Function at 0x140087250
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [0x1400ae038]
xor rax, rsp
mov qword [rbp + 0x50], rax
xor r12d, r12d
movabs rax, 0x8590a9666895ae90
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movabs rax, 0xbf43281f67f698d4
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
movabs rbx, 0xecd6cc1209f0dcd3
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x40], rax
movabs rdi, 0xbf43281f67a1fdb8
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x48], rax
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rsp + 0x50], xmm0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r12
lea rax, [rsp + 0x50]
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp byte [rax + r8], r12b
jne 0x140087315
lea rdx, [rsp + 0x50]
lea rcx, [rbp]
call fcn.140006aa0
nop
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
mov rax, qword [section..data]
movabs r8, 0x90001208c00018be
mov rdx, qword [rbp + 0x10]
call rax
mov qword [rbp + 0x40], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x68], rax
movabs rax, 0xdee5a0776782b9b8
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x60], rcx
movabs rax, 0xbf43281f0bcd9996
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x20], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x28], rax
movdqa xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r12
lea rax, [rsp + 0x60]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x1400873d3
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.140006aa0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x60], rax
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x40]
call fcn.140005a70
mov r15, rax
mov qword [rsp + 0x50], rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rax, qword [rdx + 0x18]
mov qword [rbp + 0x20], rax
mov rcx, rax
movabs r13, 0x7fffffffffffffff
mov rax, qword [rax]
mov qword [rsp + 0x40], rax
cmp qword [rax + 0x30], 0
je 0x1400877b3
mov rdx, qword [rax + 0x60]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov r8, r14
inc r8
cmp word [rdx + r8*2], 0
jne 0x140087455
lea rcx, [rsp + 0x70]
call fcn.140006960
nop
lea rcx, [rsp + 0x70]
mov r9, qword [rbp - 0x78]
cmp r9, 8
setae dl
mov r8, qword [rsp + 0x70]
cmovae rcx, r8
mov rax, qword [rbp - 0x80]
lea rsi, [rcx + rax*2]
lea rdi, [rsp + 0x70]
test dl, dl
cmovne rdi, r8
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
cmp rdi, rsi
jne 0x1400874bd
mov rcx, r12
mov qword [rbp - 0x10], rcx
mov r14d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 8], r14
mov byte [rbp - 0x20], 0
jmp 0x1400875c0
mov rax, rsi
sub rax, rdi
sar rax, 1
mov rdx, r12
mov qword [rbp - 0x10], rdx
mov ebx, reloc.WS2_32.dll_ntohs
mov qword [rbp - 8], rbx
cmp rax, r13
ja 0x140087a92
cmp rax, 0x10
jb 0x140087570
mov rbx, rax
or rbx, 0xf
cmp rbx, r13
jbe 0x1400874fa
mov rbx, r13
jmp 0x140087507
cmp rbx, 0x16
mov eax, reloc.WS2_32.dll_shutdown
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
cmovb rcx, r14
cmp rcx, 0x1000
jb 0x14008754e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140087a98
mov rcx, rax
call fcn.14008bba8
mov rcx, rax
test rax, rax
je 0x14008789c
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rdx, qword [rbp - 0x10]
jmp 0x140087561
test rcx, rcx
je 0x14008755e
call fcn.14008bba8
mov rdx, qword [rbp - 0x10]
jmp 0x140087561
mov rax, r12
mov qword [rbp - 0x20], rax
mov qword [rbp - 8], rbx
nop dword [rax]
lea rcx, [rbp - 0x20]
cmp rbx, 0x10
cmovae rcx, qword [rbp - 0x20]
movzx eax, byte [rdi]
mov byte [rdx + rcx], al
mov rdx, qword [rbp - 0x10]
inc rdx
mov qword [rbp - 0x10], rdx
add rdi, 2
cmp rdi, rsi
je 0x14008759d
mov rbx, qword [rbp - 8]
jmp 0x140087570
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rax, qword [rbp - 0x20]
mov byte [rdx + rax], 0
mov r9, qword [rbp - 0x78]
mov r8, qword [rsp + 0x70]
mov r14, qword [rbp - 8]
mov rcx, qword [rbp - 0x10]
cmp r9, 8
jb 0x140087603
lea rdx, [r9*2 + 2]
mov rax, r8
cmp rdx, 0x1000
jb 0x1400875f3
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140087932
mov rcx, r8
call fcn.14008bba0
mov r14, qword [rbp - 8]
mov rcx, qword [rbp - 0x10]
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r12w
lea rdi, [rbp - 0x20]
cmp r14, 0x10
setae al
mov r11, qword [rbp - 0x20]
cmovae rdi, r11
lea rdx, [rbp - 0x20]
test al, al
je 0x140087639
mov rbx, r11
lea rsi, [rcx + r11]
jmp 0x140087641
lea rsi, [rcx + rdx]
lea rbx, [rbp - 0x20]
cmp rbx, rsi
je 0x14008766c
sub rdi, rbx
nop dword [rax]
movzx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx + rdi], al
inc rbx
cmp rbx, rsi
jne 0x140087650
mov r14, qword [rbp - 8]
mov r11, qword [rbp - 0x20]
mov rdi, r15
lea r13, [r15 + 0x18]
mov rcx, qword [r13]
lea r12, [r15 + 0x10]
mov qword [rbp - 0x70], r12
cmp rcx, 0x10
jb 0x140087691
mov rdi, qword [r15]
mov rsi, rdi
add rsi, qword [r12]
jmp 0x1400876a1
mov rsi, qword [r12]
add rsi, r15
mov rbx, r15
cmp rcx, 0x10
jb 0x1400876a4
mov rbx, qword [r15]
cmp rbx, rsi
je 0x1400876cc
sub rdi, rbx
nop dword [rax]
movzx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx + rdi], al
inc rbx
cmp rbx, rsi
jne 0x1400876b0
mov r14, qword [rbp - 8]
mov r11, qword [rbp - 0x20]
mov rbx, r15
cmp qword [r13], 0x10
jb 0x1400876d9
mov rbx, qword [r15]
lea r10, [rbp - 0x20]
cmp r14, 0x10
setae dil
cmovae r10, r11
mov qword [0x1400b03c0], r10
cmp byte [r10], 0
je 0x140087756
mov r9, r10
nop dword [rax]
mov rcx, rbx
call fcn.140086130
mov ecx, eax
mov rdx, rbx
test eax, eax
je 0x1400878a3
movzx eax, byte [r9]
test al, al
je 0x14008772d
cmp al, byte [rdx]
jne 0x14008772d
inc r9
inc rdx
sub rcx, 1
jmp 0x14008770f
test rcx, rcx
je 0x1400878a3
mov ecx, eax
movzx eax, byte [rdx]
cmp ecx, eax
je 0x1400878a3
inc r10
mov qword [0x1400b03c0], r10
mov r9, r10
cmp byte [r10], 0
jne 0x140087700
test dil, dil
je 0x14008778c
lea rdx, [r14 + 1]
mov rax, r11
cmp rdx, 0x1000
jb 0x140087784
add rdx, 0x27
mov r11, qword [r11 - 8]
sub rax, r11
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140087932
mov rcx, r11
call fcn.14008bba0
xor r12d, r12d
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x20], r12b
mov rbx, qword [rbp - 0x70]
lea r14, [r12 - 1]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rbp + 0x20]
jmp 0x1400877bb
lea r13, [r15 + 0x18]
lea rbx, [r15 + 0x10]
cmp rcx, rax
jne 0x140087421
mov rdx, qword [r13]
cmp rdx, 0x10
jb 0x1400877fe
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x1400877f9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140087939
mov rcx, r8
call fcn.14008bba0
mov rsi, r12
mov r12, rbx
mov qword [r12], 0
mov qword [r13], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
movsxd rax, dword [rsi + 0x3c]
mov r14d, dword [rax + rsi + 0x88]
add r14, rsi
mov r12d, dword [r14 + 0x20]
add r12, rsi
mov r13d, dword [r14 + 0x24]
add r13, rsi
mov rdx, 0xffffffffffffffff
mov qword [rsp + 0x40], rdx
lea rbx, [0x1400931c9]
xor edi, edi
cmp dword [r14 + 0x18], 1
je 0x140087952
nop word [rax + rax]
mov ebx, dword [r12 + rdi*4]
add rbx, rsi
mov rax, qword [section..data]
movabs r8, 0x90001208c00018be
mov rdx, qword [rbp - 0x68]
mov rcx, rbx
call rax
cmp qword [rbp + 0x40], rax
je 0x140087940
inc edi
mov eax, dword [r14 + 0x18]
dec eax
cmp edi, eax
jb 0x140087860
jmp 0x14008794b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rsi, qword [rsp + 0x40]
mov rsi, qword [rsi + 0x30]
cmp r14, 0x10
jb 0x1400878df
lea rdx, [r14 + 1]
mov rax, r11
cmp rdx, 0x1000
jb 0x1400878d7
add rdx, 0x27
mov r11, qword [r11 - 8]
sub rax, r11
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140087932
mov rcx, r11
call fcn.14008bba0
mov qword [rbp - 0x10], 0
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x20], 0
mov rdx, qword [r13]
cmp rdx, 0x10
jb 0x140087804
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x140087928
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140087939
mov rcx, r8
call fcn.14008bba0
jmp 0x140087804
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movzx eax, word [r13 + rdi*2]
mov qword [rsp + 0x40], rax
mov rdx, 0xffffffffffffffff
mov eax, dword [r14 + 0x1c]
add rax, rsi
mov rcx, qword [rsp + 0x40]
mov edi, dword [rax + rcx*4]
add rdi, rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xor r14d, r14d
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], r14
inc rdx
cmp byte [rbx + rdx], r14b
jne 0x140087976
mov r8, rdx
mov rdx, rbx
lea rcx, [rbp + 0x20]
call fcn.140006aa0
mov r8, rdi
lea rdx, [rbp + 0x20]
mov rcx, rsi
call fcn.140088750
mov rbx, r14
test al, al
cmovne rbx, rdi
lea rdi, [rbp - 0x60]
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x1400879e0
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x1400879db
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140087a56
mov rcx, r8
call fcn.14008bba0
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov qword [0x1400b0110], rbx
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 3]
lea rcx, str..PhysicalDrive0
call rbx
mov rbx, rax
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140087a62
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140087a5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140087a5d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14008bba0
mov rax, rbx
mov rcx, qword [rbp + 0x50]
xor rcx, rsp
call fcn.14008bb80
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001560
nop
call fcn.1400014c0
int3