Function at 0x10011582
Capabilities:
Get hostname
Initialize winsock library
Resolve dns

Disassembly:
lds esp, [edx - 0x4aa7c6e7]
inc ebx
mov ebp, 0xa8f2280c
xchg edi, eax
add dword [edx + 0x23], 0x60
adc ax, 0xc5eb
loopne 0x100114d2
cdq
mov eax, 0x9f434d84
cmpsb byte [esi], byte es:[edi]
sar dword [eax - 0x30a3c840], 1
xchg ebp, eax
in al, 0xd0
aaa
shr ebx, cl
xor al, 0x78
jecxz 0x1001154e
rcl dword [esi], 0xe9
mov word [ebx - 0xb], ds
mov dh, 0x55
dec esi
out dx, al
std
pushal
pop ebx
sub bl, ch
push edi
mov al, 0x56
lahf
inc ecx
add byte [eax - 0x3b], 0x6a
adc byte [edx + 5], ah
int3
dec esp
test dword [ebx - 0x3a], edx
js 0x100114c5
mov cl, 0xed
xchg ebx, eax
aad 0x11
inc edx
ja 0x10011549
sub edx, esp
lahf
scasd eax, dword es:[edi]
cmpsb byte [esi], byte es:[edi]
sahf
in eax, 0x95
xor dl, byte [edx - 0x78]
mov dh, 0x9a
sub al, 0x90
cmp dword [ecx - 0x7a], edi
pop ss
fstp st(7)
loop 0x100115c8
int3
or eax, 0x11fc17aa
adc eax, 0xec3c2484
neg byte [ebx]
sub ebx, esp
pop edx
jne 0x1001153d
popfd
ret 4
push ebp
mov ebp, esp
sub esp, 0x298
mov eax, dword [0x10170c30]
pushfd
test byte [0x100115fb], 0x8d
jne 0x100115fc
in eax, dx
jnp 0x100115e9
shl ah, cl
xor dword [ecx + 0x7b243652], ebp
aad 0xb0
js 0x100115d1
push cs
mov esi, edx
cmp dh, cl
push ecx
dec byte gs:[edi + ebx*2 - 0x156bd7bc]
mov esi, 0x8fa4c16a
mov eax, dword [0x6842ec14]
cmpsb byte [esi], byte es:[edi]
fcmovnu st(0), st(2)
mov al, 0x8d
sub al, 0x1c
int 0x1d
loop 0x1001156a
sar byte [ecx], 1
jns 0x100115fa
inc ebx
in eax, 0xf
mov bh, 0xe8
les ebx, [ebx]
aad 0xaa
rcl byte [eax + ebx*4 - 0x112314a5], cl
in eax, dx
jae 0x100115d3
cli
mov edx, dword [ebp - 0x4446e89f]
loopne 0x10011663
mov ebx, 0x6aaf77e0
jo 0x10011634
scasd eax, dword es:[edi]
push 0x70
inc esp
dec eax
push ss
mov ebx, 0xf2fae2af
sub eax, 0x26e61a2b
out 0x26, al
popfd
xor eax, ebp
pushfd
test byte [0x10011620], 0xbe
jne 0x10011621
adc byte [eax], 0x2c
pop ebp
cmp al, 0xf9
cmc
mov al, 0x8f
pop ebx
xlatb
pop esp
fsub dword [edx + edx + 0x5386d9b4]
and ah, bh
cwde
insb byte es:[edi], dx
inc ebx
popfd
mov dword [ebp - 4], eax
push esi
lea eax, [ebp - 0x298]
pushfd
test byte [0x10011664], 0xd6
jne 0x10011765
push ebp
mov edx, 0xd332751a
test dword [esi + 0x269e89c0], 0x80a5b93e
in al, 0x1d
push esi
mov ah, 0x4f
push eax
push ebx
out dx, al
test dword [ecx - 0x25], edx
adc ebx, ecx
std
test byte [eax], ah
and ah, byte [esi + 0x1001f703]
jb 0x10011651
salc
push ecx
clc
jge 0x1001169e
mov edi, 0x9ee3c21b
je 0x100116a0
jno 0x100115fd
pop edi
daa
out 0x72, eax
mov esp, 0x7081aa99
test bl, ah
fidiv word [ebx - 0x62]
xchg edi, eax
sti
insb byte es:[edi], dx
pop esp
in eax, 0xf2
fcmovu st(0), st(2)
mov word [edx], ds
call 0x88908dc0
mov esp, 0x4ee7a6b3
cmp dword [esi + 0x6806e9fa], ebx
mov edi, 0xb67456db
ficomp dword [0x1096c229]
sbb eax, 0x1096c229
ret 0x1096
fistp qword [edi - 0x4b33bfab]
xchg dword [ecx], esp
cmpsd dword [esi], dword es:[edi]
and eax, 0xb9d56a0
mov dh, 0xa3
cdq
test eax, 0x2d869f40
and dword [ecx], ecx
sub dword [esi + 0x21], 0x45de6b18
inc eax
lahf
xchg byte [0x6e810921], ch
and dword [eax], ebx
imul ebx, esi, 0x45
mov eax, 0xf7968959
fucomi st(5)
das
pop ecx
mov dword [esi + 0x2feddbf7], edx
popal
js 0x100116c3
nop
xor byte [esi + ebp*4 - 0x3e0d2484], 0x11
mov dl, 0x83
out 0x73, al
or eax, esp
pop ebp
aam 0x31
xchg dword [ebx - 3], edi
jle 0x10011729
push esp
cli
fcomp qword [ecx + 0x4d]
jecxz 0x100116ab
in al, dx
xor dl, byte [ebp - 0x4d]
jle 0x100116b5
dec esp
push eax
cmp ebp, edi
push edi
mov al, byte [0x6c2e6281]
sbb byte [ebp - 0x2a], cl
dec esi
popfd
pushal
jbe 0x10011714
insb byte es:[edi], dx
jecxz 0x1001175e
jg 0x10011766
pop esi
popfd
rcl dword [ebp + esi*4 + 0x3bc2b640], cl
stc
outsd dx, dword [esi]
jl 0x100116a9
fild dword cs:[ebp + 0x4efda305]
cmpsd dword [esi], dword es:[edi]
lodsb al, byte [esi]
mov edi, 0xa4e98b61
jge 0x1001177d
and ebp, dword [ebp + 0x7a86b36]
pop es
or ecx, dword [ecx]
sub al, 0xde
dec ecx
xor byte [edx], dl
aaa
pop ss
xor byte [esi - 0x35], 0x93
push cs
pop ebx
push 0x719718cb
xchg ebx, eax
js 0x100117a3
or cl, byte [edi - 0x2c5a43ce]
loopne 0x1001178e
mov byte [edx + 0x63], cl
pop ecx
jo 0x1001171d
jcxz 0x100117a8
cmp al, 0xe7
lds ebp, [edi + 0xdccfd78]
movsd dword es:[edi], dword [esi]
aaa
jbe 0x100117d1
push ebx
sbb eax, 0xf3c5b71e
popfd
push eax
push 0x202
mov esi, ecx
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x100117e4
xor eax, eax
pushfd
test byte [0x1001179b], 0xb1
jne 0x1001179c
wait
pop ss
add dword [eax], edx
mov cl, 0x75
sbb byte [eax - 0x7f], bh
adc byte [ecx - 0x7e87e78b], dh
js 0x10011707
in eax, dx
push edx
mov esi, 0x2b80d8d4
cmc
mov bh, 0x94
add eax, 0xfb2b270b
cld
xchg esi, eax
enter 0x37ea, 0x33
lodsd eax, dword [esi]
popfd
jmp 0x10011a90
test byte [0x100117e2], 0xca
add eax, 0x100117e2
retf 0x3775
adc dl, cl
jne 0x100117e3
jl 0x1001172e
in al, dx
cmp al, 0
cmpsb byte [esi], byte es:[edi]
out dx, eax
mov al, 0x4a
jge 0x1001180b
inc edx
xor bh, byte [esi + 0x40c6b621]
mov esi, 0x40c6b621
mov dh, 0xc6
inc eax
sbb eax, 0xf9856320
mov ebp, 0xb99158a7
push ecx
jno 0x100117b9
or dword [edx - 0x39], ebx
jne 0x1001179d
pushal
jge 0x10011780
jns 0x100117a4
shl byte [ecx], cl
and dword [esi + 0x7d55334c], ecx
jae 0x100117bb
out 8, al
in eax, 0xb0
popfd
push edi
push 0x104
xor edi, edi
pushfd
test byte [0x100118b3], 0x47
jne 0x100118b4
and dword [ecx], edx
mov ebx, 0x744baca0
pop ecx
aam 0x1c
add ah, dl
dec esp
in eax, 0x28
clc
clc
dec esi
jae 0x10011819
inc edi
in al, 0xfe
sub al, 0xb0
in eax, dx
in eax, 0x26
and ch, byte fs:[ebp + 0x27262910]
adc byte [ecx], ch
daa
mov dh, 0x8e
out dx, eax
add edx, dword [edx - 0x131816bb]
inc eax
sal byte [edx - 0x2e], 0xf3
or eax, 0xf443d799
mov eax, 0xe446bba0
jns 0x100117d7
dec dword [edx - 0x19]
push ebx
push esp
cmc
xchg ebp, eax
cwde
fcompp
mov ch, 0
or dword [edi + edx], esp
sar dword [esi], 1
and al, byte [eax]
scasb al, byte es:[edi]
sub al, 0xb6
sub al, 0x94
outsd dx, dword [esi]
mov edi, 0x8e4582ff
xchg esp, eax
and eax, 0x1cdb589b
mov edx, 0x9f9a9ac4
mov ecx, 0x29bdfe0
xor esp, edx
mov dword [ebp + esi - 0x20], 0x5fb7b2e6
pop edi
jno 0x100118d3
xchg edi, eax
mov ebp, 0x44902783
pop edx
loop 0x100118ae
jns 0x1001183c
pushal
add dword [ebx + 0x3a], ecx
or al, 0x58
mov edx, 0xd2e9deba
sub dl, 0xd2
imul edx, dword [edi], 0x27
int 0x8f
push 0x6300c2dd
cmp al, 0xfc
jns 0x100118b7
xor byte [edi + 0x1c], cl
scasd eax, dword es:[edi]
dec edi
sbb al, 0xaf
push ebp
mov ebp, 0x4e017a98
inc edx
sub cx, cx
adc al, 0x82
add al, 0x84
xor al, 0xa1
jae 0x10011918
imul ebx, ecx, 0x8a752f21
fldenv [ecx]
das
jne 0x1001183e
popfd
lea eax, [ebp - 0x108]
push edi
push eax
call fcn.1011df60
add esp, 0xc
push 0x103
lea eax, [ebp - 0x108]
push eax
pushfd
test byte [0x10011907], 0x14
jne 0x10011a08
clc
invalid
add eax, 0x10011907
adc al, 0xf
test dword [ecx], ebp
add dword [eax], eax
add byte [ecx + 0x1fa860cd], bl
add byte [eax], al
cdq
int 0x60
test al, 0x1f
and esp, ebp
fistp dword [eax + ecx - 0x34]
mov ecx, 0xef05fea6
adc bl, byte [eax + 0x43]
pop eax
inc ebx
insb byte es:[edi], dx
outsb dx, byte [esi]
arpl word [esi + edx], bx
dec esi
add edx, dword [ebp - 0x4d635fd3]
jb 0x10011961
or dword [edi + esi], eax
mov edx, dword [ebp + 0x3c6fff5f]
jge 0x1001189a
jae 0x10011960
push esp
add byte [ebp + eax*2 - 0x2f], bh
adc ebx, esp
xchg esi, eax
sbb cl, byte [edx - 0x28]
dec esp
rcl dword [ecx + ebp*2 + 0x70]
mov edi, 0x88875ad6
outsd dx, dword [esi]
adc dl, ah
jns 0x10011936
add byte [edi*2 - 0x43c48475], 0x21
int1
cmp dh, bl
insb byte es:[edi], dx
dec edi
mov dword [0x89473bf], eax
je 0x10011950
mov edi, 0x74089473
adc al, 0x78
jbe 0x100118dd
js 0x100119b4
sahf
add eax, 0xafe27d20
jb 0x10011919
pop esp
daa
mov bh, 0x25
inc esi
xor eax, 0x386c9c01
push 0x1f
cmp byte [edx + 0x1f], ch
mov ch, 0xe9
mov byte [esi - 0x3f], ah
movsd dword es:[edi], dword [esi]
mov ebp, 0xb73114e4
shl dword [ebp + 0x3114e4bd], 0xb7
sbb dl, byte [ebx + 0x73]
jae 0x100118f0
mov ds, word [eax]
pop edx
inc ecx
sbb byte [edx + 0x41], bl
lea esi, [edx + 0x4c64a622]
cmpsb byte [esi], byte es:[edi]
dec esp
stosd dword es:[edi], eax
or eax, 0x5a
popfd
fadd qword [ecx]
pop ecx
test dword [ebp - 0x2ab7afcb], edx
mov edi, 0x36719557
lds esp, [ebp - 0x20316aa0]
xchg ecx, eax
mov eax, 0xed2c1fda
or al, 0x80
xor esi, edx
xor byte [edi + 0x3a], cl
push ebp
sub dl, byte [ebx + 0x6c]
pop es
xchg ebp, eax
stosd dword es:[edi], eax
pop edx
push 3
enter 0xffffffffffffe915, 0xffffffffffffffba
insd dword es:[edi], dx
aaa
in eax, 0x63
mov edi, es
xor eax, 0x882618de
les eax, [ebx + 1]
add byte [ebx + 0x49], ah
mov byte [edx], ah
in eax, 0x75
mov dl, 0xb0
add ah, byte [esi]
mov ebp, 0x1dc7f50e
jne 0x10011968
mov al, 2
mov ebp, 0x1dc7f50e
jb 0x10011962
mov al, 0x8a
insb byte es:[edi], dx
das
je 0x10011957
add byte [ebx], bl
call 0x5b4c5c1a
or ecx, edi
mov ebx, 0x79cbea71
push ebp
pop ds
insb byte es:[edi], dx
mov dl, byte [edx]
dec esp
adc eax, dword [edx]
or byte [edi], 0xe7
inc eax
sbb eax, esi
stc
out dx, eax
or al, ch
push cs
jo 0x100119ee
mov esi, 0x4ff360d6
dec edi
neg byte [eax + 6]
jge 0x10011a2f
pop ss
adc byte [0xdeb4a932], dh
xchg edi, eax
or dword [eax - 0x483d7aa6], eax
inc esp
lodsd eax, dword [esi]
lahf
imul ebx, dword [edi], 0x24
popfd
call dword [sym.imp.WS2_32.dll_gethostname]
lea eax, [ebp - 0x108]
push eax
pushfd
test byte [0x10011a20], 0x40
jne 0x10011a21
pushal
popfd
call dword [sym.imp.WS2_32.dll_gethostbyname]
cmp eax, edi
jne 0x10011a36
call dword [sym.imp.WS2_32.dll_WSACleanup]
arpl word [eax + edx], dx
xor eax, eax
jmp 0x10011a8f
mov ecx, dword [eax + 0xc]
xor edx, edx
cmp dword [ecx], edi
je 0x10011a77
cmp edx, 9
jge 0x10011a77
mov ecx, dword [ecx + edx*4]
mov ecx, dword [ecx]
mov dword [esi + edx*4 + 0x3624], ecx
mov ecx, dword [eax + 0xc]
inc edx
cmp dword [ecx + edx*4], edi
pushfd
test byte [0x10011a73], 0xf2
jne 0x10011a74
jae 0x100119e8
cmc
sbb al, 0x30
cmp eax, 0x70353e06
push cs
jl 0x10011a97
sbb eax, 0xdcbc8f77
popfd
jne 0x10011a3f
mov dword [esi + edx*4 + 0x3624], edi
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
cmp dword [esi + 0x3624], edi
setne al
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.1011e48a
out dx, eax
leave
adc byte [eax], al
leave
ret