Function at 0x14022ed30
Capabilities:
Resolve dns

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x118]
sub rsp, 0x1e0
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x14044e770]
xor rax, rsp
mov qword [rbp + 0xd0], rax
movzx r10d, r8w
mov rsi, rdx
mov r14, rcx
cmp r8w, 0x1c
ja 0x14022f050
movzx eax, r8w
mov ecx, 0x10000022
bt ecx, eax
jae 0x14022f050
xor r12d, r12d
mov qword [rsp + 0x30], r12
mov rcx, rdx
cmp qword [rdx + 0x18], 8
jb 0x14022eda6
mov rcx, qword [rdx]
mov qword [rsp + 0x28], r12
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8010
movzx edx, r10w
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
mov r13d, 1
mov rdi, qword [rsp + 0x30]
test eax, eax
je 0x14022eddf
mov bl, r12b
jmp 0x14022f02d
test rdi, rdi
je 0x14022f02a
mov ebx, 7
xor edx, edx
mov r8d, 0x80
lea rcx, [rbp + 0x50]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
cmp word [rdi + 0x10], r13w
jne 0x14022ef2d
mov eax, dword [rdi + 0x20]
mov dword [rsp + 0x58], eax
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x58]
call qword [sym.imp.ntdll.dll_RtlIpv4AddressToStringW]
lea rcx, [rsp + 0x70]
call fcn.1400ab130
lea rax, vtable.sense::cyberData::NetworkEntity.0
mov qword [rsp + 0x70], rax
mov byte [rbp - 0x80], r12b
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], rbx
mov word [rbp - 0x78], r12w
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x40], rbx
mov word [rbp - 0x58], r12w
mov dword [rbp - 0x38], r12d
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmmword [rbp - 0x10], xmm0
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], rbx
mov word [rbp], r12w
mov dword [rbp + 0x20], r12d
mov rdx, rsi
lea rcx, [rbp]
call fcn.140061d90
mov eax, dword [rdi + 0x18]
mov dword [rbp + 0x20], eax
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x30]
call fcn.14004a9e4
nop
lea r8, [rbp + 0x30]
lea rdx, [rsp + 0x38]
mov rcx, r14
call fcn.14017c2b8
mov rax, qword [r14 + 8]
mov rbx, qword [rsp + 0x38]
cmp rbx, rax
jne 0x14022ef65
lea rcx, [rbp + 0x30]
mov qword [rsp + 0x58], rcx
mov rbx, qword [rax]
mov r15, qword [rbx + 8]
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r8, r15
mov rdx, rbx
call fcn.14022f354
mov rdx, qword [r14 + 0x10]
movabs rcx, 0x11a7b9611a7b960
sub rcx, rdx
cmp rcx, r13
jb 0x14022f042
lea rcx, [rdx + 1]
mov qword [r14 + 0x10], rcx
mov qword [rbx + 8], rax
mov qword [r15], rax
mov r9, qword [r14 + 8]
mov r9, qword [r9]
lea r8, [r9 + 0x10]
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.14022f07c
mov rbx, qword [rsp + 0x40]
jmp 0x14022ef6f
cmp word [rdi + 0x10], 0x1c
jne 0x14022ef52
movups xmm0, xmmword [rdi + 0x20]
movdqu xmmword [rsp + 0x58], xmm0
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x58]
call qword [sym.imp.ntdll.dll_RtlIpv6AddressToStringW]
jmp 0x14022ee1f
cmp word [rdi + 0x10], 5
jne 0x14022ee1f
mov rdi, qword [rdi]
jmp 0x14022f01c
mov qword [rsp + 0x40], rbx
mov byte [rsp + 0x48], r12b
mov rax, qword [rsp + 0x78]
mov qword [rbx + 0x38], rax
mov al, byte [rbp - 0x80]
mov byte [rbx + 0x40], al
lea rcx, [rbx + 0x48]
lea rdx, [rbp - 0x78]
call fcn.140061d90
lea rcx, [rbx + 0x68]
lea rdx, [rbp - 0x58]
call fcn.140061d90
movzx eax, word [rbp - 0x38]
mov word [rbx + 0x88], ax
movzx eax, word [rbp - 0x36]
mov word [rbx + 0x8a], ax
lea rcx, [rbx + 0x90]
lea rax, [rbp - 0x30]
cmp rcx, rax
je 0x14022efcb
mov r8, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x30]
call fcn.140092a08
lea rcx, [rbx + 0xa8]
lea rax, [rbp - 0x18]
cmp rcx, rax
je 0x14022efe8
mov r8, qword [rbp - 0x10]
mov rdx, qword [rbp - 0x18]
call fcn.140092a08
lea rcx, [rbx + 0xc0]
lea rdx, [rbp]
call fcn.140061d90
mov eax, dword [rbp + 0x20]
mov dword [rbx + 0xe0], eax
lea rcx, [rbp + 0x30]
call fcn.14004b500
mov rdi, qword [rdi]
lea rcx, [rsp + 0x70]
call fcn.1401a6f24
mov ebx, 7
test rdi, rdi
jne 0x14022eded
mov rdi, qword [rsp + 0x30]
mov bl, r13b
test rdi, rdi
je 0x14022f03e
mov edx, r13d
mov rcx, rdi
call qword [sym.imp.DNSAPI.dll_DnsFree]
mov al, bl
jmp 0x14022f052
lea rcx, str.list_T__too_long
call qword [sym.imp.msvcp_win.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
nop
xor al, al
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.1402ae860
mov rbx, qword [rsp + 0x238]
add rsp, 0x1e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret