Function at 0x1800033f0
Capabilities:
Resolve dns

Disassembly:
mov r11, rsp
push rbp
push rbx
push r13
push r14
push r15
lea rbp, [r11 - 0x6e8]
sub rsp, 0x7c0
mov rax, qword [0x1800ac030]
xor rax, rsp
mov qword [rbp + 0x6a0], rax
mov qword [r11 + 0x18], rsi
xor ebx, ebx
mov qword [r11 - 0x30], rdi
mov r15, rdx
mov r13, rcx
mov qword [r11 - 0x38], r12
mov r14d, ebx
lea rcx, [rsp + 0x52]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x50], bx
call fcn.180037c60
movsxd r11, r14d
imul r11, r11, 0x208
lea rdx, [rsp + 0x50]
lea rcx, [r11 + r15 + 0x26]
sub rdx, rcx
nop
movzx eax, word [rcx]
add rcx, 2
mov word [rdx + rcx - 2], ax
test ax, ax
jne 0x180003460
lea rcx, [rsp + 0x50]
mov edx, 0x3a
call fcn.1800339cc
test rax, rax
je 0x1800037d2
lea rcx, [rax + 2]
mov word [rax], bx
call fcn.180033b04
test ax, ax
je 0x1800037d2
xor edx, edx
or rdi, 0xffffffffffffffff
movzx r12d, ax
cmp word [r15 + 0x436], dx
jne 0x1800035a7
lea rcx, [rbp + 0x161]
mov r8d, 0x103
mov byte [rbp + 0x160], dl
call fcn.180037c60
lea r9, [rsp + 0x50]
lea r8, [0x180099700]
lea rcx, [rbp + 0x160]
mov edx, 0x103
call fcn.1800338d4
lea rcx, [rbp + 0x160]
call qword [sym.imp.WS2_32.dll_inet_addr]
mov ebx, eax
cmp eax, 0xffffffff
je 0x180003507
test eax, eax
jne 0x18000358e
xor ebx, ebx
lea rax, [rsp + 0x38]
lea rcx, [rsp + 0x50]
lea edx, [rbx + 1]
lea r8d, [rbx + 8]
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
test eax, eax
je 0x180003575
lea rax, [rsp + 0x38]
mov qword [rsp + 0x48], 1
lea edx, [rbx + 1]
lea r9, [rsp + 0x48]
lea r8d, [rbx + 8]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x4c], 0x8080808
mov qword [rsp + 0x20], rax
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
test eax, eax
jne 0x1800037b7
mov rcx, qword [rsp + 0x38]
mov edx, 1
mov ebx, dword [rcx + 0x20]
xor ebx, 0x985e0097
call qword [sym.imp.DNSAPI.dll_DnsFree]
cmp bl, 0x7f
je 0x1800037b5
movzx edx, r12w
mov ecx, ebx
call fcn.1800024c0
jmp 0x180003791
lea rcx, [rbp + 0x492]
mov r8d, 0x206
mov word [rbp + 0x490], bx
call fcn.180037c60
lea r9, [rsp + 0x50]
lea r8, str._s:_d
lea rcx, [rbp + 0x490]
mov edx, 0x103
mov dword [rsp + 0x20], r12d
call fcn.180033700
lea rcx, [rbp + 0x271]
xor edx, edx
mov r8d, 0x103
mov byte [rbp + 0x270], 0
call fcn.180037c60
lea r9, [rsp + 0x50]
lea r8, [0x180099700]
lea rcx, [rbp + 0x270]
mov edx, 0x103
call fcn.1800338d4
lea rcx, [rbp + 0x270]
call qword [sym.imp.WS2_32.dll_inet_addr]
mov ebx, eax
cmp eax, 0xffffffff
je 0x180003636
test eax, eax
jne 0x1800036fa
xor ebx, ebx
lea rax, [rsp + 0x30]
lea rcx, [rsp + 0x50]
lea edx, [rbx + 1]
lea r8d, [rbx + 8]
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
test eax, eax
je 0x1800036a0
lea rax, [rsp + 0x30]
mov qword [rsp + 0x40], 1
lea edx, [rbx + 1]
lea r9, [rsp + 0x40]
lea r8d, [rbx + 8]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x44], 0x8080808
mov qword [rsp + 0x20], rax
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
test eax, eax
jne 0x1800036fa
mov rcx, qword [rsp + 0x30]
mov edx, 1
mov ebx, dword [rcx + 0x20]
call qword [sym.imp.DNSAPI.dll_DnsFree]
mov ecx, ebx
call qword [sym.imp.WS2_32.dll_inet_ntoa]
lea r8, [0x180099704]
lea rcx, [0x1800b0000]
mov r9, rax
mov edx, 0x103
call fcn.180033700
lea r9, [0x1800b0000]
lea r8, str._s:_d
lea rcx, [rbp + 0x490]
mov edx, 0x103
mov dword [rsp + 0x20], r12d
call fcn.180033700
cmp bl, 0x7f
je 0x1800037b5
lea rdx, [r15 + 0x436]
lea rcx, [r13 + 0x10]
call fcn.180003940
test eax, eax
jne 0x1800037b5
lea rcx, [rbp + 0x381]
xor edx, edx
mov r8d, 0x103
mov byte [rbp + 0x380], al
call fcn.180037c60
cmp qword [r13 + 0x18], 0
je 0x1800037b5
lea r9, [rbp + 0x490]
lea r8, [0x180099700]
lea rcx, [rbp + 0x380]
mov edx, 0x103
call fcn.1800338d4
mov rcx, qword [r13 + 0x18]
lea r8, [rbp + 0x380]
mov edx, 0x2712
call fcn.1800459a0
test eax, eax
jne 0x1800037b5
mov rcx, qword [r13 + 0x18]
lea edx, [rax + 0xd]
lea r8d, [rax + 0x1e]
call fcn.1800459a0
test eax, eax
jne 0x1800037b5
lea rcx, [r13 + 0x10]
call fcn.180003aa0
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1800037b5
mov rdx, rax
mov rcx, r13
call fcn.1800026c0
test eax, eax
jne 0x1800037b5
mov rcx, r13
call fcn.180002d30
test eax, eax
je 0x180003819
xor ebx, ebx
mov rcx, rdi
call fcn.180002bb0
mov rcx, r13
call fcn.180002c60
mov ecx, 0xea60
call qword [sym.imp.KERNEL32.dll_Sleep]
inc r14d
cmp r14d, 2
jl 0x180003431
or eax, 0xffffffff
mov r12, qword [rsp + 0x7b0]
mov rdi, qword [rsp + 0x7b8]
mov rsi, qword [rsp + 0x800]
mov rcx, qword [rbp + 0x6a0]
xor rcx, rsp
call fcn.1800334b0
add rsp, 0x7c0
pop r15
pop r14
pop r13
pop rbx
pop rbp
ret
xor eax, eax
jmp 0x1800037e2