Function at 0x10178eb0
Capabilities:
Resolve dns

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x41ec
call fcn.1000120d
mov eax, dword [0x10266634]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x58]
push esi
push edi
push 0x40
mov edi, dword [ebx + 0xc]
mov esi, 0x22a
push 0
push eax
mov dword [ebp - 0x41d8], ebx
mov dword [ebp - 0x41e4], 0x102015c0
mov dword [ebp - 0x41ec], esi
mov dword [ebp - 0x41e0], 0
call sub.VCRUNTIME140.dll_memset
mov dword [ebp - 0x41e8], 0x80
add esp, 0xc
mov eax, dword [edi + 0x22c4]
mov ecx, dword [edi + 0x22c0]
cmp eax, ecx
jge 0x10178f47
push ecx
push eax
push str.Invalid_UDP_port_range__max_port__d_less_than_min_port__d_n
push 0x10
push ebx
call sub.avutil_56.dll_av_log
add esp, 0x14
mov eax, 0xffffffea
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100014c9
mov esp, ebp
pop ebp
ret
call fcn.10001b8b
test eax, eax
jne 0x10178f66
pop edi
pop esi
mov eax, 0xfffffffb
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100014c9
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x444], 0
jge 0x10178f81
mov eax, dword [ebx + 4]
neg eax
sbb eax, eax
and eax, 0x186a0
mov dword [ebx + 0x444], eax
mov eax, dword [edi + 0x2294]
mov dword [edi + 0x2288], 0
test eax, 0x300
je 0x10178fb3
shr eax, 9
and eax, 1
mov dword [edi + 0x2288], 1
mov dword [ebp - 0x41e0], eax
mov eax, 2
and eax, 7
mov dword [edi + 0x2294], eax
nop dword [eax]
push 0x1bf0
lea eax, [ebp - 0x41c8]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push dword [ebx + 0x420]
lea eax, [ebp - 0xd58]
push 0x400
push eax
lea eax, [ebp - 0x41d4]
push eax
push 0x400
lea eax, [ebp - 0x558]
push eax
push 0x80
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0xd8]
push 0x80
push eax
call sym.avformat_58.dll_av_url_split
add esp, 0x34
lea eax, [ebp - 0xd8]
mov ecx, str.rtsps
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10179043
test dl, dl
je 0x1017903f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10179043
add eax, 2
add ecx, 2
test dl, dl
jne 0x10179023
xor eax, eax
jmp 0x10179048
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1017906d
mov esi, 0x142
mov dword [ebp - 0x41e4], 0x10203268
mov dword [ebp - 0x41ec], esi
mov dword [edi + 0x2294], 2
jmp 0x101790c4
mov ecx, str.satip
lea eax, [ebp - 0xd8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10179098
test dl, dl
je 0x10179094
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10179098
add eax, 2
add ecx, 2
test dl, dl
jne 0x10179078
xor eax, eax
jmp 0x1017909d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x101790c4
push 0x80
lea eax, [ebp - 0xd8]
push str.rtsp
push eax
call sub.avutil_56.dll_av_strlcpy
add esp, 0xc
mov dword [edi + 0x238], 3
cmp byte [ebp - 0x158], 0
je 0x101790e8
push 0x80
lea eax, [ebp - 0x158]
push eax
lea eax, [edi + 0x27c]
push eax
call sub.avutil_56.dll_av_strlcpy
add esp, 0xc
mov ecx, dword [ebp - 0x41d4]
mov edx, 7
test ecx, ecx
cmovs ecx, esi
mov dword [ebp - 0x41d4], ecx
mov eax, dword [edi + 0x2294]
test eax, eax
cmove eax, edx
cmp dword [ebx + 8], 0
mov dword [ebp - 0x41d0], eax
je 0x10179143
and eax, 3
mov dword [ebp - 0x41d0], eax
je 0x10179129
cmp dword [edi + 0x2288], 1
jne 0x10179143
push str.Unsupported_lower_transport_method__only_UDP_and_TCP_are_supported_for_output._n
push 0x10
push ebx
call sub.avutil_56.dll_av_log
add esp, 0xc
mov esi, 0xffffffea
jmp 0x10179791
lea edx, [ebp - 0xd58]
push edx
push 0x101eea18
push ecx
lea ecx, [ebp - 0x558]
push ecx
push 0
lea ecx, [ebp - 0xd8]
push ecx
lea eax, [edi + 0x1278]
push 0x1000
push eax
call fcn.10001983
mov eax, dword [edi + 0x22cc]
add esp, 0x20
cmp dword [edi + 0x2288], 1
jne 0x1017939f
push 0
cdq
push edx
push eax
lea eax, [ebp - 0x41cc]
mov dword [ebp - 0x41cc], 0
push str.timeout
push eax
call sub.avutil_56.dll_av_dict_set_int
cmp dword [ebp - 0x41e0], 0
lea eax, [ebp - 0xd58]
push eax
push 0x101eea18
push dword [ebp - 0x41d4]
lea eax, [ebp - 0x558]
mov ecx, str.http
push eax
lea eax, [ebp - 0x158]
push eax
mov eax, str.https
cmove eax, ecx
push eax
lea eax, [ebp - 0x1158]
push 0x400
push eax
call fcn.10001983
add esp, 0x34
call sub.avutil_56.dll_av_get_random_seed
push eax
call sub.avutil_56.dll_av_get_random_seed
push eax
push str._08x_08x
lea eax, [ebp - 0x18]
push 0x11
push eax
call fcn.10001794
lea eax, [ebx + 0x4a0]
push eax
push 1
lea eax, [ebp - 0x1158]
push eax
lea esi, [edi + 4]
push esi
call fcn.100014fb
add esp, 0x24
test eax, eax
jns 0x10179236
mov esi, 0xfffffffb
jmp 0x10179791
lea eax, [ebp - 0x18]
push eax
push str.x_sessioncookie:__s_r_nAccept:_application_x_rtsp_tunnelled_r_nPragma:_no_cache_r_nCache_Control:_no_cache_r_n
lea eax, [ebp - 0x958]
push 0x400
push eax
call fcn.10001794
push 0
lea eax, [ebp - 0x958]
push eax
mov eax, dword [esi]
push str.headers
push dword [eax + 8]
call sub.avutil_56.dll_av_opt_set
mov eax, dword [esi]
add esp, 0x20
cmp dword [eax + 0x30], 0
jne 0x1017929f
mov ecx, dword [ebx + 0x544]
test ecx, ecx
je 0x1017929f
push ecx
call sub.avutil_56.dll_av_strdup
mov ecx, eax
add esp, 4
mov eax, dword [esi]
mov dword [eax + 0x30], ecx
mov eax, dword [esi]
cmp dword [eax + 0x30], 0
jne 0x1017929f
mov esi, 0xfffffff4
jmp 0x10179791
lea ecx, [ebp - 0x41cc]
push ecx
push eax
call fcn.1000145b
add esp, 8
test eax, eax
je 0x101792cc
lea eax, [ebp - 0x41cc]
push eax
call sub.avutil_56.dll_av_dict_free
add esp, 4
mov esi, 0xfffffffb
jmp 0x10179791
lea eax, [ebx + 0x4a0]
push eax
push 2
lea eax, [ebp - 0x1158]
push eax
lea esi, [edi + 0x2284]
push esi
call fcn.100014fb
add esp, 0x10
test eax, eax
jns 0x101792f9
mov esi, 0xfffffffb
jmp 0x10179791
lea eax, [ebp - 0x18]
push eax
push str.x_sessioncookie:__s_r_nContent_Type:_application_x_rtsp_tunnelled_r_nPragma:_no_cache_r_nCache_Control:_no_cache_r_nContent_Length:_32767_r_nExpires:_Sun__9_Jan_1972_00:00:00_GMT_r_n
lea eax, [ebp - 0x958]
push 0x400
push eax
call fcn.10001794
push 0
lea eax, [ebp - 0x958]
push eax
mov eax, dword [esi]
push str.headers
push dword [eax + 8]
call sub.avutil_56.dll_av_opt_set
mov eax, dword [esi]
push 0
push 0x101eb914
push str.chunked_post
push dword [eax + 8]
call sub.avutil_56.dll_av_opt_set
mov eax, dword [esi]
push 0
push 0x101eb914
push str.send_expect_100
push dword [eax + 8]
call sub.avutil_56.dll_av_opt_set
add esp, 0x40
push dword [edi + 4]
push dword [esi]
call fcn.10001d2a
lea eax, [ebp - 0x41cc]
push eax
push dword [esi]
call fcn.1000145b
add esp, 0x10
test eax, eax
lea eax, [ebp - 0x41cc]
push eax
je 0x10179392
call sub.avutil_56.dll_av_dict_free
add esp, 4
mov esi, 0xfffffffb
jmp 0x10179791
call sub.avutil_56.dll_av_dict_free
mov eax, dword [edi + 4]
add esp, 4
jmp 0x1017940a
push eax
push str._timeout_d
push dword [ebp - 0x41d4]
lea eax, [ebp - 0x558]
push eax
push 0
push dword [ebp - 0x41e4]
lea eax, [ebp - 0x1558]
push 0x400
push eax
call fcn.10001983
push 0
push dword [ebx + 0x550]
lea eax, [ebx + 0x4a0]
push dword [ebx + 0x544]
lea ecx, [edi + 4]
push 0
push eax
push 3
lea eax, [ebp - 0x1558]
push eax
push ecx
call fcn.10001ab9
mov esi, eax
add esp, 0x40
test esi, esi
js 0x10179791
mov eax, dword [edi + 4]
mov dword [edi + 0x2284], eax
push eax
mov dword [edi + 0x20], 0
call fcn.10001b18
mov esi, eax
add esp, 4
test esi, esi
js 0x10179791
lea eax, [ebp - 0x41e8]
push eax
lea eax, [ebp - 0x25d8]
push eax
push esi
call dword [sym.imp.WS2_32.dll_getpeername]
test eax, eax
jne 0x10179460
push 2
push eax
push eax
push 0x400
lea eax, [ebp - 0x558]
push eax
push dword [ebp - 0x41e8]
lea eax, [ebp - 0x25d8]
push eax
call dword [sym.imp.WS2_32.dll_getnameinfo]
cmp dword [edi + 0x238], 3
je 0x10179473
mov dword [edi + 0x238], 0
lea esi, [edi + 0x1278]
nop dword [eax]
mov byte [ebp - 0x2558], 0
cmp dword [edi + 0x238], 1
jne 0x101794a9
push 0x1000
lea eax, [ebp - 0x2558]
push str.ClientChallenge:_9e26d33f2984236010ef6253fb1887f7_r_nPlayerStarttime:__28_03_2003:22:50:23_00:00__r_nCompanyID:_KnKV4M4I_B2FjJ1TToLycw_r_nGUID:_00000000_0000_0000_0000_000000000000_r_n
push eax
call sub.avutil_56.dll_av_strlcat
add esp, 0xc
push 0
lea eax, [ebp - 0x41c8]
push eax
lea eax, [ebp - 0x2558]
push eax
push esi
push str.OPTIONS
push ebx
call fcn.100018b1
mov eax, dword [ebp - 0x41c4]
add esp, 0x18
cmp eax, 0xc8
jne 0x10179837
cmp dword [edi + 0x238], 1
je 0x101794f7
cmp byte [ebp - 0x27e4], 0
je 0x101794f7
mov dword [edi + 0x238], 1
jmp 0x10179480
push 9
lea eax, [ebp - 0x27a4]
push str.WMServer_
push eax
call sub.avutil_56.dll_av_strncasecmp
add esp, 0xc
test eax, eax
jne 0x1017951d
mov dword [edi + 0x238], 2
jmp 0x10179542
cmp dword [edi + 0x238], 1
jne 0x10179542
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x27e4]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x59], al
test al, al
jne 0x10179530
cmp dword [ebx + 4], 0
je 0x101796c0
cmp dword [edi + 0x238], 3
jne 0x101796b1
mov eax, dword [ebx + 0xc]
push 0x1150
mov dword [ebp - 0x41cc], eax
call sub.avutil_56.dll_av_mallocz
mov esi, eax
add esp, 4
test esi, esi
jne 0x1017957d
lea esi, [eax - 0xc]
jmp 0x10179791
mov eax, dword [ebp - 0x41cc]
push esi
lea ecx, [eax + 8]
add eax, 0xc
push ecx
push eax
mov dword [ebp - 0x41dc], ecx
call sub.avutil_56.dll_av_dynarray_add
mov eax, dword [ebp - 0x41cc]
add eax, 0x1278
mov dword [esi + 0x10ac], 0x21
push 0x1000
push eax
lea eax, [esi + 0x14]
push eax
call sub.avutil_56.dll_av_strlcpy
mov eax, dword [ebp - 0x41cc]
add esp, 0x18
test byte [eax + 0x22b8], 0x20
je 0x10179615
push 0
push ebx
call sym.avformat_58.dll_avformat_new_stream
mov ecx, eax
add esp, 8
test ecx, ecx
jne 0x101795e6
lea esi, [eax - 0xc]
jmp 0x10179791
mov eax, dword [ebp - 0x41dc]
mov eax, dword [eax]
dec eax
mov dword [ecx + 4], eax
mov eax, dword [ecx]
mov dword [esi + 8], eax
mov eax, dword [ecx + 0xb0]
mov dword [eax], 2
mov eax, dword [ecx + 0xb0]
mov dword [eax + 4], 0x20000
jmp 0x101796da
mov dword [esi + 8], 0xffffffff
mov dword [esi + 0x10b0], 0x1023dcfc
mov eax, dword [0x1023dd10]
test eax, eax
je 0x10179648
push eax
call sub.avutil_56.dll_av_mallocz
add esp, 4
mov dword [esi + 0x10b4], eax
test eax, eax
jne 0x10179648
mov dword [esi + 0x10b0], eax
mov eax, dword [esi + 0x10b0]
test eax, eax
je 0x101796da
mov eax, dword [eax + 0x18]
test eax, eax
je 0x101796da
push dword [esi + 0x10b4]
push 0xffffffffffffffff
push ebx
call eax
add esp, 0xc
test eax, eax
jns 0x101796da
mov ecx, dword [esi + 0x10b4]
test ecx, ecx
je 0x1017969b
mov eax, dword [esi + 0x10b0]
mov eax, dword [eax + 0x20]
test eax, eax
je 0x10179692
push ecx
call eax
mov ecx, dword [esi + 0x10b4]
add esp, 4
push ecx
call sub.avutil_56.dll_av_free
add esp, 4
mov dword [esi + 0x10b4], 0
mov dword [esi + 0x10b0], 0
jmp 0x101796da
lea eax, [ebp - 0x41c8]
push eax
push ebx
call fcn.1000174e
jmp 0x101796cd
lea eax, [ebp - 0x558]
push eax
push ebx
call fcn.10001b04
mov esi, eax
add esp, 8
test esi, esi
jne 0x10179791
mov ecx, dword [ebp - 0x41d0]
mov eax, ecx
neg eax
and eax, ecx
movzx ebx, byte [eax + 0x10212658]
test cl, 2
je 0x10179701
test byte [edi + 0x22b8], 0x10
mov eax, 1
cmovne ebx, eax
xor ecx, ecx
lea eax, [ebp - 0x58]
cmp dword [edi + 0x238], 1
cmovne eax, ecx
push eax
push ebx
push dword [ebp - 0x41d4]
lea eax, [ebp - 0x558]
push eax
push dword [ebp - 0x41d8]
call fcn.10001627
mov esi, eax
add esp, 0x14
test esi, esi
js 0x1017978b
mov ecx, dword [ebp - 0x41d0]
btr ecx, ebx
mov dword [ebp - 0x41d0], ecx
test ecx, ecx
jne 0x1017974b
cmp esi, 1
je 0x10179786
test esi, esi
jne 0x101796e0
push 0x40
lea eax, [ebp - 0x58]
mov dword [edi + 0x2294], ecx
push eax
lea eax, [edi + 0x23c]
push eax
call sub.avutil_56.dll_av_strlcpy
add esp, 0xc
mov dword [edi + 0x10], esi
mov dword [edi + 0x18], esi
xor eax, eax
mov dword [edi + 0x1c], esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100014c9
mov esp, ebp
pop ebp
ret
mov esi, 0xffffff79
mov ebx, dword [ebp - 0x41d8]
push ebx
call fcn.10001bae
mov eax, dword [ebx + 0xc]
add esp, 4
lea edx, [eax + 4]
mov dword [ebp - 0x41d0], edx
lea ecx, [eax + 0x2284]
mov eax, dword [ecx]
mov dword [ebp - 0x41dc], ecx
cmp eax, dword [edx]
je 0x101797cd
push ecx
call fcn.100010fa
mov ecx, dword [ebp - 0x41dc]
add esp, 4
mov edx, dword [ebp - 0x41d0]
push edx
mov dword [ecx], 0
call fcn.100010fa
mov eax, dword [ebp - 0x41c4]
add esp, 4
add eax, 0xfffffed4
cmp eax, 0x63
ja 0x10179851
cmp dword [ebx + 4], 0
je 0x10179851
lea eax, [ebp - 0x37e4]
push eax
call sub.avutil_56.dll_av_strdup
add esp, 4
test eax, eax
je 0x1017984c
push eax
push ebx
call fcn.100016e0
mov byte [edi + 0x24], 0
push dword [ebx + 0x420]
push dword [ebp - 0x41c4]
push str.Status__d:_Redirecting_to__s_n
push 0x20
push ebx
call sub.avutil_56.dll_av_log
mov esi, dword [ebp - 0x41ec]
add esp, 0x1c
jmp 0x10178fc0
push 0xbebbb1b7
push eax
call fcn.10001d61
add esp, 8
mov esi, eax
jmp 0x10179791
mov esi, 0xfffffff4
call fcn.100011c7
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100014c9
mov esp, ebp
pop ebp
ret