Function at 0x10027240
Capabilities:
Resolve dns
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1004ed7d
push eax
mov dword fs:[0], esp
sub esp, 0xa8
push ebx
push str.Dnsapi.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor ebx, ebx
cmp eax, ebx
je 0x10027281
push str.DnsQuery_A
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
mov dword [esp + 0x54], eax
jne 0x10027299
xor eax, eax
pop ebx
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
add esp, 0xb4
ret
push ebp
push esi
xor ebp, ebp
push edi
mov dword [esp + 0x40], ebp
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0xc0], ebx
call fcn.10045d33
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0xc8]
mov eax, dword [eax + 8]
cmp eax, ebx
mov byte [esp + 0xc0], 1
jle 0x100274c3
mov edi, edi
test ebx, ebx
jl 0x100274ec
cmp ebx, eax
jge 0x100274ec
mov ecx, dword [esp + 0xc8]
mov edx, dword [ecx + 4]
lea eax, [edx + ebx*4]
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.10008e60
lea esi, [eax + 0x10]
add esp, 4
mov dword [esp + 0x2c], esi
mov eax, dword [esi - 0xc]
test eax, eax
mov byte [esp + 0xc0], 2
jl 0x100273b1
push 0x10050f48
push esi
call fcn.10038222
add esp, 8
test eax, eax
je 0x100273b1
sub eax, esi
mov edi, eax
cmp edi, 0xffffffff
je 0x100273b1
mov eax, dword [esi - 0xc]
inc edi
test eax, eax
jl 0x100273b1
push 0x10052a10
push esi
call fcn.10038222
add esp, 8
test eax, eax
je 0x100273b1
sub eax, esi
cmp eax, 0xffffffff
je 0x100273b1
cmp eax, edi
jl 0x100273b1
sub eax, edi
push eax
push edi
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x38]
call fcn.1000c890
mov edi, dword [esp + 0x18]
push edi
mov byte [esp + 0xc4], 3
call dword [sym.imp.WS2_32.dll_inet_addr]
cmp eax, 0xffffffff
jne 0x100273dc
lea eax, [edi - 0x10]
mov byte [esp + 0xc0], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100273b1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
add esi, 0xfffffff0
mov byte [esp + 0xc0], 1
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10027487
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
jmp 0x10027487
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x40]
call fcn.100271d0
push 0x10050c04
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x18]
push edx
call fcn.1000d420
add esp, 0xc
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0xc8], 4
call fcn.10003080
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1002743f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [edi - 0x10]
mov byte [esp + 0xc0], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027461
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
add esi, 0xfffffff0
mov byte [esp + 0xc0], 1
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10027483
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov ebp, dword [esp + 0x40]
mov eax, dword [esp + 0xc8]
mov eax, dword [eax + 8]
inc ebx
cmp ebx, eax
jl 0x100272e0
test ebp, ebp
je 0x100274c3
mov eax, dword [esp + 0x44]
sub eax, ebp
sar eax, 2
cmp eax, 1
jbe 0x100274c3
lea eax, [ebp + eax*4 - 4]
push eax
lea ecx, [esp + 0x38]
push ecx
lea ecx, [esp + 0x44]
call fcn.10027180
mov ebp, dword [esp + 0x40]
call fcn.10045d33
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x2c], eax
mov byte [esp + 0xc0], 5
xor edi, edi
mov esi, ebp
mov bl, 6
test ebp, ebp
jne 0x100274f1
xor eax, eax
jmp 0x100274fa
jmp fcn.100450f9
mov eax, dword [esp + 0x44]
sub eax, ebp
sar eax, 2
cmp edi, eax
jge 0x10027554
push 0x10050c04
lea eax, [esp + 0x14]
push esi
push eax
call fcn.1000d420
add esp, 0xc
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], bl
call fcn.10003080
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1002754e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
inc edi
add esi, 4
jmp 0x100274e4
push str.zen.spamhaus.org
lea ecx, [esp + 0x98]
call fcn.100047c0
push str.dnsbl_2.uceprotect.net
lea ecx, [esp + 0x9c]
mov byte [esp + 0xc4], 7
call fcn.100047c0
push str.cbl.anti_spam.org.cn
lea ecx, [esp + 0xa0]
mov byte [esp + 0xc4], 8
call fcn.100047c0
push str.dnsbl.njabl.org
lea ecx, [esp + 0xa4]
mov byte [esp + 0xc4], 9
call fcn.100047c0
push str.bl.spamcop.net
lea ecx, [esp + 0xa8]
mov byte [esp + 0xc4], 0xa
call fcn.100047c0
push str.dun.dnsrbl.net
lea ecx, [esp + 0xac]
mov byte [esp + 0xc4], 0xb
call fcn.100047c0
push str.dnsbl_1.uceprotect.net
lea ecx, [esp + 0xb0]
mov byte [esp + 0xc4], 0xc
call fcn.100047c0
push str.dnsbl.sorbs.net
lea ecx, [esp + 0xb4]
mov byte [esp + 0xc4], 0xd
call fcn.100047c0
push str.dnsbl_3.uceprotect.net
lea ecx, [esp + 0xb8]
mov byte [esp + 0xc4], 0xe
call fcn.100047c0
mov byte [esp + 0xc0], 0xf
xor eax, eax
mov edi, dword [esp + 0x40]
test edi, edi
mov ebp, dword [sym.imp.WS2_32.dll_ntohl]
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x54], eax
jne 0x10027651
xor ecx, ecx
jmp 0x10027658
mov ecx, ebx
sub ecx, edi
sar ecx, 2
cmp eax, ecx
jge 0x10028516
mov esi, dword [edi + eax*4]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
sub esi, 0x10
call dword [eax + 0x10]
mov edx, dword [esi + 0xc]
test edx, edx
lea ecx, [esi + 0xc]
jl 0x10027689
cmp eax, dword [esi]
jne 0x10027689
mov eax, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x100276bb
mov ecx, dword [esi + 4]
mov edx, dword [eax]
push 1
push ecx
mov ecx, eax
call dword [edx]
test eax, eax
je 0x1002825b
mov edx, dword [esi + 4]
mov dword [eax + 4], edx
mov ecx, dword [esi + 4]
inc ecx
mov edx, ecx
shr ecx, 2
add esi, 0x10
lea edi, [eax + 0x10]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [eax + 0x10]
mov dword [esp + 0x14], edi
mov ebx, dword [sym.imp.WS2_32.dll_inet_addr]
push edi
mov byte [esp + 0xc4], 0x10
xor esi, esi
call ebx
push eax
call ebp
push str.10.0.0.0
mov dword [esp + 0x14], eax
call ebx
push eax
call ebp
mov ecx, dword [esp + 0x10]
cmp ecx, eax
jb 0x1002770f
push edi
call ebx
push eax
call ebp
push str.10.255.255.255
mov dword [esp + 0x14], eax
call ebx
push eax
call ebp
mov ecx, dword [esp + 0x10]
cmp ecx, eax
ja 0x1002770f
mov esi, 1
mov ebx, dword [sym.imp.WS2_32.dll_inet_addr]
push edi
call ebx
push eax
call ebp
push str.127.0.0.0
mov dword [esp + 0x14], eax
call ebx
push eax
call ebp
mov ecx, dword [esp + 0x10]
cmp ecx, eax
jb 0x10027752
push edi
call ebx
push eax
call ebp
push str.127.255.255.255
mov dword [esp + 0x14], eax
call ebx
push eax
call ebp
mov ecx, dword [esp + 0x10]
cmp ecx, eax
ja 0x10027752
mov esi, 1
mov ebx, dword [sym.imp.WS2_32.dll_inet_addr]
push edi
call ebx
push eax
call ebp
push str.172.16.0.0
mov dword [esp + 0x14], eax
call ebx
push eax
call ebp
mov ecx, dword [esp + 0x10]
cmp ecx, eax
jb 0x10027795
push edi
call ebx
push eax
call ebp
push str.172.31.255.255
mov dword [esp + 0x14], eax
call ebx
push eax
call ebp
mov ecx, dword [esp + 0x10]
cmp ecx, eax
ja 0x10027795
mov esi, 1
mov ebx, dword [sym.imp.WS2_32.dll_inet_addr]
push edi
call ebx
push eax
call ebp
push str.192.168.0.0
mov dword [esp + 0x14], eax
call ebx
push eax
call ebp
mov ecx, dword [esp + 0x10]
cmp ecx, eax
jb 0x100277d3
push edi
call ebx
push eax
call ebp
push str.192.168.255.255
mov dword [esp + 0x14], eax
call ebx
push eax
call ebp
mov ecx, dword [esp + 0x10]
cmp ecx, eax
jbe 0x100277d8
cmp esi, 1
jne 0x100277e0
lea eax, [edi - 0x10]
jmp 0x100280fe
call fcn.10045d33
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x28], esi
mov byte [esp + 0xc0], 0x11
call fcn.10045d33
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x24], eax
mov byte [esp + 0xc0], 0x12
call fcn.10045d33
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
mov byte [esp + 0xc0], 0x13
call fcn.10045d33
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x20], eax
mov eax, dword [edi - 0xc]
test eax, eax
mov byte [esp + 0xc0], 0x14
jg 0x10027858
or ebp, 0xffffffff
jmp 0x10027870
push 0x2e
push edi
call fcn.10039215
add esp, 8
test eax, eax
jne 0x1002786c
or ebp, 0xffffffff
jmp 0x10027870
sub eax, edi
mov ebp, eax
push ebp
push 0
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x20]
call fcn.1000c890
mov ecx, dword [eax]
lea eax, [ecx - 0x10]
add esi, 0xfffffff0
cmp eax, esi
mov byte [esp + 0xc0], 0x15
je 0x100278e1
mov edx, dword [esi + 0xc]
test edx, edx
lea ebx, [esi + 0xc]
jl 0x100278d3
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x100278d3
push eax
call fcn.10008e60
mov dword [esp + 0x14], eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [ebx], eax
dec eax
test eax, eax
jg 0x100278c6
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0x10
mov dword [esp + 0x28], eax
jmp 0x100278e1
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x30]
call fcn.10002bf0
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x14
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027907
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
inc ebp
push ebp
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x1c]
call fcn.1000d3d0
mov ecx, dword [eax]
lea eax, [ecx - 0x10]
lea esi, [edi - 0x10]
cmp eax, esi
mov byte [esp + 0xc0], 0x16
je 0x10027971
mov edx, dword [esi + 0xc]
test edx, edx
lea ebx, [esi + 0xc]
jl 0x10027963
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x10027963
push eax
call fcn.10008e60
mov edi, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [ebx], eax
dec eax
test eax, eax
jg 0x1002795a
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
add edi, 0x10
mov dword [esp + 0x14], edi
jmp 0x10027971
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x1c]
call fcn.10002bf0
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x14
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027997
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov edi, dword [esp + 0x14]
mov eax, dword [edi - 0xc]
test eax, eax
jg 0x100279a7
or ebp, 0xffffffff
jmp 0x100279bf
push 0x2e
push edi
call fcn.10039215
add esp, 8
test eax, eax
jne 0x100279bb
or ebp, 0xffffffff
jmp 0x100279bf
sub eax, edi
mov ebp, eax
push ebp
push 0
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x20]
call fcn.1000c890
mov ecx, dword [eax]
mov esi, dword [esp + 0x24]
lea eax, [ecx - 0x10]
add esi, 0xfffffff0
cmp eax, esi
mov byte [esp + 0xc0], 0x17
je 0x10027a32
mov edx, dword [esi + 0xc]
test edx, edx
lea ebx, [esi + 0xc]
jl 0x10027a24
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x10027a24
push eax
call fcn.10008e60
mov edi, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [ebx], eax
dec eax
test eax, eax
jg 0x10027a17
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
add edi, 0x10
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x14]
jmp 0x10027a32
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x2c]
call fcn.10002bf0
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x14
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027a58
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
inc ebp
push ebp
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x1c]
call fcn.1000d3d0
mov ecx, dword [eax]
lea eax, [ecx - 0x10]
lea esi, [edi - 0x10]
cmp eax, esi
mov byte [esp + 0xc0], 0x18
je 0x10027ac5
mov edx, dword [esi + 0xc]
test edx, edx
lea ebx, [esi + 0xc]
jl 0x10027ab7
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x10027ab7
push eax
call fcn.10008e60
mov edi, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [ebx], eax
dec eax
test eax, eax
jg 0x10027aae
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
add edi, 0x10
mov dword [esp + 0x14], edi
jmp 0x10027ac5
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x1c]
call fcn.10002bf0
mov eax, dword [esp + 0x7c]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x14
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027aeb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov esi, dword [esp + 0x14]
mov eax, dword [esi - 0xc]
test eax, eax
jg 0x10027afb
or ebp, 0xffffffff
jmp 0x10027b13
push 0x2e
push esi
call fcn.10039215
add esp, 8
test eax, eax
jne 0x10027b0f
or ebp, 0xffffffff
jmp 0x10027b13
sub eax, esi
mov ebp, eax
push ebp
push 0
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x20]
call fcn.1000c890
mov ecx, dword [eax]
mov esi, dword [esp + 0x1c]
lea eax, [ecx - 0x10]
add esi, 0xfffffff0
cmp eax, esi
mov byte [esp + 0xc0], 0x19
je 0x10027b85
mov edx, dword [esi + 0xc]
test edx, edx
lea ebx, [esi + 0xc]
jl 0x10027b77
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x10027b77
push eax
call fcn.10008e60
mov edi, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [ebx], eax
dec eax
test eax, eax
jg 0x10027b6e
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
add edi, 0x10
mov dword [esp + 0x1c], edi
jmp 0x10027b85
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x24]
call fcn.10002bf0
mov eax, dword [esp + 0x84]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x14
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027bae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
inc ebp
push ebp
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x1c]
call fcn.1000d3d0
mov ecx, dword [eax]
mov esi, dword [esp + 0x20]
lea eax, [ecx - 0x10]
add esi, 0xfffffff0
cmp eax, esi
mov byte [esp + 0xc0], 0x1a
je 0x10027c20
mov edx, dword [esi + 0xc]
test edx, edx
lea ebp, [esi + 0xc]
jl 0x10027c12
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x10027c12
push eax
call fcn.10008e60
mov edi, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [ebp], eax
dec eax
test eax, eax
jg 0x10027c09
mov ecx, dword [esi]
mov edx, dword [ecx]
push esi
call dword [edx + 4]
add edi, 0x10
mov dword [esp + 0x20], edi
jmp 0x10027c20
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.10002bf0
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x14
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027c49
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x94]
mov dword [esp + 0x10], 0
mov dword [esp + 0x4c], eax
lea esp, [esp]
push 0x10050798
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x58]
push edx
call fcn.1000d420
lea ecx, [esp + 0x28]
push ecx
push eax
lea edx, [esp + 0x70]
push edx
mov byte [esp + 0xd8], 0x1b
call fcn.10013d00
push 0x10050798
push eax
lea eax, [esp + 0x88]
push eax
mov byte [esp + 0xe4], 0x1c
call fcn.1000d420
lea ecx, [esp + 0x48]
push ecx
push eax
lea edx, [esp + 0xb4]
push edx
mov byte [esp + 0xf0], 0x1d
call fcn.10013d00
push 0x10050798
push eax
lea eax, [esp + 0xb0]
push eax
mov byte [esp + 0xfc], 0x1e
call fcn.1000d420
lea ecx, [esp + 0x64]
push ecx
push eax
lea edx, [esp + 0xd4]
push edx
mov byte [esp + 0x108], 0x1f
call fcn.10013d00
add esp, 0x48
push 0x10050798
push eax
lea eax, [esp + 0x78]
push eax
mov byte [esp + 0xcc], 0x20
call fcn.1000d420
mov ecx, dword [esp + 0x58]
push ecx
push eax
lea edx, [esp + 0x94]
push edx
mov byte [esp + 0xd8], 0x21
call fcn.10013d00
add esp, 0x18
mov eax, dword [eax]
mov ebp, dword [esp + 0x14]
lea esi, [eax - 0x10]
add ebp, 0xfffffff0
cmp esi, ebp
mov byte [esp + 0xc0], 0x22
je 0x10027dde
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jl 0x10027dd0
mov ecx, dword [esi]
cmp ecx, dword [ebp]
jne 0x10027dd0
mov eax, dword [ecx]
call dword [eax + 0x10]
mov edx, dword [esi + 0xc]
test edx, edx
lea ecx, [esi + 0xc]
jl 0x10027d7b
cmp eax, dword [esi]
jne 0x10027d7b
mov ebx, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x10027daf
mov ecx, dword [esi + 4]
mov edx, dword [eax]
push 1
push ecx
mov ecx, eax
call dword [edx]
mov ebx, eax
test ebx, ebx
je 0x1002825b
mov edx, dword [esi + 4]
mov dword [ebx + 4], edx
mov ecx, dword [esi + 4]
inc ecx
mov eax, ecx
shr ecx, 2
add esi, 0x10
lea edi, [ebx + 0x10]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
or ecx, 0xffffffff
lea eax, [ebp + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10027dc7
mov ecx, dword [ebp]
mov edx, dword [ecx]
push ebp
call dword [edx + 4]
add ebx, 0x10
mov dword [esp + 0x14], ebx
jmp 0x10027dde
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x1c]
call fcn.10002bf0
mov eax, dword [esp + 0x80]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x21
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027e07
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x20
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027e2d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x90]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x1f
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027e56
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x78]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x1e
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027e7c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x1d
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027ea5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x1c
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027ecb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x1b
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027ef1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x14
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027f17
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov esi, dword [esp + 0x14]
push esi
call dword [sym.imp.WS2_32.dll_gethostbyname]
xor edi, edi
cmp eax, edi
je 0x10028042
mov eax, dword [eax + 0xc]
mov ecx, dword [eax]
mov eax, dword [ecx]
push eax
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea ecx, [esp + 0x34]
call fcn.100047c0
mov eax, dword [esp + 0x30]
cmp dword [eax - 0xc], edi
mov byte [esp + 0xc0], 0x23
jne 0x10027f72
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x14
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x10028038
push 8
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x38]
call fcn.1001ef20
mov eax, dword [eax]
push str.127.0.0.
push eax
call fcn.10038043
add esp, 8
test eax, eax
mov eax, dword [esp + 0x34]
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10027fb5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test bl, bl
jne 0x1002801c
push 0x10050713
lea ecx, [esp + 0x1c]
mov dword [esp + 0x3c], edi
call fcn.100047c0
push edi
lea eax, [esp + 0x3c]
push eax
push edi
push edi
push 0x10
push esi
mov byte [esp + 0xd8], 0x24
mov dword [esp + 0x50], edi
call dword [esp + 0x78]
cmp eax, edi
jne 0x10027ff6
mov ebx, dword [esp + 0x38]
cmp ebx, edi
jne 0x10028127
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x23
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1002801c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x14
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10028042
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x4c]
inc eax
add edx, 4
cmp eax, 9
mov dword [esp + 0x10], eax
mov dword [esp + 0x4c], edx
jb 0x10027c60
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x13
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10028085
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100280ab
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x11
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100280d1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100280f7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0xf
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1002811d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x54]
inc eax
jmp 0x10027637
cmp word [ebx + 8], 0x10
jne 0x10028177
mov eax, dword [ebx + 0x18]
cmp eax, edi
jbe 0x10028177
xor esi, esi
cmp eax, edi
jle 0x1002816f
lea ebp, [ebx + 0x1c]
mov edi, edi
mov edx, dword [ebp]
test edx, edx
jne 0x1002814b
xor eax, eax
jmp 0x10028159
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10028150
sub eax, edi
push eax
push edx
lea ecx, [esp + 0x20]
call fcn.10003080
mov eax, dword [ebx + 0x18]
inc esi
add ebp, 4
cmp esi, eax
jl 0x10028140
mov ebx, dword [ebx]
xor edi, edi
cmp ebx, edi
jne 0x10028127
mov eax, dword [esp + 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [esp + 0x54]
mov ebx, dword [esp + 0x40]
lea eax, [ebx + ecx*4]
push 0x10050c04
push eax
lea edx, [esp + 0x64]
push edx
call fcn.1000d420
mov ecx, dword [esp + 0x1c]
lea edx, [esp + ecx*4 + 0xa0]
push edx
push eax
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0xd8], 0x25
call fcn.10013d00
push 0x100528dc
push eax
lea ecx, [esp + 0x54]
push ecx
mov byte [esp + 0xe4], 0x26
call fcn.1000d420
lea edx, [esp + 0x3c]
push edx
push eax
lea eax, [esp + 0x8c]
push eax
mov byte [esp + 0xf0], 0x27
call fcn.10013d00
add esp, 0x30
mov edi, dword [esp + 0xcc]
mov eax, dword [eax]
mov ebp, dword [edi]
lea esi, [eax - 0x10]
sub ebp, 0x10
cmp esi, ebp
mov byte [esp + 0xc0], 0x28
je 0x100282b4
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jl 0x100282a8
mov ecx, dword [esi]
cmp ecx, dword [ebp]
jne 0x100282a8
mov edx, dword [ecx]
call dword [edx + 0x10]
mov edx, dword [esi + 0xc]
test edx, edx
lea ecx, [esi + 0xc]
jl 0x10028249
cmp eax, dword [esi]
jne 0x10028249
mov ebx, esi
mov eax, 1
lock xadd dword [ecx], eax
jmp 0x10028285
mov ecx, dword [esi + 4]
mov edx, dword [eax]
push 1
push ecx
mov ecx, eax
call dword [edx]
mov ebx, eax
test ebx, ebx
jne 0x10028260
jmp fcn.10001d00
mov edx, dword [esi + 4]
mov dword [ebx + 4], edx
mov ecx, dword [esi + 4]
inc ecx
mov eax, ecx
shr ecx, 2
add esi, 0x10
lea edi, [ebx + 0x10]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0xcc]
or ecx, 0xffffffff
lea eax, [ebp + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002829d
mov ecx, dword [ebp]
mov edx, dword [ecx]
push ebp
call dword [edx + 4]
add ebx, 0x10
mov dword [edi], ebx
mov ebx, dword [esp + 0x40]
jmp 0x100282b4
mov ecx, dword [eax - 0xc]
push ecx
push eax
mov ecx, edi
call fcn.10002bf0
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x27
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100282da
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x26
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10028300
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x25
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10028326
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x24
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1002834c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x23
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10028372
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x14
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10028398
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x13
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100283be
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100283e4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x11
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1002840a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10028430
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0xf
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10028456
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push fcn.10002590
push 9
push 4
lea eax, [esp + 0xa0]
push eax
mov byte [esp + 0xd0], 5
call fcn.10037ddd
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1002849a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100284c0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test ebx, ebx
mov dword [esp + 0xc0], 0xffffffff
je 0x1002850c
mov edi, dword [esp + 0x44]
cmp ebx, edi
mov esi, ebx
je 0x10028503
lea esp, [esp]
mov eax, dword [esi]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100284fc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
add esi, 4
cmp esi, edi
jne 0x100284e0
push ebx
call fcn.10045c46
add esp, 4
mov eax, 1
jmp 0x100285d6
mov ecx, dword [esp + 0xcc]
push 2
push 0x100528d8
call fcn.10002bf0
push fcn.10002590
push 9
push 4
lea eax, [esp + 0xa0]
push eax
mov byte [esp + 0xd0], 5
call fcn.10037ddd
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1002856d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
mov byte [esp + 0xc0], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10028593
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test edi, edi
mov dword [esp + 0xc0], 0xffffffff
je 0x100285d4
cmp edi, ebx
mov esi, edi
je 0x100285cb
mov eax, dword [esi]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100285c4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
add esi, 4
cmp esi, ebx
jne 0x100285a8
push edi
call fcn.10045c46
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0xb8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xb4
ret