Function at 0x14000eb20
Capabilities:
Resolve dns

Disassembly:
test rcx, rcx
je 0x14000f18d
mov r11, rsp
push rbx
push rdi
push r14
sub rsp, 0x130
mov rax, qword [0x140067008]
xor rax, rsp
mov qword [rsp + 0x100], rax
mov r14, r8
mov rbx, rdx
mov rdi, rcx
test rdx, rdx
je 0x14000f172
test r8, r8
je 0x14000f172
mov qword [r11 - 0x20], rbp
mov qword [r11 - 0x28], rsi
mov qword [r11 - 0x30], r12
xor r12d, r12d
mov qword [r8], rcx
mov ecx, 0x1000
mov qword [r8 + 0x18], r12
mov qword [r8 + 0x10], 0x1000
call fcn.14002da3c
mov rcx, qword [r14 + 0x10]
shl rcx, 3
mov qword [r14 + 8], rax
mov qword [r14 + 0x28], 0x100
mov qword [r14 + 0x30], r12
call fcn.14002da3c
mov qword [r14 + 0x20], rax
lea rdx, str.SERVER_NAME_s
mov r8, qword [rdi + 0x490]
mov rcx, r14
mov r8, qword [r8 + 0x38]
call fcn.14000e950
mov r8, qword [rdi + 0x490]
lea rdx, str.SERVER_ROOT_s
mov rcx, r14
mov r8, qword [r8 + 0x98]
call fcn.14000e950
mov r8, qword [rdi + 0x490]
lea rdx, str.DOCUMENT_ROOT_s
mov rcx, r14
mov r8, qword [r8 + 0x98]
call fcn.14000e950
lea r9, [0x14005b620]
mov rcx, r14
lea r8, str.Civetweb
lea rdx, str.SERVER_SOFTWARE_s__s
call fcn.14000e950
lea r8, str.GATEWAY_INTERFACECGI_1.1
mov rcx, r14
lea rdx, [0x140059f14]
call fcn.14000e950
lea r8, str.SERVER_PROTOCOLHTTP_1.1
mov rcx, r14
lea rdx, [0x140059f14]
call fcn.14000e950
lea r8, str.REDIRECT_STATUS200
mov rcx, r14
lea rdx, [0x140059f14]
call fcn.14000e950
movzx ecx, word [rdi + 0x4b2]
call qword [sym.imp.WS2_32.dll_ntohs]
movzx r8d, ax
lea rdx, str.SERVER_PORT_d
mov rcx, r14
call fcn.14000e950
lea rcx, [rdi + 0x4c0]
mov byte [rsp + 0x48], r12b
test rcx, rcx
je 0x14000ecbe
cmp word [rcx], 2
jne 0x14000ecbe
mov dword [rsp + 0x30], 2
lea r9d, [r12 + 0x32]
mov dword [rsp + 0x28], r12d
lea r8, [rsp + 0x48]
lea edx, [r12 + 0x10]
mov qword [rsp + 0x20], r12
call qword [sym.imp.WS2_32.dll_getnameinfo]
lea r8, [rsp + 0x48]
mov rcx, r14
lea rdx, str.REMOTE_ADDR_s
call fcn.14000e950
mov r8, qword [rdi]
lea rdx, str.REQUEST_METHOD_s
mov rcx, r14
call fcn.14000e950
mov r8d, dword [rdi + 0x70]
lea rdx, str.REMOTE_PORT_d
mov rcx, r14
call fcn.14000e950
mov r8, qword [rdi + 8]
lea rdx, str.REQUEST_URI_s
mov rcx, r14
call fcn.14000e950
mov r8, qword [rdi + 0x10]
lea rdx, str.LOCAL_URI_s
mov rcx, r14
call fcn.14000e950
mov rax, qword [rdi + 0x520]
test rax, rax
jne 0x14000ed2e
mov ecx, r12d
jmp 0x14000ed3e
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], r12b
jne 0x14000ed35
mov r9, qword [rdi + 0x10]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [r9 + rax], r12b
jne 0x14000ed50
sub eax, ecx
lea rdx, str.SCRIPT_NAME_.s
mov r8d, eax
mov rcx, r14
call fcn.14000e950
mov r8, rbx
lea rdx, str.SCRIPT_FILENAME_s
mov rcx, r14
call fcn.14000e950
mov r8, qword [rdi + 0x490]
mov rcx, r14
mov r9, qword [rdi + 0x520]
mov r8, qword [r8 + 0x98]
test r9, r9
jne 0x14000edaa
lea rdx, str.PATH_TRANSLATED_s
call fcn.14000e950
jmp 0x14000edb6
lea rdx, str.PATH_TRANSLATED_s_s
call fcn.14000e950
cmp qword [rdi + 0x498], r12
lea rax, [0x14005cf78]
lea r8, [0x14005cf7c]
mov rcx, r14
cmove r8, rax
lea rdx, str.HTTPS_s
call fcn.14000e950
lea rdx, str.Content_Type
mov rcx, rdi
call fcn.140007d20
test rax, rax
je 0x14000ee04
mov r8, rax
lea rdx, str.CONTENT_TYPE_s
mov rcx, r14
call fcn.14000e950
mov r8, qword [rdi + 0x28]
test r8, r8
je 0x14000ee1c
lea rdx, str.QUERY_STRING_s
mov rcx, r14
call fcn.14000e950
lea rdx, str.Content_Length
mov rcx, rdi
call fcn.140007d20
test rax, rax
je 0x14000ee42
mov r8, rax
lea rdx, str.CONTENT_LENGTH_s
mov rcx, r14
call fcn.14000e950
lea rcx, str.PATH
call fcn.14003d870
test rax, rax
je 0x14000ee65
mov r8, rax
lea rdx, str.PATH_s
mov rcx, r14
call fcn.14000e950
mov r8, qword [rdi + 0x520]
test r8, r8
je 0x14000ee80
lea rdx, str.PATH_INFO_s
mov rcx, r14
call fcn.14000e950
mov r8d, dword [rdi + 0x540]
test r8d, r8d
jle 0x14000ee9b
lea rdx, str.STATUS_d
mov rcx, r14
call fcn.14000e950
lea rcx, str.COMSPEC
call fcn.14003d870
test rax, rax
je 0x14000eebe
mov r8, rax
lea rdx, str.COMSPEC_s
mov rcx, r14
call fcn.14000e950
lea rcx, str.SYSTEMROOT
call fcn.14003d870
test rax, rax
je 0x14000eee1
mov r8, rax
lea rdx, str.SYSTEMROOT_s
mov rcx, r14
call fcn.14000e950
lea rcx, str.SystemDrive
call fcn.14003d870
test rax, rax
je 0x14000ef04
mov r8, rax
lea rdx, str.SystemDrive_s
mov rcx, r14
call fcn.14000e950
lea rcx, str.ProgramFiles
call fcn.14003d870
test rax, rax
je 0x14000ef27
mov r8, rax
lea rdx, str.ProgramFiles_s
mov rcx, r14
call fcn.14000e950
lea rcx, str.ProgramFiles_x86_
call fcn.14003d870
test rax, rax
je 0x14000ef4a
mov r8, rax
lea rdx, str.ProgramFiles_x86__s
mov rcx, r14
call fcn.14000e950
lea rcx, str.PERLLIB
call fcn.14003d870
test rax, rax
je 0x14000ef6d
mov r8, rax
lea rdx, str.PERLLIB_s
mov rcx, r14
call fcn.14000e950
mov r8, qword [rdi + 0x30]
test r8, r8
je 0x14000ef9b
lea rdx, str.REMOTE_USER_s
mov rcx, r14
call fcn.14000e950
lea r8, str.AUTH_TYPEDigest
mov rcx, r14
lea rdx, [0x140059f14]
call fcn.14000e950
mov ebp, r12d
cmp dword [rdi + 0x88], r12d
jle 0x14000f082
mov qword [rsp + 0x110], r15
lea rsi, [rdi + 0x90]
lea r15, str.HTTP__s
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rsi]
lea r8, [rsp + 0x80]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x40]
mov r9d, 0x80
mov qword [rsp + 0x20], r15
mov rcx, rdi
call fcn.140007970
cmp dword [rsp + 0x40], r12d
je 0x14000f01a
mov r9, qword [rsi]
lea r8, str.prepare_cgi_environment
lea rdx, str._s:_HTTP_header_variable_too_long___s_
mov rcx, rdi
call fcn.1400079a0
jmp 0x14000f068
movzx eax, byte [rsp + 0x80]
lea rbx, [rsp + 0x80]
test al, al
je 0x14000f04d
nop
cmp al, 0x2d
jne 0x14000f039
mov byte [rbx], 0x5f
mov al, 0x5f
movzx ecx, al
call fcn.140032bbc
mov byte [rbx], al
inc rbx
movzx eax, byte [rbx]
test al, al
jne 0x14000f030
mov r9, qword [rsi + 8]
lea r8, [rsp + 0x80]
lea rdx, str._s_s
mov rcx, r14
call fcn.14000e950
inc ebp
add rsi, 0x10
cmp ebp, dword [rdi + 0x88]
jl 0x14000efd0
mov r15, qword [rsp + 0x110]
mov rbx, qword [rdi + 0x490]
mov rbp, qword [rsp + 0x128]
mov rbx, qword [rbx + 0x18]
test rbx, rbx
je 0x14000f14a
movzx eax, byte [rbx]
test al, al
je 0x14000f14a
nop dword [rax]
mov rdi, rbx
cmp al, 0x20
je 0x14000f0bb
cmp al, 9
jne 0x14000f0c4
movzx eax, byte [rbx + 1]
inc rbx
jmp 0x14000f0b0
mov edx, 0x2c
mov rcx, rbx
mov rsi, rbx
call fcn.14002c2d0
mov rbx, rax
test rax, rax
je 0x14000f0e4
sub rax, rdi
inc rbx
jmp 0x14000f0fd
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rdi + rax], r12b
jne 0x14000f0f0
lea rbx, [rdi + rax]
lea edx, [rax - 1]
test edx, edx
js 0x14000f11d
movsxd rax, edx
movzx ecx, byte [rdi + rax]
cmp cl, 0x20
je 0x14000f115
cmp cl, 9
jne 0x14000f11d
dec edx
sub rax, 1
jns 0x14000f107
lea eax, [rdx + 1]
movsxd rcx, eax
test eax, eax
je 0x14000f095
test rbx, rbx
je 0x14000f14a
mov r8d, ecx
lea rdx, str._.s
mov rcx, r14
mov r9, rsi
call fcn.14000e950
jmp 0x14000f095
mov rcx, qword [r14 + 0x30]
mov rax, qword [r14 + 0x20]
mov rsi, qword [rsp + 0x120]
mov qword [rax + rcx*8], r12
mov rcx, qword [r14 + 0x18]
mov rax, qword [r14 + 8]
mov byte [rcx + rax], r12b
mov r12, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x100]
xor rcx, rsp
call fcn.14002b5c0
add rsp, 0x130
pop r14
pop rdi
pop rbx
ret