Function at 0x14015ff50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0xd0
mov rax, qword [0x1402b0310]
xor rax, rsp
mov qword [rsp + 0xb0], rax
movzx edx, byte [rcx + 0x41]
xor edi, edi
inc edx
mov dword [rsp + 0x38], edi
xor esi, esi
mov dword [rsp + 0x48], edx
mov rbx, rcx
mov dword [rsp + 0x3c], esi
cmp byte [rcx + 0x3f], sil
jne 0x14015ffab
mov rcx, qword [rcx + 8]
lea r9d, [rdi + 0xa]
mov r8d, 3
sub r8d, edx
mov rax, qword [rcx]
call qword [rax + 0x70]
test eax, eax
jne 0x1401604e5
xor eax, eax
mov qword [rsp + 0xf8], rbp
mov qword [rbx + 0x48], rax
lea rdx, [rsp + 0x58]
mov qword [rbx + 0x50], rax
mov qword [rbx + 0x58], rax
mov qword [rbx + 0x60], rax
mov qword [rbx + 0x68], rax
mov qword [rbx + 0x70], rax
mov rcx, qword [rbx + 0x10]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov ebp, eax
test eax, eax
jne 0x1401604b8
cmp qword [rsp + 0x58], 0x20
mov qword [rsp + 0x100], r12
mov qword [rsp + 0x108], r13
mov qword [rsp + 0xc0], r15
jle 0x1401603da
mov rcx, qword [rbx + 0x10]
lea r8d, [rbp + 0x20]
xor r9d, r9d
lea rdx, [rsp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov ebp, eax
test eax, eax
jne 0x1401604a0
mov ecx, dword [rsp + 0x90]
mov r13d, dword [rsp + 0x98]
bswap ecx
mov eax, ecx
and eax, 0xfffffffe
bswap r13d
cmp eax, 0x377f0682
jne 0x1401603da
lea eax, [r13 - 1]
test r13d, eax
jne 0x1401603da
lea eax, [r13 - 0x200]
cmp eax, 0xfe00
ja 0x1401603da
mov eax, dword [rsp + 0x9c]
lea r12, [rbx + 0x60]
and cl, 1
mov dword [rbx + 0x38], r13d
bswap eax
movzx ecx, cl
lea r8d, [rbp + 0x18]
mov dword [rbx + 0x88], eax
lea rdx, [rsp + 0x90]
mov rax, qword [rsp + 0xa0]
xor r9d, r9d
mov byte [rbx + 0x55], cl
xor ecx, 1
mov qword [rbx + 0x68], rax
mov qword [rsp + 0x20], r12
call fcn.14015fb00
mov eax, dword [rsp + 0xa8]
bswap eax
cmp dword [r12], eax
jne 0x1401603da
mov eax, dword [rsp + 0xac]
bswap eax
cmp dword [rbx + 0x64], eax
jne 0x1401603da
mov eax, dword [rsp + 0x94]
bswap eax
cmp eax, 0x2de218
je 0x14016011e
lea rax, [0x1402471e4]
mov ebp, 0xe
mov ecx, ebp
mov qword [rsp + 0x20], rax
mov r9d, 0xf0ef
lea r8, str.cannot_open_file
lea rdx, str._s_at_line__d_of___.10s_
call fcn.140150ee0
jmp 0x1401604a0
movsxd rcx, r13d
add rcx, 0x8018
call fcn.14014e4f0
mov r15, rax
test rax, rax
jne 0x14016013d
lea ebp, [rax + 7]
jmp 0x1401604a0
add rax, 0x18
movsxd r9, r13d
add r9, rax
mov qword [rsp + 0xc8], r14
mov rax, qword [rsp + 0x58]
lea r11d, [r13 + 0x18]
add rax, 0xffffffffffffffe0
movsxd rcx, r11d
cqo
mov qword [rsp + 0x50], r9
idiv rcx
mov qword [rsp + 0x70], rcx
mov r10, rax
mov qword [rsp + 0x80], rax
add eax, 0x1000
mov esi, r10d
sub rax, 0xfdf
mov dword [rsp + 0x34], edi
shr rax, 0xc
xor r8d, r8d
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x88], rsi
mov eax, edi
mov r14d, r10d
shl eax, 0xc
mov edx, eax
lea rcx, [rax + 0xfde]
add eax, 0xfde
cmp rsi, rcx
mov esi, 1
cmovae r14d, eax
mov dword [rsp + 0x30], r14d
test edi, edi
je 0x1401601d2
lea esi, [rdx - 0x21]
cmp dword [rbx + 0x28], edi
jle 0x1401601f5
mov rax, qword [rbx + 0x30]
movsxd rcx, edi
mov rcx, qword [rax + rcx*8]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x60], rcx
test rcx, rcx
je 0x1401601f5
xor ebp, ebp
jmp 0x14016021e
lea r8, [rsp + 0x60]
mov edx, edi
mov rcx, rbx
call fcn.14015f9b0
mov rcx, qword [rsp + 0x60]
lea r11d, [r13 + 0x18]
mov r8, qword [rsp + 0x40]
mov ebp, eax
mov r9, qword [rsp + 0x50]
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x1401603ba
mov rax, qword [rbx + 0x30]
mov qword [r8 + rax], r9
cmp esi, r14d
ja 0x14016034f
nop dword [rax + rax]
mov rcx, qword [rbx + 0x10]
lea r9d, [rsi - 1]
imul r9, qword [rsp + 0x70]
mov r10, qword [rcx]
mov r8d, r11d
add r9, 0x20
mov rdx, r15
call qword [r10 + 0x10]
mov ebp, eax
test eax, eax
jne 0x14016033c
mov rax, qword [rbx + 0x68]
cmp rax, qword [r15 + 8]
jne 0x14016033c
mov r14d, dword [r15]
bswap r14d
test r14d, r14d
je 0x140160337
xor edi, edi
mov qword [rsp + 0x20], r12
cmp byte [rbx + 0x55], dil
lea r8d, [rbp + 8]
mov r9, r12
mov rdx, r15
sete dil
mov ecx, edi
call fcn.14015fb00
mov r8d, dword [rbx + 0x38]
lea rdx, [r15 + 0x18]
mov r9, r12
mov qword [rsp + 0x20], r12
mov ecx, edi
call fcn.14015fb00
mov eax, dword [r15 + 0x10]
bswap eax
cmp dword [r12], eax
jne 0x140160337
mov eax, dword [r15 + 0x14]
bswap eax
cmp dword [r12 + 4], eax
jne 0x140160337
mov edi, dword [r15 + 4]
mov r8d, r14d
mov edx, esi
mov rcx, rbx
bswap edi
call fcn.14015fdb0
mov ebp, eax
test eax, eax
jne 0x140160337
test edi, edi
je 0x140160321
movzx eax, r13w
mov dword [rbx + 0x58], esi
mov dword [rbx + 0x5c], edi
mov ecx, r13d
mov edx, 0xff00
sar ecx, 0x10
and ax, dx
or cx, ax
mov word [rbx + 0x56], cx
mov eax, dword [r12]
mov dword [rsp + 0x38], eax
mov eax, dword [rbx + 0x64]
mov dword [rsp + 0x3c], eax
mov r14d, dword [rsp + 0x30]
lea r11d, [r13 + 0x18]
inc esi
cmp esi, r14d
jbe 0x140160240
jmp 0x14016033c
mov r14d, dword [rsp + 0x30]
mov edi, dword [rsp + 0x34]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x40]
mov r9, qword [rsp + 0x50]
mov rax, qword [rbx + 0x30]
mov edx, 0x88
mov qword [r8 + rax], rcx
xor eax, eax
test edi, edi
mov r8d, 0x8000
cmove eax, edx
mov edx, 0x7f78
cmove r8d, edx
add rcx, rax
lea rdx, [rax + r9]
call sub.VCRUNTIME140.dll_memcpy
cmp esi, r14d
jbe 0x1401603ba
mov r8, qword [rsp + 0x40]
lea r11d, [r13 + 0x18]
mov r9, qword [rsp + 0x50]
add r8, 8
mov r10, qword [rsp + 0x80]
inc edi
mov rsi, qword [rsp + 0x88]
mov dword [rsp + 0x34], edi
mov qword [rsp + 0x40], r8
cmp edi, dword [rsp + 0x78]
jbe 0x1401601a4
mov rcx, r15
call fcn.14014e560
mov r14, qword [rsp + 0xc8]
test ebp, ebp
jne 0x1401604a0
mov edi, dword [rsp + 0x38]
mov esi, dword [rsp + 0x3c]
mov rcx, rbx
mov dword [rbx + 0x60], edi
mov dword [rbx + 0x64], esi
call fcn.14015fbd0
mov rax, qword [rbx + 0x30]
mov edi, 1
mov rsi, qword [rax]
mov dword [rsi + 0x60], 0
mov eax, dword [rbx + 0x58]
mov dword [rsi + 0x80], eax
mov dword [rsi + 0x64], 0
nop dword [rax + rax]
cmp byte [rbx + 0x3f], 0
je 0x14016041a
xor ebp, ebp
jmp 0x140160437
mov rcx, qword [rbx + 8]
lea edx, [rdi + 3]
mov r9d, 0xa
mov rax, qword [rcx]
lea r8d, [r9 - 9]
call qword [rax + 0x70]
mov ebp, eax
test eax, eax
jne 0x140160472
cmp edi, 1
jne 0x140160448
mov eax, dword [rbx + 0x58]
test eax, eax
je 0x140160448
mov dword [rsi + 0x68], eax
jmp 0x140160453
movsxd rax, edi
mov dword [rsi + rax*4 + 0x64], 0xffffffff
cmp byte [rbx + 0x3f], 0
jne 0x140160477
mov rcx, qword [rbx + 8]
lea edx, [rdi + 3]
mov r9d, 9
mov rax, qword [rcx]
lea r8d, [r9 - 8]
call qword [rax + 0x70]
jmp 0x140160477
cmp eax, 5
jne 0x1401604a0
inc edi
cmp edi, 5
jl 0x140160410
cmp dword [rbx + 0x5c], 0
je 0x1401604a0
mov r9, qword [rbx + 0x80]
lea rdx, str.recovered__d_frames_from_WAL_file__s
mov r8d, dword [rbx + 0x58]
mov ecx, 0x11b
call fcn.140150ee0
mov r13, qword [rsp + 0x108]
mov r12, qword [rsp + 0x100]
mov r15, qword [rsp + 0xc0]
cmp byte [rbx + 0x3f], 0
jne 0x1401604db
mov rcx, qword [rbx + 8]
mov r8d, 3
mov edx, dword [rsp + 0x48]
mov r9d, 9
sub r8d, edx
mov rax, qword [rcx]
call qword [rax + 0x70]
mov eax, ebp
mov rbp, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.1401eb080
add rsp, 0xd0
pop rdi
pop rsi
pop rbx
ret