Function at 0x1001a5b5
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
jmp 0x1001a647
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 4], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 8], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0xc], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x10], eax
fild dword [ebp - 4]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fmul qword [0x10050c0e]
fstp qword [ebp - 0x54]
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
fild dword [ebp - 8]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fadd qword [0x10050c16]
fstp qword [ebp - 0x54]
push 0x80000601
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push 1
mov ebx, 0x168
call fcn.1002f7f0
add esp, 0x10
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [0x100518a5]
test ebx, ebx
je 0x1001a770
push ebx
call fcn.1002efd3
add esp, 4
pop eax
mov dword [0x100518a5], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fadd qword [0x10050c1e]
fstp qword [ebp - 0x54]
push 0x80000601
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push 1
mov ebx, 0x9dc
call fcn.10030340
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x198
call fcn.1002fc60
add esp, 0x10
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [0x100518a9]
test ebx, ebx
je 0x1001a7d9
push ebx
call fcn.1002efd3
add esp, 4
pop eax
mov dword [0x100518a9], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fmul qword [0x10050c26]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
call fcn.10001232
mov dword [0x100518ad], eax
mov dword [0x100518b1], edx
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x168
call fcn.1002f7f0
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0x80000301
push 0
push dword [ebp - 8]
push 1
mov ebx, 0x168
call fcn.1002f7f0
add esp, 0x10
mov dword [ebp - 0x4c], eax
push 0x80000301
push 0
push dword [ebp - 0xc]
push 1
mov ebx, 0x168
call fcn.1002f7f0
add esp, 0x10
mov dword [ebp - 0x50], eax
push 0x80000301
push 0
push dword [ebp - 0x10]
push 1
mov ebx, 0x168
call fcn.1002f7f0
add esp, 0x10
mov dword [ebp - 0x54], eax
push dword [ebp - 0x54]
push 0x100503db
push dword [ebp - 0x50]
push 0x100503db
push dword [ebp - 0x4c]
push 0x100503db
push dword [ebp - 0x48]
push 0x10050c2e
mov ecx, 8
call fcn.100011d6
add esp, 0x20
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x1001a8c0
push ebx
call fcn.1002efd3
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x1001a8d0
push ebx
call fcn.1002efd3
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x1001a8e0
push ebx
call fcn.1002efd3
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x1001a8f0
push ebx
call fcn.1002efd3
add esp, 4
lea eax, [ebp - 0x58]
push eax
call fcn.1001af68
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x1001a90c
push ebx
call fcn.1002efd3
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x1001a91f
mov eax, 0x100502c0
push eax
push 1
mov ebx, 0x164
call fcn.1002fe30
add esp, 0x10
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], edx
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x1001a948
push ebx
call fcn.1002efd3
add esp, 4
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
fild dword [ebp - 0xc]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fild dword [ebp - 8]
fstp qword [ebp - 0x54]
fmul qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], edx
fild dword [ebp - 4]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fild dword [ebp - 8]
fstp qword [ebp - 0x54]
fmul qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x28]
fadd qword [ebp - 0x5c]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
fsub qword [0x10050c35]
fstp qword [ebp - 0x6c]
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], edx
fld qword [ebp - 0x28]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x4c]
fadd qword [ebp - 0x4c]
fild dword [ebp - 4]
fstp qword [ebp - 0x54]
fadd qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x5c]
call fcn.10001232
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
fild qword [ebp - 0x30]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x54]
fmul qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x5c]
fild dword [ebp - 8]
fstp qword [ebp - 0x64]
fsub qword [ebp - 0x64]
fstp qword [ebp - 0x6c]
fld qword [ebp - 0x6c]
call fcn.10001232
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fild dword [ebp - 4]
fstp qword [ebp - 0x54]
fmul qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
fild dword [ebp - 0x34]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
fadd qword [ebp - 0x5c]
fstp qword [ebp - 0x6c]
fld qword [ebp - 0x6c]
call fcn.10001232
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fild dword [ebp - 4]
fstp qword [ebp - 0x54]
fmul qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
fild dword [ebp - 0x34]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
fadd qword [ebp - 0x5c]
fadd qword [0x10050c3d]
fstp qword [ebp - 0x6c]
fld qword [ebp - 0x6c]
call fcn.10001232
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x54]
fmul qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
fild dword [ebp - 0x34]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
