Function at 0x180003250
Capabilities:
Resolve dns

Disassembly:
push rbp
push rbx
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x278]
sub rsp, 0x378
mov rax, qword [0x180093030]
xor rax, rsp
mov qword [rbp + 0x260], rax
cmp word [r9], 0
mov r13, r9
mov r14d, r8d
mov r12, rdx
mov rdi, rcx
jne 0x180003344
mov rcx, rdx
call fcn.1800011f0
mov ebx, eax
cmp eax, 0xffffffff
je 0x1800032a8
test eax, eax
jne 0x18000332b
xor ebx, ebx
lea rax, [rsp + 0x30]
xor r9d, r9d
lea edx, [rbx + 1]
lea r8d, [rbx + 8]
mov rcx, r12
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
test eax, eax
je 0x180003312
lea rax, [rsp + 0x30]
mov qword [rsp + 0x38], 1
lea edx, [rbx + 1]
lea r9, [rsp + 0x38]
lea r8d, [rbx + 8]
mov rcx, r12
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x3c], 0x8080808
mov qword [rsp + 0x20], rax
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
test eax, eax
jne 0x18000350b
mov rcx, qword [rsp + 0x30]
mov edx, 1
mov ebx, dword [rcx + 0x20]
xor ebx, 0x8e494418
call qword [sym.imp.DNSAPI.dll_DnsFree]
cmp bl, 0x7f
je 0x18000350b
movzx edx, r14w
mov ecx, ebx
call fcn.180002760
jmp 0x1800034ea
lea rcx, [rbp + 0x52]
xor ebx, ebx
xor edx, edx
mov r8d, 0x206
mov qword [rsp + 0x370], rsi
mov word [rbp + 0x50], bx
call fcn.180030f50
lea r8, str._s:_d
lea rcx, [rbp + 0x50]
mov r9, r12
mov edx, 0x103
mov dword [rsp + 0x20], r14d
call fcn.18002d1a0
mov rcx, r12
call fcn.1800011f0
mov esi, eax
cmp eax, 0xffffffff
je 0x180003397
test eax, eax
jne 0x18000345a
mov edx, 1
lea rax, [rsp + 0x38]
xor r9d, r9d
lea r8d, [rdx + 7]
mov rcx, r12
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
test eax, eax
je 0x180003403
mov edx, 1
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], 1
lea r9, [rsp + 0x30]
lea r8d, [rdx + 7]
mov rcx, r12
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x34], 0x8080808
mov qword [rsp + 0x20], rax
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
test eax, eax
je 0x180003403
mov esi, ebx
jmp 0x18000345a
mov rcx, qword [rsp + 0x38]
mov edx, 1
mov esi, dword [rcx + 0x20]
call qword [sym.imp.DNSAPI.dll_DnsFree]
mov ecx, esi
call qword [sym.imp.WS2_32.dll_inet_ntoa]
lea r8, [0x180085878]
lea rcx, [0x180096170]
mov r9, rax
mov edx, 0x103
call fcn.18002d1a0
lea r9, [0x180096170]
lea r8, str._s:_d
lea rcx, [rbp + 0x50]
mov edx, 0x103
mov dword [rsp + 0x20], r14d
call fcn.18002d1a0
cmp sil, 0x7f
mov rsi, qword [rsp + 0x370]
je 0x18000350b
lea rcx, [rdi + 0x10]
mov rdx, r13
call fcn.180003b50
test eax, eax
jne 0x18000350b
lea rcx, [rsp + 0x41]
xor edx, edx
mov r8d, 0x103
mov byte [rsp + 0x40], bl
call fcn.180030f50
cmp qword [rdi + 0x18], rbx
je 0x18000350b
lea r9, [rbp + 0x50]
lea r8, [0x180085874]
lea rcx, [rsp + 0x40]
mov edx, 0x103
call fcn.18002d350
mov rcx, qword [rdi + 0x18]
lea r8, [rsp + 0x40]
mov edx, 0x2712
call fcn.18003c2b0
test eax, eax
jne 0x18000350b
mov rcx, qword [rdi + 0x18]
lea edx, [rax + 0xd]
lea r8d, [rax + 0x1e]
call fcn.18003c2b0
test eax, eax
jne 0x18000350b
lea rcx, [rdi + 0x10]
call fcn.180003cb0
cmp rax, 0xffffffffffffffff
je 0x18000350b
mov rdx, rax
mov rcx, rdi
call fcn.180002960
test eax, eax
jne 0x18000350b
mov rcx, rdi
call fcn.180002f40
test eax, eax
je 0x180003516
mov rcx, rdi
call fcn.180002e70
or eax, 0xffffffff
mov rcx, qword [rbp + 0x260]
xor rcx, rsp
call fcn.18002cf50
add rsp, 0x378
pop r14
pop r13
pop r12
pop rdi
pop rbx
pop rbp
ret