Function at 0x10062c95
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
push 8
call fcn.1009a2a5
add esp, 4
mov dword [ebp - 0x4c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 0x50], 0
jmp 0x10062d54
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pushal
mov eax, 1
mov eax, 2
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 6
popal
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 4], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 8], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0xc], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x10], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x14], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x54], esp
push 0
mov eax, 0x3f
call fcn.1009a2b1
cmp dword [ebp - 0x54], esp
je 0x10062ee7
push 0xaa3
push 0x4035ddf
push 6
call fcn.1009a2ab
add esp, 0xc
push 0x80000301
push 0
push dword [0x1046b5b4]
push 1
mov eax, 2
mov ebx, 0x100f8020
call fcn.1009a2c3
add esp, 0x10
push 1
call fcn.1005fea4
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
call fcn.10060a5a
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10062f40
push ebx
call fcn.1009a2b7
add esp, 4
cmp dword [ebp - 0x58], 0
jg 0x10062f7b
push 0x80000301
push 0
push dword [0x1046b5b4]
push 1
mov eax, 2
mov ebx, 0x100f8040
call fcn.1009a2c3
add esp, 0x10
mov eax, 0x101e14a6
jmp 0x10063750
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
je 0x10062f99
push eax
mov ebx, eax
call fcn.100011fb
inc eax
push eax
call fcn.1009a2a5
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10062faa
push ebx
call fcn.1009a2b7
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
call fcn.1004f1ec
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10062fd0
push ebx
call fcn.1009a2b7
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
call fcn.1005770f
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x1009c560
call fcn.1009a2bd
add esp, 0x10
mov dword [ebp - 0x58], eax
push dword [ebp - 0x20]
push dword [ebp - 0x58]
push dword [0x1046b5d4]
mov ecx, 3
call fcn.10004bb4
add esp, 0xc
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x10063034
push ebx
call fcn.1009a2b7
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x1006304a
mov eax, 0x101e14a6
push eax
push 1
mov ebx, 0x1009bb40
call fcn.1009a2bd
add esp, 0x10
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x10063076
push ebx
call fcn.1009a2b7
add esp, 4
lea eax, [ebp - 0x60]
push eax
call fcn.1004eed9
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x1006309b
push ebx
call fcn.1009a2b7
add esp, 4
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x100630b2
push ebx
call fcn.1009a2b7
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.10063819
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], 0x3135ce4
push 0x80000301
push 0
push 0x159ced57
push 1
mov ebx, 0x1009b100
call fcn.1009a2bd
add esp, 0x10
push 0x80000601
push edx
push eax
push 1
mov ebx, 0x1009bb40
call fcn.1009a2bd
add esp, 0x10
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x1006311d
push ebx
call fcn.1009a2b7
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x2c], 0
jne 0x100635fe
push 6
call fcn.1005fea4
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x10063152
push ebx
call fcn.1009a2b7
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
call fcn.1005770f
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x1009c560
call fcn.1009a2bd
add esp, 0x10
mov dword [ebp - 0x58], eax
push 0x80000301
push 0
push dword [ebp - 0x24]
push 1
mov ebx, 0x1009c560
call fcn.1009a2bd
add esp, 0x10
mov dword [ebp - 0x5c], eax
push dword [0x1046b5a4]
push 0x101e2483
push dword [ebp - 0x5c]
push 0x101e2483
push dword [ebp - 0x58]
push 0x101e2483
push dword [ebp - 0x20]
push 0x101e2483
push dword [ebp - 0x28]
push 0x101e2483
push dword [ebp - 0x1c]
push 0x101e2483
push dword [ebp - 0x38]
push 0x101e2c6d
mov ecx, 0xe
call fcn.10004bb4
add esp, 0x38
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x10063204
push ebx
call fcn.1009a2b7
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x10063217
push ebx
call fcn.1009a2b7
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x1006322d
mov eax, 0x101e14a6
push eax
push 1
mov ebx, 0x1009bb40
call fcn.1009a2bd
add esp, 0x10
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x10063259
push ebx
call fcn.1009a2b7
add esp, 4
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10063270
push ebx
call fcn.1009a2b7
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x10063287
mov eax, 0x101e149e
push eax
push 1
mov ebx, 0x1009c560
call fcn.1009a2bd
add esp, 0x10
mov dword [ebp - 0x54], eax
push dword [ebp - 0x54]
push 0x101e2c75
mov ecx, 2
call fcn.10004bb4
add esp, 8
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x100632d1
push ebx
call fcn.1009a2b7
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x100632e7
mov eax, 0x101e14a6
push eax
push 1
mov ebx, 0x1009bb40
call fcn.1009a2bd
add esp, 0x10
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x10063313
push ebx
call fcn.1009a2b7
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1006332a
push ebx
call fcn.1009a2b7
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], 0x1464874
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
lea eax, [ebp - 0x3c]
push eax
call fcn.100343ca
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10063391
push ebx
call fcn.1009a2b7
