Function at 0x14006ad90
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x60
mov rbx, qword [0x1403d2c70]
lea rdx, [rbp - 0x30]
movaps xmmword [rsp + 0x50], xmm6
movdqa xmm6, xmmword [0x1401a0f70]
mov dword [rbp - 0x30], ntohs
movss xmm0, dword [rbx + 0x3834]
lea rcx, [rbx + 0x4858]
movss dword [rbp - 0x2c], xmm0
call fcn.1400205a0
mov dword [rbx + 0x3834], 0x40a00000
lea rdx, [rbp - 0x30]
mov rbx, qword [0x1403d2c70]
mov dword [rbp - 0x30], reloc.WS2_32.dll_select
movss xmm0, dword [rbx + 0x3864]
lea rcx, [rbx + 0x4858]
movss dword [rbp - 0x2c], xmm0
call fcn.1400205a0
mov dword [rbx + 0x3864], 0x41233333
lea rdx, [rbp - 0x30]
mov rbx, qword [0x1403d2c70]
mov dword [rbp - 0x30], 8
movss xmm0, dword [rbx + 0x3820]
lea rcx, [rbx + 0x4858]
movss dword [rbp - 0x2c], xmm0
call fcn.1400205a0
lea rdx, [rbp + 0x10]
mov dword [rbx + 0x3820], 0
mov ecx, reloc.WS2_32.dll_ntohl
mov dword [rbp + 0x10], 0x41200000
mov dword [rbp + 0x14], 0x41200000
call fcn.140005760
mov rbx, qword [0x1403d2c70]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], reloc.WLDAP32.dll_Ordinal_22
movups xmm0, xmmword [rbx + 0x3a38]
lea rcx, [rbx + 0x4848]
movups xmmword [rbp - 0x2c], xmm0
call fcn.140020690
movups xmmword [rbx + 0x3a38], xmm6
mov rbx, qword [0x1403d2c70]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 6
movups xmm0, xmmword [rbx + 0x3938]
lea rcx, [rbx + 0x4848]
movups xmmword [rbp - 0x2c], xmm0
call fcn.140020690
movups xmmword [rbx + 0x3938], xmm6
mov rbx, qword [0x1403d2c70]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], Ordinal_26
movups xmm0, xmmword [rbx + 0x3a68]
lea rcx, [rbx + 0x4848]
movups xmmword [rbp - 0x2c], xmm0
call fcn.140020690
movups xmmword [rbx + 0x3a68], xmm6
mov rbx, qword [0x1403d2c70]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], reloc.WLDAP32.dll_Ordinal_27
movups xmm0, xmmword [rbx + 0x3a88]
lea rcx, [rbx + 0x4848]
movups xmmword [rbp - 0x2c], xmm0
call fcn.140020690
movups xmmword [rbx + 0x3a88], xmm6
mov rbx, qword [0x1403d2c70]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 8
movups xmm0, xmmword [rbx + 0x3958]
lea rcx, [rbx + 0x4848]
movups xmmword [rbp - 0x2c], xmm0
call fcn.140020690
movups xmmword [rbx + 0x3958], xmm6
mov rbx, qword [0x1403d2c70]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 9
movups xmm0, xmmword [rbx + 0x3968]
lea rcx, [rbx + 0x4848]
movups xmmword [rbp - 0x2c], xmm0
call fcn.140020690
movups xmmword [rbx + 0x3968], xmm6
mov rbx, qword [0x1403d2c70]
mov dword [rbp - 0x30], reloc.WLDAP32.dll_Ordinal_26
movups xmm0, xmmword [rbx + 0x3a78]
lea rcx, [rbx + 0x4848]
lea rdx, [rbp - 0x30]
movups xmmword [rbp - 0x2c], xmm0
call fcn.140020690
movups xmmword [rbx + 0x3a78], xmm6
mov rbx, qword [0x1403d2c70]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], 0xa
movups xmm0, xmmword [rbx + 0x3978]
lea rcx, [rbx + 0x4848]
movups xmmword [rbp - 0x2c], xmm0
call fcn.140020690
movups xmmword [rbx + 0x3978], xmm6
mov rbx, qword [0x1403d2c70]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], reloc.WS2_32.dll_socket
movups xmm0, xmmword [rbx + 0x3a48]
lea rcx, [rbx + 0x4848]
movups xmmword [rbp - 0x2c], xmm0
call fcn.140020690
movups xmmword [rbx + 0x3a48], xmm6
mov rbx, qword [0x1403d2c70]
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x30], Ordinal_26
movups xmm0, xmmword [rbx + 0x3a58]
lea rcx, [rbx + 0x4848]
movups xmmword [rbp - 0x2c], xmm0
call fcn.140020690
mov rcx, qword [0x1403d4108]
mov rdi, qword [0x1403d2c70]
movups xmmword [rbx + 0x3a58], xmm6
mov qword [rbp + 0x10], rcx
mov rbx, rcx
or dword [rdi + 0x4788], 1
mov dword [rdi + 0x478c], 0x43960000
test rcx, rcx
jne 0x14006b0af
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x14006b0a8
mov rbx, qword [rdi + 0x58]
cmp dword [rbx + 0x58], ecx
jg 0x14006b0a1
mov r8d, 0x70d
lea rdx, [0x14018eb60]
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x60]
mov rcx, qword [rax]
mov qword [rbp + 0x10], rcx
mov rbx, rcx
call fcn.1400134e0
lea rcx, [rdi + 0x4868]
lea rdx, [rbp + 0x10]
call fcn.140020900
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rdi + 0x3f00]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x298]
call fcn.140022e40
mov eax, dword [0x140232fb8]
test eax, eax
jne 0x14006b0f8
mov dword [0x1403d34d8], 0x41
jmp 0x14006b516
cmp eax, 1
jne 0x14006b10c
mov dword [0x1403d34d8], 0x42
jmp 0x14006b516
cmp eax, 2
jne 0x14006b120
mov dword [0x1403d34d8], 0x43
jmp 0x14006b516
cmp eax, 3
jne 0x14006b134
mov dword [0x1403d34d8], 0x44
jmp 0x14006b516
cmp eax, 4
jne 0x14006b148
mov dword [0x1403d34d8], 0x45
jmp 0x14006b516
cmp eax, 5
jne 0x14006b15c
mov dword [0x1403d34d8], 0x46
jmp 0x14006b516
cmp eax, 6
jne 0x14006b170
mov dword [0x1403d34d8], 0x47
jmp 0x14006b516
cmp eax, 7
jne 0x14006b184
mov dword [0x1403d34d8], 0x48
jmp 0x14006b516
cmp eax, 8
jne 0x14006b198
mov dword [0x1403d34d8], 0x49
jmp 0x14006b516
cmp eax, 9
jne 0x14006b1ac
mov dword [0x1403d34d8], 0x4a
jmp 0x14006b516
cmp eax, 0xa
jne 0x14006b1c0
mov dword [0x1403d34d8], 0x4b
jmp 0x14006b516
cmp eax, 0xb
jne 0x14006b1d4
mov dword [0x1403d34d8], 0x4c
jmp 0x14006b516
cmp eax, 0xc
jne 0x14006b1e8
mov dword [0x1403d34d8], 0x4d
jmp 0x14006b516
cmp eax, 0xd
jne 0x14006b1fc
mov dword [0x1403d34d8], 0x4e
jmp 0x14006b516
cmp eax, 0xe
jne 0x14006b210
mov dword [0x1403d34d8], 0x4f
jmp 0x14006b516
cmp eax, 0xf
jne 0x14006b224
mov dword [0x1403d34d8], 0x50
jmp 0x14006b516
cmp eax, 0x10
jne 0x14006b238
mov dword [0x1403d34d8], 0x51
jmp 0x14006b516
cmp eax, 0x11
jne 0x14006b24c
mov dword [0x1403d34d8], 0x52
jmp 0x14006b516
cmp eax, 0x12
jne 0x14006b260
mov dword [0x1403d34d8], 0x53
jmp 0x14006b516
cmp eax, 0x13
jne 0x14006b274
mov dword [0x1403d34d8], 0x54
jmp 0x14006b516
cmp eax, 0x14
jne 0x14006b288
mov dword [0x1403d34d8], 0x55
jmp 0x14006b516
cmp eax, 0x15
jne 0x14006b29c
mov dword [0x1403d34d8], 0x56
jmp 0x14006b516
cmp eax, 0x16
jne 0x14006b2b0
mov dword [0x1403d34d8], 0x57
jmp 0x14006b516
cmp eax, 0x17
jne 0x14006b2c4
mov dword [0x1403d34d8], 0x58
jmp 0x14006b516
cmp eax, 0x18
jne 0x14006b2d8
mov dword [0x1403d34d8], 0x59
jmp 0x14006b516
cmp eax, 0x19
jne 0x14006b2ec
mov dword [0x1403d34d8], 0x5a
jmp 0x14006b516
cmp eax, 0x1a
jne 0x14006b300
mov dword [0x1403d34d8], 0x12
jmp 0x14006b516
cmp eax, 0x1b
jne 0x14006b314
mov dword [0x1403d34d8], 0x11
jmp 0x14006b516
cmp eax, 0x1c
jne 0x14006b328
mov dword [0x1403d34d8], 0x10
jmp 0x14006b516
cmp eax, 0x1d
jne 0x14006b33c
mov dword [0x1403d34d8], 9
jmp 0x14006b516
cmp eax, 0x1e
jne 0x14006b350
mov dword [0x1403d34d8], 0x14
jmp 0x14006b516
cmp eax, 0x1f
jne 0x14006b364
mov dword [0x1403d34d8], 0x1b
jmp 0x14006b516
cmp eax, 0x20
jne 0x14006b378
mov dword [0x1403d34d8], 0x70
jmp 0x14006b516
cmp eax, 0x21
jne 0x14006b38c
mov dword [0x1403d34d8], 0x71
jmp 0x14006b516
cmp eax, 0x22
jne 0x14006b3a0
mov dword [0x1403d34d8], 0x72
jmp 0x14006b516
cmp eax, 0x23
jne 0x14006b3b4
mov dword [0x1403d34d8], 0x73
jmp 0x14006b516
cmp eax, 0x24
jne 0x14006b3c8
mov dword [0x1403d34d8], 0x74
jmp 0x14006b516
cmp eax, 0x25
jne 0x14006b3dc
mov dword [0x1403d34d8], 0x75
jmp 0x14006b516
cmp eax, 0x26
jne 0x14006b3f0
mov dword [0x1403d34d8], 0x76
jmp 0x14006b516
cmp eax, 0x27
jne 0x14006b404
mov dword [0x1403d34d8], 0x77
jmp 0x14006b516
cmp eax, 0x28
jne 0x14006b418
mov dword [0x1403d34d8], 0x78
jmp 0x14006b516
cmp eax, 0x29
jne 0x14006b42c
mov dword [0x1403d34d8], 0x79
jmp 0x14006b516
cmp eax, 0x2a
jne 0x14006b440
mov dword [0x1403d34d8], 0x7a
jmp 0x14006b516
cmp eax, 0x2b
jne 0x14006b454
mov dword [0x1403d34d8], 0x7b
jmp 0x14006b516
cmp eax, 0x2c
jne 0x14006b468
mov dword [0x1403d34d8], 8
jmp 0x14006b516
cmp eax, 0x2d
jne 0x14006b47c
mov dword [0x1403d34d8], 0xd
jmp 0x14006b516
cmp eax, 0x2e
jne 0x14006b490
mov dword [0x1403d34d8], 1
jmp 0x14006b516
cmp eax, 0x2f
jne 0x14006b4a1
mov dword [0x1403d34d8], 2
jmp 0x14006b516
cmp eax, 0x30
jne 0x14006b4b2
mov dword [0x1403d34d8], 0x2d
jmp 0x14006b516
cmp eax, 0x31
jne 0x14006b4c3
mov dword [0x1403d34d8], 0x23
jmp 0x14006b516
cmp eax, 0x32
jne 0x14006b4d4
mov dword [0x1403d34d8], 0x2e
jmp 0x14006b516
cmp eax, 0x33
jne 0x14006b4e5
mov dword [0x1403d34d8], 0x24
jmp 0x14006b516
cmp eax, 0x34
jne 0x14006b4f6
mov dword [0x1403d34d8], 0x21
jmp 0x14006b516
cmp eax, 0x35
jne 0x14006b507
mov dword [0x1403d34d8], 0x22
jmp 0x14006b516
cmp eax, 0x36
jne 0x14006b516
mov dword [0x1403d34d8], 0
lea r9, [0x14022dc10]
lea rdx, [0x140232fb8]
lea rcx, str.Hotkey_Emofar
call fcn.1400367d0
call fcn.140013610
mov ecx, 0xa
call fcn.1400055c0
mov ecx, 4
mov rbx, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x80]
movaps xmm6, xmmword [rsp + 0x50]
add rsp, 0x60
pop rbp
jmp fcn.140005840