Function at 0x1018e93
Capabilities:
Reference cloudflare dns server

Disassembly:
mov eax, 0x107d2d1
call fcn.01068a88
sub esp, 0xc44
mov eax, dword [0x1097470]
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc2c], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0xc28], ebx
lea eax, [ebp - 0xc50]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0xc2c]
push eax
push dword [0x1097128]
mov byte [ebp - 4], 2
push 1
push edi
push esi
call fcn.0102742c
mov edi, eax
cmp edi, ebx
jge 0x1018f26
call fcn.0107321f
mov esi, eax
cmp esi, ebx
je 0x1018f8c
push 0x1002ac8
push 0x134
push edi
lea eax, [ebp - 0xc40]
push 0x1001c58
push eax
call fcn.01071ba0
add esp, 0x14
mov byte [ebp - 4], 3
jmp 0x1018f75
mov eax, dword [ebp - 0xc2c]
mov ecx, dword [eax]
lea edx, [ebp - 0xc28]
push edx
push 0x1002a80
push eax
call dword [ecx]
mov edi, eax
cmp edi, ebx
jge 0x1018fc8
call fcn.0107321f
mov esi, eax
cmp esi, ebx
je 0x1018f8c
push 0x1002ac8
push 0x137
push edi
lea eax, [ebp - 0xc40]
push 0x1001c58
push eax
call fcn.01071ba0
add esp, 0x14
mov byte [ebp - 4], 4
push eax
push 8
mov ecx, esi
call fcn.010726fd
push 1
lea ecx, [ebp - 0xc40]
call fcn.0101260e
lea eax, [ebp - 0xc50]
push eax
mov byte [ebp - 4], 1
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call fcn.01018add
mov eax, dword [ebp - 0xc28]
cmp eax, ebx
mov byte [ebp - 4], 0
je 0x1018fb7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc2c]
or dword [ebp - 4], 0xffffffff
cmp eax, ebx
jmp 0x1019318
push 0x1002ab8
lea ecx, [ebp - 0xc50]
call fcn.01018d60
push dword [0x109712c]
lea esi, [ebp - 0xc50]
lea edi, [ebp - 0xc40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0xc30]
movsd dword es:[edi], dword [esi]
call fcn.010134d0
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc28]
mov edx, dword [ecx]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0xc40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
push ecx
mov byte [ebp - 4], 5
movsd dword es:[edi], dword [esi]
call dword [edx + 0xb4]
push dword [ebp - 0xc30]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, eax
mov byte [ebp - 4], 2
call ebx
xor esi, esi
cmp edi, esi
jge 0x1019086
call fcn.0107321f
mov ebx, eax
cmp ebx, esi
je 0x10192e1
push 0x1002ac8
push 0x13b
push edi
lea eax, [ebp - 0xc40]
push 0x1001c58
push eax
call fcn.01071ba0
add esp, 0x14
push eax
push 8
mov ecx, ebx
mov byte [ebp - 4], 6
call fcn.010726fd
push 1
lea ecx, [ebp - 0xc40]
call fcn.0101260e
jmp 0x10192e1
lea eax, [ebp - 0x618]
push 0x1001d48
push eax
call fcn.01068e63
pop ecx
pop ecx
push 0x104
lea eax, [ebp - 0x618]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x10192e1
push 0x7f
pop ecx
xor eax, eax
mov word [ebp - 0x410], si
lea edi, [ebp - 0x40e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x7f
pop ecx
xor eax, eax
mov word [ebp - 0x210], si
lea edi, [ebp - 0x20e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov word [ebp - 0xa1c], si
mov ecx, 0x100
lea edi, [ebp - 0xa1a]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x210]
push eax
push esi
lea eax, [ebp - 0x618]
push esi
push eax
call fcn.01068f28
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0xa1c]
push eax
call fcn.01068e63
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0xa1c]
push eax
call fcn.01068e30
add esp, 0x24
lea eax, [ebp - 0xa1c]
push eax
lea ecx, [ebp - 0xc50]
call fcn.01018d60
push dword [0x1097130]
lea esi, [ebp - 0xc50]
lea edi, [ebp - 0xc40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0xc30]
movsd dword es:[edi], dword [esi]
call fcn.010134d0
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc28]
mov edx, dword [ecx]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0xc40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
push ecx
mov byte [ebp - 4], 7
movsd dword es:[edi], dword [esi]
call dword [edx + 0xb4]
push dword [ebp - 0xc30]
mov edi, eax
mov byte [ebp - 4], 2
call ebx
test edi, edi
jge 0x10191dc
call fcn.0107321f
mov esi, eax
test esi, esi
je 0x10192a6
push 0x1002ac8
push 0x14d
push edi
lea eax, [ebp - 0xc40]
push 0x1001c58
push eax
call fcn.01071ba0
add esp, 0x14
mov byte [ebp - 4], 8
jmp 0x101928f
lea eax, [ebp - 0xc24]
push eax
lea eax, [ebp - 0x618]
push eax
call fcn.01018845
test al, al
je 0x10192df
lea eax, [ebp - 0xc24]
push eax
lea ecx, [ebp - 0xc50]
call fcn.01018d60
push dword [0x1097134]
lea esi, [ebp - 0xc50]
lea edi, [ebp - 0xc40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0xc30]
movsd dword es:[edi], dword [esi]
call fcn.010134d0
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc28]
mov edx, dword [ecx]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0xc40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
push ecx
mov byte [ebp - 4], 9
movsd dword es:[edi], dword [esi]
call dword [edx + 0xb4]
push dword [ebp - 0xc30]
mov edi, eax
mov byte [ebp - 4], 2
call ebx
test edi, edi
jge 0x10192df
call fcn.0107321f
mov esi, eax
test esi, esi
je 0x10192a6
push 0x1002ac8
push 0x153
push edi
lea eax, [ebp - 0xc40]
push 0x1001c58
push eax
call fcn.01071ba0
add esp, 0x14
mov byte [ebp - 4], 0xa
push eax
push 8
mov ecx, esi
call fcn.010726fd
push 1
lea ecx, [ebp - 0xc40]
call fcn.0101260e
lea eax, [ebp - 0xc50]
push eax
mov byte [ebp - 4], 1
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call fcn.01018add
mov eax, dword [ebp - 0xc28]
test eax, eax
mov byte [ebp - 4], 0
je 0x10192d1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc2c]
or dword [ebp - 4], 0xffffffff
test eax, eax
jmp 0x1019318
xor esi, esi
lea eax, [ebp - 0xc50]
push eax
mov byte [ebp - 4], 1
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call fcn.01018add
mov eax, dword [ebp - 0xc28]
cmp eax, esi
mov byte [ebp - 4], 0
je 0x101930c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc2c]
or dword [ebp - 4], 0xffffffff
cmp eax, esi
je 0x1019320
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
mov eax, edi
call fcn.01067393
pop edi
pop esi
pop ebx
leave
ret 8