Function at 0x1002d539
Capabilities:
Contain obfuscated stackstrings
Create thread
Initialize winsock library
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1f4
push ebx
push esi
push edi
xor ebx, ebx
push 0x1a
mov word [esp + 0x1c], 0x41
mov word [esp + 0x1e], 0x6c
mov word [esp + 0x20], 0x69
mov word [esp + 0x22], 0x63
mov word [esp + 0x24], 0x69
mov word [esp + 0x26], 0x61
mov word [esp + 0x28], 0x4f
mov word [esp + 0x2a], 0x6e
mov word [esp + 0x2c], 0x6c
mov word [esp + 0x2e], 0x69
mov word [esp + 0x30], 0x6e
mov word [esp + 0x32], 0x65
mov word [esp + 0x34], 0x5c
mov word [esp + 0x36], 0x53
mov word [esp + 0x38], 0x65
mov word [esp + 0x3a], 0x74
mov word [esp + 0x3c], 0x75
mov word [esp + 0x3e], 0x70
mov word [esp + 0x40], 0x5c
mov word [esp + 0x42], 0x36
mov word [esp + 0x44], 0x2e
mov word [esp + 0x46], 0x64
mov word [esp + 0x48], 0x61
mov word [esp + 0x4a], 0x74
mov word [esp + 0x4c], bx
call fcn.10004bd0
mov esi, eax
push ebx
push esi
lea eax, [esp + 0x24]
call fcn.1000424a
add esp, 0xc
push 0x32
pop ecx
lea eax, [esp + 0x18]
mov byte [eax], bl
inc eax
dec ecx
jne 0x1002d615
push dword [esi]
call fcn.10002dbc
cmp eax, ebx
pop ecx
je 0x1002d648
mov ecx, dword [0x1005eba8]
mov esi, dword [eax + 4]
mov edx, dword [ecx + 4]
mov dword [ecx + 4], esi
mov esi, dword [eax]
mov dword [eax + 4], edx
mov edx, dword [ecx]
mov dword [ecx], esi
mov esi, eax
mov dword [eax], edx
call fcn.10004011
mov eax, dword [0x1005eba8]
mov esi, dword [eax]
cmp byte [esi], bl
je 0x1002d6c3
jmp 0x1002d659
mov esi, dword [esp + 0x14]
push esi
mov dword [esp + 0x14], esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea esi, [esi + eax + 1]
mov edi, dword [esi]
push str._language
push dword [esp + 0x14]
add esi, 4
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x1002d695
push esi
mov esi, dword [0x1005ebbc]
call fcn.1000408d
mov esi, dword [esp + 0x18]
pop ecx
push str._images_splash_screen.png
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x1002d6b9
push esi
mov esi, dword [0x1005ebc4]
call fcn.1000408d
mov esi, dword [esp + 0x18]
pop ecx
add esi, edi
cmp byte [esi], bl
mov dword [esp + 0x14], esi
jne 0x1002d655
mov ecx, dword [0x1005eba0]
push ebx
push ebx
push ebx
push ebx
push ebx
call fcn.100040fd
add esp, 0x14
push 0x10
pop edi
mov dword [esp + 0x10], edi
xor eax, eax
call fcn.10003df3
movzx eax, byte [eax + str.0123456789ABCDEF]
mov esi, dword [0x1005eba0]
push eax
call fcn.10004239
dec dword [esp + 0x14]
pop ecx
jne 0x1002d6dd
mov eax, dword [0x1005eba0]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [eax]
mov esi, str._key
push dword [0x1005eb90]
mov eax, esi
call fcn.1000429f
mov eax, dword [0x1005eba0]
push ebx
push ebx
push ebx
push ebx
push ebx
push str.index
push dword [eax]
mov eax, esi
push dword [0x1005ebac]
call fcn.1000429f
mov eax, dword [0x1005eba0]
add esp, 0x40
push ebx
push ebx
push ebx
push ebx
push ebx
mov edi, 0x100445d8
push edi
push dword [eax]
mov eax, esi
push dword [0x1005ebc0]
call fcn.1000429f
mov eax, dword [0x1005eba0]
push ebx
push ebx
