Function at 0x1400995a0
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov r9, rcx
movzx ecx, byte [rcx]
mov rdi, rdx
lea eax, [rcx - 9]
lea r11, [0x140000000]
cmp eax, 0x75
ja case.0x1400995e1.34
cdqe
mov ebx, 1
movzx eax, byte [r11 + rax + 0x99d58]
mov r8d, dword [r11 + rax*4 + 0x99cf0]
add r8, r11
jmp r8
movzx eax, byte [r9 + 1]
inc r9
test byte [rax + r11 + 0x113250], bl
je 0x14009960b
movzx eax, byte [r9 + 1]
inc r9
inc ebx
test byte [rax + r11 + 0x113250], 1
jne 0x1400995f6
mov dword [rdx], 0x95
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
cmp byte [r9 + 1], 0x2d
jne 0x14009965e
mov r8d, 2
add r9, r8
movzx eax, byte [r9]
test eax, eax
je 0x14009964a
cmp eax, 0xa
je 0x14009964a
movzx eax, byte [r9 + 1]
inc r9
inc r8d
test eax, eax
jne 0x140099636
mov dword [rdx], 0x95
mov eax, r8d
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], 0x57
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], reloc.WS2_32.dll_shutdown
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], reloc.WS2_32.dll_socket
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], ebx
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], 0x56
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], 0x58
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
cmp byte [r9 + 1], 0x2a
jne 0x140099716
movzx eax, byte [r9 + 2]
test al, al
je 0x140099716
mov ecx, 3
movzx eax, al
add r9, rcx
cmp eax, 0x2a
jne 0x1400996f2
cmp byte [r9], 0x2f
je 0x140099701
movzx eax, byte [r9]
test eax, eax
je 0x140099703
inc ecx
inc r9
jmp 0x1400996e7
inc ecx
mov dword [rdx], 0x95
mov eax, ecx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], 0x59
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], 0x5a
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], 0x4c
xor edx, edx
cmp byte [r9 + 1], 0x3d
sete dl
lea eax, [rdx + 1]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
movzx eax, byte [r9 + 1]
cmp eax, 0x3d
jne 0x14009977a
mov dword [rdx], 0x4e
mov eax, 2
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
cmp eax, 0x3e
jne 0x140099795
mov dword [rdx], 0x4b
mov eax, 2
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
cmp eax, 0x3c
jne 0x1400997b0
mov dword [rdx], 0x54
mov eax, 2
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], 0x4f
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
movzx eax, byte [r9 + 1]
cmp eax, 0x3d
jne 0x1400997e3
mov dword [rdx], 0x50
mov eax, 2
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
cmp eax, 0x3e
jne 0x1400997fe
mov dword [rdx], 0x55
mov eax, 2
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], 0x4d
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
cmp byte [r9 + 1], 0x3d
mov eax, 2
je 0x140099831
mov r10d, 0x94
mov dword [rdx], r10d
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], 0x4b
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
cmp byte [r9 + 1], 0x7c
je 0x14009985c
mov dword [rdx], 0x53
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], 0x5b
mov eax, 2
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], 0x19
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], 0x52
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], 0x5d
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
movzx r8d, byte [r9 + 1]
lea rdx, [r9 + 1]
test r8d, r8d
je 0x1400998e7
add r9, 2
nop dword [rax]
cmp r8d, ecx
jne 0x1400998d5
movzx eax, byte [r9]
cmp eax, ecx
jne 0x1400998e7
inc ebx
inc r9
inc rdx
movzx r8d, byte [rdx + 1]
inc rdx
inc ebx
inc r9
test r8d, r8d
jne 0x1400998c0
cmp r8d, 0x27
jne 0x140099901
mov dword [rdi], 0x5e
lea eax, [rbx + 1]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
test r8d, r8d
je 0x14009991b
mov eax, 0x1a
mov dword [rdi], eax
lea eax, [rbx + 1]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov r10d, 0x94
mov eax, ebx
mov dword [rdi], r10d
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
movzx eax, byte [r9 + 1]
test byte [rax + r11 + 0x113250], 4
jne case.0x1400995e1.24
mov dword [rdx], 0x76
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
mov dword [rdx], 0x81
xor edx, edx
test byte [rcx + r11 + 0x113250], 4
je 0x140099984
mov rcx, r9
nop word [rax + rax]
movzx eax, byte [rcx + 1]
inc rcx
inc edx
test byte [rax + r11 + 0x113250], 4
jne 0x140099970
movsxd rax, edx
cmp byte [rax + r9], 0x2e
jne 0x1400999be
inc edx
movsxd rcx, edx
add rcx, r9
movzx eax, byte [rcx]
test byte [rax + r11 + 0x113250], 4
je 0x1400999b8
movzx eax, byte [rcx + 1]
inc rcx
inc edx
test byte [rax + r11 + 0x113250], 4
jne 0x1400999a4
mov dword [rdi], 0x82
movsxd rcx, edx
movzx eax, byte [rcx + r9]
cmp al, 0x65
je 0x1400999ce
cmp al, 0x45
jne 0x140099a2a
movzx eax, byte [rcx + r9 + 1]
test byte [rax + r11 + 0x113250], 4
jne 0x1400999f8
cmp al, 0x2b
je 0x1400999e7
cmp al, 0x2d
jne 0x140099a2a
movzx eax, byte [rcx + r9 + 2]
test byte [rax + r11 + 0x113250], 4
je 0x140099a2a
add edx, 2
movsxd rcx, edx
add rcx, r9
movzx eax, byte [rcx]
test byte [rax + r11 + 0x113250], 4
je 0x140099a24
nop
movzx eax, byte [rcx + 1]
inc rcx
inc edx
test byte [rax + r11 + 0x113250], 4
jne 0x140099a10
mov dword [rdi], 0x82
movsxd r8, edx
add r8, r9
movzx eax, byte [r8]
test byte [rax + r11 + 0x113250], 0x46
je 0x140099a5e
nop
movzx ecx, byte [r8 + 1]
inc r8
inc edx
test byte [rcx + r11 + 0x113250], 0x46
jne 0x140099a40
mov r10d, 0x94
mov dword [rdi], r10d
mov eax, edx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
cmp ecx, 0x5d
je 0x140099a85
inc r9
movzx ecx, byte [r9]
test ecx, ecx
je 0x140099a85
inc ebx
inc r9
cmp ecx, 0x5d
jne 0x140099a73
mov eax, 0x1a
mov r10d, 0x94
cmp ecx, 0x5d
cmove r10d, eax
mov eax, ebx
mov dword [rdx], r10d
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
movzx eax, byte [r9 + 1]
inc r9
mov dword [rdx], 0x85
test byte [rax + r11 + 0x113250], 4
je 0x140099ce1
movzx eax, byte [r9 + 1]
inc r9
inc ebx
test byte [rax + r11 + 0x113250], 4
jne 0x140099ac4
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
movzx eax, byte [r9 + 1]
lea r8, [r9 + 1]
mov edx, ebx
test byte [rax + r11 + 0x113250], 4
je case.0x1400995e1.13
nop dword [rax]
movzx ecx, byte [r8 + 1]
inc r8
inc edx
test byte [rcx + r11 + 0x113250], 4
jne 0x140099b00
cmp edx, ebx
jle case.0x1400995e1.13
mov dword [rdi], 0x84
mov eax, edx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
movzx r8d, byte [r9 + 1]
xor edx, edx
mov dword [rdi], 0x85
mov rcx, rbx
mov r10d, 0x94
test r8d, r8d
je 0x140099bd6
nop dword [rax + rax]
movzx eax, r8b
test byte [rax + r11 + 0x113250], 0x46
je 0x140099b63
inc edx
jmp 0x140099b7b
cmp r8d, 0x28
je 0x140099b8d
cmp r8d, 0x3a
jne 0x140099bce
cmp byte [r9 + rcx + 1], r8b
jne 0x140099bce
inc ebx
inc rcx
movzx r8d, byte [rcx + r9 + 1]
inc rcx
inc ebx
test r8d, r8d
jne 0x140099b50
jmp 0x140099bce
test edx, edx
jle 0x140099bd0
lea r8, [rcx + r9]
nop word [rax + rax]
movzx ecx, byte [r8 + 1]
inc r8
inc ebx
test ecx, ecx
je 0x140099bc2
test byte [rcx + r11 + 0x113250], 1
jne 0x140099bc2
cmp ecx, 0x29
jne 0x140099ba0
inc ebx
jmp 0x140099bce
cmp ecx, 0x29
jne 0x140099bcb
inc ebx
jmp 0x140099bce
mov dword [rdi], r10d
test edx, edx
jne 0x140099ce1
mov dword [rdi], r10d
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
cmp byte [r9 + 1], 0x27
jne case.0x1400995e1.34
movzx eax, byte [r9 + 2]
lea rcx, [r9 + 2]
mov dword [rdx], 0x83
test byte [rax + r11 + 0x113250], 8
mov r8d, 2
je 0x140099c26
movzx eax, byte [rcx + 1]
inc rcx
inc r8d
test byte [rax + r11 + 0x113250], 8
jne 0x140099c11
movsxd rcx, r8d
movzx r11d, byte [rcx + r9]
cmp r11b, 0x27
jne 0x140099c40
mov eax, r8d
cdq
and eax, ebx
xor eax, edx
cmp eax, edx
je 0x140099c69
mov r10d, 0x94
mov dword [rdi], r10d
test r11b, r11b
je 0x140099c69
lea rax, [rcx + r9]
movzx ecx, byte [rcx + r9]
cmp cl, 0x27
je 0x140099c69
mov cl, byte [rax + 1]
inc rax
inc r8d
test cl, cl
jne 0x140099c57
movsxd rcx, r8d
cmp byte [rcx + r9], 0
je 0x140099c76
inc r8d
mov eax, r8d
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
test byte [rcx + r11 + 0x113250], 0x46
jne 0x140099ca8
mov r10d, 0x94
mov eax, 1
mov dword [rdx], r10d
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret
movzx eax, byte [r9 + 1]
lea rcx, [r9 + 1]
mov ebx, 1
test byte [rax + r11 + 0x113250], 0x46
je 0x140099cd5
movzx eax, byte [rcx + 1]
inc rcx
inc ebx
test byte [rax + r11 + 0x113250], 0x46
jne 0x140099cc1
mov edx, ebx
mov rcx, r9
call fcn.140099450
mov dword [rdi], eax
mov eax, ebx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret