Function at 0x14007dac4
Capabilities:
Resolve dns

Disassembly:
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x80
lea rbp, [rsp + 0x30]
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], rsi
mov qword [rbp + 0x90], rdi
mov rax, qword [0x140271510]
xor rax, rbp
mov qword [rbp + 0x48], rax
xor edi, edi
mov qword [rbp + 0x10], rdx
mov qword [rbp], rdi
mov r15d, 1
mov dword [rbp + 8], r15d
mov rsi, r8
mov rbx, rdx
mov r14, rcx
mov r13d, edi
test r8, r8
je 0x14007db33
xor eax, eax
mov qword [r8], rax
mov qword [r8 + 8], rax
mov qword [r8 + 0x10], rax
mov dword [r8 + 0x18], eax
xor edx, edx
lea rcx, [rbp + 0x18]
lea r8d, [rdx + 0x30]
call fcn.14016ef40
cmp byte [r14], 0x5b
mov dword [rbp + 0x20], r15d
movabs r15, 0xffffffffffffff0
mov dword [rbp + 0x1c], edi
mov dword [rbp + 0x24], 6
jne 0x14007dbb2
mov edx, 0x1000
mov rcx, r14
call fcn.140175a7c
movsxd rdx, eax
mov rcx, rax
lea rax, [rdx + 0xf]
cmp rax, rdx
ja 0x14007db7f
mov rax, r15
and rax, 0xfffffffffffffff0
call fcn.14016df80
sub rsp, rax
lea r8, [r14 + 1]
lea eax, [rcx - 2]
movsxd rbx, eax
mov r9, rbx
lea rdi, [rsp + 0x30]
mov rcx, rdi
call section..text
mov byte [rbx + rdi], r13b
mov r14, rdi
mov rbx, qword [rbp + 0x10]
xor edi, edi
test r14, r14
jne 0x14007dbbb
mov eax, edi
jmp 0x14007dbdf
mov dword [rsp + 0x28], edi
or r9d, 0xffffffff
mov r8, r14
mov qword [rsp + 0x20], rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [rax*2 + 2]
movsxd r12, eax
test rbx, rbx
jne 0x14007dbeb
mov eax, edi
jmp 0x14007dc0f
mov dword [rsp + 0x28], edi
or r9d, 0xffffffff
mov r8, rbx
mov qword [rsp + 0x20], rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [rax*2 + 2]
movsxd r15, eax
movabs rcx, 0xffffffffffffff0
test r12, r12
je 0x14007dc3f
lea rax, [r12 + 0xf]
cmp rax, r12
ja 0x14007dc2e
mov rax, rcx
and rax, 0xfffffffffffffff0
call fcn.14016df80
sub rsp, rax
lea rdi, [rsp + 0x30]
test r15, r15
jne 0x14007dc48
xor ebx, ebx
jmp 0x14007dc65
lea rax, [r15 + 0xf]
cmp rax, r15
ja 0x14007dc54
mov rax, rcx
and rax, 0xfffffffffffffff0
call fcn.14016df80
sub rsp, rax
lea rbx, [rsp + 0x30]
test rdi, rdi
je 0x14007dc88
mov dword [rsp + 0x28], r12d
or r9d, 0xffffffff
mov r8, r14
mov qword [rsp + 0x20], rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test rbx, rbx
je 0x14007dcac
mov r8, qword [rbp + 0x10]
or r9d, 0xffffffff
mov dword [rsp + 0x28], r15d
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea r9, [rbp]
mov rdx, rbx
lea r8, [rbp + 0x18]
mov rcx, rdi
call qword [sym.imp.WS2_32.dll_GetAddrInfoW]
mov ebx, eax
test eax, eax
je 0x14007dcd9
mov rcx, qword [rbp]
test rcx, rcx
je 0x14007dcd5
call qword [sym.imp.WS2_32.dll_FreeAddrInfoW]
mov eax, ebx
jmp 0x14007dd31
mov rbx, qword [rbp]
test rbx, rbx
jne 0x14007dce7
or eax, 0xffffffff
jmp 0x14007dd31
mov edi, dword [rbp + 8]
test edi, edi
jle 0x14007dd24
cmp dword [rbx + 4], 2
je 0x14007dcfa
cmp dword [rbx + 4], 0x17
jne 0x14007dd1b
mov r9, qword [rbx + 0x10]
mov edx, 0x1c
mov r8, qword [rbx + 0x20]
movsxd rax, r13d
imul rcx, rax, 0x1c
add rcx, rsi
call section..text
inc r13d
dec edi
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x14007dcea
mov rcx, qword [rbp]
call qword [sym.imp.WS2_32.dll_FreeAddrInfoW]
mov eax, r13d
mov rcx, qword [rbp + 0x48]
xor rcx, rbp
call fcn.14016d990
mov rbx, qword [rbp + 0x80]
mov rsi, qword [rbp + 0x88]
mov rdi, qword [rbp + 0x90]
lea rsp, [rbp + 0x50]
pop r15
pop r14
pop r13
pop r12
pop rbp
ret