Function at 0x1001cc5a
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
aam 0x36
mov byte [ebp - 0x2b], 0x2e
mov byte [ebp - 0x2a], 0x31
mov byte [ebp - 0x29], 0x30
mov byte [ebp - 0x28], 0x38
mov byte [ebp - 0x27], 0x2e
mov byte [ebp - 0x26], 0x31
mov byte [ebp - 0x25], 0x36
mov byte [ebp - 0x24], 0x36
mov byte [ebp - 0x23], 0
xor eax, eax
mov dword [ebp - 0x22], eax
mov dword [ebp - 0x1e], eax
mov dword [ebp - 0x1a], eax
mov dword [ebp - 0x16], eax
mov word [ebp - 0x12], ax
mov byte [ebp - 0x50], 0x39
mov byte [ebp - 0x4f], 0x39
mov byte [ebp - 0x4e], 0x36
mov byte [ebp - 0x4d], 0x39
mov byte [ebp - 0x4c], 0
xor ecx, ecx
mov dword [ebp - 0x4b], ecx
mov dword [ebp - 0x47], ecx
mov dword [ebp - 0x43], ecx
mov dword [ebp - 0x3f], ecx
mov dword [ebp - 0x3b], ecx
mov dword [ebp - 0x37], ecx
mov word [ebp - 0x33], cx
mov byte [ebp - 0x31], cl
mov byte [ebp - 0x70], 0x35
mov byte [ebp - 0x6f], 0x38
mov byte [ebp - 0x6e], 0x31
mov byte [ebp - 0x6d], 0x36
mov byte [ebp - 0x6c], 0
xor edx, edx
mov dword [ebp - 0x6b], edx
mov dword [ebp - 0x67], edx
mov dword [ebp - 0x63], edx
mov dword [ebp - 0x5f], edx
mov dword [ebp - 0x5b], edx
mov dword [ebp - 0x57], edx
mov word [ebp - 0x53], dx
mov byte [ebp - 0x51], dl
mov eax, dword [ebp + 0xc]
movzx ecx, word [eax + 2]
push ecx
call dword [sym.imp.WS2_32.dll_ntohs]
movzx edx, ax
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 0x8ae
jne 0x1001cdd6
push 0
push 0x20
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x30]
push ecx
push 0x100528b0
lea edx, [ebp - 0x30]
push edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0
push 0x20
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x50]
push ecx
push str.1024
lea edx, [ebp - 0x50]
push edx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 4], eax
lea edx, [ebp - 0x50]
push edx
call fcn.1003abe3
add esp, 4
mov dword [ebp - 0x80], eax
movzx eax, word [ebp - 0x80]
push eax
call dword [sym.imp.WS2_32.dll_htons]
mov ecx, dword [ebp + 0xc]
mov word [ecx + 2], ax
push 0xc
call fcn.10030377
add esp, 4
mov dword [ebp - 0x74], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0x74], 0
je 0x1001cd9f
mov ecx, dword [ebp - 0x74]
call fcn.10021aa0
mov dword [ebp - 0x78], eax
jmp 0x1001cda6
mov dword [ebp - 0x78], 0
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x84], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x84]
mov dword [0x100699f8], eax
push 0x6d5c7962
push 0x13fa0f9d
mov ecx, dword [0x100699f8]
call fcn.10021ae0
cmp dword [ebp - 0x7c], 0x16b8
jne 0x1001ce51
push 0
push 0x20
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x30]
push edx
push str.Error
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0
push 0x20
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x70]
push edx
push 0x100528c4
lea eax, [ebp - 0x70]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x30]
push ecx
call dword [sym.imp.WS2_32.dll_inet_addr]
mov edx, dword [ebp + 0xc]
mov dword [edx + 4], eax
lea eax, [ebp - 0x70]
push eax
call fcn.1003abe3
add esp, 4
mov dword [ebp - 0x88], eax
movzx ecx, word [ebp - 0x88]
push ecx
call dword [sym.imp.WS2_32.dll_htons]
mov edx, dword [ebp + 0xc]
mov word [edx + 2], ax
call fcn.1001c050
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [0x100699f4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10030913
mov esp, ebp
pop ebp
ret 0xc