Function at 0x140281a98
Capabilities:
Resolve dns

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x118]
sub rsp, 0x1e0
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x1405420e0]
xor rax, rsp
mov qword [rbp + 0xd0], rax
movzx r10d, r8w
mov rsi, rdx
mov r14, rcx
cmp r8w, 0x1c
ja 0x140281de5
movzx eax, r8w
mov ecx, 0x10000022
bt ecx, eax
jae 0x140281de5
xor r12d, r12d
mov qword [rsp + 0x30], r12
mov rcx, rdx
cmp qword [rdx + 0x18], 8
jb 0x140281b0e
mov rcx, qword [rdx]
mov qword [rsp + 0x28], r12
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x8010
movzx edx, r10w
call qword [sym.imp.DNSAPI.dll_DnsQuery_W]
nop dword [rax + rax]
mov r13d, 1
mov rdi, qword [rsp + 0x30]
test eax, eax
je 0x140281b4d
mov bl, r12b
jmp 0x140281db6
test rdi, rdi
je 0x140281db3
mov ebx, 7
xor edx, edx
mov r8d, 0x80
lea rcx, [rbp + 0x50]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
cmp word [rdi + 0x10], r13w
jne 0x140281cb1
mov eax, dword [rdi + 0x20]
mov dword [rsp + 0x58], eax
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x58]
call qword [sym.imp.ntdll.dll_RtlIpv4AddressToStringW]
nop dword [rax + rax]
lea rcx, [rbp - 0x70]
call fcn.1400cafa8
lea rax, vtable.sense::cyberData::NetworkEntity.0
mov qword [rbp - 0x70], rax
mov byte [rbp - 0x60], r12b
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x40], rbx
mov word [rbp - 0x58], r12w
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x20], rbx
mov word [rbp - 0x38], r12w
mov dword [rbp - 0x18], r12d
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp], xmm1
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], rbx
mov word [rbp + 0x20], r12w
mov dword [rbp + 0x40], r12d
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.14006fe84
mov eax, dword [rdi + 0x18]
mov dword [rbp + 0x40], eax
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], rbx
mov word [rsp + 0x68], r12w
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x68]
call fcn.140055574
nop
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x38]
mov rcx, r14
call fcn.1401a7b04
mov rax, qword [r14 + 8]
mov rbx, qword [rsp + 0x38]
cmp rbx, rax
jne 0x140281cef
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x58], rcx
mov rbx, qword [rax]
mov r15, qword [rbx + 8]
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r8, r15
mov rdx, rbx
call fcn.140282108
mov rdx, qword [r14 + 0x10]
movabs rcx, 0x11a7b9611a7b960
sub rcx, rdx
cmp rcx, r13
jb 0x140281dd1
lea rcx, [rdx + 1]
mov qword [r14 + 0x10], rcx
mov qword [rbx + 8], rax
mov qword [r15], rax
mov r9, qword [r14 + 8]
mov r9, qword [r9]
lea r8, [r9 + 0x10]
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.140281e18
mov rbx, qword [rsp + 0x40]
jmp 0x140281cf9
cmp word [rdi + 0x10], 0x1c
jne 0x140281cdc
movups xmm0, xmmword [rdi + 0x20]
movdqu xmmword [rsp + 0x58], xmm0
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x58]
call qword [sym.imp.ntdll.dll_RtlIpv6AddressToStringW]
nop dword [rax + rax]
jmp 0x140281b93
cmp word [rdi + 0x10], 5
jne 0x140281b93
mov rdi, qword [rdi]
jmp 0x140281da5
mov qword [rsp + 0x40], rbx
mov byte [rsp + 0x48], r12b
mov rax, qword [rbp - 0x68]
mov qword [rbx + 0x38], rax
mov al, byte [rbp - 0x60]
mov byte [rbx + 0x40], al
lea rcx, [rbx + 0x48]
lea rdx, [rbp - 0x58]
call fcn.14006fe84
lea rcx, [rbx + 0x68]
lea rdx, [rbp - 0x38]
call fcn.14006fe84
movzx eax, word [rbp - 0x18]
mov word [rbx + 0x88], ax
movzx eax, word [rbp - 0x16]
mov word [rbx + 0x8a], ax
lea rcx, [rbx + 0x90]
lea rax, [rbp - 0x10]
cmp rcx, rax
je 0x140281d54
mov r8, qword [rbp - 8]
mov rdx, qword [rbp - 0x10]
call fcn.1400a89d8
lea rcx, [rbx + 0xa8]
lea rax, [rbp + 8]
cmp rcx, rax
je 0x140281d71
mov r8, qword [rbp + 0x10]
mov rdx, qword [rbp + 8]
call fcn.1400a89d8
lea rcx, [rbx + 0xc0]
lea rdx, [rbp + 0x20]
call fcn.14006fe84
mov eax, dword [rbp + 0x40]
mov dword [rbx + 0xe0], eax
lea rcx, [rsp + 0x68]
call fcn.140055f70
mov rdi, qword [rdi]
lea rcx, [rbp - 0x70]
call fcn.1401de4ac
mov ebx, 7
test rdi, rdi
jne 0x140281b5b
mov rdi, qword [rsp + 0x30]
mov bl, r13b
test rdi, rdi
je 0x140281dcd
mov edx, r13d
mov rcx, rdi
call qword [sym.imp.DNSAPI.dll_DnsFree]
nop dword [rax + rax]
mov al, bl
jmp 0x140281de7
lea rcx, str.list_T__too_long
call qword [sym.imp.msvcp_win.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_]
nop dword [rax + rax]
nop
xor al, al
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.140356560
mov rbx, qword [rsp + 0x238]
add rsp, 0x1e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret