Function at 0x14008f180
Capabilities:
Convert ip address from string

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x188
mov rsi, qword [rcx + 0x10]
xor ecx, ecx
mov rax, qword [rsi]
mov qword [rsp + 0x58], rcx
mov rcx, rax
mov rbx, rdx
lea rdi, [rsp + 0x6c]
mov qword [rsp + 0x40], rax
call sub.msvcrt.dll_strlen
mov ecx, 5
xor r8d, r8d
xor r9d, r9d
mov qword [rsp + 0x48], rax
xor eax, eax
mov edx, 0x53
rep stosd dword [rdi], eax
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x60], r8
lea r8, [rsp + 0x58]
mov dword [rsp + 0x50], r9d
mov rcx, qword [rax + 8]
mov rax, qword [0x140135f20]
mov rax, qword [rax]
call qword [rax + 0x58]
mov ecx, eax
test eax, eax
jne 0x14008f201
cmp qword [rsp + 0x58], 0
jne 0x14008f22b
lea rdx, [rsp + 0x80]
mov r8d, 0x100
call fcn.14008d410
lea rdx, str.schannel:_Failed_to_read_remote_certificate_context:__s
mov rcx, rbx
mov r8, rax
call fcn.14007ceb0
jmp 0x14008f2f9
mov dword [rsp + 0x20], 3
xor r8d, r8d
mov edx, 2
mov ecx, 6
mov r9d, 2
call fcn.1400b8aa0
mov rdx, qword [rsp + 0x40]
lea r8, [rsp + 0x54]
mov rdi, qword [sym.imp.WS2_32.dll_inet_pton]
mov esi, eax
mov ecx, 2
call rdi
test eax, eax
je 0x14008f27b
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x6c], 4
mov dword [rsp + 0x70], eax
jmp 0x14008f2b3
mov rdx, qword [rsp + 0x40]
lea r8, [rsp + 0x80]
mov ecx, 0x17
call rdi
test eax, eax
je 0x14008f2aa
movaps xmm0, xmmword [rsp + 0x80]
mov dword [rsp + 0x6c], 0x10
movups xmmword [rsp + 0x70], xmm0
jmp 0x14008f2b3
test sil, sil
jne 0x14008f377
mov rax, qword [rsp + 0x58]
xor edx, edx
mov dword [rsp + 0x80], 0x18
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x90], rdx
lea rdx, str.schannel:_Null_certificate_context.
test rax, rax
je 0x14008f2f1
mov rax, qword [rax + 0x18]
test rax, rax
jne 0x14008f300
lea rdx, str.schannel:_Null_certificate_info.
mov rcx, rbx
call fcn.14007ceb0
xor esi, esi
jmp 0x14008f5a4
lea rdi, [0x14012fbf3]
mov edx, dword [rax + 0xc0]
mov r8, qword [rax + 0xc8]
mov rcx, rdi
call qword [sym.imp.CRYPT32.dll_CertFindExtension]
lea rdx, str.schannel:_CertFindExtension___returned_no_extension.
test rax, rax
je 0x14008f2f1
mov r9d, dword [rax + 0x10]
mov r8, qword [rax + 0x18]
lea rax, [rsp + 0x50]
mov rdx, rdi
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x60]
mov ecx, 0x10001
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x8001
call qword [sym.imp.CRYPT32.dll_CryptDecodeObjectEx]
lea rdx, str.schannel:_CryptDecodeObjectEx___returned_no_alternate_name_information.
test eax, eax
je 0x14008f2f1
mov r12d, dword [rsp + 0x6c]
mov rdi, qword [rsp + 0x60]
test r12d, r12d
je 0x14008f40a
mov r15d, dword [rdi]
xor esi, esi
mov r14d, r12d
lea r13, [rsp + 0x70]
cmp esi, r15d
jae 0x14008f2f9
imul rax, rsi, 0x18
add rax, qword [rdi + 8]
cmp dword [rax], 8
jne 0x14008f405
cmp r12d, dword [rax + 8]
jne 0x14008f405
mov rcx, qword [rax + 0x10]
mov r8, r14
mov rdx, r13
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x14008f405
test rbx, rbx
je 0x14008f3d4
test byte [rbx + 0x98e], 0x20
jne 0x14008f3dd
xor esi, esi
xor ebp, ebp
jmp 0x14008f5c3
mov rax, qword [rbx + 0x1188]
test rax, rax
je 0x14008f3ef
cmp dword [rax + 8], 0
jle 0x14008f3d4
mov r8, qword [rsp + 0x40]
lea rdx, str.schannel:_connection_hostname___s__matched_certs_IP_address_
mov rcx, rbx
call fcn.140083620
jmp 0x14008f3d4
inc rsi
jmp 0x14008f397
movzx r12d, sil
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x28], r12d
mov rdx, qword [rsp + 0x58]
mov rcx, rbx
call fcn.1400a9390
lea rdx, str.schannel:_CertGetNameString___returned_no_certificate_name_information
mov edi, eax
test eax, eax
je 0x14008f2f1
mov r14d, eax
mov rax, qword [0x140135e80]
mov ebp, 0x1b
mov rcx, r14
call qword [rax]
mov rsi, rax
test rax, rax
je 0x14008f5c3
mov rax, qword [rsp + 0x60]
mov dword [rsp + 0x28], r12d
mov r9d, edi
mov r8, rsi
mov rdx, qword [rsp + 0x58]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.1400a9390
cmp edi, eax
je 0x14008f496
lea rdx, str.schannel:_CertGetNameString___returned_certificate_name_information_of_unexpected_size
mov rcx, rbx
call fcn.14007ceb0
jmp 0x14008f5a4
xor r12d, r12d
mov ebp, 0x3c
lea r15, str.schannel:_connection_hostname___s__validated_against_certificate_name___s_
cmp r12, r14
jae 0x14008f58b
lea r13, [rsi + r12]
cmp byte [r13], 0
je 0x14008f58b
cmp ebp, 0x3c
jne 0x14008f5ab
mov rcx, r13
mov ebp, 0x1b
call sub.msvcrt.dll__strdup
mov rdi, rax
test rax, rax
je 0x14008f4a5
mov rcx, rax
call sub.msvcrt.dll_strlen
mov r9, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
mov rcx, rdi
mov rdx, rax
call fcn.140072dd0
test al, al
je 0x14008f535
test rbx, rbx
jne 0x14008f505
xor ebp, ebp
jmp 0x14008f57e
test byte [rbx + 0x98e], 0x20
je 0x14008f501
mov rax, qword [rbx + 0x1188]
test rax, rax
je 0x14008f520
cmp dword [rax + 8], 0
jle 0x14008f501
mov r8, qword [rsp + 0x40]
mov r9, rdi
mov rdx, r15
mov rcx, rbx
call fcn.140083620
jmp 0x14008f501
test rbx, rbx
je 0x14008f56c
test byte [rbx + 0x98e], 0x20
je 0x14008f56c
mov rax, qword [rbx + 0x1188]
test rax, rax
je 0x14008f555
cmp dword [rax + 8], 0
jle 0x14008f56c
mov r8, qword [rsp + 0x40]
mov r9, rdi
lea rdx, str.schannel:_connection_hostname___s__did_not_match_against_certificate_name___s_
mov rcx, rbx
call fcn.140083620
mov rcx, r13
mov ebp, 0x3c
call sub.msvcrt.dll_strlen
lea r12, [r12 + rax + 1]
mov rcx, rdi
call fcn.14005a988
jmp 0x14008f4a5
cmp ebp, 0x3c
jne 0x14008f5ab
mov r8, qword [rsp + 0x40]
lea rdx, str.schannel:_CertGetNameString___failed_to_match_connection_hostname___s__against_server_certificate_names
mov rcx, rbx
call fcn.14007ceb0
mov ebp, 0x3c
jmp 0x14008f5c3
test ebp, ebp
je 0x14008f5c3
lea rdx, str.schannel:_server_certificate_name_verification_failed
mov rcx, rbx
mov ebp, 0x1b
call fcn.14007ceb0
mov rax, qword [0x140135e70]
mov rcx, rsi
call qword [rax]
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14008f5df
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov eax, ebp
add rsp, 0x188
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret