Function at 0x4db780
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x61c868]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x68]
cmp eax, dword [ecx + 8]
jbe 0x4dc002
sub esp, 0xe8
mov eax, 0
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], eax
mov byte [esp + 0x37], 0
mov eax, dword [edx + 4]
mov dword [esp + 0x4c], eax
mov ecx, dword [edx + 8]
mov dword [esp + 0xa4], ecx
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x78], ebx
mov ebp, dword [edx + 0x10]
mov dword [esp + 0x3c], ebp
mov edx, dword [edx + 0x14]
mov dword [esp + 0x44], edx
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp], eax
mov dword [esp + 4], ecx
call sym.net.acquireThread
mov eax, dword [esp + 8]
test eax, eax
je 0x4db957
mov ecx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], ecx
call sym.net.mapErr
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov eax, dword [eax + 0xc]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 0x4c]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 4]
mov dword [esp + 0xc0], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x68], edx
mov ebx, dword [esp + 0xa4]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0xbc], ecx
lea edx, [0x519c20]
mov dword [esp], edx
call sym.runtime.newobject
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x3c]
mov dword [eax + 0x14], ecx
mov ecx, dword [0x61c998]
test ecx, ecx
jne 0x4db8b4
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0xc0]
jmp 0x4db8c9
call sym.runtime.gcWriteBarrier2
mov ecx, dword [esp + 0x78]
mov dword [edi], ecx
mov edx, dword [esp + 0xc0]
mov dword [edi + 4], edx
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x68]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x64]
cmp dword [0x5f9590], ecx
je 0x4db8e6
xor ecx, ecx
jmp 0x4db918
mov dword [esp + 0xb8], eax
mov eax, dword [0x5f9594]
mov dword [esp], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call sym.runtime.ifaceeq
movzx eax, byte [esp + 0xc]
mov ecx, eax
mov eax, dword [esp + 0xb8]
mov byte [eax + 0x20], cl
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
lea ecx, [0x53b4cc]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], eax
add esp, 0xe8
ret
lea ecx, [0x5328dc]
mov dword [esp + 0xe0], ecx
mov byte [esp + 0x37], 1
lea edi, [esp + 0x7c]
xor eax, eax
call fcn.00475488
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], 1
mov dword [esp + 0x70], 0
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 4], edx
call sym.syscall.UTF16PtrFromString
mov ecx, dword [esp + 0xc]
test ecx, ecx
jne 0x4db9e4
mov eax, dword [esp + 8]
mov dword [esp + 0x74], eax
call sym.net.getSystemDNSConfig
mov eax, dword [esp]
mov dword [esp + 0xa0], eax
call sym.time.Now
lea edi, [esp + 0xc4]
lea esi, [esp]
call fcn.0047596e
xor eax, eax
xor ecx, ecx
xor edx, edx
jmp 0x4dba69
mov eax, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call sym.net.newDNSError
mov eax, dword [esp + 0x18]
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
lea ecx, [0x53b4cc]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], eax
mov byte [esp + 0x37], 0
call sym.net.releaseThread
add esp, 0xe8
ret
mov ebx, dword [esp + 0x40]
inc ebx
mov edx, ecx
mov ecx, eax
mov eax, ebx
mov ebx, dword [esp + 0xa0]
cmp dword [ebx + 0x24], eax
jle 0x4dbb69
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov dword [esp + 4], 0
lea ecx, [esp + 0x7c]
mov dword [esp + 8], ecx
lea ecx, [esp + 0x70]
mov dword [esp + 0xc], ecx
call sym.syscall.GetAddrInfoW
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
test eax, eax
je 0x4dbb54
mov dword [esp + 0x9c], ecx
mov dword [esp + 0x48], eax
lea edx, [0x53b3fc]
cmp eax, edx
je 0x4dbacd
mov ebx, 1
jmp 0x4dbafe
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [0x53adc8]
mov dword [esp + 8], edx
call sym.runtime.ifaceeq
movzx eax, byte [esp + 0xc]
xor eax, 1
mov ecx, dword [esp + 0x9c]
lea edx, [0x53b3fc]
mov ebx, eax
mov eax, dword [esp + 0x48]
test bl, bl
je 0x4dbb09
mov ebx, 1
jmp 0x4dbb5f
lea edi, [esp]
lea esi, [esp + 0xc4]
call fcn.0047596e
call sym.time.Since
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xa0]
mov ebx, dword [edx + 0x20]
cmp dword [edx + 0x1c], eax
setb al
cmp ebx, ecx
sete cl
setl bl
and ecx, eax
or ebx, ecx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x9c]
lea edx, [0x53b3fc]
jmp 0x4dbb5f
lea edx, [0x53b3fc]
mov ebx, 1
test bl, bl
je 0x4dba5e
jmp 0x4dbb73
mov eax, ecx
mov ecx, edx
lea edx, [0x53b3fc]
test eax, eax
jne 0x4dbbd0
mov eax, dword [esp + 0x70]
lea ecx, [sym.net._Resolver_.lookupIP.func1.deferwrap1]
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xdc], eax
lea eax, [esp + 0xd8]
mov dword [esp + 0xe4], eax
mov byte [esp + 0x37], 3
lea eax, [0x50dac0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 5
call sym.runtime.makeslice
mov eax, dword [esp + 0xc]
mov ecx, 5
xor edx, edx
jmp 0x4dbc7d
lea edx, [0x52659f]
mov dword [esp], edx
mov dword [esp + 4], 0xc
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call sym.net.winError
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x78]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call sym.net.newDNSError
mov eax, dword [esp + 0x18]
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
lea ecx, [0x53b4cc]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], eax
mov byte [esp + 0x37], 0
call sym.net.releaseThread
add esp, 0xe8
ret
mov ebx, dword [esp + 0x70]
mov ebx, dword [ebx + 0x1c]
mov dword [esp + 0x70], ebx
mov ebx, ecx
mov ecx, edx
mov edx, ebx
mov ebx, dword [esp + 0x70]
test ebx, ebx
je 0x4dbfaa
mov dword [esp + 0xa8], eax
mov dword [esp + 0x54], ecx
mov ebp, dword [ebx + 4]
mov ebx, dword [ebx + 0x18]
cmp ebp, 2
je 0x4dbdf6
cmp ebp, 0x17
jne 0x4dbf18
mov dword [esp + 0x50], edx
test byte [ebx], al
lea esi, [ebx + 8]
lea edi, [esp + 0x23]
call fcn.00475978
mov eax, dword [ebx + 0x18]
lea ecx, [0x5fce60]
mov dword [esp], ecx
mov dword [esp + 4], eax
call sym.net._ipv6ZoneCache_.name
mov eax, dword [esp + 8]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x38], ecx
lea edx, [esp + 0x23]
mov dword [esp], edx
mov dword [esp + 4], 0x10
mov dword [esp + 8], 0x10
call sym.net.copyIP
mov eax, dword [esp + 0x50]
inc eax
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], edx
mov dword [esp + 0xcc], ebx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0xd0], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0xd4], ecx
mov ecx, dword [esp + 0x54]
cmp ecx, eax
jb 0x4dbd52
mov ecx, eax
mov eax, dword [esp + 0xa8]
mov edx, dword [esp + 0x54]
jmp 0x4dbd87
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x50dac0]
mov dword [esp + 0x10], eax
call sym.runtime.growslice
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x50], ecx
mov ebx, dword [0x61c998]
lea ebp, [ecx + ecx*4]
lea edi, [eax + ebp*4 - 0x14]
test ebx, ebx
je 0x4dbde1
mov dword [esp + 0xb4], eax
mov dword [esp + 0x68], edx
mov dword [esp + 0xb0], edi
lea eax, [0x50dac0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xc4]
mov dword [esp + 8], eax
call sym.runtime.wbMove
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x68]
mov edi, dword [esp + 0xb0]
lea esi, [esp + 0xc4]
call fcn.0047596e
mov ecx, dword [esp + 0x50]
jmp 0x4dbc6c
mov eax, dword [ebx + 4]
mov dword [esp + 0x33], eax
lea eax, [edx + 1]
mov dword [esp + 0x60], eax
lea ecx, [esp + 0x33]
mov dword [esp], ecx
mov dword [esp + 4], 4
mov dword [esp + 8], 4
call sym.net.copyIP
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x14]
lea edi, [esp + 0xc4]
mov ebx, eax
xor eax, eax
call fcn.0047548b
mov dword [esp + 0xc4], ebx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], edx
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x60]
cmp ecx, edx
jb 0x4dbe74
mov ecx, edx
mov eax, dword [esp + 0xa8]
mov edx, dword [esp + 0x54]
jmp 0x4dbea9
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x50dac0]
mov dword [esp + 0x10], eax
call sym.runtime.growslice
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x50], ecx
mov ebx, dword [0x61c998]
lea ebp, [ecx + ecx*4]
lea edi, [eax + ebp*4 - 0x14]
test ebx, ebx
je 0x4dbf03
mov dword [esp + 0xac], eax
mov dword [esp + 0x58], edx
mov dword [esp + 0xb0], edi
lea eax, [0x50dac0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xc4]
mov dword [esp + 8], eax
call sym.runtime.wbMove
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x58]
mov edi, dword [esp + 0xb0]
lea esi, [esp + 0xc4]
call fcn.0047596e
mov ecx, dword [esp + 0x50]
jmp 0x4dbc6c
lea eax, [0x53b3fc]
mov dword [esp], eax
lea eax, [0x53adac]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call sym.net.newDNSError
mov eax, dword [esp + 0x18]
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
lea ecx, [0x53b4cc]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], eax
mov byte [esp + 0x37], 1
mov edx, dword [esp + 0xe4]
mov eax, dword [edx]
call eax
mov byte [esp + 0x37], 0
call sym.net.releaseThread
add esp, 0xe8
ret
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], edx
mov dword [esp + 0xf4], ecx
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov byte [esp + 0x37], 1
mov edx, dword [esp + 0xe4]
mov eax, dword [edx]
call eax
mov byte [esp + 0x37], 0
call sym.net.releaseThread
add esp, 0xe8
ret
call sym.runtime.morestack
jmp sym.net._Resolver_.lookupIP.func1