Function at 0x1002fe20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1740
call fcn.1006f8b0
mov eax, dword [0x10138e70]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
xor eax, eax
push edi
mov edi, ecx
test esi, esi
je 0x1002ff42
push ebx
push 0x1046
push eax
mov word [ebp - 0x1718], ax
lea eax, [ebp - 0x1716]
push eax
call fcn.1006ff30
xor eax, eax
add esp, 0xc
xorps xmm0, xmm0
mov word [ebp - 0x2c], ax
movdqu xmmword [ebp - 0x2a], xmm0
mov dword [ebp - 0xa], eax
movdqu xmmword [ebp - 0x1a], xmm0
mov word [ebp - 6], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
lea eax, [ebp - 0x2c]
push 0x1009be08
push eax
call fcn.1002a1f0
push esi
lea eax, [ebp - 0x1718]
push 0x824
push eax
call fcn.1006e6e1
push str._rnd
lea eax, [ebp - 0x1718]
push 0x824
push eax
call fcn.1006e675
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1718]
push 0x824
push eax
call fcn.1006e675
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 0x30
mov dword [ebp - 0x171c], 0xf
xor esi, esi
mov dword [ebp - 0x1720], 0
mov byte [ebp - 0x1730], 0
lea eax, [ebp - 0x1730]
mov ecx, edi
push eax
lea eax, [ebp - 0x1718]
push eax
call fcn.1002eed0
cmp dword [ebp - 0x1720], 1
jb 0x1002ff19
test eax, eax
jne 0x1002ff54
push 0x2710
call ebx
inc esi
cmp esi, 2
jle 0x1002fef7
xor edi, edi
cmp dword [ebp - 0x171c], 0x10
pop ebx
jb 0x1002ff40
push dword [ebp - 0x1730]
call fcn.100070d0
add esp, 4
mov eax, edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1006f41a
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [edi + 0x889c]
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp dword [ebp - 0x171c], 0x10
lea ecx, [ebp - 0x1730]
cmovae ecx, dword [ebp - 0x1730]
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
mov esi, eax
mov dword [ebp - 0x1740], esi
test esi, esi
jne 0x1002ff9a
mov ebx, dword [ebp - 0x1738]
xor edi, edi
mov esi, dword [ebp - 0x1738]
jmp 0x10030710
push 0x5000
mov dword [edi], 1
call fcn.1006daa9
mov ebx, eax
add esp, 4
mov dword [ebp - 0x173c], ebx
test ebx, ebx
jne 0x1002ffcc
mov ebx, dword [ebp - 0x1738]
xor edi, edi
mov esi, dword [ebp - 0x1738]
jmp 0x10030723
mov ecx, dword [edi + 0x889c]
mov eax, dword [ecx]
call dword [eax + 0xc]
push 0x54
mov dword [ebp - 0x1734], eax
lea eax, [ebp - 0x274]
push 0
push eax
mov dword [ebp - 0x284], 0x69006c
mov dword [ebp - 0x280], 0x650063
mov dword [ebp - 0x27c], 0x73006e
mov dword [ebp - 0x278], 0x65
call fcn.1006ff30
push 0x5c
lea eax, [ebp - 0x538]
mov dword [ebp - 0x540], 0x65006b
push 0
push eax
mov dword [ebp - 0x53c], 0x79
call fcn.1006ff30
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0x540]
add esp, 0x18
mov eax, dword [ecx]
push esi
push 0x2800
push ebx
push 0x100af9cc
push edx
lea edx, [ebp - 0x284]
push edx
call dword [eax]
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10030065
sub eax, edx
sar eax, 1
jne 0x10030089
mov ebx, dword [ebp - 0x1738]
xor edi, edi
mov esi, dword [ebp - 0x1738]
jmp 0x10030710
mov ecx, dword [edi + 0x889c]
mov eax, dword [ecx]
call dword [eax + 0x30]
push ebx
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
mov ebx, eax
test ebx, ebx
jne 0x100300ae
mov esi, dword [ebp - 0x1738]
xor edi, edi
jmp 0x10030710
lea eax, [ebp - 0x1738]
mov dword [ebp - 0x1738], 0
push eax
push ebx
mov ecx, edi
call fcn.1002dda0
mov esi, dword [ebp - 0x1738]
test esi, esi
jne 0x100300d8
xor edi, edi
jmp 0x10030710
xor eax, eax
mov dword [ebp - 0x2e8], 0x73006d
push 0x5a
push eax
mov word [ebp - 0x2e0], ax
lea eax, [ebp - 0x2de]
push eax
mov dword [ebp - 0x2e4], 0x650074
call fcn.1006ff30
push 0x5c
lea eax, [ebp - 0x40c]
mov dword [ebp - 0x414], 0x77006e
push 0
push eax
mov dword [ebp - 0x410], 0x73
call fcn.1006ff30
xor eax, eax
mov dword [ebp - 0x3b0], 0x77006e
push 0x5a
push eax
mov word [ebp - 0x3a8], ax
lea eax, [ebp - 0x3a6]
push eax
mov dword [ebp - 0x3ac], 0x320073
call fcn.1006ff30
xor eax, eax
mov dword [ebp - 0x34c], 0x6e0061
push 0x5a
push eax
mov word [ebp - 0x344], ax
lea eax, [ebp - 0x342]
push eax
mov dword [ebp - 0x348], 0x630079
call fcn.1006ff30
xor eax, eax
mov dword [ebp - 0x608], 0x6a0074
push 0x5e
push eax
mov word [ebp - 0x604], ax
lea eax, [ebp - 0x602]
push eax
call fcn.1006ff30
xor eax, eax
mov dword [ebp - 0x6d0], 0x700061
push 0x5e
push eax
mov word [ebp - 0x6cc], ax
lea eax, [ebp - 0x6ca]
push eax
call fcn.1006ff30
add esp, 0x48
mov dword [ebp - 0x220], 0x6f0073
xor eax, eax
mov dword [ebp - 0x21c], 0x6b0063
mov word [ebp - 0x214], ax
mov dword [ebp - 0x218], 0x740065
push 0x56
push eax
lea eax, [ebp - 0x212]
push eax
call fcn.1006ff30
push 0x5c
lea eax, [ebp - 0x4d4]
mov dword [ebp - 0x4dc], 0x640063
push 0
push eax
mov dword [ebp - 0x4d8], 0x6c
call fcn.1006ff30
xor eax, eax
mov dword [ebp - 0x1bc], 0x680073
push 0x5a
push eax
mov word [ebp - 0x1b4], ax
lea eax, [ebp - 0x1b2]
push eax
mov dword [ebp - 0x1b8], 0x77006f
call fcn.1006ff30
mov dword [ebp - 0xf4], 0x6e0069
mov dword [ebp - 0xf0], 0x650074
mov dword [ebp - 0xec], 0x760072
mov dword [ebp - 0xe8], 0x6c0061
xor eax, eax
push 0x52
push eax
mov word [ebp - 0xe4], ax
lea eax, [ebp - 0xe2]
push eax
call fcn.1006ff30
push 0x50
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x90], 0x650064
push 0
push eax
mov dword [ebp - 0x8c], 0x61006c
mov dword [ebp - 0x88], 0x740079
mov dword [ebp - 0x84], 0x6d0069
mov dword [ebp - 0x80], 0x65
call fcn.1006ff30
push 0x5c
lea eax, [ebp - 0x150]
mov dword [ebp - 0x158], 0x720075
push 0
push eax
mov dword [ebp - 0x154], 0x6c
call fcn.1006ff30
add esp, 0x48
mov dword [ebp - 0x5a4], 0x690061
lea eax, [ebp - 0x59c]
mov dword [ebp - 0x5a0], 0x64
push 0x5c
push 0
push eax
call fcn.1006ff30
xor eax, eax
mov dword [ebp - 0x66c], 0x680064
push 0x5e
push eax
mov word [ebp - 0x668], ax
lea eax, [ebp - 0x666]
push eax
call fcn.1006ff30
xor eax, eax
mov dword [ebp - 0x478], 0x6f0064
push 0x56
push eax
mov word [ebp - 0x46c], ax
lea eax, [ebp - 0x46a]
push eax
mov dword [ebp - 0x474], 0x61006d
mov dword [ebp - 0x470], 0x6e0069
call fcn.1006ff30
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0x1bc]
add esp, 0x24
mov eax, dword [ecx]
push esi
push 0
push edx
lea edx, [ebp - 0x2e8]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0xf4]
push esi
push 0x5a
mov dword [edi + 0x30fc], eax
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x2e8]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0x90]
push esi
push 0
mov dword [edi + 0x3100], eax
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x2e8]
push edx
call dword [eax + 4]
mov dword [edi + 0x3104], eax
mov ecx, dword [ebp - 0x1734]
lea eax, [edi + 0x3108]
push esi
push 0x824
push eax
mov edx, dword [ecx]
lea eax, [ebp - 0x158]
push 0x100af9cc
push eax
lea eax, [ebp - 0x2e8]
push eax
call dword [edx]
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0x1bc]
push esi
push 0
push edx
mov eax, dword [ecx]
lea edx, [ebp - 0x414]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0xf4]
push esi
push 0x5a
mov dword [edi + 8], eax
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x414]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0x90]
push esi
push 0
mov dword [edi + 0xc], eax
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x414]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x1734]
push esi
mov dword [edi + 0x10], eax
lea eax, [edi + 0x14]
push 0x824
mov edx, dword [ecx]
push eax
push 0x100af9cc
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x414]
push eax
call dword [edx]
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0x1bc]
push esi
push 0
push edx
mov eax, dword [ecx]
lea edx, [ebp - 0x3b0]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0xf4]
push esi
push 0x5a
mov dword [edi + 0x105c], eax
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x3b0]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0x90]
push esi
push 0
mov dword [edi + 0x1060], eax
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x3b0]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x1734]
push esi
mov dword [edi + 0x1064], eax
lea eax, [edi + 0x1068]
push 0x824
mov edx, dword [ecx]
push eax
push 0x100af9cc
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x3b0]
push eax
call dword [edx]
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0x1bc]
push esi
push 0
push edx
mov eax, dword [ecx]
lea edx, [ebp - 0x34c]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0xf4]
push esi
push 0x5a
mov dword [edi + 0x4150], eax
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x34c]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0x90]
push esi
push 0
mov dword [edi + 0x4154], eax
mov eax, dword [ecx]
push edx
lea edx, [ebp - 0x34c]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x1734]
push esi
mov dword [edi + 0x4158], eax
lea eax, [edi + 0x415c]
push 0x824
mov edx, dword [ecx]
push eax
push 0x100af9cc
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x34c]
push eax
call dword [edx]
mov ecx, dword [ebp - 0x1734]
lea eax, [edi + 0x51a4]
push esi
push 0x824
push eax
mov edx, dword [ecx]
lea eax, [ebp - 0x158]
push 0x100af9cc
push eax
lea eax, [ebp - 0x608]
push eax
call dword [edx]
mov ecx, dword [ebp - 0x1734]
lea eax, [edi + 0x61ec]
push esi
push 0x104
push eax
mov edx, dword [ecx]
lea eax, [ebp - 0x5a4]
push 0x100af9cc
push eax
lea eax, [ebp - 0x608]
push eax
call dword [edx]
mov ecx, dword [ebp - 0x1734]
lea eax, [edi + 0x63f4]
push esi
push 0x104
push eax
mov edx, dword [ecx]
lea eax, [ebp - 0x158]
push 0x100af9cc
push eax
lea eax, [ebp - 0x6d0]
push eax
call dword [edx]
mov ecx, dword [ebp - 0x1734]
lea eax, [edi + 0x20b4]
push esi
push 0x824
push eax
mov edx, dword [ecx]
lea eax, [ebp - 0x158]
push 0x100af9cc
push eax
lea eax, [ebp - 0x66c]
push eax
call dword [edx]
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0x1bc]
push esi
push 0
push edx
mov eax, dword [ecx]
lea edx, [ebp - 0x4dc]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x1734]
push esi
mov dword [edi + 0x7850], eax
lea eax, [edi + 0x7854]
push 0x824
mov edx, dword [ecx]
push eax
push 0x100af9cc
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x4dc]
push eax
call dword [edx]
mov ecx, dword [ebp - 0x1734]
lea edx, [ebp - 0x1bc]
push esi
push 0
push edx
mov eax, dword [ecx]
lea edx, [ebp - 0x220]
push edx
call dword [eax + 4]
mov ecx, dword [ebp - 0x1734]
push esi
mov dword [edi + 0x743c], eax
lea eax, [edi + 0x7440]
push 0x104
mov edx, dword [ecx]
push eax
push 0x100af9cc
lea eax, [ebp - 0x478]
push eax
lea eax, [ebp - 0x220]
push eax
call dword [edx]
mov ecx, dword [ebp - 0x1734]
lea eax, [edi + 0x7648]
push esi
push 0x104
push eax
mov edx, dword [ecx]
lea eax, [ebp - 0x220]
push 0x100af9cc
push str.port
push eax
call dword [edx]
mov edi, 1
mov eax, dword [ebp - 0x173c]
test eax, eax
je 0x10030723
push eax
call fcn.1006da71
add esp, 4
test ebx, ebx
je 0x10030730
push ebx
call fcn.1006da71
add esp, 4
mov eax, dword [ebp - 0x1740]
test eax, eax
je 0x10030743
push eax
call fcn.1006da71
add esp, 4
test esi, esi
je 0x1002ff28
push esi
call fcn.1006da71
add esp, 4
jmp 0x1002ff28