Function at 0x180008a60
Capabilities:
Execute command

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x4e8]
sub rsp, 0x5c0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1800d4040]
xor rax, rsp
mov qword [rbp + 0x490], rax
xor r12d, r12d
mov dword [rbp + 0x200], r12d
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], r12
lea r8d, [r12 + 7]
lea rdx, str.DumpLog
lea rcx, [rbp + 0x1b0]
call fcn.18001d5d0
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], r12
lea r8d, [r12 + 0x15]
lea rdx, str.Item_dumping_started_
lea rcx, [rsp + 0x68]
call fcn.18001d5d0
lea rax, [rsp + 0x68]
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x100]
call fcn.18001ed20
mov rcx, rax
call fcn.18001faf0
nop
lea rcx, [rsp + 0x68]
call fcn.18001faf0
nop
lea rcx, [rbp + 0x1b0]
call fcn.18001faf0
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x380]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [0x1800d4350]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 9
jb 0x180009d15
lea rax, [0x1800d4340]
cmp qword [0x1800d4358], 0xf
cmova rax, qword [0x1800d4340]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.ItemDump_
lea rcx, [rbp + 0x140]
call fcn.18001e580
mov edi, 0x2000
lea r8d, [r12 + 4]
lea rdx, str..log
lea rcx, [rbp + 0x140]
call fcn.18001f5f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
bts edi, 0xc
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x380]
call fcn.18000d760
nop
lea rcx, [rbp - 0x58]
call fcn.18001faf0
nop
lea rcx, [rbp + 0x140]
call fcn.18001faf0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x240], xmm1
mov qword [rbp + 0x250], r12
movdqu xmmword [rbp + 0x1d0], xmm1
mov qword [rbp + 0x1e0], r12
call fcn.180080b90
mov qword [rsp + 0x48], rax
mov rdx, qword [rbp + 0x1d8]
cmp rdx, qword [rbp + 0x1e0]
je 0x180008c81
mov qword [rdx], rax
add qword [rbp + 0x1d8], 8
jmp 0x180008c92
lea r8, [rsp + 0x48]
lea rcx, [rbp + 0x1d0]
call fcn.18000fc60
call fcn.1800808d0
mov qword [rsp + 0x48], rax
mov rdx, qword [rbp + 0x1d8]
cmp rdx, qword [rbp + 0x1e0]
je 0x180008cb9
mov qword [rdx], rax
add qword [rbp + 0x1d8], 8
jmp 0x180008cca
lea r8, [rsp + 0x48]
lea rcx, [rbp + 0x1d0]
call fcn.18000fc60
call fcn.18007d360
mov qword [rsp + 0x48], rax
mov rdx, qword [rbp + 0x1d8]
cmp rdx, qword [rbp + 0x1e0]
je 0x180008cfb
mov qword [rdx], rax
mov rdx, qword [rbp + 0x1d8]
add rdx, 8
mov qword [rbp + 0x1d8], rdx
jmp 0x180008d13
lea r8, [rsp + 0x48]
lea rcx, [rbp + 0x1d0]
call fcn.18000fc60
mov rdx, qword [rbp + 0x1d8]
mov r15d, r12d
mov dword [rsp + 0x5c], r12d
mov rax, rdx
mov r8, qword [rbp + 0x1d0]
sub rax, r8
sar rax, 3
mov r13d, 1
test rax, rax
je 0x1800097bb
mov rsi, r12
mov qword [rsp + 0x48], r12
movsd xmm7, qword [0x1800c2bd0]
nop dword [rax + rax]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1e8], xmm0
mov qword [rbp + 0x1f8], rax
sub rdx, r8
sar rdx, 3
cmp rdx, rsi
jbe 0x180009d3f
lea rdx, [rbp + 0x1e8]
mov rcx, qword [r8 + rsi*8]
call fcn.18000e680
nop
mov ebx, r12d
mov dword [rsp + 0x58], ebx
mov r14, r12
mov rdx, qword [rbp + 0x1f0]
mov rax, rdx
mov r9, qword [rbp + 0x1e8]
sub rax, r9
sar rax, 3
test rax, rax
je 0x18000973f
nop
sub rdx, r9
sar rdx, 3
cmp rdx, r14
jbe 0x180009d39
mov r8d, 0x30
lea rdx, [rbp + 0x2d0]
mov rcx, qword [r9 + r14*8]
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x180009708
mov ecx, dword [rbp + 0x2f4]
test cl, 0xee
sete al
test ecx, 0x101
movzx ecx, al
cmovne ecx, r13d
test cl, cl
jne 0x180009708
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x330], xmm0
movups xmmword [rbp + 0x340], xmm0
mov qword [rbp + 0x350], rax
mov rax, qword [rbp + 0x1f0]
mov rcx, qword [rbp + 0x1e8]
sub rax, rcx
sar rax, 3
cmp rax, r14
jbe 0x180009d33
lea rdx, [rbp + 0x330]
mov rcx, qword [rcx + r14*8]
call fcn.180080640
movsd xmm0, qword [0x1800d5c20]
comisd xmm0, xmm7
jb 0x180008edf
mov qword [rbp + 0x220], r12
mov qword [rbp + 0x228], 0
mov qword [rbp + 0x230], r12
mov qword [rbp + 0x238], 0
cmp qword [rbp + 0x330], 0
je 0x180008ed3
movups xmm0, xmmword [rbp + 0x330]
movups xmmword [rbp + 0x220], xmm0
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x20], r12
mov r8d, 0x11
lea rdx, str.Conv_TextToString
lea rcx, [rbp - 0x38]
call fcn.18001d5d0
lea r8, [rbp + 0x220]
lea rdx, [rbp - 0x38]
mov rcx, qword [0x1800d6a08]
call fcn.1800535b0
movups xmm6, xmmword [rbp + 0x230]
jmp 0x180008f6e
mov qword [rbp + 0x2d0], r12
mov qword [rbp + 0x2d8], 0
mov qword [rbp + 0x2e8], r12
mov qword [rbp + 0x2f0], 0
cmp qword [rbp + 0x340], 0
je 0x180008f67
movups xmm0, xmmword [rbp + 0x340]
movups xmmword [rbp + 0x2d0], xmm0
movsd xmm1, qword [rbp + 0x350]
movsd qword [rbp + 0x2e0], xmm1
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x40], r12
mov r8d, 0x11
lea rdx, str.Conv_TextToString
lea rcx, [rbp - 0x58]
call fcn.18001d5d0
lea r8, [rbp + 0x2d0]
lea rdx, [rbp - 0x58]
mov rcx, qword [0x1800d6a08]
call fcn.1800535b0
movups xmm6, xmmword [rbp + 0x2e8]
movdqa xmmword [rbp + 0x260], xmm6
mov rax, qword [rbp + 0x1f0]
mov rcx, qword [rbp + 0x1e8]
sub rax, rcx
sar rax, 3
cmp rax, r14
jbe 0x180009d33
lea rdx, [rbp + 0x1b0]
mov rcx, qword [rcx + r14*8]
call fcn.18007ebb0
nop
movq rax, xmm6
test rax, rax
je 0x1800096fc
mov rax, qword [rbp + 0x1f0]
mov rcx, qword [rbp + 0x1e8]
sub rax, rcx
sar rax, 3
cmp rax, r14
jbe 0x180009d2d
xor r8d, r8d
lea rdx, [rbp + 0x160]
mov rcx, qword [rcx + r14*8]
call fcn.180052990
xor r8d, r8d
lea rdx, [rbp + 0x358]
mov rcx, rax
call fcn.180054040
nop
lea r15, [rbp + 0x358]
cmp qword [rbp + 0x370], 0xf
seta byte [rsp + 0x40]
mov r13, qword [rbp + 0x358]
cmova r15, r13
mov rsi, qword [rbp + 0x368]
test rsi, rsi
je 0x18000903f
mov r8, rsi
mov edx, 0x2f
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x18000903f
sub rbx, r15
jmp 0x180009046
mov rbx, 0xffffffffffffffff
lea r15, [rbx + 1]
lea r12, [rbp + 0x358]
cmp byte [rsp + 0x40], 0
cmovne r12, r13
cmp r15, rsi
jae 0x18000907d
mov r8, rsi
sub r8, r15
lea rcx, [r12 + r15]
mov edx, 0x2f
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x18000907d
sub rax, r12
jmp 0x180009084
mov rax, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
xor r12d, r12d
mov qword [rbp + 0x280], r12
mov qword [rbp + 0x288], r12
cmp rsi, r15
jb 0x180009d27
sub rax, rbx
lea r8, [rax - 1]
sub rsi, r15
cmp rsi, r8
cmovb r8, rsi
lea rdx, [rbp + 0x358]
cmp byte [rsp + 0x40], r12b
cmovne rdx, r13
add rdx, r15
lea rcx, [rbp + 0x270]
call fcn.18001d5d0
or edi, 8
mov dword [rbp + 0x200], edi
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2c0], r12
mov qword [rbp + 0x2c8], socket
mov byte [rbp + 0x2b0], r12b
lea rdx, [rbp + 0x270]
cmp qword [rbp + 0x288], 0xf
cmova rdx, qword [rbp + 0x270]
cmp qword [rbp + 0x280], 4
jb 0x1800093d1
mov ecx, r12d
lea r8, str.Game
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x180009159
cmp rcx, 4
jne 0x180009140
mov eax, r12d
jmp 0x18000915e
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
je 0x1800093d1
mov rax, qword [rbp + 0x1f0]
mov rcx, qword [rbp + 0x1e8]
sub rax, rcx
sar rax, 3
cmp rax, r14
jbe 0x180009d1b
mov rcx, qword [rcx + r14*8]
test rcx, rcx
je 0x1800091b9
movsxd rax, dword [0x1800d40ac]
mov rcx, qword [rax + rcx]
mov qword [rsp + 0x60], rcx
lea rdx, [rbp + 0x170]
lea rcx, [rsp + 0x60]
call fcn.180053e00
nop
or edi, 0x10
jmp 0x1800091f4
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0xf8], r12
mov r8d, 4
lea rdx, str.NONE
lea rcx, [rbp + 0xe0]
call fcn.18001d5d0
lea rax, [rbp + 0xe0]
or edi, 0x20
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], r12
mov qword [rbp + 0x238], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x220], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x230], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or edi, 0x40
test dil, 0x20
je 0x180009249
and edi, 0xffffffdf
lea rcx, [rbp + 0xe0]
call fcn.18001faf0
nop
test dil, 0x10
je 0x18000925f
and edi, 0xffffffef
lea rcx, [rbp + 0x170]
call fcn.18001faf0
nop
xor r8d, r8d
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x260]
call fcn.180054040
nop
lea rcx, str.__:___:_
mov qword [rbp + 0x70], rcx
mov qword [rbp + 0x78], 0xe
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x180009296
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x28], rcx
mov qword [rbp + 0x30], rax
movups xmm0, xmmword [rbp + 0x28]
movups xmmword [rbp + 0x2e8], xmm0
movabs rax, 0xc000000000000000
mov qword [rbp + 0x2d0], rax
lea rax, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 0xf
cmova rax, qword [rbp + 0x1b0]
mov qword [rbp + 0x38], rax
mov rax, qword [rbp + 0x1c0]
mov qword [rbp + 0x40], rax
movups xmm0, xmmword [rbp + 0x38]
movups xmmword [rbp + 0x2f8], xmm0
movabs rax, 0xc000000000000010
mov qword [rbp + 0x2d8], rax
lea rax, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova rax, qword [rbp + 0x220]
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x230]
mov qword [rbp + 0x50], rax
movups xmm0, xmmword [rbp + 0x48]
movups xmmword [rbp + 0x308], xmm0
movabs rax, 0xc000000000000020
mov qword [rbp + 0x2e0], rax
mov qword [rbp + 0x60], 3
lea rax, [rbp + 0x2d0]
mov qword [rbp + 0x68], rax
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x260], xmm0
movaps xmm1, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x200], xmm1
lea r8, [rbp + 0x260]
lea rdx, [rbp + 0x200]
lea rcx, [rbp - 0x18]
call fcn.18000f540
bts edi, 7
movups xmm0, xmmword [rbp - 0x18]
movups xmmword [rbp + 0x2b0], xmm0
movups xmm1, xmmword [rbp - 8]
movups xmmword [rbp + 0x2c0], xmm1
mov qword [rbp - 8], r12
mov qword [rbp], 0xf
mov byte [rbp - 0x18], 0
lea rcx, [rbp - 0x18]
call fcn.18001faf0
nop
lea rcx, [rbp + 0x190]
call fcn.18001faf0
nop
lea rcx, [rbp + 0x220]
jmp 0x180009687
mov rax, qword [rbp + 0x1f0]
mov rcx, qword [rbp + 0x1e8]
sub rax, rcx
sar rax, 3
cmp rax, r14
jbe 0x180009d21
mov rcx, qword [rcx + r14*8]
test rcx, rcx
je 0x180009420
movsxd rax, dword [0x1800d40ac]
mov rcx, qword [rax + rcx]
mov qword [rsp + 0x50], rcx
lea rdx, [rbp + 0x330]
lea rcx, [rsp + 0x50]
call fcn.180053e00
nop
bts edi, 8
jmp 0x18000944d
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x20], r12
mov r8d, 4
lea rdx, str.NONE
lea rcx, [rbp + 8]
call fcn.18001d5d0
lea rax, [rbp + 8]
bts edi, 9
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts edi, 0xa
bt edi, 9
jae 0x180009496
btr edi, 9
lea rcx, [rbp + 8]
call fcn.18001faf0
nop
bt edi, 8
jae 0x1800094ad
btr edi, 8
lea rcx, [rbp + 0x330]
call fcn.18001faf0
nop
xor r8d, r8d
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x260]
call fcn.180054040
nop
lea rcx, str.__:________:_
mov qword [rbp + 0xc0], rcx
mov qword [rbp + 0xc8], socket
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1800094ea
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x80], rcx
mov qword [rbp + 0x88], rax
movups xmm0, xmmword [rbp + 0x80]
movaps xmmword [rbp + 0x2f0], xmm0
movabs rax, 0xc000000000000000
mov qword [rbp + 0x2d0], rax
lea rax, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 0xf
cmova rax, qword [rbp + 0x1b0]
mov qword [rbp + 0x90], rax
mov rax, qword [rbp + 0x1c0]
mov qword [rbp + 0x98], rax
movups xmm0, xmmword [rbp + 0x90]
movaps xmmword [rbp + 0x300], xmm0
movabs rax, 0xc000000000000010
mov qword [rbp + 0x2d8], rax
lea rax, [rbp + 0x270]
cmp qword [rbp + 0x288], 0xf
cmova rax, qword [rbp + 0x270]
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0xa8], rax
movups xmm0, xmmword [rbp + 0xa0]
movaps xmmword [rbp + 0x310], xmm0
movabs rax, 0xc000000000000020
mov qword [rbp + 0x2e0], rax
lea rax, [rsp + 0x68]
cmp qword [rbp - 0x80], 0xf
cmova rax, qword [rsp + 0x68]
mov qword [rbp + 0xb0], rax
mov rax, qword [rsp + 0x78]
mov qword [rbp + 0xb8], rax
movups xmm0, xmmword [rbp + 0xb0]
movaps xmmword [rbp + 0x320], xmm0
movabs rax, 0xc000000000000030
mov qword [rbp + 0x2e8], rax
mov qword [rbp + 0xd0], 4
lea rax, [rbp + 0x2d0]
mov qword [rbp + 0xd8], rax
movaps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x260], xmm0
movaps xmm1, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x200], xmm1
lea r8, [rbp + 0x260]
lea rdx, [rbp + 0x200]
lea rcx, [rbp - 0x78]
call fcn.18000f540
bts edi, 0xb
movups xmm0, xmmword [rbp - 0x78]
movups xmmword [rbp + 0x2b0], xmm0
movups xmm1, xmmword [rbp - 0x68]
movups xmmword [rbp + 0x2c0], xmm1
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
lea rcx, [rbp - 0x78]
call fcn.18001faf0
nop
lea rcx, [rbp + 0x120]
call fcn.18001faf0
nop
lea rcx, [rsp + 0x68]
call fcn.18001faf0
mov rax, qword [rbp + 0x248]
cmp rax, qword [rbp + 0x250]
je 0x1800096b5
lea rdx, [rbp + 0x2b0]
mov rcx, rax
call fcn.18001ed20
add qword [rbp + 0x248], 0x20
jmp 0x1800096cc
lea r8, [rbp + 0x2b0]
mov rdx, rax
lea rcx, [rbp + 0x240]
call fcn.18001ee80
nop
lea rcx, [rbp + 0x2b0]
call fcn.18001faf0
nop
lea rcx, [rbp + 0x270]
call fcn.18001faf0
nop
lea rcx, [rbp + 0x358]
call fcn.18001faf0
mov ebx, dword [rsp + 0x58]
mov r13d, 1
lea rcx, [rbp + 0x1b0]
call fcn.18001faf0
inc ebx
mov dword [rsp + 0x58], ebx
inc r14
mov rdx, qword [rbp + 0x1f0]
mov rcx, rdx
mov r9, qword [rbp + 0x1e8]
sub rcx, r9
sar rcx, 3
movsxd rax, ebx
cmp rax, rcx
jb 0x180008db0
mov rsi, qword [rsp + 0x48]
mov r15d, dword [rsp + 0x5c]
test r9, r9
je 0x180009787
mov rax, qword [rbp + 0x1f8]
sub rax, r9
sar rax, 3
lea rdx, [rax*8]
mov rax, r9
cmp rdx, 0x1000
jb 0x18000977f
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009846
mov rcx, r9
call fcn.1800871b0
inc r15d
mov dword [rsp + 0x5c], r15d
inc rsi
mov qword [rsp + 0x48], rsi
mov rdx, qword [rbp + 0x1d8]
mov rcx, rdx
mov r8, qword [rbp + 0x1d0]
sub rcx, r8
sar rcx, 3
movsxd rax, r15d
cmp rax, rcx
jb 0x180008d50
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
mov qword [rbp + 0x2a0], r12
mov qword [rbp + 0x2a8], r12
xor r8d, r8d
lea rdx, [0x1800b1a26]
lea rcx, [rbp + 0x290]
call fcn.18001d5d0
nop
mov rsi, qword [rbp + 0x240]
mov rax, qword [rbp + 0x248]
mov qword [rsp + 0x50], rax
cmp rsi, rax
je 0x1800099ee
nop word [rax + rax]
mov rbx, qword [rsi + 0x10]
mov r15, rsi
mov r12, qword [rsi + 0x18]
cmp r12, 0xf
jbe 0x180009824
mov r15, qword [rsi]
test rbx, rbx
je 0x18000984d
mov r8, rbx
mov edx, 0x5b
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov r14, rax
test rax, rax
je 0x18000984d
sub r14, r15
jmp 0x180009854
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r14, 0xffffffffffffffff
mov r15, rsi
cmp r12, 0xf
jbe 0x180009860
mov r15, qword [rsi]
test rbx, rbx
je 0x18000987f
mov r8, rbx
mov edx, 0x3a
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x18000987f
sub rax, r15
jmp 0x180009886
mov rax, 0xffffffffffffffff
lea rcx, [r14 + 1]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
xor edx, edx
mov qword [rbp + 0x1c0], rdx
mov qword [rbp + 0x1c8], rdx
cmp rbx, rcx
jb 0x180009d0f
sub rax, r14
lea r8, [rax - 2]
sub rbx, rcx
cmp rbx, r8
cmovb r8, rbx
mov rax, rsi
cmp r12, 0xf
jbe 0x1800098ca
mov rax, qword [rsi]
lea rdx, [rax + rcx]
lea rcx, [rbp + 0x1b0]
call fcn.18001d5d0
or edi, 1
mov r15, qword [rbp + 0x2a8]
cmp r15, 0xf
seta cl
mov r12, qword [rbp + 0x290]
mov rbx, qword [rbp + 0x1c8]
mov r14, qword [rbp + 0x1c0]
mov r13, qword [rbp + 0x1b0]
mov rax, qword [rbp + 0x2a0]
test rax, rax
je 0x180009954
lea rdx, [rbp + 0x290]
test cl, cl
cmovne rdx, r12
lea rcx, [rbp + 0x1b0]
cmp rbx, 0xf
cmova rcx, r13
cmp r14, rax
jne 0x180009940
mov r8, r14
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x180009954
lea rdx, [0x18000e170]
lea rcx, [rbp + 0x380]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x180009961
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
lea rcx, [rbp + 0x380]
call fcn.18000f720
lea rdx, [0x18000e170]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r9, [rbp + 0x1b0]
cmp rbx, 0xf
cmova r9, r13
cmp r14, r15
ja 0x1800099c0
lea rbx, [rbp + 0x290]
cmp r15, 0xf
cmova rbx, r12
mov qword [rbp + 0x2a0], r14
mov r8, r14
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + r14], 0
jmp 0x1800099d0
mov rdx, r14
lea rcx, [rbp + 0x290]
call fcn.18000eec0
nop
lea rcx, [rbp + 0x1b0]
call fcn.18001faf0
add rsi, 0x20
cmp rsi, qword [rsp + 0x50]
jne 0x180009810
xor r12d, r12d
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], r12
mov r8d, 7
lea rdx, str.DumpLog
lea rcx, [rbp + 0x1b0]
call fcn.18001d5d0
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], r12
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Item_dumping_completed_
lea rcx, [rbp - 0x78]
call fcn.18001d5d0
lea rax, [rbp - 0x78]
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x120]
call fcn.18001ed20
mov rcx, rax
call fcn.18001faf0
nop
lea rcx, [rbp - 0x78]
call fcn.18001faf0
nop
lea rcx, [rbp + 0x1b0]
call fcn.18001faf0
lea rcx, [rbp + 0x380]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
lea rcx, [rbp + 0x2d0]
call fcn.18003ac10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
movdqa xmm1, xmmword [0x1800c2ca0]
movdqu xmmword [rbp + 0x210], xmm1
mov byte [rbp + 0x200], 0
mov rcx, qword [rax + 0x10]
movabs rdx, 0x7fffffffffffffff
sub rdx, rcx
cmp rdx, 0xe
jb 0x180009d45
cmp qword [rax + 0x18], 0xf
jbe 0x180009af7
mov rax, qword [rax]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xe
lea r9, str.explorer.exe__
lea rcx, [rbp + 0x100]
call fcn.18001e580
nop
mov r8d, 1
lea rdx, [0x1800b90f4]
lea rcx, [rbp + 0x100]
call fcn.18001f5f0
movups xmm6, xmmword [rax]
movups xmmword [rbp - 0x38], xmm6
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x218]
cmp rdx, 0xf
jbe 0x180009b95
inc rdx
mov rcx, qword [rbp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009b90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180009b90
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800871b0
movups xmmword [rbp + 0x200], xmm6
movups xmmword [rbp + 0x210], xmm7
movdqa xmm0, xmmword [0x1800c2ca0]
movdqu xmmword [rbp - 0x28], xmm0
mov byte [rbp - 0x38], 0
lea rcx, [rbp - 0x38]
call fcn.18001faf0
nop
lea rcx, [rbp + 0x100]
call fcn.18001faf0
lea rcx, [rbp + 0x200]
cmp qword [rbp + 0x218], 0xf
cmova rcx, qword [rbp + 0x200]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rcx, [rbp + 0x200]
call fcn.18001faf0
nop
lea rcx, [rbp + 0x2d0]
call fcn.18001faf0
nop
lea rcx, [rbp + 0x290]
call fcn.18001faf0
nop
mov rcx, qword [rbp + 0x1d0]
test rcx, rcx
je 0x180009c70
mov rax, qword [rbp + 0x1e0]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009c59
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180009c59
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800871b0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], r12
lea rcx, [rbp + 0x240]
call fcn.18001f160
nop
mov rax, qword [rbp + 0x380]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x380], rax
mov rax, qword [rbp + 0x380]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x37c], edx
lea rcx, [rbp + 0x388]
call fcn.18000d6f0
lea rcx, [rbp + 0x390]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x428]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [rbp + 0x490]
xor rcx, rsp
call fcn.180086e20
lea r11, [rsp + 0x5c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18001f770
nop
call fcn.18001f8d0
nop
call fcn.18000dbc0
int3
call fcn.18000dbc0
nop
call fcn.18001f770
nop
call fcn.18000dbc0
nop
call fcn.18000dbc0
int3
call fcn.18000dbc0
nop
call fcn.18000dbc0
nop
call fcn.18001f8d0
int3