Function at 0x180016a20
Capabilities:
Delete file
Reference http user-agent string

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x180090f80]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x40], r9
mov r13, r8
mov qword [rbp - 0x68], r8
mov rsi, rdx
mov r15d, ecx
mov dword [rsp + 0x38], ecx
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
xor edi, edi
mov qword [rbp - 0x48], rdi
lea eax, [rcx - 0xe]
lea rdx, [0x180000000]
movzx r8d, word [rsp + 0x30]
mov dword [rsp + 0x34], r8d
cmp ecx, eax
jbe 0x180016d95
lea ebx, [rcx - 0x72]
mov edi, 0x302e
mov r14d, 0xe
lea r13d, [r14 + 0x27]
movzx eax, byte [rsp + 0x30]
mov byte [rsp + 0x30], al
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
jmp 0x180016ad7
lea rdx, [0x180000000]
cmp ebx, 0x22
ja case.0x180016af2.14
movzx eax, byte [rdx + rbx + 0x17e88]
mov ecx, dword [rdx + rax*4 + 0x17e4c]
add rcx, rdx
jmp rcx
mov word [rbp - 0x18], r13w
mov word [rbp - 0x17], di
mov byte [rbp - 0x15], 0
mov r8d, 5
lea rdx, [0x18007c342]
lea rcx, [rbp]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 5], 0
mov r8d, dword [rsp + 0x34]
jmp case.0x180016af2.14
mov dword [rsi + 4], 0
jmp case.0x180016af2.14
lea rcx, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r8d, dword [rsp + 0x34]
jmp case.0x180016af2.14
mov dword [rbp - 0x20], 0x697a6f4d
mov dword [rbp - 0x1c], 0x2f616c6c
jmp case.0x180016af2.14
mov byte [rbp - 0xc], 0
mov r8d, 3
lea rdx, [0x18007c36e]
lea rcx, [rbp - 0x10]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
movzx eax, word [0x18007c395]
mov word [rbp - 9], ax
movzx eax, byte [0x18007c397]
mov byte [rbp - 7], al
mov r8d, dword [rsp + 0x34]
jmp case.0x180016af2.14
mov byte [rbp - 6], 0
mov r8d, 4
lea rdx, [0x18007c3c4]
lea rcx, [rbp - 0x10]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov dl, 1
mov byte [rsp + 0x30], dl
mov r8d, dword [rsp + 0x34]
jmp 0x180016d75
mov qword [rsp + 0x20], 0
mov r9d, 0x19
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x60]
call fcn.18004c1f0
movsx eax, word [rsp + 0x34]
lea rcx, [rbp - 0x10]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor edx, edx
lea rcx, [rdx - 1]
lea r8d, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov qword [rsp + 0x50], rax
mov r8d, dword [rsp + 0x34]
jmp case.0x180016af2.14
mov r8d, 2
lea rdx, [0x18007c425]
lea rcx, [rbp]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 4
lea rdx, [0x18007b4b4]
lea rcx, [rbp - 0x38]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r8d, 0xa
lea rdx, [rbp - 0x35]
lea ecx, [r8 + 0x36]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
mov eax, 0x41
mov word [rbp - 0x30], ax
mov r8d, dword [rsp + 0x34]
jmp case.0x180016af2.14
mov dword [rbp - 0x2f], 0x6c7070
lea rcx, [rbp - 0x30]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180016c73
movzx eax, word [0x1800797fc]
mov word [rcx], ax
movzx eax, word [0x18007c438]
mov word [rbp - 0x2b], ax
movzx eax, byte [0x18007c43a]
mov byte [rbp - 0x29], al
jmp case.0x180016af2.14
mov eax, dword [0x18007c43c]
mov dword [rbp + 0x10], eax
movzx eax, word [0x18007c440]
mov word [rbp + 0x14], ax
lea rcx, [rbp + 0x10]
sub rcx, 2
nop dword [rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x180016cc0
mov eax, dword [0x18007c444]
mov dword [rcx], eax
movzx eax, word [0x18007c448]
mov word [rcx + 4], ax
mov r8d, 4
lea rdx, str.InVi
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov r8d, 7
lea rdx, str.sualSt
lea rcx, [rbp + 0x20]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
movsd xmm0, qword [str.u_io]
movsd qword [rbp + 0x2c], xmm0
movzx eax, word [0x18007c478]
mov word [rbp + 0x34], ax
mov r8d, dword [rsp + 0x34]
jmp case.0x180016af2.14
movzx eax, word [0x18007c48e]
mov word [rbp - 0xf], ax
movzx eax, byte [0x18007c490]
mov byte [rbp - 0xd], al
jmp case.0x180016af2.14
mov byte [rbp - 0x10], 0x46
jmp case.0x180016af2.14
mov r8d, 3
lea rdx, [0x18007c4bd]
lea rcx, [rbp]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, dword [rsp + 0x34]
jmp case.0x180016af2.14
mov r8d, 0x100
mov dword [rsp + 0x34], r8d
movzx edx, byte [rsp + 0x30]
dec ebx
sub r14, 1
jne 0x180016ad0
mov rdi, qword [rbp - 0x48]
mov r13, qword [rbp - 0x68]
mov r15d, dword [rsp + 0x38]
mov r9, qword [rsp + 0x40]
jmp 0x180016da8
movzx edx, byte [rsp + 0x30]
mov byte [rsp + 0x30], dl
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov r12d, r15d
lea r14d, [r15 + 0x7fc]
mov dword [rsp + 0x48], r14d
cmp r15d, r14d
jae 0x180016f1b
mov eax, 0x5448
mov ecx, 0x33
lea ebx, [rcx + 0x20]
lea r10d, [rcx - 5]
lea r11d, [rcx - 3]
mov r15d, 0x6661
nop dword [rax + rax]
cmp r12d, 0x36e
ja 0x1800170f1
je 0x1800170c7
cmp r12d, 0x126
ja 0x18001706c
je 0x180017063
mov eax, r12d
sub eax, 0x84
je 0x180016fd1
sub eax, 0x10
je 0x180016f80
cmp eax, 0x82
jne 0x180016efc
mov rbx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x180016e35
mov rbx, qword [rsi]
mov rcx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x180016e42
mov rcx, qword [rsi]
add rcx, qword [rsi + 0x10]
cmp rbx, rcx
je 0x180016ed5
mov r15d, 0x75
cmp r15d, 0x75
jne 0x180016ebd
lea r14, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae r14, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
test r8, r8
je 0x180016e8b
movsx edx, byte [rbx]
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x180016e8b
sub rax, r14
jmp 0x180016e92
mov rax, 0xffffffffffffffff
xor ecx, ecx
cmp rax, 0xffffffffffffffff
cmovne rcx, rax
movzx edx, byte [rdi]
call qword [r13]
inc rdi
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae rcx, qword [rsp + 0x60]
movzx eax, byte [rcx + rax]
mov byte [rbx], al
add r15d, 0xbe2
cmp r15d, 0xbe2
jbe 0x180016e55
inc rbx
jmp 0x180016e35
mov r14d, dword [rsp + 0x48]
movzx edx, byte [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov ebx, 0x53
lea r10d, [rbx - 0x25]
lea r11d, [rbx - 0x23]
mov r15d, 0x6661
mov ecx, 0x33
mov eax, 0x5448
add r12d, 0x92
cmp r12d, r14d
mov r9, qword [rsp + 0x40]
jb 0x180016de0
mov r15d, dword [rsp + 0x38]
lea r14d, [r15 + 0x1f0]
cmp r15d, r14d
jae 0x180017535
mov r12d, 0x3739
lea r13, [0x180000000]
nop dword [rax + rax]
cmp r15d, 0x18c
ja 0x180017713
je 0x180017660
lea eax, [r15 - 0x94]
cmp eax, 0xd9
ja case.0x180017739.434
lea rdx, [0x180000000]
movzx eax, byte [rdx + rax + 0x17ed0]
mov ecx, dword [rdx + rax*4 + 0x17eac]
add rcx, rdx
jmp rcx
lea rcx, [rbp - 0x30]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x180016f87
movzx eax, word [0x18007c544]
mov word [rcx], ax
mov dword [rbp - 0x28], 0x74694b
mov r8d, 5
lea rdx, [0x18007c579]
lea rcx, [rbp - 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
movzx edx, byte [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov r10d, 0x2e
lea r11d, [r10 + 2]
jmp 0x180016ef7
mov rdi, r9
cmp qword [r9 + 0x18], 0x10
jb 0x180016fde
mov rdi, qword [r9]
xor ecx, ecx
movzx eax, dl
mov r15, qword [rsp + 0x50]
test r15, r15
cmovne ecx, eax
movzx edx, cl
mov byte [rsp + 0x30], cl
test cl, cl
je 0x180016ef1
movsx rax, r8w
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf001f
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, rax
test rax, rax
jne 0x180017036
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor dl, dl
mov byte [rsp + 0x30], dl
jmp 0x180016edf
mov r8d, 9
lea r9, [rsp + 0x58]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.dbghelp.dll_ImageDirectoryEntryToData]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180016eda
mov byte [rbp - 0x3b], 0x36
jmp 0x180016f01
cmp r12d, 0x1b8
je 0x1800170b8
cmp r12d, 0x24a
je 0x1800170af
cmp r12d, 0x2dc
jne 0x180016f01
mov byte [rbp - 0x75], 0
mov r8d, 2
lea rdx, [0x18007c4f7]
lea rcx, [rbp - 0x75]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp - 0x73], 0
jmp 0x180016fb8
mov word [rbp - 0x77], ax
jmp 0x180016f01
mov byte [rbp - 0x3a], 0
mov word [rbp - 0x78], 0x4b
jmp 0x180016f01
mov eax, dword [str.like]
mov dword [rbp - 0x58], eax
movzx eax, byte [0x18007c540]
mov byte [rbp - 0x54], al
mov eax, 0x47
mov word [rbp - 0x60], ax
mov eax, 0x6365
mov word [rbp - 0x5f], ax
jmp 0x180016efc
cmp r12d, 0x5b6
ja 0x180017183
je 0x180017174
cmp r12d, 0x400
je 0x18001714a
cmp r12d, 0x492
je 0x180017128
cmp r12d, 0x524
jne 0x180016f01
mov word [rbp - 0x6f], cx
jmp 0x180016f01
mov dword [rbp - 0x66], 0x6d6f72
mov r9d, 0x65
mov word [rbp - 0x63], r9w
mov r9d, 0x38
mov word [rbp - 0x70], r9w
jmp 0x180016f01
mov r9d, 0x6f6b
mov word [rbp - 0x5d], r9w
mov byte [rbp - 0x5b], 0
mov r9d, 0x43
mov word [rbp - 0x68], r9w
mov r9d, 0x68
mov word [rbp - 0x67], r9w
jmp 0x180016f01
mov word [rbp - 0x6e], r10w
mov word [rbp - 0x6d], r11w
jmp 0x180016f01
cmp r12d, 0x648
je 0x1800171b2
cmp r12d, 0x6da
jne 0x180016f01
mov byte [rbp - 0x4c], 0
mov word [rbp - 0x48], bx
mov word [rbp - 0x47], r15w
mov dword [rbp - 0x45], 0x697261
jmp 0x180016f01
mov dword [rbp - 0x50], 0x33303134
jmp 0x180016f01
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800171ea
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800171df
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp case.0x180016f7e.149
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
jmp case.0x180016f7e.149
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x18001722a
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017222
mov rax, qword [rsi]
mov word [rax + rcx], 0x3b
jmp 0x18001723c
mov r9b, 0x3b
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x180017265
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x18001725d
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp 0x180017277
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x1800172be
lea rax, [rcx + 3]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x18001729f
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8d, 3
lea rdx, [0x18007c5b8]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 3], 0
jmp 0x1800172dd
mov qword [rsp + 0x20], 3
lea r9, [0x18007c5b8]
xor r8d, r8d
lea edx, [r8 + 3]
mov rcx, rsi
call fcn.18000e790
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x180017309
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800172fe
mov rax, qword [rsi]
mov word [rax + rcx], 0x29
jmp case.0x180016f7e.149
mov r9b, 0x29
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
jmp case.0x180016f7e.149
movzx eax, word [0x18007c615]
mov word [rbp - 0x80], ax
movzx eax, byte [0x18007c617]
mov byte [rbp - 0x7e], al
jmp case.0x180016f7e.149
mov byte [rbp - 0x7c], 0
mov r8d, 1
lea rdx, [0x18007c6d2]
lea rcx, [rbp - 0x7c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp - 0x7b], 0
jmp case.0x180016f7e.149
mov byte [rbp - 0x7d], 0x2e
jmp case.0x180016f7e.149
mov word [rbp - 0x7b], 0x36
lea rax, [rbp - 0x20]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180017380
lea rdx, [rbp - 0x20]
mov rcx, rsi
call fcn.18002dfd0
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800173bf
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800173b7
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp 0x1800173d1
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800173fd
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800173f2
mov rax, qword [rsi]
mov word [rax + rcx], 0x28
jmp case.0x180016f7e.149
mov r9b, 0x28
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
jmp case.0x180016f7e.149
lea rax, [rbp]
mov rdi, 0xffffffffffffffff
nop
inc rdi
cmp byte [rax + rdi], 0
jne 0x180017420
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180017469
lea rax, [rcx + rdi]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017450
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8, rdi
lea rdx, [rbp]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x180017480
mov qword [rsp + 0x20], rdi
lea r9, [rbp]
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.18000e790
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800174a9
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800174a1
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp 0x1800174bb
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x180017502
lea rax, [rcx + 3]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800174e3
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8d, 3
lea rdx, [0x18007c6e8]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 3], 0
jmp case.0x180016f7e.149
mov qword [rsp + 0x20], 3
lea r9, [0x18007c6e8]
xor r8d, r8d
lea edx, [r8 + 3]
mov rcx, rsi
call fcn.18000e790
lea r13, [0x180000000]
add r15d, 0x1f
cmp r15d, r14d
jb 0x180016f40
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x180017e23
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180017e1e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180017e1e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800175a5
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x18001759d
mov rax, qword [rsi]
mov word [rax + rcx], 0x3b
jmp 0x1800175b7
mov r9b, 0x3b
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800175e0
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800175d8
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp 0x1800175f2
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
lea rax, [rbp - 0x38]
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x180017600
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x18001764c
lea rax, [rcx + rdi]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017630
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8, rdi
lea rdx, [rbp - 0x38]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp case.0x180016f7e.149
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x38]
xor r8d, r8d
mov rdx, rdi
jmp 0x180017519
lea rax, [rbp - 0x30]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x180017670
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x1800176b9
lea rax, [rcx + rdi]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800176a0
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8, rdi
lea rdx, [rbp - 0x30]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
jmp 0x1800176d0
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x30]
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.18000e790
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800176fc
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800176f1
mov rax, qword [rsi]
mov word [rax + rcx], 0x2f
jmp case.0x180017739.434
mov r9b, 0x2f
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
jmp case.0x180017739.434
lea eax, [r15 - 0x1ab]
cmp eax, 0xba
ja case.0x180017739.434
movzx eax, byte [rax + r13 + 0x17fcc]
mov ecx, dword [r13 + rax*4 + 0x17fac]
add rcx, r13
jmp rcx
lea rax, [rbp - 0x78]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x180017746
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x18001778f
lea rax, [rcx + rdi]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017776
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8, rdi
lea rdx, [rbp - 0x78]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x1800177a6
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x78]
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.18000e790
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800177cf
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800177c7
mov rax, qword [rsi]
mov word [rax + rcx], 0x2c
jmp 0x1800177e1
mov r9b, 0x2c
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x18001780a
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017802
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp 0x18001781c
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
lea rax, [rbp - 0x58]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x180017827
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180017870
lea rax, [rcx + rdi]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017857
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8, rdi
lea rdx, [rbp - 0x58]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
jmp 0x180017887
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x58]
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.18000e790
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jb 0x180017dff
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
jmp case.0x180017739.434
lea rax, [rbp - 0x48]
mov rdi, 0xffffffffffffffff
nop word [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1800178c0
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x18001790c
lea rax, [rcx + rdi]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800178f0
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8, rdi
lea rdx, [rbp - 0x48]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
jmp case.0x180017739.434
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x48]
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.18000e790
jmp case.0x180017739.434
lea rax, [rbp - 0x40]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x180017933
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x18001797c
lea rax, [rcx + rdi]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017963
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8, rdi
lea rdx, [rbp - 0x40]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x180017993
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x40]
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.18000e790
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800179bc
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800179b4
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp 0x1800179ce
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x1800179fa
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x1800179ef
mov rax, qword [rsi]
mov word [rax + rcx], 0x28
jmp case.0x180017739.434
mov r9b, 0x28
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
jmp case.0x180017739.434
lea rax, [rbp - 0x68]
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x180017a20
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180017a69
lea rax, [rcx + rdi]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017a50
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8, rdi
lea rdx, [rbp - 0x68]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
jmp 0x180017a80
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x68]
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.18000e790
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x180017aa9
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017aa1
mov rax, qword [rsi]
mov word [rax + rcx], 0x2f
jmp 0x180017abb
mov r9b, 0x2f
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
lea rax, [rbp - 0x70]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x180017ac6
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180017b12
lea rax, [rcx + rdi]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017af6
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8, rdi
lea rdx, [rbp - 0x70]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
jmp case.0x180017739.434
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x70]
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.18000e790
jmp case.0x180017739.434
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x180017b57
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017b4f
mov rax, qword [rsi]
mov word [rax + rcx], 0x2e
jmp 0x180017b69
mov r9b, 0x2e
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
lea rax, [rbp - 0x50]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x180017b74
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180017bbd
lea rax, [rcx + rdi]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017ba4
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8, rdi
lea rdx, [rbp - 0x50]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
jmp 0x180017bd4
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x50]
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.18000e790
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x180017bfd
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017bf5
mov rax, qword [rsi]
mov word [rax + rcx], 0x2e
jmp 0x180017c0f
mov r9b, 0x2e
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x180017c43
lea rax, [rcx + 2]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017c37
mov rax, qword [rsi]
mov word [rcx + rax], r12w
mov byte [rcx + rax + 2], 0
jmp 0x180017c62
mov qword [rsp + 0x20], 2
lea r9, [0x18007c6e4]
xor r8d, r8d
lea edx, [r8 + 2]
mov rcx, rsi
call fcn.18000e790
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x180017898
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017c87
mov rax, qword [rsi]
mov word [rcx + rax], 0x20
jmp case.0x180017739.434
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x180017cbb
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017cb3
mov rax, qword [rsi]
mov word [rax + rcx], 0x2f
jmp 0x180017ccd
mov r9b, 0x2f
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
lea rax, [rbp - 0x80]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x180017ce0
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180017d2c
lea rax, [rcx + rdi]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017d10
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8, rdi
lea rdx, [rbp - 0x80]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp case.0x180017739.434
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x80]
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.18000e790
jmp case.0x180017739.434
lea rax, [rbp - 0x60]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x180017d53
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180017d9c
lea rax, [rcx + rdi]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017d83
mov rax, qword [rsi]
lea rbx, [rax + rcx]
mov r8, rdi
lea rdx, [rbp - 0x60]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rdi], 0
jmp 0x180017db3
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x60]
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.18000e790
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x180017ddc
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017dd4
mov rax, qword [rsi]
mov word [rax + rcx], 0x29
jmp 0x180017dee
mov r9b, 0x29
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rsi
call fcn.18000e630
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x18]
cmp rcx, rdx
jae 0x180017898
lea rax, [rcx + 1]
mov qword [rsi + 0x10], rax
mov rax, rsi
cmp rdx, 0x10
jb 0x180017e13
mov rax, qword [rsi]
mov word [rax + rcx], 0x20
jmp case.0x180017739.434
call fcn.180076484
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.180076c30
mov rbx, qword [rsp + 0x180]
add rsp, 0x140
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret