Function at 0x4018b0
Capabilities:
Resolve dns

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov bx, dx
push edi
mov word [ebp - 0xa], bx
mov edi, ecx
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [eax], 0
test edi, edi
je 0x401b24
push 0x1e4
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov esi, eax
push 0x1e4
test esi, esi
je 0x401b4a
push 0
push esi
call sub.VCRUNTIME140.dll_memset
mov ecx, str._UNKNOWN_
mov edx, esi
add esp, 0xc
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x401911
push edi
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [ebp - 8], eax
cmp eax, 0xffffffff
jne 0x401a53
push edi
test bx, bx
jne 0x401b2e
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov ebx, eax
test ebx, ebx
je 0x401b38
push 0x100
push dword [ebx]
push esi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [ebx + 0xc]
add esp, 0xc
cmp dword [eax], 0
je 0x4019a7
lea ecx, [esi + 0x100]
xor edi, edi
mov dword [ebp - 0xc], ecx
nop
cmp edi, 0x20
jge 0x4019a7
mov eax, dword [edi + eax]
push 0x18
mov eax, dword [eax]
push eax
mov dword [edi + esi + 0x1c0], eax
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
push dword [ebp - 0xc]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov eax, dword [ebx + 0xc]
add edi, 4
add dword [ebp - 0xc], 0x18
add esp, 0xc
cmp dword [edi + eax], 0
jne 0x401970
cmp word [0x407414], 0
je 0x401b11
xor eax, eax
lea ebx, [esi + 0x1c0]
mov dword [ebp - 0x10], eax
cmp dword [ebx], eax
je 0x401b11
lea ecx, [esi + 0x100]
mov dword [ebp - 0xc], ecx
cmp eax, 8
jge 0x401b11
push 2
push 4
push ebx
call dword [sym.imp.WS2_32.dll_gethostbyaddr]
mov edi, eax
test edi, edi
je 0x401a16
cmp dword [edi], 0
je 0x401a16
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [eax], 0
push dword [edi]
push esi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
add esp, 8
test eax, eax
je 0x401a2d
push dword [edi]
push esi
push str.DNS_fwd_rev_mismatch:__s____s
jmp 0x401a25
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push dword [ebp - 0xc]
push str.Warning:_inverse_host_lookup_failed_for__s:_h_errno__d
call fcn.00401470
add esp, 0xc
mov eax, dword [ebp - 0x10]
add ebx, 4
add dword [ebp - 0xc], 0x18
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebx], 0
jne 0x4019d1
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040377b
mov esp, ebp
pop ebp
ret
push 0xc0
mov dword [esi + 0x1c0], eax
push dword [ebp - 8]
call dword [sym.imp.WS2_32.dll_inet_ntoa]
mov ebx, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
push eax
lea eax, [esi + 0x100]
push eax
call ebx
add esp, 0xc
cmp word [ebp - 0xa], 0
jne 0x401b11
cmp word [0x407414], 0
je 0x401b11
push 2
push 4
lea eax, [ebp - 8]
push eax
call dword [sym.imp.WS2_32.dll_gethostbyaddr]
test eax, eax
jne 0x401ab4
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push edi
push str._s:_inverse_host_lookup_failed:_h_errno__d
jmp 0x401b09
push 0xfe
push dword [eax]
push esi
call ebx
add esp, 0xc
push esi
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov edi, eax
test edi, edi
je 0x401afc
mov ecx, dword [edi + 0xc]
cmp dword [ecx], 0
je 0x401afc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [eax], 0
push dword [edi]
push esi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
add esp, 8
test eax, eax
je 0x401b11
push dword [edi]
push esi
push str.DNS_fwd_rev_mismatch:__s____s
jmp 0x401b09
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push esi
push str.Warning:_forward_host_lookup_failed_for__s:_h_errno__d
call fcn.00401470
add esp, 0xc
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040377b
mov esp, ebp
pop ebp
ret
push str.gethostpoop_fuxored
call fcn.00401850
push str.Cant_parse__s_as_an_IP_address
call fcn.00401850
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push edi
push str._s:_forward_host_lookup_failed:_h_errno__d
call fcn.00401850
push str.Hmalloc__d_failed
call fcn.00401850
int3