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov eax, 0x101e149e
xor ecx, ecx
test eax, eax
je 0x100633a3
mov ecx, dword [eax + 4]
push ecx
add eax, 8
push eax
mov eax, dword [ebp - 0x44]
xor ebx, ebx
test eax, eax
je 0x100633b4
mov ebx, dword [eax + 4]
add eax, 8
push eax
cmp ebx, ecx
mov eax, 1
jne 0x100633cb
dec eax
test ecx, ecx
je 0x100633cb
call fcn.1000732a
add esp, 0xc
test eax, eax
je 0x100635f9
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x100633f0
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.1009a2a5
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x10063401
push ebx
call fcn.1009a2b7
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x4c]
mov dword [ebp - 0x54], ebx
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x1006342a
push eax
mov ebx, eax
call fcn.100011fb
inc eax
push eax
call fcn.1009a2a5
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x54]
mov ebx, dword [ebx]
test ebx, ebx
je 0x10063440
push ebx
call fcn.1009a2b7
add esp, 4
pop eax
mov ebx, dword [ebp - 0x54]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x4c]
add ebx, 4
mov dword [ebp - 0x54], ebx
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x1006346f
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.1009a2a5
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x54]
mov ebx, dword [ebx]
test ebx, ebx
je 0x10063485
push ebx
call fcn.1009a2b7
add esp, 4
pop eax
mov ebx, dword [ebp - 0x54]
mov dword [ebx], eax
push 0x1046b630
push 4
mov eax, 2
call fcn.1009a29f
add esp, 8
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x54], eax
mov ebx, dword [0x1046b630]
mov dword [ebp - 0x58], ebx
call fcn.10005670
mov dword [ebp - 0x5c], ecx
mov edi, dword [ebp - 0x58]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x100634e1
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x5c]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x58]
call fcn.1009a2c9
add esp, 8
mov dword [0x1046b630], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x5c]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x54]
push edi
push eax
push 8
call fcn.1009a2a5
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x10063547
push eax
mov ebx, eax
call fcn.100011fb
inc eax
push eax
call fcn.1009a2a5
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x10063564
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.1009a2a5
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
pop eax
pop edi
mov dword [edi], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x1006357e
mov eax, 0x101e149e
push eax
push 1
mov ebx, 0x1009c560
call fcn.1009a2bd
add esp, 0x10
mov dword [ebp - 0x54], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x100635ad
mov eax, 0x101e14a6
push eax
push 1
mov ebx, 0x1009c560
call fcn.1009a2bd
add esp, 0x10
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x100635d9
push ebx
call fcn.1009a2b7
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x100635f0
push ebx
call fcn.1009a2b7
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
jmp 0x100635f9
jmp 0x100636a1
mov ebx, dword [0x1046b630]
call fcn.10005670
push ebx
push ecx
mov eax, dword [ebp - 0x2c]
dec eax
jns 0x10063628
push 0x104a
push 0x4035ddf
push 4
call fcn.1009a2ab
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x10063645
push 0x104a
push 0x4035ddf
push 1
call fcn.1009a2ab
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x54], ebx
push reloc.WS2_32.dll_getpeername
push 0
mov ebx, dword [ebp - 0x54]
mov eax, dword [ebx]
test eax, eax
jne 0x1006366d
mov eax, 0x101e149e
push eax
push 1
mov ebx, 0x1009c560
call fcn.1009a2bd
add esp, 0x10
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x1006369d
push ebx
call fcn.1009a2b7
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
push 0x80000301
push 0
push dword [0x1046b5b4]
push 1
mov eax, 2
mov ebx, 0x100f8040
call fcn.1009a2c3
add esp, 0x10
lea eax, [ebp - 0x50]
push eax
call fcn.10060acf
mov dword [ebp - 0x54], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x100636ea
mov eax, 0x101e149e
push eax
push 1
mov ebx, 0x1009c560
call fcn.1009a2bd
add esp, 0x10
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x10063716
push ebx
call fcn.1009a2b7
add esp, 4
mov eax, dword [ebp - 0x58]
jmp 0x10063750
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x10063761
push ebx
call fcn.1009a2b7
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10063771
push ebx
call fcn.1009a2b7
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10063781
push ebx
call fcn.1009a2b7
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x10063791
push ebx
call fcn.1009a2b7
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x100637a1
push ebx
call fcn.1009a2b7
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x100637b1
push ebx
call fcn.1009a2b7
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x100637c1
push ebx
call fcn.1009a2b7
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x100637d1
push ebx
call fcn.1009a2b7
add esp, 4
mov ebx, dword [ebp - 0x4c]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x100637e5
push ebx
call fcn.1009a2b7
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x100637f9
push ebx
call fcn.1009a2b7
add esp, 4
pop ebx
call fcn.1009a2b7
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x10063812
push ebx
call fcn.1009a2b7
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4