Function at 0x14021225c
Capabilities:
Resolve dns

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x118]
sub rsp, 0x1e0
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x1403f04b0]
xor rax, rsp
mov qword [rbp + 0xd0], rax
movzx r10d, r8w
mov rsi, rdx
mov r14, rcx
cmp r8w, 0x1c
ja 0x14021256d
movzx eax, r8w
mov ecx, 0x10000022
bt ecx, eax
jae 0x14021256d
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov rcx, rdx
cmp qword [rdx + 0x18], 8
jb 0x1402122d2
mov rcx, qword [rdx]
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8010
movzx edx, r10w
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
mov r12d, 1
mov rdi, qword [rsp + 0x30]
test eax, eax
je 0x14021230b
mov bl, r15b
jmp 0x140212558
test rdi, rdi
je 0x140212555
mov r13d, 7
xor edx, edx
mov r8d, 0x80
lea rcx, [rbp + 0x50]
call sub.api_ms_win_crt_private_l1_1_0.dll__o_memset
cmp word [rdi + 0x10], r12w
jne 0x14021234a
mov eax, dword [rdi + 0x20]
mov dword [rsp + 0x58], eax
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x58]
call qword [sym.imp.ntdll.dll_RtlIpv4AddressToStringW]
jmp 0x14021237b
cmp word [rdi + 0x10], 0x1c
jne 0x14021236c
movups xmm0, xmmword [rdi + 0x20]
movdqu xmmword [rsp + 0x58], xmm0
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x58]
call qword [sym.imp.ntdll.dll_RtlIpv6AddressToStringW]
jmp 0x14021237b
cmp word [rdi + 0x10], 5
jne 0x14021237b
mov rdi, qword [rdi]
jmp 0x140212538
lea rcx, [rsp + 0x70]
call fcn.1400a6bb8
lea rax, vtable.sense::cyberData::NetworkEntity.0
mov qword [rsp + 0x70], rax
mov byte [rbp - 0x80], r15b
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], r13
mov word [rbp - 0x78], r15w
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], r13
mov word [rbp - 0x58], r15w
mov dword [rbp - 0x38], r15d
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmmword [rbp - 0x10], xmm0
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], r13
mov word [rbp], r15w
mov dword [rbp + 0x20], r15d
mov rdx, rsi
lea rcx, [rbp]
call fcn.14005b588
mov eax, dword [rdi + 0x18]
mov dword [rbp + 0x20], eax
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x30]
call fcn.140048750
nop
lea r8, [rbp + 0x30]
lea rdx, [rsp + 0x38]
mov rcx, r14
call fcn.140095684
mov rax, qword [r14 + 8]
mov rbx, qword [rsp + 0x38]
cmp rbx, rax
jne 0x140212486
lea rcx, [rbp + 0x30]
mov qword [rsp + 0x58], rcx
mov rbx, qword [rax]
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r8, qword [rbx + 8]
mov rdx, rbx
call fcn.14021296c
mov rdx, qword [r14 + 0x10]
movabs rcx, 0x11a7b9611a7b960
sub rcx, rdx
cmp rcx, r12
jb 0x140212542
lea rcx, [rdx + 1]
mov qword [r14 + 0x10], rcx
mov qword [rbx + 8], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rax
mov r9, qword [r14 + 8]
mov r9, qword [r9]
lea r8, [r9 + 0x10]
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.14021259c
mov rbx, qword [rsp + 0x40]
jmp 0x140212490
mov qword [rsp + 0x40], rbx
mov byte [rsp + 0x48], r15b
mov rax, qword [rsp + 0x78]
mov qword [rbx + 0x38], rax
mov al, byte [rbp - 0x80]
mov byte [rbx + 0x40], al
lea rcx, [rbx + 0x48]
lea rdx, [rbp - 0x78]
call fcn.14005b588
lea rcx, [rbx + 0x68]
lea rdx, [rbp - 0x58]
call fcn.14005b588
movzx eax, word [rbp - 0x38]
mov word [rbx + 0x88], ax
movzx eax, word [rbp - 0x36]
mov word [rbx + 0x8a], ax
lea rcx, [rbx + 0x90]
lea rax, [rbp - 0x30]
cmp rcx, rax
je 0x1402124ec
mov r8, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x30]
call fcn.140061b30
lea rcx, [rbx + 0xa8]
lea rax, [rbp - 0x18]
cmp rcx, rax
je 0x140212509
mov r8, qword [rbp - 0x10]
mov rdx, qword [rbp - 0x18]
call fcn.140061b30
lea rcx, [rbx + 0xc0]
lea rdx, [rbp]
call fcn.14005b588
mov eax, dword [rbp + 0x20]
mov dword [rbx + 0xe0], eax
lea rcx, [rbp + 0x30]
call fcn.1400492c0
mov rdi, qword [rdi]
lea rcx, [rsp + 0x70]
call fcn.140199724
test rdi, rdi
je 0x140212550
jmp 0x14021231a
lea rcx, str.list_T__too_long
call qword [sym.imp.msvcp_win.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
nop
mov rdi, qword [rsp + 0x30]
mov bl, r12b
test rdi, rdi
je 0x140212569
mov edx, r12d
mov rcx, rdi
call qword [sym.imp.DNSAPI.dll_DnsFree]
mov al, bl
jmp 0x14021256f
xor al, al
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.14027a710
mov rbx, qword [rsp + 0x238]
add rsp, 0x1e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret