Function at 0x100fe830
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x5c
mov eax, dword [0x1013d040]
xor eax, esp
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x64]
push ebx
push ebp
push esi
mov esi, dword [esp + 0x6c]
xor ebp, ebp
mov dword [esp + 0x10], eax
mov byte [esp + 0xe], 0
mov byte [esp + 0xf], 0
mov dword [esp + 0x24], 0
push edi
test esi, esi
je 0x100feab1
mov edi, esi
lea ecx, [edi + 1]
nop
mov al, byte [edi]
inc edi
test al, al
jne 0x100fe870
sub edi, ecx
cmp edi, 0x7a1200
ja 0x100feab1
lea eax, [edi*2 + 2]
push eax
call dword [section..data]
mov ebx, eax
add esp, 4
mov eax, dword [esp + 0x14]
mov dword [eax + 0x28], ebx
test ebx, ebx
je 0x100ff03f
lea eax, [edi + 1]
add eax, ebx
mov dword [esp + 0x18], eax
push 0x29
mov byte [eax], 0
lea eax, [esp + 0x40]
push eax
push esi
call fcn.100fd550
mov edx, dword [esp + 0x84]
add esp, 0xc
test al, al
je 0x100fea24
lea ebp, [esp + 0x3c]
mov byte [esp + 0x13], 1
lea ecx, [ebp + 1]
nop
mov al, byte [ebp]
inc ebp
test al, al
jne 0x100fe8e0
lea eax, [esp + 0x3c]
sub ebp, ecx
push str.file
push eax
call fcn.100da940
add esp, 8
test eax, eax
je 0x100fea20
add esi, 5
mov ecx, ebx
sub ecx, esi
nop dword [eax + eax]
mov al, byte [esi]
lea esi, [esi + 1]
mov byte [ecx + esi - 1], al
test al, al
jne 0x100fe910
xor ebp, ebp
push str.file
mov dword [esp + 0x1c], ebp
call dword [0x1013d00c]
mov edi, dword [esp + 0x18]
add esp, 4
mov dword [edi], eax
test eax, eax
je 0x100ff03f
mov al, byte [ebx]
cmp al, 0x2f
jne 0x100feb6e
cmp byte [ebx + 1], al
jne 0x100fe9c5
mov cl, byte [ebx + 2]
add ebx, 2
mov al, cl
cmp cl, 0x2f
je 0x100fe9bd
cmp cl, 0x61
jl 0x100fe965
cmp cl, 0x7a
jle 0x100fe96d
mov al, cl
sub al, 0x41
cmp al, 0x19
ja 0x100fe98b
mov al, byte [ebx + 1]
cmp al, 0x3a
je 0x100fe978
cmp al, 0x7c
jne 0x100fe98b
mov dl, byte [ebx + 2]
mov al, cl
cmp dl, 0x2f
je 0x100fe9bd
cmp dl, 0x5c
je 0x100fe9bd
test dl, dl
je 0x100fe9bd
push 0xa
push ebx
push str.localhost_
call fcn.100dab20
add esp, 0xc
test eax, eax
jne 0x100fe9b7
push 0xa
push ebx
push str.127.0.0.1_
call fcn.100dab20
add esp, 0xc
test eax, eax
je 0x100feab1
mov al, byte [ebx + 9]
add ebx, 9
cmp al, 0x2f
jne 0x100feb6e
mov al, byte [ebx + 1]
lea edx, [ebx + 1]
cmp al, 0x61
jl 0x100fe9d3
cmp al, 0x7a
jle 0x100fe9dd
sub al, 0x41
cmp al, 0x19
ja 0x100feb6e
mov al, byte [ebx + 2]
cmp al, 0x3a
je 0x100fe9ec
cmp al, 0x7c
jne 0x100feb6e
mov al, byte [ebx + 3]
cmp al, 0x2f
je 0x100fe9ff
cmp al, 0x5c
je 0x100fe9ff
test al, al
jne 0x100feb6e
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100fea04
sub ecx, esi
lea eax, [ecx + 1]
push eax
push edx
push ebx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
jmp 0x100feb6e
mov edx, dword [esp + 0x78]
cmp byte [esp + 0x13], 0
mov byte [ebx], 0
je 0x100feac9
inc esi
xor eax, eax
add esi, ebp
je 0x100feab1
nop dword [eax]
cmp byte [esi], 0x2f
jne 0x100fea50
cmp eax, 4
jge 0x100fea50
inc eax
add esi, 1
jne 0x100fea40
dec eax
cmp eax, 2
ja 0x100feab1
lea eax, [esp + 0x3c]
push eax
mov dword [esp + 0x2c], eax
call fcn.100d16e0
add esp, 4
test eax, eax
jne 0x100fea8b
mov eax, dword [esp + 0x78]
test al, 8
jne 0x100fea8b
pop edi
pop esi
pop ebp
mov eax, 5
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.1010e0bc
add esp, 0x5c
ret
lea edi, [esp + 0x3c]
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x100fea92
lea eax, [esp + 0x3c]
sub edi, ecx
push 0x10127284
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcspn
add esp, 8
cmp eax, edi
je 0x100feae7
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.1010e0bc
add esp, 0x5c
ret
test edx, 0x204
je 0x100feab1
test dl, 4
mov ebp, str.https
mov eax, 0
cmove ebp, eax
mov dword [esp + 0x28], ebp
jmp 0x100feaeb
mov edx, dword [esp + 0x78]
mov al, byte [esi]
mov ecx, esi
test al, al
je 0x100feb07
cmp al, 0x2f
je 0x100feb07
cmp al, 0x3f
je 0x100feb07
cmp al, 0x23
je 0x100feb07
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x100feaf3
mov edi, esi
sub edi, ecx
je 0x100feb22
mov ebp, dword [esp + 0x18]
push edi
push ecx
push ebp
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [edi + ebp], 0
jmp 0x100feb2a
test edx, 0x400
je 0x100feab1
mov edi, esi
lea ecx, [edi + 1]
nop
mov al, byte [edi]
inc edi
test al, al
jne 0x100feb30
sub edi, ecx
push edi
push esi
push ebx
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esp + 0x34]
add esp, 0xc
mov byte [edi + ebx], 0
test eax, eax
je 0x100feb6a
push eax
call dword [0x1013d00c]
mov edi, dword [esp + 0x18]
add esp, 4
mov dword [edi], eax
test eax, eax
je 0x100ff03f
jmp 0x100feb6e
mov edi, dword [esp + 0x14]
mov esi, ebx
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x100feb73
push 0x10127284
push ebx
sub esi, ecx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcspn
add esp, 8
cmp eax, esi
jne 0x100feab1
mov eax, dword [esp + 0x78]
test al, al
jns 0x100fec95
cmp byte [ebx], 0
je 0x100fec95
mov ecx, ebx
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100febb0
sub ecx, edx
lea eax, [ecx + ecx*2]
push eax
call dword [section..data]
add esp, 4
mov dword [esp + 0x20], eax
test eax, eax
je 0x100ff03f
cmp byte [ebx], 0
mov dh, 1
mov byte [esp + 0x12], 1
mov esi, eax
mov edi, ebx
je 0x100fec89
cmp edi, ebx
jae 0x100febf3
mov al, byte [edi]
mov byte [esi], al
jmp 0x100fec7a
mov dl, byte [edi]
cmp dl, 0x20
je 0x100fec65
xor ecx, ecx
movzx eax, dh
cmp dl, 0x3f
movzx ebp, dl
push ebp
cmovne ecx, eax
mov byte [esp + 0x23], cl
call fcn.100ff270
add esp, 4
test eax, eax
jne 0x100fec54
push ebp
call fcn.100ff310
add esp, 4
test eax, eax
jne 0x100fec54
push ebp
call fcn.100ff2b0
add esp, 4
test eax, eax
jne 0x100fec54
movzx eax, byte [edi]
push eax
push str.___02x
push 4
push esi
call fcn.100d9580
mov dh, byte [esp + 0x2f]
mov eax, 3
add esp, 0x10
add esi, eax
jmp 0x100fec7b
mov al, byte [edi]
mov dh, byte [esp + 0x1f]
mov byte [esi], al
mov eax, 1
add esi, eax
jmp 0x100fec7b
test dh, dh
je 0x100fec77
mov word [esi], 0x3225
mov byte [esi + 2], 0x30
add esi, 3
jmp 0x100fec7b
mov byte [esi], 0x2b
inc esi
inc edi
cmp byte [edi], 0
jne 0x100febe6
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x14]
mov ebx, eax
mov byte [esi], 0
mov dword [edi + 0x2c], eax
push 0x23
push ebx
call sub.VCRUNTIME140.dll_strchr
add esp, 8
test eax, eax
je 0x100fecc2
mov byte [eax], 0
inc eax
cmp byte [eax], 0
je 0x100fecc2
push eax
call dword [0x1013d00c]
add esp, 4
mov dword [edi + 0x24], eax
test eax, eax
je 0x100ff03f
push 0x3f
push ebx
call sub.VCRUNTIME140.dll_strchr
add esp, 8
test eax, eax
je 0x100fecea
mov byte [eax], 0
inc eax
push eax
call dword [0x1013d00c]
add esp, 4
mov dword [edi + 0x20], eax
test eax, eax
je 0x100ff03f
cmp byte [ebx], 0
je 0x100fed83
test byte [esp + 0x78], 0x10
jne 0x100fed5e
push ebx
call fcn.1010bb70
mov esi, eax
add esp, 4
test esi, esi
je 0x100ff03f
mov edx, ebx
mov ecx, esi
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x100fed31
test al, al
je 0x100fed2d
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x100fed31
add ecx, 2
add edx, 2
test al, al
jne 0x100fed11
xor eax, eax
jmp 0x100fed36
sbb eax, eax
or eax, 1
test eax, eax
je 0x100fed54
cmp byte [esp + 0x12], 0
je 0x100fed4d
push dword [edi + 0x2c]
call dword [0x1013d004]
add esp, 4
mov ebx, esi
mov dword [edi + 0x2c], esi
jmp 0x100fed71
push esi
call dword [0x1013d004]
add esp, 4
cmp byte [esp + 0x12], 0
jne 0x100fed71
push ebx
call dword [0x1013d00c]
add esp, 4
mov ebx, eax
mov dword [edi + 0x1c], ebx
test ebx, ebx
je 0x100ff03f
mov dword [edi + 0x2c], 0
mov ebp, dword [esp + 0x18]
test ebp, ebp
je 0x100ff10e
mov esi, ebp
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x100fed94
push 0x10127284
push ebp
sub esi, ecx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcspn
add esp, 8
cmp eax, esi
jne 0x100feab1
xor edi, edi
push 0x40
push ebp
mov dword [esp + 0x2c], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x28], edi
call sub.VCRUNTIME140.dll_strchr
mov esi, eax
add esp, 8
mov ebx, ebp
test esi, esi
je 0x100fee86
mov edi, dword [esp + 0x14]
inc esi
mov ebp, esi
mov eax, dword [edi]
test eax, eax
je 0x100fee01
push eax
call fcn.100d16e0
add esp, 4
test eax, eax
je 0x100fee01
test dword [eax + 0x48], 0x400
je 0x100fee01
lea eax, [esp + 0x20]
jmp 0x100fee03
xor eax, eax
push eax
lea eax, [esp + 0x30]
sub esi, ebx
push eax
lea eax, [esp + 0x2c]
dec esi
push eax
push esi
push ebx
call fcn.100d2360
add esp, 0x14
test eax, eax
mov eax, dword [esp + 0x24]
je 0x100fee2a
mov edi, 3
jmp 0x100fee8a
mov ebx, dword [esp + 0x78]
test eax, eax
je 0x100fee41
test bl, 0x20
je 0x100fee3e
mov edi, 8
jmp 0x100fee8e
mov dword [edi + 4], eax
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x100fee4c
mov dword [edi + 8], eax
mov eax, dword [esp + 0x20]
test eax, eax
je 0x100fee57
mov dword [edi + 0xc], eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x16]
push eax
push str.__45_0123456789abcdefABCDEF:.__c_n
push ebp
call fcn.100cbed0
add esp, 0x10
cmp eax, 1
jne 0x100fef19
mov al, byte [esp + 0x12]
cmp al, 0x5d
jne 0x100feec5
mov esi, dword [esp + 0x18]
jmp 0x100fef04
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x78]
push eax
call dword [0x1013d004]
push dword [esp + 0x30]
call dword [0x1013d004]
push dword [esp + 0x28]
call dword [0x1013d004]
add esp, 0xc
test edi, edi
je 0x100fee57
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.1010e0bc
add esp, 0x5c
