Function at 0x10026a0
Capabilities:
Initialize winsock library
Terminate process

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x210
and byte [ebp + 0x6e], 0
and dword [ebp + 0x50], 0
push ebx
push esi
push edi
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x10]
rep stosd dword es:[edi], eax
push 7
pop ecx
lea edi, [ebp + 0x10]
rep stosd dword es:[edi], eax
mov eax, 0x80
mov dword [ebp + 0x5c], 0x1e
mov byte [ebp + 0x64], 1
mov dword [ebp + 0x58], 0xbb8
mov byte [ebp + 0x6f], 1
call fcn.01003240
mov ebx, esp
push 0x64
pop eax
mov dword [ebp + 0x54], ebx
call fcn.01003240
mov dword [ebp + 0x60], esp
lea eax, [ebp - 0x1a0]
push eax
push 2
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x100271c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x2718
jmp 0x100283f
cmp dword [ebp + 0x78], 2
jl 0x10027fb
xor esi, esi
inc esi
cmp dword [ebp + 0x78], esi
jle 0x10027ed
mov edi, dword [ebp + 0x7c]
mov eax, dword [edi + esi*4]
mov cl, byte [eax]
cmp cl, 0x2d
je 0x100276c
cmp cl, 0x2f
je 0x100276c
lea ecx, [ebp + 0x68]
push ecx
lea ecx, [ebp - 0x10]
push ecx
movzx ecx, byte [ebp + 0x64]
push ecx
push eax
mov byte [ebp + 0x6e], 1
call fcn.0100254a
test eax, eax
jne 0x10027dd
push dword [edi + esi*4]
push 0x271b
jmp 0x100283f
movsx eax, byte [eax + 1]
sub eax, 0x3f
je 0x10027fb
sub eax, 0x25
je 0x10027d9
sub eax, 4
je 0x10027be
sub eax, 0xa
je 0x10027b5
dec eax
je 0x1002797
sub eax, 4
jne 0x1002802
push 0xffffffffffffffff
lea eax, [ebp + 0x58]
jmp 0x10027c6
lea eax, [ebp + 0x10]
push eax
inc esi
push dword [edi + esi*4]
call fcn.0100262f
test eax, eax
jne 0x10027dd
push dword [edi + esi*4]
push 0x2719
jmp 0x100283f
mov dword [ebp + 0x50], 1
jmp 0x10027dd
push 0xff
lea eax, [ebp + 0x5c]
push 1
push esi
push dword [ebp + 0x78]
push edi
push eax
call fcn.010024e1
test al, al
je 0x1002849
jmp 0x10027dd
and byte [ebp + 0x64], 0
inc esi
cmp esi, dword [ebp + 0x78]
jl 0x1002735
cmp byte [ebp + 0x6e], 0
jne 0x1002816
push 0x271c
push 1
call fcn.01006bae
pop ecx
pop ecx
call fcn.01002691
jmp 0x1002849
push dword [edi + esi*4]
push 0x271a
push 1
call fcn.01006bae
add esp, 0xc
jmp 0x10027fb
xor edi, edi
push edi
push edi
push 3
push edi
push 3
push edi
push 0x10011c8
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [ebp + 0x4c], eax
jne 0x1002851
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x271d
push 1
call fcn.01006bae
add esp, 0xc
xor eax, eax
inc eax
jmp 0x1002b14
cmp word [ebp + 0x10], di
jne 0x10028aa
push edi
push edi
push 0x17
call dword [sym.imp.WS2_32.dll_socket]
mov esi, eax
cmp esi, 0xffffffff
jne 0x1002885
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push 0x271e
push 1
call fcn.01006bae
add esp, 0xc
push 1
call fcn.010031f3
push edi
push edi
lea eax, [ebp + 0xc]
push eax
push 0x1c
lea eax, [ebp + 0x10]
push eax
push 0x1c
lea eax, [ebp - 0x10]
push eax
push 0xc8000014
push esi
call dword [sym.imp.WS2_32.dll_WSAIoctl]
push esi
call dword [sym.imp.WS2_32.dll_closesocket]
lea eax, [ebp - 0x10]
push eax
call fcn.010023ae
cmp dword [ebp + 0x68], edi
push eax
je 0x10028cd
push dword [ebp + 0x68]
push 0x271f
push 1
call fcn.01006bae
add esp, 0x10
jmp 0x10028dc
push 0x2720
push 1
call fcn.01006bae
add esp, 0xc
cmp word [ebp + 0x10], di
je 0x10028fb
lea eax, [ebp + 0x10]
push eax
call fcn.010023ae
push eax
push 0x2721
push 1
call fcn.01006bae
add esp, 0xc
push dword [ebp + 0x5c]
push 0x2722
push 1
call fcn.01006bae
add esp, 0xc
push 6
pop ecx
lea esi, [ebp - 0xe]
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 6
lea edi, [ebx + 0x1a]
pop ecx
lea esi, [ebp + 0x12]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
and dword [ebx + 0x3c], 0
cmp dword [ebp + 0x50], 0
je 0x1002937
mov dword [ebx + 0x3c], 1
mov eax, dword [ebp + 0x58]
mov dword [ebx + 0x34], eax
push 0x10
xor eax, eax
cmp dword [ebp + 0x5c], 1
pop ecx
lea edi, [ebx + 0x40]
rep stosd dword es:[edi], eax
jb 0x1002b04
jmp 0x1002956
mov ebx, dword [ebp + 0x54]
cmp byte [ebp + 0x6f], 0
je 0x1002b04
movzx eax, byte [ebp + 0x6f]
push eax
push 0x2723
push 1
call fcn.01006bae
mov al, byte [ebp + 0x6f]
and byte [ebp + 0x6e], 0
add esp, 0xc
and dword [ebp + 0x68], 0
mov byte [ebx + 0x38], al
jmp 0x1002987
mov ebx, dword [ebp + 0x54]
mov esi, dword [ebp + 0x60]
push 0
lea eax, [ebp + 0x2c]
push eax
push 0x64
push esi
push 0x80
push ebx
push 0x120000
push dword [ebp + 0x4c]
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x10029b5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x10029b8
mov ebx, dword [esi + 0x1c]
test ebx, ebx
jne 0x1002a04
mov esi, dword [ebp + 0x60]
push dword [esi + 0x20]
call fcn.010024b4
cmp dword [ebp + 0x68], 2
push 6
mov word [ebp + 0x30], 0x17
pop ecx
lea edi, [ebp + 0x32]
rep movsd dword es:[edi], dword [esi]
mov byte [ebp + 0x6e], 1
movsw word es:[edi], word [esi]
jne 0x1002a76
push dword [ebp + 0x64]
lea eax, [ebp + 0x30]
push eax
call fcn.010023f9
push 0x2724
push 1
call fcn.01006bae
pop ecx
pop ecx
jmp 0x1002b04
cmp ebx, 0x2b05
jne 0x1002a33
mov esi, dword [ebp + 0x60]
push dword [esi + 0x20]
call fcn.010024b4
cmp dword [ebp + 0x68], 2
push 6
mov word [ebp + 0x30], 0x17
pop ecx
lea edi, [ebp + 0x32]
rep movsd dword es:[edi], dword [esi]
mov byte [ebp + 0x6e], 1
movsw word es:[edi], word [esi]
jne 0x1002a76
jmp 0x1002a55
cmp ebx, 0x2b02
jne 0x1002aad
push 0x2725
push 1
call fcn.01006bae
cmp dword [ebp + 0x68], 2
pop ecx
pop ecx
jne 0x1002a76
cmp byte [ebp + 0x6e], 0
je 0x1002a68
push dword [ebp + 0x64]
lea eax, [ebp + 0x30]
push eax
call fcn.010023f9
push 0x2724
jmp 0x1002a6d
push 0x2726
push 1
call fcn.01006bae
pop ecx
pop ecx
mov eax, dword [ebp + 0x60]
mov eax, dword [eax + 0x20]
mov ecx, 0x3e8
cmp eax, ecx
jae 0x1002a8e
sub ecx, eax
push ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
inc dword [ebp + 0x68]
cmp dword [ebp + 0x68], 3
jl 0x1002984
inc byte [ebp + 0x6f]
movzx eax, byte [ebp + 0x6f]
cmp eax, dword [ebp + 0x5c]
jbe 0x1002953
jmp 0x1002b04
cmp ebx, 0x2af8
jae 0x1002abd
push ebx
push 0x2727
jmp 0x1002afa
mov esi, dword [ebp + 0x60]
test esi, esi
je 0x1002aee
push 6
pop ecx
push dword [ebp + 0x64]
mov word [ebp + 0x30], 0x17
lea edi, [ebp + 0x32]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp + 0x30]
push eax
movsw word es:[edi], word [esi]
call fcn.010023f9
push 0x2728
push 1
call fcn.01006bae
pop ecx
pop ecx
push ebx
call fcn.01002380
push eax
push 0x2729
push 1
call fcn.01006bae
add esp, 0xc
push 0x272a
push 1
call fcn.01006bae
pop ecx
pop ecx
xor eax, eax
lea esp, [ebp - 0x1ac]
pop edi
pop esi
pop ebx
add ebp, 0x70
leave
ret