Function at 0x14005f590
Capabilities:
Convert ip address from string

Disassembly:
mov r11, rsp
push rbp
push rdi
lea rbp, [r11 - 0xe8]
sub rsp, 0x1d8
mov rax, qword [0x1400c7900]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov rcx, qword [rcx + 0x10]
xor eax, eax
mov qword [r11 - 0x20], r12
mov edi, 0x3c
mov qword [r11 - 0x28], r13
mov r12, rdx
mov qword [r11 - 0x30], r14
mov r14d, eax
mov qword [r11 - 0x38], r15
mov r15, 0xffffffffffffffff
mov qword [rsp + 0x48], rax
mov r13, qword [rcx]
mov qword [rsp + 0x40], rax
nop dword [rax]
inc r15
cmp byte [r15 + r13], al
jne 0x14005f5f0
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x48]
mov dword [rsp + 0x60], eax
xorps xmm0, xmm0
mov rcx, qword [rcx + 0x30]
mov edx, 0x53
mov dword [rsp + 0x78], eax
mov rax, qword [0x1400c8bc8]
movups xmmword [rsp + 0x68], xmm0
mov rcx, qword [rcx + 8]
call qword [rax + 0x58]
test eax, eax
jne 0x14005fa15
cmp qword [rsp + 0x48], r14
je 0x14005fa15
mov r9d, 2
mov qword [rsp + 0x200], rbx
mov edx, r9d
mov qword [rsp + 0x1d0], rsi
xor r8d, r8d
mov dword [rsp + 0x20], 3
mov ecx, 6
call fcn.14005ac90
lea r8, [rsp + 0x58]
movzx ebx, al
mov rdx, r13
mov ecx, 2
call qword [sym.imp.WS2_32.dll_inet_pton]
test eax, eax
je 0x14005f698
mov eax, dword [rsp + 0x58]
mov esi, 4
mov dword [rsp + 0x68], esi
mov dword [rsp + 0x6c], eax
jmp 0x14005f6ce
lea r8, [rbp - 0x80]
mov rdx, r13
mov ecx, reloc.WS2_32.dll_socket
call qword [sym.imp.WS2_32.dll_inet_pton]
test eax, eax
je 0x14005f6c2
movups xmm0, xmmword [rbp - 0x80]
mov esi, reloc.WS2_32.dll_recv
mov dword [rsp + 0x68], esi
movups xmmword [rsp + 0x6c], xmm0
jmp 0x14005f6ce
mov esi, dword [rsp + 0x68]
test bl, bl
jne 0x14005f7ad
mov rdx, qword [rsp + 0x48]
xor eax, eax
mov dword [rbp - 0x80], 0x18
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], rax
test rdx, rdx
jne 0x14005f700
lea rdx, str.schannel:_Null_certificate_context.
mov rcx, r12
call fcn.14001f4e0
mov rax, r14
jmp 0x14005f806
mov rdx, qword [rdx + 0x18]
test rdx, rdx
jne 0x14005f720
lea rdx, str.schannel:_Null_certificate_info.
mov rcx, r12
call fcn.14001f4e0
mov rax, r14
jmp 0x14005f806
mov r8, qword [rdx + 0xc8]
lea rcx, str.2.5.29.17
mov edx, dword [rdx + 0xc0]
call qword [sym.imp.CRYPT32.dll_CertFindExtension]
test rax, rax
jne 0x14005f756
lea rdx, str.schannel:_CertFindExtension___returned_no_extension.
mov rcx, r12
call fcn.14001f4e0
mov rax, r14
jmp 0x14005f806
mov r9d, dword [rax + 0x10]
lea rcx, [rsp + 0x60]
mov r8, qword [rax + 0x18]
lea rdx, str.2.5.29.17
mov qword [rsp + 0x38], rcx
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x28], rcx
mov ecx, 0x10001
mov dword [rsp + 0x20], 0x8001
call qword [sym.imp.CRYPT32.dll_CryptDecodeObjectEx]
test eax, eax
jne 0x14005f7ad
lea rdx, str.schannel:_CryptDecodeObjectEx___returned_no_alternate_name_information.
mov rcx, r12
call fcn.14001f4e0
mov rax, r14
jmp 0x14005f806
test esi, esi
je 0x14005f882
mov r15, qword [rsp + 0x50]
xor ebx, ebx
mov r14d, dword [r15]
test r14d, r14d
je 0x14005fa40
mov r15, qword [r15 + 8]
nop dword [rax]
lea rcx, [rbx + rbx*2]
cmp dword [r15 + rcx*8], 8
jne 0x14005f7fa
mov eax, dword [r15 + rcx*8 + 8]
cmp eax, esi
jne 0x14005f7fa
mov rcx, qword [r15 + rcx*8 + 0x10]
lea rdx, [rsp + 0x6c]
mov r8d, eax
call fcn.1400998b0
test eax, eax
je 0x14005f86a
inc ebx
cmp ebx, r14d
jb 0x14005f7d0
mov rax, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x1d0]
mov rbx, qword [rsp + 0x200]
mov rcx, rax
call qword [fcn.140073300]
mov rcx, qword [rsp + 0x48]
mov r15, qword [rsp + 0x1b0]
mov r14, qword [rsp + 0x1b8]
mov r13, qword [rsp + 0x1c0]
mov r12, qword [rsp + 0x1c8]
test rcx, rcx
je 0x14005f84f
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov eax, edi
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.14006d460
add rsp, 0x1d8
pop rdi
pop rbp
ret
xor edi, edi
lea rdx, str.schannel:_connection_hostname___s__matched_certs_IP_address_
mov r8, r13
mov rcx, r12
call fcn.14001f5d0
mov eax, edi
jmp 0x14005f806
mov rax, qword [rsp + 0x50]
xor r9d, r9d
mov rdx, qword [rsp + 0x48]
xor r8d, r8d
mov dword [rsp + 0x28], ebx
mov rcx, r12
mov qword [rsp + 0x20], rax
mov esi, ebx
call fcn.14005ff80
mov ebx, eax
test eax, eax
jne 0x14005f8c2
lea rdx, str.schannel:_CertGetNameString___returned_no_certificate_name_information
mov rcx, r12
call fcn.14001f4e0
mov rax, r14
jmp 0x14005f806
lea rcx, [rbx + rbx]
mov qword [rsp + 0x58], rbx
call qword [section..data]
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x14005f8e5
mov edi, 0x1b
jmp 0x14005f806
mov rax, qword [rsp + 0x50]
mov r9d, ebx
mov rdx, qword [rsp + 0x48]
mov rcx, r12
mov dword [rsp + 0x28], esi
mov rsi, qword [rsp + 0x40]
mov r8, rsi
mov qword [rsp + 0x20], rax
call fcn.14005ff80
cmp eax, ebx
je 0x14005f926
lea rdx, str.schannel:_CertGetNameString___returned_certificate_name_information_of_unexpected_size
mov rcx, r12
call fcn.14001f4e0
mov rax, rsi
jmp 0x14005f806
test ebx, ebx
je 0x14005f9fe
nop
cmp word [rsi + r14*2], 0
lea rsi, [rsi + r14*2]
je 0x14005f9dd
cmp edi, 0x3c
jne 0x14005f9e2
mov rcx, rsi
call fcn.14003a040
mov rbx, rax
test rax, rax
jne 0x14005f960
mov edi, 0x1b
jmp 0x14005f9cd
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rax + rdx], 0
jne 0x14005f967
mov r9, r15
mov r8, r13
mov rcx, rbx
call fcn.140066ba0
mov r9, rbx
mov r8, r13
mov rcx, r12
test al, al
je 0x14005f99b
lea rdx, str.schannel:_connection_hostname___s__validated_against_certificate_name___s_
call fcn.14001f5d0
xor edi, edi
jmp 0x14005f9c5
lea rdx, str.schannel:_connection_hostname___s__did_not_match_against_certificate_name___s_
call fcn.14001f5d0
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rsi + rax*2], 0
jne 0x14005f9b0
inc r14
mov edi, 0x3c
add r14, rax
mov rcx, rbx
call fcn.140073300
mov rsi, qword [rsp + 0x40]
cmp r14, qword [rsp + 0x58]
jb 0x14005f930
cmp edi, 0x3c
je 0x14005f9fe
test edi, edi
je 0x14005f801
lea rdx, str.schannel:_server_certificate_name_verification_failed
mov rcx, r12
call fcn.14001f4e0
jmp 0x14005f801
mov r8, r13
lea rdx, str.schannel:_CertGetNameString___failed_to_match_connection_hostname___s__against_server_certificate_names
mov rcx, r12
call fcn.14001f4e0
jmp 0x14005f801
mov r8d, 0x100
lea rdx, [rbp - 0x60]
mov ecx, eax
call fcn.140004630
mov r8, rax
lea rdx, str.schannel:_Failed_to_read_remote_certificate_context:__s
mov rcx, r12
call fcn.14001f4e0
mov rax, r14
jmp 0x14005f816
mov rax, rbx
jmp 0x14005f806