Function at 0x3223740
Capabilities:
Connect socket
Resolve dns

Disassembly:
push rbx
push rsi
push r13
push r15
sub rsp, 0x88
mov rax, qword [0x03260b88]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov rax, qword [0x0325c200]
mov r13, rcx
mov rcx, rdx
mov rbx, rdx
call qword [rax + 0xe0]
xor esi, esi
mov r15, rax
test rax, rax
je 0x32238d0
mov r8, qword [0x0325c200]
mov edx, 0x105dc
mov qword [rsp + 0xc0], rbp
mov rcx, rbx
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x70], r14
call qword [r8 + 0xc8]
mov r8, qword [0x0325c200]
mov edx, 0x205dd
mov rcx, rbx
mov r12, rax
call qword [r8 + pe_nt_image_headers64]
xor r9d, r9d
mov dword [rsp + 0x28], esi
xor r8d, r8d
mov dword [rsp + 0x30], eax
lea edx, [rsi + 1]
mov dword [rsp + 0x20], esi
lea ecx, [rsi + 2]
mov edi, esi
mov ebx, esi
mov r14d, esi
call qword [sym.imp.WS2_32.dll_WSASocketA]
mov rbp, rax
cmp rax, 0xffffffffffffffff
jne 0x3223802
mov ebp, esi
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x322387d
movzx ecx, word [rsp + 0x30]
mov eax, 2
mov word [rsp + 0x58], ax
call qword [sym.imp.WS2_32.dll_htons]
mov rcx, r12
mov word [rsp + 0x5a], ax
call qword [sym.imp.WS2_32.dll_inet_addr]
mov dword [rsp + 0x5c], eax
cmp eax, 0xffffffff
jne 0x322385a
mov rcx, r12
call qword [sym.imp.WS2_32.dll_gethostbyname]
test rax, rax
jne 0x3223844
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x322387d
mov rdx, qword [rax + 0x18]
lea rcx, [rsp + 0x5c]
movsx r8, word [rax + 0x12]
mov rdx, qword [rdx]
call fcn.0322a6d0
mov r8d, 0x10
lea rdx, [rsp + 0x58]
mov rcx, rbp
call qword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x3223902
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ebx, eax
test eax, eax
jne 0x322397a
mov esi, ebx
test ebx, ebx
jne 0x32238b6
mov rbx, qword [0x0325c200]
mov rcx, r14
call qword [rbx + 0x220]
mov edx, 0x20032
mov rcx, r15
mov r8d, eax
call qword [rbx + 0x58]
mov rdx, r15
mov rcx, rdi
call fcn.03228f30
mov r12, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x80]
mov rbp, qword [rsp + 0xc0]
mov r14, qword [rsp + 0x70]
mov rax, qword [0x0325c200]
mov r8, r15
mov rdx, r13
mov ecx, esi
call qword [rax + 0xc0]
xor eax, eax
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.03229100
add rsp, 0x88
pop r15
pop r13
pop rsi
pop rbx
ret
mov ecx, 0x28
call fcn.0322fc58
mov rdi, rax
test rax, rax
jne 0x3223919
lea ebx, [rax + 8]
jmp 0x322397a
mov qword [rax + 8], rsi
lea r8, [rsp + 0x38]
mov qword [rax + 0x10], rsi
xor edx, edx
mov qword [rax + 0x20], rsi
xor ecx, ecx
mov qword [rax], r13
mov qword [rax + 0x18], rbp
lea rax, [0x03223c60]
mov qword [rsp + 0x40], rax
lea rax, [0x032239f0]
mov qword [rsp + 0x48], rax
mov rax, qword [0x0325c200]
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x38], rdi
call qword [rax + 0x1f8]
mov r14, rax
test rax, rax
jne 0x3223990
mov rcx, rdi
lea ebx, [rax + 8]
call fcn.032235d0
mov rdi, rsi
test rbp, rbp
je 0x3223988
mov rcx, rbp
call qword [sym.imp.WS2_32.dll_closesocket]
mov r14, rsi
jmp 0x3223887
mov qword [rdi + 8], rax
call qword [sym.imp.WS2_32.dll_WSACreateEvent]
mov qword [rdi + 0x10], rax
test rax, rax
je 0x3223887
mov rcx, qword [rdi + 0x18]
mov r8d, 0x21
mov rdx, rax
call qword [sym.imp.WS2_32.dll_WSAEventSelect]
mov rax, qword [0x0325c200]
lea r9, [0x03223aa0]
mov rcx, qword [rdi + 0x10]
xor r8d, r8d
mov rdx, rdi
mov qword [rsp + 0x20], rsi
call qword [rax + 0x2c0]
jmp 0x322388d