Function at 0x100fd790
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xa0
mov ebx, dword [edx + 8]
movsd xmm0, qword [edx]
movzx eax, word [edx + 8]
mov edi, ecx
lea ecx, [esp + 0xa]
lea edx, [esp + 0x34]
mov dword [esp + 0x3c], ebx
movsd qword [esp + 0x34], xmm0
mov dword [esp + 0x40], ecx
lea ecx, [esp + 0xc]
mov word [esp + 0xa], ax
call fcn.100fdae0
mov esi, dword [esp + 0xc]
cmp esi, 2
jne 0x100fd7eb
push dword [esp + 0x34]
call sub.WS2_32.dll_freeaddrinfo
mov ebp, 4
xor esi, esi
xor eax, eax
jmp 0x100fda9d
movsd xmm0, qword [esp + 0x22]
movzx ecx, word [esp + 0x2a]
mov eax, dword [esp + 0x40]
mov dword [esp + 0x2c], edi
movzx edi, word [esp + 0x10]
movsd qword [esp + 0x6c], xmm0
movsd xmm0, qword [esp + 0x1a]
mov word [esp + 0x74], cx
movsd qword [esp + 0x64], xmm0
movsd xmm0, qword [esp + 0x12]
movsd qword [esp + 0x5c], xmm0
movsd xmm0, qword [esp + 0x5e]
movsd xmm1, qword [esp + 0x66]
movsd xmm2, qword [esp + 0x6e]
movzx ebx, word [eax]
movsd qword [esp + 0x4c], xmm1
movsd qword [esp + 0x54], xmm2
movsd qword [esp + 0x44], xmm0
movsd xmm0, qword [esp + 0x54]
movsd xmm2, qword [esp + 0x44]
movsd xmm1, qword [esp + 0x4c]
movsd qword [esp + 0x1c], xmm0
movsd qword [esp + 0x14], xmm1
movsd qword [esp + 0xc], xmm2
call sub.KERNEL32.dll_GetProcessHeap
push 0x20
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x100fdad4
rol bx, 8
mov dword [eax], esi
mov word [eax + 4], di
mov ebp, eax
mov edi, 0x28
mov esi, 1
mov dword [esp], 1
mov word [eax + 6], bx
movsd xmm0, qword [esp + 0x1c]
movsd qword [eax + 0x18], xmm0
movsd xmm0, qword [esp + 0xc]
movsd xmm1, qword [esp + 0x14]
movsd qword [eax + 0x10], xmm1
movsd qword [eax + 8], xmm0
movsd xmm0, qword [esp + 0x34]
movsd xmm1, qword [esp + 0x3c]
movsd qword [esp + 0x80], xmm1
movsd qword [esp + 0x78], xmm0
jmp 0x100fd93b
movzx eax, word [esp + 8]
rol cx, 8
mov dword [ebp + edi - 8], ebx
mov dword [esp], edx
inc esi
mov word [ebp + edi - 4], ax
mov word [ebp + edi - 2], cx
movsd xmm0, qword [esp + 0x88]
movsd xmm1, qword [esp + 0x90]
movsd qword [ebp + edi], xmm0
movsd qword [ebp + edi + 8], xmm1
movsd xmm0, qword [esp + 0x98]
movsd qword [ebp + edi + 0x10], xmm0
add edi, 0x20
lea ecx, [esp + 0xc]
lea edx, [esp + 0x78]
call fcn.100fdae0
mov ebx, dword [esp + 0xc]
cmp ebx, 2
je 0x100fda8d
lea edx, [esp + 0x12]
movzx ecx, word [esp + 0x10]
mov eax, dword [esp + 0x84]
movsd xmm0, qword [edx + 0x10]
movsd xmm1, qword [edx + 8]
mov word [esp + 8], cx
movzx ecx, word [edx + 0x18]
movsd qword [esp + 0x6c], xmm0
movsd xmm0, qword [edx]
movsd qword [esp + 0x64], xmm1
lea edx, [esp + 0x5e]
mov word [esp + 0x74], cx
movsd qword [esp + 0x5c], xmm0
movsd xmm1, qword [edx + 8]
movzx ecx, word [eax]
movsd xmm0, qword [edx]
movsd qword [esp + 0x4c], xmm1
movsd xmm1, qword [edx + 0x10]
movsd qword [esp + 0x44], xmm0
mov edx, dword [esp]
movsd xmm2, qword [esp + 0x44]
movsd qword [esp + 0x54], xmm1
movsd xmm1, qword [esp + 0x4c]
cmp esi, edx
movsd xmm0, qword [esp + 0x54]
movsd qword [esp + 0x88], xmm2
movsd qword [esp + 0x90], xmm1
movsd qword [esp + 0x98], xmm0
jne 0x100fd8f0
mov eax, edx
mov word [esp + 6], cx
mov dword [esp + 0x30], esi
inc eax
je 0x100fdabf
lea ecx, [edx + edx]
cmp ecx, eax
cmova eax, ecx
cmp eax, 4
ja 0x100fda16
mov eax, 4
mov edx, 0x20
xor ecx, ecx
mul edx
mov edx, dword [esp]
mov esi, eax
seto ah
setno al
test edx, edx
cmove ebp, edx
test ah, ah
jne 0x100fdabf
test esi, esi
js 0x100fdabf
mov cl, al
shl ecx, 2
test ebp, ebp
je 0x100fda60
shl edx, 5
je 0x100fda60
call sub.KERNEL32.dll_GetProcessHeap
push esi
push ebp
push 0
push eax
call sub.KERNEL32.dll_HeapReAlloc
jmp 0x100fda72
test esi, esi
je 0x100fda74
call sub.KERNEL32.dll_GetProcessHeap
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov ecx, eax
test ecx, ecx
je 0x100fdac6
shr esi, 5
mov ebp, ecx
movzx ecx, word [esp + 6]
mov edx, esi
mov esi, dword [esp + 0x30]
jmp 0x100fd8f0
push dword [esp + 0x78]
call sub.WS2_32.dll_freeaddrinfo
mov edi, dword [esp + 0x2c]
mov eax, dword [esp]
shl esi, 5
mov dword [edi + 4], ebp
mov dword [edi + 8], eax
mov dword [edi + 0xc], ebp
add esi, ebp
mov dword [edi + 0x10], esi
mov dword [edi], 0
add esp, 0xa0
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.10006550
ud2
mov ecx, esi
mov edx, 4
call fcn.10006540
ud2
mov ecx, 0x20
jmp 0x100fdac8