Function at 0x14000c1e8
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x2040
call fcn.140090020
sub rsp, rax
xor eax, eax
or ecx, 0xffffffff
mov r14, r9
mov word [rsp + 0x38], cx
mov rcx, r9
mov r13, r8
mov r15d, edx
mov ebx, eax
mov dword [rsp + 0x2080], eax
mov word [rsp + 0x3a], ax
call fcn.14000c0d4
xor r12d, r12d
cmp word [r13], r12w
je 0x14000c91d
lea edi, [r12 + 1]
lea r8d, [r12 + 0x41]
lea r9d, [r12 + 0x2c]
mov edx, 0x3d
mov eax, ebx
cmp word [r13 + rax*2], 0x20
je 0x14000c26c
cmp word [r13 + rax*2], 9
jne 0x14000c277
add ebx, edi
mov dword [rsp + 0x2080], ebx
jmp 0x14000c258
mov eax, ebx
movzx esi, word [r13 + rax*2]
xor eax, eax
cmp si, ax
je 0x14000c91d
mov word [rsp + 0x3a], bx
mov r12d, eax
mov rbp, rax
cmp si, 0x30
jb 0x14000c2a1
cmp si, 0x39
jbe 0x14000c2ab
cmp si, 0x2e
jne 0x14000c398
lea rax, [rsp + 0x40]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x2080]
lea rcx, [0x1400bcef0]
mov rdx, r13
mov qword [rsp + 0x20], rax
call fcn.14000c9d4
cmp al, dil
jne 0x14000c2ef
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.14000c024
mov ebx, dword [rsp + 0x2080]
jmp 0x14000c905
mov ebx, dword [rsp + 0x2080]
cmp si, 0x2e
jne 0x14000c38b
mov edx, 0x41
add ebx, edi
mov dword [rsp + 0x2080], ebx
movzx ecx, word [r13 + rbx*2]
cmp cx, dx
jb 0x14000c31f
cmp cx, 0x5a
jbe 0x14000c33d
cmp cx, 0x61
jb 0x14000c32b
cmp cx, 0x7a
jbe 0x14000c33d
cmp cx, 0x30
jb 0x14000c337
cmp cx, 0x39
jbe 0x14000c33d
cmp cx, 0x5f
jne 0x14000c34a
mov word [rsp + rbp*2 + 0x40], cx
add r12d, edi
add rbp, rdi
jmp 0x14000c305
xor eax, eax
mov word [rsp + rbp*2 + 0x40], ax
cmp r12d, eax
je 0x14000c96f
lea edx, [rax + 0x35]
lea rcx, [rsp + 0x30]
call fcn.140016930
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.1400168b4
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.14000c024
xor r12d, r12d
jmp 0x14000c905
xor eax, eax
lea edx, [rax + 0x3d]
lea r8d, [rax + 0x41]
lea r9d, [rax + 0x2c]
cmp si, r8w
jb 0x14000c3a4
cmp si, 0x5a
jbe 0x14000c3ba
cmp si, 0x61
jb 0x14000c3b0
cmp si, 0x7a
jbe 0x14000c3ba
cmp si, 0x5f
jne 0x14000c4de
mov rcx, rax
mov eax, ebx
movzx esi, word [r13 + rax*2]
cmp si, r8w
jb 0x14000c3d1
cmp si, 0x5a
jbe 0x14000c3ef
cmp si, 0x61
jb 0x14000c3dd
cmp si, 0x7a
jbe 0x14000c3ef
cmp si, 0x30
jb 0x14000c3e9
cmp si, 0x39
jbe 0x14000c3ef
cmp si, 0x5f
jne 0x14000c408
mov word [rsp + rcx*2 + 0x40], si
add rcx, rdi
add ebx, edi
mov si, word [r13 + rbx*2]
mov dword [rsp + 0x2080], ebx
jmp 0x14000c3c5
mov word [rsp + rcx*2 + 0x40], r12w
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_CharUpperW]
lea rdx, [rsp + 0x40]
lea rcx, [0x1400bcef0]
call fcn.14000cbf8
mov ebp, eax
xor eax, eax
cmp ebp, eax
jl 0x14000c472
cmp si, 0x20
je 0x14000c469
cmp si, 9
je 0x14000c469
lea ecx, [rax + 0x2c]
cmp si, cx
je 0x14000c469
lea ecx, [rax + 0x3d]
cmp si, cx
je 0x14000c469
cmp si, 0x28
je 0x14000c469
cmp si, 0x29
je 0x14000c469
cmp si, 0x5d
je 0x14000c469
cmp si, ax
jne 0x14000c98a
xor edx, edx
lea rcx, [rsp + 0x30]
jmp 0x14000c4a8
cmp si, 0x20
je 0x14000c488
cmp si, 9
je 0x14000c488
cmp si, 0x28
jne 0x14000c98a
mov rcx, qword [0x1400bcef8]
lea rdx, [rsp + 0x40]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rsp + 0x30]
cmp eax, r12d
mov ebp, eax
jl 0x14000c4b3
mov edx, edi
call fcn.140016930
mov dword [rsp + 0x30], ebp
jmp 0x14000c4d0
mov edx, reloc.WSOCK32.dll_gethostbyname
call fcn.140016930
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.1400168b4
mov ebp, dword [rsp + 0x30]
cmp ebp, 0xffffffff
je 0x14000c99d
jmp 0x14000c8f8
movzx ecx, si
cmp ecx, r9d
jg 0x14000c735
je 0x14000c72b
sub ecx, 0x1a
je 0x14000c6fb
sub ecx, 8
je 0x14000c663
sub ecx, 2
je 0x14000c5f8
sub ecx, 2
je 0x14000c5c7
sub ecx, edi
je 0x14000c663
sub ecx, edi
je 0x14000c5c0
sub ecx, edi
je 0x14000c596
sub ecx, edi
je 0x14000c565
cmp ecx, edi
jne 0x14000c9a8
lea rcx, [rsp + 0x30]
mov edx, VarR8FromUI1
call fcn.140016930
add ebx, edi
mov ecx, 0x3d
mov dword [rsp + 0x2080], ebx
cmp word [r13 + rbx*2], cx
jne 0x14000c8f8
lea edx, [rcx + 0x15]
jmp 0x14000c8e5
lea rcx, [rsp + 0x30]
mov edx, VarR8FromUI1
call fcn.140016930
add ebx, edi
mov ecx, 0x3d
mov dword [rsp + 0x2080], ebx
cmp word [r13 + rbx*2], cx
jne 0x14000c8f8
lea edx, [rcx + 0x18]
jmp 0x14000c8e5
mov edx, 0x48
lea rcx, [rsp + 0x30]
call fcn.140016930
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.14000c024
add ebx, edi
mov dword [rsp + 0x2080], ebx
jmp 0x14000c905
mov edx, 0x47
jmp 0x14000c59b
lea rcx, [rsp + 0x30]
mov edx, reloc.OLEAUT32.dll_VarR8FromUI1
call fcn.140016930
add ebx, edi
mov ecx, 0x3d
mov dword [rsp + 0x2080], ebx
cmp word [r13 + rbx*2], cx
jne 0x14000c8f8
lea edx, [rcx + 0x19]
jmp 0x14000c8e5
add ebx, edi
mov dword [rsp + 0x2080], ebx
movzx ecx, word [r13 + rbx*2]
cmp cx, r8w
jb 0x14000c613
cmp cx, 0x5a
jbe 0x14000c631
cmp cx, 0x61
jb 0x14000c61f
cmp cx, 0x7a
jbe 0x14000c631
cmp cx, 0x30
jb 0x14000c62b
cmp cx, 0x39
jbe 0x14000c631
cmp cx, 0x5f
jne 0x14000c63e
mov word [rsp + rbp*2 + 0x40], cx
add r12d, edi
add rbp, rdi
jmp 0x14000c5f8
xor eax, eax
lea rcx, [rsp + 0x40]
mov word [rsp + rbp*2 + 0x40], ax
call qword [sym.imp.USER32.dll_CharUpperW]
xor eax, eax
cmp r12d, eax
je 0x14000c96f
lea edx, [rax + 0x33]
jmp 0x14000c35d
mov eax, ebx
xor r11d, r11d
mov r9d, ebx
movzx r10d, word [r13 + rax*2]
add ebx, edi
mov rdx, r11
movzx ecx, word [r13 + rbx*2]
cmp cx, r11w
je 0x14000c6be
lea r8d, [rbx + 1]
cmp cx, r10w
jne 0x14000c6a5
cmp word [r13 + r8*2], r10w
jne 0x14000c6c9
mov word [rsp + rdx*2 + 0x40], cx
add ebx, 2
add rdx, rdi
add r8d, 2
jmp 0x14000c6b2
mov word [rsp + rdx*2 + 0x40], cx
add ebx, edi
add rdx, rdi
add r8d, edi
mov cx, word [r13 + rbx*2]
cmp cx, r11w
jne 0x14000c686
mov r8d, 0x138a
jmp 0x14000c9b1
mov word [rsp + rdx*2 + 0x40], r11w
lea rcx, [rsp + 0x30]
add ebx, edi
mov edx, gethostname
mov dword [rsp + 0x2080], ebx
call fcn.140016930
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.1400168b4
jmp 0x14000c8f8
xor eax, eax
cmp ebx, eax
jne 0x14000c9a8
cmp word [r13 + 2], ax
jne 0x14000c9a8
cmp r15d, dword [0x1400bcf10]
jl 0x14000c9a8
mov ebx, edi
mov dword [rsp + 0x2080], ebx
jmp 0x14000c90f
mov edx, 0x40
jmp 0x14000c59b
sub ecx, 0x2d
je 0x14000c8bd
sub ecx, 2
je 0x14000c893
sub ecx, 0xd
je 0x14000c85d
sub ecx, edi
je 0x14000c838
sub ecx, edi
je 0x14000c800
sub ecx, 2
je 0x14000c795
sub ecx, 0x1b
je 0x14000c78b
sub ecx, 2
je 0x14000c781
cmp ecx, edi
jne 0x14000c9a8
mov edx, 0x51
jmp 0x14000c59b
mov edx, 0x4f
jmp 0x14000c59b
mov edx, 0x4e
jmp 0x14000c59b
add ebx, edi
mov dword [rsp + 0x2080], ebx
movzx ecx, word [r13 + rbx*2]
cmp cx, r8w
jb 0x14000c7b0
cmp cx, 0x5a
jbe 0x14000c7ce
cmp cx, 0x61
jb 0x14000c7bc
cmp cx, 0x7a
jbe 0x14000c7ce
cmp cx, 0x30
jb 0x14000c7c8
cmp cx, 0x39
jbe 0x14000c7ce
cmp cx, 0x5f
jne 0x14000c7db
mov word [rsp + rbp*2 + 0x40], cx
add r12d, edi
add rbp, rdi
jmp 0x14000c795
xor eax, eax
lea rcx, [rsp + 0x40]
mov word [rsp + rbp*2 + 0x40], ax
call qword [sym.imp.USER32.dll_CharUpperW]
xor eax, eax
cmp r12d, eax
je 0x14000c96f
lea edx, [rax + 0x32]
jmp 0x14000c35d
add ebx, edi
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x2080], ebx
cmp word [r13 + rbx*2], dx
je 0x14000c820
mov edx, 0x42
jmp 0x14000c8f3
mov edx, 0x45
call fcn.140016930
add ebx, edi
mov dword [rsp + 0x2080], ebx
jmp 0x14000c8f8
add ebx, edi
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x2080], ebx
cmp word [r13 + rbx*2], dx
je 0x14000c856
mov edx, r8d
jmp 0x14000c8f3
mov edx, 0x50
jmp 0x14000c825
add ebx, edi
mov dword [rsp + 0x2080], ebx
movzx ecx, word [r13 + rbx*2]
sub ecx, edx
je 0x14000c887
cmp ecx, edi
lea rcx, [rsp + 0x30]
je 0x14000c880
mov edx, 0x43
jmp 0x14000c8f3
mov edx, 0x44
jmp 0x14000c825
mov edx, 0x46
lea rcx, [rsp + 0x30]
jmp 0x14000c825
lea rcx, [rsp + 0x30]
mov edx, VarR8FromUI1
call fcn.140016930
add ebx, edi
mov ecx, 0x3d
mov dword [rsp + 0x2080], ebx
cmp word [r13 + rbx*2], cx
jne 0x14000c8f8
lea edx, [rcx + 0x17]
jmp 0x14000c8e5
lea rcx, [rsp + 0x30]
mov edx, VarR8FromUI1
call fcn.140016930
add ebx, edi
mov ecx, 0x3d
mov dword [rsp + 0x2080], ebx
cmp word [r13 + rbx*2], cx
jne 0x14000c8f8
lea edx, [rcx + 0x16]
add ebx, edi
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x2080], ebx
call fcn.140016930
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.14000c024
mov r9d, 0x2c
lea r8d, [r9 + 0x15]
mov eax, ebx
cmp word [r13 + rax*2], r12w
jne 0x14000c253
lea rcx, [rsp + 0x30]
mov edx, 0x7f
call fcn.140016930
xor eax, eax
mov word [rsp + 0x3a], bx
mov edi, eax
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.14000c024
lea rcx, [rsp + 0x30]
call fcn.140016880
lea r11, [rsp + 0x2040]
mov eax, edi
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea r9d, [rbx - 1]
mov r8d, 0x138b
lea rcx, [0x1400bcef0]
mov edx, r15d
call fcn.14000a7d8
jmp 0x14000c942
or esi, 0xffffffff
lea rcx, [rsp + 0x30]
mov edx, esi
call fcn.140016930
mov dword [rsp + 0x30], esi
mov r9d, ebx
mov r8d, 0x138c
jmp 0x14000c979
mov r9d, ebx
mov r8d, 0x1388
lea rcx, [0x1400bcef0]
mov edx, r15d
call fcn.14000a7d8
lea rcx, [rsp + 0x30]
mov edx, 0x7f
call fcn.140016930
jmp 0x14000c935