Function at 0x719dd4e1
Capabilities:
Resolve dns

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xa8
mov eax, dword [0x719f7264]
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 4], eax
push edi
mov dword [ebp - 0x94], ebx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0xf6c]
mov edi, dword [eax + 0x20]
push ebx
push ebx
push 0x10004
mov dword [ebp - 0xa4], edi
call sub.DNSAPI.dll_DnsQueryConfigAllocEx
mov esi, eax
xor eax, eax
cmp esi, ebx
mov dword [ebp - 0x98], esi
je 0x719dd530
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push 1
push eax
call fcn.719c2710
mov edx, eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0xa0], eax
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0xf6c]
mov ebx, dword [eax + 0x20]
add ebx, 0x1b8
test edx, edx
jle 0x719dd5ad
push 0xfffffffffffffffc
pop ecx
lea eax, [esi + 4]
sub ecx, esi
mov esi, dword [ebp - 0xa8]
mov dword [ebp - 0x8c], edx
mov dword [ebp - 0x90], edx
cmp dword [eax], 0
je 0x719dd597
mov edx, dword [edi + 0xc]
add edx, ecx
mov dword [edx + eax], esi
mov edx, dword [eax]
mov dword [esi], edx
add esi, 4
add eax, 4
dec dword [ebp - 0x8c]
jne 0x719dd583
cmp dword [ebp - 0x9c], 0
je 0x719dd5b3
jmp 0x719dd5ce
mov esi, dword [ebp - 0xa8]
mov eax, dword [edi + 0xc]
push 0x7f000001
mov dword [eax], esi
mov dword [ebp - 0x90], 1
call sub.WS2__32_Coverage_C_WINDOWS_system32.DLL_Ordinal_8
mov dword [esi], eax
mov eax, dword [edi + 0xc]
mov ecx, dword [ebp - 0x90]
and dword [eax + ecx*4], 0
cmp dword [ebp - 0x98], 0
je 0x719dd5ef
push dword [ebp - 0x98]
call sub.DNSAPI.dll_DnsApiFree
push 0x7f
lea eax, [ebp - 0x84]
push eax
call fcn.719de9c3
test eax, eax
jne 0x719dd910
lea eax, [ebp - 0x84]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x719dd60e
sub eax, edx
mov dword [ebp - 0x98], eax
je 0x719dd910
xor esi, esi
push esi
lea eax, [ebp - 0x88]
push eax
push esi
push esi
push 1
push 0x719d5757
call sub.DNSAPI.dll_DnsQuery_A
push esi
push esi
push 1
mov dword [ebp - 0x90], eax
call sub.DNSAPI.dll_DnsQueryConfigAllocEx
mov ecx, eax
cmp ecx, esi
mov dword [ebp - 0x8c], ecx
je 0x719dd681
lea eax, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x719dd659
sub ecx, eax
mov dword [ebp - 0x94], ecx
jne 0x719dd681
push dword [ebp - 0x8c]
call sub.DNSAPI.dll_DnsApiFree
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x94], esi
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
lea esi, [eax + ecx + 2]
mov eax, esi
push 4
and eax, 3
pop ecx
sub ecx, eax
add esi, ecx
cmp esi, 0x200
mov dword [ebp - 0x9c], esi
jge 0x719dd8fc
lea ecx, [ebp - 0x84]
mov eax, ebx
mov edx, ecx
sub eax, edx
mov dl, byte [ecx]
mov byte [eax + ecx], dl
inc ecx
test dl, dl
jne 0x719dd6bb
cmp dword [ebp - 0x8c], 0
je 0x719dd723
mov edi, ebx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x719dd6d1
mov ecx, dword [ebp - 0x8c]
mov esi, 0x719dd920
movsw word es:[edi], word [esi]
mov esi, ecx
mov al, byte [ecx]
inc ecx
test al, al
jne 0x719dd6e8
sub ecx, esi
mov edi, ebx
mov eax, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x719dd6f6
push dword [ebp - 0x8c]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call sub.DNSAPI.dll_DnsApiFree
mov esi, dword [ebp - 0x9c]
mov edi, dword [ebp - 0xa4]
mov eax, 0x200
mov dword [edi], ebx
sub eax, esi
add ebx, esi
cmp dword [ebp - 0x90], 0
mov dword [ebp - 0x94], eax
jne 0x719dd8c7
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x719dd8c7
mov dword [ebp - 0x8c], eax
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0xf6c]
mov eax, dword [eax + 0x20]
add eax, 0x128
cmp dword [ebp - 0xa0], eax
jae 0x719dd8a9
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax + 4]
test eax, eax
je 0x719dd893
push 2
mov edi, 0x719dd920
mov esi, eax
pop ecx
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x719dd893
mov dword [ebp - 0x90], 1
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x719dd7a7
mov ecx, dword [ebp - 0x98]
sub eax, esi
lea eax, [eax + ecx + 2]
mov ecx, eax
push 4
and ecx, 3
pop edx
sub edx, ecx
add eax, edx
cmp dword [ebp - 0x94], eax
mov dword [ebp - 0x9c], eax
jl 0x719dd8a9
lea eax, [ebp - 0x84]
mov edx, ebx
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x719dd7e4
mov edi, ebx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x719dd7f1
mov eax, dword [ebp - 0x8c]
mov esi, 0x719dd920
movsw word es:[edi], word [esi]
mov eax, dword [eax + 4]
mov esi, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x719dd80b
mov edi, ebx
sub eax, esi
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x719dd817
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [ebp - 0xa4]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push dword [eax]
push ebx
call sub.DNSAPI.dll_DnsNameCompare_A
test eax, eax
jne 0x719dd893
mov eax, dword [ebp - 0xa4]
mov esi, dword [eax + 4]
mov eax, dword [esi]
test eax, eax
je 0x719dd871
push eax
push ebx
call sub.DNSAPI.dll_DnsNameCompare_A
add esi, 4
test eax, eax
je 0x719dd863
and dword [ebp - 0x90], 0
mov eax, dword [esi]
test eax, eax
jne 0x719dd84e
cmp dword [ebp - 0x90], eax
je 0x719dd893
mov eax, dword [ebp - 0xa0]
mov dword [eax], ebx
add eax, 4
and dword [eax], 0
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x9c]
add ebx, eax
sub dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
test eax, eax
mov dword [ebp - 0x8c], eax
jne 0x719dd755
push 1
push dword [ebp - 0x88]
call sub.DNSAPI.dll_DnsRecordListFree
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0xf6c]
mov eax, dword [eax + 0x20]
jmp 0x719dd912
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0xf6c]
mov eax, dword [eax + 0x20]
and dword [eax + 0xa0], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0xf6c]
mov eax, dword [eax + 0x20]
add eax, 0xa0
mov dword [edi + 4], eax
mov eax, dword fs:[0x18]
jmp 0x719dd8bc
cmp dword [ebp - 0x8c], 0
je 0x719dd910
push dword [ebp - 0x8c]
call sub.DNSAPI.dll_DnsApiFree
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.719c15f6
leave
ret