fadd qword [ebp - 0x5c]
fstp qword [ebp - 0x6c]
fld qword [ebp - 0x6c]
call fcn.10001232
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
fild qword [ebp - 0x3c]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x54]
fmul qword [ebp - 0x54]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x5c]
fadd qword [0x10050c45]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
call fcn.10001232
mov dword [ebp - 0x40], eax
push 0x80000301
push 0
push dword [ebp - 0x10]
push 0x80000301
push 0
push dword [ebp - 0x40]
push 2
mov ebx, 0x9f8
call fcn.10031bb0
add esp, 0x1c
mov dword [ebp - 0x40], eax
push 0x80000301
push 0
push 0x1b46f
push 0x80000301
push 0
push dword [ebp - 0x40]
push 2
mov ebx, 0xc8
call fcn.10030430
add esp, 0x1c
mov dword [ebp - 0x40], eax
push 0x80000301
push 0
push dword [ebp - 0x40]
push 1
mov ebx, 0x9dc
call fcn.10030340
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0x80000301
push 0
push 0x1c26
push 0x80000301
push 0
push dword [ebp - 0x48]
push 2
mov ebx, 0xcc
call fcn.10031ac0
add esp, 0x1c
mov dword [ebp - 0x40], eax
push 0x80000301
push 0
push dword [ebp - 0x40]
push 1
mov ebx, 0x9dc
call fcn.10030340
add esp, 0x10
mov dword [ebp - 0x50], eax
fild dword [ebp - 0x50]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fsub qword [0x10050c4d]
fstp qword [ebp - 0x58]
fld qword [ebp - 0x58]
call fcn.10001232
mov dword [ebp - 0x40], eax
push 0x80000301
push 0
push dword [ebp - 0x40]
push 1
mov ebx, 0x9dc
call fcn.10030340
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 0x80000301
push 0
push dword [ebp - 0x48]
push 2
mov ebx, 0xcc
call fcn.10031ac0
add esp, 0x1c
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x40]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fdiv qword [0x10050c55]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fsub qword [ebp - 0x20]
ftst
fnstsw ax
test ah, 1
je 0x1001ac07
fchs
fcomp qword [0x1005033d]
fnstsw ax
test ah, 0x41
jne 0x1001ac3b
cmp dword [ebp - 0x44], 0x5f3
je 0x1001ac27
jmp 0x1001ac18
mov eax, 1
cmp eax, 2
jne 0x1001ac27
call fcn.100160cf
jmp 0x1001ac3b
fld qword [ebp - 0x18]
fdiv qword [0x10050c0e]
fstp qword [ebp - 0x4c]
fild dword [ebp - 4]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x4c]
fsub qword [ebp - 0x54]
ftst
fnstsw ax
test ah, 1
je 0x1001ac5e
fchs
fcomp qword [0x1005033d]
fnstsw ax
test ah, 0x41
jne 0x1001ac8d
cmp dword [ebp - 0x44], 0x5f3
je 0x1001ac7e
jmp 0x1001ac6f
mov eax, 1
cmp eax, 2
jne 0x1001ac7e
call fcn.100160cf
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x100518a5]
test eax, eax
jne 0x1001aca2
mov eax, 0x100502c0
push eax
push 1
mov ebx, 0x9dc
call fcn.10030340
add esp, 0x10
mov dword [ebp - 0x50], eax
fild dword [ebp - 0x50]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fsub qword [0x10050c16]
fstp qword [ebp - 0x58]
fild dword [ebp - 8]
fstp qword [ebp - 0x60]
fld qword [ebp - 0x58]
fsub qword [ebp - 0x60]
ftst
fnstsw ax
test ah, 1
je 0x1001ace1
fchs
fcomp qword [0x1005033d]
fnstsw ax
test ah, 0x41
jne 0x1001ad10
cmp dword [ebp - 0x44], 0x5f3
je 0x1001ad01
jmp 0x1001acf2
mov eax, 1
cmp eax, 2
jne 0x1001ad01
call fcn.100160cf
push 0
push 0
push 0
push 0x80000301
push 0
push 3
push getsockname
push 0
mov eax, dword [0x100518a9]
test eax, eax
jne 0x1001ad37
mov eax, 0x100502a0
push eax
push 3
mov ebx, 0x19c
call fcn.100301a0
add esp, 0x28
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x50]
cmp ecx, 0x80000101
jne 0x1001ad6b
and eax, 0xff
jmp 0x1001ad91
cmp ecx, 0x80000201
jne 0x1001ad76
cwde
jmp 0x1001ad91
mov dword [ebp - 0x58], eax
cmp ecx, 0x80000301
je 0x1001ad94
cmp ecx, 0x80000401
jne 0x1001ad99
mov dword [ebp - 0x54], edx
fild qword [ebp - 0x58]
jmp 0x1001adc5
mov dword [ebp - 0x58], eax
fild dword [ebp - 0x58]
jmp 0x1001adc5
cmp ecx, 0x80000501
jne 0x1001ada6
fld dword [ebp - 0x58]
jmp 0x1001adc5
cmp ecx, 0x80000601
je 0x1001adce
push 0x1217
push 0x4013b7a
push 2
call fcn.1002efdf
add esp, 0xc
fstp qword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], edx
fld qword [ebp - 0x58]
fsub qword [0x10050c1e]
fstp qword [ebp - 0x60]
mov ecx, dword [ebp - 0x48]
cmp ecx, reloc.WS2_32.dll_connect
je 0x1001adf7
cmp ecx, 0x80000005
jne 0x1001ae07
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x1001ae07
push ebx
call fcn.1002efd3
add esp, 4
fild dword [ebp - 0xc]
fstp qword [ebp - 0x68]
fld qword [ebp - 0x60]
fsub qword [ebp - 0x68]
ftst
fnstsw ax
test ah, 1
je 0x1001ae1e
fchs
fcomp qword [0x1005033d]
fnstsw ax
test ah, 0x41
jne 0x1001ae4d
cmp dword [ebp - 0x44], 0x5f3
je 0x1001ae3e
jmp 0x1001ae2f
mov eax, 1
cmp eax, 2
jne 0x1001ae3e
call fcn.100160cf
fild qword [0x100518ad]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fdiv qword [0x10050c26]
fstp qword [ebp - 0x54]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x5c]
fld qword [ebp - 0x54]
fsub qword [ebp - 0x5c]
ftst
fnstsw ax
test ah, 1
je 0x1001ae79
fchs
fcomp qword [0x1005033d]
fnstsw ax
test ah, 0x41
jne 0x1001aea8
cmp dword [ebp - 0x44], 0x5f3
je 0x1001ae99
jmp 0x1001ae8a
mov eax, 1
cmp eax, 2
jne 0x1001ae99
call fcn.100160cf
jmp 0x1001aeb8
mov esp, ebp
pop ebp
ret