Function at 0x18001c5b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbx
push rsi
push rdi
push r14
sub rsp, 0xc8
mov rax, qword [0x18015a008]
xor rax, rsp
mov qword [rsp + 0xb0], rax
movzx r14d, byte [rcx + 0x41]
xor edi, edi
inc r14d
mov dword [rsp + 0x38], edi
xor esi, esi
mov dword [rsp + 0x48], r14d
mov rbx, rcx
mov dword [rsp + 0x3c], esi
cmp byte [rcx + 0x3f], sil
jne 0x18001c613
mov rcx, qword [rcx + 8]
lea r9d, [rdi + 0xa]
mov r8d, 3
mov edx, r14d
sub r8d, r14d
mov rax, qword [rcx]
call qword [rax + 0x70]
test eax, eax
jne 0x18001cb15
xorps xmm0, xmm0
mov qword [rsp + 0xf8], rbp
movups xmmword [rbx + 0x48], xmm0
lea rdx, [rsp + 0x50]
movups xmmword [rbx + 0x58], xmm0
movups xmmword [rbx + 0x68], xmm0
mov rcx, qword [rbx + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov ebp, eax
test eax, eax
jne 0x18001cae9
cmp qword [rsp + 0x50], 0x20
mov qword [rsp + 0x100], r12
mov qword [rsp + 0x108], r13
mov qword [rsp + 0xc0], r15
jle 0x18001ca11
mov rcx, qword [rbx + 0x10]
lea r8d, [rbp + 0x20]
xor r9d, r9d
lea rdx, [rsp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov ebp, eax
test eax, eax
jne 0x18001cad1
mov ecx, dword [rsp + 0x90]
mov r13d, dword [rsp + 0x98]
bswap ecx
mov eax, ecx
and eax, 0xfffffffe
bswap r13d
cmp eax, 0x377f0682
jne 0x18001ca11
lea eax, [r13 - 1]
test r13d, eax
jne 0x18001ca11
lea eax, [r13 - 0x200]
cmp eax, 0xfe00
ja 0x18001ca11
mov eax, dword [rsp + 0x9c]
lea r12, [rbx + 0x60]
and cl, 1
mov dword [rbx + 0x38], r13d
bswap eax
movzx ecx, cl
lea r8d, [rbp + 0x18]
mov dword [rbx + 0x88], eax
lea rdx, [rsp + 0x90]
mov rax, qword [rsp + 0xa0]
xor r9d, r9d
mov byte [rbx + 0x55], cl
xor ecx, 1
mov qword [rbx + 0x68], rax
mov qword [rsp + 0x20], r12
call fcn.18001be80
mov eax, dword [rsp + 0xa8]
bswap eax
cmp dword [r12], eax
jne 0x18001ca11
mov eax, dword [rsp + 0xac]
bswap eax
cmp dword [rbx + 0x64], eax
jne 0x18001ca11
mov eax, dword [rsp + 0x94]
bswap eax
cmp eax, 0x2de218
je 0x18001c75b
mov ecx, 0xedb6
call fcn.1800c9020
mov ebp, eax
jmp 0x18001ca09
movsxd rcx, r13d
add rcx, 0x8018
call sym.QoOBJSl.dll_hqlite3_malloc64
mov r15, rax
test rax, rax
jne 0x18001c77a
lea ebp, [rax + 7]
jmp 0x18001cad1
add rax, 0x18
movsxd rcx, r13d
add rcx, rax
mov dword [rsp + 0x34], edi
mov rax, qword [rsp + 0x50]
lea r11d, [r13 + 0x18]
add rax, 0xffffffffffffffe0
mov qword [rsp + 0x68], rcx
cqo
movsxd rcx, r11d
idiv rcx
mov qword [rsp + 0x70], rcx
mov r9, rax
mov qword [rsp + 0x80], rax
add eax, 0x1000
mov r10d, r9d
sub rax, 0xfdf
mov qword [rsp + 0x88], r10
shr rax, 0xc
xor r8d, r8d
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r8
nop dword [rax]
mov eax, edi
mov r14d, r9d
shl eax, 0xc
mov esi, 1
mov edx, eax
lea rcx, [rax + 0xfde]
add eax, 0xfde
cmp r10, rcx
cmovae r14d, eax
mov dword [rsp + 0x30], r14d
test edi, edi
je 0x18001c80e
lea esi, [rdx - 0x21]
cmp dword [rbx + 0x28], edi
jle 0x18001c831
mov rax, qword [rbx + 0x30]
movsxd rcx, edi
mov rcx, qword [rax + rcx*8]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x58], rcx
test rcx, rcx
je 0x18001c831
xor ebp, ebp
jmp 0x18001c85d
lea r8, [rsp + 0x58]
mov edx, edi
mov rcx, rbx
call fcn.18001bcf0
mov ebp, eax
test eax, eax
jne 0x18001c9f4
mov rax, qword [rsp + 0x58]
lea r11d, [r13 + 0x18]
mov r8, qword [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov rax, qword [rbx + 0x30]
mov rcx, qword [rsp + 0x68]
mov qword [r8 + rax], rcx
cmp esi, r14d
ja 0x18001c985
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rbx + 0x10]
lea r9d, [rsi - 1]
imul r9, qword [rsp + 0x70]
mov r10, qword [rcx]
mov r8d, r11d
add r9, 0x20
mov rdx, r15
call qword [r10 + 0x10]
mov ebp, eax
test eax, eax
jne 0x18001c97c
mov rax, qword [rbx + 0x68]
cmp rax, qword [r15 + 8]
jne 0x18001c97c
mov r14d, dword [r15]
bswap r14d
test r14d, r14d
je 0x18001c977
xor edi, edi
mov qword [rsp + 0x20], r12
cmp byte [rbx + 0x55], dil
lea r8d, [rbp + 8]
mov r9, r12
mov rdx, r15
sete dil
mov ecx, edi
call fcn.18001be80
mov r8d, dword [rbx + 0x38]
lea rdx, [r15 + 0x18]
mov r9, r12
mov qword [rsp + 0x20], r12
mov ecx, edi
call fcn.18001be80
mov eax, dword [r15 + 0x10]
bswap eax
cmp dword [r12], eax
jne 0x18001c977
mov eax, dword [r15 + 0x14]
bswap eax
cmp dword [r12 + 4], eax
jne 0x18001c977
mov edi, dword [r15 + 4]
mov r8d, r14d
mov edx, esi
mov rcx, rbx
bswap edi
call fcn.18001c420
mov ebp, eax
test eax, eax
jne 0x18001c977
test edi, edi
je 0x18001c961
movzx eax, r13w
mov dword [rbx + 0x58], esi
mov dword [rbx + 0x5c], edi
mov ecx, r13d
mov edx, 0xff00
sar ecx, 0x10
and ax, dx
or cx, ax
mov word [rbx + 0x56], cx
mov eax, dword [r12]
mov dword [rsp + 0x38], eax
mov eax, dword [rbx + 0x64]
mov dword [rsp + 0x3c], eax
mov r14d, dword [rsp + 0x30]
lea r11d, [r13 + 0x18]
inc esi
cmp esi, r14d
jbe 0x18001c880
jmp 0x18001c97c
mov r14d, dword [rsp + 0x30]
mov edi, dword [rsp + 0x34]
mov r8, qword [rsp + 0x40]
mov rax, qword [rbx + 0x30]
mov edx, 0x88
mov rcx, qword [rsp + 0x60]
mov qword [r8 + rax], rcx
xor eax, eax
test edi, edi
mov r8d, 0x8000
cmove eax, edx
mov edx, 0x7f78
cmove r8d, edx
mov rdx, qword [rsp + 0x68]
add rdx, rax
add rcx, rax
call sub.VCRUNTIME140.dll_memcpy
cmp esi, r14d
jbe 0x18001c9f4
mov r8, qword [rsp + 0x40]
lea r11d, [r13 + 0x18]
mov r9, qword [rsp + 0x80]
add r8, 8
mov r10, qword [rsp + 0x88]
inc edi
mov dword [rsp + 0x34], edi
mov qword [rsp + 0x40], r8
cmp edi, dword [rsp + 0x78]
jbe 0x18001c7e0
mov rcx, r15
call sym.QoOBJSl.dll_hqlite3_free
mov edi, dword [rsp + 0x38]
mov esi, dword [rsp + 0x3c]
mov r14d, dword [rsp + 0x48]
test ebp, ebp
jne 0x18001cad1
mov rcx, rbx
mov dword [rbx + 0x60], edi
mov dword [rbx + 0x64], esi
call fcn.18001bf70
mov rax, qword [rbx + 0x30]
mov edi, 1
mov rsi, qword [rax]
mov dword [rsi + 0x60], 0
mov eax, dword [rbx + 0x58]
mov dword [rsi + 0x80], eax
mov dword [rsi + 0x64], 0
cmp byte [rbx + 0x3f], 0
je 0x18001ca4c
xor ebp, ebp
jmp 0x18001ca69
mov rcx, qword [rbx + 8]
lea edx, [rdi + 3]
mov r9d, 0xa
mov rax, qword [rcx]
lea r8d, [r9 - 9]
call qword [rax + 0x70]
mov ebp, eax
test eax, eax
jne 0x18001caa3
cmp edi, 1
jne 0x18001ca7a
mov eax, dword [rbx + 0x58]
test eax, eax
je 0x18001ca7a
mov dword [rsi + 0x68], eax
jmp 0x18001ca84
mov eax, edi
mov dword [rsi + rax*4 + 0x64], 0xffffffff
cmp byte [rbx + 0x3f], 0
jne 0x18001caa8
mov rcx, qword [rbx + 8]
lea edx, [rdi + 3]
mov r9d, 9
mov rax, qword [rcx]
lea r8d, [r9 - 8]
call qword [rax + 0x70]
jmp 0x18001caa8
cmp eax, 5
jne 0x18001cad1
inc edi
cmp edi, 5
jl 0x18001ca42
cmp dword [rbx + 0x5c], 0
je 0x18001cad1
mov r9, qword [rbx + 0x80]
lea rdx, str.recovered__d_frames_from_WAL_file__s
mov r8d, dword [rbx + 0x58]
mov ecx, 0x11b
call sym.QoOBJSl.dll_hqlite3_log
mov r13, qword [rsp + 0x108]
mov r12, qword [rsp + 0x100]
mov r15, qword [rsp + 0xc0]
cmp byte [rbx + 0x3f], 0
jne 0x18001cb0b
mov rcx, qword [rbx + 8]
mov r8d, 3
sub r8d, r14d
mov r9d, 9
mov edx, r14d
mov rax, qword [rcx]
call qword [rax + 0x70]
mov eax, ebp
mov rbp, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.18012ba20
add rsp, 0xc8
pop r14
pop rdi
pop rsi
pop rbx
ret