Function at 0x140006c70
Capabilities:
Parse pe header

Disassembly:
mov edx, dword [rcx + 8]
mov r8, rcx
test edx, edx
jne 0x140006ca0
mov dword [rcx + 0x14], 2
lea rax, [rcx + 0x14]
cmp edx, 3
jne 0x140006ccd
mov dword [rax], 4
cmp edx, 0x22
jne 0x140006cd8
mov dword [rax], Ordinal_79
jmp 0x140006e84
cmp edx, 1
jne 0x140006caa
mov dword [rcx + 0x14], edx
jmp 0x140006c81
cmp edx, 2
jne 0x140006c81
lea rax, [rcx + 0x14]
mov dword [rax], 3
cmp edx, 0x17
jne 0x140006edc
mov dword [rax], Ordinal_60
jmp 0x140006e84
cmp edx, 4
jne 0x140006ce8
mov dword [rax], 5
cmp edx, 0x23
jne 0x140006cf3
mov dword [rax], Ordinal_79
jmp 0x140006e84
cmp edx, 5
jne 0x140006d03
mov dword [rax], 6
cmp edx, 0x24
jne 0x140006d0e
mov dword [rax], Ordinal_79
jmp 0x140006e84
cmp edx, 6
jne 0x140006d1e
mov dword [rax], 8
cmp edx, 0x25
jne 0x140006d29
mov dword [rax], Ordinal_79
jmp 0x140006e84
cmp edx, 7
jne 0x140006d39
mov dword [rax], 9
cmp edx, 0x26
jne 0x140006d44
mov dword [rax], Ordinal_79
jmp 0x140006e84
cmp edx, 8
jne 0x140006d54
mov dword [rax], recv
cmp edx, 0x27
jne 0x140006d5f
mov dword [rax], reloc.WLDAP32.dll_Ordinal_79
jmp 0x140006e84
cmp edx, 9
jne 0x140006d6f
mov dword [rax], reloc.WS2_32.dll_listen
cmp edx, 0x28
jne 0x140006d7a
mov dword [rax], 0x50
jmp 0x140006e84
cmp edx, 0xa
jne 0x140006d8a
mov dword [rax], reloc.WS2_32.dll_recv
cmp edx, 0x29
jne 0x140006d95
mov dword [rax], 0x51
jmp 0x140006e84
cmp edx, 0xb
jne 0x140006da5
mov dword [rax], reloc.WS2_32.dll_recvfrom
cmp edx, 0x2a
jne 0x140006db0
mov dword [rax], 0x52
jmp 0x140006e84
cmp edx, 0xc
jne 0x140006dc0
mov dword [rax], reloc.WS2_32.dll_select
cmp edx, 0x2b
jne 0x140006dcb
mov dword [rax], 0x53
jmp 0x140006e84
cmp edx, 0xd
jne 0x140006ddb
mov dword [rax], reloc.WS2_32.dll_send
cmp edx, 0x2c
jne 0x140006de6
mov dword [rax], 0x54
jmp 0x140006e84
cmp edx, 0xe
jne 0x140006df6
mov dword [rax], reloc.WS2_32.dll_sendto
cmp edx, 0x2d
jne 0x140006e01
mov dword [rax], 0x55
jmp 0x140006e84
cmp edx, 0xf
jne 0x140006e0e
mov dword [rax], Ordinal_50
cmp edx, 0x2e
jne 0x140006e19
mov dword [rax], 0x56
jmp 0x140006e84
cmp edx, 0x10
jne 0x140006e26
mov dword [rax], Ordinal_50
cmp edx, 0x2f
jne 0x140006e31
mov dword [rax], 0x57
jmp 0x140006e84
cmp edx, 0x11
jne 0x140006e3e
mov dword [rax], reloc.WLDAP32.dll_Ordinal_50
cmp edx, 0x30
jne 0x140006e49
mov dword [rax], 0x58
jmp 0x140006e84
cmp edx, 0x12
jne 0x140006e56
mov dword [rax], 0x33
cmp edx, 0x31
jne 0x140006e61
mov dword [rax], 0x59
jmp 0x140006e84
cmp edx, 0x13
jne 0x140006e6e
mov dword [rax], gethostname
cmp edx, 0x32
jne 0x140006e79
mov dword [rax], 0x5a
jmp 0x140006e84
cmp edx, 0x14
jne 0x140006ebe
mov dword [rax], gethostname
cmp edx, 0x33
jne 0x140006e84
mov dword [rax], Ordinal_26
mov ecx, dword [rcx + 4]
test ecx, ecx
jne 0x140006f77
mov dword [r8 + 0x10], 2
lea rax, [r8 + 0x10]
cmp ecx, 3
jne 0x140006fac
mov dword [rax], 4
cmp ecx, 0x22
jne 0x140006fb7
mov dword [rax], Ordinal_79
jmp 0x140007163
cmp edx, 0x15
jne 0x140006ecb
mov dword [rax], gethostname
jmp 0x140006e84
cmp edx, 0x16
jne 0x140006cb9
mov dword [rax], Ordinal_60
jmp 0x140006e84
cmp edx, 0x18
jne 0x140006ee9
mov dword [rax], reloc.WS2_32.dll_gethostname
jmp 0x140006e84
cmp edx, 0x19
jne 0x140006ef6
mov dword [rax], 0x41
jmp 0x140006e84
cmp edx, 0x1a
jne 0x140006f03
mov dword [rax], 0x42
jmp 0x140006e84
cmp edx, 0x1b
jne 0x140006f13
mov dword [rax], 0x43
jmp 0x140006e84
cmp edx, 0x1c
jne 0x140006f23
mov dword [rax], 0x44
jmp 0x140006e84
cmp edx, 0x1d
jne 0x140006f33
mov dword [rax], 0x45
jmp 0x140006e84
cmp edx, 0x1e
jne 0x140006f43
mov dword [rax], 0x46
jmp 0x140006e84
cmp edx, 0x1f
jne 0x140006f53
mov dword [rax], 0x47
jmp 0x140006e84
cmp edx, 0x20
jne 0x140006f63
mov dword [rax], 0x48
jmp 0x140006e84
cmp edx, 0x21
jne 0x140006c90
mov dword [rax], 0x49
jmp 0x140006e84
cmp ecx, 1
jne 0x140006f85
mov dword [r8 + 0x10], ecx
jmp 0x140006e97
cmp ecx, 2
jne 0x140006e97
lea rax, [r8 + 0x10]
mov dword [rax], 3
cmp ecx, 0x17
jne 0x1400071b7
mov dword [rax], Ordinal_60
jmp 0x140007163
cmp ecx, 4
jne 0x140006fc7
mov dword [rax], 5
cmp ecx, 0x23
jne 0x140006fd2
mov dword [rax], Ordinal_79
jmp 0x140007163
cmp ecx, 5
jne 0x140006fe2
mov dword [rax], 6
cmp ecx, 0x24
jne 0x140006fed
mov dword [rax], Ordinal_79
jmp 0x140007163
cmp ecx, 6
jne 0x140006ffd
mov dword [rax], 8
cmp ecx, 0x25
jne 0x140007008
mov dword [rax], Ordinal_79
jmp 0x140007163
cmp ecx, 7
jne 0x140007018
mov dword [rax], 9
cmp ecx, 0x26
jne 0x140007023
mov dword [rax], Ordinal_79
jmp 0x140007163
cmp ecx, 8
jne 0x140007033
mov dword [rax], recv
cmp ecx, 0x27
jne 0x14000703e
mov dword [rax], reloc.WLDAP32.dll_Ordinal_79
jmp 0x140007163
cmp ecx, 9
jne 0x14000704e
mov dword [rax], reloc.WS2_32.dll_listen
cmp ecx, 0x28
jne 0x140007059
mov dword [rax], 0x50
jmp 0x140007163
cmp ecx, 0xa
jne 0x140007069
mov dword [rax], reloc.WS2_32.dll_recv
cmp ecx, 0x29
jne 0x140007074
mov dword [rax], 0x51
jmp 0x140007163
cmp ecx, 0xb
jne 0x140007084
mov dword [rax], reloc.WS2_32.dll_recvfrom
cmp ecx, 0x2a
jne 0x14000708f
mov dword [rax], 0x52
jmp 0x140007163
cmp ecx, 0xc
jne 0x14000709f
mov dword [rax], reloc.WS2_32.dll_select
cmp ecx, 0x2b
jne 0x1400070aa
mov dword [rax], 0x53
jmp 0x140007163
cmp ecx, 0xd
jne 0x1400070ba
mov dword [rax], reloc.WS2_32.dll_send
cmp ecx, 0x2c
jne 0x1400070c5
mov dword [rax], 0x54
jmp 0x140007163
cmp ecx, 0xe
jne 0x1400070d5
mov dword [rax], reloc.WS2_32.dll_sendto
cmp ecx, 0x2d
jne 0x1400070e0
mov dword [rax], 0x55
jmp 0x140007163
cmp ecx, 0xf
jne 0x1400070ed
mov dword [rax], Ordinal_50
cmp ecx, 0x2e
jne 0x1400070f8
mov dword [rax], 0x56
jmp 0x140007163
cmp ecx, 0x10
jne 0x140007105
mov dword [rax], Ordinal_50
cmp ecx, 0x2f
jne 0x140007110
mov dword [rax], 0x57
jmp 0x140007163
cmp ecx, 0x11
jne 0x14000711d
mov dword [rax], reloc.WLDAP32.dll_Ordinal_50
cmp ecx, 0x30
jne 0x140007128
mov dword [rax], 0x58
jmp 0x140007163
cmp ecx, 0x12
jne 0x140007135
mov dword [rax], 0x33
cmp ecx, 0x31
jne 0x140007140
mov dword [rax], 0x59
jmp 0x140007163
cmp ecx, 0x13
jne 0x14000714d
mov dword [rax], gethostname
cmp ecx, 0x32
jne 0x140007158
mov dword [rax], 0x5a
jmp 0x140007163
cmp ecx, 0x14
jne 0x140007199
mov dword [rax], gethostname
cmp ecx, 0x33
jne 0x140007163
mov dword [rax], Ordinal_26
mov ecx, dword [r8]
test ecx, ecx
jne 0x140007252
mov dword [r8 + 0xc], 2
lea rax, [r8 + 0xc]
cmp ecx, 3
jne 0x140007283
mov dword [rax], 4
cmp ecx, 0x22
jne 0x14000728e
mov dword [rax], Ordinal_79
ret
cmp ecx, 0x15
jne 0x1400071a6
mov dword [rax], gethostname
jmp 0x140007163
cmp ecx, 0x16
jne 0x140006f98
mov dword [rax], Ordinal_60
jmp 0x140007163
cmp ecx, 0x18
jne 0x1400071c4
mov dword [rax], reloc.WS2_32.dll_gethostname
jmp 0x140007163
cmp ecx, 0x19
jne 0x1400071d1
mov dword [rax], 0x41
jmp 0x140007163
cmp ecx, 0x1a
jne 0x1400071de
mov dword [rax], 0x42
jmp 0x140007163
cmp ecx, 0x1b
jne 0x1400071ee
mov dword [rax], 0x43
jmp 0x140007163
cmp ecx, 0x1c
jne 0x1400071fe
mov dword [rax], 0x44
jmp 0x140007163
cmp ecx, 0x1d
jne 0x14000720e
mov dword [rax], 0x45
jmp 0x140007163
cmp ecx, 0x1e
jne 0x14000721e
mov dword [rax], 0x46
jmp 0x140007163
cmp ecx, 0x1f
jne 0x14000722e
mov dword [rax], 0x47
jmp 0x140007163
cmp ecx, 0x20
jne 0x14000723e
mov dword [rax], 0x48
jmp 0x140007163
cmp ecx, 0x21
jne 0x140006eaa
mov dword [rax], 0x49
jmp 0x140007163
cmp ecx, 1
jne 0x140007260
mov dword [r8 + 0xc], ecx
jmp 0x140007176
cmp ecx, 2
jne 0x140007176
lea rax, [r8 + 0xc]
mov dword [rax], 3
cmp ecx, 0x17
jne 0x140007426
mov dword [rax], Ordinal_60
ret
cmp ecx, 4
jne 0x14000729a
mov dword [rax], 5
cmp ecx, 0x23
jne 0x1400072a5
mov dword [rax], Ordinal_79
ret
cmp ecx, 5
jne 0x1400072b1
mov dword [rax], 6
cmp ecx, 0x24
jne 0x1400072bc
mov dword [rax], Ordinal_79
ret
cmp ecx, 6
jne 0x1400072c8
mov dword [rax], 8
cmp ecx, 0x25
jne 0x1400072d3
mov dword [rax], Ordinal_79
ret
cmp ecx, 7
jne 0x1400072df
mov dword [rax], 9
cmp ecx, 0x26
jne 0x1400072ea
mov dword [rax], Ordinal_79
ret
cmp ecx, 8
jne 0x1400072f6
mov dword [rax], recv
cmp ecx, 0x27
jne 0x140007301
mov dword [rax], reloc.WLDAP32.dll_Ordinal_79
ret
cmp ecx, 9
jne 0x14000730d
mov dword [rax], reloc.WS2_32.dll_listen
cmp ecx, 0x28
jne 0x140007318
mov dword [rax], 0x50
ret
cmp ecx, 0xa
jne 0x140007324
mov dword [rax], reloc.WS2_32.dll_recv
cmp ecx, 0x29
jne 0x14000732f
mov dword [rax], 0x51
ret
cmp ecx, 0xb
jne 0x14000733b
mov dword [rax], reloc.WS2_32.dll_recvfrom
cmp ecx, 0x2a
jne 0x140007346
mov dword [rax], 0x52
ret
cmp ecx, 0xc
jne 0x140007352
mov dword [rax], reloc.WS2_32.dll_select
cmp ecx, 0x2b
jne 0x14000735d
mov dword [rax], 0x53
ret
cmp ecx, 0xd
jne 0x140007369
mov dword [rax], reloc.WS2_32.dll_send
cmp ecx, 0x2c
jne 0x140007374
mov dword [rax], 0x54
ret
cmp ecx, 0xe
jne 0x140007380
mov dword [rax], reloc.WS2_32.dll_sendto
cmp ecx, 0x2d
jne 0x14000738b
mov dword [rax], 0x55
ret
cmp ecx, 0xf
jne 0x140007397
mov dword [rax], Ordinal_50
cmp ecx, 0x2e
jne 0x1400073a2
mov dword [rax], 0x56
ret
cmp ecx, 0x10
jne 0x1400073ae
mov dword [rax], Ordinal_50
cmp ecx, 0x2f
jne 0x1400073b9
mov dword [rax], 0x57
ret
cmp ecx, 0x11
jne 0x1400073c5
mov dword [rax], reloc.WLDAP32.dll_Ordinal_50
cmp ecx, 0x30
jne 0x1400073d0
mov dword [rax], 0x58
ret
cmp ecx, 0x12
jne 0x1400073dc
mov dword [rax], 0x33
cmp ecx, 0x31
jne 0x1400073e7
mov dword [rax], 0x59
ret
cmp ecx, 0x13
jne 0x1400073f3
mov dword [rax], gethostname
cmp ecx, 0x32
jne 0x1400073fe
mov dword [rax], 0x5a
ret
cmp ecx, 0x14
jne 0x14000740a
mov dword [rax], gethostname
cmp ecx, 0x33
jne 0x140007409
mov dword [rax], Ordinal_26
ret
cmp ecx, 0x15
jne 0x140007416
mov dword [rax], gethostname
ret
cmp ecx, 0x16
jne 0x140007273
mov dword [rax], Ordinal_60
ret
cmp ecx, 0x18
jne 0x140007432