Function at 0x180015ad0
Capabilities:
Compute adler32 checksum

Disassembly:
push rbx
push rbp
push rsi
push r14
sub rsp, 0x88
mov rsi, rcx
mov qword [rsp + 0x48], rcx
xor ebp, ebp
mov qword [rsp + 0x68], r8
mov ebx, ebp
mov dword [rsp + 0x38], edx
mov ecx, 0x20000
mov qword [rsp + 0x28], rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x50], rax
mov r14, rax
test rax, rax
jne 0x180015b1c
add rsp, 0x88
pop r14
pop rsi
pop rbp
pop rbx
ret
mov qword [rsp + 0xc8], rdi
mov edx, 0xa
mov qword [rsp + 0x80], r12
xor ecx, ecx
mov qword [rsp + 0x78], r13
mov qword [rsp + 0x70], r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180015b58
lea rbx, [rax + 8]
mov qword [rax], 2
mov qword [rsp + 0x28], rbx
movsxd rax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov r8, 0xffffffffffffffff
mov byte [rax + rbx], 0x78
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180015baa
lea eax, [rdx + rdx]
movsxd rdx, eax
lea edi, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, r8
test rbx, rbx
cmove rcx, rbp
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180015baa
lea rbx, [rax + 8]
mov dword [rax], edi
mov qword [rsp + 0x28], rbx
movsxd rax, dword [rbx - 4]
mov edi, 3
xor edx, edx
mov dword [rsp + 0x20], edi
mov r8d, 0x20000
mov rcx, r14
mov r15d, edi
mov byte [rax + rbx], 0x5e
inc dword [rbx - 4]
call sub.VCRUNTIME140.dll_memset
mov r11d, dword [rsp + 0x38]
lea r13d, [rdi + 4]
mov r10d, ebp
mov dword [rsp + 0x34], ebp
lea eax, [r11 - 3]
test eax, eax
jle 0x18001672f
lea rdx, [rdi - 7]
movsxd r13, r10d
mov qword [rsp + 0x40], rbp
movzx eax, byte [rsi + r13 + 1]
movzx ecx, byte [rsi + r13 + 2]
shl eax, 8
shl ecx, 0x10
add ecx, eax
movzx eax, byte [rsi + r13]
add ecx, eax
lea eax, [rcx*8]
xor ecx, eax
mov eax, ecx
shr eax, 5
add ecx, eax
mov eax, ecx
shl eax, 4
xor ecx, eax
mov eax, ecx
shr eax, 0x11
add ecx, eax
mov eax, ecx
shl eax, 0x19
xor ecx, eax
mov eax, ecx
shr eax, 6
add eax, ecx
mov ecx, 3
and eax, 0x3fff
mov dword [rsp + 0x30], ecx
mov r15d, eax
mov qword [rsp + 0x60], r15
lea r12, [r14 + rax*8]
mov r14, qword [r14 + rax*8]
mov qword [rsp + 0x58], r12
test r14, r14
je 0x180015c6e
mov eax, dword [r14 - 4]
jmp 0x180015c70
mov eax, ebp
test r14, r14
mov rsi, rbp
movsxd rbp, eax
lea rax, [r14 - 4]
cmove rax, rdx
test rbp, rbp
jle 0x180015d2b
mov r12, qword [rsp + 0x48]
lea eax, [r10 - 0x8000]
movsxd r15, eax
xor ebx, ebx
nop dword [rax + rax]
mov r9, qword [r14 + rsi*8]
mov rax, r9
sub rax, r12
cmp rax, r15
jle 0x180015d10
mov eax, r11d
mov r8d, ebx
sub eax, r10d
mov rdx, rbx
test eax, eax
jle 0x180015cff
mov r11, r13
movsxd r10, eax
sub r11, r9
add r11, r12
nop dword [rax + rax]
cmp rdx, 0x102
jge 0x180015cf1
lea rcx, [rdx + r9]
movzx eax, byte [r11 + rcx]
cmp byte [rcx], al
jne 0x180015cf1
inc r8d
inc rdx
cmp rdx, r10
jl 0x180015cd0
mov ecx, dword [rsp + 0x30]
mov r10d, dword [rsp + 0x34]
mov r11d, dword [rsp + 0x38]
cmp r8d, ecx
jl 0x180015d10
mov ecx, r8d
mov qword [rsp + 0x40], r9
mov dword [rsp + 0x30], ecx
inc rsi
cmp rsi, rbp
jl 0x180015ca0
mov rbx, qword [rsp + 0x28]
lea rax, [r14 - 4]
mov r12, qword [rsp + 0x58]
mov r15, qword [rsp + 0x60]
test r14, r14
je 0x180015d52
cmp dword [rax], 0x10
jne 0x180015d52
lea rdx, [r14 + 0x40]
mov r8d, 0x40
mov rcx, r14
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [r12]
mov dword [rax - 4], 8
mov r9, qword [r12]
lea r8, [r9 - 8]
test r9, r9
je 0x180015d76
mov eax, dword [r9 - 4]
inc eax
cmp eax, dword [r8]
jl 0x180015dbe
mov eax, dword [r8]
lea esi, [rax*2 + 1]
jmp 0x180015d7b
mov esi, 2
lea eax, [rsi*8]
movsxd rdx, eax
mov rax, 0xffffffffffffffff
add rdx, 8
cmovb rdx, rax
xor ebp, ebp
test r9, r9
mov ecx, ebp
cmovne rcx, r8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180015dbe
cmp qword [r12], rbp
jne 0x180015db3
mov dword [rax + 4], ebp
add rax, 8
mov qword [r12], rax
mov dword [rax - 8], esi
mov r9, qword [rsp + 0x50]
movsxd r10, dword [rsp + 0x34]
mov r8, qword [rsp + 0x48]
mov eax, r15d
lea rcx, [r8 + r10]
mov rdx, qword [r9 + rax*8]
movsxd rax, dword [rdx - 4]
mov qword [rdx + rax*8], rcx
mov eax, r15d
mov r15, qword [rsp + 0x40]
mov rcx, qword [r9 + rax*8]
inc dword [rcx - 4]
test r15, r15
je 0x18001653a
movzx edx, byte [r10 + r8 + 3]
movzx eax, byte [r10 + r8 + 2]
shl eax, 8
shl edx, 0x10
add edx, eax
movzx eax, byte [r10 + r8 + 1]
add edx, eax
lea eax, [rdx*8]
xor edx, eax
mov eax, edx
shr eax, 5
add edx, eax
mov eax, edx
shl eax, 4
xor edx, eax
mov eax, edx
shr eax, 0x11
add edx, eax
mov eax, edx
shl eax, 0x19
xor edx, eax
mov eax, edx
shr eax, 6
add eax, edx
xor edx, edx
and eax, 0x3fff
mov r14, qword [r9 + rax*8]
test r14, r14
je 0x180015e56
mov eax, dword [r14 - 4]
jmp 0x180015e58
mov eax, edx
movsxd rsi, eax
mov r11, rdx
test eax, eax
jle 0x180015eed
mov r12d, dword [rsp + 0x30]
lea eax, [r10 - 0x7fff]
movsxd rbp, eax
nop word [rax + rax]
mov r9, qword [r14 + r11*8]
mov rax, r9
sub rax, r8
cmp rax, rbp
jle 0x180015ee5
mov eax, dword [rsp + 0x38]
mov r8d, edx
sub eax, r10d
dec eax
test eax, eax
jle 0x180015ed5
mov r15, qword [rsp + 0x48]
movsxd r10, eax
cmp rdx, 0x102
jge 0x180015ecb
lea rax, [rdx + r13]
movzx ecx, byte [rax + r15 + 1]
cmp byte [rdx + r9], cl
jne 0x180015ecb
inc r8d
inc rdx
cmp rdx, r10
jl 0x180015ea7
mov r15, qword [rsp + 0x40]
mov r10d, dword [rsp + 0x34]
cmp r8d, r12d
mov r8, qword [rsp + 0x48]
jg 0x18001653a
xor edx, edx
inc r11
cmp r11, rsi
jl 0x180015e80
mov r13d, dword [rsp + 0x30]
mov r12d, r8d
sub r12d, r15d
mov ecx, edx
add r12d, r10d
mov r14, rdx
mov dword [rsp + 0x40], r12d
cmp r13d, 3
jle 0x180015f35
lea r8, [0x180000000]
nop dword [rax]
nop word [rax + rax]
movzx eax, word [r8 + r14*2 + 0x1a8414]
inc r14
dec eax
inc ecx
cmp r13d, eax
jg 0x180015f20
lea eax, [rcx + 0x101]
cmp eax, 0x8f
jg 0x18001600a
add ecx, 0x131
mov r8d, 8
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180015f52
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 8
or edi, edx
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x18001627c
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
lea r12, [r13 - 1]
test rbx, rbx
je 0x180015fb2
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x180015ff1
lea esi, [rsi*2 + 1]
jmp 0x180015fb7
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r12
add rcx, rbx
test rbx, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180015ff1
test rbx, rbx
jne 0x180015fea
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180015f98
jmp 0x18001626d
cmp eax, 0xff
jg 0x1800160d9
add ecx, 0x201
mov r8d, 9
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180016021
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 9
or edi, edx
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x18001627c
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
lea r12, [r13 - 1]
test rbx, rbx
je 0x180016081
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x1800160c0
lea esi, [rsi*2 + 1]
jmp 0x180016086
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r12
add rcx, rbx
test rbx, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800160c0
test rbx, rbx
jne 0x1800160b9
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180016067
jmp 0x18001626d
cmp eax, 0x117
jg 0x1800161a8
inc ecx
mov r8d, 7
nop dword [rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1800160f0
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 7
or edi, edx
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x18001627c
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
lea r12, [r13 - 1]
test rbx, rbx
je 0x180016150
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x18001618f
lea esi, [rsi*2 + 1]
jmp 0x180016155
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r12
add rcx, rbx
test rbx, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x18001618f
test rbx, rbx
jne 0x180016188
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180016136
jmp 0x18001626d
add ecx, 0xa9
mov r8d, 8
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x1800161b4
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 8
or edi, edx
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x18001627c
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
lea r12, [r13 - 1]
nop word [rax + rax]
test rbx, rbx
je 0x18001621a
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x180016259
lea esi, [rsi*2 + 1]
jmp 0x18001621f
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r12
add rcx, rbx
test rbx, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016259
test rbx, rbx
jne 0x180016252
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180016200
mov r13d, dword [rsp + 0x30]
mov r12d, dword [rsp + 0x40]
mov qword [rsp + 0x28], rbx
lea rax, [0x180000000]
movzx r8d, byte [r14 + rax + 0x1a83f0]
test r8b, r8b
je 0x18001634e
movzx eax, word [rax + r14*2 + 0x1a8410]
mov ecx, r15d
mov edx, r13d
mov qword [rsp + 0x28], rbx
sub edx, eax
add r15d, r8d
shl edx, cl
or edi, edx
cmp r15d, 8
jl 0x18001634e
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
lea r12, [r13 - 1]
test rbx, rbx
je 0x1800162ec
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x18001632b
lea esi, [rsi*2 + 1]
jmp 0x1800162f1
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r12
add rcx, rbx
test rbx, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x18001632b
test rbx, rbx
jne 0x180016324
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1800162d2
mov r12d, dword [rsp + 0x40]
mov r13d, dword [rsp + 0x30]
mov qword [rsp + 0x28], rbx
xor edx, edx
mov ecx, edx
mov r14d, edx
cmp r12d, 1
jle 0x180016387
lea rdx, [0x180000000]
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rdx + r14*2 + 0x1a83b4]
inc r14
dec eax
inc ecx
cmp r12d, eax
jg 0x180016370
xor edx, edx
mov r8d, 5
nop dword [rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180016390
mov ecx, r15d
add r15d, 5
shl edx, cl
or edi, edx
mov dword [rsp + 0x20], r15d
cmp r15d, 8
jl 0x180016452
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
mov dword [rsp + 0x20], r15d
lea r15, [r13 - 1]
test rbx, rbx
je 0x1800163f0
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x18001642f
lea esi, [rsi*2 + 1]
jmp 0x1800163f5
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r15
add rcx, rbx
test rbx, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x18001642f
test rbx, rbx
jne 0x180016428
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1800163d6
mov r15d, dword [rsp + 0x20]
mov r13d, dword [rsp + 0x30]
mov qword [rsp + 0x28], rbx
lea rax, [0x180000000]
movzx edx, byte [r14 + rax + 0x1a8390]
test dl, dl
je 0x18001652d
movzx eax, word [rax + r14*2 + 0x1a83b0]
mov ecx, r15d
sub r12d, eax
mov qword [rsp + 0x28], rbx
shl r12d, cl
add r15d, edx
or edi, r12d
mov dword [rsp + 0x20], r15d
cmp r15d, 8
jl 0x18001652d
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r13d, r13d
lea r15d, [r15 + rax*8]
mov dword [rsp + 0x20], r15d
lea r15, [r13 - 1]
test rbx, rbx
je 0x1800164cb
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x18001650a
lea esi, [rsi*2 + 1]
jmp 0x1800164d0
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r15
add rcx, rbx
test rbx, rbx
cmove rcx, r13
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x18001650a
test rbx, rbx
jne 0x180016503
mov dword [rax + 4], r13d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1800164b1
mov r15d, dword [rsp + 0x20]
mov r13d, dword [rsp + 0x30]
mov qword [rsp + 0x28], rbx
mov r10d, dword [rsp + 0x34]
add r10d, r13d
jmp 0x180016701
movsxd rax, r10d
movzx ecx, byte [rax + r8]
cmp cl, 0x8f
ja 0x180016622
add ecx, 0x30
xor r14d, r14d
mov edx, r14d
lea r8d, [r14 + 8]
nop dword [rax + rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180016560
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 8
or edi, edx
mov dword [rsp + 0x20], r15d
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x1800166fe
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
lea r15d, [r15 + rax*8]
mov dword [rsp + 0x20], r15d
mov r15, 0xffffffffffffffff
test rbx, rbx
je 0x1800165ca
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x180016609
lea esi, [rsi*2 + 1]
jmp 0x1800165cf
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r15
add rcx, rbx
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016609
test rbx, rbx
jne 0x180016602
mov dword [rax + 4], r14d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1800165b0
jmp 0x1800166ef
add ecx, 0x100
xor r14d, r14d
mov edx, r14d
lea r8d, [r14 + 9]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180016632
mov r15d, dword [rsp + 0x20]
mov ecx, r15d
shl edx, cl
add r15d, 9
or edi, edx
mov dword [rsp + 0x20], r15d
mov qword [rsp + 0x28], rbx
cmp r15d, 8
jl 0x1800166fe
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
lea r15d, [r15 + rax*8]
mov dword [rsp + 0x20], r15d
mov r15, 0xffffffffffffffff
test rbx, rbx
je 0x18001669c
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x1800166db
lea esi, [rsi*2 + 1]
jmp 0x1800166a1
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r15
add rcx, rbx
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800166db
test rbx, rbx
jne 0x1800166d4
mov dword [rax + 4], r14d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180016682
mov r10d, dword [rsp + 0x34]
mov r15d, dword [rsp + 0x20]
mov qword [rsp + 0x28], rbx
inc r10d
mov r11d, dword [rsp + 0x38]
mov ebp, 0
mov rsi, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
mov dword [rsp + 0x34], r10d
lea eax, [r11 - 3]
lea rdx, [rbp - 4]
cmp r10d, eax
jl 0x180015bf1
lea r13d, [rbp + 7]
movsxd r14, r10d
movsxd r12, r11d
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x28], r12
cmp r14, r12
jge 0x180016901
nop dword [rax + rax]
movzx r8d, byte [r14 + rsi]
mov edx, ebp
cmp r8b, 0x8f
ja 0x180016822
lea ecx, [r8 + 0x30]
mov r8d, 8
nop dword [rax + rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r8d, 1
jne 0x180016770
mov ecx, r15d
add r15d, 8
shl edx, cl
or edi, edx
cmp r15d, 8
jl 0x1800168f0
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r12d, r12d
lea r15d, [r15 + rax*8]
lea r14, [r12 - 1]
nop dword [rax]
test rbx, rbx
je 0x1800167ca
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x180016809
lea esi, [rsi*2 + 1]
jmp 0x1800167cf
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r14
add rcx, rbx
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016809
test rbx, rbx
jne 0x180016802
mov dword [rax + 4], r12d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1800167b0
jmp 0x1800168df
add r8d, 0x100
mov r9d, 9
nop
mov ecx, r8d
lea eax, [rdx + rdx]
and ecx, 1
sar r8d, 1
mov edx, ecx
or edx, eax
sub r9d, 1
jne 0x180016830
mov ecx, r15d
add r15d, 9
shl edx, cl
or edi, edx
cmp r15d, 8
jl 0x1800168f0
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
xor r12d, r12d
lea r15d, [r15 + rax*8]
lea r14, [r12 - 1]
test rbx, rbx
je 0x18001688c
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x1800168cb
lea esi, [rsi*2 + 1]
jmp 0x180016891
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r14
add rcx, rbx
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800168cb
test rbx, rbx
jne 0x1800168c4
mov dword [rax + 4], r12d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180016872
mov rsi, qword [rsp + 0x48]
xor ebp, ebp
mov r12, qword [rsp + 0x28]
mov r14, qword [rsp + 0x40]
inc r14
mov qword [rsp + 0x40], r14
cmp r14, r12
jl 0x180016750
xor r14d, r14d
mov ecx, r14d
mov edx, r14d
nop word [rax + rax]
mov eax, ecx
add edx, edx
and eax, 1
sar ecx, 1
or edx, eax
sub r13d, 1
jne 0x180016910
mov ecx, r15d
add r15d, 7
shl edx, cl
or edi, edx
cmp r15d, 8
jl 0x1800169c2
mov ebp, r15d
mov r12, 0xffffffffffffffff
shr rbp, 3
mov eax, ebp
neg eax
lea r15d, [r15 + rax*8]
nop dword [rax]
test rbx, rbx
je 0x18001696a
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x1800169a9
lea esi, [rsi*2 + 1]
jmp 0x18001696f
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r12
add rcx, rbx
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x1800169a9
test rbx, rbx
jne 0x1800169a2
mov dword [rax + 4], r14d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x180016950
mov r12, qword [rsp + 0x28]
test r15d, r15d
je 0x180016a6b
mov r12, 0xffffffffffffffff
inc r15d
cmp r15d, 8
jl 0x180016a5d
mov ebp, r15d
shr rbp, 3
mov eax, ebp
neg eax
lea r15d, [r15 + rax*8]
nop
test rbx, rbx
je 0x180016a0a
mov eax, dword [rbx - 4]
mov esi, dword [rbx - 8]
inc eax
cmp eax, esi
jl 0x180016a49
lea esi, [rsi*2 + 1]
jmp 0x180016a0f
mov esi, 2
movsxd rdx, esi
mov rcx, 0xfffffffffffffff8
add rdx, 8
mov rax, rbx
cmovb rdx, r12
add rcx, rbx
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016a49
test rbx, rbx
jne 0x180016a42
mov dword [rax + 4], r14d
lea rbx, [rax + 8]
mov dword [rbx - 8], esi
movsxd rax, dword [rbx - 4]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
shr edi, 8
sub rbp, 1
jne 0x1800169f0
test r15d, r15d
jne 0x1800169d2
mov r12, qword [rsp + 0x28]
mov r14, qword [rsp + 0x50]
mov esi, 0x4000
mov rdi, r14
mov rcx, qword [rdi]
test rcx, rcx
je 0x180016a8a
add rcx, 0xfffffffffffffff8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add rdi, 8
sub rsi, 1
jne 0x180016a78
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r15d, dword [rsp + 0x38]
mov eax, 0x80010003
mov r13, qword [rsp + 0x48]
lea ecx, [r15 + 0x7ffe]
imul ecx
add edx, ecx
lea ecx, [r15 + 2]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add edx, eax
lea ecx, [rcx + rdx*4]
add ecx, edx
cmp dword [rbx - 4], ecx
jle 0x180016cba
xor eax, eax
mov dword [rbx - 4], 2
mov r14d, eax
test r15d, r15d
jle 0x180016cba
lea rsi, [rbx - 8]
mov eax, 0x7fff
xor r12d, r12d
mov ecx, dword [rsi]
mov ebp, r15d
sub ebp, r14d
cmp ebp, eax
mov edi, ebp
cmovg edi, eax
mov eax, dword [rbx - 4]
inc eax
cmp eax, ecx
jl 0x180016b42
lea eax, [rcx + rcx]
mov rcx, rsi
movsxd rdx, eax
lea r15d, [rax + 1]
inc rdx
mov rax, 0xffffffffffffffff
add rdx, 8
cmovb rdx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016b3d
lea rbx, [rax + 8]
mov dword [rax], r15d
mov r15d, dword [rsp + 0x38]
movsxd rax, dword [rbx - 4]
cmp ebp, edi
mov rbp, 0xffffffffffffffff
sete cl
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180016b93
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, rbp
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016b93
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov byte [rax + rbx], dil
