Function at 0x18004fef0
Capabilities:
Compute adler32 checksum

Disassembly:
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x70
mov rsi, rcx
xor ebp, ebp
mov ebx, ebp
mov ecx, 0x20000
mov qword [rsp + 0x28], rbx
mov edi, r9d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x48], rax
mov r14, rax
test rax, rax
jne 0x18004ff3a
add rsp, 0x70
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov eax, 5
mov qword [rsp + 0xb8], r12
cmp edi, eax
mov qword [rsp + 0x68], r13
mov edx, 0xa
mov qword [rsp + 0x60], r15
cmovge eax, edi
xor ecx, ecx
mov dword [rsp + 0x40], eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x18004ff7c
lea rbx, [rax + 8]
mov qword [rax], 2
mov qword [rsp + 0x28], rbx
movsxd rax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov byte [rax + rbx], 0x78
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x18004ffc0
lea eax, [rdx + rdx]
movsxd rdx, eax
lea edi, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, rbp
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x18004ffc0
lea rbx, [rax + 8]
mov dword [rax], edi
mov qword [rsp + 0x28], rbx
movsxd rax, dword [rbx - 4]
mov edi, 3
xor edx, edx
mov dword [rsp + 0x20], edi
mov r8d, 0x20000
mov rcx, r14
mov r15d, edi
mov byte [rax + rbx], 0x5e
inc dword [rbx - 4]
call sub.VCRUNTIME140.dll_memset
mov r11d, dword [rsp + 0xa8]
lea r13d, [rdi + 4]
xor r9d, r9d
mov r10d, r9d
mov dword [rsp + 0x30], r9d
lea eax, [r11 - 3]
test eax, eax
jle 0x180050ae6
lea rdx, [rdi - 7]
nop
movsxd r13, r10d
mov dword [rsp + 0x24], 3
mov qword [rsp + 0x38], r9
movzx eax, byte [rsi + r13 + 1]
movzx ecx, byte [rsi + r13 + 2]
shl eax, 8
shl ecx, 0x10
add ecx, eax
movzx eax, byte [rsi + r13]
add ecx, eax
lea eax, [rcx*8]
xor ecx, eax
mov eax, ecx
shr eax, 5
add ecx, eax
mov eax, ecx
shl eax, 4
xor ecx, eax
mov eax, ecx
shr eax, 0x11
add ecx, eax
mov eax, ecx
shl eax, 0x19
xor ecx, eax
mov eax, ecx
shr eax, 6
add eax, ecx
and eax, 0x3fff
mov r15d, eax
mov qword [rsp + 0x58], r15
lea r12, [r14 + rax*8]
mov r14, qword [r14 + rax*8]
mov qword [rsp + 0x50], r12
test r14, r14
je 0x18005008c
mov eax, dword [r14 - 4]
jmp 0x18005008f
mov eax, r9d
test r14, r14
movsxd rbp, eax
lea rcx, [r14 - 4]
mov rsi, r9
cmove rcx, rdx
test eax, eax
jle 0x18005014a
mov r12, qword [rsp + 0xa0]
lea eax, [r10 - 0x8000]
movsxd r15, eax
xor ebx, ebx
nop dword [rax]
mov r9, qword [r14 + rsi*8]
mov rax, r9
sub rax, r12
cmp rax, r15
jle 0x18005012f
mov eax, r11d
mov r8d, ebx
sub eax, r10d
mov rdx, rbx
test eax, eax
jle 0x18005011e
mov r11, r13
movsxd r10, eax
sub r11, r9
add r11, r12
nop dword [rax + rax]
cmp rdx, 0x102
jge 0x180050111
lea rcx, [rdx + r9]
movzx eax, byte [r11 + rcx]
cmp byte [rcx], al
jne 0x180050111
inc r8d
inc rdx
cmp rdx, r10
jl 0x1800500f0
mov r10d, dword [rsp + 0x30]
mov r11d, dword [rsp + 0xa8]
cmp r8d, dword [rsp + 0x24]
jl 0x18005012f
mov dword [rsp + 0x24], r8d
mov qword [rsp + 0x38], r9
inc rsi
cmp rsi, rbp
jl 0x1800500c0
mov rbx, qword [rsp + 0x28]
lea rcx, [r14 - 4]
mov r12, qword [rsp + 0x50]
mov r15, qword [rsp + 0x58]
test r14, r14
je 0x180050176
movsxd rsi, dword [rsp + 0x40]
lea eax, [rsi + rsi]
cmp dword [rcx], eax
jne 0x180050176
lea r8, [rsi*8]
mov rcx, r14
lea rdx, [r8 + r14]
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [r12]
mov dword [rax - 4], esi
mov rax, qword [r12]
lea rcx, [rax - 8]
test rax, rax
je 0x1800501a7
mov eax, dword [rax - 4]
inc eax
cmp eax, dword [rcx]
jl 0x1800501d3
mov eax, dword [rcx]
lea esi, [rax*2 + 1]
lea eax, [rsi*8]
movsxd rdx, eax
add rdx, 8
xor ebp, ebp
jmp 0x1800501b3
mov esi, 2
xor ebp, ebp
mov ecx, ebp
lea edx, [rsi + 0x16]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800501d3
cmp qword [r12], 0
jne 0x1800501c8
mov dword [rax + 4], ebp
add rax, 8
mov qword [r12], rax
mov dword [rax - 8], esi
mov r9, qword [rsp + 0x48]
movsxd r10, dword [rsp + 0x30]
mov r8, qword [rsp + 0xa0]
mov eax, r15d
lea rcx, [r8 + r10]
mov rdx, qword [r9 + rax*8]
movsxd rax, dword [rdx - 4]
mov qword [rdx + rax*8], rcx
mov eax, r15d
mov r15, qword [rsp + 0x38]
mov rcx, qword [r9 + rax*8]
inc dword [rcx - 4]
test r15, r15
je 0x180050910
movzx edx, byte [r10 + r8 + 3]
movzx eax, byte [r10 + r8 + 2]
shl eax, 8
shl edx, 0x10
add edx, eax
movzx eax, byte [r10 + r8 + 1]
add edx, eax
lea eax, [rdx*8]
xor edx, eax
mov eax, edx
shr eax, 5
add edx, eax
mov eax, edx
shl eax, 4
xor edx, eax
mov eax, edx
shr eax, 0x11
add edx, eax
mov eax, edx
shl eax, 0x19
xor edx, eax
mov eax, edx
shr eax, 6
add eax, edx
xor edx, edx
and eax, 0x3fff
mov r14, qword [r9 + rax*8]
test r14, r14
je 0x18005026e
mov eax, dword [r14 - 4]
jmp 0x180050270
mov eax, edx
movsxd rsi, eax
mov r11, rdx
test eax, eax
jle 0x180050309
mov r12d, dword [rsp + 0x24]
lea eax, [r10 - 0x7fff]
movsxd rbp, eax
nop dword [rax]
mov r9, qword [r14 + r11*8]
mov rax, r9
sub rax, r8
cmp rax, rbp
jle 0x180050301
mov eax, dword [rsp + 0xa8]
mov r8d, edx
sub eax, r10d
dec eax
test eax, eax
jle 0x1800502ee
mov r15, qword [rsp + 0xa0]
movsxd r10, eax
nop dword [rax]
cmp rdx, 0x102
jge 0x1800502e4
lea rax, [rdx + r13]
movzx ecx, byte [rax + r15 + 1]
cmp byte [rdx + r9], cl
jne 0x1800502e4
inc r8d
inc rdx
cmp rdx, r10
jl 0x1800502c0
mov r15, qword [rsp + 0x38]
mov r10d, dword [rsp + 0x30]
cmp r8d, r12d
mov r8, qword [rsp + 0xa0]
jg 0x180050910
xor edx, edx
inc r11
cmp r11, rsi
jl 0x180050290
movzx eax, word [reloc.XINPUT1_4.dll_Ordinal_4]
mov r12d, r8d
mov r13d, dword [rsp + 0x24]
sub r12d, r15d
add r12d, r10d
dec eax
mov ecx, edx
mov r14, rdx
cmp r13d, eax
jle 0x180050355
lea r8, [0x180000000]
nop dword [rax]
nop word [rax + rax]
movzx eax, word [r8 + r14*2 + 0x2488a4]
inc r14
dec eax
inc ecx
cmp r13d, eax
jg 0x180050340
lea eax, [rcx + 0x101]
cmp eax, 0x8f
jg 0x180050422
add ecx, 0x131
mov r8d, 8
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180050372
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 8
or edi, edx
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x180050675
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
test rbx, rbx
je 0x1800503ce
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x180050409
lea esi, [rsi*2 + 1]
jmp 0x1800503d3
mov esi, 2
mov rcx, 0xfffffffffffffff8
movsxd rdx, esi
add rcx, rbx
add rdx, 8
test rbx, rbx
mov rax, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180050409
test rbx, rbx
jne 0x180050402
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1800503b4
jmp 0x18005066b
cmp eax, 0xff
jg 0x1800504f0
add ecx, 0x201
mov r8d, 9
nop dword [rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180050440
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 9
or edi, edx
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x180050675
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
test rbx, rbx
je 0x18005049c
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x1800504d7
lea esi, [rsi*2 + 1]
jmp 0x1800504a1
mov esi, 2
mov rcx, 0xfffffffffffffff8
movsxd rdx, esi
add rcx, rbx
add rdx, 8
test rbx, rbx
mov rax, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800504d7
test rbx, rbx
jne 0x1800504d0
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180050482
jmp 0x18005066b
cmp eax, 0x117
jg 0x1800505b3
inc ecx
mov r8d, 7
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180050503
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 7
or edi, edx
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x180050675
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
test rbx, rbx
je 0x18005055f
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x18005059a
lea esi, [rsi*2 + 1]
jmp 0x180050564
mov esi, 2
mov rcx, 0xfffffffffffffff8
movsxd rdx, esi
add rcx, rbx
add rdx, 8
test rbx, rbx
mov rax, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x18005059a
test rbx, rbx
jne 0x180050593
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180050545
jmp 0x18005066b
add ecx, 0xa9
mov r8d, 8
nop
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1800505c0
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 8
or edi, edx
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x180050675
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
test rbx, rbx
je 0x18005061c
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x180050657
lea esi, [rsi*2 + 1]
jmp 0x180050621
mov esi, 2
mov rcx, 0xfffffffffffffff8
movsxd rdx, esi
add rcx, rbx
add rdx, 8
test rbx, rbx
mov rax, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180050657
test rbx, rbx
jne 0x180050650
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180050602
mov r13d, dword [rsp + 0x24]
mov qword [rsp + 0x28], rbx
lea r9, [0x180000000]
movzx r8d, byte [r14 + r9 + 0x2488e0]
test r8b, r8b
je 0x180050741
movzx eax, word [r9 + r14*2 + 0x2488a0]
mov ecx, r15d
mov edx, r13d
mov qword [rsp + 0x28], rbx
sub edx, eax
add r15d, r8d
shl edx, cl
or edi, edx
cmp r15d, 8
jl 0x180050741
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
test rbx, rbx
je 0x1800506e1
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x18005071c
lea esi, [rsi*2 + 1]
jmp 0x1800506e6
mov esi, 2
mov rcx, 0xfffffffffffffff8
movsxd rdx, esi
add rcx, rbx
add rdx, 8
test rbx, rbx
mov rax, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x18005071c
test rbx, rbx
jne 0x180050715
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1800506c7
mov r13d, dword [rsp + 0x24]
lea r9, [0x180000000]
mov qword [rsp + 0x28], rbx
movzx eax, word [reloc.XINPUT1_4.dll_Ordinal_2]
xor edx, edx
dec eax
mov ecx, edx
mov r14d, edx
cmp r12d, eax
jle 0x180050775
nop word [rax + rax]
movzx eax, word [r9 + r14*2 + 0x248904]
inc r14
dec eax
inc ecx
cmp r12d, eax
jg 0x180050760
mov r8d, 5
nop dword [rax + rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180050780
mov ecx, r15d
add r15d, 5
shl edx, cl
or edi, edx
mov dword [rsp + 0x20], r15d
cmp r15d, 8
jl 0x180050835
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
mov dword [rsp + 0x20], r15d
test rbx, rbx
je 0x1800507dc
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x180050817
lea esi, [rsi*2 + 1]
jmp 0x1800507e1
mov esi, 2
mov rcx, 0xfffffffffffffff8
movsxd rdx, esi
add rcx, rbx
add rdx, 8
test rbx, rbx
mov rax, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180050817
test rbx, rbx
jne 0x180050810
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1800507c2
mov r13d, dword [rsp + 0x24]
mov qword [rsp + 0x28], rbx
lea rax, [0x180000000]
movzx edx, byte [r14 + rax + 0x248940]
test dl, dl
je 0x180050903
movzx eax, word [rax + r14*2 + 0x248900]
mov ecx, r15d
sub r12d, eax
mov qword [rsp + 0x28], rbx
shl r12d, cl
add r15d, edx
or edi, r12d
mov dword [rsp + 0x20], r15d
cmp r15d, 8
jl 0x180050903
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
mov dword [rsp + 0x20], r15d
test rbx, rbx
je 0x1800508aa
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x1800508e5
lea esi, [rsi*2 + 1]
jmp 0x1800508af
mov esi, 2
mov rcx, 0xfffffffffffffff8
movsxd rdx, esi
add rcx, rbx
add rdx, 8
test rbx, rbx
mov rax, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800508e5
test rbx, rbx
jne 0x1800508de
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180050890
mov r13d, dword [rsp + 0x24]
mov qword [rsp + 0x28], rbx
mov r10d, dword [rsp + 0x30]
add r10d, r13d
jmp 0x180050ab0
movsxd rax, r10d
movzx ecx, byte [rax + r8]
cmp cl, 0x8f
ja 0x1800509ee
add ecx, 0x30
xor r14d, r14d
mov edx, r14d
lea r8d, [r14 + 8]
nop
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180050930
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 8
or edi, edx
mov dword [rsp + 0x20], r15d
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x180050aad
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
lea r15d, [r15 + rax*8]
mov dword [rsp + 0x20], r15d
nop dword [rax]
test rbx, rbx
je 0x18005099a
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x1800509d5
lea esi, [rsi*2 + 1]
jmp 0x18005099f
mov esi, 2
mov rcx, 0xfffffffffffffff8
movsxd rdx, esi
add rcx, rbx
add rdx, 8
test rbx, rbx
mov rax, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800509d5
test rbx, rbx
jne 0x1800509ce
mov dword [rax + 4], r14d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180050980
jmp 0x180050aa3
add ecx, 0x100
xor r14d, r14d
mov edx, r14d
lea r8d, [r14 + 9]
nop
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180050a00
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 9
or edi, edx
mov dword [rsp + 0x20], r15d
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x180050aad
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
lea r15d, [r15 + rax*8]
mov dword [rsp + 0x20], r15d
test rbx, rbx
je 0x180050a69
mov eax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x180050a8f
lea esi, [rsi*2 + 1]
movsxd rdx, esi
add rdx, 8
jmp 0x180050a74
mov esi, 2
mov rcx, r14
lea edx, [rsi + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180050a8f
test rbx, rbx
jne 0x180050a88
mov dword [rax + 4], r14d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180050a45
mov r10d, dword [rsp + 0x30]
mov qword [rsp + 0x28], rbx
inc r10d
mov r11d, dword [rsp + 0xa8]
mov rdx, 0xfffffffffffffffc
mov rsi, qword [rsp + 0xa0]
mov r14, qword [rsp + 0x48]
mov dword [rsp + 0x30], r10d
lea eax, [r11 - 3]
lea r9d, [rdx + 4]
cmp r10d, eax
jl 0x180050010
lea r13d, [rdx + 0xb]
movsxd r12, r11d
movsxd r14, r10d
mov qword [rsp + 0x38], r12
cmp r14, r12
jge 0x180050c86
nop word [rax + rax]
movzx ecx, byte [r14 + rsi]
mov edx, r9d
cmp cl, 0x8f
ja 0x180050bce
add ecx, 0x30
mov r8d, 8
nop word [rax + rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180050b20
mov ecx, r15d
add r15d, 8
shl edx, cl
or edi, edx
cmp r15d, 8
jl 0x180050c7a
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r12d, r12d
lea r15d, [r15 + rax*8]
test rbx, rbx
je 0x180050b72
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x180050bad
lea esi, [rsi*2 + 1]
jmp 0x180050b77
mov esi, 2
mov rcx, 0xfffffffffffffff8
movsxd rdx, esi
add rcx, rbx
add rdx, 8
test rbx, rbx
mov rax, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180050bad
test rbx, rbx
jne 0x180050ba6
mov dword [rax + 4], r12d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180050b58
mov r12, qword [rsp + 0x38]
xor r9d, r9d
jmp 0x180050c72
add ecx, 0x100
mov r8d, 9
nop word [rax + rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180050be0
mov ecx, r15d
add r15d, 9
shl edx, cl
or edi, edx
cmp r15d, 8
jl 0x180050c7a
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
lea r15d, [r15 + rax*8]
test rbx, rbx
je 0x180050c35
mov eax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x180050c5e
lea esi, [rsi*2 + 1]
movsxd rdx, esi
add rdx, 8
jmp 0x180050c40
mov esi, 2
mov rcx, r9
lea edx, [rsi + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
xor r9d, r9d
test rax, rax
je 0x180050c5e
test rbx, rbx
jne 0x180050c57
mov dword [rax + 4], r9d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180050c11
mov rsi, qword [rsp + 0xa0]
inc r14
cmp r14, r12
jl 0x180050b00
mov ecx, r9d
mov edx, r9d
nop dword [rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r13d, 1
jne 0x180050c90
mov ecx, r15d
add r15d, 7
shl edx, cl
or edi, edx
cmp r15d, 8
jl 0x180050d22
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
lea r15d, [r15 + rax*8]
test rbx, rbx
je 0x180050ce5
mov eax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x180050d0e
lea esi, [rsi*2 + 1]
movsxd rdx, esi
add rdx, 8
jmp 0x180050cf0
mov esi, 2
mov rcx, r9
lea edx, [rsi + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
xor r9d, r9d
test rax, rax
je 0x180050d0e
test rbx, rbx
jne 0x180050d07
mov dword [rax + 4], r9d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180050cc1
test r15d, r15d
je 0x180050db9
jmp 0x180050d33
xor r9d, r9d
inc r15d
cmp r15d, 8
jl 0x180050db0
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
lea r15d, [r15 + rax*8]
jmp 0x180050d53
xor r9d, r9d
test rbx, rbx
je 0x180050d77
mov eax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov esi, dword [rcx]
inc eax
cmp eax, esi
jl 0x180050d9c
lea esi, [rsi*2 + 1]
movsxd rdx, esi
add rdx, 8
jmp 0x180050d82
mov esi, 2
mov rcx, r9
lea edx, [rsi + 8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180050d9c
test rbx, rbx
jne 0x180050d95
mov dword [rax + 4], ebx
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180050d50
test r15d, r15d
jne 0x180050d30
mov r14, qword [rsp + 0x48]
mov esi, 0x4000
mov rdi, r14
mov rcx, qword [rdi]
test rcx, rcx
je 0x180050dd8
add rcx, 0xfffffffffffffff8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add rdi, 8
sub rsi, 1
jne 0x180050dc6
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r15d, dword [rsp + 0xa8]
mov eax, 0x80010003
mov r13, qword [rsp + 0xa0]
lea ecx, [r15 + 0x7ffe]
imul ecx
add edx, ecx
lea ecx, [r15 + 2]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add edx, eax
lea ecx, [rcx + rdx*4]
add ecx, edx
cmp dword [rbx - 4], ecx
jle 0x180050fe1
xor eax, eax
mov dword [rbx - 4], 2
mov r14d, eax
test r15d, r15d
jle 0x180050fe1
lea rsi, [rbx - 8]
mov eax, 0x7fff
xor r12d, r12d
nop dword [rax + rax]
mov ecx, dword [rsi]
mov ebp, r15d
sub ebp, r14d
cmp ebp, eax
mov edi, ebp
cmovg edi, eax
mov eax, dword [rbx - 4]
inc eax
cmp eax, ecx
jl 0x180050e93
lea eax, [rcx + rcx]
mov rcx, rsi
movsxd rdx, eax
lea r15d, [rax + 1]
