Function at 0x1400b3980
Capabilities:
Parse pe header

Disassembly:
push rdi
sub rsp, 0x30
mov r8d, 0x400
mov edx, 0xffffffff
lea rcx, [0x14026bca8]
call sub.VCRUNTIME140.dll_memset
mov r8d, 0x2ba
mov edx, 0xffffffff
lea rcx, [0x14026c0a8]
call sub.VCRUNTIME140.dll_memset
mov eax, 2
imul rax, rax, 0xb
lea rcx, [0x14026bca8]
mov edx, Ordinal_50
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 2
lea rcx, [0x14026bca8]
mov edx, Ordinal_50
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 3
lea rcx, [0x14026bca8]
mov edx, reloc.WLDAP32.dll_Ordinal_50
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 4
lea rcx, [0x14026bca8]
mov edx, 0x33
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 5
lea rcx, [0x14026bca8]
mov edx, 0x34
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 6
lea rcx, [0x14026bca8]
mov edx, gethostname
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 7
lea rcx, [0x14026bca8]
mov edx, gethostname
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 8
lea rcx, [0x14026bca8]
mov edx, gethostname
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 9
lea rcx, [0x14026bca8]
mov edx, gethostname
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0xa
lea rcx, [0x14026bca8]
mov edx, reloc.WS2_32.dll_gethostname
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x1e
lea rcx, [0x14026bca8]
mov edx, 0x41
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x30
lea rcx, [0x14026bca8]
mov edx, 0x42
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x2e
lea rcx, [0x14026bca8]
mov edx, 0x43
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x20
lea rcx, [0x14026bca8]
mov edx, 0x44
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x12
lea rcx, [0x14026bca8]
mov edx, 0x45
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x21
lea rcx, [0x14026bca8]
mov edx, 0x46
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x22
lea rcx, [0x14026bca8]
mov edx, 0x47
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x23
lea rcx, [0x14026bca8]
mov edx, 0x48
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x17
lea rcx, [0x14026bca8]
mov edx, 0x49
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x24
lea rcx, [0x14026bca8]
mov edx, 0x4a
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x25
lea rcx, [0x14026bca8]
mov edx, Ordinal_79
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x26
lea rcx, [0x14026bca8]
mov edx, Ordinal_79
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x32
lea rcx, [0x14026bca8]
mov edx, Ordinal_79
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x31
lea rcx, [0x14026bca8]
mov edx, Ordinal_79
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x18
lea rcx, [0x14026bca8]
mov edx, reloc.WLDAP32.dll_Ordinal_79
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x19
lea rcx, [0x14026bca8]
mov edx, 0x50
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x10
lea rcx, [0x14026bca8]
mov edx, 0x51
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x13
lea rcx, [0x14026bca8]
mov edx, 0x52
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x1f
lea rcx, [0x14026bca8]
mov edx, 0x53
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x14
lea rcx, [0x14026bca8]
mov edx, 0x54
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x16
lea rcx, [0x14026bca8]
mov edx, 0x55
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x2f
lea rcx, [0x14026bca8]
mov edx, 0x56
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x11
lea rcx, [0x14026bca8]
mov edx, 0x57
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x2d
lea rcx, [0x14026bca8]
mov edx, 0x58
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x15
lea rcx, [0x14026bca8]
mov edx, 0x59
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x2c
lea rcx, [0x14026bca8]
mov edx, 0x5a
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x28
lea rcx, [0x14026bca8]
mov edx, Ordinal_41
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x2b
lea rcx, [0x14026bca8]
mov edx, 0x5c
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x33
lea rcx, [0x14026bca8]
mov edx, Ordinal_46
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0xd
lea rcx, [0x14026bca8]
mov edx, 0x3d
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x29
lea rcx, [0x14026bca8]
mov edx, 0x60
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x1a
lea rcx, [0x14026bca8]
mov edx, 0x5b
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0xc
lea rcx, [0x14026bca8]
mov edx, reloc.WLDAP32.dll_Ordinal_45
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x34
lea rcx, [0x14026bca8]
mov edx, reloc.WLDAP32.dll_Ordinal_46
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x1b
lea rcx, [0x14026bca8]
mov edx, 0x5d
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x27
lea rcx, [0x14026bca8]
mov edx, Ordinal_60
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x35
lea rcx, [0x14026bca8]
mov edx, Ordinal_50
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x56
lea rcx, [0x14026bca8]
mov edx, 0xa2
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0xe
lea rcx, [0x14026bca8]
mov edx, 0x103
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x153
lea rcx, [0x14026bca8]
mov edx, 0x105
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x14f
lea rcx, [0x14026bca8]
mov edx, 0x10d
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x1c
lea rcx, [0x14026bca8]
mov edx, 0x101
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 1
lea rcx, [0x14026bca8]
mov edx, 0x100
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x147
lea rcx, [0x14026bca8]
mov edx, 0x10c
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x152
lea rcx, [0x14026bca8]
mov edx, 0x104
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x15d
lea rcx, [0x14026bca8]
mov edx, 0x15c
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x151
lea rcx, [0x14026bca8]
mov edx, 0x10b
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x149
lea rcx, [0x14026bca8]
mov edx, 0x10a
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x45
lea rcx, [0x14026bca8]
mov edx, 0x11c
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x146
lea rcx, [0x14026bca8]
mov edx, 0x11c
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x39
lea rcx, [0x14026bca8]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0xf
lea rcx, [0x14026bca8]
mov edx, 0x102
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x3a
lea rcx, [0x14026bca8]
mov edx, 0x118
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x145
lea rcx, [0x14026bca8]
mov edx, 0x11a
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x46
lea rcx, [0x14026bca8]
mov edx, 0x119
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x3b
lea rcx, [0x14026bca8]
mov edx, 0x122
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x3c
lea rcx, [0x14026bca8]
mov edx, 0x123
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x3d
lea rcx, [0x14026bca8]
mov edx, 0x124
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x3e
lea rcx, [0x14026bca8]
mov edx, 0x125
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x3f
lea rcx, [0x14026bca8]
mov edx, 0x126
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x40
lea rcx, [0x14026bca8]
mov edx, 0x127
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x41
lea rcx, [0x14026bca8]
mov edx, 0x128
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x42
lea rcx, [0x14026bca8]
mov edx, Ordinal_301
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x43
lea rcx, [0x14026bca8]
mov edx, Ordinal_301
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x44
lea rcx, [0x14026bca8]
mov edx, Ordinal_301
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x57
lea rcx, [0x14026bca8]
mov edx, Ordinal_301
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x58
lea rcx, [0x14026bca8]
mov edx, reloc.WLDAP32.dll_Ordinal_301
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x64
lea rcx, [0x14026bca8]
mov edx, 0x12e
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x65
lea rcx, [0x14026bca8]
mov edx, 0x12f
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x66
lea rcx, [0x14026bca8]
mov edx, pe_nt_image_headers64
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x67
lea rcx, [0x14026bca8]
mov edx, 0x131
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x68
lea rcx, [0x14026bca8]
mov edx, 0x132
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x69
lea rcx, [0x14026bca8]
mov edx, 0x133
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x6a
lea rcx, [0x14026bca8]
mov edx, 0x134
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x6b
lea rcx, [0x14026bca8]
mov edx, 0x135
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x6c
lea rcx, [0x14026bca8]
mov edx, 0x136
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x6d
lea rcx, [0x14026bca8]
mov edx, 0x137
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x6e
lea rcx, [0x14026bca8]
mov edx, 0x138
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x76
lea rcx, [0x14026bca8]
mov edx, 0x139
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x38
lea rcx, [0x14026bca8]
mov edx, 0x156
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x1d
lea rcx, [0x14026bca8]
mov edx, 0x155
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x2a
lea rcx, [0x14026bca8]
mov edx, 0x154
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x15b
lea rcx, [0x14026bca8]
mov edx, 0x157
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x137
lea rcx, [0x14026bca8]
mov edx, 0x11b
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x138
lea rcx, [0x14026bca8]
mov edx, 0x15a
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x11d
lea rcx, [0x14026bca8]
mov edx, 0x159
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x36
lea rcx, [0x14026bca8]
mov edx, 0x158
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x15c
lea rcx, [0x14026bca8]
mov edx, 0x15b
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x150
lea rcx, [0x14026bca8]
mov edx, 0x108
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x14b
lea rcx, [0x14026bca8]
mov edx, 0x107
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x14d
lea rcx, [0x14026bca8]
mov edx, 0x106
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x148
lea rcx, [0x14026bca8]
mov edx, 0x109
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x52
lea rcx, [0x14026bca8]
mov edx, 0x140
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x4f
lea rcx, [0x14026bca8]
mov edx, 0x141
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x50
lea rcx, [0x14026bca8]
mov edx, 0x142
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x51
lea rcx, [0x14026bca8]
mov edx, 0x143
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x4b
lea rcx, [0x14026bca8]
mov edx, 0x144
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x4c
lea rcx, [0x14026bca8]
mov edx, 0x145
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x4d
lea rcx, [0x14026bca8]
mov edx, 0x146
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x47
lea rcx, [0x14026bca8]
mov edx, 0x147
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x48
lea rcx, [0x14026bca8]
mov edx, 0x148
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x49
lea rcx, [0x14026bca8]
mov edx, 0x149
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x4e
lea rcx, [0x14026bca8]
mov edx, 0x14e
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x53
lea rcx, [0x14026bca8]
mov edx, 0x14a
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x135
lea rcx, [0x14026bca8]
mov edx, 0x14b
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x11c
lea rcx, [0x14026bca8]
mov edx, 0x14f
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x59
lea rcx, [0x14026bca8]
mov edx, 0x150
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x37
lea rcx, [0x14026bca8]
mov edx, 0x14c
mov word [rcx + rax], dx
mov eax, 2
imul rax, rax, 0x4a
lea rcx, [0x14026bca8]
mov edx, 0x14d
mov word [rcx + rax], dx
mov dword [rsp + 0x20], 0
jmp 0x1400b45a3
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 0x200
jge 0x1400b45e4
movsxd rax, dword [rsp + 0x20]
lea rcx, [0x14026bca8]
movsx eax, word [rcx + rax*2]
test eax, eax
jle 0x1400b45e2
movsxd rax, dword [rsp + 0x20]
lea rcx, [0x14026bca8]
movsx rax, word [rcx + rax*2]
lea rcx, [0x14026c0a8]
movzx edx, word [rsp + 0x20]
mov word [rcx + rax*2], dx
jmp 0x1400b4599
add rsp, 0x30
pop rdi
ret