Function at 0x1401c7ae0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov word [rsp + 0x10], dx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb8
mov r8, qword [rcx]
movzx esi, dx
xor edx, edx
mov qword [rsp + 0x90], r8
mov r15, rcx
mov dword [rsp + 0x58], edx
movzx ecx, byte [rcx + 0x40]
mov r14d, 1
mov qword [rsp + 0x98], rdx
movzx ebp, dx
mov dword [rsp + 0x40], ecx
movzx r12d, dx
cmp ecx, r14d
ja 0x1401c7b3b
mov ebx, r14d
jmp 0x1401c7b4b
cmp ecx, 2
mov ebx, 0xa
mov eax, 5
cmove ebx, eax
mov rax, qword [r15 + 0x10]
mov dword [rsp + 0x54], ebx
test rax, rax
je 0x1401c7b65
test si, si
je 0x1401c7b65
mov edi, dword [rax]
mov dword [rsp + 0x50], edi
jmp 0x1401c7b6b
mov edi, edx
mov dword [rsp + 0x50], edx
lea eax, [rcx + 4]
imul eax, ebx
lea ecx, [rdi + rax*8]
add ecx, ecx
movsxd rdx, ecx
mov rcx, qword [r8]
call fcn.140159ad0
mov qword [rsp + 0x88], rax
mov r13, rax
test rax, rax
jne 0x1401c7b9a
lea eax, [r13 + 7]
jmp 0x1401c860f
movsxd r11, dword [rsp + 0x40]
lea rdx, [r13 + 0x18]
xorps xmm0, xmm0
mov eax, ebx
shl rax, 5
mov r10, r13
lea r9, [rax + r13]
mov qword [rsp + 0x68], r13
movups xmmword [r9], xmm0
mov qword [rsp + 0x80], r9
lea r8, [r11*8]
lea rcx, [rax + r9]
mov qword [rsp + 0x70], r11
movups xmmword [r9 + 0x10], xmm0
lea eax, [rbx + rbx]
nop dword [rax]
mov qword [rdx], rcx
lea rdx, [rdx + 0x20]
add rcx, r8
dec eax
test eax, eax
jg 0x1401c7be0
test edi, edi
je 0x1401c7c19
movsxd r8, edi
xor edx, edx
add r8, r8
mov qword [rsp + 0x98], rcx
call fcn.140021160
mov r9, qword [rsp + 0x80]
mov r10, r13
mov r11d, dword [rsp + 0x40]
mov rax, qword [rsp + 0x90]
movzx eax, word [rax + 0xe0]
cmp ax, 0x30
jl 0x1401c7c33
mov eax, gethostbyname
mov word [r9 + 0x10], ax
mov ecx, r14d
test edi, edi
je 0x1401c7c52
test r11b, r11b
movzx eax, dil
mov edx, 0xffffffff
cmovne eax, edx
mov byte [r9 + 0x16], al
xor r8d, r8d
mov dword [rsp + 0x5c], r8d
test r11b, r11b
je 0x1401c8296
xor edi, edi
lea rsi, str._n_n_t_t_b_b_a_a_a
mov qword [rsp + 0x60], rdi
xor edx, edx
mov dword [rsp + 0x44], edx
test ecx, ecx
jle 0x1401c8155
lea rbx, [r9 + 0x10]
mov eax, ecx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0xa0], rax
mov r13, qword [r15 + 0x58]
test r13, r13
je 0x1401c8128
nop
mov r14, qword [rbx - 0x10]
lea r11, [rbx - 0x10]
mov rax, r14
not rax
test qword [r13], rax
jne 0x1401c810d
mov r9, qword [r13 + 8]
