Function at 0x14002c9d7
Capabilities:
Parse pe header

Disassembly:
push rbp
push r15
sub rsp, 0x28
cmp qword [0x1404bc1f0], 0
je 0x14002c9ed
xor rax, rax
jmp 0x14002c9f4
mov rax, 1
and rax, rax
je 0x14002ca13
lea rbp, [0x1404bc530]
mov r15, qword [rbp + 8]
cmp r15, 4
jne 0x14002ca13
mov rax, 1
jmp 0x14002ca16
xor rax, rax
and rax, rax
je 0x14002ca2e
mov r15, qword [rbp + 0x10]
cmp r15, 6
jne 0x14002ca2e
mov rax, 1
jmp 0x14002ca31
xor rax, rax
and rax, rax
je 0x14002cb02
push 1
push 0x4f
pop rcx
pop rdx
call fcn.1400a460c
push recv
pop rcx
call fcn.1400b2620
mov rax, rax
push rax
push SafeArrayPutElement
pop rcx
pop rdx
call fcn.14009cae8
push 1
push 0x52
pop rcx
pop rdx
call fcn.14009cae8
push 0
push 0x54
pop rcx
pop rdx
call fcn.14009cae8
push 0
push 0x56
pop rcx
pop rdx
call fcn.14009cae8
push 0
push 0x66
pop rcx
pop rdx
call fcn.14009cae8
push 1
lea rax, [0x140038a6b]
mov rax, rax
push rax
pop rcx
pop rdx
call fcn.14004de00
mov qword [0x1404bc1f0], rax
lea rbp, [0x1404bc530]
mov qword [rbp + 0x10], 8
push reloc.OLEAUT32.dll_SafeArrayGetLBound
pop rcx
call fcn.1400b2620
mov rax, rax
push rax
push SafeArrayPutElement
pop rcx
pop rdx
call fcn.14009cae8
push 0x4c
pop rcx
call fcn.14009ce1c
jmp 0x14002cee0
lea rbp, [0x1404bc530]
mov r15, qword [rbp + 8]
cmp r15, 3
je 0x14002cb26
lea rbp, [0x1404bc530]
mov r15, qword [rbp + 8]
cmp r15, 5
je 0x14002cb26
jmp 0x14002cb2f
mov rax, 1
jmp 0x14002cb32
xor rax, rax
and rax, rax
je 0x14002ce85
push reloc.OLEAUT32.dll_SafeArrayGetLBound
pop rcx
call fcn.1400b2620
mov rax, rax
push rax
push SafeArrayPutElement
pop rcx
pop rdx
call fcn.14009cae8
lea rbp, [0x1404bc530]
mov qword [rbp + 8], 4
push 1
push 0x4d
pop rcx
pop rdx
call fcn.14009aee8
push 0
push 0x4f
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x52
pop rcx
pop rdx
call fcn.14009cae8
push 0
push 0x54
pop rcx
pop rdx
call fcn.14009cae8
push 0
push 0x56
pop rcx
pop rdx
call fcn.14009cae8
push 0
push 0x66
pop rcx
pop rdx
call fcn.14009cae8
push 1
push 0x52
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x54
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x56
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x66
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x53
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x55
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x57
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x5d
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x67
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x5c
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x59
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x6a
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x69
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x58
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x5e
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x5f
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x60
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x61
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x62
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x63
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x5a
pop rcx
pop rdx
call fcn.14009aee8
push 1
push socket
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x4e
pop rcx
pop rdx
call fcn.14009aee8
push 1
push reloc.SHELL32.dll_IsNetDrive
pop rcx
pop rdx
call fcn.14009aee8
push 0
push 0x49
pop rcx
pop rdx
call fcn.14009aee8
push 0
push 0x48
pop rcx
pop rdx
call fcn.14009aee8
push 0
push 0x68
pop rcx
pop rdx
call fcn.14009aee8
push 0
push 0x5b
pop rcx
pop rdx
call fcn.14009aee8
push 0
push 0x47
pop rcx
pop rdx
call fcn.14009aee8
push 0
push MsiGetPropertyW
pop rcx
pop rdx
call fcn.14009aee8
push 0
push 0x4b
pop rcx
pop rdx
call fcn.14009aee8
push 0
push 0x4c
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x51
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x64
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x65
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x6b
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x6c
pop rcx
pop rdx
call fcn.14009aee8
push 1
push 0x6d
pop rcx
pop rdx
call fcn.14009aee8
push 0
push 0x50
pop rcx
pop rdx
call fcn.14009aee8
push 0x4c
pop rcx
call fcn.14009ce1c
mov qword [0x1404bbf68], 0
push 0xc8
pop rcx
call fcn.1400a5e1c
jmp 0x14002cee0
push recv
pop rcx
call fcn.1400b2620
mov rax, rax
push rax
push SafeArrayPutElement
pop rcx
pop rdx
call fcn.14009cae8
lea rbp, [0x1404bc530]
mov qword [rbp + 0x10], 7
push 0xc8
pop rcx
call fcn.1400a5e1c
push reloc.WS2_32.dll_inet_addr
pop rcx
call fcn.1400b2620
mov rax, rax
push rax
push SafeArrayPutElement
pop rcx
pop rdx
call fcn.14009cae8
push 0x4c
pop rcx
call fcn.14009ce1c
xor rax, rax
add rsp, 0x28
pop r15
pop rbp
ret