Function at 0x575fd0
Capabilities:
Resolve dns

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xa8
test r8, r8
mov rdi, rcx
mov rbp, rdx
mov rsi, r9
mov dword [rsp + 0x3c], 0
je 0x576081
mov rax, qword [r8]
mov rdx, qword [r8 + 8]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdx
mov rax, qword [r8 + 0x10]
mov rdx, qword [r8 + 0x18]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], rdx
mov rax, qword [r8 + 0x20]
mov rdx, qword [r8 + 0x28]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rdx
lea rbx, [rsp + 0x70]
mov rcx, rbx
call fcn.00575bf0
lea rax, [rsp + 0x3c]
mov r9, rsi
mov r8, rbx
mov rdx, rbp
mov rcx, rdi
mov qword [rsp + 0x20], rax
call fcn.00574e90
cmp eax, 0xfffea06e
je 0x5760d0
add rsp, 0xa8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 0
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x88], 0
mov qword [rsp + 0x90], 0
mov qword [rsp + 0x98], 0
jmp 0x57603e
mov rcx, rdi
call qword [sym.imp.WS2_32.dll_gethostbyname]
mov r14, rax
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
test r14, r14
mov edx, eax
je 0x576230
mov eax, dword [rsp + 0x74]
movzx edx, word [r14 + 0x10]
test eax, eax
je 0x576105
movsx ecx, dx
cmp ecx, eax
jne 0x576325
cmp word [r14 + 0x12], 0
je 0x57631b
cmp dx, 2
je 0x576126
cmp dx, 0x17
mov eax, 0xfffffc77
jne 0x57606d
cmp dx, 2
mov ecx, dword [rsp + 0x3c]
je 0x5762b1
cmp dx, 0x17
jne 0x5762a0
lea rbp, [rsp + 0x50]
xor eax, eax
mov edx, 0x17
mov qword [rsp + 0x52], 0
mov qword [rsp + 0x5a], 0
movzx ecx, cx
mov qword [rbp + 0x12], 0
mov word [rbp + 0x1a], ax
mov word [rsp + 0x50], dx
call qword [sym.imp.WS2_32.dll_htons]
cmp word [r14 + 0x12], 0x10
mov word [rsp + 0x52], ax
jne 0x5762fe
lea r12, [rbp + 8]
mov r13d, 0x1c
mov rax, qword [r14 + 0x18]
mov rdx, qword [rax]
test rdx, rdx
je 0x5762a0
mov r15d, 8
xor edi, edi
nop dword [rax]
movsx r8, word [r14 + 0x12]
mov rcx, r12
call sub.msvcrt.dll_memcpy
mov r8, rbx
mov edx, r13d
mov rcx, rbp
call fcn.00573bc0
test rax, rax
je 0x576280
test rdi, rdi
mov rcx, rdi
jne 0x5761e4
jmp 0x576270
mov rcx, rdx
mov rdx, qword [rcx + 0x28]
test rdx, rdx
jne 0x5761e1
mov qword [rcx + 0x28], rax
mov rax, qword [r14 + 0x18]
mov rdx, qword [rax + r15]
add r15, 8
test rdx, rdx
jne 0x5761b0
test byte [rsp + 0x71], 0x20
je 0x57621f
mov rcx, qword [r14]
test rcx, rcx
je 0x57621f
call fcn.0056d4b0
test rax, rax
mov qword [rdi + 0x18], rax
je 0x576280
mov qword [rsi], rdi
xor eax, eax
jmp 0x57606d
cmp edx, 0x2afa
mov eax, 0xfffffc7a
je 0x57606d
cmp edx, 0x2afc
mov eax, 0xfffffc75
je 0x57606d
xor eax, eax
cmp edx, 0x2af9
setne al
lea eax, [rax*4 - 0x38c]
jmp 0x57606d
mov rdi, rax
jmp 0x5761f1
mov rcx, rdi
call fcn.00573b80
mov qword [rsi], 0
mov eax, 0xfffffc76
jmp 0x57606d
mov qword [rsi], 0
mov eax, 0xfffffc76
jmp 0x57606d
lea rbp, [rsp + 0x40]
xor r8d, r8d
mov r9d, 2
mov qword [rsp + 0x42], 0
mov word [rsp + 0x40], r9w
movzx ecx, cx
mov dword [rbp + 0xa], 0
mov word [rbp + 0xe], r8w
lea r12, [rbp + 4]
call qword [sym.imp.WS2_32.dll_htons]
cmp word [r14 + 0x12], 4
mov word [rsp + 0x42], ax
mov r13d, 0x10
je 0x576191
lea rcx, str.Weird_h_length_from_gethostbyname
call fcn.00577220
mov qword [rsi], 0
mov eax, 0xfffffc76
jmp 0x57606d
mov eax, 0xfffffc75
jmp 0x57606d
mov eax, 0xfffffc74
jmp 0x57606d