Function at 0x1400df510
Capabilities:
Resolve dns

Disassembly:
test rcx, rcx
je 0x1400df9e7
push rsi
mov eax, 0x1380
call fcn.140170e10
sub rsp, rax
mov rax, qword [0x14021d798]
xor rax, rsp
mov qword [rsp + 0x1350], rax
mov qword [rsp + 0x13a8], rdi
mov rsi, rcx
mov rdi, qword [rcx + 0x8e8]
test rdi, rdi
je 0x1400df9c7
mov qword [rsp + 0x1368], r14
xor r14d, r14d
mov byte [rsp + 0x350], 0
mov rdi, qword [rdi + 0x98]
mov qword [rsp + 0x1398], rbx
mov qword [rsp + 0x13a0], rbp
test rdi, rdi
je 0x1400df64a
movzx ecx, byte [rdi]
mov rdx, rdi
mov qword [rsp + 0xb8], r14
test cl, cl
je 0x1400df64a
movabs r8, 0xd0000404ffffffff
cmp cl, 0x3f
ja 0x1400df5b6
bt r8, rcx
jb 0x1400df64a
cmp cl, 0x7c
je 0x1400df64a
movzx ecx, byte [rdx + 1]
inc rdx
test cl, cl
jne 0x1400df5a7
lea r8, [rsp + 0x98]
mov rdx, rdi
mov rcx, rsi
call fcn.1400e5590
mov r9d, 0x104
lea r8, [rsp + 0x140]
mov rdx, rdi
mov rcx, rsi
mov ebx, eax
call fcn.1400e7680
lea rdx, [0x1401b9a74]
lea rcx, [rsp + 0x140]
call fcn.1401821a8
mov qword [rsp + 0xb8], rax
mov rbp, rax
test ebx, ebx
jne 0x1400df636
lea r8, [rsp + 0x98]
mov rdx, rdi
mov rcx, rsi
call fcn.1400e5590
mov rbp, qword [rsp + 0xb8]
test rbp, rbp
mov eax, r14d
setne al
test eax, eax
je 0x1400df64a
test rbp, rbp
jne 0x1400df661
jmp 0x1400df64d
mov rbp, r14
mov rax, qword [rsi + 0x8e0]
cmp qword [rax + 0x7d08], r14
je 0x1400df9af
cmp byte [rsp + 0x350], r14b
jne 0x1400df8d4
lea rcx, [rsi + 0x940]
mov qword [rsp + 0x1370], r13
call fcn.1401854e8
lea rcx, [rsp + 0x100]
mov edx, 0x40
test rax, rax
je 0x1400df6a6
mov r9, rax
lea r8, str._d__b__Y:_H:_M:_S__z
call fcn.14017ba34
jmp 0x1400df6d4
lea r8, str.01_Jan_1970:00:00:00_0000
lea rax, [rsp + 0x100]
sub r8, rax
cmp rdx, 1
jbe 0x1400df6d1
movzx eax, byte [r8 + rcx]
dec rdx
mov byte [rcx], al
inc rcx
cmp byte [r8 + rcx], r14b
jne 0x1400df6b8
mov byte [rcx], r14b
lea rcx, [rsi + 0x91c]
mov byte [rsp + 0xc0], r14b
test rcx, rcx
je 0x1400df729
movzx eax, word [rcx]
cmp ax, 2
jne 0x1400df6f8
mov edx, reloc.WS2_32.dll_recv
jmp 0x1400df703
cmp ax, 0x17
jne 0x1400df729
mov edx, 0x1c
mov dword [rsp + 0x30], 2
lea r8, [rsp + 0xc0]
mov dword [rsp + 0x28], r14d
mov r9d, 0x32
mov qword [rsp + 0x20], r14
call qword [sym.imp.WS2_32.dll_getnameinfo]
mov eax, dword [rsi]
lea r13, [0x1401e177c]
mov qword [rsp + 0x1378], r12
lea rbx, [rsi + 0xa0]
mov qword [rsp + 0x1360], r15
cmp eax, 1
jne 0x1400df76a
mov edx, dword [rbx]
lea rcx, [rsi + 0xa8]
mov rdi, rcx
lea r15, [rsi + 0x4d8]
lea r12, [rsi + 0x4e0]
jmp 0x1400df78a
lea rdi, [rsi + 0xa8]
cmp eax, 2
jne 0x1400df7a3
lea r15, [rsi + 0x4d8]
mov edx, dword [r15]
lea rcx, [rsi + 0x4e0]
mov r12, rcx
lea r8, str.Referer
call fcn.1400d9960
mov qword [rsp + 0x90], rax
test rax, rax
jne 0x1400df7b9
mov qword [rsp + 0x90], r13
lea r15, [rsi + 0x4d8]
lea r12, [rsi + 0x4e0]
mov eax, dword [rsi]
cmp eax, 1
je 0x1400df7cb
cmp eax, 2
jne 0x1400df7e4
mov rdi, r12
mov rbx, r15
mov edx, dword [rbx]
lea r8, str.User_Agent
mov rcx, rdi
call fcn.1400d9960
mov r11, rax
test rax, rax
jne 0x1400df7e7
mov r11, r13
mov rdx, qword [rsi + 0x38]
lea r10, [0x1401e1235]
mov rax, qword [rsi + 0x18]
test rdx, rdx
mov qword [rsp + 0x80], r11
mov r9, r10
cmovne r9, rdx
mov r8, r13
test rax, rax
mov rcx, r13
cmovne r8, rax
mov rax, qword [rsi + 0x10]
test rax, rax
cmovne rcx, rax
mov rax, qword [rsi + 0x40]
test rax, rax
cmovne r13, rax
test rdx, rdx
lea rax, [0x1401bc1c8]
cmovne r10, rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x78], rax
xor edx, edx
mov rax, qword [rsi + 0x958]
mov qword [rsp + 0x70], rax
mov eax, dword [rsi + 0x9a8]
mov dword [rsp + 0x68], eax
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x58], r9
mov r9d, 0x1000
mov qword [rsp + 0x50], r10
mov qword [rsp + 0x48], r8
lea r8, [rsp + 0x350]
mov qword [rsp + 0x40], rcx
mov rcx, rsi
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
lea rax, str._s____s___s____s__s_s_s_HTTP__s___d__I64d__s__s
mov qword [rsp + 0x20], rax
call fcn.1400e46d0
mov r15, qword [rsp + 0x1360]
mov r13, qword [rsp + 0x1370]
mov r12, qword [rsp + 0x1378]
mov rax, qword [rsi + 0x8e0]
mov r8, qword [rax + 0x7d08]
test r8, r8
je 0x1400df90f
lea rdx, [rsp + 0x350]
mov rcx, rsi
call r8
test eax, eax
je 0x1400df90f
test rbp, rbp
je 0x1400df9af
mov rcx, rbp
call fcn.140181244
jmp 0x1400df9af
test rbp, rbp
je 0x1400df9af
lea rcx, [0x14031fd00]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea r8, [rsp + 0x350]
mov rcx, rbp
lea rdx, [0x1401bb9dc]
call fcn.140005180
mov rcx, rbp
mov ebx, eax
call fcn.1401810b8
lea rcx, [0x14031fd00]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, rbp
call fcn.140181244
cmp ebx, 1
mov ecx, r14d
mov edx, r14d
setge cl
test edi, edi
cmove edx, ecx
test eax, eax
cmove r14d, edx
test r14d, r14d
jne 0x1400df9af
mov rax, qword [rsi + 0x8e8]
lea r8, str.log_access
mov r9d, 0x3f5e
mov rcx, rsi
mov rdx, qword [rax + 0x98]
lea rax, str.Error_writing_log_file__s
mov qword [rsp + 0x28], rdx
xor edx, edx
mov qword [rsp + 0x20], rax
call fcn.1400e1360
mov rbx, qword [rsp + 0x1398]
mov rbp, qword [rsp + 0x13a0]
mov r14, qword [rsp + 0x1368]
mov rdi, qword [rsp + 0x13a8]
mov rcx, qword [rsp + 0x1350]
xor rcx, rsp
call fcn.1401702b0
add rsp, 0x1380
pop rsi
ret