 4
mov edx, 0x10005030
mov ecx, 0x10089904
push 0x10052f20
call fcn.10017a90
add esp, 4
mov edx, 0x10005340
mov ecx, 0x10089908
push 0x10052f2c
call fcn.10017a90
add esp, 4
mov edx, 0x10005650
mov ecx, 0x1008990c
push 0x10052f38
call fcn.10017a90
add esp, 4
mov edx, 0x10005970
mov ecx, 0x10089910
push 0x10052f44
call fcn.10017a90
add esp, 4
mov edx, 0x10005cb0
mov ecx, 0x10089914
push 0x10052f5c
call fcn.10017a90
add esp, 4
mov edx, 0x10005ff0
mov ecx, 0x10089918
push 0x10052f74
call fcn.10017a90
add esp, 4
push 0x10052f84
mov edx, 0x100063d0
mov ecx, 0x1008991c
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x800
or eax, 0
je 0x1001935b
push 0x10052f94
mov edx, 0x100067b0
mov ecx, 0x10089920
call fcn.10017a90
add esp, 4
mov edx, 0x10006b70
mov ecx, 0x10089924
push 0x10052fa4
call fcn.10017a90
add esp, 4
mov edx, 0x10006fa0
mov ecx, 0x1008992c
push 0x10052fb4
call fcn.10017a90
add esp, 4
mov edx, 0x100073f0
mov ecx, 0x10089930
push 0x10052fc8
call fcn.10017a90
add esp, 4
mov edx, 0x100078b0
mov ecx, 0x10089928
push 0x10052fdc
call fcn.10017a90
add esp, 4
mov edx, 0x10007d00
mov ecx, 0x10089934
push 0x10052ff0
call fcn.10017a90
add esp, 4
mov edx, 0x10008070
mov ecx, 0x10089938
push 0x10053000
call fcn.10017a90
add esp, 4
mov edx, 0x100084b0
mov ecx, 0x1008993c
push 0x10053010
call fcn.10017a90
add esp, 4
mov edx, 0x100088c0
mov ecx, 0x10089940
push 0x10053024
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x400
or eax, 0
je 0x100193c8
push 0x10053030
mov edx, 0x10008960
mov ecx, 0x100897ac
call fcn.10017a90
add esp, 4
mov edx, 0x10008a30
mov ecx, 0x10089944
push 0x1005303c
call fcn.10017a90
add esp, 4
mov edx, 0x10008ae0
mov ecx, 0x10089948
push 0x10053048
call fcn.10017a90
add esp, 4
mov edx, 0x10008b90
mov ecx, 0x1008994c
push 0x10053054
call fcn.10017a90
add esp, 4
jmp 0x100193fd
mov ecx, dword [0x1008967c]
xor eax, eax
and ecx, 0x40
or eax, ecx
je 0x100193ee
push 0x10053030
mov edx, 0x10008960
mov ecx, 0x100897ac
call fcn.10017a90
add esp, 4
mov ecx, dword [0x1008967c]
xor eax, eax
and ecx, 8
or eax, ecx
je 0x10019414
push 0x10053060
mov edx, 0x10008c40
mov ecx, 0x10089950
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x2000000
or eax, 0
je 0x10019451
push 0x100527d8
mov edx, 0x100090b0
mov ecx, 0x1005aa80
call fcn.10017a90
add esp, 4
mov edx, 0x100096d0
mov ecx, 0x1005aa84
push 0x100527e8
call fcn.10017a90
add esp, 4
mov ecx, dword [0x10089678]
mov eax, dword [0x1008967c]
and ecx, 0x4000000
and eax, 1
or ecx, eax
je 0x10019499
push str.NtSetInformationFile
mov edx, 0x10009c50
mov ecx, 0x1005b824
call fcn.10017a90
add esp, 4
mov edx, 0x1000a700
mov ecx, 0x1005b828
push str.NtQueryInformationFile
call fcn.10017a90
add esp, 4
jmp 0x100194f4
mov ecx, dword [0x1008967c]
xor eax, eax
and ecx, 1
or eax, ecx
je 0x100194bf
push str.NtQueryInformationFile
mov edx, 0x1000a700
mov ecx, 0x1005b828
call fcn.10017a90
add esp, 4
mov ecx, dword [0x1008967c]
xor eax, eax
and ecx, 2
or eax, ecx
je 0x100194e5
push str.NtSetInformationFile
mov edx, 0x10009c50
mov ecx, 0x1005b824
