Function at 0x14004aaa0
Capabilities:
Resolve dns

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x200
mov r15, r8
mov r14, rdx
mov rsi, rcx
lea rcx, [rsp + 0x80]
call fcn.14001d1e0
cmp word [rsp + 0x80], 2
jne 0x14004ab45
lea r13, [0x14019c378]
mov rdi, r15
jmp 0x14004aae9
cmp rdi, r15
ja 0x14004ada4
mov cl, 0x3a
mov rdx, r14
mov r8, rdi
call fcn.140018ce0
cmp rax, 1
jne 0x14004ada4
mov rdi, rdx
cmp rdx, r15
jae 0x14004aae0
cmp byte [r14 + rdi], 0x3a
jne 0x14004aae0
lea r12, [rdi + 1]
lea r13, [0x14019c390]
sub r15, r12
je 0x14004ada4
lea rcx, [r14 + rdi]
inc rcx
movzx eax, byte [rcx]
cmp eax, 0x2d
je 0x14004ab9b
cmp eax, 0x2b
jne 0x14004aba5
dec r15
je 0x14004ada4
inc rcx
jmp 0x14004aba5
movzx eax, byte [0x1401aa178]
mov edx, 0x20
xor ecx, ecx
call fcn.140042800
test rax, rax
je 0x14004ae8e
movdqu xmm0, xmmword [rsp + 0x80]
movdqu xmm1, xmmword [rsp + 0x90]
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
mov rcx, rax
add rcx, 0x20
mov qword [rsi], rax
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], 1
mov qword [rsi + 0x18], rcx
jmp 0x14004adaf
cmp r15, 1
je 0x14004ada4
cmp r15, 5
jae 0x14004ac3e
xor eax, eax
xor ebx, ebx
nop word cs:[rax + rax]
movzx edx, byte [rcx + rax]
add edx, 0xffffffd0
cmp edx, 9
ja 0x14004ada4
add ebx, ebx
lea ebx, [rbx + rbx*4]
add ebx, edx
inc rax
cmp r15, rax
jne 0x14004abc0
mov rax, qword [0x1401aa0d0]
cmp rax, 3
jne 0x14004ae5f
cmp rdi, 0x17f
ja 0x14004ae71
lea r15, [rsp + 0x80]
mov rcx, r15
mov rdx, r14
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov byte [rsp + rdi + 0x80], 0
cmp rdi, 0xe
ja 0x14004ac89
xor ecx, ecx
cmp byte [rsp + rcx + 0x80], 0
je 0x14004ad2d
inc rcx
cmp r12, rcx
jne 0x14004ac23
jmp 0x14004ad89
xor r8d, r8d
mov r9w, 0xa
xor ebx, ebx
nop dword [rax + rax]
cmp r15, r8
je 0x14004abdf
movzx r10d, byte [rcx + r8]
mov eax, ebx
mul r9w
seto dl
add r10d, 0xffffffd0
cmp r10d, 9
ja 0x14004ada4
test dl, dl
jne 0x14004ada4
mov ebx, eax
inc r8
add bx, r10w
jae 0x14004ac50
jmp 0x14004ada4
lea rax, [rsp + 0x87]
and rax, 0xfffffffffffffff8
sub rax, r15
je 0x14004acbf
je 0x14004acbf
xor ecx, ecx
cmp byte [rsp + rcx + 0x80], 0
je 0x14004ad2d
inc rcx
cmp rax, rcx
jne 0x14004ac9e
lea rcx, [rdi - 0xf]
cmp rax, rcx
jbe 0x14004acc5
jmp 0x14004ad08
lea rcx, [rdi - 0xf]
xor eax, eax
movdqa xmm0, xmmword [0x14006bf50]
movabs rdx, 0x8080808080808080
movdqu xmm1, xmmword [rsp + rax + 0x80]
movdqa xmm2, xmm1
paddq xmm2, xmm0
pandn xmm1, xmm2
pshufd xmm2, xmm1, 0xee
por xmm2, xmm1
movq r8, xmm2
test r8, rdx
jne 0x14004ad08
add rax, 0x10
cmp rax, rcx
jbe 0x14004acd7
sub r12, rax
je 0x14004ad89
lea rdx, [rsp + rax]
add rdx, 0x80
xor ecx, ecx
cmp byte [rdx + rcx], 0
je 0x14004ad2a
inc rcx
cmp r12, rcx
jne 0x14004ad1a
jmp 0x14004ad89
add rcx, rax
cmp rcx, rdi
jne 0x14004ad89
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x48], 0
lea rcx, [rsp + 0x80]
lea r8, [rsp + 0x50]
lea r9, [rsp + 0x48]
xor edx, edx
call sub.ws2_32.dll_getaddrinfo
test eax, eax
je 0x14004ae44
call sub.ws2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
jmp 0x14004ad90
lea rax, str.file_name_contained_an_unexpected_NUL_byte
mov qword [rsp + 0x30], rax
mov eax, 1
test rax, rax
je 0x14004adc2
mov r13, qword [rsp + 0x30]
mov qword [rsi + 8], r13
mov qword [rsi], 0
add rsp, 0x200
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movzx eax, word [rsp + 0x40]
movzx ecx, word [rsp + 0x46]
mov word [rsp + 0x9e], cx
mov ecx, dword [rsp + 0x42]
mov dword [rsp + 0x9a], ecx
movdqu xmm0, xmmword [rsp + 0x30]
mov word [rsp + 0x28], ax
movdqu xmmword [rsp + 0x88], xmm0
mov word [rsp + 0x98], ax
lea rax, [rsp + 0x28]
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x80]
call fcn.140052690
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
shl rdx, 5
add rdx, rcx
mov qword [rsi], rcx
mov qword [rsi + 8], rcx
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x18], rdx
jmp 0x14004adaf
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
mov word [rsp + 0x40], bx
xor eax, eax
jmp 0x14004ad9a
call fcn.140043970
cmp rdi, 0x17f
jbe 0x14004abfd
lea rcx, [rsp + 0x28]
mov rdx, r14
mov r8, rdi
mov r9d, ebx
call fcn.140042850
mov rax, qword [rsp + 0x28]
jmp 0x14004ad9a
mov ecx, 4
mov edx, 0x20
call fcn.140012a40
int3