Function at 0x140078b64
Capabilities:
Resolve dns

Disassembly:
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x80
lea rbp, [rsp + 0x30]
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], rsi
mov qword [rbp + 0x90], rdi
mov rax, qword [0x14021c510]
xor rax, rbp
mov qword [rbp + 0x48], rax
xor edi, edi
mov qword [rbp + 0x10], rdx
mov qword [rbp], rdi
mov r15d, 1
mov dword [rbp + 8], r15d
mov rsi, r8
mov rbx, rdx
mov r14, rcx
mov r13d, edi
test r8, r8
je 0x140078bd3
xor eax, eax
mov qword [r8], rax
mov qword [r8 + 8], rax
mov qword [r8 + 0x10], rax
mov dword [r8 + 0x18], eax
xor edx, edx
lea rcx, [rbp + 0x18]
lea r8d, [rdx + 0x30]
call fcn.140169620
cmp byte [r14], 0x5b
mov dword [rbp + 0x20], r15d
movabs r15, 0xffffffffffffff0
mov dword [rbp + 0x1c], edi
mov dword [rbp + 0x24], 6
jne 0x140078c52
mov edx, 0x1000
mov rcx, r14
call fcn.14017015c
movsxd rdx, eax
mov rcx, rax
lea rax, [rdx + 0xf]
cmp rax, rdx
ja 0x140078c1f
mov rax, r15
and rax, 0xfffffffffffffff0
call fcn.140168660
sub rsp, rax
lea r8, [r14 + 1]
lea eax, [rcx - 2]
movsxd rbx, eax
mov r9, rbx
lea rdi, [rsp + 0x30]
mov rcx, rdi
call section..text
mov byte [rbx + rdi], r13b
mov r14, rdi
mov rbx, qword [rbp + 0x10]
xor edi, edi
test r14, r14
jne 0x140078c5b
mov eax, edi
jmp 0x140078c7f
mov dword [rsp + 0x28], edi
or r9d, 0xffffffff
mov r8, r14
mov qword [rsp + 0x20], rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [rax*2 + 2]
movsxd r12, eax
test rbx, rbx
jne 0x140078c8b
mov eax, edi
jmp 0x140078caf
mov dword [rsp + 0x28], edi
or r9d, 0xffffffff
mov r8, rbx
mov qword [rsp + 0x20], rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [rax*2 + 2]
movsxd r15, eax
movabs rcx, 0xffffffffffffff0
test r12, r12
je 0x140078cdf
lea rax, [r12 + 0xf]
cmp rax, r12
ja 0x140078cce
mov rax, rcx
and rax, 0xfffffffffffffff0
call fcn.140168660
sub rsp, rax
lea rdi, [rsp + 0x30]
test r15, r15
jne 0x140078ce8
xor ebx, ebx
jmp 0x140078d05
lea rax, [r15 + 0xf]
cmp rax, r15
ja 0x140078cf4
mov rax, rcx
and rax, 0xfffffffffffffff0
call fcn.140168660
sub rsp, rax
lea rbx, [rsp + 0x30]
test rdi, rdi
je 0x140078d28
mov dword [rsp + 0x28], r12d
or r9d, 0xffffffff
mov r8, r14
mov qword [rsp + 0x20], rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test rbx, rbx
je 0x140078d4c
mov r8, qword [rbp + 0x10]
or r9d, 0xffffffff
mov dword [rsp + 0x28], r15d
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea r9, [rbp]
mov rdx, rbx
lea r8, [rbp + 0x18]
mov rcx, rdi
call qword [sym.imp.WS2_32.dll_GetAddrInfoW]
mov ebx, eax
test eax, eax
je 0x140078d79
mov rcx, qword [rbp]
test rcx, rcx
je 0x140078d75
call qword [sym.imp.WS2_32.dll_FreeAddrInfoW]
mov eax, ebx
jmp 0x140078dd1
mov rbx, qword [rbp]
test rbx, rbx
jne 0x140078d87
or eax, 0xffffffff
jmp 0x140078dd1
mov edi, dword [rbp + 8]
test edi, edi
jle 0x140078dc4
cmp dword [rbx + 4], 2
je 0x140078d9a
cmp dword [rbx + 4], 0x17
jne 0x140078dbb
mov r9, qword [rbx + 0x10]
mov edx, 0x1c
mov r8, qword [rbx + 0x20]
movsxd rax, r13d
imul rcx, rax, 0x1c
add rcx, rsi
call section..text
inc r13d
dec edi
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x140078d8a
mov rcx, qword [rbp]
call qword [sym.imp.WS2_32.dll_FreeAddrInfoW]
mov eax, r13d
mov rcx, qword [rbp + 0x48]
xor rcx, rbp
call fcn.140168070
mov rbx, qword [rbp + 0x80]
mov rsi, qword [rbp + 0x88]
mov rdi, qword [rbp + 0x90]
lea rsp, [rbp + 0x50]
pop r15
pop r14
pop r13
pop r12
pop rbp
ret