Function at 0x180015ae0
Capabilities:
Compute adler32 checksum

Disassembly:
push rbx
push rbp
push rsi
push r14
sub rsp, 0x88
mov rsi, rcx
mov qword [rsp + 0x48], rcx
xor ebp, ebp
mov qword [rsp + 0x68], r8
mov ebx, ebp
mov dword [rsp + 0x38], edx
mov ecx, 0x20000
mov qword [rsp + 0x28], rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x50], rax
mov r14, rax
test rax, rax
jne 0x180015b2c
add rsp, 0x88
pop r14
pop rsi
pop rbp
pop rbx
ret
mov qword [rsp + 0xc8], rdi
mov edx, 0xa
mov qword [rsp + 0x80], r12
xor ecx, ecx
mov qword [rsp + 0x78], r13
mov qword [rsp + 0x70], r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180015b68
lea rbx, [rax + 8]
mov qword [rax], 2
mov qword [rsp + 0x28], rbx
movsxd rax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov r8, 0xffffffffffffffff
mov byte [rax + rbx], 0x78
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180015bba
lea eax, [rdx + rdx]
movsxd rdx, eax
lea edi, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, r8
test rbx, rbx
cmove rcx, rbp
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180015bba
lea rbx, [rax + 8]
mov dword [rax], edi
mov qword [rsp + 0x28], rbx
movsxd rax, dword [rbx - 4]
mov edi, 3
xor edx, edx
mov dword [rsp + 0x20], edi
mov r8d, 0x20000
mov rcx, r14
mov r15d, edi
mov byte [rax + rbx], 0x5e
inc dword [rbx - 4]
call sub.VCRUNTIME140.dll_memset
mov r11d, dword [rsp + 0x38]
lea r13d, [rdi + 4]
mov r10d, ebp
mov dword [rsp + 0x34], ebp
lea eax, [r11 - 3]
test eax, eax
jle 0x18001673f
lea rdx, [rdi - 7]
movsxd r13, r10d
mov qword [rsp + 0x40], rbp
movzx eax, byte [rsi + r13 + 1]
movzx ecx, byte [rsi + r13 + 2]
shl eax, 8
shl ecx, 0x10
add ecx, eax
movzx eax, byte [rsi + r13]
add ecx, eax
lea eax, [rcx*8]
xor ecx, eax
mov eax, ecx
shr eax, 5
add ecx, eax
mov eax, ecx
shl eax, 4
xor ecx, eax
mov eax, ecx
shr eax, 0x11
add ecx, eax
mov eax, ecx
shl eax, 0x19
xor ecx, eax
mov eax, ecx
shr eax, 6
add eax, ecx
mov ecx, 3
and eax, 0x3fff
mov dword [rsp + 0x30], ecx
mov r15d, eax
mov qword [rsp + 0x60], r15
lea r12, [r14 + rax*8]
mov r14, qword [r14 + rax*8]
mov qword [rsp + 0x58], r12
test r14, r14
je 0x180015c7e
mov eax, dword [r14 - 4]
jmp 0x180015c80
mov eax, ebp
test r14, r14
mov rsi, rbp
movsxd rbp, eax
lea rax, [r14 - 4]
cmove rax, rdx
test rbp, rbp
jle 0x180015d3b
mov r12, qword [rsp + 0x48]
lea eax, [r10 - 0x8000]
movsxd r15, eax
xor ebx, ebx
nop dword [rax + rax]
mov r9, qword [r14 + rsi*8]
mov rax, r9
sub rax, r12
cmp rax, r15
jle 0x180015d20
mov eax, r11d
mov r8d, ebx
sub eax, r10d
mov rdx, rbx
test eax, eax
jle 0x180015d0f
mov r11, r13
movsxd r10, eax
sub r11, r9
add r11, r12
nop dword [rax + rax]
cmp rdx, 0x102
jge 0x180015d01
lea rcx, [rdx + r9]
movzx eax, byte [r11 + rcx]
cmp byte [rcx], al
jne 0x180015d01
inc r8d
inc rdx
cmp rdx, r10
jl 0x180015ce0
mov ecx, dword [rsp + 0x30]
mov r10d, dword [rsp + 0x34]
mov r11d, dword [rsp + 0x38]
cmp r8d, ecx
jl 0x180015d20
mov ecx, r8d
mov qword [rsp + 0x40], r9
mov dword [rsp + 0x30], ecx
inc rsi
cmp rsi, rbp
jl 0x180015cb0
mov rbx, qword [rsp + 0x28]
lea rax, [r14 - 4]
mov r12, qword [rsp + 0x58]
mov r15, qword [rsp + 0x60]
test r14, r14
je 0x180015d62
cmp dword [rax], 0x10
jne 0x180015d62
lea rdx, [r14 + 0x40]
mov r8d, 0x40
mov rcx, r14
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [r12]
mov dword [rax - 4], 8
mov r9, qword [r12]
lea r8, [r9 - 8]
test r9, r9
je 0x180015d86
mov eax, dword [r9 - 4]
inc eax
cmp eax, dword [r8]
jl 0x180015dce
mov eax, dword [r8]
lea esi, [rax*2 + 1]
jmp 0x180015d8b
mov esi, 2
lea eax, [rsi*8]
movsxd rdx, eax
mov rax, 0xffffffffffffffff
add rdx, 8
cmovb rdx, rax
xor ebp, ebp
test r9, r9
mov ecx, ebp
cmovne rcx, r8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180015dce
cmp qword [r12], rbp
jne 0x180015dc3
mov dword [rax + 4], ebp
add rax, 8
mov qword [r12], rax
mov dword [rax - 8], esi
mov r9, qword [rsp + 0x50]
movsxd r10, dword [rsp + 0x34]
mov r8, qword [rsp + 0x48]
mov eax, r15d
lea rcx, [r8 + r10]
mov rdx, qword [r9 + rax*8]
movsxd rax, dword [rdx - 4]
mov qword [rdx + rax*8], rcx
mov eax, r15d
mov r15, qword [rsp + 0x40]
mov rcx, qword [r9 + rax*8]
inc dword [rcx - 4]
test r15, r15
je 0x18001654a
movzx edx, byte [r10 + r8 + 3]
movzx eax, byte [r10 + r8 + 2]
shl eax, 8
shl edx, 0x10
add edx, eax
movzx eax, byte [r10 + r8 + 1]
add edx, eax
lea eax, [rdx*8]
xor edx, eax
mov eax, edx
shr eax, 5
add edx, eax
mov eax, edx
shl eax, 4
xor edx, eax
mov eax, edx
shr eax, 0x11
add edx, eax
mov eax, edx
shl eax, 0x19
xor edx, eax
mov eax, edx
shr eax, 6
add eax, edx
xor edx, edx
and eax, 0x3fff
mov r14, qword [r9 + rax*8]
test r14, r14
je 0x180015e66
mov eax, dword [r14 - 4]
jmp 0x180015e68
mov eax, edx
movsxd rsi, eax
mov r11, rdx
test eax, eax
jle 0x180015efd
mov r12d, dword [rsp + 0x30]
lea eax, [r10 - 0x7fff]
movsxd rbp, eax
nop word [rax + rax]
mov r9, qword [r14 + r11*8]
mov rax, r9
sub rax, r8
cmp rax, rbp
jle 0x180015ef5
mov eax, dword [rsp + 0x38]
mov r8d, edx
sub eax, r10d
dec eax
test eax, eax
jle 0x180015ee5
mov r15, qword [rsp + 0x48]
movsxd r10, eax
cmp rdx, 0x102
jge 0x180015edb
lea rax, [rdx + r13]
movzx ecx, byte [rax + r15 + 1]
cmp byte [rdx + r9], cl
jne 0x180015edb
inc r8d
inc rdx
cmp rdx, r10
jl 0x180015eb7
mov r15, qword [rsp + 0x40]
mov r10d, dword [rsp + 0x34]
cmp r8d, r12d
mov r8, qword [rsp + 0x48]
jg 0x18001654a
xor edx, edx
inc r11
cmp r11, rsi
jl 0x180015e90
mov r13d, dword [rsp + 0x30]
mov r12d, r8d
sub r12d, r15d
mov ecx, edx
add r12d, r10d
mov r14, rdx
mov dword [rsp + 0x40], r12d
cmp r13d, 3
jle 0x180015f45
lea r8, [0x180000000]
nop dword [rax]
nop word [rax + rax]
movzx eax, word [r8 + r14*2 + 0x1b4434]
inc r14
dec eax
inc ecx
cmp r13d, eax
jg 0x180015f30
lea eax, [rcx + 0x101]
cmp eax, 0x8f
jg 0x18001601a
add ecx, 0x131
mov r8d, 8
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180015f62
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 8
or edi, edx
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x18001628c
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
lea r12, [r13 - 1]
test rbx, rbx
je 0x180015fc2
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x180016001
lea esi, [rsi*2 + 1]
jmp 0x180015fc7
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r12
add rcx, rbx
test rbx, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016001
test rbx, rbx
jne 0x180015ffa
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180015fa8
jmp 0x18001627d
cmp eax, 0xff
jg 0x1800160e9
add ecx, 0x201
mov r8d, 9
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180016031
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 9
or edi, edx
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x18001628c
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
lea r12, [r13 - 1]
test rbx, rbx
je 0x180016091
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x1800160d0
lea esi, [rsi*2 + 1]
jmp 0x180016096
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r12
add rcx, rbx
test rbx, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800160d0
test rbx, rbx
jne 0x1800160c9
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180016077
jmp 0x18001627d
cmp eax, 0x117
jg 0x1800161b8
inc ecx
mov r8d, 7
nop dword [rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180016100
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 7
or edi, edx
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x18001628c
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
lea r12, [r13 - 1]
test rbx, rbx
je 0x180016160
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x18001619f
lea esi, [rsi*2 + 1]
jmp 0x180016165
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r12
add rcx, rbx
test rbx, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x18001619f
test rbx, rbx
jne 0x180016198
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180016146
jmp 0x18001627d
add ecx, 0xa9
mov r8d, 8
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1800161c4
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 8
or edi, edx
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x18001628c
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
lea r12, [r13 - 1]
nop word [rax + rax]
test rbx, rbx
je 0x18001622a
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x180016269
lea esi, [rsi*2 + 1]
jmp 0x18001622f
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r12
add rcx, rbx
test rbx, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016269
test rbx, rbx
jne 0x180016262
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180016210
mov r13d, dword [rsp + 0x30]
mov r12d, dword [rsp + 0x40]
mov qword [rsp + 0x28], rbx
lea rax, [0x180000000]
movzx r8d, byte [r14 + rax + 0x1b4410]
test r8b, r8b
je 0x18001635e
movzx eax, word [rax + r14*2 + 0x1b4430]
mov ecx, r15d
mov edx, r13d
mov qword [rsp + 0x28], rbx
sub edx, eax
add r15d, r8d
shl edx, cl
or edi, edx
cmp r15d, 8
jl 0x18001635e
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
lea r12, [r13 - 1]
test rbx, rbx
je 0x1800162fc
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x18001633b
lea esi, [rsi*2 + 1]
jmp 0x180016301
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r12
add rcx, rbx
test rbx, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x18001633b
test rbx, rbx
jne 0x180016334
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1800162e2
mov r12d, dword [rsp + 0x40]
mov r13d, dword [rsp + 0x30]
mov qword [rsp + 0x28], rbx
xor edx, edx
mov ecx, edx
mov r14d, edx
cmp r12d, 1
jle 0x180016397
lea rdx, [0x180000000]
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rdx + r14*2 + 0x1b43d4]
inc r14
dec eax
inc ecx
cmp r12d, eax
jg 0x180016380
xor edx, edx
mov r8d, 5
nop dword [rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1800163a0
mov ecx, r15d
add r15d, 5
shl edx, cl
or edi, edx
mov dword [rsp + 0x20], r15d
cmp r15d, 8
jl 0x180016462
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
mov dword [rsp + 0x20], r15d
lea r15, [r13 - 1]
test rbx, rbx
je 0x180016400
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x18001643f
lea esi, [rsi*2 + 1]
jmp 0x180016405
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r15
add rcx, rbx
test rbx, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x18001643f
test rbx, rbx
jne 0x180016438
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1800163e6
mov r15d, dword [rsp + 0x20]
mov r13d, dword [rsp + 0x30]
mov qword [rsp + 0x28], rbx
lea rax, [0x180000000]
movzx edx, byte [r14 + rax + 0x1b43b0]
test dl, dl
je 0x18001653d
movzx eax, word [rax + r14*2 + 0x1b43d0]
mov ecx, r15d
sub r12d, eax
mov qword [rsp + 0x28], rbx
shl r12d, cl
add r15d, edx
or edi, r12d
mov dword [rsp + 0x20], r15d