add rdx, 9
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180050e8b
lea rbx, [rax + 8]
mov dword [rax], r15d
mov r15d, dword [rsp + 0xa8]
movsxd rax, dword [rbx - 4]
cmp ebp, edi
sete cl
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180050ed6
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180050ed6
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180050f15
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180050f15
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov ecx, edi
sar ecx, 8
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180050f58
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180050f58
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
lea rsi, [rbx - 8]
movzx ecx, dil
not cl
mov byte [rax + rbx], cl
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov ecx, dword [rsi]
inc eax
cmp eax, ecx
jl 0x180050fa2
lea eax, [rcx + rcx]
mov rcx, rsi
movsxd rdx, eax
lea ebp, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180050fa2
lea rbx, [rax + 8]
mov dword [rax], ebp
mov rsi, rax
movsxd rax, dword [rbx - 4]
mov ecx, edi
not ecx
movsxd rdx, r14d
sar ecx, 8
add rdx, r13
movsxd r8, edi
mov byte [rax + rbx], cl
inc dword [rbx - 4]
movsxd rcx, dword [rbx - 4]
add rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx - 4], edi
add r14d, edi
mov eax, 0x7fff
cmp r14d, r15d
jl 0x180050e50
mov r12, qword [rsp + 0x38]
xor r14d, r14d
mov edi, 1
mov esi, r14d
test r12, r12
jle 0x180051062
mov eax, 0x5e6ea9af
mov r9d, r14d
imul r15d
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x15b0
sub r15d, eax
movsxd r8, r15d
mov rcx, r14
test r8, r8
jle 0x180051030
lea rdx, [r9 + r13]
nop
movzx eax, byte [rcx + rdx]
inc rcx
add edi, eax
add esi, edi
cmp rcx, r8
jl 0x180051020
mov eax, 0x80078071
add r9, r8
mul edi
mov r8d, 0x15b0
shr edx, 0xf
imul eax, edx, 0xffff000f
add edi, eax
mov eax, 0x80078071
mul esi
shr edx, 0xf
imul eax, edx, 0xffff000f
add esi, eax
cmp r9, r12
jl 0x180051012
mov eax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov edx, dword [rcx]
inc eax
mov r15, qword [rsp + 0x60]
mov r13, qword [rsp + 0x68]
mov r12, qword [rsp + 0xb8]
cmp eax, edx
jl 0x1800510a1
lea eax, [rdx + rdx]
movsxd rdx, eax
lea ebp, [rax + 1]
add rdx, 9
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800510a1
lea rbx, [rax + 8]
mov dword [rax], ebp
movsxd rax, dword [rbx - 4]
mov ecx, esi
shr ecx, 8
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x1800510e4
lea eax, [rdx + rdx]
movsxd rdx, eax
lea ebp, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800510e4
lea rbx, [rax + 8]
mov dword [rax], ebp
movsxd rax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov byte [rax + rbx], sil
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180051123
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180051123
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov ecx, edi
shr ecx, 8
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180051166
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
add rdx, 9
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180051166
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov rdx, rbx
mov byte [rax + rbx], dil
inc dword [rbx - 4]
movsxd rcx, dword [rbx - 4]
mov rax, qword [rsp + 0xb0]
mov r8, rcx
mov dword [rax], ecx
lea rcx, [rbx - 8]
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx - 8]
add rsp, 0x70
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret