Function at 0x140270c30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov word [rsp + 0x10], dx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa8
mov r8, qword [rcx]
movzx edi, dx
xor edx, edx
mov qword [rsp + 0x88], r8
mov r15, rcx
mov dword [rsp + 0x5c], edx
movzx ecx, byte [rcx + 0x40]
mov r14d, 1
mov qword [rsp + 0x70], rdx
movzx ebp, dx
mov dword [rsp + 0x108], ecx
movzx r13d, dx
cmp ecx, r14d
ja 0x140270c8b
mov ebx, r14d
jmp 0x140270c9b
cmp ecx, 2
mov ebx, 0xa
mov eax, 5
cmove ebx, eax
mov rax, qword [r15 + 0x10]
mov dword [rsp + 0x58], ebx
test rax, rax
je 0x140270cb5
test di, di
je 0x140270cb5
mov esi, dword [rax]
mov dword [rsp + 0x50], esi
jmp 0x140270cbb
mov esi, edx
mov dword [rsp + 0x50], edx
lea eax, [rcx + 4]
imul eax, ebx
lea ecx, [rsi + rax*8]
add ecx, ecx
movsxd rdx, ecx
mov rcx, qword [r8]
call fcn.140203150
mov qword [rsp + 0x80], rax
mov r12, rax
test rax, rax
jne 0x140270ceb
mov eax, 7
jmp 0x14027172a
movsxd r11, dword [rsp + 0x108]
lea rdx, [r12 + 0x18]
xorps xmm0, xmm0
mov eax, ebx
shl rax, 5
mov r8, r11
lea r9, [rax + r12]
mov qword [rsp + 0x60], r12
movups xmmword [r9], xmm0
mov r10, r12
mov qword [rsp + 0x78], r9
lea rcx, [rax + r9]
shl r8, 3
movups xmmword [r9 + 0x10], xmm0
lea eax, [rbx + rbx]
nop dword [rax]
mov qword [rdx], rcx
lea rdx, [rdx + 0x20]
add rcx, r8
dec eax
test eax, eax
jg 0x140270d30
test esi, esi
je 0x140270d66
movsxd r8, esi
xor edx, edx
add r8, r8
mov qword [rsp + 0x70], rcx
call sub.VCRUNTIME140.dll_memset
mov r11d, dword [rsp + 0x108]
mov r10, r12
mov r9, qword [rsp + 0x78]
mov rax, qword [rsp + 0x88]
mov ecx, 0x30
mov eax, dword [rax + 0xd0]
cmp eax, ecx
cmovb ecx, eax
mov word [r9 + 0x10], cx
mov ecx, r14d
test esi, esi
je 0x140270d9d
test r11b, r11b
movzx eax, sil
mov edx, 0xffffffff
cmovne eax, edx
mov byte [r9 + 0x16], al
xor esi, esi
mov dword [rsp + 0x54], esi
mov r8d, esi
test r11b, r11b
je 0x1402713c8
mov ebx, 0x4000
lea rdi, str._n_n_t_t_b_b_a_a_a
nop dword [rax + rax]
mov edx, esi
mov dword [rsp + 0x40], edx
test ecx, ecx
jle 0x1402711be
add r9, 0x10
mov eax, ecx
mov qword [rsp + 0x48], r9
mov qword [rsp + 0x90], rax
mov r14, qword [r15 + 0x58]
test r14, r14
je 0x140271191
nop
mov rcx, qword [r9 - 0x10]
mov rax, rcx
not rax
test qword [r14], rax
jne 0x14027117c
test qword [r14 + 8], rcx
jne 0x14027117c
test dword [r14 + 0x38], ebx
je 0x140270e1e
cmp word [r9], 3
jl 0x14027117c
movsx ebx, word [r14 + 0x12]
movzx r12d, word [r9]
mov ecx, ebx
movzx r8d, r12w
add r8w, word [r14 + 0x14]
movsx edx, r8w
cmp bx, r8w
jl 0x140270e5d
lea eax, [rdx + 0x31]
cmp ebx, eax
jg 0x140270e84
lea eax, [rdx + 0x1f]
cmp ebx, eax
jle 0x140270e4f
inc bx
jmp 0x140270e84
sub ecx, edx
movsxd rax, ecx
movzx ecx, byte [rax + rdi]
add bx, cx
jmp 0x140270e84
lea eax, [rbx + 0x31]
cmp edx, eax
jle 0x140270e6a
movzx ebx, r8w
jmp 0x140270e84
lea eax, [rbx + 0x1f]
cmp edx, eax
jle 0x140270e77
lea ebx, [r8 + 1]
jmp 0x140270e84
sub edx, ecx
movsxd rax, edx
movzx ebx, byte [rax + rdi]
add bx, r8w
movsx r8d, word [r9 + 4]
movsx ecx, bx
mov edx, r8d
cmp bx, r8w
jl 0x140270eb8
lea eax, [r8 + 0x31]
cmp ecx, eax
jg 0x140270edf
lea eax, [r8 + 0x1f]
cmp ecx, eax
jle 0x140270eaa
inc bx
jmp 0x140270edf
sub ecx, edx
movsxd rax, ecx
movzx ecx, byte [rax + rdi]
add bx, cx
jmp 0x140270edf
lea eax, [rcx + 0x31]
cmp edx, eax
jle 0x140270ec5
movzx ebx, r8w
jmp 0x140270edf
lea eax, [rcx + 0x1f]
cmp edx, eax
jle 0x140270ed2
lea ebx, [r8 + 1]
jmp 0x140270edf
sub edx, ecx
movsxd rax, edx
movzx ebx, byte [rax + rdi]
add bx, r8w
mov rsi, qword [r9 - 0x10]
or rsi, qword [r14 + 8]
add r12w, word [r14 + 0x16]
movzx r11d, byte [r9 + 6]
test r11b, r11b
jns 0x140270f4a
mov rdx, qword [r15 + 0x10]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
lea r8, [r9 - 0x10]
mov eax, dword [rsp + 0x54]
lea rdi, [r15 + 0x3c]
movzx r9d, word [rdi]
mov rcx, r15
mov qword [rsp + 0x28], r14
mov word [rsp + 0x20], ax
mov qword [rsp + 0x68], 0
call fcn.140270210
mov r15, qword [rsp + 0x68]
movzx r11d, al
test al, al
js 0x1402710c5
mov rcx, qword [rsp + 0xf0]
jmp 0x140270f5a
mov rcx, qword [rsp + 0xf0]
mov r15, qword [r9 - 8]
lea rdi, [rcx + 0x3c]
movzx r10d, r11b
cmp r10d, dword [rsp + 0x50]
jge 0x1402710c5
mov rdx, qword [rsp + 0x70]
movzx r8d, word [rdx + r10*2]
test r8w, r8w
jne 0x140271044
mov rax, qword [rcx + 0x20]
movzx r9d, word [rsp + 0xf8]
mov rcx, qword [rax + 0x20]
mov eax, 0x88888889
mov r8d, dword [rcx]
add r8d, 0x3b
imul r8d
add edx, r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsxd rcx, edx
call fcn.14022a510
movzx ecx, r9w
lea r8d, [rcx + rax]
test r11b, r11b
je 0x140270fe2
mov ecx, dword [rsp + 0x50]
sub ecx, r10d
imul eax, ecx, 0x64
cdq
idiv dword [rsp + 0x50]
movsxd rcx, eax
call fcn.14022a510
sub ax, 0x42
movzx ecx, r9w
add r8w, ax
movzx eax, word [rdi]
bt ax, 0xe
jae 0x140271010
lea eax, [r8 + 0xa]
test r11b, r11b
lea r8d, [rax + 6]
cmove r8w, ax
mov rax, qword [rsp + 0xf0]
cmp word [rax + 0x3e], cx
cmovl r9w, word [rax + 0x3e]
jmp 0x140271021
bt ax, 8
jae 0x140271021
cmp cx, 0xa
jle 0x14027103a
lea r9d, [rcx - 0xa]
cmp r9w, 0xa
jle 0x14027103a
movsx rcx, r9w
call fcn.14022a510
sub r8w, 0x21
add r8w, ax
mov rcx, qword [rsp + 0x70]
mov word [rcx + r10*2], r8w
movsx ecx, bx
movsx edx, r8w
cmp bx, r8w
jl 0x140271091
lea eax, [rdx + 0x31]
cmp ecx, eax
jle 0x140271063
movzx r8d, bx
add r8w, 3
jmp 0x1402710cd
lea eax, [rdx + 0x1f]
cmp ecx, eax
jle 0x140271075
lea r8d, [rbx + 1]
add r8w, 3
jmp 0x1402710cd
sub ecx, edx
movsxd rax, ecx
lea rcx, str._n_n_t_t_b_b_a_a_a
movzx r8d, byte [rax + rcx]
add r8w, bx
add r8w, 3
jmp 0x1402710cd
lea eax, [rcx + 0x31]
cmp edx, eax
jg 0x1402710be
lea eax, [rcx + 0x1f]
cmp edx, eax
jle 0x1402710aa
inc r8w
add r8w, 3
jmp 0x1402710cd
sub edx, ecx
lea rcx, str._n_n_t_t_b_b_a_a_a
movsxd rax, edx
movzx ecx, byte [rax + rcx]
add r8w, cx
add r8w, 3
jmp 0x1402710cd
movzx r8d, bx
sub bx, 2
mov r9d, dword [rsp + 0x54]
test r9d, r9d
jne 0x1402710eb
test dword [r14 + 0x38], 0x2000000
je 0x1402710eb
add r8w, 0xfff6
add r12w, 0xffe2
mov r10, qword [rsp + 0x60]
xor ecx, ecx
mov edx, dword [rsp + 0x40]
mov rdi, r10
test edx, edx
jle 0x140271118
nop dword [rax]
cmp qword [rdi], rsi
jne 0x14027110e
movzx eax, r11b
xor al, byte [rdi + 0x16]
jge 0x140271139
inc ecx
add rdi, 0x20
cmp ecx, edx
jl 0x140271100
cmp edx, dword [rsp + 0x58]
jl 0x14027124c
cmp r8w, bp
jg 0x140271161
jne 0x140271130
cmp bx, r13w
jge 0x140271161
mov eax, dword [rsp + 0x5c]
jmp 0x140271254
cmp ecx, edx
jge 0x140271118
cmp word [rdi + 0x12], r8w
jl 0x140271161
jne 0x14027125e
cmp word [rdi + 0x10], r12w
jl 0x140271161
jne 0x14027125e
cmp word [rdi + 0x14], bx
jg 0x14027125e
xor esi, esi
mov r15, qword [rsp + 0xf0]
lea rdi, str._n_n_t_t_b_b_a_a_a
mov r9, qword [rsp + 0x48]
mov ebx, 0x4000
mov r14, qword [r14 + 0x50]
test r14, r14
jne 0x140270df0
mov rax, qword [rsp + 0x90]
add r9, 0x20
sub rax, 1
mov qword [rsp + 0x48], r9
mov qword [rsp + 0x90], rax
jne 0x140270de1
mov r8d, dword [rsp + 0x54]
mov r11d, dword [rsp + 0x108]
mov r9, qword [rsp + 0x78]
mov rax, r10
mov qword [rsp + 0x60], r9
inc r8d
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x54], r8d
mov r10, r9
mov r9, rax
mov ecx, edx
cmp r8d, r11d
jl 0x140270dc0
test edx, edx
jne 0x1402713b2
mov rbx, qword [rsp + 0x88]
lea rdx, str.no_query_solution
mov rcx, rbx
call fcn.140205cd0
mov rcx, qword [rbx]
mov rbx, qword [rsp + 0x80]
test rcx, rcx
je 0x140271345
cmp rbx, qword [rcx + 0x1f0]
jae 0x140271329
cmp rbx, qword [rcx + 0x1e0]
jb 0x140271305
mov rax, qword [rcx + 0x1d8]
mov qword [rbx], rax
mov eax, 1
mov qword [rcx + 0x1d8], rbx
jmp 0x14027172a
mov eax, edx
inc edx
mov dword [rsp + 0x40], edx
movsxd rdi, eax
shl rdi, 5
add rdi, r10
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rdi + 0x18]
mov rax, qword [rdx - 0x10]
or rax, qword [r14 + 8]
mov word [rdi + 0x14], bx
lea rbx, [r9*8]
mov word [rdi + 0x12], r8w
mov r8, rbx
mov qword [rdi], rax
mov qword [rdi + 8], r15
mov word [rdi + 0x10], r12w
mov byte [rdi + 0x16], r11b
mov rdx, qword [rdx + 8]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rdi + 0x18]
xor esi, esi
mov edx, dword [rsp + 0x40]
mov r10, qword [rsp + 0x60]
mov qword [rbx + rax], r14
mov ebx, dword [rsp + 0x58]
cmp edx, ebx
jl 0x140271163
movzx ebp, word [r10 + 0x12]
mov edx, 1
movzx r13d, word [r10 + 0x10]
mov dword [rsp + 0x5c], esi
cmp ebx, edx
jbe 0x1402712fc
lea rax, [r10 + 0x34]
movzx ecx, word [rax - 2]
cmp cx, bp
jg 0x1402712e7
jne 0x1402712f2
cmp word [rax], r13w
jle 0x1402712f2
movzx r13d, word [rax]
movzx ebp, cx
mov dword [rsp + 0x5c], edx
inc edx
add rax, 0x20
cmp edx, ebx
jl 0x1402712d6
mov edx, dword [rsp + 0x40]
jmp 0x140271163
cmp rbx, qword [rcx + 0x1e8]
jb 0x140271329
mov rax, qword [rcx + 0x1c8]
mov qword [rbx], rax
mov eax, 1
mov qword [rcx + 0x1c8], rbx
jmp 0x14027172a
cmp qword [rcx + 0x308], 0
je 0x140271345
mov rdx, rbx
call fcn.1401daa20
mov eax, 1
jmp 0x14027172a
cmp dword [0x140343050], 0
je 0x14027139f
mov rcx, qword [0x14034c0c0]
test rcx, rcx
je 0x140271360
call qword [0x1403430d0]
mov rcx, rbx
call qword [0x140343088]
dec qword [0x14034c048]
movsxd rcx, eax
sub qword [0x14034c000], rcx
mov rcx, rbx
call qword [0x140343078]
mov rcx, qword [0x14034c0c0]
test rcx, rcx
je 0x1402713a8
call qword [0x1403430e0]
mov eax, 1
jmp 0x14027172a
mov rcx, rbx
call qword [0x140343078]
mov eax, 1
jmp 0x14027172a
movzx edi, word [rsp + 0xf8]
mov r14d, 1
mov r12, qword [rsp + 0x80]
movsxd rdx, ecx
mov rbx, r9
cmp rdx, 1
jle 0x140271400
lea rcx, [r9 + 0x32]
dec rdx
nop dword [rax + rax]
movzx eax, word [rcx]
cmp word [rbx + 0x12], ax
jle 0x1402713f3
movsxd rbx, r14d
shl rbx, 5
add rbx, r9
inc r14d
add rcx, 0x20
sub rdx, 1
jne 0x1402713e0
test r11b, r11b
je 0x140271446
mov r8, rsi
mov r9d, r11d
lea rdx, [r15 + 0x3a0]
mov rax, qword [rbx + 0x18]
lea rdx, [rdx + 0x70]
lea r8, [r8 + 8]
mov rcx, qword [r8 + rax - 8]
mov qword [rdx - 0x50], rcx
movzx eax, byte [rcx + 0x10]
imul rcx, rax, 0x68
mov byte [rdx - 0x70], al
mov rax, qword [r15 + 8]
mov ecx, dword [rcx + rax + 0x4c]
mov dword [rdx - 0xac], ecx
sub r9, 1
jne 0x140271412
movzx eax, word [r15 + 0x3c]
mov ecx, 0x180
and ax, cx
mov ecx, pe_nt_image_headers64
cmp ax, cx
jne 0x1402714be
cmp byte [r15 + 0x43], 0
jne 0x1402714be
test di, di
je 0x1402714be
mov rax, qword [rbx + 0x18]
lea edx, [r11 - 1]
movzx ecx, r11b
lea r8, [rsp + 0xf0]
mov qword [rsp + 0x30], r8
mov r9d, 0x80
mov r8, rbx
mov rax, qword [rax + rcx*8 - 8]
mov rcx, r15
mov qword [rsp + 0x28], rax
mov word [rsp + 0x20], dx
mov rdx, qword [r15 + 0x18]
call fcn.140270210
mov r11d, dword [rsp + 0x108]
movsx ecx, al
mov rax, qword [r15 + 0x18]
cmp ecx, dword [rax]
jne 0x1402714be
mov byte [r15 + 0x43], 2
mov ecx, dword [r15 + 0x44]
mov r10, qword [r15 + 0x10]
and ecx, 0xfffffffb
mov dword [r15 + 0x44], ecx
test r10, r10
je 0x14027165a
movzx r9d, word [r15 + 0x3c]
movsx r8d, byte [rbx + 0x16]
mov byte [r15 + 0x41], r8b
test r9b, r9b
jns 0x140271517
movsx eax, byte [rbx + 0x16]
cmp eax, dword [r10]
jne 0x1402714f7
mov byte [r15 + 0x43], 2
mov rax, qword [r15 + 0x20]
