Function at 0x4aab10
Capabilities:
Parse pe header

Disassembly:
push edi
push esi
add edx, 0xfffffffe
cmp edx, 0x1e
ja case.0x4aad44.102
jmp dword [edx*4 + 0xa38fd0]
cmp byte [ecx + 1], 0x65
jne case.0x4aad44.102
mov eax, 0x3ee
cmp byte [ecx], 0x74
jne case.0x4aad44.102
jmp 0x4ab539
movzx eax, byte [ecx + 0x18]
cmp eax, 0x79
je 0x4ab0e1
cmp eax, 0x73
jne case.0x4aad44.102
movdqu xmm0, xmmword [ecx]
movdqu xmm1, xmmword [ecx + 8]
pcmpeqb xmm1, xmmword [0xa38f10]
pcmpeqb xmm0, xmmword [0xa38f20]
pand xmm0, xmm1
pmovmskb eax, xmm0
cmp eax, 0xffff
jne case.0x4aad44.102
mov eax, 0x5a
pop esi
pop edi
ret
movzx eax, byte [ecx + 0x1c]
cmp eax, 0x73
je 0x4ab115
cmp eax, 0x64
jne case.0x4aad44.102
movdqu xmm0, xmmword [ecx]
movdqu xmm1, xmmword [ecx + 0xc]
pcmpeqb xmm1, xmmword [0xa38eb0]
pcmpeqb xmm0, xmmword [0xa38e80]
pand xmm0, xmm1
pmovmskb eax, xmm0
cmp eax, 0xffff
jne case.0x4aad44.102
mov eax, 0x29
pop esi
pop edi
ret
movzx eax, byte [ecx + 0xf]
cmp eax, 0x6e
je 0x4ab149
cmp eax, 0x67
jne case.0x4aad44.102
push 0xf
push ecx
push str.content_encodin
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x35
pop esi
pop edi
ret
cmp byte [ecx + 0x1f], 0x73
jne case.0x4aad44.102
movdqu xmm0, xmmword [ecx]
movdqu xmm1, xmmword [ecx + 0xf]
pcmpeqb xmm1, xmmword [str.allow_credentialaccess_control_al_request_headeraccess_control_rol_expose_headeraccess_control_eol_request_methorol_allow_headerrol_allow_methodtrol_allow_origiransport_securitstrict_transportinsecure_requestupgrade_insecuret_security_policcontent_securitytent_type_optionx_content_type_ocontent_dispositio]
pcmpeqb xmm0, xmmword [0xa38e60]
pand xmm0, xmm1
pmovmskb eax, xmm0
cmp eax, 0xffff
jne case.0x4aad44.102
mov eax, 0x1e
pop esi
pop edi
ret
movzx eax, byte [ecx + 0xc]
add eax, 0xffffff9c
cmp eax, 0xf
ja case.0x4aad44.102
jmp dword [eax*4 + 0xa39088]
push 0xc
push ecx
push str.last_modifie
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x4d
pop esi
pop edi
ret
cmp byte [ecx + 0x1d], 0x73
jne case.0x4aad44.102
movdqu xmm0, xmmword [ecx]
movdqu xmm1, xmmword [ecx + 0xd]
pcmpeqb xmm1, xmmword [0xa38e70]
pcmpeqb xmm0, xmmword [0xa38e80]
pand xmm0, xmm1
pmovmskb eax, xmm0
cmp eax, 0xffff
jne case.0x4aad44.102
mov eax, 0x28
pop esi
pop edi
ret
movzx eax, byte [ecx + 0xe]
add eax, 0xffffff9b
cmp eax, 0xe
ja case.0x4aad44.102
jmp dword [eax*4 + 0xa3904c]
push 0xe
push ecx
push str.accept_languag
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x1c
pop esi
pop edi
ret
cmp byte [ecx + 0x1a], 0x6e
jne case.0x4aad44.102
movdqu xmm0, xmmword [ecx]
movdqu xmm1, xmmword [ecx + 0xa]
pcmpeqb xmm1, xmmword [0xa38ee0]
pcmpeqb xmm0, xmmword [0xa38e60]
pand xmm0, xmm1
pmovmskb eax, xmm0
cmp eax, 0xffff
jne case.0x4aad44.102
mov eax, 0x26
pop esi
pop edi
ret
movzx eax, byte [ecx + 3]
add eax, 0xffffff9b
cmp eax, 0x14
ja case.0x4aad44.102
jmp dword [eax*4 + 0xa391b0]
movzx eax, word [ecx]
xor eax, 0x6164
movzx ecx, byte [ecx + 2]
xor ecx, 0x74
or cx, ax
jne case.0x4aad44.102
mov eax, 0x45
pop esi
pop edi
ret
movzx eax, byte [ecx + 6]
add eax, 0xffffff9d
cmp eax, 0x10
ja case.0x4aad44.102
jmp dword [eax*4 + 0xa3912c]
mov eax, 0x2d746c61
xor eax, dword [ecx]
movzx ecx, word [ecx + 4]
xor ecx, 0x7673
or ecx, eax
jne case.0x4aad44.102
mov eax, 0x2c
pop esi
pop edi
ret
cmp byte [ecx + 0xd], 0x68
jne case.0x4aad44.102
push 0xd
push ecx
push str.content_lengt
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x37
pop esi
pop edi
ret
cmp byte [ecx + 2], 0x65
jne case.0x4aad44.102
cmp word [ecx], 0x6761
jne case.0x4aad44.102
mov eax, 0x2b
pop esi
pop edi
ret
movzx eax, byte [ecx + 7]
cmp eax, 0x79
je 0x4ab1f8
cmp eax, 0x6e
je 0x4ab1ba
cmp eax, 0x65
jne case.0x4aad44.102
mov eax, 0x722d6669
xor eax, dword [ecx]
mov edx, 0x676e6172
xor edx, dword [ecx + 3]
or edx, eax
jne case.0x4aad44.102
mov eax, 0x4c
pop esi
pop edi
ret
movzx eax, byte [ecx + 8]
cmp eax, 0x74
je 0x4ab217
cmp eax, 0x6c
je 0x4ab1d9
cmp eax, 0x64
jne case.0x4aad44.102
mov eax, 0x77726f66
xor eax, dword [ecx]
mov edx, 0x65647261
xor edx, dword [ecx + 4]
or edx, eax
jne case.0x4aad44.102
mov eax, 0x49
pop esi
pop edi
ret
movzx eax, byte [ecx + 0x10]
cmp eax, 0x67
je 0x4ab183
cmp eax, 0x65
jne case.0x4aad44.102
movdqu xmm0, xmmword [ecx]
pcmpeqb xmm0, xmmword [0xa38fc0]
pmovmskb eax, xmm0
cmp eax, 0xffff
jne case.0x4aad44.102
mov eax, 0x4a
pop esi
pop edi
ret
cmp byte [ecx + 0x12], 0x6e
jne case.0x4aad44.102
movdqu xmm0, xmmword [ecx]
movzx eax, word [ecx + 0x10]
movd xmm1, eax
pcmpeqb xmm0, xmmword [0xa38f70]
pcmpeqb xmm1, xmmword [0xa38f80]
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x4ab2f0
movdqu xmm0, xmmword [ecx]
movzx eax, word [ecx + 0x10]
movd xmm1, eax
pcmpeqb xmm0, xmmword [0xa38f90]
pcmpeqb xmm1, xmmword [0xa38fa0]
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
jne case.0x4aad44.102
mov eax, 0x59
pop esi
pop edi
ret
movzx eax, byte [ecx + 4]
cmp eax, 0x68
je 0x4ab1a6
cmp eax, 0x65
jne case.0x4aad44.102
cmp dword [ecx], 0x676e6172
jne case.0x4aad44.102
mov eax, 0x52
pop esi
pop edi
ret
movzx eax, byte [ecx + 5]
add eax, 0xffffff9b
cmp eax, 0xf
ja case.0x4aad44.102
jmp dword [eax*4 + 0xa39170]
mov eax, 0x6b6f6f63
xor eax, dword [ecx]
movzx ecx, byte [ecx + 4]
xor ecx, 0x69
or ecx, eax
jne case.0x4aad44.102
mov eax, 0x44
pop esi
pop edi
ret
cmp byte [ecx + 0xb], 0x65
jne case.0x4aad44.102
push 0xb
push ecx
push str.content_typ
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x39
pop esi
pop edi
ret
movzx eax, byte [ecx + 9]
add eax, 0xffffff9f
cmp eax, 0x18
ja case.0x4aad44.102
jmp dword [eax*4 + 0xa390c8]
push 9
push ecx
push str.early_dat
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x46
pop esi
pop edi
ret
cmp byte [ecx + 0x16], 0x79
jne case.0x4aad44.102
movdqu xmm0, xmmword [ecx]
movdqu xmm1, xmmword [ecx + 6]
pcmpeqb xmm1, xmmword [0xa38f30]
pcmpeqb xmm0, xmmword [0xa38f40]
pand xmm0, xmm1
pmovmskb eax, xmm0
cmp eax, 0xffff
jne case.0x4aad44.102
mov eax, 0x38
pop esi
pop edi
ret
cmp byte [ecx + 0x15], 0x73
jne case.0x4aad44.102
movdqu xmm0, xmmword [ecx]
movdqu xmm1, xmmword [ecx + 5]
pcmpeqb xmm1, xmmword [0xa38f50]
pcmpeqb xmm0, xmmword [0xa38f60]
pand xmm0, xmm1
pmovmskb eax, xmm0
cmp eax, 0xffff
jne case.0x4aad44.102
mov eax, 0x5e
pop esi
pop edi
ret
cmp byte [ecx + 0x1b], 0x73
jne case.0x4aad44.102
movdqu xmm0, xmmword [ecx]
movdqu xmm1, xmmword [ecx + 0xb]
pcmpeqb xmm1, xmmword [0xa38ec0]
pcmpeqb xmm0, xmmword [0xa38e60]
pand xmm0, xmm1
pmovmskb eax, xmm0
cmp eax, 0xffff
je 0x4ab2f8
mov eax, 0x612d6c6f
mov edx, 0x72746e6f
mov esi, 0x632d7373
mov edi, 0x65636361
movd xmm0, edi
movd xmm1, esi
punpckldq xmm0, xmm1
movd xmm1, edx
movd xmm2, eax
punpckldq xmm1, xmm2
punpcklqdq xmm0, xmm1
movdqu xmm1, xmmword [ecx]
movdqu xmm2, xmmword [ecx + 0xb]
pcmpeqb xmm2, xmmword [0xa38ed0]
pcmpeqb xmm1, xmm0
pand xmm2, xmm1
pmovmskb eax, xmm2
cmp eax, 0xffff
jne case.0x4aad44.102
mov eax, 0x23
pop esi
pop edi
ret
movdqu xmm0, xmmword [ecx]
movdqu xmm1, xmmword [ecx + 8]
pcmpeqb xmm1, xmmword [0xa38ef0]
pcmpeqb xmm0, xmmword [0xa38f00]
pand xmm0, xmm1
pmovmskb eax, xmm0
cmp eax, 0xffff
jne case.0x4aad44.102
mov eax, 0x56
pop esi
pop edi
ret
movdqu xmm0, xmmword [ecx]
movdqu xmm1, xmmword [ecx + 0xc]
pcmpeqb xmm1, xmmword [0xa38e90]
pcmpeqb xmm0, xmmword [0xa38ea0]
pand xmm0, xmm1
pmovmskb eax, xmm0
cmp eax, 0xffff
jne case.0x4aad44.102
mov eax, 0x27
pop esi
pop edi
ret
push 0xf
mov esi, ecx
push ecx
push str.proxy_connectio
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
je 0x4ab53c
push 0xf
push esi
push str.x_xss_protectio
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x62
pop esi
pop edi
ret
movdqu xmm0, xmmword [ecx]
pcmpeqb xmm0, xmmword [str.transfer_encodinif_modified_sinc_]
pmovmskb eax, xmm0
cmp eax, 0xffff
jne case.0x4aad44.102
mov eax, 0x3ec
pop esi
pop edi
ret
cmp dword [ecx], 0x7461703a
jne case.0x4aad44.102
mov eax, 8
pop esi
pop edi
ret
mov eax, 0x61636f6c
xor eax, dword [ecx]
mov edx, 0x6f697461
xor edx, dword [ecx + 3]
or edx, eax
jne case.0x4aad44.102
mov eax, 0x4f
pop esi
pop edi
ret
mov eax, 0x6f72703a
xor eax, dword [ecx]
mov edx, 0x6f636f74
xor edx, dword [ecx + 4]
or edx, eax
jne case.0x4aad44.102
mov eax, 0x3ef
pop esi
pop edi
ret
mov eax, 0x6f697270
xor eax, dword [ecx]
mov edx, 0x7469726f
xor edx, dword [ecx + 3]
or edx, eax
jne case.0x4aad44.102
mov eax, 0x3f0
pop esi
pop edi
ret
mov eax, 0x65707865
xor eax, dword [ecx]
mov edx, 0x632d7463
xor edx, dword [ecx + 4]
or edx, eax
jne case.0x4aad44.102
mov eax, 0x48
pop esi
pop edi
ret
push 0xe
push ecx
push str.x_forwarded_fo
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x5f
pop esi
pop edi
ret
push 0xe
push ecx
push str.accept_encodin
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x1b
pop esi
pop edi
ret
push 0xe
push ecx
push str.x_frame_option
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x60
pop esi
pop edi
ret
mov eax, 0x76726573
xor eax, dword [ecx]
movzx ecx, byte [ecx + 4]
xor ecx, 0x65
or ecx, eax
jne case.0x4aad44.102
mov eax, 0x54
pop esi
pop edi
ret
mov eax, 0x6769726f
xor eax, dword [ecx]
movzx ecx, byte [ecx + 4]
xor ecx, 0x69
or ecx, eax
jne case.0x4aad44.102
mov eax, 0x50
pop esi
pop edi
ret
mov eax, 0x65636361
xor eax, dword [ecx]
movzx ecx, byte [ecx + 4]
xor ecx, 0x70
or ecx, eax
jne case.0x4aad44.102
mov eax, 0x19
pop esi
pop edi
ret
mov eax, 0x34
pop esi
pop edi
ret
mov eax, 0x20
pop esi
pop edi
ret
push 0xc
push ecx
push str.cache_contro
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x2e
pop esi
pop edi
ret
push 0xc
push ecx
push str.if_none_matc
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x4b
pop esi
pop edi
ret
movzx eax, word [ecx]
xor eax, 0x696c
movzx ecx, byte [ecx + 2]
xor ecx, 0x6e
or cx, ax
jne case.0x4aad44.102
mov eax, 0x4e
pop esi
pop edi
ret
mov eax, 0x6863733a
xor eax, dword [ecx]
movzx edx, word [ecx + 4]
xor edx, 0x6d65
or edx, eax
je 0x4ab544
mov eax, 0x70727570
xor eax, dword [ecx]
movzx edx, word [ecx + 4]
xor edx, 0x736f
or edx, eax
je 0x4ab559
mov eax, 0x72677075
xor eax, dword [ecx]
movzx ecx, word [ecx + 4]
xor ecx, 0x6461
or ecx, eax
jne case.0x4aad44.102
mov eax, 0x3ed
pop esi
pop edi
ret
push 0xc
push ecx
push str.authorizatio
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x2d
pop esi
pop edi
ret
push 0xc
push ecx
push str.accept_range
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x1d
pop esi
pop edi
ret
movzx eax, word [ecx]
xor eax, 0x7465
movzx ecx, byte [ecx + 2]
xor ecx, 0x61
or cx, ax
jne case.0x4aad44.102
mov eax, 0x47
pop esi
pop edi
ret
mov eax, 0x74656d3a
xor eax, dword [ecx]
movzx ecx, word [ecx + 4]
xor ecx, 0x6f68
or ecx, eax
jne case.0x4aad44.102
mov eax, 1
pop esi
pop edi
ret
movzx eax, word [ecx]
xor eax, 0x6f68
movzx ecx, byte [ecx + 2]
xor ecx, 0x73
or cx, ax
jne case.0x4aad44.102
mov eax, 0x3e8
pop esi
pop edi
ret
mov eax, 0x65666572
xor eax, dword [ecx]
movzx ecx, word [ecx + 4]
xor ecx, 0x6572
or ecx, eax
jne case.0x4aad44.102
mov eax, 0x53
pop esi
pop edi
ret
movzx eax, word [ecx]
xor eax, 0x6176
movzx ecx, byte [ecx + 2]
xor ecx, 0x72
or cx, ax
jne case.0x4aad44.102
mov eax, 0x5c
pop esi
pop edi
ret
mov eax, 0x6174733a
xor eax, dword [ecx]
movzx ecx, word [ecx + 4]
xor ecx, 0x7574
or ecx, eax
jne case.0x4aad44.102
mov eax, 0xb
pop esi
pop edi
ret
push 9
push ecx
push str.connectio
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x3e9
pop esi
pop edi
ret
push 9
mov esi, ecx
push ecx
push str.keep_aliv
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
je 0x4ab54c
push 9
push esi
push str.set_cooki
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x55
pop esi
pop edi
ret
push 9
push ecx
push str.user_agen
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
jne case.0x4aad44.102
mov eax, 0x5b
pop esi
pop edi
ret
push 9
push ecx
push str.:authorit
call sub.api_ms_win_crt_private_l1_1_0.dll_memcmp
add esp, 0xc
test eax, eax
je 0x4ab554
mov eax, 0xffffffff
pop esi
pop edi
ret
mov eax, 0x3eb
pop esi
pop edi
ret
mov eax, 9
pop esi
pop edi
ret
mov eax, 0x3ea
pop esi
pop edi
ret
xor eax, eax
pop esi
pop edi
ret
mov eax, 0x51
pop esi
pop edi
ret