Function at 0x180003040
Capabilities:
Resolve dns

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x280]
sub rsp, 0x380
mov rax, qword [0x1800ac030]
xor rax, rsp
mov qword [rbp + 0x260], rax
or rdi, 0xffffffffffffffff
cmp word [r9], 0
mov r14, r9
mov r15d, r8d
mov r13, rdx
mov rsi, rcx
jne 0x180003139
mov rcx, rdx
call fcn.180001170
mov ebx, eax
cmp eax, 0xffffffff
je 0x18000309d
test eax, eax
jne 0x180003120
xor ebx, ebx
lea rax, [rsp + 0x30]
xor r9d, r9d
lea edx, [rbx + 1]
lea r8d, [rbx + 8]
mov rcx, r13
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
test eax, eax
je 0x180003107
lea rax, [rsp + 0x30]
mov qword [rsp + 0x38], 1
lea edx, [rbx + 1]
lea r9, [rsp + 0x38]
lea r8d, [rbx + 8]
mov rcx, r13
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x3c], 0x8080808
mov qword [rsp + 0x20], rax
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
test eax, eax
jne 0x180003307
mov rcx, qword [rsp + 0x30]
mov edx, 1
mov ebx, dword [rcx + 0x20]
xor ebx, 0x985e0097
call qword [sym.imp.DNSAPI.dll_DnsFree]
cmp bl, 0x7f
je 0x180003307
movzx edx, r15w
mov ecx, ebx
call fcn.1800024c0
jmp 0x1800032e3
lea rcx, [rbp + 0x52]
xor ebx, ebx
xor edx, edx
mov r8d, 0x206
mov qword [rsp + 0x378], r12
mov word [rbp + 0x50], bx
call fcn.180037c60
lea r8, str._s:_d
lea rcx, [rbp + 0x50]
mov r9, r13
mov edx, 0x103
mov dword [rsp + 0x20], r15d
call fcn.180033700
mov rcx, r13
call fcn.180001170
mov r12d, eax
cmp eax, 0xffffffff
je 0x18000318d
test eax, eax
jne 0x180003253
mov edx, 1
lea rax, [rsp + 0x38]
xor r9d, r9d
lea r8d, [rdx + 7]
mov rcx, r13
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
test eax, eax
je 0x1800031fa
mov edx, 1
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], 1
lea r9, [rsp + 0x30]
lea r8d, [rdx + 7]
mov rcx, r13
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x34], 0x8080808
mov qword [rsp + 0x20], rax
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
test eax, eax
je 0x1800031fa
mov r12d, ebx
jmp 0x180003253
mov rcx, qword [rsp + 0x38]
mov edx, 1
mov r12d, dword [rcx + 0x20]
call qword [sym.imp.DNSAPI.dll_DnsFree]
mov ecx, r12d
call qword [sym.imp.WS2_32.dll_inet_ntoa]
lea r8, [0x180099704]
lea rcx, [0x1800b0000]
mov r9, rax
mov edx, 0x103
call fcn.180033700
lea r9, [0x1800b0000]
lea r8, str._s:_d
lea rcx, [rbp + 0x50]
mov edx, 0x103
mov dword [rsp + 0x20], r15d
call fcn.180033700
cmp r12b, 0x7f
mov r12, qword [rsp + 0x378]
je 0x180003307
lea rcx, [rsi + 0x10]
mov rdx, r14
call fcn.180003940
test eax, eax
jne 0x180003307
lea rcx, [rsp + 0x41]
xor edx, edx
mov r8d, 0x103
mov byte [rsp + 0x40], bl
call fcn.180037c60
cmp qword [rsi + 0x18], rbx
je 0x180003307
lea r9, [rbp + 0x50]
lea r8, [0x180099700]
lea rcx, [rsp + 0x40]
mov edx, 0x103
call fcn.1800338d4
mov rcx, qword [rsi + 0x18]
lea r8, [rsp + 0x40]
mov edx, 0x2712
call fcn.1800459a0
test eax, eax
jne 0x180003307
mov rcx, qword [rsi + 0x18]
lea edx, [rax + 0xd]
lea r8d, [rax + 0x1e]
call fcn.1800459a0
test eax, eax
jne 0x180003307
lea rcx, [rsi + 0x10]
call fcn.180003aa0
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x180003307
mov rdx, rax
mov rcx, rsi
call fcn.1800026c0
test eax, eax
jne 0x180003307
mov rcx, rsi
call fcn.180002d30
test eax, eax
je 0x18000331a
mov rcx, rdi
call fcn.180002bb0
mov rcx, rsi
call fcn.180002c60
or eax, 0xffffffff
mov rcx, qword [rbp + 0x260]
xor rcx, rsp
call fcn.1800334b0
add rsp, 0x380
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret