Function at 0x100035a0
Capabilities:
Connect socket
Create thread
Encode data using xor
Resolve dns
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x10030040]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x10030924], 0xffffffff
push esi
mov esi, dword [ebp + 8]
jne 0x10003675
push 0x100
push 0
push 0x1013c168
call fcn.1000e330
movaps xmm1, xmmword [0x1002c660]
add esp, 0xc
movaps xmm2, xmmword [str._f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_feeeeeeeeeeeeeeee]
xor eax, eax
nop word [eax + eax]
movups xmm0, xmmword [eax + 0x10027e08]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [eax + 0x1013c168], xmm0
movups xmm0, xmmword [eax + 0x10027e18]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [eax + 0x1013c178], xmm0
movups xmm0, xmmword [eax + 0x10027e28]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [eax + 0x1013c188], xmm0
movups xmm0, xmmword [eax + 0x10027e38]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [eax + 0x1013c198], xmm0
add eax, 0x40
cmp eax, 0x100
jb 0x100035f0
push 0x1013c168
push 0
push 0x10130ac0
call fcn.100083d0
add esp, 0xc
xor al, al
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000c666
mov esp, ebp
pop ebp
ret 8
push dword [ebp + 0xc]
mov eax, 2
mov word [ebp - 0x14], ax
call dword [sym.imp.WS2_32.dll_htons]
push esi
mov word [ebp - 0x12], ax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [ebp - 0x10], eax
cmp eax, 0xffffffff
jne 0x100036bb
push esi
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x100036bb
movsx ecx, word [eax + 0xa]
mov eax, dword [eax + 0xc]
push ecx
push dword [eax]
lea eax, [ebp - 0x10]
push eax
call fcn.1000ddb0
add esp, 0xc
push 0x10
lea eax, [ebp - 0x14]
push eax
push dword [0x10030924]
call dword [sym.imp.WS2_32.dll_connect]
mov esi, dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0xffffffff
jne 0x10003775
call esi
cmp eax, 0x2733
je 0x10003775
call esi
push 0x100
push 0
push 0x1013c168
mov esi, eax
call fcn.1000e330
movaps xmm1, xmmword [0x1002c660]
add esp, 0xc
movaps xmm2, xmmword [str._f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_feeeeeeeeeeeeeeee]
xor ecx, ecx
movups xmm0, xmmword [ecx + 0x10027f08]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [ecx + 0x1013c168], xmm0
movups xmm0, xmmword [ecx + 0x10027f18]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [ecx + 0x1013c178], xmm0
movups xmm0, xmmword [ecx + 0x10027f28]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [ecx + 0x1013c188], xmm0
movups xmm0, xmmword [ecx + 0x10027f38]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [ecx + 0x1013c198], xmm0
add ecx, 0x40
cmp ecx, 0x100
jb 0x10003711
jmp 0x1000381f
push 0x23
push dword [0x10030928]
push dword [0x10030924]
call dword [sym.imp.WS2_32.dll_WSAEventSelect]
cmp eax, 0xffffffff
jne 0x100038b5
call esi
push 0x100
push 0
push 0x1013c168
mov esi, eax
call fcn.1000e330
movaps xmm1, xmmword [0x1002c660]
add esp, 0xc
movaps xmm2, xmmword [str._f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_feeeeeeeeeeeeeeee]
xor ecx, ecx
nop word [eax + eax]
movups xmm0, xmmword [ecx + 0x10028008]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [ecx + 0x1013c168], xmm0
movups xmm0, xmmword [ecx + 0x10028018]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [ecx + 0x1013c178], xmm0
movups xmm0, xmmword [ecx + 0x10028028]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [ecx + 0x1013c188], xmm0
movups xmm0, xmmword [ecx + 0x10028038]
psubb xmm0, xmm1
xorps xmm0, xmm2
movups xmmword [ecx + 0x1013c198], xmm0
add ecx, 0x40
cmp ecx, 0x100
jb 0x100037c0
push esi
push 0x1013c168
push 0
push 0x10130ac0
call fcn.100083d0
mov eax, dword [0x10130954]
add esp, 0x10
test eax, eax
je 0x10003866
push 0
push eax
mov dword [0x1013adfc], 0xffffffff
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push dword [0x10130954]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x10130954], 0
mov eax, dword [0x10030924]
cmp eax, 0xffffffff
je 0x10003881
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
mov dword [0x10030924], 0xffffffff
mov eax, dword [0x10030928]
test eax, eax
je 0x1000389b
push eax
call dword [sym.imp.WS2_32.dll_WSACloseEvent]
mov dword [0x10030928], 0
mov byte [0x10130958], 0
xor al, al
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000c666
mov esp, ebp
pop ebp
ret 8
push 0x80000
push 0
push 0x1003092c
call fcn.1000e330
add esp, 0xc
mov dword [0x100b092c], 0
push 0x80000
push 0
push 0x100b0930
call fcn.1000e330
add esp, 0xc
mov dword [0x10130930], 0
push 0x1013adfc
push 0
push 0x10030920
push 0x100042f0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 4]
mov dword [0x10130954], eax
xor ecx, ebp
mov byte [0x10130958], 1
mov al, 1
pop esi
call fcn.1000c666
mov esp, ebp
pop ebp
ret 8