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x1000
or eax, 0
je 0x1001950b
push str.NtQueryDirectoryFile
mov edx, 0x1000abd0
mov ecx, 0x1005b820
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x18000000
or eax, 0
je 0x10019548
push str.bind
mov edx, 0x10020b90
mov ecx, 0x10089954
call fcn.10017a90
add esp, 4
mov edx, 0x10020d20
mov ecx, 0x10089958
push str.listen
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0xd8000000
or eax, 0
je 0x10019711
lea eax, [esp + 0x30]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 0
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
push 0
push 0
mov ebx, eax
mov dword [esp + 0x20], 0x25a207b9
lea eax, [esp + 0x1c]
mov dword [esp + 0x24], 0x4660ddf3
push eax
push 4
push 0x1005b834
push 0x10
lea eax, [esp + 0x30]
mov dword [esp + 0x38], 0xe576e98e
push eax
push 0xc8000006
push ebx
mov dword [esp + 0x48], 0x3e06748c
mov dword [esp + 0x38], 0
call dword [sym.imp.WS2_32.dll_WSAIoctl]
cmp byte [0x10089a68], 0
mov dword [esp + 0x10], eax
je 0x10019663
push 0x1004fc48
push 0x10089a68
call fcn.1003687c
mov edi, eax
add esp, 8
test edi, edi
je 0x10019663
push 0
call fcn.10036893
add esp, 4
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
mov dword [esp + 0x2c], edx
push eax
call fcn.10036b8c
add esp, 4
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [esp + 0x14]
push dword [esp + 0x1c]
push dword [0x1005b834]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push dword [esi]
mov eax, dword [esi + 0x10]
push dword [esi + 4]
inc eax
push dword [esi + 8]
push dword [esi + 0xc]
push eax
mov eax, dword [esi + 0x14]
add eax, 0x76c
push eax
push str.__04d__02d__02d__02d:_02d:_02d___u_CONNECTEX:_p__d__d:_x_n
push edi
call fcn.1001bf20
add esp, 0x34
push edi
call fcn.10036ec3
add esp, 4
push edi
call fcn.1003703b
add esp, 4
push ebx
call dword [0x10089974]
push str.connect
mov edx, 0x10021500
mov ecx, 0x1008995c
call fcn.10017a90
add esp, 4
mov edx, 0x100219a0
mov ecx, 0x1005b834
push str.ConnectEx
call fcn.10017a90
add esp, 4
mov edx, 0x10021c50
mov ecx, 0x10089960
push 0x10052604
call fcn.10017a90
add esp, 4
mov edx, 0x10022160
mov ecx, 0x1005aa90
push 0x10052610
call fcn.10017a90
add esp, 4
mov edx, 0x100227d0
mov ecx, 0x1005aa8c
push 0x10052624
call fcn.10017a90
add esp, 4
mov edx, 0x10022e80
mov ecx, 0x1005aa88
push 0x10052638
call fcn.10017a90
add esp, 4
mov edx, 0x10023720
mov ecx, 0x10089974
push str.closesocket
call fcn.10017a90
add esp, 4
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov eax, dword [0x10089678]
and eax, 0xf0000000
or eax, 0
je 0x1001977c
push str.send
mov edx, 0x10022fd0
mov ecx, 0x10089964
call fcn.10017a90
add esp, 4
mov edx, 0x10023250
mov ecx, 0x10089968
push 0x10052660
call fcn.10017a90
add esp, 4
mov edx, 0x10023540
mov ecx, 0x1008996c
push 0x10052668
call fcn.10017a90
add esp, 4
mov edx, 0x10023630
mov ecx, 0x10089970
push 0x10052674
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x2000
or eax, 0
je 0x1001988c
push 0x10053080
mov edx, 0x1001ee90
mov ecx, 0x10089978
call fcn.10017a90
add esp, 4
mov edx, 0x1001f0a0
mov ecx, 0x1008997c
push 0x10053090
call fcn.10017a90
add esp, 4
mov edx, 0x1001f2b0
mov ecx, 0x10089980
push 0x100530a0
call fcn.10017a90
add esp, 4
mov edx, 0x1001f4b0
mov ecx, 0x10089984
push 0x100530b0
call fcn.10017a90
add esp, 4
mov edx, 0x1001f6b0
mov ecx, 0x10089988
push 0x100530c0
call fcn.10017a90
add esp, 4
mov edx, 0x1001f800
mov ecx, 0x1008998c
push 0x100530d0
call fcn.10017a90
add esp, 4
mov edx, 0x1001f950
mov ecx, 0x10089990
push 0x100530e0
call fcn.10017a90
add esp, 4
mov edx, 0x1001fa70
mov ecx, 0x10089994
push 0x100530ec
call fcn.10017a90
add esp, 4
mov edx, 0x1001fb90
mov ecx, 0x10089998
push 0x100530f8
call fcn.10017a90
add esp, 4
mov edx, 0x1001fc50
mov ecx, 0x1008999c
push 0x10053108
call fcn.10017a90
add esp, 4
mov edx, 0x10020b50
mov ecx, 0x100899d0
push 0x10053118
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x4000
or eax, 0
je 0x100199ad
push 0x10053124
mov edx, 0x1001fd10
mov ecx, 0x100899a0
call fcn.10017a90
add esp, 4
mov edx, 0x1001fdb0
mov ecx, 0x100899a4
push 0x10053134
call fcn.10017a90
add esp, 4
mov edx, 0x1001fe50
mov ecx, 0x100899a8
push 0x10053144
call fcn.10017a90
add esp, 4
mov edx, 0x1001ff20
mov ecx, 0x100899ac
push 0x10053154
call fcn.10017a90
add esp, 4
mov edx, 0x1001fff0
mov ecx, 0x100899b0
push 0x10053164
call fcn.10017a90
add esp, 4
mov edx, 0x100200b0
mov ecx, 0x100899b4
push 0x10053174
call fcn.10017a90
add esp, 4
mov edx, 0x10020170
mov ecx, 0x100899b8
push 0x10053184
call fcn.10017a90
add esp, 4
mov edx, 0x10020250
mov ecx, 0x100899bc
push 0x10053198
call fcn.10017a90
add esp, 4
mov edx, 0x10020330
mov ecx, 0x100899c0
push 0x100531ac
call fcn.10017a90
add esp, 4
mov edx, 0x10020680
mov ecx, 0x100899c4
push 0x100531c0
call fcn.10017a90
add esp, 4
mov edx, 0x100209d0
mov ecx, 0x100899c8
push 0x100531d4
call fcn.10017a90
add esp, 4
mov edx, 0x10020a90
mov ecx, 0x100899cc
push 0x100531e4
jmp 0x100199e5
mov ecx, dword [0x1008967c]
xor eax, eax
and ecx, 0x124
or eax, ecx
je 0x100199ed
push 0x100531ac
mov edx, 0x10020330
mov ecx, 0x100899c0
call fcn.10017a90
add esp, 4
mov edx, 0x10020680
mov ecx, 0x100899c4
push 0x100531c0
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0xc0000
or eax, 0
je 0x10019a58
push 0x100531f4
mov edx, 0x1001bf40
mov ecx, 0x100899d4
call fcn.10017a90
add esp, 4
mov edx, 0x1001c100
mov ecx, 0x100899d8
push 0x10053208
call fcn.10017a90
add esp, 4
mov edx, 0x1001c2c0
mov ecx, 0x100899dc
push 0x1005321c
call fcn.10017a90
add esp, 4
mov edx, 0x1001c3e0
mov ecx, 0x100897b8
push 0x1005322c
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x100000
or eax, 0
je 0x10019a7e
push 0x1005323c
mov edx, 0x1001c510
mov ecx, 0x100897bc
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x8000
or eax, 0
je 0x10019b1b
push 0x10053254
mov edx, 0x1001c520
mov ecx, 0x100899e0
call fcn.10017a90
add esp, 4
mov edx, 0x1001c660
mov ecx, 0x100899e4
push 0x10053264
call fcn.10017a90
add esp, 4
mov edx, 0x1001c7a0
mov ecx, 0x100899e8
push 0x10053274
call fcn.10017a90
add esp, 4
mov edx, 0x1001c8e0
mov ecx, 0x100899ec
push 0x10053284
call fcn.10017a90
add esp, 4
mov edx, 0x1001ca20
mov ecx, 0x100899f0
push 0x10053294
call fcn.10017a90
add esp, 4
mov edx, 0x1001cb80
mov ecx, 0x100899f4
push 0x100532a0
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x10000
or eax, 0
je 0x10019bb8
push 0x100532ac
mov edx, 0x1001cce0
mov ecx, 0x100899f8
call fcn.10017a90
add esp, 4
mov edx, 0x1001ce00
mov ecx, 0x100899fc
push 0x100532bc
call fcn.10017a90
add esp, 4
mov edx, 0x1001cf20
mov ecx, 0x10089a00
push 0x100532cc
call fcn.10017a90
add esp, 4
mov edx, 0x1001d060
mov ecx, 0x10089a04
push 0x100532dc
call fcn.10017a90
add esp, 4
mov edx, 0x1001d1a0
mov ecx, 0x10089a08
push 0x100532ec
call fcn.10017a90
add esp, 4
mov edx, 0x1001d2c0
mov ecx, 0x10089a0c
push 0x100532f8
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x20000
or eax, 0
je 0x10019c55
push 0x10053304
mov edx, 0x1001d3e0
mov ecx, 0x10089a10
call fcn.10017a90
add esp, 4
mov edx, 0x1001d520
mov ecx, 0x10089a14
push 0x10053318
call fcn.10017a90
add esp, 4
mov edx, 0x1001d660
mov ecx, 0x10089a18
push 0x1005332c
call fcn.10017a90
add esp, 4
mov edx, 0x1001d7c0
mov ecx, 0x10089a1c
push 0x10053340
call fcn.10017a90
add esp, 4
mov edx, 0x1001d920
mov ecx, 0x10089a20
push 0x10053354
call fcn.10017a90
add esp, 4
mov edx, 0x1001da40
mov ecx, 0x10089a24
push 0x10053364
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x200000
or eax, 0
je 0x10019cc0
push 0x10053374
mov edx, 0x1001db60
mov ecx, 0x10089a28
call fcn.10017a90
add esp, 4
mov edx, 0x1001dcc0
mov ecx, 0x10089a2c
push 0x10053388
call fcn.10017a90
add esp, 4
mov edx, 0x1001de20
mov ecx, 0x10089a30
push 0x1005339c
call fcn.10017a90
add esp, 4
mov edx, 0x1001df40
mov ecx, 0x10089a34
push 0x100533b0
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x400000
or eax, 0
je 0x10019d5d
push 0x100533c4
mov edx, 0x1001e060
mov ecx, 0x10089a38
call fcn.10017a90
add esp, 4
mov edx, 0x1001e180
mov ecx, 0x10089a3c
push 0x100533dc
call fcn.10017a90
add esp, 4
mov edx, 0x1001e2a0
mov ecx, 0x10089a40
push 0x100533f4
call fcn.10017a90
add esp, 4
mov edx, 0x1001e3e0
mov ecx, 0x10089a44
push 0x1005340c
call fcn.10017a90
add esp, 4
mov edx, 0x1001e520
mov ecx, 0x10089a48
push 0x10053424
call fcn.10017a90
add esp, 4
mov edx, 0x1001e640
mov ecx, 0x10089a4c
push 0x10053438
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x800000
or eax, 0
je 0x10019dc8
push 0x1005344c
mov edx, 0x1001e760
mov ecx, 0x10089a50
call fcn.10017a90
add esp, 4
mov edx, 0x1001e870
mov ecx, 0x10089a54
push 0x10053460
call fcn.10017a90
add esp, 4
mov edx, 0x1001e980
mov ecx, 0x10089a58
push 0x10053474
call fcn.10017a90
add esp, 4
mov edx, 0x1001eaa0
mov ecx, 0x10089a5c
push 0x10053484
call fcn.10017a90
add esp, 4
mov eax, dword [0x10089678]
and eax, 0x1000000
or eax, 0
je 0x10019e05
push 0x10053494
mov edx, 0x1001ebc0
mov ecx, 0x10089a60
call fcn.10017a90
add esp, 4
mov edx, 0x1001ed20
mov ecx, 0x10089a64
push 0x100534a4
call fcn.10017a90
add esp, 4
call fcn.10027a90
mov ecx, dword [esp + 0x1c4]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1002bcfe
mov esp, ebp
pop ebp
ret