Function at 0x10016260
Capabilities:
Reference cloudflare dns server

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov dword [ebp - 0xc], ecx
cmp dword [ebp + 8], 0
je 0x1001638b
mov eax, dword [ebp + 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
cmp dword [ecx + 4], 0x100007f
jne 0x1001628c
mov al, 1
jmp 0x100164cf
mov edx, dword [ebp - 4]
cmp dword [edx + 4], 0
jne 0x1001629c
mov al, 1
jmp 0x100164cf
mov eax, dword [ebp - 4]
cmp dword [eax + 4], 0x1010101
jne 0x100162af
mov al, 1
jmp 0x100164cf
mov ecx, dword [ebp - 4]
cmp dword [ecx + 4], 0xffffffff
jne 0x100162bf
mov al, 1
jmp 0x100164cf
mov edx, dword [ebp - 4]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.WS2_32.dll_inet_ntoa]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x100162dc
xor al, al
jmp 0x100164cf
movsx ecx, byte [0x100e1e50]
test ecx, ecx
je 0x10016303
push 0x100e1e50
mov edx, dword [ebp - 8]
push edx
call fcn.10003d60
add esp, 8
test eax, eax
jne 0x10016303
mov al, 1
jmp 0x100164cf
movsx eax, byte [0x100e7a68]
test eax, eax
je 0x10016360
mov ecx, dword [ebp - 8]
movsx edx, byte [ecx]
test edx, edx
je 0x10016360
mov eax, dword [ebp - 8]
push eax
push 0x100e7a68
call fcn.10003e70
add esp, 8
test eax, eax
je 0x1001635e
cmp dword [0x100e0004], 0x68
je 0x1001633f
cmp dword [0x100e0004], 2
jne 0x10016357
mov ecx, dword [ebp - 8]
push ecx
push 0x100e7a68
push str.CSendMonitorDDX::isMyIP_g_tc_ExceptIP_:__s__strAddr_:__s
push 0
call fcn.1001a870
add esp, 0x10
mov al, 1
jmp 0x100164cf
jmp 0x10016384
mov edx, dword [ebp - 8]
movsx eax, byte [edx]
test eax, eax
je 0x10016384
mov ecx, dword [ebp - 8]
push ecx
call fcn.1000b820
add esp, 4
movzx edx, al
test edx, edx
je 0x10016384
mov al, 1
jmp 0x100164cf
xor al, al
jmp 0x100164cf
cmp dword [ebp + 0xc], 0
jne 0x10016398
xor al, al
jmp 0x100164cf
movsx eax, byte [0x100e1e50]
test eax, eax
je 0x100163bf
push 0x100e1e50
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.10003d60
add esp, 8
test eax, eax
jne 0x100163bf
mov al, 1
jmp 0x100164cf
push 8
push str.169.254.
mov edx, dword [ebp + 0xc]
push edx
call fcn.10003dc0
add esp, 0xc
test eax, eax
jne 0x100163e7
mov dword [0x1003e548], 0x1f2e3d4c
mov al, 1
jmp 0x100164cf
push 0x100383a8
mov eax, dword [ebp + 0xc]
push eax
call fcn.10003d60
add esp, 8
test eax, eax
jne 0x10016403
mov al, 1
jmp 0x100164cf
push str.0.0.0.0
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.10003d60
add esp, 8
test eax, eax
jne 0x1001641f
mov al, 1
jmp 0x100164cf
push str.1.1.1.1
mov edx, dword [ebp + 0xc]
push edx
call fcn.10003d60
add esp, 8
test eax, eax
jne 0x1001643b
mov al, 1
jmp 0x100164cf
push str.255.255.255.255
mov eax, dword [ebp + 0xc]
push eax
call fcn.10003d60
add esp, 8
test eax, eax
jne 0x10016454
mov al, 1
jmp 0x100164cf
movsx ecx, byte [0x100e7a68]
test ecx, ecx
je 0x100164ac
mov edx, dword [ebp + 0xc]
movsx eax, byte [edx]
test eax, eax
je 0x100164ac
mov ecx, dword [ebp + 0xc]
push ecx
push 0x100e7a68
call fcn.10003e70
add esp, 8
test eax, eax
je 0x100164ac
cmp dword [0x100e0004], 0x68
je 0x10016490
cmp dword [0x100e0004], 2
jne 0x100164a8
mov edx, dword [ebp + 0xc]
push edx
push 0x100e7a68
push str.CSendMonitorDDX::isMyIP2_g_tc_ExceptIP_:__s__addr_:__s
push 0
call fcn.1001a870
add esp, 0x10
mov al, 1
jmp 0x100164cf
mov eax, dword [ebp + 0xc]
movsx ecx, byte [eax]
test ecx, ecx
je 0x100164cd
mov edx, dword [ebp + 0xc]
push edx
call fcn.1000b820
add esp, 4
movzx eax, al
test eax, eax
je 0x100164cd
mov al, 1
jmp 0x100164cf
xor al, al
mov esp, ebp
pop ebp
ret 8