Function at 0x10086df0
Capabilities:
Resolve dns

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100b401b
mov eax, dword fs:[0]
push eax
sub esp, 0xd0
mov eax, dword [0x100d3020]
xor eax, esp
mov dword [esp + 0xc8], eax
push ebx
push esi
push edi
mov eax, dword [0x100d3020]
xor eax, esp
push eax
lea eax, [esp + 0xe0]
mov dword fs:[0], eax
mov edi, ecx
xor esi, esi
push 0xffffffffffffffff
push esi
mov eax, edi
lea ecx, [esp + 0x54]
mov dword [esp + 0x50], edi
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], esi
mov word [esp + 0x58], si
call fcn.10002570
lea ebx, [esp + 0x4c]
mov dword [esp + 0xe8], esi
call fcn.1007f380
push 0x100b9ed4
mov eax, ebx
call fcn.1007f230
add esp, 4
push 0x100b9ed4
mov eax, ebx
call fcn.1007f2a0
add esp, 4
push str.http:__
lea ebx, [esi + 7]
xor eax, eax
lea edx, [esp + 0x50]
call fcn.1000b7c0
test eax, eax
jne 0x10086eb7
cmp dword [esp + 0x64], 8
jb 0x10086eb0
mov eax, dword [esp + 0x50]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete_void__
add esp, 4
mov al, 1
jmp 0x10087664
push str.https:__
mov ebx, 8
xor eax, eax
lea edx, [esp + 0x50]
call fcn.1000b7c0
test eax, eax
jne 0x10086eea
cmp dword [esp + 0x64], ebx
jb 0x10086eb0
mov ecx, dword [esp + 0x50]
push ecx
call sub.MSVCR80.dll_void___cdecl_operator_delete_void__
add esp, 4
mov al, 1
jmp 0x10087664
push str.localhost
mov ebx, 9
xor eax, eax
lea edx, [esp + 0x50]
call fcn.1000b7c0
test eax, eax
jne 0x10086f1e
cmp dword [esp + 0x64], 8
jb 0x10086eb0
mov edx, dword [esp + 0x50]
push edx
call sub.MSVCR80.dll_void___cdecl_operator_delete_void__
add esp, 4
mov al, 1
jmp 0x10087664
push str.file:__
mov ebx, 7
xor eax, eax
lea edx, [esp + 0x50]
call fcn.1000b7c0
test eax, eax
je 0x100870fb
push str.ftp:__
mov ebx, 6
xor eax, eax
lea edx, [esp + 0x50]
call fcn.1000b7c0
test eax, eax
je 0x100870fb
xor esi, esi
push esi
lea eax, [esp + 0x50]
push eax
mov edx, str.res:__
call fcn.1000b260
test eax, eax
lea ecx, [esp + 0x4c]
je 0x100870ff
push esi
push ecx
mov edx, str.about:
call fcn.1000b260
test eax, eax
je 0x100870fb
push esi
lea edx, [esp + 0x50]
push edx
mov edx, str.javascript:
call fcn.1000b260
test eax, eax
je 0x100870fb
push edi
call fcn.100885e0
add esp, 4
test al, al
je 0x1008702a
mov eax, str.2345:homepage
mov ecx, edi
call fcn.1007f000
test al, al
jne 0x100870fb
mov eax, str.2345:firststartup
mov ecx, edi
call fcn.1007f000
test al, al
jne 0x100870fb
mov eax, str.2345:guide
mov ecx, edi
call fcn.1007f000
test al, al
jne 0x100870fb
mov eax, str.2345:blank
mov ecx, edi
call fcn.1007f000
test al, al
jne 0x100870fb
call fcn.100880c0
test al, al
jne 0x100870fb
mov ecx, edi
call fcn.100882c0
test al, al
jne 0x100870fb
mov ecx, edi
call fcn.10088a00
test al, al
jne 0x100870fb
push esi
lea eax, [esp + 0x50]
push eax
mov edx, 0x100b9ed0
call fcn.1000b260
cmp eax, 0xffffffff
je 0x1008711f
cmp eax, esi
jbe 0x1008711f
lea ecx, [esp + 0x4c]
push ecx
lea edi, [esp + 0x88]
call fcn.10087920
add esp, 4
cmp dword [esp + 0x98], esi
je 0x1008710b
mov eax, edi
mov edx, 0x80000000
call fcn.1009d880
test al, al
je 0x1008710b
mov dword [esp + 0xb8], 7
mov dword [esp + 0xb4], esi
mov word [esp + 0xa4], si
mov edx, str.URL_Protocol
lea eax, [esp + 0x14]
mov byte [esp + 0xe8], 2
call fcn.1000b220
lea edx, [esp + 0xa0]
push edx
mov eax, edi
push eax
lea edx, [esp + 0x1c]
mov ecx, 0x80000000
mov byte [esp + 0xf0], 3
call fcn.1009d470
lea ecx, [esp + 0x14]
mov bl, al
mov byte [esp + 0xe8], 2
call fcn.10002160
lea ecx, [esp + 0xa0]
call fcn.10002160
test bl, bl
je 0x1008710b
mov ecx, edi
call fcn.10002160
lea ecx, [esp + 0x4c]
call fcn.10002160
mov al, 1
jmp 0x10087664
lea ecx, [esp + 0x84]
mov byte [esp + 0xe8], 0
call fcn.10002160
lea ecx, [esp + 0x4c]
push ecx
mov edi, 1
lea ebx, [esp + 0x40]
mov dword [esp + 0x40], 0x2e
call fcn.100103c0
cmp eax, 0xffffffff
je 0x100875f5
push 0xffffffffffffffff
lea edx, [esp + 0x50]
push edx
mov ecx, eax
lea esi, [esp + 0xc4]
call fcn.100100b0
mov eax, edi
test byte [0x100d5f00], al
jne 0x10087182
or dword [0x100d5f00], eax
mov byte [esp + 0xe8], 5
call fcn.100895a0
push 0x100b5940
call fcn.100a467e
add esp, 4
mov eax, 2
test byte [0x100d5f00], al
mov esi, 0x100d5efc
jne 0x100871b4
or dword [0x100d5f00], eax
mov byte [esp + 0xe8], 6
call fcn.1007eb90
push 0x100b5910
call fcn.100a467e
add esp, 4
mov eax, dword [0x100d5efc]
test eax, eax
mov dword [esp + 0x3c], esi
je 0x100871c8
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [esp + 0xe8], 7
cmp dword [0x100d5c10], 0
jne 0x1008756b
mov edx, str..com
lea eax, [esp + 0x14]
call fcn.1000b220
lea eax, [esp + 0x30]
push eax
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 8
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, 0x100b9f74
lea eax, [esp + 0x14]
call fcn.1000b220
lea ecx, [esp + 0x30]
push ecx
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 9
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, str..mobi
lea eax, [esp + 0x14]
call fcn.1000b220
lea edx, [esp + 0x30]
push edx
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0xa
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, str..tel
lea eax, [esp + 0x14]
call fcn.1000b220
lea eax, [esp + 0x30]
push eax
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0xb
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, str..asia
lea eax, [esp + 0x14]
call fcn.1000b220
lea ecx, [esp + 0x30]
push ecx
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0xc
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, str..net
lea eax, [esp + 0x14]
call fcn.1000b220
lea edx, [esp + 0x30]
push edx
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0xd
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, str..org
lea eax, [esp + 0x14]
call fcn.1000b220
lea eax, [esp + 0x30]
push eax
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0xe
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, str..name
lea eax, [esp + 0x14]
call fcn.1000b220
lea ecx, [esp + 0x30]
push ecx
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0xf
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, 0x100b9fc4
lea eax, [esp + 0x14]
call fcn.1000b220
lea edx, [esp + 0x30]
push edx
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0x10
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, str..info
lea eax, [esp + 0x14]
call fcn.1000b220
lea eax, [esp + 0x30]
push eax
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0x11
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, str..gov
lea eax, [esp + 0x14]
call fcn.1000b220
lea ecx, [esp + 0x30]
push ecx
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0x12
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, 0x100b9fe4
lea eax, [esp + 0x14]
call fcn.1000b220
lea edx, [esp + 0x30]
push edx
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0x13
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, 0x100b9fec
lea eax, [esp + 0x14]
call fcn.1000b220
lea eax, [esp + 0x30]
push eax
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0x14
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, str..biz
lea eax, [esp + 0x14]
call fcn.1000b220
mov byte [esp + 0xe8], 0x15
lea ecx, [esp + 0x30]
push ecx
lea ebx, [esp + 0x18]
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, 0x100ba000
lea eax, [esp + 0x14]
call fcn.1000b220
lea edx, [esp + 0x30]
push edx
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0x16
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, 0x100ba008
lea eax, [esp + 0x14]
call fcn.1000b220
lea eax, [esp + 0x30]
push eax
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0x17
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, 0x100ba010
lea eax, [esp + 0x14]
call fcn.1000b220
lea ecx, [esp + 0x30]
push ecx
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0x18
call fcn.100895e0
mov ecx, ebx
mov byte [esp + 0xe8], 7
call fcn.10002160
mov edx, 0x100ba018
lea eax, [esp + 0x14]
call fcn.1000b220
lea edx, [esp + 0x30]
push edx
lea ebx, [esp + 0x18]
mov byte [esp + 0xec], 0x19
call fcn.100895e0
mov ecx, ebx
call fcn.10002160
lea esi, [esp + 0x3c]
mov byte [esp + 0xe8], 4
call fcn.10006950
mov eax, dword [0x100d5c0c]
mov dword [esp + 0x40], eax
lea eax, [esp + 0xbc]
lea esi, [esp + 0x30]
mov dword [esp + 0x3c], 0x100d5c08
call fcn.10089700
lea esi, [esp + 0x3c]
mov edi, eax
call fcn.10024c00
test al, al
je 0x100875c8
lea ecx, [esp + 0xbc]
call fcn.10002160
lea ecx, [esp + 0x4c]
call fcn.10002160
mov al, 1
jmp 0x10087664
mov ecx, dword [esp + 0x48]
push ecx
lea ecx, [esp + 0x6c]
call fcn.10085a10
add esp, 4
cmp dword [esp + 0x7c], 0
jne 0x10087602
lea ecx, [esp + 0x68]
call fcn.10002160
lea ecx, [esp + 0xbc]
call fcn.10002160
lea ecx, [esp + 0x4c]
call fcn.10002160
xor al, al
jmp 0x10087664
cmp dword [esp + 0x80], 8
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x44], 0
jae 0x1008761c
lea eax, [esp + 0x6c]
push 0
lea edx, [esp + 0x48]
push edx
push 0
push 8
push 1
push eax
call sub.DNSAPI.dll_DnsQuery_W
mov esi, eax
test esi, esi
jne 0x10087641
mov eax, dword [esp + 0x44]
push 1
push eax
call sub.DNSAPI.dll_DnsRecordListFree
lea ecx, [esp + 0x68]
call fcn.10002160
lea ecx, [esp + 0xbc]
call fcn.10002160
lea ecx, [esp + 0x4c]
call fcn.10002160
test esi, esi
sete al
mov ecx, dword [esp + 0xe0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc8]
xor ecx, esp
call fcn.100a4489
mov esp, ebp
pop ebp
ret