cmp r15d, 8
jl 0x18001653d
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
mov dword [rsp + 0x20], r15d
lea r15, [r13 - 1]
test rbx, rbx
je 0x1800164db
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x18001651a
lea esi, [rsi*2 + 1]
jmp 0x1800164e0
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r15
add rcx, rbx
test rbx, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x18001651a
test rbx, rbx
jne 0x180016513
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1800164c1
mov r15d, dword [rsp + 0x20]
mov r13d, dword [rsp + 0x30]
mov qword [rsp + 0x28], rbx
mov r10d, dword [rsp + 0x34]
add r10d, r13d
jmp 0x180016711
movsxd rax, r10d
movzx ecx, byte [rax + r8]
cmp cl, 0x8f
ja 0x180016632
add ecx, 0x30
xor r14d, r14d
mov edx, r14d
lea r8d, [r14 + 8]
nop dword [rax + rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180016570
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 8
or edi, edx
mov dword [rsp + 0x20], r15d
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x18001670e
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
lea r15d, [r15 + rax*8]
mov dword [rsp + 0x20], r15d
mov r15, 0xffffffffffffffff
test rbx, rbx
je 0x1800165da
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x180016619
lea esi, [rsi*2 + 1]
jmp 0x1800165df
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r15
add rcx, rbx
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016619
test rbx, rbx
jne 0x180016612
mov dword [rax + 4], r14d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1800165c0
jmp 0x1800166ff
add ecx, 0x100
xor r14d, r14d
mov edx, r14d
lea r8d, [r14 + 9]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180016642
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 9
or edi, edx
mov dword [rsp + 0x20], r15d
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x18001670e
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
lea r15d, [r15 + rax*8]
mov dword [rsp + 0x20], r15d
mov r15, 0xffffffffffffffff
test rbx, rbx
je 0x1800166ac
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x1800166eb
lea esi, [rsi*2 + 1]
jmp 0x1800166b1
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r15
add rcx, rbx
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800166eb
test rbx, rbx
jne 0x1800166e4
mov dword [rax + 4], r14d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180016692
mov r10d, dword [rsp + 0x34]
mov r15d, dword [rsp + 0x20]
mov qword [rsp + 0x28], rbx
inc r10d
mov r11d, dword [rsp + 0x38]
mov ebp, 0
mov rsi, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
mov dword [rsp + 0x34], r10d
lea eax, [r11 - 3]
lea rdx, [rbp - 4]
cmp r10d, eax
jl 0x180015c01
lea r13d, [rbp + 7]
movsxd r14, r10d
movsxd r12, r11d
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x28], r12
cmp r14, r12
jge 0x180016911
nop dword [rax + rax]
movzx r8d, byte [r14 + rsi]
mov edx, ebp
cmp r8b, 0x8f
ja 0x180016832
lea ecx, [r8 + 0x30]
mov r8d, 8
nop dword [rax + rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180016780
mov ecx, r15d
add r15d, 8
shl edx, cl
or edi, edx
cmp r15d, 8
jl 0x180016900
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r12d, r12d
lea r15d, [r15 + rax*8]
lea r14, [r12 - 1]
nop dword [rax]
test rbx, rbx
je 0x1800167da
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x180016819
lea esi, [rsi*2 + 1]
jmp 0x1800167df
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r14
add rcx, rbx
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016819
test rbx, rbx
jne 0x180016812
mov dword [rax + 4], r12d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1800167c0
jmp 0x1800168ef
add r8d, 0x100
mov r9d, 9
nop
mov ecx, r8d
lea eax, [rdx + rdx]
and ecx, 1
sar r8d, 1
mov edx, ecx
or edx, eax
sub r9d, 1
jne 0x180016840
mov ecx, r15d
add r15d, 9
shl edx, cl
or edi, edx
cmp r15d, 8
jl 0x180016900
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r12d, r12d
lea r15d, [r15 + rax*8]
lea r14, [r12 - 1]
test rbx, rbx
je 0x18001689c
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x1800168db
lea esi, [rsi*2 + 1]
jmp 0x1800168a1
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r14
add rcx, rbx
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800168db
test rbx, rbx
jne 0x1800168d4
mov dword [rax + 4], r12d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180016882
mov rsi, qword [rsp + 0x48]
xor ebp, ebp
mov r12, qword [rsp + 0x28]
mov r14, qword [rsp + 0x40]
inc r14
mov qword [rsp + 0x40], r14
cmp r14, r12
jl 0x180016760
xor r14d, r14d
mov ecx, r14d
mov edx, r14d
nop word [rax + rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r13d, 1
jne 0x180016920
mov ecx, r15d
add r15d, 7
shl edx, cl
or edi, edx
cmp r15d, 8
jl 0x1800169d2
mov ebp, r15d
mov r12, 0xffffffffffffffff
shr rbp, 3
mov eax, ebp
neg eax
lea r15d, [r15 + rax*8]
nop dword [rax]
test rbx, rbx
je 0x18001697a
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x1800169b9
lea esi, [rsi*2 + 1]
jmp 0x18001697f
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r12
add rcx, rbx
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800169b9
test rbx, rbx
jne 0x1800169b2
mov dword [rax + 4], r14d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180016960
mov r12, qword [rsp + 0x28]
test r15d, r15d
je 0x180016a7b
mov r12, 0xffffffffffffffff
inc r15d
cmp r15d, 8
jl 0x180016a6d
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
lea r15d, [r15 + rax*8]
nop
test rbx, rbx
je 0x180016a1a
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x180016a59
lea esi, [rsi*2 + 1]
jmp 0x180016a1f
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r12
add rcx, rbx
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016a59
test rbx, rbx
jne 0x180016a52
mov dword [rax + 4], r14d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180016a00
test r15d, r15d
jne 0x1800169e2
mov r12, qword [rsp + 0x28]
mov r14, qword [rsp + 0x50]
mov esi, 0x4000
mov rdi, r14
mov rcx, qword [rdi]
test rcx, rcx
je 0x180016a9a
add rcx, 0xfffffffffffffff8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add rdi, 8
sub rsi, 1
jne 0x180016a88
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r15d, dword [rsp + 0x38]
mov eax, 0x80010003
mov r13, qword [rsp + 0x48]
lea ecx, [r15 + 0x7ffe]
imul ecx
add edx, ecx
lea ecx, [r15 + 2]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add edx, eax
lea ecx, [rcx + rdx*4]
add ecx, edx
cmp dword [rbx - 4], ecx
jle 0x180016cca
xor eax, eax
mov dword [rbx - 4], 2
mov r14d, eax
test r15d, r15d
jle 0x180016cca
lea rsi, [rbx - 8]
mov eax, 0x7fff
xor r12d, r12d
mov ecx, dword [rsi]
mov ebp, r15d
sub ebp, r14d
cmp ebp, eax
mov edi, ebp
cmovg edi, eax
mov eax, dword [rbx - 4]
inc eax
cmp eax, ecx
jl 0x180016b52
lea eax, [rcx + rcx]
mov rcx, rsi
movsxd rdx, eax
lea r15d, [rax + 1]
inc rdx
mov rax, 0xffffffffffffffff
add rdx, 8
cmovb rdx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016b4d
lea rbx, [rax + 8]
mov dword [rax], r15d
mov r15d, dword [rsp + 0x38]
movsxd rax, dword [rbx - 4]
cmp ebp, edi
mov rbp, 0xffffffffffffffff
sete cl
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180016ba3
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, rbp
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016ba3
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180016be9
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, rbp
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016be9
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov ecx, edi
sar ecx, 8
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180016c33
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, rbp
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016c33
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
lea rsi, [rbx - 8]
movzx ecx, dil
not cl
mov byte [rax + rbx], cl
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov ecx, dword [rsi]
inc eax
cmp eax, ecx
jl 0x180016c8b
lea eax, [rcx + rcx]
mov rcx, rsi
movsxd rdx, eax
lea ebp, [rax + 1]
inc rdx
mov rax, 0xffffffffffffffff
add rdx, 8
cmovb rdx, rax
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016c8b
lea rbx, [rax + 8]
mov dword [rax], ebp
mov rsi, rax
movsxd rax, dword [rbx - 4]
mov ecx, edi
not ecx
movsxd rdx, r14d
sar ecx, 8
add rdx, r13
movsxd r8, edi
mov byte [rax + rbx], cl
inc dword [rbx - 4]
movsxd rcx, dword [rbx - 4]
add rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx - 4], edi
add r14d, edi
mov eax, 0x7fff
cmp r14d, r15d
jl 0x180016b04
mov r12, qword [rsp + 0x28]
xor r14d, r14d
mov edi, 1
mov esi, r14d
test r12, r12
jle 0x180016d52
mov eax, 0x5e6ea9af
mov r9d, r14d
imul r15d
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x15b0
sub r15d, eax
movsxd r8, r15d
nop dword [rax + rax]
mov rcx, r14
test r8, r8
jle 0x180016d20
lea rdx, [r9 + r13]
nop dword [rax]
movzx eax, byte [rcx + rdx]
inc rcx
add edi, eax
add esi, edi
cmp rcx, r8
jl 0x180016d10
mov eax, 0x80078071
add r9, r8
mul edi
mov r8d, 0x15b0
shr edx, 0xf
imul eax, edx, 0xffff000f
add edi, eax
mov eax, 0x80078071
mul esi
shr edx, 0xf
imul eax, edx, 0xffff000f
add esi, eax
cmp r9, r12
jl 0x180016d00
mov eax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov edx, dword [rcx]
inc eax
mov r13, qword [rsp + 0x78]
mov r15, 0xffffffffffffffff
mov r12, qword [rsp + 0x80]
cmp eax, edx
jl 0x180016d9a
lea eax, [rdx + rdx]
movsxd rdx, eax
lea ebp, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016d9a
lea rbx, [rax + 8]
mov dword [rax], ebp
movsxd rax, dword [rbx - 4]
mov ecx, esi
shr ecx, 8
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180016de4
lea eax, [rdx + rdx]
movsxd rdx, eax
lea ebp, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, r15
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016de4
lea rbx, [rax + 8]
mov dword [rax], ebp
movsxd rax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov byte [rax + rbx], sil
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180016e2a
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, r15
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016e2a
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov ecx, edi
shr ecx, 8
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180016e74
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, r15
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016e74
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov rdx, rbx
mov byte [rax + rbx], dil
inc dword [rbx - 4]
movsxd rcx, dword [rbx - 4]
mov rax, qword [rsp + 0x68]
mov r8, rcx
mov dword [rax], ecx
lea rcx, [rbx - 8]
call sub.VCRUNTIME140.dll_memmove
mov r15, qword [rsp + 0x70]
lea rax, [rbx - 8]
mov rdi, qword [rsp + 0xc8]
add rsp, 0x88
pop r14
pop rsi
pop rbp
pop rbx
ret