Function at 0x14001f100
Capabilities:
Resolve dns

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa0
mov rbx, r8
inc rbx
sete bpl
je 0x14001f486
js 0x14001f486
mov rdi, r9
mov r15, r8
mov r12, rdx
mov rsi, rcx
movzx eax, byte [0x140026190]
mov rcx, qword [0x140026178]
test rcx, rcx
jne 0x14001f15f
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x14001f486
mov rcx, rax
mov qword [0x140026178], rax
xor edx, edx
mov r8, rbx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x14001f486
mov r14, rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 0
test bpl, bpl
jne 0x14001f465
xor ebx, ebx
lea rcx, [r14 + rbx]
mov rdx, r12
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
add rbx, r15
mov qword [rsp + 0x50], rbx
lea rax, [r12 + 7]
and rax, 0xfffffffffffffff8
sub rax, r12
jne 0x14001f210
lea rcx, [r15 - 0x10]
xor eax, eax
movdqa xmm0, xmmword [0x1400214b0]
movabs rdx, 0x8080808080808080
nop word cs:[rax + rax]
movdqu xmm1, xmmword [r12 + rax]
movdqa xmm2, xmm1
paddq xmm2, xmm0
pandn xmm1, xmm2
pshufd xmm2, xmm1, 0xee
por xmm2, xmm1
movq r8, xmm2
test r8, rdx
jne 0x14001f23c
add rax, 0x10
cmp rax, rcx
jbe 0x14001f1e0
jmp 0x14001f23c
cmp rax, r15
cmovae rax, r15
xor ecx, ecx
nop dword [rax]
cmp byte [r12 + rcx], 0
je 0x14001f2bb
inc rcx
cmp rax, rcx
jne 0x14001f220
lea rcx, [r15 - 0x10]
cmp rax, rcx
jbe 0x14001f1bf
cmp rax, r15
je 0x14001f25f
nop word cs:[rax + rax]
cmp byte [r12 + rax], 0
je 0x14001f2bb
inc rax
cmp r15, rax
jne 0x14001f250
movdqu xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x20], xmm0
mov rbx, qword [rsp + 0x50]
mov qword [rsp + 0x30], rbx
mov r15, qword [rsp + 0x20]
cmp r15, rbx
jne 0x14001f332
mov r14, rbx
inc r14
je 0x14001f486
mov rdx, r14
not rdx
shr rdx, 0x3f
test r15, r15
je 0x14001f2f3
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 1
mov qword [rsp + 0x80], r15
jmp 0x14001f2fc
mov rax, qword [rsp + 0x40]
movabs rcx, 0x8000000000000000
cmp rax, rcx
je 0x14001f398
lea rcx, str.file_name_contained_an_unexpected_NUL_byte
mov qword [rsi + 8], rcx
mov qword [rsi], 1
test rax, rax
jne 0x14001f404
jmp 0x14001f416
mov qword [rsp + 0x78], 0
lea rcx, [rsp + 0x58]
lea r9, [rsp + 0x70]
mov r8, r14
call fcn.140004e20
cmp qword [rsp + 0x58], 0
mov rax, qword [rsp + 0x60]
je 0x14001f44a
movabs rcx, 0x8000000000000001
cmp rax, rcx
jne 0x14001f483
cmp rbx, r15
jne 0x14001f34e
lea rcx, [rsp + 0x20]
mov rdx, rbx
call fcn.140004ed0
mov r15, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x30]
mov r14, qword [rsp + 0x28]
mov byte [r14 + rbx], 0
inc rbx
mov qword [rsp + 0x30], rbx
cmp r15, rbx
jbe 0x14001f398
mov rcx, qword [0x140026178]
xor edx, edx
mov r8, r14
test rbx, rbx
je 0x14001f38c
mov r9, rbx
call qword [sym.imp.kernel32.dll_HeapReAlloc]
mov r14, rax
test rax, rax
jne 0x14001f398
jmp 0x14001f486
call qword [sym.imp.kernel32.dll_HeapFree]
mov r14d, 1
movzx edi, word [rdi]
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rsp + 0x90], xmm0
movdqa xmmword [rsp + 0x80], xmm0
mov dword [rsp + 0x78], 1
mov qword [rsp + 0x58], 0
lea r8, [rsp + 0x70]
lea r9, [rsp + 0x58]
mov rcx, r14
xor edx, edx
call qword [sym.imp.ws2_32.dll_getaddrinfo]
test eax, eax
je 0x14001f429
call qword [sym.imp.ws2_32.dll_WSAGetLastError]
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov eax, 1
mov qword [rsi], rax
mov byte [r14], 0
test rbx, rbx
je 0x14001f416
mov rcx, qword [0x140026178]
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapFree]
nop
add rsp, 0xa0
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
mov rax, qword [rsp + 0x58]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rax
mov word [rsi + 0x18], di
xor eax, eax
mov qword [rsi], rax
mov byte [r14], 0
test rbx, rbx
jne 0x14001f404
jmp 0x14001f416
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov r15, r14
cmp rbx, r15
je 0x14001f337
jmp 0x14001f34e
lea rcx, [rsp + 0x40]
xor edx, edx
mov r8, r15
call fcn.14001e9d0
mov r14, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
jmp 0x14001f194
test rax, rax
ud2