Function at 0x1800301b0
Capabilities:
Check for software breakpoints
Reference http user-agent string
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xc0
mov rax, qword [0x180143ae0]
xor rax, rsp
mov qword [rbp + 0x1f], rax
lea ebx, [rcx + 0xbf4]
mov qword [rbp - 0x49], r9
xor esi, esi
mov dword [rbp - 0x55], ecx
cmp ecx, ebx
mov rdi, rdx
mov ebx, dword [rbp - 0x51]
lea rdx, [0x180000000]
mov dword [rbp - 0x59], ebx
mov r10, r9
mov r12, r8
mov r13d, ecx
mov r15d, ecx
jae 0x1800307b7
mov eax, dword [rbp - 0x51]
lea rcx, str._of_their_MIME_content_type.__By_default__Subversion_will_only
movzx r14d, word [rbp - 0x59]
lea r8d, [rsi + 0x20]
mov dword [rbp - 0x41], eax
lea r9d, [rsi + 0x4e]
lea eax, [r15 + 0xbf4]
lea r11d, [rsi + 0x54]
cmp r15d, 0x25c
ja 0x180030611
je 0x180030591
cmp r15d, 0x120
ja 0x1800302ff
je 0x18003029c
mov eax, r15d
sub eax, 0x5e
je 0x18003028a
sub eax, 0x18
je 0x180030278
sub eax, 0x63
je 0x1800307ae
cmp eax, 0x2f
jne 0x180030734
jmp 0x18003070a
mov qword [0x180195358], rcx
mov r14d, 0x1a
jmp 0x180030734
lea rcx, [rdi + 0x18]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc dword [rdi + 0x10]
jmp 0x180030714
test r10, r10
jne 0x18003073b
mov esi, 0x11f
nop word [rax + rax]
mov eax, esi
sub eax, 0x11e
je case.0x1800307ac.25
cmp eax, 1
jne 0x1800302ee
mov rax, qword [0x180195358]
lea r9, str.p_Op_Opp_Odp_OXp_OPp_OHp_O_p_O4p_O_p_O
mov edx, 0x61
mov qword [rsp + 0x20], rax
mov rcx, r12
lea r8d, [rdx - 0x60]
call fcn.1800c8a10
mov ebx, 0xffffffff
mov dword [rbp - 0x59], ebx
dec esi
cmp esi, 0x11d
ja 0x1800302b0
xor esi, esi
jmp 0x180030714
mov eax, r15d
sub eax, 0x122
je 0x18003056f
sub eax, 0x90
je 0x18003054d
sub eax, 0x18
je 0x180030337
cmp eax, 2
lea eax, [r13 + 0xbf4]
jne 0x18003073b
mov word [rbp - 2], r8w
jmp 0x18003073b
mov ecx, dword [rdi]
cmp ecx, 0x80
jae 0x18003034a
movzx r14d, cx
jmp 0x18003072d
cmp ecx, 0x100
jae 0x180030384
mov ecx, 0xba
mov eax, ecx
sub eax, 0xb9
je 0x18003036a
cmp eax, 1
jne 0x180030375
add dword [rdi], 0xffffff80
jmp 0x180030375
mov eax, dword [rdi]
movzx r14d, word [rdx + rax*2 + 0xd19d0]
dec ecx
cmp ecx, 0xb8
ja 0x180030357
jmp 0x18003072d
lea eax, [rcx - 0x380]
cmp eax, 0xff
ja 0x1800303a7
add dword [rdi], 0xfffffc80
mov eax, dword [rdi]
movzx r14d, word [rdx + rax*2 + 0xd1ad0]
jmp 0x18003072d
lea eax, [rcx - 0x2000]
cmp eax, 0x33f
ja 0x1800303f6
mov ecx, 0xc9
nop dword [rax]
cmp ecx, 0xc9
je 0x1800303dd
cmp ecx, 0x9c3f
jne 0x1800303e3
mov eax, dword [rdi]
movzx r14d, word [rdx + rax*2 + 0xd1cd0]
jmp 0x1800303e3
add dword [rdi], 0xffffe000
add ecx, 0x9b76
cmp ecx, 0x136ec
jbe 0x1800303c0
jmp 0x18003072d
lea eax, [rcx - 0x2440]
cmp eax, 0x23f
ja 0x180030433
mov ecx, 0x40
mov eax, ecx
sub eax, 0x3f
je 0x18003041c
cmp eax, 1
jne 0x180030427
add dword [rdi], 0xffffdbc0
jmp 0x180030427
mov eax, dword [rdi]
movzx r14d, word [rdx + rax*2 + 0xd2350]
dec ecx
cmp ecx, 0x3e
ja 0x180030408
jmp 0x18003072d
lea eax, [rcx - 0x3000]
cmp eax, 0xff
ja 0x180030456
add dword [rdi], 0xffffd000
mov eax, dword [rdi]
movzx r14d, word [rdx + rax*2 + 0xd27d0]
jmp 0x18003072d
lea eax, [rcx - 0x3200]
cmp eax, 0x1ff
ja 0x1800304a1
mov ecx, 0xbb
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xbb
je 0x18003048b
cmp eax, 0xa
jne 0x180030491
mov eax, dword [rdi]
movzx r14d, word [rdx + rax*2 + 0xd29d0]
jmp 0x180030491
add dword [rdi], 0xffffce00
add ecx, 0xa
cmp ecx, 0xcf
jb 0x180030470
jmp 0x18003072d
lea eax, [rcx - 0x4e00]
cmp eax, 0x51bf
ja 0x1800304de
mov ecx, 0x64
mov eax, ecx
sub eax, 0x63
je 0x1800304c7
cmp eax, 1
jne 0x1800304d2
add dword [rdi], 0xffffb200
jmp 0x1800304d2
mov eax, dword [rdi]
movzx r14d, word [rdx + rax*2 + 0xd2dd0]
dec ecx
cmp ecx, 0x62
ja 0x1800304b3
jmp 0x18003072d
lea eax, [rcx - 0xf900]
cmp eax, 0x13f
ja 0x180030501
add dword [rdi], 0xffff0700
mov eax, dword [rdi]
movzx r14d, word [rdx + rax*2 + 0xddbf0]
jmp 0x18003072d
lea eax, [rcx - 0xff00]
cmp eax, 0xff
ja 0x18003072d
mov ecx, 0xcd
cmp ecx, 0xcd
je 0x180030534
cmp ecx, 0x5c17
jne 0x18003053a
mov eax, dword [rdi]
movzx r14d, word [rdx + rax*2 + 0xdde70]
jmp 0x18003053a
add dword [rdi], 0xffff0100
add ecx, 0x5b4a
cmp ecx, 0xb694
jbe 0x180030517
jmp 0x18003072d
mov qword [rsp + 0x28], rsi
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
mov rdx, r10
mov ecx, 0xd4
call fcn.18009b660
jmp 0x180030714
mov eax, dword [str.Window]
mov dword [rbp - 9], eax
movzx eax, word [0x180136d1c]
mov word [rbp - 5], ax
mov eax, 0x73
mov word [rbp - 3], ax
jmp 0x180030734
mov r9d, dword [r12]
xor r8d, r8d
mov rdx, rdi
lea ecx, [r8 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov dword [rbp - 0x51], eax
cmp eax, 0x102
jne 0x1800305e1
mov eax, 0x9e
cmp eax, 0x9e
je 0x1800305c8
cmp eax, 0x452
je case.0x1800307ac.25
jmp 0x1800305d0
mov ebx, 2
mov dword [rbp - 0x59], ebx
add eax, 0x3b4
cmp eax, 0x768
jbe 0x1800305b4
jmp 0x180030714
cmp eax, 0xffffffff
jne 0x180030714
mov ecx, 0x25
nop
mov eax, ecx
sub eax, 0x24
je case.0x1800307ac.25
cmp eax, 1
jne 0x180030605
mov ebx, esi
mov dword [rbp - 0x59], ebx
dec ecx
cmp ecx, 0x23
ja 0x1800305f0
jmp 0x180030714
cmp r15d, 0x320
ja 0x1800306b1
je 0x180030692
mov eax, r15d
sub eax, 0x274
je 0x18003066f
sub eax, 2
je 0x180030665
sub eax, 0x90
je 0x180030653
cmp eax, 0x18
lea eax, [r13 + 0xbf4]
jne 0x18003073b
mov ebx, 1
mov dword [rbp - 0x59], ebx
jmp 0x18003073b
lea rcx, [rdi + 0x18]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
dec dword [rdi + 0x10]
jmp 0x180030714
mov word [rbp - 1], r9w
jmp 0x180030734
shr r14w, 8
lea eax, [r13 + 0xbf4]
test r14w, r14w
je 0x18003068a
add qword [r10], 2
jmp 0x18003073b
inc qword [r10]
jmp 0x18003073b
movzx eax, word [0x1801259e0]
mov word [rbp - 0x39], ax
movzx eax, byte [0x1801259e2]
mov byte [rbp - 0x37], al
mov word [rbp], r11w
jmp 0x180030734
mov eax, r15d
sub eax, 0x3b0
je 0x1800306f4
sub eax, 0x1a
je 0x1800306dd
cmp eax, 0xaa
jne 0x180030734
mov r8d, 0xa
lea rdx, [rbp - 0x35]
lea ecx, [r8 - 6]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ltoa]
jmp 0x180030714
movzx eax, word [0x180136d64]
mov word [rbp - 0x37], ax
movzx eax, byte [0x180136d66]
mov byte [rbp - 0x35], al
jmp 0x180030734
cmp dword [rbp - 0x51], 1
jne 0x180030707
cmp dword [rdi + 0x10], 0
mov dword [rbp - 0x41], 1
je 0x18003070a
mov dword [rbp - 0x41], esi
lea rcx, [rdi + 0x18]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r10, qword [rbp - 0x49]
lea rdx, [0x180000000]
mov r11d, 0x54
lea r9d, [r11 - 6]
lea r8d, [r11 - 0x34]
lea rcx, str._of_their_MIME_content_type.__By_default__Subversion_will_only
lea eax, [r13 + 0xbf4]
add r15d, 0xaa
cmp r15d, eax
jb 0x180030232
mov edx, dword [rbp - 0x41]
lea r15d, [r13 - 0x12]
mov r14d, r13d
cmp r13d, r15d
jbe 0x180030e2b
mov r12, qword [rbp - 0x49]
lea esi, [r13 - 0x5d]
mov r8d, 0x65
mov r11d, 0x7041
mov r9d, 0x656d
lea r10d, [r8 + 0xf]
nop dword [rax]
cmp esi, 0xc5
ja case.0x1800307ac.2
lea rcx, [0x180000000]
movzx eax, byte [rcx + rsi + 0x31624]
mov ecx, dword [rcx + rax*4 + 0x315d8]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov ecx, dword [rdi]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, dword [rbp - 0x51]
mov dword [rbp - 0x41], edx
jmp 0x18003074e
mov eax, 0xf7
cmp eax, 0xf7
je 0x180030985
add eax, 0x2c62
cmp eax, 0x2c62
jbe 0x1800307c4
mov eax, dword [str.537.]
mov dword [rbp + 7], eax
movzx eax, byte [0x180136d6c]
mov byte [rbp + 0xb], al
jmp case.0x1800307ac.2
mov eax, dword [str.KHTML]
mov dword [rbp + 0xf], eax
movzx eax, word [0x180136d74]
mov word [rbp + 0x13], ax
mov eax, 0x6c
mov word [rbp - 0x51], ax
jmp case.0x1800307ac.2
mov word [rbp - 0x15], r8w
jmp case.0x1800307ac.2
mov dword [rbp - 0x19], 0x6c707041
jmp case.0x1800307ac.2
movzx eax, word [0x180136d78]
mov word [rbp - 0x2e], ax
movzx eax, byte [0x180136d7a]
mov byte [rbp - 0x2c], al
mov eax, 0x43
mov word [rbp - 0x21], ax
jmp case.0x1800307ac.2
mov r8d, 3
mov byte [rbp - 0x30], 0
lea rdx, [0x180134f7c]
lea rcx, [rbp - 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r8d, 0x65
mov r9d, 0x656d
mov r11d, 0x7041
lea r10d, [r8 + 0xf]
jmp case.0x1800307ac.2
mov word [rbp - 0x1d], r9w
jmp case.0x1800307ac.2
mov eax, 0x68
mov word [rbp - 0x20], ax
mov eax, 0x6f72
mov word [rbp - 0x1f], ax
jmp case.0x1800307ac.2
mov byte [rbp - 0x31], 0x47
jmp case.0x1800307ac.2
mov word [rbp - 0x4e], r8w
jmp case.0x1800307ac.2
mov eax, 0x69
mov word [rbp - 0x50], ax
mov eax, 0x6b
mov word [rbp - 0x4f], ax
jmp case.0x1800307ac.2
mov r8d, 0xa
lea rdx, [rbp + 0xb]
lea ecx, [r8 + 0x1a]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
jmp 0x180030869
mov eax, 0x57
mov word [rbp - 0x14], ax
mov word [rbp - 0x13], r8w
jmp case.0x1800307ac.2
mov eax, 0x62
mov word [rbp - 0x12], ax
mov eax, 0x694b
mov word [rbp - 0x11], ax
jmp case.0x1800307ac.2
test edx, edx
je 0x180030947
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
test eax, eax
jne 0x180030947
mov ecx, 0x8f
mov eax, ecx
sub eax, 0x8f
je 0x180030937
cmp eax, 0x73
je case.0x1800307ac.25
jmp 0x18003093c
xor ebx, ebx
mov dword [rbp - 0x59], ebx
add ecx, 0x73
cmp ecx, 0x175
jb 0x180030923
xor eax, eax
xor r8d, r8d
mov qword [rsp + 0x30], rax
xor edx, edx
mov qword [rsp + 0x28], rax
mov rcx, r12
mov qword [rsp + 0x20], rax
lea r9d, [rax + 0x28]
call fcn.1800204b0
jmp 0x180030869
mov word [rbp - 0xf], r10w
dec r14d
dec esi
cmp r14d, r15d
jbe 0x18003098f
mov edx, dword [rbp - 0x41]
jmp 0x180030780
mov eax, 1
jmp 0x1800315b1
mov esi, 0x30
lea r15d, [r13 - 0x111]
mov ebx, 0x6972
lea edx, [rsi + 3]
lea r12d, [rsi - 0x1e]
lea r14d, [rsi + 6]
lea r13d, [rsi + 7]
lea r10d, [rsi + 5]
lea r8d, [rsi + 0x23]
lea r11d, [rsi - 2]
nop dword [rax + rax]
cmp r15d, 0x11
ja case.default.0x1800309e3
lea rcx, [0x180000000]
mov ecx, dword [rcx + r15*4 + 0x316ec]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov r8d, 0xa
mov word [rbp - 0x3e], si
lea rdx, [rbp + 0x17]
mov ecx, 0x1178
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
jmp 0x180030e01
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x180030a2c
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030a24
mov rax, qword [rdi]
mov word [rax + rcx], 0x20
jmp 0x180030a3e
xor r8d, r8d
mov r9b, 0x20
mov rcx, rdi
lea edx, [r8 + 1]
call fcn.180001e40
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x180030a88
lea rax, [rcx + 3]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030a66
mov rax, qword [rdi]
lea rsi, [rax + rcx]
mov r8d, 3
mov rcx, rsi
lea rdx, [0x180136d7c]
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + 3], 0
jmp 0x180030e01
xor r8d, r8d
mov qword [rsp + 0x20], 3
lea r9, [0x180136d7c]
mov rcx, rdi
lea edx, [r8 + 3]
call fcn.180001fa0
jmp 0x180030e01
mov r8d, 0xb
mov word [rbp - 0x24], r14w
lea rdx, str.Mozilla_5.0
mov rcx, rdi
call fcn.180049be0
jmp 0x180030e01
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x180030af4
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030aec
mov rax, qword [rdi]
mov word [rax + rcx], 0x20
jmp 0x180030b06
xor r8d, r8d
mov r9b, 0x20
mov rcx, rdi
lea edx, [r8 + 1]
call fcn.180001e40
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x180030b32
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030b27
mov rax, qword [rdi]
mov word [rax + rcx], 0x28
jmp 0x180030e01
mov r9b, 0x28
jmp 0x180030df2
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x180030b66
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030b5b
mov rax, qword [rdi]
mov word [rax + rcx], 0x20
jmp 0x180030e01
mov r9b, 0x20
jmp 0x180030df2
mov byte [rbp - 0x43], 0
jmp case.default.0x1800309e3
lea rax, [rbp - 9]
mov r14, 0xffffffffffffffff
inc r14
cmp byte [rax + r14], 0
jne 0x180030b82
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x180030bcd
lea rax, [rcx + r14]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030bb3
mov rax, qword [rdi]
lea rsi, [rax + rcx]
mov r8, r14
mov rcx, rsi
lea rdx, [rbp - 9]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rsi], 0
jmp 0x180030be4
lea r9, [rbp - 9]
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, rdi
call fcn.180001fa0
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x180030c16
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030c05
mov rax, qword [rdi]
mov word [rax + rcx], 0x20
mov r14d, 0x36
jmp 0x180030e01
mov r9b, 0x20
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 1]
call fcn.180001e40
mov r14d, 0x36
jmp 0x180030e01
mov dword [rbp - 0x41], 0x2e3139
jmp case.default.0x1800309e3
mov word [rbp - 0x27], r13w
jmp case.default.0x1800309e3
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x180030c90
lea rax, [rcx + 3]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030c71
mov rax, qword [rdi]
lea rsi, [rax + rcx]
mov r8d, 3
mov rcx, rsi
lea rdx, [0x180136d8c]
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + 3], 0
jmp 0x180030caf
xor r8d, r8d
mov qword [rsp + 0x20], 3
lea r9, [0x180136d8c]
mov rcx, rdi
lea edx, [r8 + 3]
call fcn.180001fa0
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x180030cdb
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030cd0
mov rax, qword [rdi]
mov word [rax + rcx], 0x3b
jmp 0x180030e01
mov r9b, 0x3b
jmp 0x180030df2
mov word [rbp - 0x45], bx
jmp case.default.0x1800309e3
mov byte [rbp - 0x1b], 0
jmp case.default.0x1800309e3
mov dword [rbp - 0x48], 0x616661
jmp case.default.0x1800309e3
lea rax, [rbp - 0x39]
mov r14, 0xffffffffffffffff
nop dword [rax]
inc r14
cmp byte [rax + r14], 0
jne 0x180030d10
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x180030d5b
lea rax, [rcx + r14]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030d41
mov rax, qword [rdi]
lea rsi, [rax + rcx]
mov r8, r14
mov rcx, rsi
lea rdx, [rbp - 0x39]
call sub.VCRUNTIME140.dll_memmove
mov byte [r14 + rsi], 0
jmp 0x180030d72
lea r9, [rbp - 0x39]
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, rdi
call fcn.180001fa0
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x180030da1
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030d93
mov rax, qword [rdi]
mov word [rax + rcx], 0x3b
mov r14d, 0x36
jmp 0x180030e01
mov r9b, 0x3b
jmp 0x180030c19
mov word [rbp - 0x29], r10w
mov word [rbp - 0x28], dx
jmp case.default.0x1800309e3
mov word [rbp - 0x49], r8w
jmp case.default.0x1800309e3
mov word [rbp - 0x26], r11w
mov word [rbp - 0x25], dx
jmp case.default.0x1800309e3
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x180030def
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030de7
mov rax, qword [rdi]
mov word [rax + rcx], 0x29
jmp 0x180030e01
mov r9b, 0x29
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 1]
call fcn.180001e40
mov edx, 0x33
mov esi, 0x30
dec r15d
lea r8d, [rsi + 0x23]
lea r10d, [rsi + 5]
lea r11d, [rsi - 2]
sub r12, 1
jne 0x1800309c0
mov ebx, dword [rbp - 0x59]
mov r13d, dword [rbp - 0x55]
lea r12d, [r13 + 0x870]
cmp r13d, r12d
jae case.0x1800307ac.25
nop dword [rax + rax]
cmp r13d, 0x55a
ja 0x180031225
je 0x180031171
cmp r13d, 0x302
ja 0x180031087
je 0x180031025
mov eax, r13d
sub eax, 0x122
je 0x180030f42
sub eax, 0x78
je 0x180030f72
sub eax, 0x78
je 0x180030ece
cmp eax, 0x78
jne 0x1800315a2
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x180030eb7
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030eac
mov rax, qword [rdi]
mov word [rax + rcx], 0x28
jmp 0x1800315a2
mov r9b, 0x28
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 1]
call fcn.180001e40
jmp 0x1800315a2
lea rax, [rbp + 7]
mov r14, 0xffffffffffffffff
nop dword [rax]
inc r14
cmp byte [rax + r14], 0
jne 0x180030ee0
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x180030f2b
lea rax, [rcx + r14]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030f11
mov rax, qword [rdi]
lea rsi, [rax + rcx]
mov r8, r14
mov rcx, rsi
lea rdx, [rbp + 7]
call sub.VCRUNTIME140.dll_memmove
mov byte [r14 + rsi], 0
jmp 0x180030f42
lea r9, [rbp + 7]
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, rdi
call fcn.180001fa0
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x180031117
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030f67
mov rax, qword [rdi]
mov word [rax + rcx], 0x20
jmp 0x1800315a2
lea rax, [rbp - 0x19]
mov r14, 0xffffffffffffffff
nop dword [rax]
inc r14
cmp byte [rax + r14], 0
jne 0x180030f80
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x180030fcb
lea rax, [rcx + r14]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180030fb1
mov rax, qword [rdi]
lea rsi, [rax + rcx]
mov r8, r14
mov rcx, rsi
lea rdx, [rbp - 0x19]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rsi], 0
jmp 0x180030fe2
lea r9, [rbp - 0x19]
xor r8d, r8d
mov qword [rsp + 0x20], r14
mov rdx, r14
mov rcx, rdi
call fcn.180001fa0
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
cmp rcx, rdx
jae 0x18003100e
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180031003
mov rax, qword [rdi]
mov word [rax + rcx], reloc.SHELL32.dll_PathMakeUniqueName
jmp 0x1800315a2
mov r9b, reloc.SHELL32.dll_PathMakeUniqueName
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 1]
call fcn.180001e40
jmp 0x1800315a2
lea rax, [rbp + 0xf]
mov r14, 0xffffffffffffffff
inc r14
cmp byte [rax + r14], 0
jne 0x180031030
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x18003107e
lea rax, [rcx + r14]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180031061
mov rax, qword [rdi]
lea rsi, [rax + rcx]
mov r8, r14
mov rcx, rsi
lea rdx, [rbp + 0xf]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rsi], 0
jmp 0x1800315a2
lea r9, [rbp + 0xf]
jmp 0x18003158f
mov eax, r13d
sub eax, 0x37a
je 0x18003112e
sub eax, 0x78
je 0x180030f42
sub eax, 0x78
je 0x1800310b1
cmp eax, 0x78
jne 0x1800315a2
jmp 0x180030f42
lea rax, [rbp - 0x51]
mov r14, 0xffffffffffffffff
nop dword [rax]
inc r14
cmp byte [rax + r14], 0
jne 0x1800310c0
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x18003110e
lea rax, [rcx + r14]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x1800310f1
mov rax, qword [rdi]
lea rsi, [rax + rcx]
mov r8, r14
mov rcx, rsi
lea rdx, [rbp - 0x51]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rsi], 0
jmp 0x1800315a2
lea r9, [rbp - 0x51]
jmp 0x18003158f
mov r9b, 0x20
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 1]
call fcn.180001e40
jmp 0x1800315a2
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x18003115a
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x18003114f
mov rax, qword [rdi]
mov word [rax + rcx], PathMakeUniqueName
jmp 0x1800315a2
mov r9b, 0x2c
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 1]
call fcn.180001e40
jmp 0x1800315a2
lea rax, [rbp - 0x31]
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x180031180
mov rcx, qword [rdi + 0x18]
mov r14, qword [rdi + 0x10]
mov rax, rcx
sub rax, r14
cmp rsi, rax
ja 0x1800311cb
lea rax, [rsi + r14]
mov r15, rdi
mov qword [rdi + 0x10], rax
cmp rcx, 0x10
jb 0x1800311b0
mov r15, qword [rdi]
lea rcx, [r15 + r14]
mov r8, rsi
lea rdx, [rbp - 0x31]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + r15]
mov byte [rax + r14], 0
jmp 0x1800311e2
lea r9, [rbp - 0x31]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
mov rcx, rdi
call fcn.180001fa0
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x18003120e
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180031203
mov rax, qword [rdi]
mov word [rcx + rax], 0x29
jmp 0x1800315a2
mov r9b, 0x29
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 1]
call fcn.180001e40
jmp 0x1800315a2
cmp r13d, 0x7b2
ja 0x180031478
je 0x1800313d9
mov eax, r13d
sub eax, 0x5d2
je 0x180030f42
sub eax, 0x78
je 0x180031377
sub eax, 0x78
je 0x1800312c7
cmp eax, 0x78
jne 0x1800315a2
lea rax, [rbp + 0x17]
mov r14, 0xffffffffffffffff
nop dword [rax + rax]
inc r14
cmp byte [rax + r14], 0
jne 0x180031270
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x1800312be
lea rax, [rcx + r14]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x1800312a1
mov rax, qword [rdi]
lea rsi, [rax + rcx]
mov r8, r14
mov rcx, rsi
lea rdx, [rbp + 0x17]
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + r14], 0
jmp 0x1800315a2
lea r9, [rbp + 0x17]
jmp 0x18003158f
lea rax, [rbp - 0x41]
mov r14, 0xffffffffffffffff
inc r14
cmp byte [rax + r14], 0
jne 0x1800312d2
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x18003131d
lea rax, [rcx + r14]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180031303
mov rax, qword [rdi]
lea rsi, [rax + rcx]
mov r8, r14
mov rcx, rsi
lea rdx, [rbp - 0x41]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rsi], 0
jmp 0x180031334
lea r9, [rbp - 0x41]
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, rdi
call fcn.180001fa0
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x180031360
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180031355
mov rax, qword [rdi]
mov word [rax + rcx], PathMakeUniqueName
jmp 0x1800315a2
mov r9b, PathMakeUniqueName
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 1]
call fcn.180001e40
jmp 0x1800315a2
lea rax, [rbp - 0x21]
mov r14, 0xffffffffffffffff
inc r14
cmp byte [rax + r14], 0
jne 0x180031382
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x1800313d0
lea rax, [rcx + r14]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x1800313b3
mov rax, qword [rdi]
lea rsi, [rax + rcx]
mov r8, r14
mov rcx, rsi
lea rdx, [rbp - 0x21]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rsi], 0
jmp 0x180030fe2
lea r9, [rbp - 0x21]
jmp 0x180030fcf
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x180031402
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x1800313fa
mov rax, qword [rdi]
mov word [rax + rcx], PathMakeUniqueName
jmp 0x180031414
xor r8d, r8d
mov r9b, PathMakeUniqueName
mov rcx, rdi
lea edx, [r8 + 1]
call fcn.180001e40
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x18003145e
lea rax, [rcx + 3]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x18003143c
mov rax, qword [rdi]
lea rsi, [rax + rcx]
mov r8d, 3
mov rcx, rsi
lea rdx, [0x180136d90]
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + 3], 0
jmp 0x1800315a2
mov qword [rsp + 0x20], 3
lea r9, [0x180136d90]
mov edx, 3
jmp 0x180031597
mov eax, r13d
sub eax, 0x82a
je 0x1800314f7
sub eax, 0x78
je 0x180030fe2
cmp eax, 0x78
jne 0x1800315a2
lea rax, [rbp - 0x29]
mov r14, 0xffffffffffffffff
nop
inc r14
cmp byte [rax + r14], 0
jne 0x1800314a0
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x1800314ee
lea rax, [rcx + r14]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x1800314d1
mov rax, qword [rdi]
lea rsi, [rax + rcx]
mov r8, r14
mov rcx, rsi
lea rdx, [rbp - 0x29]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rsi], 0
jmp 0x1800315a2
lea r9, [rbp - 0x29]
jmp 0x18003158f
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rdi + 0x18]
cmp rcx, rdx
jae 0x180031520
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180031518
mov rax, qword [rdi]
mov word [rax + rcx], 0x20
jmp 0x180031532
xor r8d, r8d
mov r9b, 0x20
mov rcx, rdi
lea edx, [r8 + 1]
call fcn.180001e40
lea rax, [rbp - 0x49]
mov r14, 0xffffffffffffffff
nop dword [rax]
inc r14
cmp byte [rax + r14], 0
jne 0x180031540
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x10]
mov rax, rdx
sub rax, rcx
cmp r14, rax
ja 0x18003158b
lea rax, [rcx + r14]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x180031571
mov rax, qword [rdi]
lea rsi, [rax + rcx]
mov r8, r14
mov rcx, rsi
lea rdx, [rbp - 0x49]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rsi], 0
jmp 0x1800315a2
lea r9, [rbp - 0x49]
mov rdx, r14
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rcx, rdi
call fcn.180001fa0
add r13d, 0x78
cmp r13d, r12d
jb 0x180030e40
mov eax, ebx
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.1800c9c10
mov rbx, qword [rsp + 0x100]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret