Function at 0x18003a140
Capabilities:
Reference http user-agent string

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x180070310]
xor rax, rsp
mov qword [rbp + 8], rax
mov rsi, r9
mov r13d, r8d
mov dword [rsp + 0x40], r8d
mov r15, rdx
mov rbx, rcx
mov qword [rbp - 0x68], rcx
xor r14d, r14d
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], r14b
lea r12d, [r8 - 0xe]
cmp r8d, r12d
jbe 0x18003a414
lea edi, [r8 - 0xe6]
lea rdx, [0x180000000]
lea r11d, [r14 + 0x64]
lea r8d, [r14 + 0x77]
lea r9d, [r14 + 0x6e]
lea r10d, [r14 + 0x73]
cmp edi, 0x10
ja case.0x18003a1d3.3
mov ecx, dword [rdx + rdi*4 + 0x3b3d8]
add rcx, rdx
jmp rcx
mov word [rbp - 0x48], 0x4d
jmp case.0x18003a1d3.3
mov word [rbp - 0x55], r11w
mov eax, 0x6f
mov word [rbp - 0x54], ax
jmp case.0x18003a1d3.3
mov byte [rbp - 0x43], 0x6c
jmp case.0x18003a1d3.3
mov eax, 0x57
mov word [rbp - 0x58], ax
mov eax, 0x69
mov word [rbp - 0x57], ax
jmp case.0x18003a1d3.3
mov word [rbp - 0x53], r8w
jmp case.0x18003a1d3.3
mov ecx, 0x20
call fcn.180063980
mov r14, rax
mov qword [rbp - 0x20], rax
test rax, rax
je 0x18003a267
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x18003a250
mov rdx, rbx
mov rcx, rax
call fcn.180061b60
jmp 0x18003a26a
xor r14d, r14d
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rsp + 0x58], xmm1
xor r14d, r14d
jmp 0x18003a3ea
mov byte [rbp - 0x3d], 0
jmp case.0x18003a1d3.3
mov byte [rbp - 0x44], 0
mov r8d, 1
lea rdx, [0x180069ba0]
lea rcx, [rbp - 0x44]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp - 0x43], 0
jmp 0x18003a3ea
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], 0
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x18003a2d0
mov rdx, rsi
lea rcx, [rsp + 0x68]
call fcn.180061b60
nop
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x68]
mov ecx, 0x12b
call fcn.180038f90
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x18003a344
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003a33f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003a4ae
call fcn.1800639bc
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x48]
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x7e]
call fcn.180062790
jmp 0x18003a3ea
mov word [rbp - 0x56], r9w
jmp case.0x18003a1d3.3
movzx eax, word [0x180069bfa]
mov word [rbp - 0x47], ax
movzx eax, byte [0x180069bfc]
mov byte [rbp - 0x45], al
jmp case.0x18003a1d3.3
mov rcx, qword [r15 + 0x10]
mov rdx, qword [r15 + 0x18]
cmp rcx, rdx
jae 0x18003a3b4
lea rax, [rcx + 1]
mov qword [r15 + 0x10], rax
mov rax, r15
cmp rdx, 0x10
jb 0x18003a3ac
mov rax, qword [r15]
mov word [rax + rcx], 0xa
jmp 0x18003a3fc
mov r9b, 0xa
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, r15
call fcn.18001b380
jmp 0x18003a3ea
mov word [rbp - 0x52], r10w
jmp case.0x18003a1d3.3
mov byte [rbp - 0x42], 0
mov r8d, 5
lea rdx, [0x180069c26]
lea rcx, [rbp - 0x42]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r8d, 0x77
lea r9d, [r8 - 9]
lea r10d, [r8 - 4]
lea r11d, [r8 - 0x13]
lea rdx, [0x180000000]
dec edi
lea eax, [rdi + 0xe6]
cmp eax, r12d
ja 0x18003a1c0
mov edi, r13d
lea esi, [r13 + 0x8c9]
cmp r13d, esi
jae 0x18003a5e4
mov ecx, 0x41
mov edx, 0x4e20
lea eax, [rcx - 0x13]
mov ebx, 0x5765
lea r14d, [rcx + 0x2f]
lea r8d, [rcx + 0x13]
lea r11d, [rcx + 0x2b]
mov r15d, 0x7469
lea r9d, [rcx + 0xa]
lea r10d, [rcx + 7]
mov r12d, 0x3633
nop dword [rax]
cmp edi, 0x504
ja 0x18003a554
je 0x18003a548
cmp edi, 0x2fd
ja 0x18003a51a
je 0x18003a507
cmp edi, 0xf6
je 0x18003a4fb
cmp edi, 0x1a3
je 0x18003a4b5
cmp edi, 0x250
jne 0x18003a5d2
mov word [rbp - 0x18], cx
mov word [rbp - 0x17], r14w
jmp 0x18003a5d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov eax, dword [str.Win6]
mov dword [rbp - 0x30], eax
movzx eax, byte [0x180069c8c]
mov byte [rbp - 0x2c], al
mov r8d, 0xa
lea rdx, [rbp - 0x2c]
lea ecx, [r8 - 6]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ltoa]
mov ecx, 0x41
mov edx, 0x4e20
lea r8d, [rcx + 0x13]
lea r9d, [rcx + 0xa]
lea r10d, [rcx + 7]
lea r11d, [rcx + 0x2b]
jmp 0x18003a5cd
mov dword [rbp - 0x51], 0x544e20
jmp 0x18003a5d2
mov word [rbp - 0x16], r14w
mov word [rbp - 0x15], r11w
mov word [rbp - 0x14], bx
jmp 0x18003a5d2
cmp edi, 0x3aa
je 0x18003a53c
cmp edi, 0x457
jne 0x18003a5d2
mov word [rbp - 0xf], r15w
mov byte [rbp - 0xd], 0
jmp 0x18003a5d2
mov dword [rbp - 0x12], 0x4b6265
jmp 0x18003a5d2
mov dword [rbp - 0x20], 0x373335
jmp 0x18003a5d2
cmp edi, 0x7b8
ja 0x18003a59c
je 0x18003a593
cmp edi, 0x5b1
je 0x18003a58d
cmp edi, 0x65e
je 0x18003a582
cmp edi, 0x70b
jne 0x18003a5d2
mov word [rbp - 0x28], r9w
mov word [rbp - 0x27], r10w
jmp 0x18003a5d2
mov word [rbp - 0x1c], r12w
mov byte [rbp - 0x1a], 0
jmp 0x18003a5d2
mov word [rbp - 0x1d], ax
jmp 0x18003a5d2
mov dword [rbp - 0x26], 0x4c4d54
jmp 0x18003a5d2
cmp edi, 0x865
je 0x18003a5b4
cmp edi, 0x912
jne 0x18003a5d2
mov word [rbp - 0x75], 0x65
jmp 0x18003a5d2
movzx eax, word [0x180069c9f]
mov word [rbp - 0x78], ax
movzx eax, byte [0x180069ca1]
mov byte [rbp - 0x76], al
mov byte [rbp - 0x75], 0
mov eax, 0x2e
add edi, 0xad
cmp edi, esi
jb 0x18003a460
mov rbx, qword [rbp - 0x68]
mov r14d, r13d
imul r15d, r13d, 0x179
cmp r13d, r15d
ja 0x18003a96d
imul r12d, r13d, 0x1d
mov edx, 0x47
mov eax, 0x6f72
mov ecx, 0x656d
lea r8d, [rdx + 0x1c]
lea r9d, [rdx + 0x24]
lea r13d, [rdx + 0x1e]
mov r10d, 0x6153
nop dword [rax]
cmp r14d, 0xa82a
ja 0x18003a738
je 0x18003a6fe
cmp r14d, 0x5490
ja 0x18003a6ae
je 0x18003a6a1
cmp r14d, 0xf6
je 0x18003a693
cmp r14d, 0x1cd4
je 0x18003a679
cmp r14d, 0x38b2
jne 0x18003a94c
mov r8d, 2
lea rdx, [0x180069cef]
lea rcx, [rbp - 0x60]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x18003a93d
mov word [rbp - 0x66], r8w
mov word [rbp - 0x65], r9w
mov r8d, 0x6f
mov word [rbp - 0x64], r8w
jmp 0x18003a94c
mov word [rbp - 0x68], dx
mov word [rbp - 0x67], r13w
jmp 0x18003a94c
mov word [rbp - 0x5e], ax
mov byte [rbp - 0x5c], 0
jmp 0x18003a94c
cmp r14d, 0x706e
je 0x18003a6f5
cmp r14d, 0x8c4c
jne 0x18003a94c
mov byte [rbp - 0x5a], 0
mov r8d, 0xa
lea rdx, [rbp - 0x70]
lea ecx, [r8 - 2]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ltoa]
mov r8d, 0xa
lea rdx, [rbp - 0x6f]
lea ecx, [r8 - 7]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ultoa]
jmp 0x18003a93d
mov word [rbp - 0x5c], cx
jmp 0x18003a94c
lea rcx, [rbp - 0x70]
dec rcx
lea rcx, [rcx + 1]
cmp byte [rcx], 0
jne 0x18003a705
movzx eax, word [0x180069ca4]
mov word [rcx], ax
mov r8d, 1
lea rdx, [0x180069ca8]
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov byte [rbp - 0x38], 0
jmp 0x18003a93d
cmp r14d, 0x117a2
ja 0x18003a811
je 0x18003a7c0
cmp r14d, 0xc408
je 0x18003a7a4
cmp r14d, 0xdfe6
je 0x18003a77f
cmp r14d, 0xfbc4
jne 0x18003a94c
mov r8d, 0xa
lea rdx, [rbp]
lea ecx, [r8 - 5]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itoa]
jmp 0x18003a93d
mov word [rbp - 8], r10w
mov byte [rbp - 6], 0
mov r8d, 4
lea rdx, [0x180069cc2]
lea rcx, [rbp - 8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18003a93d
mov r8d, 4
lea rdx, [0x180069d05]
lea rcx, [rbp - 0x38]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp 0x18003a93d
mov r8d, 0xa
lea rdx, [rbp + 1]
lea ecx, [r8 + 0x1b]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__ultoa]
mov r8d, 3
lea rdx, [0x180069cc8]
lea rcx, [rbp]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
lea rax, [rbp - 0x48]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x18003a7f6
lea rdx, [rbp - 0x48]
mov rcx, rbx
call fcn.180061b60
jmp 0x18003a93d
cmp r14d, 0x13380
je 0x18003a8c7
cmp r14d, 0x14f5e
jne 0x18003a94c
lea rax, [rbp - 0x58]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x18003a836
mov rdx, qword [rbx + 0x10]
mov rcx, qword [rbx + 0x18]
mov rax, rcx
sub rax, rdx
cmp rsi, rax
ja 0x18003a87f
lea rax, [rdx + rsi]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rcx, 0x10
jb 0x18003a866
mov rax, qword [rbx]
lea rdi, [rax + rdx]
mov r8, rsi
lea rdx, [rbp - 0x58]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], 0
jmp 0x18003a896
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x58]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.18001b4e0
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003a8c2
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003a8b7
mov rax, qword [rbx]
mov word [rax + rcx], 0x20
jmp 0x18003a93d
mov r9b, 0x20
jmp 0x18003a92e
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003a8f0
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003a8e8
mov rax, qword [rbx]
mov word [rax + rcx], 0x20
jmp 0x18003a902
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.18001b380
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003a92b
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003a923
mov rax, qword [rbx]
mov word [rax + rcx], 0x28
jmp 0x18003a93d
mov r9b, 0x28
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.18001b380
mov eax, 0x6f72
mov ecx, 0x656d
mov edx, 0x47
add r14d, r12d
cmp r14d, r15d
mov r8d, 0x63
lea r9d, [r8 + 8]
mov r10d, 0x6153
jbe 0x18003a620
mov r13d, dword [rsp + 0x40]
imul r14d, r13d, 0xa0e
cmp r13d, r14d
ja 0x18003b36e
imul r15d, r13d, 0xc6
mov r12d, 0x3739
nop word [rax + rax]
cmp r13d, 0x4768e
ja 0x18003ade1
je 0x18003adad
cmp r13d, 0x23bc2
ja 0x18003ac3d
je 0x18003abca
cmp r13d, 0xf6
je 0x18003ab34
cmp r13d, 0xbf3a
je 0x18003aa86
cmp r13d, 0x17d7e
jne 0x18003b362
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x18003aa24
lea rax, [rcx + 3]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003aa05
mov rax, qword [rbx]
lea rdi, [rax + rcx]
mov r8d, 3
lea rdx, [0x180069d28]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + 3], 0
jmp 0x18003aa43
mov qword [rsp + 0x20], 3
lea r9, [0x180069d28]
xor r8d, r8d
lea edx, [r8 + 3]
mov rcx, rbx
call fcn.18001b4e0
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003aa6f
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003aa64
mov rax, qword [rbx]
mov word [rax + rcx], 0x29
jmp 0x18003b327
mov r9b, 0x29
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.18001b380
jmp 0x18003b327
lea rax, [rbp - 0x30]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x18003aa91
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18003aada
lea rax, [rcx + rsi]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003aac1
mov rax, qword [rbx]
lea rdi, [rax + rcx]
mov r8, rsi
lea rdx, [rbp - 0x30]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rdi], 0
jmp 0x18003aaf1
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x30]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.18001b4e0
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003ab1d
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003ab12
mov rax, qword [rbx]
mov word [rax + rcx], 0x3b
jmp 0x18003b327
mov r9b, 0x3b
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.18001b380
jmp 0x18003b327
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x18003ab7b
lea rax, [rcx + 3]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003ab5c
mov rax, qword [rbx]
lea rdi, [rax + rcx]
mov r8d, 3
lea rdx, [0x180069d2c]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + 3], 0
jmp 0x18003ab9a
mov qword [rsp + 0x20], 3
lea r9, [0x180069d2c]
xor r8d, r8d
lea edx, [r8 + 3]
mov rcx, rbx
call fcn.18001b4e0
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003ab1d
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003abbf
mov rax, qword [rbx]
mov word [rcx + rax], 0x3b
jmp 0x18003b327
lea rax, [rbp - 0x18]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x18003abd5
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18003ac21
lea rax, [rcx + rsi]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003ac05
mov rax, qword [rbx]
lea rdi, [rax + rcx]
mov r8, rsi
lea rdx, [rbp - 0x18]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], 0
jmp 0x18003b362
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x18]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.18001b4e0
jmp 0x18003b362
cmp r13d, 0x2fa06
je 0x18003ad08
cmp r13d, 0x3b84a
jne 0x18003b362
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003ac80
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003ac78
mov rax, qword [rbx]
mov word [rax + rcx], 0x28
jmp 0x18003ac92
mov r9b, 0x28
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.18001b380
lea rax, [rbp - 0x28]
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x18003aca0
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18003acec
lea rax, [rcx + rsi]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003acd0
mov rax, qword [rbx]
lea rdi, [rax + rcx]
mov r8, rsi
lea rdx, [rbp - 0x28]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], 0
jmp 0x18003b362
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x28]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.18001b4e0
jmp 0x18003b362
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003ad31
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003ad29
mov rax, qword [rbx]
mov word [rax + rcx], 0x2f
jmp 0x18003ad43
mov r9b, 0x2f
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.18001b380
lea rax, [rbp - 0x20]
mov rsi, 0xffffffffffffffff
nop
inc rsi
cmp byte [rax + rsi], 0
jne 0x18003ad50
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18003ad9c
lea rax, [rcx + rsi]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003ad80
mov rax, qword [rbx]
lea rdi, [rax + rcx]
mov r8, rsi
lea rdx, [rbp - 0x20]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
jmp 0x18003b327
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x20]
mov rdx, rsi
jmp 0x18003b31c
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003add9
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003adce
mov rax, qword [rbx]
mov word [rax + rcx], 0x2c
jmp 0x18003b362
mov r9b, 0x2c
jmp 0x18003b353
cmp r13d, 0x76f9e
ja 0x18003b15e
je 0x18003b03d
cmp r13d, 0x534d2
je 0x18003af94
cmp r13d, 0x5f316
je 0x18003aef5
cmp r13d, 0x6b15a
jne 0x18003b362
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003ae44
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003ae3c
mov rax, qword [rbx]
mov word [rax + rcx], 0x20
jmp 0x18003ae56
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.18001b380
lea rax, [rbp - 0x60]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x18003ae61
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18003aeaa
lea rax, [rcx + rsi]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003ae91
mov rax, qword [rbx]
lea rdi, [rax + rcx]
mov r8, rsi
lea rdx, [rbp - 0x60]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rdi], 0
jmp 0x18003aec1
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x60]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.18001b4e0
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003aeed
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003aee2
mov rax, qword [rbx]
mov word [rax + rcx], 0x2f
jmp 0x18003b362
mov r9b, 0x2f
jmp 0x18003b353
lea rax, [rbp - 0x68]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x18003af00
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18003af49
lea rax, [rcx + rsi]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003af30
mov rax, qword [rbx]
lea rdi, [rax + rcx]
mov r8, rsi
lea rdx, [rbp - 0x68]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], 0
jmp 0x18003af60
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x68]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.18001b4e0
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003af8c
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003af81
mov rax, qword [rbx]
mov word [rax + rcx], 0x29
jmp 0x18003b362
mov r9b, 0x29
jmp 0x18003b353
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003afbd
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003afb5
mov rax, qword [rbx]
mov word [rax + rcx], 0x20
jmp 0x18003afcf
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.18001b380
lea rax, [rbp - 0x78]
mov rsi, 0xffffffffffffffff
nop word [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x18003afe0
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18003b02c
lea rax, [rcx + rsi]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003b010
mov rax, qword [rbx]
lea rdi, [rax + rcx]
mov r8, rsi
lea rdx, [rbp - 0x78]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], 0
jmp 0x18003b327
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x78]
mov rdx, rsi
jmp 0x18003b31c
lea rax, [rbp - 0x70]
mov rsi, 0xffffffffffffffff
nop dword [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x18003b050
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18003b099
lea rax, [rcx + rsi]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003b080
mov rax, qword [rbx]
lea rdi, [rax + rcx]
mov r8, rsi
lea rdx, [rbp - 0x70]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rdi], 0
jmp 0x18003b0b0
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x70]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.18001b4e0
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003b0d9
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003b0d1
mov rax, qword [rbx]
mov word [rax + rcx], 0x2e
jmp 0x18003b0eb
mov r9b, 0x2e
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.18001b380
lea rax, [rbp - 0x38]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x18003b0f6
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18003b142
lea rax, [rcx + rsi]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003b126
mov rax, qword [rbx]
lea rdi, [rax + rcx]
mov r8, rsi
lea rdx, [rbp - 0x38]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rdi], 0
jmp 0x18003b362
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x38]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.18001b4e0
jmp 0x18003b362
cmp r13d, 0x82de2
je 0x18003b298
cmp r13d, 0x8ec26
jne 0x18003b362
lea rax, [rbp - 8]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x18003b183
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18003b1cc
lea rax, [rcx + rsi]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003b1b3
mov rax, qword [rbx]
lea rdi, [rax + rcx]
mov r8, rsi
lea rdx, [rbp - 8]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rdi], 0
jmp 0x18003b1e3
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 8]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.18001b4e0
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003b20c
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003b204
mov rax, qword [rbx]
mov word [rax + rcx], 0x2f
jmp 0x18003b21e
mov r9b, 0x2f
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.18001b380
lea rax, [rbp]
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x18003b230
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18003b27c
lea rax, [rcx + rsi]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003b260
mov rax, qword [rbx]
lea rdi, [rax + rcx]
mov r8, rsi
lea rdx, [rbp]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
jmp 0x18003b362
mov qword [rsp + 0x20], rsi
lea r9, [rbp]
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.18001b4e0
jmp 0x18003b362
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18003b2c1
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003b2b9
mov rax, qword [rbx]
mov word [rax + rcx], 0x2e
jmp 0x18003b2d3
mov r9b, 0x2e
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.18001b380
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x18003b307
lea rax, [rcx + 2]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18003b2fb
mov rax, qword [rbx]
mov word [rax + rcx], r12w
mov byte [rax + rcx + 2], 0
jmp 0x18003b327
mov qword [rsp + 0x20], 2
lea r9, [0x180069d30]
mov edx, 2
xor r8d, r8d
mov rcx, rbx
call fcn.18001b4e0
mov rdx, qword [rbx + 0x18]
mov rcx, qword [rbx + 0x10]
cmp rcx, rdx
jae 0x18003b350
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
cmp rdx, 0x10
mov rax, rbx
jb 0x18003b348
mov rax, qword [rbx]
mov word [rax + rcx], 0x20
jmp 0x18003b362
mov r9b, 0x20
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.18001b380
add r13d, r15d
cmp r13d, r14d
jbe 0x18003a990
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x18003b3ae
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003b3a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003b3a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800639bc
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.1800643d0
mov rbx, qword [rsp + 0x160]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret