Function at 0x14000bde4
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
mov dword [rsp + 8], ecx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
or eax, 0xffffffff
xor r12d, r12d
mov r14, rdx
mov r13d, ecx
lea edx, [rax + 0x65]
lea rcx, [rbp - 0x20]
mov ebx, r12d
mov r15, r8
mov word [rbp - 0x28], ax
mov dword [rbp + 0x48], ebx
mov word [rbp - 0x26], r12w
call fcn.140005114
mov rcx, r15
call fcn.14000bca0
cmp word [r14], r12w
je 0x14000c505
lea esi, [r12 + 1]
lea r8d, [r12 + 0x41]
lea r9d, [r12 + 0x2c]
mov edx, 0x3d
mov eax, ebx
cmp word [r14 + rax*2], 0x20
je 0x14000be61
cmp word [r14 + rax*2], 9
jne 0x14000be68
add ebx, esi
mov dword [rbp + 0x48], ebx
jmp 0x14000be4f
mov eax, ebx
movzx edi, word [r14 + rax*2]
test di, di
je 0x14000c505
mov word [rbp - 0x26], bx
cmp di, 0x30
jb 0x14000be88
cmp di, 0x39
jbe 0x14000be92
cmp di, 0x2e
jne 0x14000bf63
lea r9, [rbp - 0x20]
lea r8, [rbp - 0x30]
lea rdx, [rbp + 0x48]
mov rcx, r14
call fcn.14000c5a4
cmp al, sil
jne 0x14000bebf
lea rdx, [rbp - 0x30]
mov rcx, r15
call fcn.14000bbf0
mov ebx, dword [rbp + 0x48]
jmp 0x14000c4ec
mov ebx, dword [rbp + 0x48]
cmp di, 0x2e
jne 0x14000bf56
add ebx, esi
lea rcx, [rbp - 0x20]
mov dword [rbp + 0x48], ebx
call fcn.140009d64
mov edi, 0x41
movzx edx, word [r14 + rbx*2]
cmp dx, di
jb 0x14000beef
cmp dx, 0x5a
jbe 0x14000bf0d
cmp dx, 0x61
jb 0x14000befb
cmp dx, 0x7a
jbe 0x14000bf0d
cmp dx, 0x30
jb 0x14000bf07
cmp dx, 0x39
jbe 0x14000bf0d
cmp dx, 0x5f
jne 0x14000bf1d
lea rcx, [rbp - 0x20]
call fcn.140004e58
add ebx, esi
mov dword [rbp + 0x48], ebx
jmp 0x14000bedf
cmp qword [rbp - 0x18], r12
je 0x14000c552
lea rcx, [rbp - 0x30]
mov edx, gethostname
call fcn.140016c30
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x30]
call fcn.140016bb0
lea rdx, [rbp - 0x30]
mov rcx, r15
call fcn.14000bbf0
mov r8d, edi
jmp 0x14000c4f2
mov edx, 0x3d
lea r8d, [rdx + 4]
lea r9d, [rdx - 0x11]
cmp di, r8w
jb 0x14000bf6f
cmp di, 0x5a
jbe 0x14000bf85
cmp di, 0x61
jb 0x14000bf7b
cmp di, 0x7a
jbe 0x14000bf85
cmp di, 0x5f
jne 0x14000c0c3
lea rcx, [rbp - 0x20]
call fcn.140009d64
mov r11d, ebx
mov r13d, 0x41
movzx edi, word [r14 + r11*2]
cmp di, r13w
jb 0x14000bfa8
cmp di, 0x5a
jbe 0x14000bfc6
cmp di, 0x61
jb 0x14000bfb4
cmp di, 0x7a
jbe 0x14000bfc6
cmp di, 0x30
jb 0x14000bfc0
cmp di, 0x39
jbe 0x14000bfc6
cmp di, 0x5f
jne 0x14000bfde
lea rcx, [rbp - 0x20]
movzx edx, di
call fcn.140004e58
add ebx, esi
movzx edi, word [r14 + rbx*2]
mov dword [rbp + 0x48], ebx
jmp 0x14000bf9c
lea rcx, [rbp - 0x20]
call fcn.1400024e8
mov edx, dword [rbp - 0x18]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.USER32.dll_CharUpperBuffW]
lea rcx, [rbp - 0x20]
call fcn.14000c7bc
mov r13d, dword [rbp + 0x40]
mov r12d, eax
test eax, eax
js 0x14000c04b
cmp di, 0x20
je 0x14000c043
cmp di, 9
je 0x14000c043
mov ecx, 0x2c
cmp di, cx
je 0x14000c043
mov ecx, 0x3d
cmp di, cx
je 0x14000c043
cmp di, 0x28
je 0x14000c043
cmp di, 0x29
je 0x14000c043
cmp di, 0x5d
je 0x14000c043
test di, di
jne 0x14000c565
xor edx, edx
lea rcx, [rbp - 0x30]
jmp 0x14000c07f
cmp di, 0x20
je 0x14000c061
cmp di, 9
je 0x14000c061
cmp di, 0x28
jne 0x14000c565
mov rcx, qword [0x1400b61b8]
mov rdx, qword [rbp - 0x20]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rbp - 0x30]
mov r12d, eax
test eax, eax
js 0x14000c08a
mov edx, esi
call fcn.140016c30
mov dword [rbp - 0x30], r12d
jmp 0x14000c0a5
mov edx, reloc.WSOCK32.dll_gethostbyname
call fcn.140016c30
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x30]
call fcn.140016bb0
mov r12d, dword [rbp - 0x30]
cmp r12d, 0xffffffff
je 0x14000c576
lea rdx, [rbp - 0x30]
mov rcx, r15
call fcn.14000bbf0
xor r12d, r12d
jmp 0x14000c4ec
movzx ecx, di
cmp ecx, r9d
jg 0x14000c331
je 0x14000c327
sub ecx, 0x1a
je 0x14000c2fd
sub ecx, 8
je 0x14000c25a
sub ecx, 2
je 0x14000c1c3
sub ecx, 2
je 0x14000c198
dec ecx
je 0x14000c25a
dec ecx
je 0x14000c191
dec ecx
je 0x14000c16d
dec ecx
je 0x14000c142
dec ecx
jne 0x14000c580
lea edx, [rcx + 0x49]
lea rcx, [rbp - 0x30]
call fcn.140016c30
add ebx, esi
mov ecx, 0x3d
mov dword [rbp + 0x48], ebx
cmp word [r14 + rbx*2], cx
jne 0x14000c4e0
lea edx, [rcx + 0x15]
jmp 0x14000c4d2
lea rcx, [rbp - 0x30]
mov edx, VarR8FromUI1
call fcn.140016c30
add ebx, esi
mov ecx, 0x3d
mov dword [rbp + 0x48], ebx
cmp word [r14 + rbx*2], cx
jne 0x14000c4e0
lea edx, [rcx + 0x18]
jmp 0x14000c4d2
mov edx, 0x48
lea rcx, [rbp - 0x30]
call fcn.140016c30
lea rdx, [rbp - 0x30]
mov rcx, r15
call fcn.14000bbf0
add ebx, esi
mov dword [rbp + 0x48], ebx
jmp 0x14000c4ec
mov edx, 0x47
jmp 0x14000c172
lea rcx, [rbp - 0x30]
mov edx, reloc.OLEAUT32.dll_VarR8FromUI1
call fcn.140016c30
add ebx, esi
mov ecx, 0x3d
mov dword [rbp + 0x48], ebx
cmp word [r14 + rbx*2], cx
jne 0x14000c4e0
lea edx, [rcx + 0x19]
jmp 0x14000c4d2
add ebx, esi
lea rcx, [rbp - 0x20]
mov dword [rbp + 0x48], ebx
call fcn.140009d64
mov r13d, 0x41
movzx edx, word [r14 + rbx*2]
cmp dx, r13w
jb 0x14000c1e8
cmp dx, 0x5a
jbe 0x14000c206
cmp dx, 0x61
jb 0x14000c1f4
cmp dx, 0x7a
jbe 0x14000c206
cmp dx, 0x30
jb 0x14000c200
cmp dx, 0x39
jbe 0x14000c206
cmp dx, 0x5f
jne 0x14000c216
lea rcx, [rbp - 0x20]
call fcn.140004e58
add ebx, esi
mov dword [rbp + 0x48], ebx
jmp 0x14000c1d7
mov r13d, dword [rbp + 0x40]
cmp qword [rbp - 0x18], r12
je 0x14000c552
lea rcx, [rbp - 0x20]
call fcn.1400024e8
mov edx, dword [rbp - 0x18]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.USER32.dll_CharUpperBuffW]
mov edx, gethostbyname
lea rcx, [rbp - 0x30]
call fcn.140016c30
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x30]
call fcn.140016bb0
jmp 0x14000c4e0
lea rcx, [rbp - 0x20]
call fcn.140009d64
mov r11d, ebx
mov r13d, ebx
movzx r12d, word [r14 + r11*2]
add ebx, esi
movzx ecx, word [r14 + rbx*2]
test cx, cx
je 0x14000c2b8
lea edi, [rbx + 1]
cmp cx, r12w
jne 0x14000c29e
cmp word [r14 + rdi*2], r12w
jne 0x14000c2c8
movzx edx, cx
lea rcx, [rbp - 0x20]
call fcn.140004e58
add ebx, 2
add edi, 2
jmp 0x14000c2ae
movzx edx, cx
lea rcx, [rbp - 0x20]
call fcn.140004e58
add ebx, esi
add edi, esi
movzx ecx, word [r14 + rbx*2]
test cx, cx
jne 0x14000c27d
mov ecx, dword [rbp + 0x40]
mov r8d, r13d
mov edx, 0x138a
jmp 0x14000c58b
lea rcx, [rbp - 0x30]
add ebx, esi
mov edx, gethostname
mov dword [rbp + 0x48], ebx
call fcn.140016c30
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x30]
call fcn.140016bb0
lea rdx, [rbp - 0x30]
mov rcx, r15
call fcn.14000bbf0
mov r13d, dword [rbp + 0x40]
jmp 0x14000c0bb
test ebx, ebx
jne 0x14000c580
cmp word [r14 + 2], r12w
jne 0x14000c580
cmp r13d, dword [0x1400b61d0]
jl 0x14000c580
mov ebx, esi
mov dword [rbp + 0x48], ebx
jmp 0x14000c4f8
mov edx, 0x40
jmp 0x14000c172
sub ecx, 0x2d
je 0x14000c4b0
sub ecx, 2
je 0x14000c48c
sub ecx, 0xd
je 0x14000c45d
dec ecx
je 0x14000c43e
dec ecx
je 0x14000c410
sub ecx, 2
je 0x14000c38f
sub ecx, 0x1b
je 0x14000c385
sub ecx, 2
je 0x14000c37b
dec ecx
jne 0x14000c580
lea edx, [rcx + 0x51]
jmp 0x14000c172
mov edx, 0x4f
jmp 0x14000c172
mov edx, 0x4e
jmp 0x14000c172
add ebx, esi
lea rcx, [rbp - 0x20]
mov dword [rbp + 0x48], ebx
call fcn.140009d64
mov r13d, 0x41
movzx edx, word [r14 + rbx*2]
cmp dx, r13w
jb 0x14000c3b4
cmp dx, 0x5a
jbe 0x14000c3d2
cmp dx, 0x61
jb 0x14000c3c0
cmp dx, 0x7a
jbe 0x14000c3d2
cmp dx, 0x30
jb 0x14000c3cc
cmp dx, 0x39
jbe 0x14000c3d2
cmp dx, 0x5f
jne 0x14000c3e2
lea rcx, [rbp - 0x20]
call fcn.140004e58
add ebx, esi
mov dword [rbp + 0x48], ebx
jmp 0x14000c3a3
mov r13d, dword [rbp + 0x40]
cmp qword [rbp - 0x18], r12
je 0x14000c552
lea rcx, [rbp - 0x20]
call fcn.1400024e8
mov edx, dword [rbp - 0x18]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.USER32.dll_CharUpperBuffW]
mov edx, gethostbyname
jmp 0x14000c23f
add ebx, esi
lea rcx, [rbp - 0x30]
mov dword [rbp + 0x48], ebx
cmp word [r14 + rbx*2], dx
je 0x14000c42a
mov edx, 0x42
jmp 0x14000c4db
mov edx, 0x45
call fcn.140016c30
add ebx, esi
mov dword [rbp + 0x48], ebx
jmp 0x14000c4e0
add ebx, esi
lea rcx, [rbp - 0x30]
mov dword [rbp + 0x48], ebx
cmp word [r14 + rbx*2], dx
je 0x14000c456
mov edx, r8d
jmp 0x14000c4db
mov edx, 0x50
jmp 0x14000c42f
add ebx, esi
mov dword [rbp + 0x48], ebx
movzx ecx, word [r14 + rbx*2]
sub ecx, edx
je 0x14000c481
dec ecx
lea rcx, [rbp - 0x30]
je 0x14000c47a
mov edx, 0x43
jmp 0x14000c4db
mov edx, 0x44
jmp 0x14000c42f
mov edx, 0x46
lea rcx, [rbp - 0x30]
jmp 0x14000c42f
lea rcx, [rbp - 0x30]
mov edx, VarR8FromUI1
call fcn.140016c30
add ebx, esi
mov ecx, 0x3d
mov dword [rbp + 0x48], ebx
cmp word [r14 + rbx*2], cx
jne 0x14000c4e0
lea edx, [rcx + 0x17]
jmp 0x14000c4d2
lea rcx, [rbp - 0x30]
mov edx, VarR8FromUI1
call fcn.140016c30
add ebx, esi
mov ecx, 0x3d
mov dword [rbp + 0x48], ebx
cmp word [r14 + rbx*2], cx
jne 0x14000c4e0
lea edx, [rcx + 0x16]
add ebx, esi
lea rcx, [rbp - 0x30]
mov dword [rbp + 0x48], ebx
call fcn.140016c30
lea rdx, [rbp - 0x30]
mov rcx, r15
call fcn.14000bbf0
mov r8d, 0x41
mov r9d, 0x2c
mov eax, ebx
cmp word [r14 + rax*2], r12w
jne 0x14000be4a
lea rcx, [rbp - 0x30]
mov edx, 0x7f
call fcn.140016c30
mov word [rbp - 0x26], bx
mov esi, r12d
lea rdx, [rbp - 0x30]
mov rcx, r15
call fcn.14000bbf0
lea rcx, [rbp - 0x20]
call fcn.140001d20
lea rcx, [rbp - 0x30]
call fcn.140016b7c
mov rbx, qword [rsp + 0xa0]
mov eax, esi
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea r8d, [rbx - 1]
mov edx, 0x138b
mov ecx, r13d
call fcn.14000a3f8
jmp 0x14000c526
or edi, 0xffffffff
lea rcx, [rbp - 0x30]
mov edx, edi
call fcn.140016c30
mov dword [rbp - 0x30], edi
mov r8d, ebx
mov edx, 0x138c
jmp 0x14000c55b
mov r8d, ebx
mov edx, 0x1388
mov ecx, r13d
call fcn.14000a3f8
lea rcx, [rbp - 0x30]
mov edx, 0x7f
call fcn.140016c30
jmp 0x14000c51a