Function at 0x18002fafc
Capabilities:
Reference 114dns dns server
Reference alidns dns server

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x80
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov r13, rdx
mov rbp, rcx
and dword [rsp + 0xc0], 0
lea rcx, section..data
mov rax, qword [section..data]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0xc8], rax
mov rdx, r13
lea rcx, [rsp + 0x40]
call fcn.180002274
nop
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.WS2_32.dll_inet_addr]
cmp eax, 0xffffffff
je 0x18002fbbd
mov rdx, r13
mov rcx, rbp
call fcn.180002274
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
or rsi, 0xffffffffffffffff
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x18002fb93
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xc8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x18002fbb5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, rbp
jmp 0x18002fdcb
lea rcx, [0x1800a4948]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdx, qword [0x1800a4990]
sub rdx, qword [0x1800a4988]
test rdx, 0xfffffffffffffff8
jne 0x18002fc0e
lea rdi, [0x1800a4970]
mov rcx, rdi
call fcn.18002f93c
lea rdx, str.114.114.114.114
mov rcx, rdi
call fcn.18002f82c
lea rdx, str.223.5.5.5
mov rcx, rdi
call fcn.18002f82c
lea rcx, [0x1800a4948]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor r12d, r12d
mov rax, qword [0x1800a4990]
sub rax, qword [0x1800a4988]
sar rax, 3
or rsi, 0xffffffffffffffff
test rax, rax
je 0x18002fd75
xor edi, edi
lea rcx, section..data
mov rax, qword [section..data]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
mov rax, qword [0x1800a4990]
mov rcx, qword [0x1800a4988]
sub rax, rcx
sar rax, 3
cmp rdi, rax
jb 0x18002fc7f
call fcn.1800536ac
mov rcx, qword [0x1800a4988]
lea rdx, [rcx + rdi*8]
lea rcx, [rsp + 0x48]
call fcn.180012484
and dword [rsp + 0xc0], 0
mov r9d, gethostname
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x28
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xbb8
mov rbx, qword [rsp + 0x48]
mov r8, rbx
lea edx, [r9 - 0x34]
mov rcx, r13
call fcn.18002f3bc
mov ecx, dword [rsp + 0xc0]
shr ecx, 2
test eax, eax
je 0x18002fce8
test ecx, ecx
jg 0x18002fd24
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x18002fd02
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc r12d
movsxd rdi, r12d
mov rax, qword [0x1800a4990]
sub rax, qword [0x1800a4988]
sar rax, 3
cmp rdi, rax
jae 0x18002fd75
jmp 0x18002fc3f
mov ecx, dword [rsp + 0x58]
call qword [sym.imp.WS2_32.dll_inet_ntoa]
mov rdx, rax
test rax, rax
jne 0x18002fd3a
xor ecx, ecx
jmp 0x18002fd4a
xor eax, eax
mov rcx, rsi
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
dec rcx
mov r8d, ecx
lea rcx, [rsp + 0xc8]
call fcn.180002aa4
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x18002fd75
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rsp + 0xc8]
mov rcx, rbp
call fcn.18001238c
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x18002fda6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xc8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x18002fdc8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, rbp
mov rbx, qword [rsp + 0xb0]
add rsp, 0x80
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret