Function at 0x140126860
Capabilities:
Resolve dns

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x1e8
mov rsi, rcx
mov r14, qword [rdx]
mov rbx, qword [rdx + 8]
movzx edi, word [rdx + 0x10]
mov rax, qword [0x14036f228]
cmp rax, 3
jne 0x140126a1a
cmp rbx, 0x17f
ja 0x140126a2c
lea rcx, [rsp + 0x68]
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x68], 0
lea rax, [rbx + 1]
cmp rbx, 0xe
ja 0x1401268d8
xor edx, edx
nop dword [rax]
cmp byte [rsp + rdx + 0x68], 0
je 0x140126984
inc rdx
cmp rax, rdx
jne 0x1401268c0
jmp 0x1401269e3
xor ecx, ecx
mov dl, 1
test dl, dl
jne 0x14012690c
jne 0x14012690c
xor edx, edx
nop word cs:[rax + rax]
cmp byte [rsp + rdx + 0x68], 0
je 0x140126984
inc rdx
jne 0x1401268f0
xor edx, edx
test dl, dl
jne 0x14012697a
lea rdx, [rbx - 0xf]
jmp 0x140126912
lea rdx, [rbx - 0xf]
xor ecx, ecx
movabs r8, 0xfefefefefefefeff
movabs r9, 0x8080808080808080
nop word cs:[rax + rax]
mov r10, qword [rsp + rcx + 0x68]
mov r11, r10
not r11
add r10, r8
and r10, r11
test r10, r9
jne 0x14012697a
mov r10, qword [rsp + rcx + 0x70]
mov r11, r10
not r11
add r10, r8
and r10, r11
test r10, r9
jne 0x14012697a
add rcx, 0x10
cmp rcx, rdx
jbe 0x140126930
jmp 0x14012697a
cmp byte [rsp + rcx + 0x68], 0
je 0x140126981
inc rcx
cmp rax, rcx
jne 0x140126970
jmp 0x1401269e3
mov rdx, rcx
cmp rdx, rbx
jne 0x1401269e3
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x68]
lea r8, [rsp + 0x30]
lea r9, [rsp + 0x28]
xor edx, edx
call qword [sym.imp.ws2_32.dll_getaddrinfo]
test eax, eax
je 0x140126a02
call qword [sym.imp.ws2_32.dll_WSAGetLastError]
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov eax, 1
mov qword [rsi], rax
jmp 0x1401269f5
lea rax, str.H6__
mov qword [rsi + 8], rax
mov qword [rsi], 1
add rsp, 0x1e8
pop rbx
pop rdi
pop rsi
pop r14
ret
mov rax, qword [rsp + 0x28]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rax
mov word [rsi + 0x18], di
xor eax, eax
mov qword [rsi], rax
jmp 0x1401269f5
call fcn.1402855b0
cmp rbx, 0x17f
jbe 0x140126898
mov rcx, rsi
mov rdx, r14
mov r8, rbx
mov r9d, edi
add rsp, 0x1e8
pop rbx
pop rdi
pop rsi
pop r14
jmp 0x140285610
push r14
push rsi
push rdi
push rbx
sub rsp, 0x88
mov ebx, r9d
mov rsi, rcx
lea rcx, [rsp + 0x30]
call fcn.14005b400
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14028566a
lea rax, str.H6__
mov qword [rsi + 8], rax
mov qword [rsi], 1
cmp qword [rsp + 0x38], 0
je 0x1402856f4
mov edx, 1
add rsp, 0x88
pop rbx
pop rdi
pop rsi
pop r14
jmp fcn.14005d7f0
mov rdi, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x28], 0
lea r8, [rsp + 0x50]
lea r9, [rsp + 0x28]
mov rcx, rdi
xor edx, edx
call qword [sym.imp.ws2_32.dll_getaddrinfo]
test eax, eax
je 0x1402856c9
call qword [sym.imp.ws2_32.dll_WSAGetLastError]
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov eax, 1
jmp 0x1402856dc
mov rax, qword [rsp + 0x28]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rax
mov word [rsi + 0x18], bx
xor eax, eax
mov qword [rsi], rax
mov byte [rdi], 0
test r14, r14
je 0x1402856f4
mov edx, 1
mov rcx, rdi
call fcn.14005d7f0
nop
add rsp, 0x88
pop rbx
pop rdi
pop rsi
pop r14
ret