Function at 0x18001e990
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov dword [rax + 0x10], edx
push rbx
push rdi
sub rsp, 0x98
mov qword [rax - 0x18], rbp
mov rbp, qword [rcx]
mov qword [rax - 0x20], rsi
mov qword [rax - 0x28], r12
mov qword [rax - 0x38], r14
mov qword [rax - 0x40], r15
xor r15d, r15d
mov rbx, rcx
mov rcx, qword [rcx + 0x50]
mov dword [rax - 0x74], 1
mov dword [rax - 0x78], r15d
mov rax, qword [rcx]
mov r14d, edx
lea rdx, [rsp + 0x48]
mov r12d, r15d
mov dword [rsp + 0xb0], r15d
call qword [rax + 0x30]
mov edi, eax
test eax, eax
jne 0x18001ee80
mov rax, qword [rbx]
mov rsi, qword [rbx + 0x128]
mov rcx, qword [rbx + 0x50]
mov r8d, dword [rax + 8]
mov rdx, rsi
inc r8d
call fcn.18001d200
mov edi, eax
test eax, eax
jne 0x18001ee80
cmp byte [rsi], r12b
je 0x18001ea35
lea r9, [rsp + 0x34]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbp
call qword [rbp + 0x38]
mov edi, eax
test eax, eax
jne 0x18001ee80
cmp dword [rsp + 0x34], r12d
je 0x18001ee80
mov r8, qword [rsp + 0x48]
lea rax, [rsp + 0x30]
lea r9, [rsp + 0xc0]
mov edx, r14d
mov rcx, rbx
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x78], r13
mov qword [rbx + 0x60], r15
mov esi, r14d
mov dword [rsp + 0xc8], r14d
call fcn.18001d560
mov edi, eax
test eax, eax
jne 0x18001eefc
mov r12d, dword [rsp + 0xc0]
mov r10, qword [rsp + 0x48]
mov qword [rsp + 0x50], r12
cmp r12d, 0xffffffff
jne 0x18001eac4
mov eax, dword [rbx + 0xbc]
mov ecx, dword [rbx + 0xb8]
add eax, 8
movsxd r8, eax
mov rax, r10
sub rax, rcx
cqo
idiv r8
mov r12, rax
mov qword [rsp + 0x50], rax
mov dword [rsp + 0xc0], eax
test r12d, r12d
jne 0x18001eb07
test r14d, r14d
jne 0x18001eb07
mov ecx, dword [rbx + 0xb8]
mov rdx, qword [rbx + 0x60]
add rcx, qword [rbx + 0x68]
cmp rcx, rdx
jne 0x18001eb07
mov eax, dword [rbx + 0xbc]
add eax, 8
movsxd rcx, eax
mov rax, r10
sub rax, rdx
cqo
idiv rcx
mov r12d, eax
mov dword [rsp + 0xc0], eax
mov qword [rsp + 0x50], r12
mov eax, dword [rbx + 0xb8]
cmp qword [rbx + 0x60], rax
jne 0x18001eb3a
mov esi, dword [rsp + 0x30]
mov rcx, rbx
mov edx, esi
call fcn.18001e840
mov edi, eax
test eax, eax
jne 0x18001ee73
mov r10, qword [rsp + 0x48]
mov dword [rbx + 0x20], esi
mov esi, dword [rsp + 0xc8]
mov r14d, r15d
test r12d, r12d
je 0x18001ee2b
test esi, esi
je 0x18001eb86
mov rax, qword [rbx + 0x70]
inc dword [rbx + 0x84]
test rax, rax
je 0x18001eb70
nop dword [rax]
mov dword [rax + 0x18], 1
mov rax, qword [rax + 0x40]
test rax, rax
jne 0x18001eb60
mov rcx, qword [rbx + 0x130]
xor edx, edx
call fcn.18001b6f0
mov dword [rsp + 0xc8], r15d
mov rbp, qword [rbx + 0x50]
mov r9, qword [rbx + 0x60]
mov r13, qword [rbx + 0x128]
mov rax, qword [rbp]
lea rdx, [rsp + 0x38]
mov r8d, 4
mov rcx, rbp
call qword [rax + reloc.WS2_32.dll_recv]
mov edi, eax
test eax, eax
jne 0x18001edf8
mov r9, qword [rbx + 0x60]
mov esi, dword [rsp + 0x38]
mov rax, qword [rbp]
mov r8d, dword [rbx + 0xbc]
add r9, 4
mov rdx, r13
mov rcx, rbp
bswap esi
call qword [rax + reloc.WS2_32.dll_recv]
mov edi, eax
test eax, eax
jne 0x18001edf8
mov eax, dword [rbx + 0xbc]
add eax, 8
cdqe
add qword [rbx + 0x60], rax
mov r9, qword [rbx + 0x60]
test esi, esi
je 0x18001ee22
mov eax, dword [0x1802388f0]
cdq
idiv dword [rbx + 0xbc]
inc eax
cmp esi, eax
je 0x18001ee22
cmp esi, dword [rbx + 0x20]
ja 0x18001edfc
mov rax, qword [rbp]
lea r8d, [rdi + 4]
lea rdx, [rsp + 0x3c]
add r9, 0xfffffffffffffffc
mov rcx, rbp
call qword [rax + reloc.WS2_32.dll_recv]
mov edi, eax
test eax, eax
jne 0x18001ec44
mov ebp, dword [rsp + 0x3c]
bswap ebp
mov dword [rsp + 0x40], ebp
jmp 0x18001ec48
mov ebp, dword [rsp + 0x40]
test eax, eax
jne 0x18001edf8
mov rdx, r13
mov rcx, rbx
call fcn.18001e170
cmp eax, ebp
jne 0x18001ee22
cmp esi, 1
jne 0x18001ec85
movzx eax, byte [r13 + 0x14]
cmp word [rbx + 0xb2], ax
je 0x18001ec85
mov rcx, rbx
mov word [rbx + 0xb2], ax
call fcn.18001e210
cmp qword [rbx + 0x138], r15
je 0x18001ec93
mov r12, r15
jmp 0x18001eca0
mov edx, esi
mov rcx, rbx
call fcn.180021680
mov r12, rax
cmp byte [rbx + 0xb], r15b
jne 0x18001ecb3
mov rcx, qword [rbx + 0x68]
cmp qword [rbx + 0x60], rcx
mov ecx, r15d
jg 0x18001ecb8
mov ecx, 1
mov r10, qword [rbx + 0x48]
cmp qword [r10], r15
je 0x18001ed75
movzx eax, byte [rbx + 0x15]
cmp al, 4
jae 0x18001ecd5
test al, al
jne 0x18001ed75
test ecx, ecx
je 0x18001ed75
movsxd r8, dword [rbx + 0xbc]
mov rax, qword [r10]
lea r9d, [rsi - 1]
imul r9, r8
mov rdx, r13
mov rcx, r10
call qword [rax + 0x18]
mov edi, eax
cmp esi, dword [rbx + 0x28]
jbe 0x18001ed02
mov dword [rbx + 0x28], esi
cmp qword [rbx + 0x70], r15
je 0x18001ed75
mov rax, qword [rbx + 0x108]
test rax, rax
je 0x18001ed36
mov rcx, qword [rbx + 0x120]
mov r9d, 3
mov r8d, esi
mov rdx, r13
call rax
mov ebp, 7
test rax, rax
cmove edi, ebp
jmp 0x18001ed3b
mov ebp, 7
mov rcx, qword [rbx + 0x70]
test rcx, rcx
je 0x18001ed4e
mov r8, r13
mov edx, esi
call fcn.180033960
mov rax, qword [rbx + 0x108]
test rax, rax
je 0x18001ed75
mov rcx, qword [rbx + 0x120]
mov r9d, ebp
mov r8d, esi
mov rdx, r13
call rax
test rax, rax
mov r13, rax
cmove edi, ebp
test r12, r12
je 0x18001edf3
mov rbp, qword [r12 + 8]
movsxd r8, dword [rbx + 0xbc]
mov rdx, r13
mov rcx, rbp
call fcn.180183a80
mov rcx, r12
call qword [rbx + 0x100]
mov rcx, r12
call fcn.18001b510
cmp esi, 1
jne 0x18001edbd
mov rax, qword [rbp + 0x18]
mov qword [rbx + 0x88], rax
mov rax, qword [rbp + 0x20]
mov qword [rbx + 0x90], rax
mov rax, qword [rbx + 0x108]
test rax, rax
je 0x18001edeb
mov r8d, dword [r12 + 0x28]
mov rcx, qword [rbx + 0x120]
mov r9d, 3
mov rdx, rbp
call rax
test rax, rax
mov eax, 7
cmove edi, eax
mov rcx, r12
call fcn.18001b3f0
mov r12, qword [rsp + 0x50]
test edi, edi
jne 0x18001ee1d
inc dword [rsp + 0xb0]
mov esi, dword [rsp + 0xc8]
inc r14d
cmp r14d, r12d
jb 0x18001eb46
mov r10, qword [rsp + 0x48]
jmp 0x18001ee2b
cmp edi, 0x65
jne 0x18001ee69
mov r10, qword [rsp + 0x48]
mov qword [rbx + 0x60], r10
mov r14d, dword [rsp + 0xb8]
lea rax, [rsp + 0x30]
lea r9, [rsp + 0xc0]
mov r8, r10
mov rcx, rbx
mov edx, r14d
mov qword [rsp + 0x20], rax
call fcn.18001d560
mov edi, eax
test eax, eax
jne 0x18001eef4
mov esi, dword [rsp + 0xc8]
jmp 0x18001ea80
cmp edi, 0x20a
cmove edi, r15d
mov r12d, dword [rsp + 0xb0]
mov r13, qword [rsp + 0x78]
movzx eax, byte [rbx + 0x11]
mov r14, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x90]
mov byte [rbx + 0x17], al
test edi, edi
jne 0x18001ef5d
mov rax, qword [rbx]
mov rsi, qword [rbx + 0x128]
mov rcx, qword [rbx + 0x50]
mov r8d, dword [rax + 8]
mov rdx, rsi
inc r8d
call fcn.18001d200
mov edi, eax
test eax, eax
jne 0x18001ef5d
movzx eax, byte [rbx + 0x15]
cmp al, 4
jae 0x18001eecf
test al, al
jne 0x18001ef2b
mov rcx, qword [rbx + 0x48]
mov edi, r15d
cmp qword [rcx], rdi
je 0x18001ef11
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x15]
call qword [rax + 0x50]
mov edi, eax
cmp eax, 0xc
jne 0x18001ef0d
mov edi, r15d
jmp 0x18001ef11
mov r12d, dword [rsp + 0xb0]
cmp edi, 0x65
jne 0x18001ee7b
mov edi, r15d
jmp 0x18001ee7b
test eax, eax
jne 0x18001ef27
cmp byte [rbx + 0xb], r15b
jne 0x18001ef27
mov rcx, qword [rbx + 0x48]
movzx edx, byte [rbx + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x28]
mov edi, eax
test edi, edi
jne 0x18001ef5d
cmp byte [rsi], r15b
mov rcx, rbx
setne r15b
xor r8d, r8d
mov edx, r15d
call fcn.18001dea0
mov edi, eax
test eax, eax
jne 0x18001ef5d
cmp byte [rsi], al
je 0x18001ef5d
cmp dword [rsp + 0x34], eax
je 0x18001ef5d
mov rdx, rsi
mov rcx, rbx
call fcn.18001e5c0
mov edi, eax
cmp dword [rsp + 0xb8], 0
mov r15, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x88]
je 0x18001ef94
test r12d, r12d
je 0x18001ef94
mov r9, qword [rbx + 0xd8]
lea rdx, str.recovered__d_pages_from__s
mov r8d, r12d
mov ecx, 0x21b
call fcn.180014770
cmp byte [rbx + 0x11], 0
mov r12, qword [rsp + 0x80]
jne 0x18001efeb
mov rcx, qword [rbx + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov edx, 0x1000
test edx, eax
jne 0x18001efeb
mov rcx, qword [rbx + 0x48]
mov rax, qword [rcx]
mov r8, qword [rax + 0x58]
test r8, r8
je 0x18001eff0
call r8
mov edx, eax
cmp eax, 0x20
jl 0x18001efeb
mov eax, 0x10000
cmp edx, eax
cmovg edx, eax
mov eax, edi
mov dword [rbx + 0xb8], edx
add rsp, 0x98
pop rdi
pop rbx
ret
mov edx, 0x200
mov eax, edi
mov dword [rbx + 0xb8], edx
add rsp, 0x98
pop rdi
pop rbx
ret