test r9, r14
jne 0x1401c810d
mov eax, 0x4000
test dword [r13 + 0x38], eax
je 0x1401c7cda
cmp word [rbx], 3
jl 0x1401c810d
movsx edi, word [r13 + 0x12]
movzx r10d, word [rbx]
mov ecx, edi
movzx r8d, r10w
add r8w, word [r13 + 0x14]
movsx edx, r8w
cmp di, r8w
jl 0x1401c7d19
lea eax, [rdx + 0x31]
cmp ecx, eax
jg 0x1401c7d40
lea eax, [rdx + 0x1f]
cmp ecx, eax
jle 0x1401c7d0b
inc di
jmp 0x1401c7d40
sub ecx, edx
movsxd rax, ecx
movzx ecx, byte [rax + rsi]
add di, cx
jmp 0x1401c7d40
lea eax, [rdi + 0x31]
cmp edx, eax
jle 0x1401c7d26
movzx edi, r8w
jmp 0x1401c7d40
lea eax, [rdi + 0x1f]
cmp edx, eax
jle 0x1401c7d33
lea edi, [r8 + 1]
jmp 0x1401c7d40
sub edx, ecx
movsxd rax, edx
movzx edi, byte [rax + rsi]
add di, r8w
movsx r8d, word [rbx + 4]
movsx ecx, di
mov edx, r8d
cmp di, r8w
jl 0x1401c7d74
lea eax, [r8 + 0x31]
cmp ecx, eax
jg 0x1401c7d9b
lea eax, [r8 + 0x1f]
cmp ecx, eax
jle 0x1401c7d66
inc di
jmp 0x1401c7d9b
sub ecx, edx
movsxd rax, ecx
movzx eax, byte [rax + rsi]
add di, ax
jmp 0x1401c7d9b
lea eax, [rcx + 0x31]
cmp edx, eax
jle 0x1401c7d81
movzx edi, r8w
jmp 0x1401c7d9b
lea eax, [rcx + 0x1f]
cmp edx, eax
jle 0x1401c7d8e
lea edi, [r8 + 1]
jmp 0x1401c7d9b
sub edx, ecx
movsxd rax, edx
movzx edi, byte [rax + rsi]
add di, r8w
add r10w, word [r13 + 0x16]
or r14, r9
movzx esi, byte [rbx + 6]
mov word [rsp + 0x118], r10w
test sil, sil
jns 0x1401c7e08
movzx r9d, word [r15 + 0x3c]
lea rax, [rsp + 0x78]
mov rdx, qword [r15 + 0x10]
lea rbx, [r15 + 0x3c]
mov qword [rsp + 0x30], rax
mov r8, r11
mov eax, dword [rsp + 0x5c]
mov rcx, r15
mov qword [rsp + 0x28], r13
mov word [rsp + 0x20], ax
mov qword [rsp + 0x78], 0
call fcn.1401c70b0
mov r15, qword [rsp + 0x78]
movzx esi, al
test al, al
js 0x1401c7f84
mov rcx, qword [rsp + 0x100]
jmp 0x1401c7e18
mov rcx, qword [rsp + 0x100]
mov r15, qword [rbx - 8]
lea rbx, [rcx + 0x3c]
movzx r10d, sil
cmp r10d, dword [rsp + 0x50]
jge 0x1401c7f84
mov rdx, qword [rsp + 0x98]
movzx r8d, word [rdx + r10*2]
lea r11, [rdx + r10*2]
test r8w, r8w
jne 0x1401c7f03
mov rax, qword [rcx + 0x20]
movzx r9d, word [rsp + 0x108]
mov rcx, qword [rax + 0x20]
mov eax, 0x88888889
mov r8d, dword [rcx]
add r8d, 0x3b
imul r8d
add edx, r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsxd rcx, edx
call fcn.140179510
movzx ecx, r9w
lea r8d, [rcx + rax]
test sil, sil
je 0x1401c7ea7
mov ecx, dword [rsp + 0x50]
sub ecx, r10d
imul eax, ecx, 0x64
cdq
idiv dword [rsp + 0x50]
movsxd rcx, eax
call fcn.140179510
sub ax, 0x42
movzx ecx, r9w
add r8w, ax
movzx eax, word [rbx]
bt ax, 0xe
jae 0x1401c7ed5
lea eax, [r8 + 0xa]
test sil, sil
lea r8d, [rax + 6]
cmove r8w, ax
mov rax, qword [rsp + 0x100]
cmp word [rax + 0x3e], cx
cmovl r9w, word [rax + 0x3e]
jmp 0x1401c7ee6
bt ax, 8
jae 0x1401c7ee6
cmp cx, 0xa
jle 0x1401c7eff
lea r9d, [rcx - 0xa]
cmp r9w, 0xa
jle 0x1401c7eff
movsx rcx, r9w
call fcn.140179510
sub r8w, 0x21
add r8w, ax
mov word [r11], r8w
movsx ecx, di
movsx edx, r8w
cmp di, r8w
jl 0x1401c7f50
lea eax, [rdx + 0x31]
cmp ecx, eax
jle 0x1401c7f22
movzx r8d, di
add r8w, 3
jmp 0x1401c7f8c
lea eax, [rdx + 0x1f]
cmp ecx, eax
jle 0x1401c7f34
lea r8d, [rdi + 1]
add r8w, 3
jmp 0x1401c7f8c
sub ecx, edx
movsxd rax, ecx
lea rcx, str._n_n_t_t_b_b_a_a_a
movzx r8d, byte [rax + rcx]
add r8w, di
add r8w, 3
jmp 0x1401c7f8c
lea eax, [rcx + 0x31]
cmp edx, eax
jg 0x1401c7f7d
lea eax, [rcx + 0x1f]
cmp edx, eax
jle 0x1401c7f69
inc r8w
add r8w, 3
jmp 0x1401c7f8c
sub edx, ecx
lea rcx, str._n_n_t_t_b_b_a_a_a
movsxd rax, edx
movzx ecx, byte [rax + rcx]
add r8w, cx
add r8w, 3
jmp 0x1401c7f8c
movzx r8d, di
add di, 0xfffe
mov r10, qword [rsp + 0x68]
xor ecx, ecx
mov edx, dword [rsp + 0x44]
mov rbx, r10
test edx, edx
jle 0x1401c7fbc
nop
cmp qword [rbx], r14
jne 0x1401c7fb2
movzx eax, sil
xor al, byte [rbx + 0x16]
jge 0x1401c80c1
inc ecx
add rbx, 0x20
cmp ecx, edx
jl 0x1401c7fa0
mov r9d, dword [rsp + 0x54]
cmp edx, r9d
jl 0x1401c7fdc
cmp r8w, bp
jg 0x1401c80f4
jne 0x1401c7fdc
cmp di, r12w
jge 0x1401c80f4
movzx ecx, word [rsp + 0x118]
cmp edx, r9d
mov eax, edx
cmovge eax, dword [rsp + 0x58]
movsxd rbx, eax
lea eax, [rdx + 1]
shl rbx, 5
add rbx, r10
cmp edx, r9d
cmovge eax, edx
mov dword [rsp + 0x44], eax
mov rdx, qword [rsp + 0x48]
mov rax, qword [rdx - 0x10]
or rax, qword [r13 + 8]
mov word [rbx + 0x14], di
mov rdi, qword [rsp + 0x60]
mov word [rbx + 0x10], cx
mov rcx, qword [rbx + 0x18]
mov word [rbx + 0x12], r8w
mov r8, rdi
mov qword [rbx], rax
mov qword [rbx + 8], r15
mov byte [rbx + 0x16], sil
mov rdx, qword [rdx + 8]
call fcn.140022750
mov rax, qword [rbx + 0x18]
mov r14d, 1
mov edx, dword [rsp + 0x44]
mov r9d, dword [rsp + 0x54]
mov r10, qword [rsp + 0x68]
mov qword [rdi + rax], r13
cmp edx, r9d
jl 0x1401c80ab
movzx ebp, word [r10 + 0x12]
mov edx, r14d
movzx r12d, word [r10 + 0x10]
mov dword [rsp + 0x58], 0
cmp r9d, edx
jbe 0x1401c80a7
lea rax, [r10 + 0x34]
nop
movzx ecx, word [rax - 2]
cmp cx, bp
jg 0x1401c8091
jne 0x1401c809c
cmp word [rax], r12w
jle 0x1401c809c
movzx r12d, word [rax]
movzx ebp, cx
mov dword [rsp + 0x58], edx
inc edx
add rax, 0x20
cmp edx, r9d
jl 0x1401c8080
mov edx, dword [rsp + 0x44]
mov rbx, qword [rsp + 0x48]
lea rsi, str._n_n_t_t_b_b_a_a_a
mov r15, qword [rsp + 0x100]
jmp 0x1401c8113
cmp ecx, edx
jge 0x1401c7fbc
cmp word [rbx + 0x12], r8w
jl 0x1401c80f4
movzx ecx, word [rsp + 0x118]
jne 0x1401c8005
cmp word [rbx + 0x10], cx
jl 0x1401c80f4
jne 0x1401c8005
cmp word [rbx + 0x14], di
jg 0x1401c8005
mov rdi, qword [rsp + 0x60]
lea rsi, str._n_n_t_t_b_b_a_a_a
mov r15, qword [rsp + 0x100]
mov rbx, qword [rsp + 0x48]
mov r14d, 1
mov r13, qword [r13 + 0x50]
test r13, r13
jne 0x1401c7ca0
mov rax, qword [rsp + 0xa0]
add rbx, 0x20
sub rax, 1
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0xa0], rax
jne 0x1401c7c92
mov r8d, dword [rsp + 0x5c]
mov r9, qword [rsp + 0x80]
mov r11d, dword [rsp + 0x40]
mov rax, r10
mov qword [rsp + 0x68], r9
inc r8d
mov qword [rsp + 0x80], rax
add rdi, 8
mov dword [rsp + 0x5c], r8d
mov qword [rsp + 0x60], rdi
mov r10, r9
mov r9, rax
mov ecx, edx
cmp r8d, r11d
jl 0x1401c7c71
test edx, edx
jne 0x1401c8286
mov rbx, qword [rsp + 0x90]
lea rdx, str.no_query_solution
mov rcx, rbx
call fcn.14015cc50
mov rcx, qword [rbx]
mov rbx, qword [rsp + 0x88]
test rcx, rcx
je 0x1401c821d
cmp rbx, qword [rcx + 0x1f0]
jae 0x1401c8203
cmp rbx, qword [rcx + 0x1e0]
jb 0x1401c81e1
mov rax, qword [rcx + 0x1d8]
mov qword [rbx], rax
mov eax, r14d
mov qword [rcx + 0x1d8], rbx
jmp 0x1401c860f
cmp rbx, qword [rcx + 0x1e8]
jb 0x1401c8203
mov rax, qword [rcx + 0x1c8]
mov qword [rbx], rax
mov eax, r14d
mov qword [rcx + 0x1c8], rbx
jmp 0x1401c860f
cmp qword [rcx + 0x308], 0
je 0x1401c821d
mov rdx, rbx
call fcn.1401321c0
mov eax, r14d
jmp 0x1401c860f
cmp dword [reloc.WS2_32.dll_accept], 0
je 0x1401c8275
mov rcx, qword [0x1402d5590]
test rcx, rcx
je 0x1401c8238
call qword [0x1402c8de0]
mov rcx, rbx
call qword [0x1402c8d98]
dec qword [0x1402d5528]
movsxd rcx, eax
sub qword [0x1402d54e0], rcx
mov rcx, rbx
call qword [0x1402c8d88]
mov rcx, qword [0x1402d5590]
test rcx, rcx
je 0x1401c827e
call qword [0x1402c8df0]
mov eax, r14d
jmp 0x1401c860f
mov rcx, rbx
call qword [0x1402c8d88]
mov eax, r14d
jmp 0x1401c860f
movzx esi, word [rsp + 0x108]
mov r13, qword [rsp + 0x88]
movsxd rdx, ecx
mov rbx, r9
cmp rdx, 1
jle 0x1401c82d0
lea rcx, [r9 + 0x32]
dec rdx
nop dword [rax]
movzx eax, word [rcx]
cmp word [rbx + 0x12], ax
jle 0x1401c82c3
movsxd rbx, r14d
shl rbx, 5
add rbx, r9
inc r14d
add rcx, 0x20
sub rdx, 1
jne 0x1401c82b0
test r11b, r11b
je 0x1401c8316
xor r8d, r8d
mov r9d, r11d
lea rdx, [r15 + 0x3a0]
mov rax, qword [rbx + 0x18]
lea rdx, [rdx + 0x70]
lea r8, [r8 + 8]
mov rcx, qword [r8 + rax - 8]
mov qword [rdx - 0x50], rcx
movzx eax, byte [rcx + 0x10]
imul rcx, rax, 0x68
mov byte [rdx - 0x70], al
mov rax, qword [r15 + 8]
mov ecx, dword [rcx + rax + 0x4c]
mov dword [rdx - 0xac], ecx
sub r9, 1
jne 0x1401c82e2
movzx eax, word [r15 + 0x3c]
mov ecx, 0x180
and ax, cx
mov ecx, 0x100
cmp ax, cx
jne 0x1401c838e
cmp byte [r15 + 0x43], 0
jne 0x1401c838e
mov rbp, qword [rsp + 0x70]
test si, si
je 0x1401c8393
mov rax, qword [rbx + 0x18]
lea ecx, [r11 - 1]
lea rdx, [rsp + 0x100]
mov r9d, pe_nt_image_headers64
mov qword [rsp + 0x30], rdx
mov r8, rbx
mov rdx, qword [r15 + 0x18]
mov rax, qword [rax + rbp*8 - 8]
mov qword [rsp + 0x28], rax
mov word [rsp + 0x20], cx
mov rcx, r15
call fcn.1401c70b0
mov r11d, dword [rsp + 0x40]
movsx ecx, al
mov rax, qword [r15 + 0x18]
cmp ecx, dword [rax]
jne 0x1401c8393
mov byte [r15 + 0x43], 2
jmp 0x1401c8393
mov rbp, qword [rsp + 0x70]
mov ecx, dword [r15 + 0x44]
mov r10, qword [r15 + 0x10]
and ecx, 0xfffffffb
mov dword [r15 + 0x44], ecx
test r10, r10
je 0x1401c853f
movzx r9d, word [r15 + 0x3c]
movsx r8d, byte [rbx + 0x16]
mov byte [r15 + 0x41], r8b
test r9b, r9b
jns 0x1401c83f6
movsx eax, byte [rbx + 0x16]
cmp eax, dword [r10]
jne 0x1401c83cc
mov byte [r15 + 0x43], 2
mov rax, qword [r15 + 0x20]
mov rcx, qword [rax + 0x48]
test rcx, rcx
je 0x1401c83ee
mov edx, dword [rcx]
cmp r8d, edx
movzx r8d, byte [r15 + 0x41]
movzx eax, dl
cmovg r8d, eax
mov byte [r15 + 0x41], r8b
mov rdx, r10
jmp 0x1401c84c7
mov rax, qword [rbx + 8]
mov rdx, r10
mov qword [r15 + 0x68], rax
test r8b, r8b
jg 0x1401c84a3
mov byte [r15 + 0x41], 0
test r11b, r11b
je 0x1401c84c7
mov rax, qword [rbx + 0x18]
mov r11, qword [rax + rbp*8 - 8]
mov eax, dword [r11 + 0x38]
and eax, 0x104
cmp eax, 0x104
setne cl
bt dword [r11 + 0x38], 0xc
setae al
test al, cl
je 0x1401c849c
mov eax, dword [rsp + 0x40]
lea rcx, [rsp + 0x100]
mov qword [rsp + 0x30], rcx
dec eax
mov qword [rsp + 0x28], r11
mov rcx, r15
mov r9d, 0x800
mov word [rsp + 0x20], ax
mov r8, rbx
mov qword [rsp + 0x100], 0
call fcn.1401c70b0
mov rdx, qword [r15 + 0x10]
mov r11d, dword [rsp + 0x40]
movsx ecx, al
cmp ecx, dword [rdx]
jne 0x1401c84c7
mov rax, qword [rsp + 0x100]
or dword [r15 + 0x44], 4
mov qword [r15 + 0x68], rax
jmp 0x1401c84c7
mov r11d, dword [rsp + 0x40]
jmp 0x1401c84c7
lea r14, [r15 + 0x68]
test r11b, r11b
je 0x1401c84cb
lea r14, [r15 + 0x68]
cmp r8b, 1
jne 0x1401c84cb
lea r14, [r15 + 0x68]
test r9b, 3
je 0x1401c84cb
or ecx, 4
mov dword [r15 + 0x44], ecx
lea r14, [r15 + 0x68]
mov eax, 0x200
test word [r15 + 0x3c], ax
je 0x1401c853f
movsx eax, byte [r15 + 0x41]
cmp eax, dword [rdx]
jne 0x1401c853f
test r11b, r11b
je 0x1401c853f
mov rax, qword [rbx + 0x18]
lea rcx, [rsp + 0x100]
mov qword [rsp + 0x30], rcx
dec r11w
xor r9d, r9d
mov qword [rsp + 0x100], 0
mov r8, rbx
mov rcx, r15
mov rax, qword [rax + rbp*8 - 8]
mov qword [rsp + 0x28], rax
mov word [rsp + 0x20], r11w
call fcn.1401c70b0
movsx ecx, al
mov rax, qword [r15 + 0x10]
cmp ecx, dword [rax]
jne 0x1401c853f
mov rax, qword [rsp + 0x100]
or dword [r15 + 0x44], 8
mov qword [r14], rax
movzx eax, word [rbx + 0x10]
mov word [r15 + 0x48], ax
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax]
test rcx, rcx
je 0x1401c85b2
cmp r13, qword [rcx + 0x1f0]
jae 0x1401c859e
cmp r13, qword [rcx + 0x1e0]
jb 0x1401c8581
mov rax, qword [rcx + 0x1d8]
mov qword [r13], rax
mov qword [rcx + 0x1d8], r13
jmp 0x1401c860d
cmp r13, qword [rcx + 0x1e8]
jb 0x1401c859e
mov rax, qword [rcx + 0x1c8]
mov qword [r13], rax
mov qword [rcx + 0x1c8], r13
jmp 0x1401c860d
cmp qword [rcx + 0x308], 0
je 0x1401c85b2
mov rdx, r13
call fcn.1401321c0
jmp 0x1401c860d
cmp dword [reloc.WS2_32.dll_accept], 0
je 0x1401c8604
mov rcx, qword [0x1402d5590]
test rcx, rcx
je 0x1401c85cd
call qword [0x1402c8de0]
mov rcx, r13
call qword [0x1402c8d98]
dec qword [0x1402d5528]
movsxd rcx, eax
sub qword [0x1402d54e0], rcx
mov rcx, r13
call qword [0x1402c8d88]
mov rcx, qword [0x1402d5590]
test rcx, rcx
je 0x1401c860d
call qword [0x1402c8df0]
jmp 0x1401c860d
mov rcx, r13
call qword [0x1402c8d88]
xor eax, eax
add rsp, 0xb8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret