Function at 0x14006e294
Capabilities:
Resolve dns

Disassembly:
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x80
lea rbp, [rsp + 0x30]
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], rsi
mov qword [rbp + 0x90], rdi
mov rax, qword [0x1401ff510]
xor rax, rbp
mov qword [rbp + 0x48], rax
xor edi, edi
mov qword [rbp + 0x10], rdx
mov qword [rbp], rdi
mov r15d, 1
mov dword [rbp + 8], r15d
mov rsi, r8
mov rbx, rdx
mov r14, rcx
mov r13d, edi
test r8, r8
je 0x14006e303
xor eax, eax
mov qword [r8], rax
mov qword [r8 + 8], rax
mov qword [r8 + 0x10], rax
mov dword [r8 + 0x18], eax
xor edx, edx
lea rcx, [rbp + 0x18]
lea r8d, [rdx + 0x30]
call fcn.14015dbb0
cmp byte [r14], 0x5b
mov dword [rbp + 0x20], r15d
movabs r15, 0xffffffffffffff0
mov dword [rbp + 0x1c], edi
mov dword [rbp + 0x24], 6
jne 0x14006e382
mov edx, 0x1000
mov rcx, r14
call fcn.1401646ec
movsxd rdx, eax
mov rcx, rax
lea rax, [rdx + 0xf]
cmp rax, rdx
ja 0x14006e34f
mov rax, r15
and rax, 0xfffffffffffffff0
call fcn.14015cbf0
sub rsp, rax
lea r8, [r14 + 1]
lea eax, [rcx - 2]
movsxd rbx, eax
mov r9, rbx
lea rdi, [rsp + 0x30]
mov rcx, rdi
call section..text
mov byte [rbx + rdi], r13b
mov r14, rdi
mov rbx, qword [rbp + 0x10]
xor edi, edi
test r14, r14
jne 0x14006e38b
mov eax, edi
jmp 0x14006e3af
mov dword [rsp + 0x28], edi
or r9d, 0xffffffff
mov r8, r14
mov qword [rsp + 0x20], rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [rax*2 + 2]
movsxd r12, eax
test rbx, rbx
jne 0x14006e3bb
mov eax, edi
jmp 0x14006e3df
mov dword [rsp + 0x28], edi
or r9d, 0xffffffff
mov r8, rbx
mov qword [rsp + 0x20], rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [rax*2 + 2]
movsxd r15, eax
movabs rcx, 0xffffffffffffff0
test r12, r12
je 0x14006e40f
lea rax, [r12 + 0xf]
cmp rax, r12
ja 0x14006e3fe
mov rax, rcx
and rax, 0xfffffffffffffff0
call fcn.14015cbf0
sub rsp, rax
lea rdi, [rsp + 0x30]
test r15, r15
jne 0x14006e418
xor ebx, ebx
jmp 0x14006e435
lea rax, [r15 + 0xf]
cmp rax, r15
ja 0x14006e424
mov rax, rcx
and rax, 0xfffffffffffffff0
call fcn.14015cbf0
sub rsp, rax
lea rbx, [rsp + 0x30]
test rdi, rdi
je 0x14006e458
mov dword [rsp + 0x28], r12d
or r9d, 0xffffffff
mov r8, r14
mov qword [rsp + 0x20], rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test rbx, rbx
je 0x14006e47c
mov r8, qword [rbp + 0x10]
or r9d, 0xffffffff
mov dword [rsp + 0x28], r15d
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea r9, [rbp]
mov rdx, rbx
lea r8, [rbp + 0x18]
mov rcx, rdi
call qword [sym.imp.WS2_32.dll_GetAddrInfoW]
mov ebx, eax
test eax, eax
je 0x14006e4a9
mov rcx, qword [rbp]
test rcx, rcx
je 0x14006e4a5
call qword [sym.imp.WS2_32.dll_FreeAddrInfoW]
mov eax, ebx
jmp 0x14006e501
mov rbx, qword [rbp]
test rbx, rbx
jne 0x14006e4b7
or eax, 0xffffffff
jmp 0x14006e501
mov edi, dword [rbp + 8]
test edi, edi
jle 0x14006e4f4
cmp dword [rbx + 4], 2
je 0x14006e4ca
cmp dword [rbx + 4], 0x17
jne 0x14006e4eb
mov r9, qword [rbx + 0x10]
mov edx, 0x1c
mov r8, qword [rbx + 0x20]
movsxd rax, r13d
imul rcx, rax, 0x1c
add rcx, rsi
call section..text
inc r13d
dec edi
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x14006e4ba
mov rcx, qword [rbp]
call qword [sym.imp.WS2_32.dll_FreeAddrInfoW]
mov eax, r13d
mov rcx, qword [rbp + 0x48]
xor rcx, rbp
call fcn.14015c600
mov rbx, qword [rbp + 0x80]
mov rsi, qword [rbp + 0x88]
mov rdi, qword [rbp + 0x90]
lea rsp, [rbp + 0x50]
pop r15
pop r14
pop r13
pop r12
pop rbp
ret