ret
cmp al, 0x25
jne 0x100feab1
mov esi, dword [esp + 0x18]
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x16]
push eax
lea eax, [esi + ebp]
push str._____c_n
push eax
call fcn.100cbed0
add esp, 0x10
cmp eax, 1
jne 0x100feab1
cmp byte [esp + 0x12], 0x5d
jne 0x100feab1
add esi, dword [esp + 0x18]
add esi, ebp
test esi, esi
je 0x100fef4d
mov al, byte [esi]
test al, al
je 0x100fef4d
cmp al, 0x3a
je 0x100fef2a
jmp 0x100feab1
push 0x3a
push ebp
call sub.VCRUNTIME140.dll_strchr
mov esi, eax
add esp, 8
test esi, esi
je 0x100fef4d
mov al, byte [esi + 1]
lea edi, [esi + 1]
test al, al
jne 0x100fefc9
mov byte [esi], al
movzx eax, byte [esp + 0x13]
xor eax, 1
shl eax, 2
test eax, eax
jne 0x100feab6
mov edi, dword [esp + 0x14]
mov ecx, ebp
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100fef56
sub ecx, edx
jne 0x100fef69
test ebx, 0x400
jne 0x100fef7b
push ebp
push edi
call fcn.100fe660
add esp, 8
test eax, eax
jne 0x100feab6
push ebp
call dword [0x1013d00c]
add esp, 4
mov dword [edi + 0x10], eax
test eax, eax
je 0x100ff03f
test ebx, 0x200
je 0x100ff10e
cmp dword [esp + 0x28], 0
jne 0x100ff10e
push 4
push ebp
push str.ftp.
call fcn.100dab20
add esp, 0xc
test eax, eax
je 0x100ff06f
mov ecx, 0x10121bfc
jmp 0x100ff0fa
movzx eax, al
push eax
call fcn.100ff290
add esp, 4
test eax, eax
je 0x100ff057
push 0xa
lea eax, [esp + 0x34]
push eax
push edi
call sub.api_ms_win_crt_convert_l1_1_0.dll_strtol
mov edi, eax
add esp, 0xc
lea ecx, [edi - 1]
cmp ecx, 0xfffe
ja 0x100ff057
mov eax, dword [esp + 0x30]
cmp byte [eax], 0
jne 0x100ff057
push edi
mov byte [esi], 0
push 0x10120bd0
mov byte [eax], 0
lea eax, [esp + 0x3c]
push 7
push eax
call fcn.100d9580
mov eax, dword [esp + 0x24]
mov dword [eax + 0x30], edi
lea eax, [esp + 0x44]
push eax
call dword [0x1013d00c]
mov edi, dword [esp + 0x28]
add esp, 0x14
mov dword [edi + 0x18], eax
test eax, eax
jne 0x100fef51
pop edi
pop esi
pop ebp
mov eax, 7
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.1010e0bc
add esp, 0x5c
ret
pop edi
pop esi
pop ebp
mov eax, 4
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.1010e0bc
add esp, 0x5c
ret
push 5
push ebp
push str.dict.
call fcn.100dab20
add esp, 0xc
test eax, eax
je 0x100ff08a
mov ecx, str.dict
jmp 0x100ff0fa
push 5
push ebp
push str.ldap.
call fcn.100dab20
add esp, 0xc
test eax, eax
je 0x100ff0a5
mov ecx, str.ldap
jmp 0x100ff0fa
push 5
push ebp
push str.imap.
call fcn.100dab20
add esp, 0xc
test eax, eax
je 0x100ff0c0
mov ecx, str.imap
jmp 0x100ff0fa
push 5
push ebp
push str.smtp.
call fcn.100dab20
add esp, 0xc
test eax, eax
je 0x100ff0db
mov ecx, str.smtp
jmp 0x100ff0fa
push 5
push ebp
push str.pop3.
call fcn.100dab20
add esp, 0xc
mov ecx, str.pop3
test eax, eax
mov edx, str.http
cmove ecx, edx
push ecx
call dword [0x1013d00c]
add esp, 4
mov dword [edi], eax
test eax, eax
je 0x100ff03f
push dword [edi + 0x28]
call dword [0x1013d004]
push dword [edi + 0x2c]
mov dword [edi + 0x28], 0
call dword [0x1013d004]
mov ecx, dword [esp + 0x70]
add esp, 8
mov dword [edi + 0x2c], 0
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.1010e0bc
add esp, 0x5c
ret