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180016bd9
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, rbp
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016bd9
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov ecx, edi
sar ecx, 8
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180016c23
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, rbp
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016c23
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
lea rsi, [rbx - 8]
movzx ecx, dil
not cl
mov byte [rax + rbx], cl
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov ecx, dword [rsi]
inc eax
cmp eax, ecx
jl 0x180016c7b
lea eax, [rcx + rcx]
mov rcx, rsi
movsxd rdx, eax
lea ebp, [rax + 1]
inc rdx
mov rax, 0xffffffffffffffff
add rdx, 8
cmovb rdx, rax
test rbx, rbx
cmove rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016c7b
lea rbx, [rax + 8]
mov dword [rax], ebp
mov rsi, rax
movsxd rax, dword [rbx - 4]
mov ecx, edi
not ecx
movsxd rdx, r14d
sar ecx, 8
add rdx, r13
movsxd r8, edi
mov byte [rax + rbx], cl
inc dword [rbx - 4]
movsxd rcx, dword [rbx - 4]
add rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
add dword [rbx - 4], edi
add r14d, edi
mov eax, 0x7fff
cmp r14d, r15d
jl 0x180016af4
mov r12, qword [rsp + 0x28]
xor r14d, r14d
mov edi, 1
mov esi, r14d
test r12, r12
jle 0x180016d42
mov eax, 0x5e6ea9af
mov r9d, r14d
imul r15d
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x15b0
sub r15d, eax
movsxd r8, r15d
nop dword [rax + rax]
mov rcx, r14
test r8, r8
jle 0x180016d10
lea rdx, [r9 + r13]
nop dword [rax]
movzx eax, byte [rcx + rdx]
inc rcx
add edi, eax
add esi, edi
cmp rcx, r8
jl 0x180016d00
mov eax, 0x80078071
add r9, r8
mul edi
mov r8d, 0x15b0
shr edx, 0xf
imul eax, edx, 0xffff000f
add edi, eax
mov eax, 0x80078071
mul esi
shr edx, 0xf
imul eax, edx, 0xffff000f
add esi, eax
cmp r9, r12
jl 0x180016cf0
mov eax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov edx, dword [rcx]
inc eax
mov r13, qword [rsp + 0x78]
mov r15, 0xffffffffffffffff
mov r12, qword [rsp + 0x80]
cmp eax, edx
jl 0x180016d8a
lea eax, [rdx + rdx]
movsxd rdx, eax
lea ebp, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016d8a
lea rbx, [rax + 8]
mov dword [rax], ebp
movsxd rax, dword [rbx - 4]
mov ecx, esi
shr ecx, 8
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180016dd4
lea eax, [rdx + rdx]
movsxd rdx, eax
lea ebp, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, r15
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016dd4
lea rbx, [rax + 8]
mov dword [rax], ebp
movsxd rax, dword [rbx - 4]
lea rcx, [rbx - 8]
mov byte [rax + rbx], sil
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180016e1a
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, r15
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016e1a
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov ecx, edi
shr ecx, 8
mov byte [rax + rbx], cl
lea rcx, [rbx - 8]
inc dword [rbx - 4]
mov eax, dword [rbx - 4]
mov edx, dword [rcx]
inc eax
cmp eax, edx
jl 0x180016e64
lea eax, [rdx + rdx]
movsxd rdx, eax
lea esi, [rax + 1]
inc rdx
add rdx, 8
cmovb rdx, r15
test rbx, rbx
cmove rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x180016e64
lea rbx, [rax + 8]
mov dword [rax], esi
movsxd rax, dword [rbx - 4]
mov rdx, rbx
mov byte [rax + rbx], dil
inc dword [rbx - 4]
movsxd rcx, dword [rbx - 4]
mov rax, qword [rsp + 0x68]
mov r8, rcx
mov dword [rax], ecx
lea rcx, [rbx - 8]
call sub.VCRUNTIME140.dll_memmove
mov r15, qword [rsp + 0x70]
lea rax, [rbx - 8]
mov rdi, qword [rsp + 0xc8]
add rsp, 0x88
pop r14
pop rsi
pop rbp
pop rbx
ret