Function at 0x1801c23e0
Capabilities:
Compute adler32 checksum

Disassembly:
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r15
sub rsp, 0x70
mov r15, rcx
xor ebp, ebp
mov ecx, 0x20000
mov ebx, ebp
mov edi, r9d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x38], rax
mov rsi, rax
test rax, rax
jne 0x1801c2425
add rsp, 0x70
pop r15
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov eax, 5
mov qword [rsp + 0xb8], r12
cmp edi, eax
mov qword [rsp + 0x68], r13
mov edx, 0xa
mov qword [rsp + 0x60], r14
cmovge eax, edi
xor ecx, ecx
mov dword [rsp + 0x2c], eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c2462
mov qword [rax], 2
lea rbx, [rax + 8]
movsxd rax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov byte [rax + rbx], 0x78
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x1801c24a1
lea eax, [rdx + rdx]
movsxd rdx, eax
lea edi, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, rbp
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c24a1
lea rbx, [rax + 8]
mov dword [rax], edi
movsxd rax, dword [rbx - 4]
mov edi, 3
xor edx, edx
mov dword [rsp + 0x20], edi
mov r8d, 0x20000
mov rcx, rsi
mov r13d, edi
mov byte [rax + rbx], 0x5e
inc dword [rbx - 4]
call sub.VCRUNTIME140.dll_memset
mov r11d, dword [rsp + 0xa8]
xor r10d, r10d
mov r9d, r10d
mov dword [rsp + 0x24], r10d
lea eax, [r11 - 3]
test eax, eax
jle 0x1801c2f11
lea r8, [rdi - 7]
jmp 0x1801c24f5
mov rsi, qword [rsp + 0x38]
movsxd rax, r9d
movzx ecx, byte [rax + r15 + 2]
lea rdx, [rax + r15]
mov qword [rsp + 0x48], rax
mov r15, r10
movzx eax, byte [rdx + 1]
shl eax, 8
shl ecx, 0x10
add ecx, eax
mov qword [rsp + 0x50], rdx
movzx eax, byte [rdx]
add ecx, eax
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x30], r10
lea eax, [rcx*8]
xor ecx, eax
mov eax, ecx
shr eax, 5
add ecx, eax
mov eax, ecx
shl eax, 4
xor ecx, eax
mov eax, ecx
shr eax, 0x11
add ecx, eax
mov eax, ecx
shl eax, 0x19
xor ecx, eax
mov eax, ecx
shr eax, 6
add eax, ecx
and eax, 0x3fff
mov r14, qword [rsi + rax*8]
lea r12, [rsi + rax*8]
mov qword [rsp + 0x40], r12
test r14, r14
je 0x1801c2576
mov eax, dword [r14 - 4]
jmp 0x1801c2579
mov eax, r10d
test r14, r14
movsxd rbp, eax
lea rcx, [r14 - 4]
mov rsi, r10
cmove rcx, r8
test eax, eax
jle 0x1801c2642
mov r12, qword [rsp + 0x48]
lea eax, [r9 - 0x8000]
mov rcx, qword [rsp + 0xa0]
xor r13d, r13d
movsxd r15, eax
nop dword [rax]
mov r10, qword [r14 + rsi*8]
mov rax, r10
sub rax, rcx
cmp rax, r15
jle 0x1801c2627
mov eax, r11d
mov r8d, r13d
sub eax, r9d
mov rdx, r13
test eax, eax
jle 0x1801c2616
mov r9, r12
movsxd r11, eax
sub r9, r10
add r9, rcx
nop dword [rax + rax]
cmp rdx, 0x102
jge 0x1801c2601
lea rcx, [rdx + r10]
movzx eax, byte [r9 + rcx]
cmp byte [rcx], al
jne 0x1801c2601
inc r8d
inc rdx
cmp rdx, r11
jl 0x1801c25e0
mov r9d, dword [rsp + 0x24]
mov rcx, qword [rsp + 0xa0]
mov r11d, dword [rsp + 0xa8]
cmp r8d, dword [rsp + 0x28]
jl 0x1801c2627
mov dword [rsp + 0x28], r8d
mov qword [rsp + 0x30], r10
inc rsi
cmp rsi, rbp
jl 0x1801c25b0
mov r12, qword [rsp + 0x40]
lea rcx, [r14 - 4]
mov r13d, dword [rsp + 0x20]
mov r15, qword [rsp + 0x30]
test r14, r14
je 0x1801c266e
movsxd rsi, dword [rsp + 0x2c]
lea eax, [rsi + rsi]
cmp dword [rcx], eax
jne 0x1801c266e
lea r8, [rsi*8]
mov rcx, r14
lea rdx, [r8 + r14]
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [r12]
mov dword [rax - 4], esi
mov rax, qword [r12]
lea rcx, [rax - 8]
test rax, rax
je 0x1801c26a0
mov eax, dword [rax - 4]
inc eax
cmp eax, dword [rcx]
jl 0x1801c26d0
mov eax, dword [rcx]
lea ebp, [rax*2 + 1]
lea eax, [rbp*8]
movsxd rdx, eax
add rdx, 8
xor r14d, r14d
jmp 0x1801c26ae
mov ebp, 2
xor r14d, r14d
mov ecx, r14d
lea edx, [rbp + 0x16]
mov rsi, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c26d0
cmp qword [r12], 0
jne 0x1801c26c7
mov dword [rax + 4], r14d
lea rcx, [rax + 8]
mov qword [rsi], rcx
mov dword [rax], ebp
mov rcx, qword [r12]
mov rdx, qword [rsp + 0x50]
movsxd rax, dword [rcx - 4]
mov qword [rcx + rax*8], rdx
mov rax, qword [r12]
inc dword [rax - 4]
test r15, r15
je 0x1801c2d6b
movzx eax, byte [rdx + 2]
xor r10d, r10d
movzx ecx, byte [rdx + 3]
mov r14, qword [rsp + 0x38]
shl eax, 8
shl ecx, 0x10
add ecx, eax
movzx eax, byte [rdx + 1]
add ecx, eax
lea eax, [rcx*8]
xor ecx, eax
mov eax, ecx
shr eax, 5
add ecx, eax
mov eax, ecx
shl eax, 4
xor ecx, eax
mov eax, ecx
shr eax, 0x11
add ecx, eax
mov eax, ecx
shl eax, 0x19
xor ecx, eax
mov eax, ecx
shr eax, 6
add eax, ecx
and eax, 0x3fff
mov r14, qword [r14 + rax*8]
test r14, r14
je 0x1801c274f
mov eax, dword [r14 - 4]
jmp 0x1801c2752
mov eax, r10d
movsxd rbp, eax
mov rsi, r10
test eax, eax
jle 0x1801c27f9
mov ecx, dword [rsp + 0x24]
mov r12, qword [rsp + 0x48]
mov r11, qword [rsp + 0xa0]
lea eax, [rcx - 0x7fff]
movsxd r15, eax
nop word [rax + rax]
mov r9, qword [r14 + rsi*8]
mov rax, r9
sub rax, r11
cmp rax, r15
jle 0x1801c27ec
mov eax, dword [rsp + 0xa8]
mov r8d, r10d
sub eax, ecx
mov rdx, r10
dec eax
test eax, eax
jle 0x1801c27e1
movsxd r10, eax
mov rax, r12
sub rax, r9
add r11, rax
cmp rdx, 0x102
jge 0x1801c27d2
lea rcx, [rdx + r9]
movzx eax, byte [r11 + rcx + 1]
cmp byte [rcx], al
jne 0x1801c27d2
inc r8d
inc rdx
cmp rdx, r10
jl 0x1801c27b0
mov ecx, dword [rsp + 0x24]
xor r10d, r10d
mov r11, qword [rsp + 0xa0]
cmp r8d, dword [rsp + 0x28]
jg 0x1801c2d66
inc rsi
cmp rsi, rbp
jl 0x1801c2780
mov r15, qword [rsp + 0x30]
mov r12d, dword [rsp + 0xa0]
mov ecx, r10d
movzx eax, word [0x1803ce75a]
sub r12d, r15d
add r12d, dword [rsp + 0x24]
dec eax
mov r15d, dword [rsp + 0x28]
mov r14, r10
cmp r15d, eax
jle 0x1801c2845
lea rdx, [0x180000000]
nop dword [rax]
movzx eax, word [rdx + r14*2 + 0x3ce75c]
inc r14
dec eax
inc ecx
cmp r15d, eax
jg 0x1801c2830
lea eax, [rcx + 0x101]
mov edx, r10d
cmp eax, 0x8f
jg 0x1801c2906
add ecx, 0x131
mov r8d, 8
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1801c2865
mov ecx, r13d
add r13d, 8
shl edx, cl
or edi, edx
cmp r13d, 8
jl 0x1801c2b13
mov ebp, r13d
shr rbp, 3
mov eax, ebp
neg eax
lea r13d, [r13 + rax*8]
nop dword [rax + rax]
lea rcx, [rbx - 8]
test rbx, rbx
je 0x1801c28bd
mov eax, dword [rbx - 4]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x1801c28ed
lea esi, [rsi*2 + 1]
jmp 0x1801c28c2
mov esi, 2
movsxd rdx, esi
add rdx, 8
test rbx, rbx
cmove rcx, r10
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
xor r10d, r10d
test rax, rax
je 0x1801c28ed
test rbx, rbx
jne 0x1801c28e7
mov dword [rax + 4], r10d
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1801c28a0
jmp 0x1801c2b13
cmp eax, 0xff
jg 0x1801c29bc
add ecx, 0x201
mov r8d, 9
nop dword [rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1801c2920
mov ecx, r13d
add r13d, 9
shl edx, cl
or edi, edx
cmp r13d, 8
jl 0x1801c2b13
mov ebp, r13d
shr rbp, 3
mov eax, ebp
neg eax
lea r13d, [r13 + rax*8]
lea rcx, [rbx - 8]
test rbx, rbx
je 0x1801c2973
mov eax, dword [rbx - 4]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x1801c29a3
lea esi, [rsi*2 + 1]
jmp 0x1801c2978
mov esi, 2
movsxd rdx, esi
add rdx, 8
test rbx, rbx
cmove rcx, r10
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
xor r10d, r10d
test rax, rax
je 0x1801c29a3
test rbx, rbx
jne 0x1801c299d
mov dword [rax + 4], r10d
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1801c2956
jmp 0x1801c2b13
cmp eax, 0x117
jg 0x1801c2a6c
inc ecx
mov r8d, 7
nop
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1801c29d0
mov ecx, r13d
add r13d, 7
shl edx, cl
or edi, edx
cmp r13d, 8
jl 0x1801c2b13
mov ebp, r13d
shr rbp, 3
mov eax, ebp
neg eax
lea r13d, [r13 + rax*8]
lea rcx, [rbx - 8]
test rbx, rbx
je 0x1801c2a23
mov eax, dword [rbx - 4]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x1801c2a53
lea esi, [rsi*2 + 1]
jmp 0x1801c2a28
mov esi, 2
movsxd rdx, esi
add rdx, 8
test rbx, rbx
cmove rcx, r10
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
xor r10d, r10d
test rax, rax
je 0x1801c2a53
test rbx, rbx
jne 0x1801c2a4d
mov dword [rax + 4], r10d
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1801c2a06
jmp 0x1801c2b13
add ecx, 0xa9
mov r8d, 8
nop dword [rax + rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1801c2a80
mov ecx, r13d
add r13d, 8
shl edx, cl
or edi, edx
cmp r13d, 8
jl 0x1801c2b13
mov ebp, r13d
shr rbp, 3
mov eax, ebp
neg eax
lea r13d, [r13 + rax*8]
lea rcx, [rbx - 8]
test rbx, rbx
je 0x1801c2acf
mov eax, dword [rbx - 4]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x1801c2aff
lea esi, [rsi*2 + 1]
jmp 0x1801c2ad4
mov esi, 2
movsxd rdx, esi
add rdx, 8
test rbx, rbx
cmove rcx, r10
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
xor r10d, r10d
test rax, rax
je 0x1801c2aff
test rbx, rbx
jne 0x1801c2af9
mov dword [rax + 4], r10d
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1801c2ab2
lea r9, [0x180000000]
movzx r8d, byte [r14 + r9 + 0x3ce798]
test r8b, r8b
je 0x1801c2bc9
movzx eax, word [r9 + r14*2 + 0x3ce758]
mov ecx, r13d
mov edx, r15d
add r13d, r8d
sub edx, eax
shl edx, cl
or edi, edx
cmp r13d, 8
jl 0x1801c2bc9
mov ebp, r13d
shr rbp, 3
mov eax, ebp
neg eax
lea r13d, [r13 + rax*8]
jmp 0x1801c2b63
xor r10d, r10d
lea rcx, [rbx - 8]
test rbx, rbx
je 0x1801c2b80
mov eax, dword [rbx - 4]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x1801c2bae
lea esi, [rsi*2 + 1]
jmp 0x1801c2b85
mov esi, 2
movsxd rdx, esi
add rdx, 8
test rbx, rbx
cmove rcx, r10
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c2bae
test rbx, rbx
jne 0x1801c2ba8
xor ecx, ecx
mov dword [rax + 4], ecx
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1801c2b60
lea r9, [0x180000000]
movzx eax, word [0x1803ce7ba]
xor edx, edx
dec eax
mov ecx, edx
mov r14d, edx
cmp r12d, eax
jle 0x1801c2bf5
nop
movzx eax, word [r9 + r14*2 + 0x3ce7bc]
inc r14
dec eax
inc ecx
cmp r12d, eax
jg 0x1801c2be0
mov r8d, 5
nop dword [rax + rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1801c2c00
mov ecx, r13d
add r13d, 5
shl edx, cl
or edi, edx
mov dword [rsp + 0x20], r13d
cmp r13d, 8
jl 0x1801c2ca3
mov ebp, r13d
shr rbp, 3
mov eax, ebp
neg eax
xor r15d, r15d
lea r13d, [r13 + rax*8]
mov dword [rsp + 0x20], r13d
nop
lea rcx, [rbx - 8]
test rbx, rbx
je 0x1801c2c5d
mov eax, dword [rbx - 4]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x1801c2c8a
lea esi, [rsi*2 + 1]
jmp 0x1801c2c62
mov esi, 2
movsxd rdx, esi
add rdx, 8
test rbx, rbx
cmove rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c2c8a
test rbx, rbx
jne 0x1801c2c84
mov dword [rax + 4], r15d
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1801c2c40
mov r15d, dword [rsp + 0x28]
lea rax, [0x180000000]
movzx edx, byte [r14 + rax + 0x3ce7f8]
test dl, dl
je 0x1801c2d59
movzx eax, word [rax + r14*2 + 0x3ce7b8]
mov ecx, r13d
sub r12d, eax
add r13d, edx
shl r12d, cl
or edi, r12d
mov dword [rsp + 0x20], r13d
cmp r13d, 8
jl 0x1801c2d59
mov ebp, r13d
shr rbp, 3
mov eax, ebp
neg eax
xor r15d, r15d
lea r13d, [r13 + rax*8]
mov dword [rsp + 0x20], r13d
lea rcx, [rbx - 8]
test rbx, rbx
je 0x1801c2d13
mov eax, dword [rbx - 4]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x1801c2d40
lea esi, [rsi*2 + 1]
jmp 0x1801c2d18
mov esi, 2
movsxd rdx, esi
add rdx, 8
test rbx, rbx
cmove rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c2d40
test rbx, rbx
jne 0x1801c2d3a
mov dword [rax + 4], r15d
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1801c2cf6
mov r15d, dword [rsp + 0x28]
mov r9d, dword [rsp + 0x24]
add r9d, r15d
jmp 0x1801c2ee5
mov rdx, qword [rsp + 0x50]
movzx ecx, byte [rdx]
cmp cl, 0x8f
ja 0x1801c2e27
add ecx, 0x30
xor r14d, r14d
mov edx, r14d
lea r8d, [r14 + 8]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1801c2d84
mov ecx, r13d
add r13d, 8
shl edx, cl
or edi, edx
mov dword [rsp + 0x20], r13d
cmp r13d, 8
jl 0x1801c2edd
mov ebp, r13d
shr rbp, 3
mov eax, ebp
neg eax
lea r13d, [r13 + rax*8]
mov dword [rsp + 0x20], r13d
lea rcx, [rbx - 8]
test rbx, rbx
je 0x1801c2de1
mov eax, dword [rbx - 4]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x1801c2e0e
lea esi, [rsi*2 + 1]
jmp 0x1801c2de6
mov esi, 2
movsxd rdx, esi
add rdx, 8
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c2e0e
test rbx, rbx
jne 0x1801c2e08
mov dword [rax + 4], r14d
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1801c2dc4
jmp 0x1801c2edd
add ecx, 0x100
xor r14d, r14d
mov edx, r14d
lea r8d, [r14 + 9]
nop word [rax + rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1801c2e40
mov ecx, r13d
add r13d, 9
shl edx, cl
or edi, edx
mov dword [rsp + 0x20], r13d
cmp r13d, 8
jl 0x1801c2edd
mov ebp, r13d
shr rbp, 3
mov eax, ebp
neg eax
lea r13d, [r13 + rax*8]
mov dword [rsp + 0x20], r13d
nop dword [rax]
test rbx, rbx
je 0x1801c2ea4
mov eax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x1801c2ec9
lea esi, [rsi*2 + 1]
movsxd rdx, esi
add rdx, 8
jmp 0x1801c2eaf
mov esi, 2
mov rcx, r14
lea edx, [rsi + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c2ec9
test rbx, rbx
jne 0x1801c2ec3
mov dword [rax + 4], r14d
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1801c2e80
mov r9d, dword [rsp + 0x24]
inc r9d
mov r11d, dword [rsp + 0xa8]
mov r10d, 0
mov r15, qword [rsp + 0xa0]
mov dword [rsp + 0x24], r9d
lea eax, [r11 - 3]
lea r8, [r10 - 4]
cmp r9d, eax
jl 0x1801c24f0
movsxd r12, r11d
movsxd r14, r9d
mov qword [rsp + 0x40], r12
cmp r14, r12
jge 0x1801c30a2
movzx ecx, byte [r14 + r15]
mov edx, r10d
cmp cl, 0x8f
ja 0x1801c2fee
add ecx, 0x30
mov r8d, 8
nop
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1801c2f40
mov ecx, r13d
add r13d, 8
shl edx, cl
or edi, edx
cmp r13d, 8
jl 0x1801c3096
mov ebp, r13d
shr rbp, 3
mov eax, ebp
neg eax
xor r15d, r15d
lea r13d, [r13 + rax*8]
nop dword [rax]
lea rcx, [rbx - 8]
test rbx, rbx
je 0x1801c2f9d
mov eax, dword [rbx - 4]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x1801c2fca
lea esi, [rsi*2 + 1]
jmp 0x1801c2fa2
mov esi, 2
movsxd rdx, esi
add rdx, 8
test rbx, rbx
cmove rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c2fca
test rbx, rbx
jne 0x1801c2fc4
mov dword [rax + 4], r15d
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1801c2f80
mov r15, qword [rsp + 0xa0]
xor r10d, r10d
jmp 0x1801c3096
add ecx, 0x100
mov r8d, 9
nop word [rax + rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1801c3000
mov ecx, r13d
add r13d, 9
shl edx, cl
or edi, edx
cmp r13d, 8
jl 0x1801c3096
mov ebp, r13d
shr rbp, 3
mov eax, ebp
neg eax
lea r13d, [r13 + rax*8]
test rbx, rbx
je 0x1801c305a
mov eax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x1801c3082
lea esi, [rsi*2 + 1]
movsxd rdx, esi
add rdx, 8
jmp 0x1801c3065
mov esi, 2
mov rcx, r10
lea edx, [rsi + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
xor r10d, r10d
test rax, rax
je 0x1801c3082
test rbx, rbx
jne 0x1801c307c
mov dword [rax + 4], r10d
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1801c3036
inc r14
cmp r14, r12
jl 0x1801c2f25
mov ecx, r10d
mov edx, r10d
mov r8d, 7
nop
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1801c30b0
mov ecx, r13d
add r13d, 7
shl edx, cl
or edi, edx
cmp r13d, 8
jl 0x1801c3146
mov ebp, r13d
shr rbp, 3
mov eax, ebp
neg eax
lea r13d, [r13 + rax*8]
test rbx, rbx
je 0x1801c310a
mov eax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x1801c3132
lea esi, [rsi*2 + 1]
movsxd rdx, esi
add rdx, 8
jmp 0x1801c3115
mov esi, 2
mov rcx, r10
lea edx, [rsi + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
xor r10d, r10d
test rax, rax
je 0x1801c3132
test rbx, rbx
jne 0x1801c312c
mov dword [rax + 4], r10d
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1801c30e6
test r13d, r13d
je 0x1801c31ec
jmp 0x1801c3163
xor r10d, r10d
inc r13d
cmp r13d, 8
jl 0x1801c31e3
mov ebp, r13d
shr rbp, 3
mov eax, ebp
neg eax
lea r13d, [r13 + rax*8]
jmp 0x1801c3185
xor r10d, r10d
test rbx, rbx
je 0x1801c31a9
mov eax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x1801c31cf
lea esi, [rsi*2 + 1]
movsxd rdx, esi
add rdx, 8
jmp 0x1801c31b4
mov esi, 2
mov rcx, r10
lea edx, [rsi + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c31cf
test rbx, rbx
jne 0x1801c31c9
xor ecx, ecx
mov dword [rax + 4], ecx
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1801c3182
test r13d, r13d
jne 0x1801c3160
mov r14, qword [rsp + 0x38]
mov esi, 0x4000
mov rdi, r14
nop dword [rax]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1801c3212
add rcx, 0xfffffffffffffff8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add rdi, 8
sub rsi, 1
jne 0x1801c3200
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r13d, dword [rsp + 0xa8]
mov eax, 0x80010003
lea ecx, [r13 + 0x7ffe]
imul ecx
add edx, ecx
lea ecx, [r13 + 2]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add edx, eax
lea ecx, [rcx + rdx*4]
add ecx, edx
cmp dword [rbx - 4], ecx
jle 0x1801c3411
xor eax, eax
mov dword [rbx - 4], 2
mov r14d, eax
test r13d, r13d
jle 0x1801c3411
lea rsi, [rbx - 8]
mov eax, 0x7fff
xor r12d, r12d
nop word [rax + rax]
mov ecx, dword [rsi]
mov ebp, r13d
sub ebp, r14d
cmp ebp, eax
mov edi, ebp
cmovg edi, eax
mov eax, dword [rbx - 4]
inc eax
cmp eax, ecx
jl 0x1801c32bb
lea eax, [rcx + rcx]
mov rcx, rsi
movsxd rdx, eax
lea r15d, [rax + 1]
add rdx, 9
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c32bb
lea rbx, [rax + 8]
mov dword [rax], r15d
movsxd rax, dword [rbx - 4]
cmp ebp, edi
sete cl
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x1801c32fe
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c32fe
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x1801c333d
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c333d
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov ecx, edi
sar ecx, 8
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x1801c3380
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c3380
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
lea rsi, [rbx - 8]
movzx ecx, dil
not cl
mov byte [rax + rbx], cl
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov ecx, dword [rsi]
inc eax
cmp eax, ecx
jl 0x1801c33ca
lea eax, [rcx + rcx]
mov rcx, rsi
movsxd rdx, eax
lea ebp, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c33ca
lea rbx, [rax + 8]
mov dword [rax], ebp
mov rsi, rax
movsxd rax, dword [rbx - 4]
mov ecx, edi
mov r15, qword [rsp + 0xa0]
not ecx
sar ecx, 8
movsxd rdx, r14d
mov byte [rax + rbx], cl
add rdx, r15
inc dword [rbx - 4]
movsxd rcx, dword [rbx - 4]
add rcx, rbx
movsxd r8, edi
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx - 4], edi
add r14d, edi
mov eax, 0x7fff
cmp r14d, r13d
jl 0x1801c3280
mov r12, qword [rsp + 0x40]
xor r14d, r14d
mov edi, 1
mov esi, r14d
test r12, r12
jle 0x1801c3492
mov eax, 0x5e6ea9af
mov r9d, r14d
imul r13d
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x15b0
sub r13d, eax
movsxd r8, r13d
mov rcx, r14
test r8, r8
jle 0x1801c3460
lea rdx, [r9 + r15]
nop
movzx eax, byte [rcx + rdx]
inc rcx
add edi, eax
add esi, edi
cmp rcx, r8
jl 0x1801c3450
mov eax, 0x80078071
add r9, r8
mul edi
mov r8d, 0x15b0
shr edx, 0xf
imul eax, edx, 0xffff000f
add edi, eax
mov eax, 0x80078071
mul esi
shr edx, 0xf
imul eax, edx, 0xffff000f
add esi, eax
cmp r9, r12
jl 0x1801c3442
mov eax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov edx, dword [rcx]
inc eax
mov r13, qword [rsp + 0x68]
mov r12, qword [rsp + 0xb8]
cmp eax, edx
jl 0x1801c34d3
lea eax, [rdx + rdx]
movsxd rdx, eax
lea ebp, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c34d3
lea rbx, [rax + 8]
mov dword [rax], ebp
movsxd rax, dword [rbx - 4]
mov ecx, esi
shr ecx, 8
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x1801c3516
lea eax, [rdx + rdx]
movsxd rdx, eax
lea ebp, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c3516
lea rbx, [rax + 8]
mov dword [rax], ebp
movsxd rax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov byte [rax + rbx], sil
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x1801c3555
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c3555
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov ecx, edi
shr ecx, 8
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x1801c3598
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1801c3598
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov rdx, rbx
mov byte [rax + rbx], dil
inc dword [rbx - 4]
movsxd rcx, dword [rbx - 4]
mov rax, qword [rsp + 0xb0]
mov r8, rcx
mov dword [rax], ecx
lea rcx, [rbx - 8]
call sub.VCRUNTIME140.dll_memmove
mov r14, qword [rsp + 0x60]
lea rax, [rbx - 8]
add rsp, 0x70
pop r15
pop rdi
pop rsi
pop rbp
pop rbx
ret