Function at 0x1400118f4
Capabilities:
Check for peb beingdebugged flag
Resolve dns

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov dword [rax + 0x20], r9d
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
xor r10d, r10d
mov r14, r8
mov qword [rax - 0x40], r10
mov rdi, rcx
mov esi, r10d
mov r9d, r10d
mov r15d, r10d
mov ebp, r10d
cmp edx, 0x1c
jae 0x14001193c
mov ebx, 0x80000005
jmp 0x140011bf3
mov r8d, dword [rcx + 0x14]
lea eax, [r8 - 1]
cmp eax, 0xfffe
ja 0x140011bee
mov ecx, dword [rcx + 0x10]
lea eax, [rcx - 0x1c]
cmp eax, 0xffe3
ja 0x140011bee
lea eax, [rcx + r8]
cmp edx, eax
jb 0x140011932
mov ecx, dword [rdi + 0x18]
mov ebx, r10d
mov dword [rsp + 0x30], ebx
test ecx, ecx
je 0x1400119c9
sub ecx, 1
je 0x1400119c1
sub ecx, 1
je 0x1400119b9
sub ecx, 1
je 0x1400119a4
cmp ecx, 1
je 0x140011994
mov ebx, 0xc000000d
jmp 0x140011bab
mov r13b, 1
mov r12b, r10b
mov byte [rsp + 0x98], r13b
jmp 0x1400119d7
mov r12b, 1
mov byte [rsp + 0x98], r10b
mov byte [rsp + 0x20], r12b
mov r13b, r10b
jmp 0x1400119dc
mov r12b, r10b
mov r13b, 1
jmp 0x1400119cf
mov r12b, 1
mov r13b, r10b
jmp 0x1400119cf
mov r12b, 1
mov r13b, r12b
mov byte [rsp + 0x98], r10b
mov byte [rsp + 0x20], r10b
mov rcx, qword gs:[0x60]
xor edx, edx
mov qword [rsp + 0x28], r8
add r8, 2
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
nop dword [rax + rax]
xor r10d, r10d
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140011be7
mov edx, dword [rdi + 0x10]
mov rcx, rax
add rdx, rdi
mov rdi, qword [rsp + 0x28]
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov rcx, qword [rsp + 0x40]
lea r9, [rsp + 0x38]
shr rdi, 1
xor r8d, r8d
xor edx, edx
mov word [rcx + rdi*2], si
call qword [sym.imp.WS2_32.dll_GetAddrInfoW]
nop dword [rax + rax]
test eax, eax
je 0x140011a67
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x38]
mov dword [r14 + 0x20], eax
jmp 0x140011b81
mov rcx, qword [rsp + 0x38]
mov rax, rcx
test rcx, rcx
je 0x140011a80
mov rax, qword [rax + 0x28]
inc r15d
test rax, rax
jne 0x140011a74
mov dl, byte [rsp + 0x98]
mov ebx, Ordinal_73
mov r8b, byte [rsp + 0x20]
mov r9d, esi
lea edi, [rbx - 0x45]
test r9d, r9d
movzx eax, r12b
movzx r10d, dl
mov r11, rcx
cmove r10d, eax
movzx eax, r13b
mov dword [rsp + 0x24], r10d
movzx r10d, r8b
cmove r10d, eax
mov dword [rsp + 0x28], r10d
test rcx, rcx
je 0x140011b71
mov edx, dword [rsp + 0x24]
cmp r15d, ebx
mov ecx, 2
mov esi, r15d
cmova esi, ebx
mov r8d, r10d
lea ebx, [rcx + 0x15]
cmp ebp, esi
jae 0x140011b58
mov rdi, qword [r11 + 0x20]
mov eax, ebp
imul r10, rax, 0x1c
cmp word [rdi], cx
je 0x140011b2a
cmp word [rdi], bx
jne 0x140011b4f
test r8b, r8b
je 0x140011b4f
mov word [r10 + r14 + 0x30], bx
movzx eax, word [rdi + 2]
mov word [r10 + r14 + 0x32], ax
mov eax, dword [rdi + 4]
mov dword [r10 + r14 + 0x34], eax
mov eax, dword [rdi + 0x18]
mov dword [r10 + r14 + 0x48], eax
movups xmm0, xmmword [rdi + 8]
movdqu xmmword [r10 + r14 + 0x38], xmm0
jmp 0x140011b4d
test dl, dl
je 0x140011b4f
mov word [r10 + r14 + 0x30], cx
movzx eax, word [rdi + 2]
mov word [r10 + r14 + 0x32], ax
mov eax, dword [rdi + 4]
mov dword [r10 + r14 + 0x34], eax
xor eax, eax
mov qword [r10 + r14 + 0x38], rax
inc ebp
mov r11, qword [r11 + 0x28]
test r11, r11
jne 0x140011ae0
mov rcx, qword [rsp + 0x38]
xor esi, esi
mov dl, byte [rsp + 0x98]
mov r8b, byte [rsp + 0x20]
lea edi, [rsi + 2]
lea ebx, [rsi + 0x47]
inc r9d
cmp r9d, edi
jb 0x140011a97
mov ebx, dword [rsp + 0x30]
xor r10d, r10d
test rcx, rcx
je 0x140011b98
call qword [sym.imp.WS2_32.dll_FreeAddrInfoW]
nop dword [rax + rax]
xor r10d, r10d
mov r9, qword [rsp + 0x40]
imul esi, ebp, 0x1c
mov dword [r14 + 0x28], r15d
mov dword [r14 + 0x2c], ebp
add esi, 0x30
mov edi, esi
test r9, r9
je 0x140011bd3
mov rcx, qword gs:[0x60]
mov r8, r9
xor edx, edx
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
nop dword [rax + rax]
xor r10d, r10d
mov eax, ebx
cmp esi, 0x800
mov ebx, 0x80000005
cmova eax, ebx
mov ebx, eax
jmp 0x140011bf6
mov ebx, 0xc000009a
jmp 0x140011bf3
mov ebx, 0xc000000d
mov edi, r10d
mov rcx, qword [rsp + 0xa0]
lea r11, [rsp + 0x50]
cmp esi, 0x800
mov eax, ebx
cmova edi, r10d
mov dword [rcx], edi
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret