Function at 0x14002fa40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x47]
sub rsp, 0xd0
mov rax, qword [0x140177698]
xor rax, rsp
mov qword [rbp + 0x17], rax
cmp byte [rdx + 0x1a37], 0
mov rbx, rdx
mov rdi, rcx
jne 0x14002fa97
cmp dword [0x1401b05e8], 0
je 0x14002ff8e
lea r8, [rdx + 0x19f6]
mov ecx, 3
lea rdx, str.AdvertiseInterface:_Returning__not_multicast_capable__s
call fcn.140051100
jmp 0x14002ff8e
mov rax, qword [rcx + 0x31f0]
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0xc8], r12
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xb8], r14
mov qword [rsp + 0xb0], r15
test rax, rax
je 0x14002fae1
nop dword [rax + rax]
cmp byte [rax + 0x1a36], 0
jne 0x14002fae1
mov rax, qword [rax]
test rax, rax
jne 0x14002fad0
test rax, rax
mov r14, rbx
mov esi, 2
mov ecx, 0x20
cmovne r14, rax
movzx eax, byte [rdx + 0x1a3c]
test al, al
cmovne esi, ecx
je 0x14002fb24
cmp dword [0x1401b05e8], 0
je 0x14002fb24
lea r8, [rdx + 0x19f6]
mov ecx, 3
lea rdx, str.AdvertiseInterface:_Marking_address_record_as_kDNSRecordTypeKnownUnique_for__s
call fcn.140051100
mov r8, qword [rbx + 0x19c0]
lea rax, [0x140046f70]
mov qword [rsp + 0x40], rbx
lea rcx, [rbx + 0xd60]
mov qword [rsp + 0x38], rax
xor r13d, r13d
mov dword [rsp + 0x30], r13d
mov r9d, 1
mov byte [rsp + 0x28], sil
xor edx, edx
mov dword [rsp + 0x20], 0x78
call fcn.140058100
mov r8, qword [rbx + 0x19c0]
lea r9d, [r13 + 0xc]
mov qword [rsp + 0x40], r13
lea rcx, [rbx + 0x1180]
mov qword [rsp + 0x38], r13
xor edx, edx
mov dword [rsp + 0x30], r13d
mov byte [rsp + 0x28], 0x20
mov dword [rsp + 0x20], 0x78
call fcn.140058100
mov r8, qword [rbx + 0x19c0]
lea r9d, [r13 + 0xd]
mov qword [rsp + 0x40], r13
lea rcx, [rbx + 0x15a0]
mov qword [rsp + 0x38], r13
xor edx, edx
mov dword [rsp + 0x30], r13d
mov byte [rsp + 0x28], 2
mov dword [rsp + 0x20], 0x78
call fcn.140058100
lea rdx, [rdi + 0x2ba8]
lea rcx, [rdi + 0x2aa8]
call fcn.140052520
mov r13, qword [rsp + 0xc0]
lea rcx, [rbx + 0xf70]
mov edx, 0x100
cmp ax, dx
ja 0x14002fc0d
movzx r8d, ax
lea rdx, [rdi + 0x2aa8]
call fcn.14004efe0
jmp 0x14002fc10
mov byte [rcx], 0
mov eax, dword [rbx + 0x19c8]
mov rsi, qword [rsp + 0x100]
cmp eax, 4
jne 0x14002fc82
mov rcx, qword [rbx + 0xd90]
lea r8, str._d._d._d._d.in_addr.arpa.
mov eax, 1
mov word [rbx + 0xd6a], ax
mov eax, dword [rbx + 0x19cc]
mov dword [rcx + 4], eax
movzx ecx, byte [rbx + 0x19cd]
movzx edx, byte [rbx + 0x19ce]
movzx eax, byte [rbx + 0x19cc]
movzx r9d, byte [rbx + 0x19cf]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
lea rcx, [rbp - 0x39]
mov dword [rsp + 0x20], edx
mov edx, 0x4a
call fcn.140058390
jmp 0x14002ff25
cmp eax, 6
jne 0x14002ff25
movups xmm0, xmmword [rbx + 0x19cc]
lea rdx, [0x140147440]
mov eax, 0x1c
mov word [rbx + 0xd6a], ax
mov rax, qword [rbx + 0xd90]
movups xmmword [rax + 4], xmm0
movzx ecx, byte [rbx + 0x19db]
mov eax, ecx
mov byte [rbp - 0x38], 0x2e
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0x36], 0x2e
mov byte [rbp - 0x34], 0x2e
mov byte [rbp - 0x32], 0x2e
movzx eax, byte [rax + rdx]
mov byte [rbp - 0x39], al
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19da]
mov byte [rbp - 0x37], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0x30], 0x2e
mov byte [rbp - 0x2e], 0x2e
mov byte [rbp - 0x2c], 0x2e
movzx eax, byte [rax + rdx]
mov byte [rbp - 0x35], al
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19d9]
mov byte [rbp - 0x33], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0x2a], 0x2e
mov byte [rbp - 0x28], 0x2e
mov byte [rbp - 0x26], 0x2e
movzx eax, byte [rax + rdx]
mov byte [rbp - 0x31], al
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19d8]
mov byte [rbp - 0x2f], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0x24], 0x2e
mov byte [rbp - 0x22], 0x2e
mov byte [rbp - 0x20], 0x2e
movzx eax, byte [rax + rdx]
mov byte [rbp - 0x2d], al
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19d7]
mov byte [rbp - 0x2b], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0x1e], 0x2e
movzx eax, byte [rax + rdx]
mov byte [rbp - 0x29], al
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19d6]
mov byte [rbp - 0x27], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
movzx eax, byte [rax + rdx]
mov byte [rbp - 0x25], al
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19d5]
mov byte [rbp - 0x23], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
movzx eax, byte [rax + rdx]
mov byte [rbp - 0x21], al
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19d4]
mov byte [rbp - 0x1f], al
mov eax, ecx
and eax, 0xf
movzx eax, byte [rax + rdx]
mov byte [rbp - 0x1d], al
shr rcx, 4
mov byte [rbp - 0x1c], 0x2e
mov byte [rbp - 0x1a], 0x2e
mov byte [rbp - 0x18], 0x2e
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19d3]
mov byte [rbp - 0x1b], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0x16], 0x2e
mov byte [rbp - 0x14], 0x2e
mov byte [rbp - 0x12], 0x2e
movzx eax, byte [rax + rdx]
mov byte [rbp - 0x19], al
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19d2]
mov byte [rbp - 0x17], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0x10], 0x2e
mov byte [rbp - 0xe], 0x2e
mov byte [rbp - 0xc], 0x2e
movzx eax, byte [rax + rdx]
mov byte [rbp - 0x15], al
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19d1]
mov byte [rbp - 0x13], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0xa], 0x2e
mov byte [rbp - 8], 0x2e
mov byte [rbp - 6], 0x2e
movzx eax, byte [rax + rdx]
mov byte [rbp - 0x11], al
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19d0]
mov byte [rbp - 0xf], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 4], 0x2e
mov byte [rbp - 2], 0x2e
mov byte [rbp], 0x2e
movzx eax, byte [rax + rdx]
mov byte [rbp - 0xd], al
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19cf]
mov byte [rbp - 0xb], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp + 2], 0x2e
mov byte [rbp + 4], 0x2e
movzx eax, byte [rax + rdx]
mov byte [rbp - 9], al
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19ce]
mov byte [rbp - 7], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
movzx eax, byte [rax + rdx]
mov byte [rbp - 5], al
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19cd]
mov byte [rbp - 3], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
movzx eax, byte [rax + rdx]
mov byte [rbp - 1], al
movzx eax, byte [rcx + rdx]
movzx ecx, byte [rbx + 0x19cc]
mov byte [rbp + 1], al
mov eax, ecx
and eax, 0xf
movzx eax, byte [rax + rdx]
mov byte [rbp + 3], al
shr rcx, 4
lea r8, str.ip6.arpa.
mov byte [rbp + 6], 0x2e
movzx eax, byte [rcx + rdx]
mov edx, 0xa
lea rcx, [rbp + 7]
mov byte [rbp + 5], al
call fcn.140058390
lea rcx, [rbx + 0x1390]
lea rdx, [rbp - 0x39]
call fcn.140054930
lea rax, [r14 + 0xd60]
mov byte [rbx + 0x11f8], 1
lea rdx, [rbx + 0xd60]
mov qword [rbx + 0xdc0], rax
mov rcx, rdi
mov byte [rbx + 0x11fa], 1
call fcn.140047fa0
lea rdx, [rbx + 0x1180]
mov rcx, rdi
call fcn.140047fa0
mov r15, qword [rsp + 0xb0]
mov r14, qword [rsp + 0xb8]
mov r12, qword [rsp + 0xc8]
mov byte [rbx + 0x15a8], 0
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.14006a270
add rsp, 0xd0
pop rdi
pop rbx
pop rbp
ret