Function at 0x1f8dffdb
Capabilities:
Resolve dns

Disassembly:
push 0x30
mov eax, 0x1f963db3
call fcn.1f8a600e
mov dword [ebp - 0x1c], ecx
mov esi, dword [sym.imp.msvcrt.dll_wcschr]
and dword [ebp - 0x18], 0
push 0x5c
push dword [ebp + 8]
mov byte [ebp - 0xd], 0
call esi
mov edi, eax
pop ecx
pop ecx
test edi, edi
jne 0x1f8e0038
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8e002e
test dword [eax + 0x1c], 0x8000
je 0x1f8e002e
push 0x1f87ca58
push 0x4b
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
xor al, al
call fcn.1f8a60fa
ret 4
push 0x24
push dword [ebp + 8]
call esi
pop ecx
pop ecx
test eax, eax
jne 0x1f8e0063
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8e002e
test dword [eax + 0x1c], 0x8000
je 0x1f8e002e
push 0x1f87ca58
push 0x4c
jmp 0x1f8e0023
sub eax, edi
sar eax, 1
mov esi, eax
jne 0x1f8e0088
push 0
push 0x54f
push 0x1f875c34
push 0x7df
push 0x1f87cac8
call fcn.1f8a7bdf
jmp 0x1f8e002e
push 2
pop ebx
xor ecx, ecx
lea eax, [esi + 1]
mov edx, ebx
add edi, ebx
mul edx
seto cl
push 0
neg ecx
or eax, ecx
lea ecx, [ebp + 0xb]
push ecx
push eax
call sym.WsmSvc.DLL_public:_static_void____stdcall_WSManMemory::Alloc_unsigned_int__class_TestSystem::CallSite_const___enum_TestSystem::Mode_
push eax
lea ecx, [ebp - 0x14]
call fcn.1f898885
and dword [ebp - 4], 0
cmp dword [ebp - 0x14], 0
jne 0x1f8e00f4
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8e00e3
test dword [eax + 0x1c], 0x8000
je 0x1f8e00e3
push 0x1f87ca58
push 0x4d
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1f8fe52c
jmp 0x1f8e002e
lea eax, [esi - 1]
push eax
push edi
push esi
push dword [ebp - 0x14]
call fcn.1f897e99
test eax, eax
jge 0x1f8e0123
push 0
push 0x54f
push 0x1f87cd20
push 0x7f1
push 0x1f87cac8
call fcn.1f8a7bdf
jmp 0x1f8e00e3
push 8
pop ecx
xor eax, eax
lea edi, [ebp - 0x3c]
rep stosd dword es:[edi], eax
and dword [ebp - 0x38], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x3c]
push eax
push 0
push dword [ebp - 0x14]
xor edi, edi
inc edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x30], 6
mov dword [ebp - 0x3c], ebx
call dword [sym.imp.WS2_32.dll_GetAddrInfoW]
test eax, eax
je 0x1f8e0193
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8e017e
test dword [eax + 0x1c], 0x8000
je 0x1f8e017e
push 0x1f87ca58
push 0x4e
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
xor bl, bl
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1f8fe52c
mov al, bl
jmp 0x1f8e0030
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x14]
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, ebx
test cx, cx
jne 0x1f8e019e
sub eax, esi
sar eax, 1
je 0x1f8e01d0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0xa22c]
push 0xffffffffffffffff
push eax
push 0xffffffffffffffff
push edx
push edi
push 0x7f
call dword [sym.imp.KERNEL32.dll_CompareStringW]
cmp eax, ebx
jne 0x1f8e01f7
mov byte [ebp - 0xd], 1
jmp 0x1f8e01f7
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8e01f7
test dword [eax + 0x1c], 0x8000
je 0x1f8e01f7
push 0x1f87ca58
push 0x4f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
push dword [ebp - 0x18]
call dword [sym.imp.WS2_32.dll_FreeAddrInfoW]
mov bl, byte [ebp - 0xd]
jmp 0x1f8e0180