push ebx
push ebx
push ebx
push edi
push dword [eax]
mov eax, esi
push dword [0x1005eb98]
call fcn.1000429f
mov eax, dword [0x1005eba0]
add esp, 0x40
push ebx
push ebx
push ebx
push ebx
push ebx
push edi
push dword [eax]
mov eax, esi
push dword [0x1005ebc8]
call fcn.1000429f
mov eax, dword [0x1005eba0]
push ebx
push ebx
push ebx
push ebx
push ebx
push edi
push dword [eax]
mov eax, esi
push dword [0x1005eb94]
call fcn.1000429f
mov eax, dword [0x1005eba0]
add esp, 0x40
push ebx
push ebx
push ebx
push ebx
push ebx
push edi
push dword [eax]
mov eax, esi
push dword [0x1005eb9c]
call fcn.1000429f
mov eax, dword [0x1005eba0]
push ebx
push ebx
push ebx
push ebx
push ebx
push edi
push dword [eax]
mov eax, esi
push dword [0x1005ebb4]
call fcn.1000429f
mov eax, dword [0x1005eba0]
add esp, 0x40
push ebx
push ebx
push ebx
push ebx
push ebx
push edi
push dword [eax]
mov eax, esi
push dword [0x1005eba4]
call fcn.1000429f
lea eax, [esp + 0x6c]
push eax
mov word [esp + 0x70], 0x41
mov word [esp + 0x72], 0x6c
mov word [esp + 0x74], 0x69
mov word [esp + 0x76], 0x63
mov word [esp + 0x78], 0x69
mov word [esp + 0x7a], 0x61
mov word [esp + 0x7c], 0x4f
mov word [esp + 0x7e], 0x6e
mov word [esp + 0x80], 0x6c
mov word [esp + 0x82], 0x69
mov word [esp + 0x84], 0x6e
mov word [esp + 0x86], 0x65
mov word [esp + 0x88], 0x4e
mov word [esp + 0x8a], 0x74
mov word [esp + 0x8c], 0x6c
mov word [esp + 0x8e], 0x65
mov word [esp + 0x90], 0x61
mov word [esp + 0x92], bx
call fcn.1000487b
mov esi, eax
add esp, 0x24
cmp dword [esi + 4], ebx
je 0x1002d8b5
call fcn.10018853
call fcn.10003fe9
call fcn.10018baa
call fcn.10019204
call fcn.100194a7
call fcn.100195c3
mov eax, 0x10019646
sub eax, 0x4f74b5
push eax
mov edi, 0x4f74b1
call fcn.10015693
call fcn.1002bcce
mov eax, 0x10019e90
sub eax, 0x767170
push eax
mov edi, 0x76716c
call fcn.10015693
push 0x5090c031
mov edi, 0x767344
call fcn.10015693
mov eax, 0x10019eab
sub eax, 0x767362
push eax
add edi, 0x1a
call fcn.10015693
push 0x1bb8
mov edi, 0x81f930
call fcn.10015693
push 0x89909000
add edi, 4
call fcn.10015693
push 0x16a04eb
mov edi, 0xa161b5
call fcn.10015693
add esp, 0x1c
call fcn.1001a4f7
lea eax, [esp + 0x70]
push eax
push 0x202
call sub.WS2_32.dll_WSAStartup
test eax, eax
jne 0x1002d96a
call fcn.10032ac3
call fcn.10007603
test eax, eax
jne 0x1002d9e8
call fcn.10026d6d
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push ebx
push ebx
push ebx
push 0x1000d042
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
push 0x1002cddc
push ebx
push ebx
call esi
mov edi, 0x1004f180
mov dword [esp + 0x10], 7
push ebx
push ebx
push edi
push 0x10027772
push ebx
push ebx
call esi
add edi, 0x28
dec dword [esp + 0x10]
jne 0x1002d9a3
push ebx
push ebx
push ebx
push 0x1002b998
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
push 0x1001f81d
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
push 0x10026771
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
push 0x10014592
push ebx
push ebx
call esi
pop edi
xor eax, eax
pop esi
inc eax
pop ebx
mov esp, ebp
pop ebp
ret