Function at 0x1002d810
Capabilities:
Resolve dns

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc0
mov eax, dword [0x1019f010]
xor eax, esp
mov dword [esp + 0xbc], eax
xor eax, eax
mov dword [ebx + 2], eax
mov dword [ebx + 6], eax
mov dword [ebx + 0xa], eax
mov dword [ebx + 0xe], eax
mov dword [ebx + 0x12], eax
mov dword [ebx + 0x16], eax
mov word [ebx + 0x1a], ax
movzx edx, word [ebx]
mov dword [esp + 0x14], eax
mov dword [esp + 0x14], edx
push esi
lea edx, [esp + 0x38]
push edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x18], pe_nt_image_headers32
mov dword [esp + 0x38], edx
cmp ecx, eax
jne 0x1002d8d6
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
lea ecx, [esp + 0xc]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push eax
call dword [sym.imp.WS2_32.dll_getaddrinfo]
mov esi, eax
mov eax, dword [esp + 0x38]
lea ecx, [esp + 0x3c]
cmp eax, ecx
je 0x1002d8b5
push eax
call fcn.1010ef42
add esp, 4
test esi, esi
je 0x1002d934
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0xbc]
xor ecx, esp
call fcn.1010ee1f
mov esp, ebp
pop ebp
ret
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
lea edi, [esp + 0x3c]
mov ecx, eax
lea esi, [esp + 0x38]
mov dword [esp + 0x14], eax
call fcn.1001f320
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x38]
push eax
push ecx
push eax
push edx
call fcn.101104a1
add esp, 0x10
cmp eax, 0x50
ja case.0x1002d919.0
movzx eax, byte [eax + 0x1002d9d8]
jmp dword [eax*4 + 0x1002d9c8]
push 0x8007000e
call fcn.10017700
push 0x80070057
call fcn.10017700
mov edi, dword [esp + 0xc]
xor esi, esi
mov eax, edi
test edi, edi
je 0x1002d96c
mov ecx, dword [eax + 4]
cmp ecx, 2
je 0x1002d956
cmp ecx, 0x17
je 0x1002d956
mov eax, dword [eax + 0x1c]
test eax, eax
jne 0x1002d940
jmp 0x1002d96c
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
push edx
push eax
push ebx
call fcn.10112b90
add esp, 0xc
mov esi, 1
push edi
call dword [sym.imp.WS2_32.dll_freeaddrinfo]
test esi, esi
je 0x1002d99b
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebx + 2], ax
mov eax, esi
pop edi
pop esi
mov ecx, dword [esp + 0xbc]
xor ecx, esp
call fcn.1010ee1f
mov esp, ebp
pop ebp
ret
push 0x2af9
call dword [sym.imp.WS2_32.dll_WSASetLastError]
mov ecx, dword [esp + 0xc4]
pop edi
mov eax, esi
pop esi
xor ecx, esp
call fcn.1010ee1f
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.10017700
mov edi, edi
xchg eax, ebx
add dl, byte [eax]
and cl, bl
add dl, byte [eax]
sub bl, cl
add dl, byte [eax]
mov esp, 0x1002d9
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ecx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [edx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [edx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [eax]
int3