Function at 0x50c340
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x50c556
push rbp
mov rbp, rsp
sub rsp, 0x70
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], rbx
lea rcx, [0x005776d8]
mov edi, 1
call sym.strings.Index
test rax, rax
jge 0x50c53c
lea rax, [0x00545fe3]
mov ebx, 9
lea rcx, [0x00545554]
mov edi, 3
mov rsi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
call sym.net.LookupSRV
test r8, r8
jne 0x50c3b7
test rdi, rdi
jne 0x50c46f
mov rax, qword [rsp + 0x80]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 8], rcx
mov byte [rsp + 0x10], 0x3a
call sym.internal_bytealg.IndexByteString.abi0
xorps xmm15, xmm15
mov r14, qword [0x006979f0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0
jl 0x50c433
xor eax, eax
lea rbx, [0x005776e0]
mov ecx, 1
mov rdi, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
lea r8, [0x00545504]
mov r9d, 2
lea r10, str.25565_nil_Errorwritecloseint16int32int64uint8arrayslice_and_defersweepschedhchansudoggscanmheaptracepanicsleep_cntgcing_MB___got_..._n_maxscav__ptr_____usageinit__ms__fault_tab_top_...___fp:1562578125MarchAprilmonthLocal053004300545063003300845103012451345_0930hostsfileshttpsimap2imap3imapspop3sntohsGreeksse41sse42ssse3__at_Classconfigstring_n_____tStringFormat__byteuint16uint32uint64structchan____chan_Valuesysmontimersefenceselect__not_object_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max__...__n_base_390625SundayMondayFridayAugustminutesecondUTC_11UTC_02UTC_08UTC_09UTC12UTC13numbernetdns.localreturnlisten.onionsocketacceptdomaingophertelnetGetACPCommonrdtscppopcntcmd_go__val_LengthWeightTargetheaderAnswerUsage:_nfloat32float64windowsconsoleinvaliduintptrSwapperChanDir_Value_ConvertforcegccpuprofunknowngctraceIO_waitrunningsyscallwaitingUNKNOWN:events__goid_snil_n__scan__MB_in_pacer:___CPU___zombie__j0__head__panic:__nmsys_locks_dying_allocsGODEBUG_m__g0_pad1__pad2__text_minpc__tvalue__scan__ttypes_:_type_19531259765625TuesdayJanuaryOctoberMUI_StdMUI_Dltnumber_wsarecvwsasendconnectlookup_CopySidWSARecvWSASendos_execruntime::ffff:nil_keyanswersinterndurationGoStringFullPathscavengepollDescrwmutexWrwmutexRtraceBufdeadlockraceFinipanicnilcgocheckrunnablerax_____rbx_____rcx_____rdi_____rsi_____rbp_____rsp_____r8______r9______r10_____r11_____r12_____r13_____r14_____r15_____rip_____rflags__cs______fs______gs_______is_not__pointer_packedBAD_RANK_status_unknown_trigger_npages_nalloc_nfreed_signal__newval_mcount_bytes___stack__minLC__maxpc__tstack__minutes_etypes_48828125infinitystrconv.parsing_ParseIntThursdaySaturdayFebruaryNovemberDecember__Month__::1_:53continue_gatewayshutdowndnsqueryinvalid_address_readfromwsaioctlunixgramno_anodeCancelIoReadFileAcceptExWSAIoctlacceptexnet_httpgo_buildx509sha1PriorityClassANYQuestionminecraftcomplex64interfaceinvalid_nfuncargs_bad_indirreflect:_InterfaceprofBlockstackpoolhchanLeafwbufSpansmSpanDeadscavtraceinittracepanicwaitchan_sendpreemptedcopystack____node_ms_cpu____forced__wbuf1.n_wbuf2.n_s.limit_s.state_B_work___B_exp.___marked___unmarked_in_use__n__size__bad_prune__tail__recover:__not_in__ctxt___0__oldval__newval_threads:_status_blocked_lockedgatomicor8_runtime_m__curg_unknown_traceback_stack__lockedm244140625ParseUintWednesdaySeptember_of_type_omitempty_outboundlocalhostconnectexfiles_dnsdns_filesipv6_icmprwxrwxrwxFindCloseLocalFreeMoveFileWWriteFileWSASendTontdll.dllpsapi.dllInheritedpclmulqdqmath_randquestionsClassINETAuthorityCreateFile_dev_stdincomplex128t.Kind__notifyListprofInsertstackLargemSpanInUseGOMAXPROCSstop_traceinvalidptrschedtracesemacquiredebug_call_flushGen__MB_goal__s.state___s.base___heapGoalGOMEMLIMIT_KiB_now___pages_at__sweepgen_sweepgen___bound____limit__tracefree_tracegc___nexitThreadBad_varintGC_forced_n_runqueue_stopwait_runqsize_gfreecnt_throwing_spinningatomicand8float64nanfloat32nanException__ptrSize__targetpc_until_pcunknown_pcruntime:_ggoroutine_12207031256103515625ParseFloat__Weekday__for_type__etc_hosts.localhostsetsockoptIP_addressunixpacket__netGo__owner_diedDnsQuery_WGetIfEntryCancelIoExCreatePipeGetVersionWSACleanupWSAStartupgetsockoptdnsapi.dllws2_32.dllLockFileExWSASocketWexecerrdothttp2debugcrypto_tlsParseAddr_invalid_IPskipping:_ClassCSNETClassCHAOSAdditionalconfig.jsonhello_nworldfavicon.pngresolve:__wshort_writeCloseHandleOpenProcessunreachableGetFileType_dev_stdout_dev_stderrbad_argSizemethodargs_reflect.SetassistQueuenetpollInitreflectOffsglobalAllocmSpanManualstart_traceclobberfreegccheckmarkscheddetailcgocall_nil_s.nelems___of_size__runtime:_p__ms_clock___nBSSRootsruntime:_P__exp.__for_minTriggerGOMEMLIMITbad_m_value__elemsize_freeindex_span.list__npages__tracealloc__p__status_in_status__idleprocs_gcwaiting_schedtick_timerslen_mallocingbad_timedivfloat64nan1float64nan2float64nan3float32nan2GOTRACEBACK__at_entry__targetpc___plugin:_runtime:_g_:_frame.spcreated_by_3051
mov r11d, 5
call sym.runtime.concatstring4
jmp 0x50c465
xor eax, eax
mov rbx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
lea rdi, [0x005776d8]
mov esi, 1
lea r8, str.25565_nil_Errorwritecloseint16int32int64uint8arrayslice_and_defersweepschedhchansudoggscanmheaptracepanicsleep_cntgcing_MB___got_..._n_maxscav__ptr_____usageinit__ms__fault_tab_top_...___fp:1562578125MarchAprilmonthLocal053004300545063003300845103012451345_0930hostsfileshttpsimap2imap3imapspop3sntohsGreeksse41sse42ssse3__at_Classconfigstring_n_____tStringFormat__byteuint16uint32uint64structchan____chan_Valuesysmontimersefenceselect__not_object_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max__...__n_base_390625SundayMondayFridayAugustminutesecondUTC_11UTC_02UTC_08UTC_09UTC12UTC13numbernetdns.localreturnlisten.onionsocketacceptdomaingophertelnetGetACPCommonrdtscppopcntcmd_go__val_LengthWeightTargetheaderAnswerUsage:_nfloat32float64windowsconsoleinvaliduintptrSwapperChanDir_Value_ConvertforcegccpuprofunknowngctraceIO_waitrunningsyscallwaitingUNKNOWN:events__goid_snil_n__scan__MB_in_pacer:___CPU___zombie__j0__head__panic:__nmsys_locks_dying_allocsGODEBUG_m__g0_pad1__pad2__text_minpc__tvalue__scan__ttypes_:_type_19531259765625TuesdayJanuaryOctoberMUI_StdMUI_Dltnumber_wsarecvwsasendconnectlookup_CopySidWSARecvWSASendos_execruntime::ffff:nil_keyanswersinterndurationGoStringFullPathscavengepollDescrwmutexWrwmutexRtraceBufdeadlockraceFinipanicnilcgocheckrunnablerax_____rbx_____rcx_____rdi_____rsi_____rbp_____rsp_____r8______r9______r10_____r11_____r12_____r13_____r14_____r15_____rip_____rflags__cs______fs______gs_______is_not__pointer_packedBAD_RANK_status_unknown_trigger_npages_nalloc_nfreed_signal__newval_mcount_bytes___stack__minLC__maxpc__tstack__minutes_etypes_48828125infinitystrconv.parsing_ParseIntThursdaySaturdayFebruaryNovemberDecember__Month__::1_:53continue_gatewayshutdowndnsqueryinvalid_address_readfromwsaioctlunixgramno_anodeCancelIoReadFileAcceptExWSAIoctlacceptexnet_httpgo_buildx509sha1PriorityClassANYQuestionminecraftcomplex64interfaceinvalid_nfuncargs_bad_indirreflect:_InterfaceprofBlockstackpoolhchanLeafwbufSpansmSpanDeadscavtraceinittracepanicwaitchan_sendpreemptedcopystack____node_ms_cpu____forced__wbuf1.n_wbuf2.n_s.limit_s.state_B_work___B_exp.___marked___unmarked_in_use__n__size__bad_prune__tail__recover:__not_in__ctxt___0__oldval__newval_threads:_status_blocked_lockedgatomicor8_runtime_m__curg_unknown_traceback_stack__lockedm244140625ParseUintWednesdaySeptember_of_type_omitempty_outboundlocalhostconnectexfiles_dnsdns_filesipv6_icmprwxrwxrwxFindCloseLocalFreeMoveFileWWriteFileWSASendTontdll.dllpsapi.dllInheritedpclmulqdqmath_randquestionsClassINETAuthorityCreateFile_dev_stdincomplex128t.Kind__notifyListprofInsertstackLargemSpanInUseGOMAXPROCSstop_traceinvalidptrschedtracesemacquiredebug_call_flushGen__MB_goal__s.state___s.base___heapGoalGOMEMLIMIT_KiB_now___pages_at__sweepgen_sweepgen___bound____limit__tracefree_tracegc___nexitThreadBad_varintGC_forced_n_runqueue_stopwait_runqsize_gfreecnt_throwing_spinningatomicand8float64nanfloat32nanException__ptrSize__targetpc_until_pcunknown_pcruntime:_ggoroutine_12207031256103515625ParseFloat__Weekday__for_type__etc_hosts.localhostsetsockoptIP_addressunixpacket__netGo__owner_diedDnsQuery_WGetIfEntryCancelIoExCreatePipeGetVersionWSACleanupWSAStartupgetsockoptdnsapi.dllws2_32.dllLockFileExWSASocketWexecerrdothttp2debugcrypto_tlsParseAddr_invalid_IPskipping:_ClassCSNETClassCHAOSAdditionalconfig.jsonhello_nworldfavicon.pngresolve:__wshort_writeCloseHandleOpenProcessunreachableGetFileType_dev_stdout_dev_stderrbad_argSizemethodargs_reflect.SetassistQueuenetpollInitreflectOffsglobalAllocmSpanManualstart_traceclobberfreegccheckmarkscheddetailcgocall_nil_s.nelems___of_size__runtime:_p__ms_clock___nBSSRootsruntime:_P__exp.__for_minTriggerGOMEMLIMITbad_m_value__elemsize_freeindex_span.list__npages__tracealloc__p__status_in_status__idleprocs_gcwaiting_schedtick_timerslen_mallocingbad_timedivfloat64nan1float64nan2float64nan3float32nan2GOTRACEBACK__at_entry__targetpc___plugin:_runtime:_g_:_frame.spcreated_by_3051
mov r9d, 5
nop
call sym.runtime.concatstring3
xor ecx, ecx
xor edi, edi
add rsp, 0x70
pop rbp
ret
mov qword [rsp + 0x68], rcx
mov rdx, qword [rcx]
movzx eax, word [rdx + 0x10]
mov ebx, 0xa
call sym.strconv.FormatInt
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x48], rbx
mov rcx, qword [rsp + 0x68]
mov rcx, qword [rcx]
mov rdx, qword [rcx]
mov qword [rsp + 0x60], rdx
mov rcx, qword [rcx + 8]
mov qword [rsp + 0x50], rcx
mov qword [rsp], rdx
mov qword [rsp + 8], rcx
mov byte [rsp + 0x10], 0x3a
call sym.internal_bytealg.IndexByteString.abi0
xorps xmm15, xmm15
mov r14, qword [0x006979f0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0
jl 0x50c50b
xor eax, eax
lea rbx, [0x005776e0]
mov ecx, 1
mov rdi, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x50]
lea r8, [0x00545504]
mov r9d, 2
mov r10, qword [rsp + 0x58]
mov r11, qword [rsp + 0x48]
call sym.runtime.concatstring4
jmp 0x50c532
xor eax, eax
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
lea rdi, [0x005776d8]
mov esi, 1
mov r8, qword [rsp + 0x58]
mov r9, qword [rsp + 0x48]
call sym.runtime.concatstring3
xor ecx, ecx
xor edi, edi
add rsp, 0x70
pop rbp
ret
mov rax, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x88]
xor ecx, ecx
xor edi, edi
add rsp, 0x70
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.mcproxy_core.Resolve