mov rcx, qword [rax + 0x48]
test rcx, rcx
je 0x14027150f
mov ecx, dword [rcx]
cmp r8d, ecx
jle 0x14027150f
mov byte [r15 + 0x41], cl
mov rdx, r10
jmp 0x1402715e5
mov rax, qword [rbx + 8]
mov rdx, r10
mov qword [r15 + 0x68], rax
test r8b, r8b
jg 0x1402715cd
mov byte [r15 + 0x41], 0
test r11b, r11b
je 0x1402715e5
mov rax, qword [rbx + 0x18]
movzx ecx, r11b
mov r11, qword [rax + rcx*8 - 8]
mov eax, dword [r11 + 0x38]
and eax, 0x104
cmp eax, 0x104
setne cl
bt dword [r11 + 0x38], 0xc
setae al
test al, cl
je 0x1402715c3
mov eax, dword [rsp + 0x108]
lea rcx, [rsp + 0xf0]
mov qword [rsp + 0x30], rcx
dec eax
mov qword [rsp + 0x28], r11
mov rcx, r15
mov r9d, 0x800
mov word [rsp + 0x20], ax
mov r8, rbx
mov qword [rsp + 0xf0], rsi
call fcn.140270210
mov rdx, qword [r15 + 0x10]
mov r11d, dword [rsp + 0x108]
movsx ecx, al
cmp ecx, dword [rdx]
jne 0x1402715e5
mov rax, qword [rsp + 0xf0]
or dword [r15 + 0x44], 4
mov qword [r15 + 0x68], rax
jmp 0x1402715e5
mov r11d, dword [rsp + 0x108]
jmp 0x1402715e5
test r11b, r11b
je 0x1402715e5
cmp r8b, 1
jne 0x1402715e5
test r9b, 3
je 0x1402715e5
or ecx, 4
mov dword [r15 + 0x44], ecx
mov eax, 0x200
test word [r15 + 0x3c], ax
je 0x14027165a
movsx eax, byte [r15 + 0x41]
cmp eax, dword [rdx]
jne 0x14027165a
test r11b, r11b
je 0x14027165a
mov rax, qword [rbx + 0x18]
lea r8, [rsp + 0xf0]
movzx ecx, r11b
xor r9d, r9d
mov qword [rsp + 0x30], r8
dec r11w
mov r8, rbx
mov qword [rsp + 0xf0], rsi
mov rax, qword [rax + rcx*8 - 8]
mov rcx, r15
mov qword [rsp + 0x28], rax
mov word [rsp + 0x20], r11w
call fcn.140270210
movsx ecx, al
mov rax, qword [r15 + 0x10]
cmp ecx, dword [rax]
jne 0x14027165a
mov rax, qword [rsp + 0xf0]
or dword [r15 + 0x44], 8
mov qword [r15 + 0x68], rax
movzx eax, word [rbx + 0x10]
mov word [r15 + 0x48], ax
mov rax, qword [rsp + 0x88]
mov rcx, qword [rax]
test rcx, rcx
je 0x1402716cd
cmp r12, qword [rcx + 0x1f0]
jae 0x1402716b9
cmp r12, qword [rcx + 0x1e0]
jb 0x14027169c
mov rax, qword [rcx + 0x1d8]
mov qword [r12], rax
mov qword [rcx + 0x1d8], r12
jmp 0x140271728
cmp r12, qword [rcx + 0x1e8]
jb 0x1402716b9
mov rax, qword [rcx + 0x1c8]
mov qword [r12], rax
mov qword [rcx + 0x1c8], r12
jmp 0x140271728
cmp qword [rcx + 0x308], 0
je 0x1402716cd
mov rdx, r12
call fcn.1401daa20
jmp 0x140271728
cmp dword [0x140343050], 0
je 0x14027171f
mov rcx, qword [0x14034c0c0]
test rcx, rcx
je 0x1402716e8
call qword [0x1403430d0]
mov rcx, r12
call qword [0x140343088]
dec qword [0x14034c048]
movsxd rcx, eax
sub qword [0x14034c000], rcx
mov rcx, r12
call qword [0x140343078]
mov rcx, qword [0x14034c0c0]
test rcx, rcx
je 0x140271728
call qword [0x1403430e0]
jmp 0x140271728
mov rcx, r12
call qword [0x140343078]
xor eax, eax
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret