Function at 0x14008fba0
Capabilities:
Resolve dns

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x1e8
mov rax, rdx
mov rsi, rcx
mov rdx, qword [rdx]
mov rbx, qword [rax + 8]
movzx edi, word [rax + 0x10]
mov rax, qword [0x140117228]
cmp rax, 3
jne 0x14008fd6b
cmp rbx, 0x17f
ja 0x14008fd83
lea r14, [rsp + 0x68]
mov rcx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x68], 0
lea rax, [rbx + 1]
cmp rbx, 0xe
ja 0x14008fc18
xor edx, edx
nop dword [rax]
cmp byte [rsp + rdx + 0x68], 0
je 0x14008fcd4
inc rdx
cmp rax, rdx
jne 0x14008fc00
jmp 0x14008fd34
lea rcx, [rsp + 0x6f]
and rcx, 0xfffffffffffffff8
sub rcx, r14
je 0x14008fc4e
xor edx, edx
nop dword [rax + rax]
cmp byte [rsp + rdx + 0x68], 0
je 0x14008fcd4
inc rdx
cmp rcx, rdx
jne 0x14008fc30
lea rdx, [rbx - 0xf]
cmp rcx, rdx
jbe 0x14008fc52
jmp 0x14008fc9e
lea rdx, [rbx - 0xf]
movdqa xmm0, xmmword [0x1400ad690]
movabs r8, 0x8080808080808080
nop word cs:[rax + rax]
movdqu xmm1, xmmword [rsp + rcx + 0x68]
movdqa xmm2, xmm1
paddq xmm2, xmm0
pandn xmm1, xmm2
pshufd xmm2, xmm1, 0xee
por xmm2, xmm1
movq r9, xmm2
test r9, r8
jne 0x14008fc9e
add rcx, 0x10
cmp rcx, rdx
jbe 0x14008fc70
sub rax, rcx
je 0x14008fd34
lea r8, [rsp + rcx]
add r8, 0x68
xor edx, edx
nop word cs:[rax + rax]
cmp byte [r8 + rdx], 0
je 0x14008fcd1
inc rdx
cmp rax, rdx
jne 0x14008fcc0
jmp 0x14008fd34
add rdx, rcx
cmp rdx, rbx
jne 0x14008fd34
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x30], xmm0
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x68]
lea r8, [rsp + 0x30]
lea r9, [rsp + 0x28]
xor edx, edx
call qword [sym.imp.ws2_32.dll_getaddrinfo]
test eax, eax
je 0x14008fd48
call qword [sym.imp.ws2_32.dll_WSAGetLastError]
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov eax, 1
jmp 0x14008fd5b
lea rax, str.file_name_contained_an_unexpected_NUL_byte
mov qword [rsi + 8], rax
mov qword [rsi], 1
jmp 0x14008fd5e
mov rax, qword [rsp + 0x28]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rax
mov word [rsi + 0x18], di
xor eax, eax
mov qword [rsi], rax
add rsp, 0x1e8
pop rbx
pop rdi
pop rsi
pop r14
ret
mov r14, rdx
call fcn.1400ab350
mov rdx, r14
cmp rbx, 0x17f
jbe 0x14008fbdb
mov rcx, rsi
mov r8, rbx
mov r9d, edi
add rsp, 0x1e8
pop rbx
pop rdi
pop rsi
pop r14
jmp 0x1400ab3b0
push r14
push rsi
push rdi
push rbx
sub rsp, 0x88
mov ebx, r9d
mov rsi, rcx
lea rcx, [rsp + 0x30]
call fcn.140007910
mov rax, qword [rsp + 0x30]
movabs rcx, 0x8000000000000000
cmp rax, rcx
jne 0x1400ab43f
mov rdi, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x28], 0
lea r8, [rsp + 0x50]
lea r9, [rsp + 0x28]
mov rcx, rdi
xor edx, edx
call qword [sym.imp.ws2_32.dll_getaddrinfo]
test eax, eax
je 0x1400ab462
call qword [sym.imp.ws2_32.dll_WSAGetLastError]
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov eax, 1
jmp 0x1400ab475
lea rcx, str.file_name_contained_an_unexpected_NUL_byte
mov qword [rsi + 8], rcx
mov qword [rsi], 1
test rax, rax
je 0x1400ab48d
mov rcx, qword [rsp + 0x38]
mov edx, 1
jmp 0x1400ab488
mov rax, qword [rsp + 0x28]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rax
mov word [rsi + 0x18], bx
xor eax, eax
mov qword [rsi], rax
mov byte [rdi], 0
test r14, r14
je 0x1400ab48d
mov edx, 1
mov rcx, rdi
call fcn.140007720
nop
add rsp, 0x88
pop rbx
pop rdi
pop rsi
pop r14
ret