Function at 0x1400275d0
Capabilities:
Parse pe header

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r15
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [0x14024fa28]
xor rax, rsp
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x20], r8
mov rbx, rdx
mov rsi, rcx
test rdx, rdx
jne 0x140027613
lea eax, [rdx + 0x12]
jmp 0x140027828
mov rax, qword [rdx]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
mov rax, qword [rax + 0x10]
call qword [case.0x14003c8e9.0]
cmp rax, 0xffffffffffffffff
jne 0x140027638
mov eax, gethostbyaddr
jmp 0x140027828
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0x18]
call qword [case.0x14003c8e9.0]
xorps xmm0, xmm0
mov qword [rsi + 8], rax
mov rax, qword [rbx]
lea rdx, [rsp + 0x40]
mov r8d, 0x40
mov rcx, rbx
movups xmmword [rsp + 0x40], xmm0
mov rax, qword [rax + 8]
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
call qword [case.0x14003c8e9.0]
cmp rax, 0xffffffffffffffff
jne 0x14002768e
mov eax, reloc.WS2_32.dll_send
jmp 0x140027828
cmp rax, 0x40
jne 0x1400279cb
mov eax, 0x5a4d
cmp ax, word [rsp + 0x40]
jne 0x1400279cb
mov eax, 0xffffffff
cmp qword [rsi + 8], rax
jle 0x1400276bd
mov eax, gethostbyaddr
jmp 0x140027828
movsxd rax, dword [rsp + 0x7c]
test eax, eax
je 0x1400279cb
mov rdi, rax
mov rcx, rbx
mov rax, qword [rbx]
mov rax, qword [rax + 0x18]
call qword [case.0x14003c8e9.0]
cmp rax, rdi
jl 0x1400279cb
lfence
mov rax, qword [rbx]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
mov rax, qword [rax + 0x10]
call qword [case.0x14003c8e9.0]
cmp rax, 0xffffffffffffffff
je 0x14002762e
lfence
mov edi, dword [rsp + 0x7c]
lea rcx, [rbp - 0x80]
xor edx, edx
mov r8d, 0x108
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rbx]
lea rdx, [rbp - 0x80]
mov r8d, 0xf8
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [case.0x14003c8e9.0]
cmp rax, 0xffffffffffffffff
je 0x140027684
cmp rax, 0xf8
jne 0x1400279cb
cmp dword [rbp - 0x80], 0x4550
jne 0x1400279cb
xor r12d, r12d
cmp r12w, word [rbp - 0x6c]
je 0x1400279cb
movzx eax, word [rbp - 0x68]
mov ecx, 0x10b
cmp cx, ax
jne 0x14002779e
cmp dword [rbp - 0xc], 5
jb 0x1400279cb
mov eax, dword [rbp + 0x18]
mov dword [rsi + 0x10], eax
mov eax, dword [rbp + 0x1c]
mov dword [rsi + 0x14], eax
lea eax, [rdi + 0x58]
mov dword [rsi + 0x18], eax
lea eax, [rdi + 0x98]
jmp 0x1400277ce
mov ecx, 0x20b
cmp cx, ax
jne 0x1400279c6
cmp dword [rbp + 4], 5
jb 0x1400279cb
mov eax, dword [rbp + 0x28]
mov dword [rsi + 0x10], eax
mov eax, dword [rbp + 0x2c]
mov dword [rsi + 0x14], eax
lea eax, [rdi + 0x58]
mov dword [rsi + 0x18], eax
lea eax, [rdi + 0xa8]
mov r15d, 1
mov dword [rsi + 0x1c], eax
mov rax, qword [rbp - 0x24]
lea r13d, [r15 + 7]
cmp r15w, ax
je 0x1400277ef
cmp r13w, ax
je 0x1400277ef
xor cl, cl
jmp 0x1400277f3
movzx ecx, r15b
movzx eax, word [rbp - 0x22]
shr ax, 7
and al, 1
mov qword [rsp + 0x1f8], r14
mov byte [rsi + 0x20], cl
mov byte [rsi + 0x21], al
mov eax, dword [rsi + 0x14]
test eax, eax
je 0x1400279be
cmp eax, 0xc
ja 0x140027849
mov eax, gethostbyaddr
mov r14, qword [rsp + 0x1f8]
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.1401c5190
add rsp, 0x1a0
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
cmp eax, 0xa00000
ja 0x1400279b4
mov r14d, dword [rsi + 0x10]
add rax, r14
cmp rax, qword [rsi + 8]
jg 0x1400279aa
mov rax, qword [rbx]
xor r8d, r8d
mov edx, r14d
mov rcx, rbx
mov rax, qword [rax + 0x10]
call qword [case.0x14003c8e9.0]
cmp rax, 0xffffffffffffffff
je 0x1400279a0
mov edi, dword [rsi + 0x14]
xor eax, eax
mov dword [rsp + 0x28], r12d
mov word [rsp + 0x2c], r12w
mov dword [rsp + 0x2e], eax
mov word [rsp + 0x32], ax
test rdi, rdi
je 0x1400279be
lea r15d, [rax + 2]
nop dword [rax + rax]
mov rax, qword [rbx]
lea rdx, [rsp + 0x28]
mov r8, r13
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [case.0x14003c8e9.0]
cmp rax, 8
jne 0x1400279aa
mov ecx, dword [rsp + 0x28]
test ecx, ecx
je 0x1400279aa
cmp rcx, rdi
jg 0x1400279aa
cmp r15w, word [rsp + 0x2e]
je 0x14002792f
add ecx, 7
and ecx, 0xfffffff8
mov eax, ecx
add r14d, ecx
sub rdi, rax
cmp rdi, 8
jle 0x1400279aa
lfence
mov rax, qword [rbx]
xor r8d, r8d
mov edx, r14d
mov rcx, rbx
mov rax, qword [rax + 0x10]
call qword [case.0x14003c8e9.0]
cmp rax, 0xffffffffffffffff
je 0x1400279a0
xor eax, eax
mov qword [rsp + 0x28], rax
jmp 0x1400278b0
cmp dword [rsi + 0x14], ecx
je 0x140027938
mov byte [rsi + 0x22], 1
lea eax, [rcx - 9]
cmp eax, 0x9ffff7
ja 0x1400279b4
mov rdi, qword [rsp + 0x20]
lea rdx, [rcx - 8]
mov rcx, rdi
call fcn.14015f4a0
test eax, eax
jne 0x140027961
mov eax, reloc.WS2_32.dll_inet_ntoa
jmp 0x140027820
mov rdx, qword [rdi + 8]
mov rax, qword [rbx]
test rdx, rdx
jne 0x140027972
mov rdx, r12
jmp 0x14002797a
mov rdx, qword [rdx + 8]
add rdx, qword [rdi + 0x18]
mov r8, qword [rdi + 0x20]
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [case.0x14003c8e9.0]
cmp qword [rdi + 0x20], rax
mov eax, reloc.WS2_32.dll_send
cmovne r12d, eax
mov eax, r12d
jmp 0x140027820
mov eax, gethostbyaddr
jmp 0x140027820
mov eax, gethostbyaddr
jmp 0x140027820
mov eax, reloc.WS2_32.dll_sendto
jmp 0x140027820
mov eax, r15d
jmp 0x140027820
mov word [rsi + 0x20], r12w
mov eax, gethostbyaddr
jmp 0x140027828