Function at 0x1800d6d50
Capabilities:
Create directory
Reference http user-agent string

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x180135928]
xor rax, rsp
mov qword [rbp + 0x18], rax
imul eax, ecx, 0xb6e
mov r15, r8
mov qword [rsp + 0x38], r9
mov r12d, ecx
mov qword [rbp - 0x58], rdx
mov edi, 0x57
mov dword [rsp + 0x40], ecx
mov dword [rbp - 0x60], ecx
mov dword [rbp - 0x50], eax
mov ebx, dword [rbp - 0x50]
mov dword [rsp + 0x30], ebx
cmp ecx, eax
ja 0x1800d7144
mov rsi, qword [rbp - 0x30]
lea r8d, [rdi - 9]
mov r14, qword [rbp - 0x30]
mov r10d, 0x776f
mov r11d, 0x2073
mov eax, 0x54
cmp ecx, 0x9f93
ja 0x1800d7030
je 0x1800d7014
cmp ecx, 0x2e10
ja 0x1800d6f49
je 0x1800d6f26
mov eax, ecx
sub eax, 0x41
je 0x1800d6e85
sub eax, 0x17
je 0x1800d6e66
sub eax, 0x41
je 0x1800d6e4f
sub eax, 0x4d
je 0x1800d6e21
cmp eax, 0x2120
jne 0x1800d712f
mov rcx, qword [r15]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x1800d7111
test byte [r15 + 0x10], 0x40
je 0x1800d71e0
movsxd rax, dword [rdx]
lea r9, [rbp - 0x30]
mov rcx, qword [r15 + 0x18]
lea r8, [rsp + 0x50]
mov edx, 0x9c
mov qword [rbp - 0x30], rax
call fcn.1800d8650
jmp 0x1800d7111
mov rdx, r15
mov ecx, 0xf
call fcn.1800d0d90
mov qword [rsp + 0x48], rax
jmp 0x1800d7111
mov eax, dword [str.illa]
mov dword [rbp + 8], 0x7a6f4d
mov dword [rbp + 0xb], eax
movzx eax, byte [0x18011c380]
mov byte [rbp + 0xf], al
jmp 0x1800d712f
xor r13d, r13d
cmp dword [r15 + 0xc], r13d
jbe 0x1800d712f
nop dword [rax]
nop word [rax + rax]
mov r12d, 0x127
mov eax, r12d
sub eax, 0x127
je 0x1800d6efb
cmp eax, 1
jne 0x1800d6f02
test rsi, rsi
je 0x1800d6f02
nop word [rax + rax]
mov edi, 0x59
mov eax, edi
sub eax, 0x59
je 0x1800d6ee9
cmp eax, 1
jne 0x1800d6eed
mov r9d, 0x11d
mov r8, r15
xor edx, edx
mov rcx, rsi
call fcn.1800e53e0
mov rsi, r14
jmp 0x1800d6eed
mov r14, qword [rsi + 8]
inc edi
cmp edi, 0x5b
jb 0x1800d6ec5
test rsi, rsi
jne 0x1800d6ec0
jmp 0x1800d6f02
mov rax, qword [r15]
mov rsi, qword [rax + r13*8]
inc r12d
cmp r12d, 0x129
jb 0x1800d6ea6
inc r13d
cmp r13d, dword [r15 + 0xc]
jb 0x1800d6ea0
mov r12d, dword [rsp + 0x40]
mov edi, 0x57
jmp 0x1800d7111
mov r8d, 2
lea rdx, [0x18010cbd0]
lea rcx, [rbp + 0xf]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov dword [rbp + 0x10], 0x302e35
jmp 0x1800d7111
cmp ecx, 0x43cb
je 0x1800d7006
cmp ecx, 0x5016
je 0x1800d6fc3
cmp ecx, 0x5bc8
je 0x1800d6fb3
cmp ecx, 0x7864
je 0x1800d6f85
cmp ecx, 0x8980
jne 0x1800d712f
mov dword [rbp - 0xc], 0x2073776f
jmp 0x1800d712f
mov rdx, qword [r15 + 8]
lea rcx, [rsp + 0x50]
mov r8d, 0x11c
call fcn.1800412a0
xor edx, edx
mov dword [rbp - 0x38], eax
mov r8d, 0xc2
lea rcx, [rsp + 0x50]
call fcn.1800436b0
jmp 0x1800d7111
mov word [rbp - 0x10], di
mov dword [rbp - 0xf], 0x646e69
jmp 0x1800d712f
cmp qword [rsp + 0x48], 0
jne 0x1800d6ffb
mov ecx, 0xcd
mov eax, ecx
sub eax, 0xcd
je 0x1800d6fe4
cmp eax, 0x19
je 0x1800d7f22
jmp 0x1800d6fed
mov ebx, 0xffffffff
mov dword [rsp + 0x30], ebx
add ecx, 0x19
cmp ecx, 0xff
jb 0x1800d6fd0
mov ecx, dword [rbp - 0x60]
mov dword [rdx], 0
jmp 0x1800d712f
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x1800d7111
mov rcx, qword [rsp + 0x48]
xor edx, edx
mov dword [r9], 0
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dword [rbp - 0x40], eax
jmp 0x1800d7111
cmp ecx, 0x13e8d
ja 0x1800d70aa
je 0x1800d71f0
cmp ecx, 0xb738
je 0x1800d70a0
cmp ecx, 0xe4f0
je 0x1800d7097
cmp ecx, 0xef10
je 0x1800d707f
cmp ecx, 0xefe2
je 0x1800d7073
cmp ecx, 0x112a8
jne 0x1800d712f
mov byte [rbp - 0x48], 0
jmp 0x1800d712f
mov ebx, dword [rbp - 0x38]
mov dword [rsp + 0x30], ebx
jmp 0x1800d712f
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x48]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1800d7111
mov word [rbp - 7], ax
jmp 0x1800d712f
mov word [rbp - 8], r8w
jmp 0x1800d712f
cmp ecx, 0x14060
je 0x1800d70fa
cmp ecx, 0x16760
je 0x1800d7f22
cmp ecx, 0x16e18
je 0x1800d70d4
cmp ecx, 0x19bd0
jne 0x1800d712f
mov byte [rbp - 0x44], 0x34
jmp 0x1800d712f
mov r8d, 1
lea rdx, [0x18011c38d]
lea rcx, [rbp - 0x48]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 1
lea rdx, [0x18011c3a3]
jmp 0x1800d7107
mov r8d, 2
lea rdx, [0x18011c365]
lea rcx, [rbp - 0x48]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov ecx, dword [rbp - 0x60]
mov r8d, 0x4e
mov rdx, qword [rbp - 0x58]
mov r10d, 0x776f
mov r9, qword [rsp + 0x38]
mov r11d, 0x2073
imul eax, r12d, 0x85
add ecx, eax
mov dword [rbp - 0x60], ecx
cmp ecx, dword [rbp - 0x50]
jbe 0x1800d6dc5
lea esi, [r12 + 0xf20]
mov edi, r12d
cmp r12d, esi
jae 0x1800d7552
mov ecx, 0x69
mov ebx, 0x6265
mov r13d, 0x7041
lea edx, [rcx + 0xb]
lea eax, [rcx - 0x31]
lea r14d, [rcx - 0x1e]
lea r11d, [rcx - 0x26]
lea r9d, [rcx - 0x36]
lea r10d, [rcx - 0x3b]
nop
cmp edi, 0x7e8
ja 0x1800d7365
je 0x1800d7342
cmp edi, 0x3c8
ja 0x1800d726f
je 0x1800d7236
cmp edi, 0x58
je 0x1800d7228
cmp edi, 0x108
je 0x1800d721c
cmp edi, 0x1b8
je 0x1800d7208
cmp edi, 0x268
je 0x1800d71fe
cmp edi, 0x318
jne 0x1800d752d
mov word [rbp - 0x27], cx
mov word [rbp - 0x26], dx
jmp 0x1800d752d
mov eax, 0xffffffe8
jmp 0x1800d7f24
neg dword [rbp - 0x40]
sbb eax, eax
neg eax
dec eax
jmp 0x1800d7f24
mov word [rbp - 0x28], r14w
jmp 0x1800d752d
mov r8d, 0x57
mov word [rbp - 0x2b], r8w
mov word [rbp - 0x2a], bx
jmp 0x1800d752d
mov dword [rbp - 0x2e], 0x656c70
jmp 0x1800d752d
mov byte [rbp - 0x43], 0
mov word [rbp - 0x30], r13w
jmp 0x1800d752d
mov r8d, 0xa
lea rdx, [rbp - 0x20]
lea ecx, [r8 - 5]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ltoa]
lea rdx, [rbp - 0x1f]
mov ecx, 0x25
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
mov eax, 0x38
lea ecx, [rax + 0x31]
lea edx, [rax + 0x3c]
jmp 0x1800d752d
cmp edi, 0x478
je 0x1800d731a
cmp edi, 0x528
je 0x1800d730c
cmp edi, 0x5d8
je 0x1800d72e7
cmp edi, 0x688
je 0x1800d72c1
cmp edi, 0x738
jne 0x1800d752d
mov eax, dword [str.Gecko]
mov dword [rbp - 0x40], eax
movzx eax, word [0x18011c45c]
mov word [rbp - 0x3c], ax
mov eax, 0x38
jmp 0x1800d752d
movzx eax, word [0x18011c3ac]
mov dword [rbp - 0x38], 0x54484b
mov word [rbp - 0x35], ax
movzx eax, byte [0x18011c3ae]
mov byte [rbp - 0x33], al
mov eax, 0x38
jmp 0x1800d752d
lea rdx, [rbp - 0x1b]
mov ecx, 6
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ltoa]
mov eax, 0x38
lea ecx, [rax + 0x31]
lea edx, [rax + 0x3c]
jmp 0x1800d752d
lea rdx, [rbp - 0x1c]
mov ecx, 3
jmp 0x1800d7253
lea rcx, [rbp - 0x20]
dec rcx
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x1800d7321
movzx eax, word [0x180109088]
mov word [rcx], ax
mov eax, 0x38
lea ecx, [rax + 0x31]
jmp 0x1800d752d
mov eax, dword [str.hrome]
mov word [rbp - 0x58], r11w
mov dword [rbp - 0x57], eax
movzx eax, word [0x18011c464]
mov word [rbp - 0x53], ax
mov eax, 0x38
jmp 0x1800d752d
cmp edi, 0xc08
ja 0x1800d7432
je 0x1800d7411
cmp edi, 0x898
je 0x1800d7408
cmp edi, 0x948
je 0x1800d73f9
cmp edi, 0x9f8
je 0x1800d73e2
cmp edi, 0xaa8
je 0x1800d73d2
cmp edi, 0xb58
jne 0x1800d752d
mov r8d, 1
lea rdx, [0x18011c3be]
lea rcx, [rbp - 0x18]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov eax, 0x38
mov byte [rbp - 0x13], 0x69
lea ecx, [rax + 0x31]
lea edx, [rax + 0x3c]
jmp 0x1800d752d
mov dword [rbp - 0x18], 0x61666153
mov byte [rbp - 0x14], 0
jmp 0x1800d752d
mov eax, 0x30
lea rdx, [rbp]
mov word [rbp - 0x4d], ax
mov ecx, 0x1007
jmp 0x1800d72f0
mov word [rbp - 0x4f], r9w
mov word [rbp - 0x4e], r10w
jmp 0x1800d752d
mov word [rbp - 0x50], ax
jmp 0x1800d752d
mov eax, dword [0x18011c419]
mov dword [rbp - 0x60], eax
movzx eax, byte [0x18011c41d]
mov byte [rbp - 0x5c], al
mov eax, 0x38
mov byte [rbp - 0x12], 0
jmp 0x1800d752d
cmp edi, 0xcb8
je 0x1800d7529
cmp edi, 0xd68
je 0x1800d7523
cmp edi, 0xe18
je 0x1800d74f0
cmp edi, 0xec8
jne 0x1800d752d
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d748b
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7483
mov rax, qword [r15]
mov word [rax + rcx], 0x20
jmp 0x1800d749d
xor r8d, r8d
mov r9b, 0x20
mov rcx, r15
lea edx, [r8 + 1]
call fcn.180007c00
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d74d1
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d74be
mov rax, qword [r15]
mov word [rax + rcx], 0x28
mov eax, 0x38
lea ecx, [rax + 0x31]
lea edx, [rax + 0x3c]
jmp 0x1800d752d
xor r8d, r8d
mov r9b, 0x28
mov rcx, r15
lea edx, [r8 + 1]
call fcn.180007c00
mov eax, 0x38
lea ecx, [rax + 0x31]
lea edx, [rax + 0x3c]
jmp 0x1800d752d
lea rax, [rbp + 8]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1800d7500
lea rdx, [rbp + 8]
mov rcx, r15
call fcn.1800b2340
mov eax, 0x38
lea ecx, [rax + 0x31]
lea edx, [rax + 0x3c]
jmp 0x1800d752d
mov byte [rbp - 0x5a], 0
jmp 0x1800d752d
mov byte [rbp - 0x5b], 0x36
mov r9d, 0x33
add edi, 0xb0
lea r10d, [r9 - 5]
lea r11d, [r9 + 0x10]
cmp edi, esi
jb 0x1800d7180
mov ebx, dword [rsp + 0x30]
mov r12d, dword [rsp + 0x40]
lea r14d, [r12 + 0x16]
cmp r12d, r14d
jae 0x1800d7f22
lea r13, [0x180000000]
mov ebx, 0x3739
nop dword [rax]
lea eax, [r12 - 0x58]
cmp eax, 0x15
ja case.default.0x1800d7589
mov ecx, dword [r13 + rax*4 + 0xd7f4c]
add rcx, r13
jmp rcx
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d75b4
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d75ac
mov rax, qword [r15]
mov word [rax + rcx], 0x2e
jmp 0x1800d75c6
xor r8d, r8d
mov r9b, 0x2e
mov rcx, r15
lea edx, [r8 + 1]
call fcn.180007c00
lea rax, [rbp]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x1800d75d1
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1800d761d
lea rax, [rcx + rsi]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7601
mov rax, qword [r15]
lea rdi, [rax + rcx]
mov r8, rsi
mov rcx, rdi
lea rdx, [rbp]
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
jmp case.default.0x1800d7589
lea r9, [rbp]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.180007d60
jmp case.default.0x1800d7589
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d7665
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d765a
mov rax, qword [r15]
mov word [rax + rcx], 0x29
jmp case.0x1800d7589.89
mov r9b, 0x29
jmp 0x1800d7ec8
lea rax, [rbp - 0x48]
mov rsi, 0xffffffffffffffff
nop dword [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x1800d7680
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1800d76c9
lea rax, [rcx + rsi]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d76b0
mov rax, qword [r15]
lea rdi, [rax + rcx]
mov r8, rsi
mov rcx, rdi
lea rdx, [rbp - 0x48]
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
jmp 0x1800d76e0
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x48]
mov rdx, rsi
xor r8d, r8d
mov rcx, r15
call fcn.180007d60
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d770c
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7701
mov rax, qword [r15]
mov word [rax + rcx], 0x3b
jmp case.default.0x1800d7589
mov r9b, 0x3b
jmp 0x1800d7f03
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d773d
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7735
mov rax, qword [r15]
mov word [rax + rcx], 0x2f
jmp 0x1800d774f
xor r8d, r8d
mov r9b, 0x2f
mov rcx, r15
lea edx, [r8 + 1]
call fcn.180007c00
lea rax, [rbp - 0x50]
mov rsi, 0xffffffffffffffff
nop word [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x1800d7760
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1800d77ac
lea rax, [rcx + rsi]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7790
mov rax, qword [r15]
lea rdi, [rax + rcx]
mov r8, rsi
mov rcx, rdi
lea rdx, [rbp - 0x50]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], 0
jmp case.default.0x1800d7589
lea r9, [rbp - 0x50]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.180007d60
jmp case.default.0x1800d7589
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x1800d7812
lea rax, [rcx + 3]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d77f0
mov rax, qword [r15]
lea rdi, [rax + rcx]
mov r8d, 3
mov rcx, rdi
lea rdx, [0x18011c468]
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + 3], 0
jmp 0x1800d76e0
mov qword [rsp + 0x20], 3
lea r9, [0x18011c468]
mov edx, 3
jmp 0x1800d76d5
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d7855
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d784d
mov rax, qword [r15]
mov word [rax + rcx], 0x2f
jmp 0x1800d7867
xor r8d, r8d
mov r9b, 0x2f
mov rcx, r15
lea edx, [r8 + 1]
call fcn.180007c00
lea rax, [rbp - 0x60]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x1800d7872
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1800d78be
lea rax, [rcx + rsi]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d78a2
mov rax, qword [r15]
lea rdi, [rax + rcx]
mov r8, rsi
mov rcx, rdi
lea rdx, [rbp - 0x60]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], 0
jmp case.default.0x1800d7589
lea r9, [rbp - 0x60]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.180007d60
jmp case.default.0x1800d7589
lea rax, [rbp - 0x38]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x1800d78e5
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1800d7931
lea rax, [rcx + rsi]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7915
mov rax, qword [r15]
lea rdi, [rax + rcx]
mov r8, rsi
mov rcx, rdi
lea rdx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], 0
jmp case.default.0x1800d7589
lea r9, [rbp - 0x38]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.180007d60
jmp case.default.0x1800d7589
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d7976
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d796e
mov rax, qword [r15]
mov word [rax + rcx], 0x2f
jmp 0x1800d7988
xor r8d, r8d
mov r9b, 0x2f
mov rcx, r15
lea edx, [r8 + 1]
call fcn.180007c00
lea rax, [rbp - 0x20]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x1800d7993
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1800d79df
lea rax, [rcx + rsi]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d79c3
mov rax, qword [r15]
lea rdi, [rax + rcx]
mov r8, rsi
mov rcx, rdi
lea rdx, [rbp - 0x20]
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rdi], 0
jmp case.default.0x1800d7589
lea r9, [rbp - 0x20]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.180007d60
jmp case.default.0x1800d7589
lea rax, [rbp - 0x40]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x1800d7a06
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1800d7a4f
lea rax, [rcx + rsi]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7a36
mov rax, qword [r15]
lea rdi, [rax + rcx]
mov r8, rsi
mov rcx, rdi
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], 0
jmp 0x1800d7a66
lea r9, [rbp - 0x40]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.180007d60
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d7a92
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7a87
mov rax, qword [r15]
mov word [rax + rcx], 0x29
jmp case.default.0x1800d7589
mov r9b, 0x29
jmp 0x1800d7f03
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d7ac3
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7abb
mov rax, qword [r15]
mov word [rax + rcx], 0x20
jmp 0x1800d7ad5
xor r8d, r8d
mov r9b, 0x20
mov rcx, r15
lea edx, [r8 + 1]
call fcn.180007c00
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x1800d7b1f
lea rax, [rcx + 3]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7afd
mov rax, qword [r15]
lea rdi, [rax + rcx]
mov r8d, 3
mov rcx, rdi
lea rdx, [0x18011c46c]
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + 3], 0
jmp case.default.0x1800d7589
xor r8d, r8d
mov qword [rsp + 0x20], 3
lea r9, [0x18011c46c]
mov rcx, r15
lea edx, [r8 + 3]
call fcn.180007d60
jmp case.default.0x1800d7589
lea rax, [rbp - 0x18]
mov rsi, 0xffffffffffffffff
nop
inc rsi
cmp byte [rax + rsi], 0
jne 0x1800d7b50
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1800d7b9c
lea rax, [rcx + rsi]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7b80
mov rax, qword [r15]
lea rdi, [rax + rcx]
mov r8, rsi
mov rcx, rdi
lea rdx, [rbp - 0x18]
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rdi], 0
jmp case.default.0x1800d7589
lea r9, [rbp - 0x18]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.180007d60
jmp case.default.0x1800d7589
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d7be1
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7bd9
mov rax, qword [r15]
mov word [rax + rcx], 0x20
jmp 0x1800d7bf3
xor r8d, r8d
mov r9b, 0x20
mov rcx, r15
lea edx, [r8 + 1]
call fcn.180007c00
lea rax, [rbp - 0x58]
mov rsi, 0xffffffffffffffff
nop
inc rsi
cmp byte [rax + rsi], 0
jne 0x1800d7c00
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1800d7c4c
lea rax, [rcx + rsi]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7c30
mov rax, qword [r15]
lea rdi, [rax + rcx]
mov r8, rsi
mov rcx, rdi
lea rdx, [rbp - 0x58]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], 0
jmp case.default.0x1800d7589
lea r9, [rbp - 0x58]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.180007d60
jmp case.default.0x1800d7589
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d7c91
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7c89
mov rax, qword [r15]
mov word [rax + rcx], 0x2e
jmp 0x1800d7ca3
xor r8d, r8d
mov r9b, 0x2e
mov rcx, r15
lea edx, [r8 + 1]
call fcn.180007c00
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x1800d7cd9
lea rax, [rcx + 2]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7ccb
mov rax, qword [r15]
mov word [rcx + rax], bx
mov byte [rcx + rax + 2], 0
jmp case.default.0x1800d7589
xor r8d, r8d
mov qword [rsp + 0x20], 2
lea r9, [0x18011c470]
mov rcx, r15
lea edx, [r8 + 2]
call fcn.180007d60
jmp case.default.0x1800d7589
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x1800d7d33
lea rax, [rcx + 4]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7d25
mov rax, qword [r15]
mov dword [rax + rcx], 0x656b696c
mov byte [rax + rcx + 4], 0
jmp 0x1800d7d52
xor r8d, r8d
mov qword [rsp + 0x20], 4
lea r9, str.like
mov rcx, r15
lea edx, [r8 + 4]
call fcn.180007d60
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d7f00
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7d77
mov rax, qword [r15]
mov word [rcx + rax], 0x20
jmp case.default.0x1800d7589
lea rax, [rbp - 0x30]
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x1800d7d90
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1800d7ddc
lea rax, [rcx + rsi]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7dc0
mov rax, qword [r15]
lea rdi, [rax + rcx]
mov r8, rsi
mov rcx, rdi
lea rdx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
jmp case.default.0x1800d7589
lea r9, [rbp - 0x30]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.180007d60
jmp case.default.0x1800d7589
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d7e24
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7e19
mov rax, qword [r15]
mov word [rax + rcx], 0x28
jmp case.default.0x1800d7589
mov r9b, 0x28
jmp 0x1800d7f03
lea rax, [rbp - 0x10]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x1800d7e37
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x1800d7e83
lea rax, [rcx + rsi]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7e67
mov rax, qword [r15]
lea rdi, [rax + rcx]
mov r8, rsi
mov rcx, rdi
lea rdx, [rbp - 0x10]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
jmp case.default.0x1800d7589
lea r9, [rbp - 0x10]
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
mov rcx, r15
call fcn.180007d60
jmp case.default.0x1800d7589
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x1800d7ec5
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7ebd
mov rax, qword [r15]
mov word [rax + rcx], 0x2c
jmp case.0x1800d7589.89
mov r9b, 0x2c
xor r8d, r8d
mov rcx, r15
lea edx, [r8 + 1]
call fcn.180007c00
mov rdx, qword [r15 + 0x18]
mov rcx, qword [r15 + 0x10]
cmp rcx, rdx
jae 0x1800d7f00
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x1800d7ef8
mov rax, qword [r15]
mov word [rax + rcx], 0x20
jmp case.default.0x1800d7589
mov r9b, 0x20
xor r8d, r8d
mov rcx, r15
lea edx, [r8 + 1]
call fcn.180007c00
inc r12d
cmp r12d, r14d
jb 0x1800d7570
mov ebx, dword [rsp + 0x30]
mov eax, ebx
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.180106610
mov rbx, qword [rsp + 0x160]
add rsp, 0x120
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret