Function at 0x140011f40
Capabilities:
Check for software breakpoints
Get system information on windows
Parse credit card information

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1f8
mov qword [rsp + 0x48], r9
mov rax, qword [0x140043010]
xor rax, rsp
mov qword [rsp + 0x1f0], rax
cmp byte [rcx + 0x1c], 0
je 0x140013a49
mov r15, r8
mov rsi, rdx
mov rbx, rcx
mov ebp, dword [rcx + 0x18]
test bpl, 4
jne 0x140013eb4
mov rcx, rsi
mov rdi, rcx
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rcx
mov dword [rsp + 0x160], 0
movzx eax, byte [rcx]
cmp eax, 0x48
jne 0x140013682
cmp byte [rdi + 1], 0xff
mov rcx, rdi
je 0x14001365e
cmp rdi, rcx
jne 0x140011f8d
cmp rdi, rsi
jne 0x140013ed4
mov qword [rsp + 0x108], rbx
mov qword [rsp + 0x110], rsi
mov dword [rsp + 0x118], 0
cmp byte [rbx + 0x1c], 0
je 0x140013a49
mov ebp, dword [rbx + 0x18]
mov qword [rsp + 0x40], rbx
mov eax, dword [0x140044f64]
mov ecx, dword [0x1400431a8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140013589
mov r13d, dword [0x140044f60]
mov sil, 1
xor r14d, r14d
test bpl, 1
je 0x140014345
mov eax, dword [0x140044f64]
mov ecx, dword [0x1400431a8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140013611
mov r14d, dword [0x140044f60]
mov eax, dword [0x140044f70]
mov ecx, dword [0x1400431a8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x1400120c5
lea rcx, [0x140044f70]
call fcn.14001c1e0
cmp dword [0x140044f70], 0xffffffff
jne 0x1400120c5
lea rbx, [rsp + 0x150]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov rax, qword [rbx + 0x10]
mov qword [0x140044f68], rax
lea rcx, [0x140044f70]
call fcn.14001c180
mov rax, qword [0x140044f68]
shl ebp, 0x1f
cmp rax, rbp
cmovb rbp, rax
cmp rbp, r13
jb 0x140014342
lea rax, [r14 + 0xfffff]
and rax, 0xfffffffffff00000
xor r12d, r12d
sub rbp, r13
cmovb rbp, r12
neg r14
and r14, rbp
sub r14, rax
jbe 0x14001434d
test rax, rax
je 0x140013ea9
cmp r14, 0xffffffffffffffff
je 0x140013ea9
xor esi, esi
mov r12, rax
mov eax, dword [0x140044f78]
mov ecx, dword [0x1400431a8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140012c96
lea rcx, [0x140044f80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
test sil, sil
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r12
je 0x1400128ed
xor r12d, r12d
xor edi, edi
mov rbx, qword [0x140044f58]
test rbx, rbx
jne 0x140012196
mov ecx, 0x18
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov qword [rax], 0x18
mov qword [0x140044f58], rax
test sil, sil
mov dword [rsp + 0x64], esi
mov qword [rsp + 0x70], r13
je 0x140012902
cmp qword [rbx + 8], 0
jne 0x140012215
mov ecx, 0x20
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rbp, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov dword [rax + 0x18], 0
mov rax, qword [rbx + 8]
cmp rax, qword [rbx + 0x10]
jne 0x1400121e1
mov rcx, rbx
call fcn.1400159b0
mov rax, qword [rbx + 8]
mov rcx, qword [rbx]
lea rax, [rax + rax*2]
mov qword [rcx + rax*8], r12
mov qword [rcx + rax*8 + 8], rdi
mov qword [rcx + rax*8 + 0x10], rbp
inc qword [rbx + 8]
mov rbx, qword [0x140044f58]
test rbx, rbx
je 0x140013ee7
cmp qword [rbx + 8], 0
je 0x140013ee7
mov r13, qword [rbx]
add r13, 0x10
mov rbx, qword [r13]
test rbx, rbx
mov rdi, qword [rsp + 0x70]
je 0x140014392
test edi, edi
je 0x140014392
cmp qword [rbx + 8], 0
mov esi, dword [rsp + 0x64]
jne 0x140013655
mov eax, dword [0x140044f64]
mov ecx, dword [0x1400431a8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400135cd
mov ebp, dword [0x140044f60]
mov eax, edi
xor edx, edx
div ebp
sub ebp, edx
test edx, edx
cmove ebp, edx
add ebp, edi
lea r15, [rbx + 0x10]
mov dword [rbx + 0x10], ebp
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
test sil, sil
je 0x1400129f4
mov edx, ebp
xor ecx, ecx
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x140014384
mov qword [rbx + 8], rax
cmp dword [r15], 0
je 0x140014392
mov r14, qword [rsp + 0x40]
mov qword [rsp + 0xf0], r14
mov qword [rsp + 0xf8], rbx
mov byte [rsp + 0x100], 1
lea rcx, [0x140044f80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x140044f78]
mov ecx, dword [0x1400431a8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140012cdf
lea rsi, [0x140044f80]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rdi, [rsp + 0xb0]
mov rcx, rbx
mov rdx, rdi
call fcn.140015b90
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [rdi + 0x38], 0
je 0x14001439f
mov rbx, qword [rsp + 0xb0]
mov qword [rsp + 0x78], rbx
mov eax, dword [rsp + 0xb8]
mov dword [rsp + 0x80], eax
mov rbp, qword [rsp + 0xc0]
mov qword [rsp + 0x88], rbp
mov rdx, qword [rsp + 0xc8]
mov qword [rsp + 0x90], rdx
mov ecx, dword [rsp + 0xd0]
mov dword [rsp + 0x98], ecx
movups xmm0, xmmword [rsp + 0xd4]
movups xmmword [rsp + 0x9c], xmm0
mov cl, byte [rsp + 0xe4]
mov byte [rsp + 0xac], cl
mov dword [rsp + 0xb8], 0
mov byte [rsp + 0xe4], 0
mov rdi, qword [rsp + 0x48]
mov qword [rdi], 0
test rbx, rbx
je 0x1400123f4
test rbp, rbp
je 0x1400134ca
test rdx, rdx
je 0x1400134ca
test eax, eax
je 0x1400134ca
test cl, cl
je 0x1400134ca
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsp + 0x98]
lea edx, [rcx + 8]
cmp qword [rsp + 0x78], 0
je 0x140013ef2
cmp edx, dword [rsp + 0xa8]
ja 0x140013f15
mov rdx, qword [rsp + 0x88]
mov qword [rdx + rcx], rax
add dword [rsp + 0x98], 8
cmp qword [rsp + 0x78], 0
je 0x140012477
mov al, byte [rsp + 0xac]
cmp qword [rsp + 0x88], 0
je 0x1400134ca
cmp qword [rsp + 0x90], 0
je 0x1400134ca
cmp dword [rsp + 0x80], 0
je 0x1400134ca
test al, al
je 0x1400134ca
mov ecx, dword [rsp + 0x118]
add rcx, qword [rsp + 0x110]
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov edx, dword [rsp + 0x98]
lea ecx, [rdx + 8]
cmp qword [rsp + 0x78], 0
je 0x140013f24
cmp ecx, dword [rsp + 0xa8]
ja 0x140013f30
mov rcx, qword [rsp + 0x88]
mov qword [rcx + rdx], rax
mov ecx, dword [rsp + 0x98]
add ecx, 8
mov dword [rsp + 0x98], ecx
cmp qword [rsp + 0x78], 0
je 0x14001250f
mov al, byte [rsp + 0xac]
cmp qword [rsp + 0x88], 0
je 0x1400134bb
cmp qword [rsp + 0x90], 0
je 0x1400134bb
cmp dword [rsp + 0x80], 0
je 0x1400134bb
test al, al
je 0x1400134bb
mov eax, dword [rsp + 0x118]
mov rdx, qword [rsp + 0x110]
cmp byte [rdx + rax], 0x48
jne 0x14001252f
cmp byte [rdx + rax + 1], 0xb8
je 0x14001410d
mov dword [rsp + 0x9c], ecx
mov dword [rsp + 0xa0], ecx
cmp byte [r14 + 0x1c], 0
je 0x140013a49
mov eax, dword [r14 + 0x18]
and eax, 2
mov r13d, eax
shr r13d, 1
xor ecx, ecx
test eax, eax
sete cl
lea r15d, [rcx + rcx*2]
add r15d, 0xa
mov r9d, dword [rsp + 0x118]
cmp r9d, r15d
jae 0x140012d28
mov r12d, r15d
xor r14d, r14d
mov rdx, qword [rsp + 0x110]
mov eax, r9d
test r14b, 1
jne 0x1400138ea
movzx ecx, byte [rdx + rax]
cmp rcx, 0xf
je 0x140013926
mov ebx, ecx
and bl, 0xfc
cmp bl, 0x88
je 0x140013968
lea ebp, [rcx - 0x40]
cmp ebp, 2
jb 0x14001282f
cmp ecx, 0x44
je 0x1400139a8
cmp ecx, 0x45
je 0x1400139ea
mov ebx, ecx
and bl, 0xfa
cmp bl, 0x48
jne 0x140012742
mov ecx, dword [rsp + 0x98]
lea r10d, [rcx + 1]
cmp ecx, dword [rsp + 0xa0]
jne 0x1400125f4
mov dword [rsp + 0xa0], r10d
cmp qword [rsp + 0x78], 0
je 0x140013a2c
cmp r10d, dword [rsp + 0xa8]
ja 0x140013a39
mov rbp, qword [rsp + 0x88]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov r10d, dword [rsp + 0x98]
inc r10d
mov dword [rsp + 0x98], r10d
mov r9d, dword [rsp + 0x118]
mov rdx, qword [rsp + 0x110]
lea eax, [r9 + 1]
mov dword [rsp + 0x118], eax
movzx ecx, byte [rdx + rax]
cmp ecx, 0x82
jle 0x140012670
cmp ecx, 0x83
je 0x1400127ba
cmp ecx, 0x85
jne 0x140012685
jmp 0x140013ce9
cmp ecx, 0x81
je 0x1400136e5
cmp ecx, 0x2b
je 0x140013ce9
mov ebx, ecx
and bl, 0xfd
cmp bl, 0x89
jne 0x140013a54
lea ebx, [r9 + 2]
movzx esi, byte [rdx + rbx]
mov ecx, esi
shr ecx, 6
mov edi, 2
cmp ecx, 1
jne 0x140012733
and sil, 7
xor ebp, ebp
cmp sil, 4
sete bpl
add ebp, edi
lea ecx, [r10 + rbp]
inc ecx
cmp r10d, dword [rsp + 0xa0]
jne 0x1400126d5
mov dword [rsp + 0xa0], ecx
inc ebp
cmp qword [rsp + 0x78], 0
je 0x140013a9d
cmp ecx, dword [rsp + 0xa8]
ja 0x140013aa9
add rdx, rax
mov r8d, ebp
mov ecx, r10d
add rcx, qword [rsp + 0x88]
call sub.VCRUNTIME140.dll_memcpy
add dword [rsp + 0x98], ebp
mov eax, dword [rsp + 0x118]
add eax, ebp
mov dword [rsp + 0x118], eax
mov r9d, dword [rsp + 0x118]
cmp r9d, r15d
jb 0x14001257b
jmp 0x140012d2b
mov ebp, 1
cmp ecx, 3
je 0x1400126be
jmp 0x140014158
cmp cl, 0x66
je 0x1400142db
mov ebx, ecx
and bl, 0xf0
cmp bl, 0x50
jne 0x140013756
mov ecx, dword [rsp + 0x98]
lea ebp, [rcx + 1]
cmp ecx, dword [rsp + 0xa0]
jne 0x140012773
mov dword [rsp + 0xa0], ebp
cmp qword [rsp + 0x78], 0
je 0x14001431d
cmp ebp, dword [rsp + 0xa8]
ja 0x140014239
mov rbp, qword [rsp + 0x88]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
inc dword [rsp + 0x98]
mov r9d, dword [rsp + 0x118]
inc r9d
mov dword [rsp + 0x118], r9d
jmp 0x14001271d
movzx ecx, byte [rdx + rax + 1]
and ecx, 0xfffffff8
cmp ecx, 0xe8
jne 0x1400143b2
lea ecx, [r10 + 3]
cmp r10d, dword [rsp + 0xa0]
jne 0x1400127e3
mov dword [rsp + 0xa0], ecx
cmp qword [rsp + 0x78], 0
je 0x1400143a6
cmp ecx, dword [rsp + 0xa8]
ja 0x14001471e
add rdx, rax
mov rax, qword [rsp + 0x88]
mov ecx, r10d
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x98], 3
mov eax, dword [rsp + 0x118]
add eax, 3
jmp 0x140012716
mov ebp, dword [rsp + 0x98]
lea ecx, [rbp + 1]
cmp ebp, dword [rsp + 0xa0]
jne 0x140012849
mov dword [rsp + 0xa0], ecx
cmp qword [rsp + 0x78], 0
je 0x140014933
cmp ecx, dword [rsp + 0xa8]
ja 0x14001493f
mov rcx, qword [rsp + 0x88]
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
mov ecx, dword [rsp + 0x98]
inc ecx
mov dword [rsp + 0x98], ecx
mov r9d, dword [rsp + 0x118]
mov rdx, qword [rsp + 0x110]
inc r9d
mov dword [rsp + 0x118], r9d
mov bl, byte [rdx + r9]
mov eax, ebx
and al, 0xf0
cmp al, 0x50
jne 0x14001495a
lea eax, [rcx + 1]
cmp ecx, dword [rsp + 0xa0]
jne 0x1400128be
mov dword [rsp + 0xa0], eax
cmp qword [rsp + 0x78], 0
je 0x14001494e
cmp eax, dword [rsp + 0xa8]
ja 0x140014239
mov rax, qword [rsp + 0x88]
mov ecx, ecx
mov dl, byte [rdx + r9]
mov byte [rax + rcx], dl
jmp 0x14001279b
test r14, r14
je 0x140014198
lea rdi, [r14 + r12]
dec rdi
jmp 0x140012167
mov qword [rsp + 0x50], rdi
mov rax, qword [rbx]
mov rbp, qword [rbx + 8]
mov r13, rax
test rbp, rbp
jle 0x140012954
mov r13, rax
mov rcx, rbp
mov rdx, rbp
mov rdi, qword [rsp + 0x50]
shr rdx, 1
lea rsi, [rdx + rdx*2]
lea rsi, [rsi*8]
add rsi, r13
cmp qword [rsi], r12
jae 0x140014430
add rsi, 0x18
not rdx
add rdx, rcx
mov r13, rsi
mov rcx, rdx
test rdx, rdx
jg 0x140012924
lea rcx, [rbp*2]
add rcx, rbp
lea rax, [rax + rcx*8]
cmp r13, rax
jne 0x140014445
mov ecx, 0x20
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rbp, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov dword [rax + 0x18], 0
mov rax, qword [rbx]
mov rsi, qword [rbx + 8]
sub r13, rax
sar r13, 3
movabs r15, 0xaaaaaaaaaaaaaaab
imul r15, r13
cmp r15, rsi
jne 0x140014463
mov rcx, r15
cmp r15, qword [rbx + 0x10]
mov rsi, qword [rsp + 0x50]
jne 0x1400129ca
mov rcx, rbx
call fcn.1400159b0
mov rax, qword [rbx]
mov rcx, qword [rbx + 8]
lea rcx, [rcx + rcx*2]
mov qword [rax + rcx*8], r12
mov qword [rax + rcx*8 + 8], rsi
mov qword [rax + rcx*8 + 0x10], rbp
inc qword [rbx + 8]
mov rax, qword [rbx]
lea rcx, [r15 + r15*2]
lea r13, [rax + rcx*8]
add r13, 0x10
jmp 0x14001221c
test r14, r14
je 0x140014198
mov r12, rax
mov eax, dword [0x140044fb8]
mov ecx, dword [0x1400431a8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x140012a9a
lea rcx, [0x140044fb8]
call fcn.14001c1e0
cmp dword [0x140044fb8], 0xffffffff
jne 0x140012a9a
lea rcx, str.kernelbase.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x140044fa8], rax
mov qword [0x140044fb0], 0
test rax, rax
je 0x140012a8e
lea rdx, str.VirtualAlloc2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140044fb0], rax
test rax, rax
jne 0x140012a8e
mov rcx, qword [0x140044fa8]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140044fa8], 0
lea rcx, [0x140044fb8]
call fcn.14001c180
mov rax, qword [0x140044fb0]
mov ebp, ebp
test rax, rax
jne 0x140014537
mov r8, qword [rsp + 0x68]
add r14, r8
mov rcx, r12
mov rdx, rbp
mov rsi, r8
mov r9, r14
call fcn.140015df0
test rax, rax
je 0x14001438a
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400122b4
mov rcx, r12
mov rdx, rbp
mov r8, rsi
mov r9, r14
call fcn.140015df0
test rax, rax
je 0x14001438a
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400122b4
mov rcx, r12
mov rdx, rbp
mov r8, rsi
mov r9, r14
call fcn.140015df0
test rax, rax
je 0x14001438a
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400122b4
mov rcx, r12
mov rdx, rbp
mov r8, rsi
mov r9, r14
call fcn.140015df0
test rax, rax
je 0x14001438a
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400122b4
mov rcx, r12
mov rdx, rbp
mov r8, rsi
mov r9, r14
call fcn.140015df0
test rax, rax
je 0x14001438a
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400122b4
mov rcx, r12
mov rdx, rbp
mov r8, rsi
mov r9, r14
call fcn.140015df0
test rax, rax
je 0x14001438a
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400122b4
mov rcx, r12
mov rdx, rbp
mov r8, rsi
mov r9, r14
call fcn.140015df0
test rax, rax
je 0x14001438a
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400122b4
mov rcx, r12
mov rdx, rbp
mov r8, rsi
mov r9, r14
call fcn.140015df0
test rax, rax
je 0x14001438a
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400122b4
xor ecx, ecx
mov rdx, rbp
jmp 0x140012299
lea rcx, [0x140044f78]
call fcn.14001c1e0
cmp dword [0x140044f78], 0xffffffff
jne 0x140012142
lea rcx, [0x140044f80]
mov edx, 0xfa0
mov r8d, 0x1000000
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
mov byte [0x140044f74], 1
lea rcx, [0x140044f78]
call fcn.14001c180
jmp 0x140012142
lea rcx, [0x140044f78]
call fcn.14001c1e0
cmp dword [0x140044f78], 0xffffffff
jne 0x140012311
lea rcx, [0x140044f80]
mov edx, 0xfa0
mov r8d, 0x1000000
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
mov byte [0x140044f74], 1
lea rcx, [0x140044f78]
call fcn.14001c180
jmp 0x140012311
xor r14d, r14d
cmp r9d, 0x64
ja 0x1400134bb
test r14b, 1
jne 0x140012e78
mov eax, dword [rsp + 0x98]
cmp qword [rsp + 0x78], 0
je 0x140013f90
mov ecx, r9d
add rcx, qword [rsp + 0x110]
mov edx, dword [rsp + 0xa8]
cmp eax, edx
jae 0x140013fa6
mov rdx, qword [rsp + 0x88]
mov byte [rdx + rax], 0xff
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
cmp qword [rsp + 0x78], 0
je 0x140013f92
mov edx, dword [rsp + 0xa8]
cmp eax, edx
jae 0x140013fb3
mov rdx, qword [rsp + 0x88]
mov eax, eax
mov byte [rdx + rax], 0x25
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
cmp qword [rsp + 0x78], 0
je 0x140013f94
mov edx, dword [rsp + 0xa8]
lea ebp, [rax + 4]
cmp ebp, edx
ja 0x140013fc0
mov rdx, qword [rsp + 0x88]
mov eax, eax
mov dword [rdx + rax], 0
mov eax, dword [rsp + 0x98]
add eax, 4
mov dword [rsp + 0x98], eax
cmp qword [rsp + 0x78], 0
je 0x140013f97
mov edx, dword [rsp + 0xa8]
lea ebp, [rax + 8]
cmp ebp, edx
ja 0x140013fcd
mov rdx, qword [rsp + 0x88]
mov eax, eax
mov qword [rdx + rax], rcx
add dword [rsp + 0x98], 8
cmp qword [rsp + 0x78], 0
je 0x140012e78
mov al, byte [rsp + 0xac]
cmp qword [rsp + 0x88], 0
je 0x1400134bb
cmp qword [rsp + 0x90], 0
je 0x1400134bb
cmp dword [rsp + 0x80], 0
je 0x1400134bb
test al, al
je 0x1400134bb
cmp byte [rsp + 0xac], 0
je 0x1400134bb
cmp qword [rsp + 0x78], 0
je 0x1400134bb
mov eax, dword [rsp + 0x98]
mov r12d, dword [rsp + 0x9c]
mov dword [rsp + 0xa4], eax
add r12, qword [rsp + 0x90]
je 0x1400134bb
mov r14d, dword [rsp + 0x118]
mov rdi, qword [rsp + 0x110]
lea rdx, [rsp + 0x150]
mov qword [rdx], 0
mov rcx, rdi
xor r8d, r8d
call qword [sym.imp.ntdll.dll_RtlLookupFunctionEntry]
test rax, rax
je 0x1400131e6
mov rcx, qword [rsp + 0x150]
mov esi, dword [rax]
add esi, ecx
mov eax, dword [rax + 8]
lea rbp, [rcx + rax]
movzx eax, byte [rcx + rax + 2]
lea rbx, [rax + rax]
add rbx, 4
mov rcx, rbx
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov r15, rax
mov rcx, rax
mov rdx, rbp
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
cmp edi, esi
jne 0x1400131dd
movzx eax, byte [r15 + 2]
test eax, eax
je case.0x14001356e.4
movzx ebp, byte [r15 + 5]
mov edx, ebp
and edx, 0xf
cmp edx, 4
jne 0x140013551
mov cl, 2
mov ebx, ecx
cmp al, cl
jb case.0x14001356e.4
mov ecx, dword [rsp + 0xa0]
mov r10b, byte [r15 + 1]
cmp ecx, r14d
jae 0x140012f74
movzx edx, r10b
cmp ecx, edx
jb 0x1400131dd
lea r8, [r15 + 1]
xor ebp, ebp
lea r9, [0x1400157f4]
mov edx, ebp
movzx ecx, bpl
movzx ecx, byte [r15 + rcx*2 + 4]
cmp r14d, ecx
jae 0x140012fe0
mov ebp, ebx
add bpl, dl
cmp bpl, al
jae case.0x140012fda.4
movzx edx, bpl
movzx edi, byte [r15 + rdx*2 + 5]
mov ecx, edi
and ecx, 0xf
cmp ecx, 4
jne 0x140012fc6
mov bl, 2
mov ecx, eax
sub ecx, edx
movzx edx, bl
cmp ecx, edx
jge 0x140012f81
jmp case.0x140012fda.4
cmp ecx, 0xa
ja case.0x140012fda.4
mov bl, 3
mov ecx, ecx
movsxd rcx, dword [r9 + rcx*4]
add rcx, r9
jmp rcx
mov bl, 1
jmp case.0x140012fda.5
sub al, dl
mov cl, byte [r15]
test cl, 0x20
jne 0x1400131dd
mov ebx, dword [rsp + 0x98]
mov ebp, dword [rsp + 0xa8]
add ebx, 3
and ebx, 0xfffffffc
cmp ebx, ebp
ja 0x140013919
mov dword [rsp + 0x98], ebx
cmp byte [rsp + 0xac], 0
je 0x1400131dd
and cl, 0xc7
mov byte [r15], cl
mov byte [r15 + 2], al
movzx ecx, r10b
cmp r14d, ecx
jae 0x140013035
mov byte [r8], r14b
cmp qword [rsp + 0x78], 0
je 0x1400140f6
lea rcx, [rbx + 4]
cmp rcx, rbp
ja 0x140013919
mov rcx, qword [rsp + 0x88]
mov ebp, dword [r15]
mov dword [rcx + rbx], ebp
mov ecx, dword [rsp + 0x98]
add ecx, 4
cmp byte [rsp + 0xac], 0
mov dword [rsp + 0x98], ecx
je 0x1400131dd
movzx edi, al
add rdi, rdi
cmp qword [rsp + 0x78], 0
je 0x1400140ff
mov ecx, ecx
lea rax, [rdi + rcx]
mov ebp, dword [rsp + 0xa8]
cmp rax, rbp
ja 0x140013919
movzx eax, dl
lea rdx, [r15 + rax*2]
add rdx, 4
add rcx, qword [rsp + 0x88]
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
add edi, dword [rsp + 0x98]
cmp byte [rsp + 0xac], 0
mov dword [rsp + 0x98], edi
je 0x1400131dd
add edi, 3
and edi, 0xfffffffc
mov ecx, dword [rsp + 0xa8]
cmp edi, ecx
ja 0x140013919
mov dword [rsp + 0x98], edi
lea eax, [rdi + 4]
cmp qword [rsp + 0x78], 0
je 0x140013ab6
cmp eax, ecx
ja 0x140013919
mov eax, dword [rsp + 0x9c]
mov rcx, qword [rsp + 0x88]
mov dword [rcx + rdi], eax
mov ecx, dword [rsp + 0x98]
lea eax, [rcx + 4]
cmp byte [rsp + 0xac], 0
mov dword [rsp + 0x98], eax
je 0x1400131dd
cmp qword [rsp + 0x78], 0
je 0x140013ab6
add ecx, 8
cmp ecx, dword [rsp + 0xa8]
ja 0x140013919
mov ecx, dword [rsp + 0xa4]
mov rdx, qword [rsp + 0x88]
mov eax, eax
mov dword [rdx + rax], ecx
mov ecx, dword [rsp + 0x98]
lea eax, [rcx + 4]
cmp byte [rsp + 0xac], 0
mov dword [rsp + 0x98], eax
je 0x1400131dd
cmp qword [rsp + 0x78], 0
je 0x140013ab9
add ecx, 8
cmp ecx, dword [rsp + 0xa8]
ja 0x140013919
mov rcx, qword [rsp + 0x88]
mov eax, eax
mov dword [rcx + rax], ebx
add dword [rsp + 0x98], 4
cmp byte [rsp + 0xac], 0
je 0x1400131dd
mov r8, qword [rsp + 0x90]
add rdi, r8
mov rcx, rdi
mov edx, 1
call qword [sym.imp.ntdll.dll_RtlAddFunctionTable]
mov rcx, r15
call qword [sym.imp.mozglue.dll_free]
mov r9d, dword [rsp + 0x118]
test r9, r9
je 0x140013fdc
mov rdx, qword [rsp + 0x108]
mov r8, qword [rsp + 0x110]
lea r14, [rsp + 0x188]
mov qword [r14 - 0x38], rdx
mov qword [r14 - 0x30], r8
mov qword [r14 - 0x28], r9
xor edi, edi
mov qword [r14 - 0x20], rdi
mov qword [r14 - 0x10], rdi
mov qword [r14 - 8], 0x20
mov qword [r14 - 0x18], r14
mov byte [r14 + 0x20], 1
lea rsi, [rsp + 0x1b0]
mov rcx, rsi
call fcn.140015820
cmp qword [rsi + 0x10], rdi
je 0x14001341b
cmp byte [rsp + 0x1a8], 0
je 0x14001341b
test r13b, r13b
jne 0x140014000
lea rsi, [rsp + 0x170]
mov rax, qword [rsi + 8]
cmp rax, qword [rsi + 0x10]
je 0x14001402a
mov rcx, qword [rsp + 0x170]
mov byte [rcx + rax], 0x49
mov rax, qword [rsp + 0x178]
inc rax
mov qword [rsp + 0x178], rax
inc dword [rsp + 0x168]
cmp rax, qword [rsp + 0x180]
je 0x14001404c
mov rcx, qword [rsp + 0x170]
mov byte [rcx + rax], 0xbb
mov rax, qword [rsp + 0x178]
inc rax
mov qword [rsp + 0x178], rax
inc dword [rsp + 0x168]
lea rcx, [rax + 8]
cmp rcx, qword [rsp + 0x180]
ja 0x14001406e
mov rcx, qword [rsp + 0x170]
mov rdx, qword [rsp + 0x58]
mov qword [rcx + rax], rdx
mov rax, qword [rsp + 0x178]
add rax, 8
mov qword [rsp + 0x178], rax
add dword [rsp + 0x168], 8
cmp rax, qword [rsp + 0x180]
je 0x140014090
mov rcx, qword [rsp + 0x170]
mov byte [rcx + rax], 0x41
mov rax, qword [rsp + 0x178]
inc rax
mov qword [rsp + 0x178], rax
inc dword [rsp + 0x168]
cmp rax, qword [rsp + 0x180]
je 0x1400140b2
mov rcx, qword [rsp + 0x170]
mov byte [rcx + rax], 0xff
mov rax, qword [rsp + 0x178]
inc rax
mov qword [rsp + 0x178], rax
inc dword [rsp + 0x168]
cmp rax, qword [rsp + 0x180]
je 0x1400140d4
mov rcx, qword [rsp + 0x170]
mov byte [rcx + rax], 0xe3
inc qword [rsp + 0x178]
inc dword [rsp + 0x168]
cmp qword [rsp + 0x1c0], 0
je 0x14001341b
cmp byte [rsp + 0x1a8], 0
je 0x14001341b
mov r8, qword [rsp + 0x178]
test r8, r8
je 0x140013413
mov rdx, qword [rsp + 0x170]
mov ecx, dword [rsp + 0x16c]
add rcx, qword [rsp + 0x158]
call sub.VCRUNTIME140.dll_memcpy
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov eax, dword [rsp + 0x178]
add dword [rsp + 0x16c], eax
mov qword [rsp + 0x178], 0
mov rax, qword [rsp + 0x48]
mov qword [rax], r12
mov eax, dword [0x140044f50]
mov ecx, dword [0x1400431a8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400136a1
mov rsi, qword [rsp + 0x1b8]
mov rbp, qword [rsp + 0x1c0]
test rbp, rbp
je 0x140013491
shl rbp, 4
add rbp, rsi
mov edi, dword [0x140044f4c]
lea r15, [rsp + 0x120]
mov rbx, qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r8d, dword [rsi]
mov rcx, qword [rsi + 8]
mov rdx, rdi
mov r9, r15
call rbx
add rsi, 0x10
cmp rsi, rbp
jne 0x140013471
mov rsi, qword [rsp + 0x1b8]
lea rax, [rsp + 0x1d0]
mov qword [rax - 0x10], 0
cmp rsi, rax
jne 0x140013fe7
mov rcx, qword [rsp + 0x170]
cmp rcx, r14
jne 0x140013ff5
mov rax, qword [rsp + 0x48]
cmp qword [rax], 0
je 0x140013f41
mov rax, qword [rsp + 0x48]
cmp qword [rax], 0
setne sil
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x140013503
mov r8d, dword [rsp + 0x80]
test r8d, r8d
je 0x140013503
lea r9, [rsp + 0x80]
mov edx, dword [r9 + 0x28]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp byte [rsp + 0xe8], 0
je 0x14001352b
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x14001352b
mov r8d, dword [rsp + 0xb8]
test r8d, r8d
jne 0x140013efe
mov rcx, qword [rsp + 0x1f0]
xor rcx, rsp
call fcn.14001d580
mov eax, esi
add rsp, 0x1f8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp edx, 0xa
ja case.0x14001356e.4
mov bl, 1
mov cl, 3
mov edx, edx
lea rdi, [0x1400157c8]
movsxd rdx, dword [rdi + rdx*4]
add rdx, rdi
jmp rdx
cmp bpl, 0x1f
ja case.0x14001356e.4
shr bpl, 4
add bpl, 2
mov ecx, ebp
jmp case.0x14001356e.5
lea rcx, [0x140044f64]
call fcn.14001c1e0
cmp dword [0x140044f64], 0xffffffff
jne 0x140012024
lea rsi, [rsp + 0x150]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsi + 0x28]
mov dword [0x140044f60], eax
lea rcx, [0x140044f64]
call fcn.14001c180
jmp 0x140012024
lea rcx, [0x140044f64]
call fcn.14001c1e0
cmp dword [0x140044f64], 0xffffffff
jne 0x14001226a
lea rbp, [rsp + 0x150]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbp + 0x28]
mov dword [0x140044f60], eax
lea rcx, [0x140044f64]
call fcn.14001c180
jmp 0x14001226a
lea rcx, [0x140044f64]
call fcn.14001c1e0
cmp dword [0x140044f64], 0xffffffff
jne 0x140012060
lea rdi, [rsp + 0x150]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rdi + 0x28]
mov dword [0x140044f60], eax
lea rcx, [0x140044f64]
call fcn.14001c180
jmp 0x140012060
lea r15, [rbx + 0x10]
jmp 0x1400122b8
mov eax, 3
cmp byte [rdi + 2], 0x25
mov rcx, rdi
jne 0x140011fc4
lea rcx, [rdi + rax]
movsxd rax, dword [rdi + rax]
mov rcx, qword [rax + rcx + 4]
jmp 0x140011fc4
cmp eax, 0xff
jne 0x140014ac1
cmp byte [rdi + 1], 0x25
mov rcx, rdi
jne 0x140011fc4
mov eax, 2
jmp 0x140013670
lea rcx, [0x140044f50]
call fcn.14001c1e0
cmp dword [0x140044f50], 0xffffffff
jne 0x140013440
lea rsi, [rsp + 0x120]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsi + 4]
mov dword [0x140044f4c], eax
lea rcx, [0x140044f50]
call fcn.14001c180
jmp 0x140013440
mov cl, byte [rdx + rax + 1]
and cl, 0xf8
cmp cl, 0xe8
jne 0x1400134bb
lea ecx, [r10 + 6]
cmp r10d, dword [rsp + 0xa0]
jne 0x14001370a
mov dword [rsp + 0xa0], ecx
cmp qword [rsp + 0x78], 0
je 0x140014c4e
cmp ecx, dword [rsp + 0xa8]
ja 0x140014c5a
add rdx, rax
mov rax, qword [rsp + 0x88]
mov ecx, r10d
movzx ebp, word [rdx + 4]
mov word [rax + rcx + 4], bp
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x98], 6
mov eax, dword [rsp + 0x118]
add eax, 6
jmp 0x140012716
cmp cl, 0x90
je 0x140012759
cmp ecx, 0x80
je 0x140014c67
cmp ecx, 0x65
je 0x140014cd8
mov ebx, ecx
and bl, 0xf8
cmp bl, 0xb8
je 0x1400150f7
cmp ecx, 0xcb
jg 0x1400137fb
cmp ecx, 0x84
jg 0x140013823
cmp ecx, 0x33
je 0x14001388d
cmp ecx, 0x83
jne 0x140013857
mov cl, byte [rdx + rax + 1]
cmp cl, 0xc0
jb 0x1400150eb
mov ecx, dword [rsp + 0x98]
lea ebp, [rcx + 3]
cmp ecx, dword [rsp + 0xa0]
jne 0x1400137d2
mov dword [rsp + 0xa0], ebp
cmp qword [rsp + 0x78], 0
je 0x14001572c
cmp ebp, dword [rsp + 0xa8]
ja 0x140014b10
add rdx, rax
mov rax, qword [rsp + 0x88]
jmp 0x14001504d
cmp ecx, 0xe7
jg 0x14001383c
cmp ecx, 0xcc
je 0x140012759
cmp ecx, 0xd1
jne 0x140013857
cmp byte [rdx + rax + 1], 0xc0
jae 0x14001388d
jmp 0x1400134bb
cmp ecx, 0x85
je 0x14001549b
cmp ecx, 0xc3
jne 0x140013857
jmp 0x140012759
lea ebp, [rcx - 0xe8]
cmp ebp, 2
jb 0x1400154d3
cmp ecx, 0xf6
je 0x14001551b
lea ebp, [rcx - 0x73]
cmp bpl, 2
jbe 0x140014d33
cmp cl, 0xff
jne 0x140014d72
movzx ebp, byte [rdx + rax + 1]
mov ecx, ebp
shr ecx, 3
and ecx, 7
cmp bpl, 0xc0
jb 0x140014dd8
cmp ecx, 6
jne 0x140014e23
mov ecx, dword [rsp + 0x98]
lea ebp, [rcx + 2]
cmp ecx, dword [rsp + 0xa0]
jne 0x1400138a7
mov dword [rsp + 0xa0], ebp
cmp qword [rsp + 0x78], 0
je 0x140014d66
cmp ebp, dword [rsp + 0xa8]
ja 0x140013c1c
mov rbp, qword [rsp + 0x88]
movzx eax, word [rdx + rax]
mov word [rbp + rcx], ax
add dword [rsp + 0x98], 2
mov r9d, dword [rsp + 0x118]
add r9d, 2
jmp 0x1400127ad
movzx ecx, byte [rdx + rax]
cmp ecx, 0xcc
je 0x140013902
cmp ecx, 0x90
jne 0x140015191
inc rax
mov dword [rsp + 0x118], eax
cmp rax, r12
jb 0x1400138ea
mov r9d, eax
jmp 0x140012d2b
mov byte [rsp + 0xac], 0
jmp 0x1400131dd
mov ecx, dword [rsp + 0x98]
lea esi, [rcx + 1]
cmp ecx, dword [rsp + 0xa0]
jne 0x140013940
mov dword [rsp + 0xa0], esi
cmp qword [rsp + 0x78], 0
je 0x140013ac8
cmp esi, dword [rsp + 0xa8]
jbe 0x140013d2f
mov byte [rsp + 0xac], 0
mov esi, ecx
jmp 0x140013acf
mov ecx, dword [rsp + 0x98]
lea ebp, [rcx + 1]
cmp ecx, dword [rsp + 0xa0]
jne 0x140013982
mov dword [rsp + 0xa0], ebp
cmp qword [rsp + 0x78], 0
je 0x140013b6c
cmp ebp, dword [rsp + 0xa8]
jbe 0x140013d63
mov byte [rsp + 0xac], 0
jmp 0x140013d81
mov ecx, dword [rsp + 0x98]
lea ebp, [rcx + 1]
cmp ecx, dword [rsp + 0xa0]
jne 0x1400139c2
mov dword [rsp + 0xa0], ebp
cmp qword [rsp + 0x78], 0
je 0x140013b78
cmp ebp, dword [rsp + 0xa8]
jbe 0x140013e32
mov byte [rsp + 0xac], 0
mov ebp, ecx
jmp 0x140013b7f
mov ecx, dword [rsp + 0x98]
lea ebp, [rcx + 1]
cmp ecx, dword [rsp + 0xa0]
jne 0x140013a04
mov dword [rsp + 0xa0], ebp
cmp qword [rsp + 0x78], 0
je 0x140013bd7
cmp ebp, dword [rsp + 0xa8]
jbe 0x140013e66
mov byte [rsp + 0xac], 0
mov ebp, ecx
jmp 0x140013bde
mov dword [rsp + 0x98], r10d
jmp 0x140012640
mov byte [rsp + 0xac], 0
mov r10d, ecx
jmp 0x140012640
int3
mov ebx, ecx
and bl, 0xf8
cmp bl, 0xb8
jne 0x140013c41
lea ecx, [r10 + 9]
cmp r10d, dword [rsp + 0xa0]
jne 0x140013a77
mov dword [rsp + 0xa0], ecx
cmp qword [rsp + 0x78], 0
je 0x140014375
cmp ecx, dword [rsp + 0xa8]
jbe 0x140014400
mov byte [rsp + 0xac], 0
jmp 0x14001437c
mov dword [rsp + 0x98], ecx
jmp 0x140012714
mov byte [rsp + 0xac], 0
jmp 0x140012714
add eax, 4
add eax, 4
mov dword [rsp + 0x98], eax
jmp 0x1400131c4
mov dword [rsp + 0x98], esi
lea eax, [r9 + 1]
mov dword [rsp + 0x118], eax
movzx ecx, byte [rdx + rax]
lea ebp, [rcx - 0x10]
cmp ebp, 2
jb 0x140013b33
cmp ecx, 5
je 0x1400141a3
cmp ecx, 0x1f
jne 0x1400141dc
lea ecx, [rsi + 1]
cmp esi, dword [rsp + 0xa0]
jne 0x140013b0b
mov dword [rsp + 0xa0], ecx
cmp qword [rsp + 0x78], 0
je 0x1400146d7
cmp ecx, dword [rsp + 0xa8]
jbe 0x140014792
mov byte [rsp + 0xac], 0
mov ecx, esi
jmp 0x1400146de
lea ecx, [rsi + 1]
cmp esi, dword [rsp + 0xa0]
jne 0x140013b46
mov dword [rsp + 0xa0], ecx
cmp qword [rsp + 0x78], 0
je 0x140014329
cmp ecx, dword [rsp + 0xa8]
jbe 0x140014355
mov byte [rsp + 0xac], 0
jmp 0x140014330
mov dword [rsp + 0x98], ebp
jmp 0x140013d81
mov dword [rsp + 0x98], ebp
inc r9d
mov dword [rsp + 0x118], r9d
cmp byte [rdx + r9], 0x89
jne 0x1400134bb
lea eax, [rbp + 1]
cmp ebp, dword [rsp + 0xa0]
jne 0x140013ba8
mov dword [rsp + 0xa0], eax
cmp qword [rsp + 0x78], 0
je 0x140013c35
cmp eax, dword [rsp + 0xa8]
ja 0x14001399b
mov rax, qword [rsp + 0x88]
mov ecx, ebp
mov dl, byte [rdx + r9]
mov byte [rax + rcx], dl
jmp 0x140013d72
mov dword [rsp + 0x98], ebp
inc r9d
mov dword [rsp + 0x118], r9d
cmp byte [rdx + r9], 0x33
jne 0x1400134bb
lea eax, [rbp + 2]
cmp ebp, dword [rsp + 0xa0]
jne 0x140013c07
mov dword [rsp + 0xa0], eax
cmp qword [rsp + 0x78], 0
je 0x140013c29
cmp eax, dword [rsp + 0xa8]
jbe 0x140013e1a
mov byte [rsp + 0xac], 0
jmp 0x1400138e1
mov dword [rsp + 0x98], eax
jmp 0x1400138e1
mov dword [rsp + 0x98], eax
jmp 0x140013d81
cmp ecx, 0xc6
jg 0x14001427d
cmp ecx, 0x63
je 0x140013ce9
cmp ecx, 0x8d
jne 0x1400134bb
mov bl, byte [rdx + rax + 1]
mov eax, ebx
and al, 0xc7
cmp al, 5
jne 0x14001499f
lea eax, [r9 + 3]
mov dword [rsp + 0x118], eax
movsxd rcx, dword [rdx + rax]
add r9d, 7
mov dword [rsp + 0x118], r9d
cmp qword [rsp + 0x78], 0
je 0x140014be7
mov ebp, dword [rsp + 0xa8]
cmp r10d, ebp
jae 0x140014bfb
shr bl, 3
or bl, 0xb8
mov rbp, qword [rsp + 0x88]
mov edi, r10d
mov byte [rbp + rdi], bl
mov r10d, dword [rsp + 0x98]
inc r10d
mov dword [rsp + 0x98], r10d
cmp qword [rsp + 0x78], 0
je 0x140014bea
mov ebp, dword [rsp + 0xa8]
jmp 0x140014c03
cmp byte [rdx + rax + 1], 0xc0
jb 0x1400134bb
lea ecx, [r10 + 2]
cmp r10d, dword [rsp + 0xa0]
jne 0x140013d09
mov dword [rsp + 0xa0], ecx
cmp qword [rsp + 0x78], 0
je 0x140013e9a
cmp ecx, dword [rsp + 0xa8]
jbe 0x140014131
mov byte [rsp + 0xac], 0
jmp 0x140013ea1
mov rbp, qword [rsp + 0x88]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov esi, dword [rsp + 0x98]
inc esi
mov dword [rsp + 0x98], esi
mov r9d, dword [rsp + 0x118]
mov rdx, qword [rsp + 0x110]
jmp 0x140013acf
mov rbp, qword [rsp + 0x88]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
inc dword [rsp + 0x98]
mov r9d, dword [rsp + 0x118]
inc r9d
lea rcx, [rsp + 0x108]
mov dword [rcx + 0x10], r9d
xor edx, edx
call fcn.140038ab0
test eax, eax
js 0x1400134bb
mov esi, eax
mov ecx, dword [rsp + 0x98]
lea eax, [rcx + rsi]
cmp ecx, dword [rsp + 0xa0]
jne 0x140013dbb
mov dword [rsp + 0xa0], eax
mov edx, dword [rsp + 0x118]
cmp qword [rsp + 0x78], 0
je 0x140013ddd
cmp eax, dword [rsp + 0xa8]
jbe 0x140013df2
mov byte [rsp + 0xac], 0
jmp 0x140013de4
mov dword [rsp + 0x98], eax
add edx, esi
mov dword [rsp + 0x118], edx
jmp 0x14001271d
add rdx, qword [rsp + 0x110]
mov r8d, esi
add rcx, qword [rsp + 0x88]
call sub.VCRUNTIME140.dll_memcpy
add dword [rsp + 0x98], esi
mov edx, dword [rsp + 0x118]
jmp 0x140013de4
mov rax, qword [rsp + 0x88]
mov ecx, ebp
movzx edx, word [rdx + r9]
mov word [rax + rcx], dx
jmp 0x1400138d1
mov rbp, qword [rsp + 0x88]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov ebp, dword [rsp + 0x98]
inc ebp
mov dword [rsp + 0x98], ebp
mov r9d, dword [rsp + 0x118]
mov rdx, qword [rsp + 0x110]
jmp 0x140013b7f
mov rbp, qword [rsp + 0x88]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov ebp, dword [rsp + 0x98]
inc ebp
mov dword [rsp + 0x98], ebp
mov r9d, dword [rsp + 0x118]
mov rdx, qword [rsp + 0x110]
jmp 0x140013bde
mov dword [rsp + 0x98], ecx
add eax, 2
jmp 0x140012716
int3
mov qword [rsp + 0x108], rbx
mov qword [rsp + 0x110], rsi
mov dword [rsp + 0x118], 0
jmp 0x140011ffa
mov rcx, rdi
call fcn.1400388a0
test al, al
cmovne rsi, rdi
jmp 0x140011fd2
int3
mov dword [rsp + 0x98], edx
jmp 0x140012477
lea r9, [rsp + 0xb8]
mov edx, dword [r9 + 0x28]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x14001352b
mov byte [rsp + 0xac], 0
xor eax, eax
jmp 0x140012443
mov dword [rsp + 0x98], ecx
jmp 0x14001250f
mov byte [rsp + 0xac], 0
xor eax, eax
mov ecx, edx
jmp 0x1400124db
mov dword [rsp + 0x98], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsp + 0x98]
lea edx, [rcx + 8]
cmp qword [rsp + 0x78], 0
je 0x1400157ae
cmp edx, dword [rsp + 0xa8]
ja 0x1400157ba
mov rdx, qword [rsp + 0x88]
mov qword [rdx + rcx], rax
add dword [rsp + 0x98], 8
jmp 0x1400134ca
inc eax
inc eax
add eax, 4
add eax, 8
mov dword [rsp + 0x98], eax
jmp 0x140012e78
mov byte [rsp + 0xac], 0
jmp 0x140012d9b
mov byte [rsp + 0xac], 0
jmp 0x140012dd4
mov byte [rsp + 0xac], 0
jmp 0x140012e14
mov byte [rsp + 0xac], 0
xor eax, eax
jmp 0x140012e44
int3
mov rcx, rsi
call qword [sym.imp.mozglue.dll_free]
jmp 0x1400134aa
call qword [sym.imp.mozglue.dll_free]
jmp 0x1400134bb
lea rcx, [rsp + 0xf0]
lea r8, [rsp + 0x150]
mov rdx, r12
mov r9, qword [rsp + 0x58]
call fcn.140038f40
test al, al
jne 0x1400133a7
jmp 0x14001341b
mov edx, 1
mov rcx, rsi
call fcn.1400393d0
test al, al
je 0x140015738
mov rax, qword [rsp + 0x178]
jmp 0x14001327d
mov edx, 1
mov rcx, rsi
call fcn.1400393d0
test al, al
je 0x14001574d
mov rax, qword [rsp + 0x178]
jmp 0x1400132b1
mov edx, 8
mov rcx, rsi
call fcn.1400393d0
test al, al
je 0x140015762
mov rax, qword [rsp + 0x178]
jmp 0x1400132e9
mov edx, 1
mov rcx, rsi
call fcn.1400393d0
test al, al
je 0x140015777
mov rax, qword [rsp + 0x178]
jmp 0x140013324
mov edx, 1
mov rcx, rsi
call fcn.1400393d0
test al, al
je 0x14001578c
mov rax, qword [rsp + 0x178]
jmp 0x140013358
mov edx, 1
mov rcx, rsi
call fcn.1400393d0
test al, al
je 0x1400157a1
mov rax, qword [rsp + 0x178]
jmp 0x14001338c
lea ecx, [rbx + 4]
movzx edi, al
add rdi, rdi
add edi, ecx
mov dword [rsp + 0x98], edi
jmp 0x1400130da
movzx ebp, byte [rdx + rax + 0xa]
cmp ebp, 0x50
je 0x1400145f6
cmp ebp, 0xff
jne 0x1400146cd
cmp byte [rdx + rax + 0xb], 0xe0
jmp 0x1400145fb
mov rcx, qword [rsp + 0x88]
mov ebp, r10d
movzx eax, word [rdx + rax]
mov word [rcx + rbp], ax
add dword [rsp + 0x98], 2
mov eax, dword [rsp + 0x118]
jmp 0x140013ea1
test ecx, ecx
jne 0x1400143f6
mov ecx, esi
and ecx, 7
cmp ecx, 5
je 0x1400149f0
mov edi, 1
cmp ecx, 4
jne 0x1400126ae
mov cl, byte [rdx + rbx + 1]
and cl, 7
xor ebp, ebp
cmp cl, 5
sete bpl
lea edi, [rbp*4 + 1]
jmp 0x1400126ae
int3
lea ecx, [rsi + 1]
cmp esi, dword [rsp + 0xa0]
jne 0x1400141b6
mov dword [rsp + 0xa0], ecx
cmp qword [rsp + 0x78], 0
je 0x14001472b
cmp ecx, dword [rsp + 0xa8]
jbe 0x1400147c6
mov byte [rsp + 0xac], 0
jmp 0x140014732
lea eax, [rcx + 0x7d]
cmp al, 2
ja 0x1400134bb
lea rax, [0x14003b080]
mov r8d, dword [rax + rcx*4 - 0x20c]
lea eax, [r9 + 2]
mov dword [rsp + 0x118], eax
dec esi
lea rcx, [rsp + 0x78]
mov dword [rcx + 0x20], esi
lea rbp, [rdx + rax]
movsxd rax, dword [rdx + rax]
lea rdx, [rax + rbp]
add rdx, 4
add r9d, 6
mov dword [rsp + 0x118], r9d
call fcn.140038b40
test al, al
jne 0x14001271d
jmp 0x1400134bb
mov byte [rsp + 0xac], 0
jmp 0x1400127aa
mov cl, byte [r15]
and cl, 7
jmp 0x14001426f
cmp dil, 0x1f
ja case.0x140012fda.4
shr dil, 4
add dil, 2
mov ebx, edi
jmp case.0x140012fda.5
mov cl, byte [r15]
and cl, 7
mov bl, 2
cmp cl, 2
je case.0x140012fda.5
jmp case.0x140012fda.4
cmp ecx, 0xff
je 0x1400145a5
cmp ecx, 0xc7
jne 0x1400134bb
cmp byte [rdx + rax + 1], 0x44
jne 0x1400134bb
lea ecx, [r10 + 8]
cmp r10d, dword [rsp + 0xa0]
jne 0x1400142b5
mov dword [rsp + 0xa0], ecx
cmp qword [rsp + 0x78], 0
je 0x140014a7f
cmp ecx, dword [rsp + 0xa8]
jbe 0x140014a8e
mov byte [rsp + 0xac], 0
jmp 0x140014a86
mov ecx, dword [rsp + 0x98]
lea ebp, [rcx + 1]
cmp ecx, dword [rsp + 0xa0]
jne 0x1400142f5
mov dword [rsp + 0xa0], ebp
cmp qword [rsp + 0x78], 0
je 0x1400147e9
cmp ebp, dword [rsp + 0xa8]
jbe 0x1400148ff
mov byte [rsp + 0xac], 0
mov ebp, ecx
jmp 0x1400147f0
mov dword [rsp + 0x98], ebp
jmp 0x1400127aa
mov dword [rsp + 0x98], ecx
inc eax
lea rcx, [rsp + 0x108]
mov dword [rcx + 0x10], eax
jmp 0x140013d90
xor r14d, r14d
xor r12d, r12d
jmp 0x14001211d
xor r14d, r14d
jmp 0x14001211d
mov rcx, qword [rsp + 0x88]
mov ebp, esi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
inc dword [rsp + 0x98]
mov eax, dword [rsp + 0x118]
jmp 0x140014330
mov dword [rsp + 0x98], ecx
add eax, 9
jmp 0x140012716
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rbx + 8], 0
lea rcx, [0x140044f80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor esi, esi
jmp 0x14001352b
mov dword [rsp + 0x98], ecx
jmp 0x140012827
cmp ecx, 0x60
jne 0x1400148ee
lea ecx, [r10 + 5]
cmp r10d, dword [rsp + 0xa0]
jne 0x1400143d0
mov dword [rsp + 0xa0], ecx
cmp qword [rsp + 0x78], 0
je 0x140014ab2
cmp ecx, dword [rsp + 0xa8]
jbe 0x140014b5f
mov byte [rsp + 0xac], 0
jmp 0x140014ab9
mov edi, 5
jmp 0x1400126ae
add rdx, rax
mov rax, qword [rsp + 0x88]
mov ecx, r10d
mov bl, byte [rdx + 8]
mov byte [rax + rcx + 8], bl
mov rdx, qword [rdx]
mov qword [rax + rcx], rdx
add dword [rsp + 0x98], 9
mov eax, dword [rsp + 0x118]
jmp 0x14001437c
jne 0x14001294c
cmp qword [rsi + 8], rdi
jb 0x14001293f
jmp 0x14001294c
cmp qword [r13], r12
ja 0x14001296c
mov rax, qword [rsp + 0x50]
cmp qword [r13 + 8], rax
jae 0x140012218
jmp 0x14001296c
lea r13, [rsi + rsi*2]
movups xmm0, xmmword [rax + r13*8 - 0x18]
movaps xmmword [rsp + 0x150], xmm0
mov rdi, qword [rax + r13*8 - 8]
mov qword [rax + r13*8 - 8], 0
mov rax, qword [rbx + 8]
cmp rax, qword [rbx + 0x10]
jne 0x140014499
mov rcx, rbx
call fcn.1400159b0
mov rax, qword [rbx + 8]
mov rcx, qword [rbx]
lea rax, [rax + rax*2]
movaps xmm0, xmmword [rsp + 0x150]
movups xmmword [rcx + rax*8], xmm0
mov qword [rcx + rax*8 + 0x10], rdi
inc qword [rbx + 8]
dec rsi
cmp rsi, r15
jbe 0x140014504
lea r13, [r13*8 - 8]
mov rdi, qword [sym.imp.mozglue.dll_free]
mov rax, qword [rbx]
movups xmm0, xmmword [rax + r13 - 0x28]
movups xmmword [rax + r13 - 0x10], xmm0
mov rdx, qword [rax + r13 - 0x18]
mov qword [rax + r13 - 0x18], 0
mov rcx, qword [rax + r13]
mov qword [rax + r13], rdx
test rcx, rcx
je 0x1400144f8
call rdi
dec rsi
add r13, 0xffffffffffffffe8
cmp rsi, r15
ja 0x1400144cc
mov rax, qword [rbx]
lea rdx, [r15 + r15*2]
mov qword [rax + rdx*8], r12
mov rcx, qword [rsp + 0x50]
mov qword [rax + rdx*8 + 8], rcx
mov rcx, qword [rax + rdx*8 + 0x10]
mov qword [rax + rdx*8 + 0x10], rbp
test rcx, rcx
je 0x1400129e0
call qword [sym.imp.mozglue.dll_free]
jmp 0x1400129e0
mov rcx, qword [rsp + 0x68]
lea rdi, [rcx + r14]
dec rdi
lea rdx, [rsp + 0x150]
mov qword [rdx], rcx
mov qword [rdx + 8], rdi
mov qword [rdx + 0x10], 0
lea rcx, [rsp + 0xb0]
mov qword [rcx], 1
mov qword [rcx + 8], rdx
mov edx, 1
mov dword [rsp + 0x30], edx
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edx
mov rcx, r12
xor edx, edx
mov r8, rbp
mov r9d, 0x2000
call qword [case.0x14001ca4e.0]
mov qword [rbx + 8], rax
test rax, rax
jne 0x1400122b8
jmp 0x140014392
mov al, byte [rdx + rax + 1]
and al, 0xc7
cmp al, 5
jne 0x1400134bb
lea eax, [r9 + 3]
mov dword [rsp + 0x118], eax
dec r10d
lea rcx, [rsp + 0x78]
mov dword [rcx + 0x20], r10d
lea rbp, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r9d, 7
mov dword [rsp + 0x118], r9d
mov rdx, qword [rax + rbp + 4]
mov r8d, 3
call fcn.140038b40
mov r14b, 1
jmp 0x14001422c
cmp byte [rdx + rax + 0xb], 0xc3
mov r14, qword [rsp + 0x40]
jne 0x14001252f
add eax, 2
mov rdi, qword [rdx + rax]
lea rcx, [rsp + 0x108]
lea rsi, [rsp + 0x150]
mov rdx, rsi
call fcn.140038e50
xor ebx, ebx
cmp qword [rsi + 0x70], 0
je 0x140014b1f
cmp byte [rsp + 0x1a8], 0
je 0x140014b1f
lea rsi, [rsp + 0x150]
mov rcx, rsi
mov rdx, qword [rsp + 0x58]
call fcn.140039380
mov rcx, rsi
call fcn.140039310
test al, al
je 0x140014b1d
mov eax, dword [rsp + 0x98]
lea ecx, [rax + 8]
cmp qword [rsp + 0x78], 0
je 0x140014f82
cmp ecx, dword [rsp + 0xa8]
jbe 0x140015070
mov byte [rsp + 0xac], 0
xor eax, eax
xor ebx, ebx
cmp qword [rsp + 0x88], 0
je 0x140014b1f
cmp qword [rsp + 0x90], 0
je 0x140014b1f
cmp dword [rsp + 0x80], 0
je 0x140014b1f
test al, al
jne 0x140014f89
jmp 0x140014b1f
mov r14, qword [rsp + 0x40]
jmp 0x14001252f
mov dword [rsp + 0x98], ecx
inc eax
mov dword [rsp + 0x118], eax
mov bl, byte [rdx + rax]
and bl, 0xc7
cmp bl, 0x44
jne 0x1400134bb
lea ebp, [rcx + 3]
cmp ecx, dword [rsp + 0xa0]
jne 0x140014709
mov dword [rsp + 0xa0], ebp
cmp qword [rsp + 0x78], 0
je 0x140014786
cmp ebp, dword [rsp + 0xa8]
jbe 0x1400148dc
mov byte [rsp + 0xac], 0
jmp 0x140012827
mov dword [rsp + 0x98], ecx
inc eax
jmp 0x140012716
mov dl, byte [r15]
and dl, 7
mov cl, 2
jmp 0x140014749
mov dl, byte [r15]
and dl, 7
cmp dl, 2
je case.0x14001356e.5
mov ecx, dword [rsp + 0xa0]
lea r8, [r15 + 1]
xor ebp, ebp
mov r10b, byte [r15 + 1]
cmp ecx, r14d
jae case.0x140012fda.4
movzx edx, r10b
cmp ecx, edx
jb 0x1400131dd
cmp al, bpl
ja 0x1400131dd
xor edx, edx
xor eax, eax
jmp 0x140012fe2
mov dword [rsp + 0x98], ebp
jmp 0x140012827
mov rcx, qword [rsp + 0x88]
mov ebp, esi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
mov ecx, dword [rsp + 0x98]
inc ecx
mov dword [rsp + 0x98], ecx
mov eax, dword [rsp + 0x118]
mov rdx, qword [rsp + 0x110]
jmp 0x1400146de
mov rcx, qword [rsp + 0x88]
mov ebp, esi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
inc dword [rsp + 0x98]
mov eax, dword [rsp + 0x118]
jmp 0x140014732
mov dword [rsp + 0x98], ebp
inc r9d
mov dword [rsp + 0x118], r9d
mov al, byte [rdx + r9]
mov ecx, eax
and cl, 0xfc
cmp cl, 0x88
jne 0x14001488f
movzx ebx, byte [rdx + r9 + 1]
mov ecx, ebx
and ecx, 0xffffffc0
cmp cl, 0xc0
je 0x140013bf4
cmp ecx, 0x40
je 0x140014845
test ecx, ecx
jne 0x1400134bb
mov eax, ebx
and eax, 6
cmp eax, 4
jne 0x140013bf4
cmp ecx, 0x40
jne 0x1400134bb
and ebx, 7
add rdx, r9
mov ecx, dword [rsp + 0xa0]
cmp ebx, 4
jne 0x140014ae9
lea eax, [rbp + 4]
cmp ebp, ecx
jne 0x140014869
mov dword [rsp + 0xa0], eax
cmp qword [rsp + 0x78], 0
je 0x140014f62
cmp eax, dword [rsp + 0xa8]
jbe 0x14001501f
mov byte [rsp + 0xac], 0
jmp 0x140014f69
cmp al, 0x44
jne 0x14001271d
cmp byte [rdx + r9 + 1], 0x89
jne 0x14001271d
lea eax, [rbp + 2]
cmp ebp, dword [rsp + 0xa0]
jne 0x1400148b6
mov dword [rsp + 0xa0], eax
cmp qword [rsp + 0x78], 0
je 0x140014f52
cmp eax, dword [rsp + 0xa8]
jbe 0x140014ff7
mov byte [rsp + 0xac], 0
jmp 0x140014f59
add rdx, rax
mov rax, qword [rsp + 0x88]
mov ecx, ecx
jmp 0x14001280a
cmp ecx, 0xc0
jne 0x1400134bb
jmp 0x1400127ce
mov rbp, qword [rsp + 0x88]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov ebp, dword [rsp + 0x98]
inc ebp
mov dword [rsp + 0x98], ebp
mov r9d, dword [rsp + 0x118]
mov rdx, qword [rsp + 0x110]
jmp 0x1400147f0
mov dword [rsp + 0x98], ecx
jmp 0x140012890
mov byte [rsp + 0xac], 0
mov ecx, ebp
jmp 0x140012890
mov dword [rsp + 0x98], eax
jmp 0x1400127aa
and bl, 0xf8
cmp bl, 0xb8
jne 0x1400134bb
lea eax, [rcx + 5]
cmp ecx, dword [rsp + 0xa0]
jne 0x140014979
mov dword [rsp + 0xa0], eax
cmp qword [rsp + 0x78], 0
je 0x140014b8d
cmp eax, dword [rsp + 0xa8]
jbe 0x140014c1c
mov byte [rsp + 0xac], 0
jmp 0x140014c45
add r9d, 2
mov rax, qword [rsp + 0x108]
lea rcx, [rsp + 0x150]
mov qword [rcx], rax
add rdx, r9
mov qword [rcx + 8], rdx
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.140038ab0
mov esi, eax
mov ecx, dword [rsp + 0x98]
lea eax, [rcx + rsi]
inc eax
cmp ecx, dword [rsp + 0xa0]
jne 0x1400149e9
mov dword [rsp + 0xa0], eax
inc esi
jmp 0x140013dbb
shr sil, 3
lea ecx, [r9 + 3]
lea rbp, [rdx + rcx]
add r9d, 7
mov eax, esi
mov dword [rsp + 0x118], ecx
movsxd rcx, dword [rdx + rcx]
lea rdx, [rcx + rbp]
add rdx, 4
mov dword [rsp + 0x118], r9d
and al, 7
je 0x140014b99
cmp qword [rsp + 0x78], 0
je 0x140014f3d
mov ebp, dword [rsp + 0xa8]
cmp r10d, ebp
jae 0x140014f98
or sil, 0xb8
mov rcx, qword [rsp + 0x88]
mov ebp, r10d
mov byte [rcx + rbp], sil
mov r10d, dword [rsp + 0x98]
inc r10d
mov dword [rsp + 0x98], r10d
cmp qword [rsp + 0x78], 0
je 0x140014f40
mov ebp, dword [rsp + 0xa8]
jmp 0x140014fa0
mov dword [rsp + 0x98], ecx
add eax, 8
jmp 0x140012716
mov rcx, qword [rsp + 0x88]
mov ebp, r10d
mov rax, qword [rdx + rax]
mov qword [rcx + rbp], rax
add dword [rsp + 0x98], 8
mov eax, dword [rsp + 0x118]
jmp 0x140014a86
mov dword [rsp + 0x98], ecx
add eax, 5
jmp 0x140012716
mov r12, rbx
mov rbp, r15
cmp eax, 0xe9
jne 0x140014ed3
movsxd rax, dword [rdi + 1]
lea rcx, [rdi + rax]
add rcx, 5
mov r15, rbp
mov rbx, r12
jmp 0x140011fc4
lea eax, [rbp + 3]
cmp ebp, ecx
jne 0x140014af7
mov dword [rsp + 0xa0], eax
cmp qword [rsp + 0x78], 0
je 0x140014f72
cmp eax, dword [rsp + 0xa8]
jbe 0x140015043
mov byte [rsp + 0xac], 0
jmp 0x140014f79
xor ebx, ebx
lea rsi, [rsp + 0x1b0]
mov rcx, rsi
call fcn.1400397d0
mov rcx, qword [rsi - 0x40]
lea rax, [rsp + 0x188]
cmp rcx, rax
je 0x140014b46
call qword [sym.imp.mozglue.dll_free]
test bl, bl
mov r14, qword [rsp + 0x40]
jne 0x1400134bb
mov ecx, dword [rsp + 0x98]
jmp 0x14001252f
add rdx, rax
mov rax, qword [rsp + 0x88]
mov ecx, r10d
mov bl, byte [rdx + 4]
mov byte [rax + rcx + 4], bl
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x98], 5
mov eax, dword [rsp + 0x118]
jmp 0x140014ab9
mov dword [rsp + 0x98], eax
jmp 0x140014c45
cmp qword [rsp + 0x78], 0
je 0x140014be7
mov eax, dword [rsp + 0xa8]
cmp r10d, eax
jae 0x14001520b
mov rax, qword [rsp + 0x88]
mov ecx, r10d
mov byte [rax + rcx], 0xa1
mov r10d, dword [rsp + 0x98]
inc r10d
mov dword [rsp + 0x98], r10d
cmp qword [rsp + 0x78], 0
je 0x140014bea
mov eax, dword [rsp + 0xa8]
jmp 0x140015213
inc r10d
add r10d, 8
mov dword [rsp + 0x98], r10d
jmp 0x14001271d
mov byte [rsp + 0xac], 0
lea ebx, [r10 + 8]
cmp ebx, ebp
jbe 0x140014eac
mov byte [rsp + 0xac], 0
jmp 0x14001271d
add rdx, r9
mov rax, qword [rsp + 0x88]
mov ecx, ecx
mov bl, byte [rdx + 4]
mov byte [rax + rcx + 4], bl
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x98], 5
mov r9d, dword [rsp + 0x118]
add r9d, 5
jmp 0x1400127ad
mov dword [rsp + 0x98], ecx
jmp 0x14001374e
mov byte [rsp + 0xac], 0
jmp 0x14001374e
cmp byte [rdx + rax + 1], 0x3d
jne 0x1400134bb
add r9d, 2
mov dword [rsp + 0x118], r9d
mov rcx, qword [rsp + 0x78]
mov eax, dword [rsp + 0x98]
test rcx, rcx
je 0x140015233
mov edx, dword [rsp + 0xa8]
cmp eax, edx
jae 0x14001539c
mov rcx, qword [rsp + 0x88]
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x140015235
mov edx, dword [rsp + 0xa8]
jmp 0x1400153a4
cmp byte [rdx + rax + 1], 0x48
jne 0x1400134bb
mov cl, byte [rdx + rax + 2]
and cl, 0xfc
cmp cl, 0x88
jne 0x1400134bb
mov ecx, dword [rsp + 0x98]
lea ebp, [rcx + 3]
cmp ecx, dword [rsp + 0xa0]
jne 0x140014d0d
mov dword [rsp + 0xa0], ebp
cmp qword [rsp + 0x78], 0
je 0x14001535b
cmp ebp, dword [rsp + 0xa8]
jbe 0x140015455
mov byte [rsp + 0xac], 0
jmp 0x140015362
lea rbp, [0x14003b080]
mov r8d, dword [rbp + rcx*4 - 0x1cc]
movzx eax, byte [rdx + rax + 1]
add r9d, 2
mov dword [rsp + 0x118], r9d
add r9, rdx
add r9, rax
lea rcx, [rsp + 0x78]
mov rdx, r9
jmp 0x140014227
mov dword [rsp + 0x98], ebp
jmp 0x1400138e1
cmp ecx, 0xc6
jne 0x1400150db
mov rbp, qword [rsp + 0x108]
lea rcx, [rsp + 0x150]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.140038ab0
test eax, eax
js 0x1400134bb
mov esi, eax
mov ecx, dword [rsp + 0x98]
lea eax, [rcx + rsi]
add eax, 2
cmp ecx, dword [rsp + 0xa0]
jne 0x140014dd0
mov dword [rsp + 0xa0], eax
add esi, 2
jmp 0x140013dbb
and bpl, 0xc7
cmp bpl, 5
jne 0x140015142
cmp cl, 2
jne 0x140015142
lea eax, [r9 + 2]
mov dword [rsp + 0x118], eax
lea rcx, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r9d, 6
mov dword [rsp + 0x118], r9d
mov rdx, qword [rax + rcx + 4]
lea rcx, [rsp + 0x78]
mov r8d, 4
jmp 0x140014227
cmp ecx, 4
jne 0x140015183
mov rbp, qword [rsp + 0x108]
lea rcx, [rsp + 0x150]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.140038ab0
test eax, eax
js 0x1400134bb
mov esi, eax
mov ecx, dword [rsp + 0x98]
lea eax, [rcx + rsi]
inc eax
cmp ecx, dword [rsp + 0xa0]
jne 0x140014e7d
mov dword [rsp + 0xa0], eax
inc esi
mov edx, dword [rsp + 0x118]
cmp qword [rsp + 0x78], 0
je 0x140015483
cmp eax, dword [rsp + 0xa8]
jbe 0x1400155f1
mov byte [rsp + 0xac], 0
jmp 0x14001548a
add rdx, rax
lea rax, [rcx + rdx]
add rax, 4
mov rcx, qword [rsp + 0x88]
mov edx, r10d
mov qword [rcx + rdx], rax
add dword [rsp + 0x98], 8
jmp 0x14001271d
mov rcx, rdi
cmp eax, 0xeb
mov r15, rbp
mov rbx, r12
jne 0x140011fc4
movsx rax, byte [rdi + 1]
lea r14, [rdi + rax]
add r14, 2
mov eax, r14d
sub eax, edi
shl eax, 0x18
add eax, 0xfe000000
mov edx, eax
sar edx, 0x18
test eax, eax
js 0x14001565e
mov rcx, rdi
mov r15, rbp
mov rbx, r12
je 0x140011fc4
xor eax, eax
lea ecx, [rax + 2]
cmp byte [rdi + rcx], 0x90
jne 0x140015724
inc al
movsx eax, al
cmp edx, eax
jg 0x140014f1f
mov rcx, r14
jmp 0x140014ade
inc r10d
add r10d, 8
inc r10d
inc r10d
inc r10d
jmp 0x140014bee
mov dword [rsp + 0x98], eax
add r9d, 2
jmp 0x140013d84
mov dword [rsp + 0x98], eax
add r9d, 4
jmp 0x1400127ad
mov dword [rsp + 0x98], eax
add r9d, 3
jmp 0x1400127ad
mov dword [rsp + 0x98], ecx
mov rax, qword [rsp + 0x48]
mov qword [rax], rdi
mov bl, 1
jmp 0x140014b1f
mov byte [rsp + 0xac], 0
lea ecx, [r10 + 8]
cmp ecx, ebp
jbe 0x1400150a0
mov byte [rsp + 0xac], 0
cmp r10d, ebp
jae 0x1400151c0
mov rcx, qword [rsp + 0x88]
mov edx, r10d
mov byte [rcx + rdx], 0x48
mov r10d, dword [rsp + 0x98]
inc r10d
mov dword [rsp + 0x98], r10d
cmp qword [rsp + 0x78], 0
je 0x140014f47
mov ebp, dword [rsp + 0xa8]
jmp 0x1400151c8
mov rax, qword [rsp + 0x88]
mov ecx, ebp
movzx edx, word [rdx + r9]
mov word [rax + rcx], dx
add dword [rsp + 0x98], 2
mov r9d, dword [rsp + 0x118]
jmp 0x140014f59
mov rax, qword [rsp + 0x88]
mov ecx, ebp
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x98], 4
mov r9d, dword [rsp + 0x118]
jmp 0x140014f69
mov rax, qword [rsp + 0x88]
mov ecx, ebp
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x98], 3
mov r9d, dword [rsp + 0x118]
jmp 0x140014f79
mov rcx, qword [rsp + 0x88]
mov qword [rcx + rax], rdi
add dword [rsp + 0x98], 8
cmp qword [rsp + 0x78], 0
je 0x140014f89
cmp byte [rsp + 0xac], 0
setne al
jmp 0x140014692
mov rcx, qword [rsp + 0x88]
mov ebp, r10d
mov qword [rcx + rbp], rdx
mov r10d, dword [rsp + 0x98]
add r10d, 8
mov dword [rsp + 0x98], r10d
cmp qword [rsp + 0x78], 0
je 0x140014f44
mov ebp, dword [rsp + 0xa8]
jmp 0x140014fb4
cmp ecx, 0x83
jne 0x1400134bb
mov cl, byte [rdx + rax + 1]
and cl, 0xf8
cmp cl, 0x60
jne 0x1400134bb
mov ecx, dword [rsp + 0x98]
lea ebp, [rcx + 5]
cmp ecx, dword [rsp + 0xa0]
jne 0x140015111
mov dword [rsp + 0xa0], ebp
cmp qword [rsp + 0x78], 0
je 0x140015136
cmp ebp, dword [rsp + 0xa8]
ja 0x140014992
add rdx, rax
mov rax, qword [rsp + 0x88]
jmp 0x140014c29
mov dword [rsp + 0x98], ebp
jmp 0x140014c45
cmp cl, 4
jne 0x1400134bb
cmp bpl, 5
jne 0x140014e2c
lea eax, [r9 + 2]
mov dword [rsp + 0x118], eax
lea rcx, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r9d, 6
mov dword [rsp + 0x118], r9d
mov rdx, qword [rax + rcx + 4]
lea rcx, [rsp + 0x78]
jmp 0x1400145e3
cmp ecx, 2
ja 0x1400134bb
jmp 0x14001388d
lea rcx, [rsp + 0xf0]
call fcn.140038a60
test al, al
je 0x1400134bb
mov r9d, dword [rsp + 0x118]
mov r13b, 1
cmp r9d, 9
ja 0x140012d2b
jmp 0x1400134bb
mov byte [rsp + 0xac], 0
cmp r10d, ebp
jae 0x14001536b
mov rcx, qword [rsp + 0x88]
mov edx, r10d
mov byte [rcx + rdx], 0x8b
mov r10d, dword [rsp + 0x98]
inc r10d
mov dword [rsp + 0x98], r10d
cmp qword [rsp + 0x78], 0
je 0x140014f4a
mov ebp, dword [rsp + 0xa8]
jmp 0x140015373
mov byte [rsp + 0xac], 0
lea ecx, [r10 + 8]
cmp ecx, eax
ja 0x140014c0f
mov rax, qword [rsp + 0x88]
mov ecx, r10d
mov qword [rax + rcx], rdx
jmp 0x140014ec6
inc eax
inc eax
mov dword [rsp + 0x98], eax
xor ecx, ecx
mov edx, dword [rsp + 0x118]
mov rdi, qword [rsp + 0x110]
movsxd rsi, dword [rdi + rdx]
lea ebp, [rdx + 4]
mov dword [rsp + 0x118], ebp
test rcx, rcx
je 0x1400152a3
mov ecx, dword [rsp + 0xa8]
cmp eax, ecx
jae 0x1400153d4
mov rcx, qword [rsp + 0x88]
mov eax, eax
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
cmp qword [rsp + 0x78], 0
je 0x1400152a5
mov ecx, dword [rsp + 0xa8]
jmp 0x1400153dc
inc eax
inc eax
add eax, 8
inc eax
inc eax
inc eax
mov dword [rsp + 0x98], eax
mov rbp, qword [rsp + 0x110]
mov edx, dword [rsp + 0x118]
lea ecx, [rax + 1]
cmp eax, dword [rsp + 0xa0]
jne 0x1400152d9
mov dword [rsp + 0xa0], ecx
cmp qword [rsp + 0x78], 0
je 0x140015340
cmp ecx, dword [rsp + 0xa8]
jbe 0x14001541a
mov byte [rsp + 0xac], 0
inc edx
mov dword [rsp + 0x118], edx
mov ecx, dword [rsp + 0xa8]
cmp eax, ecx
jae 0x14001556c
mov rcx, qword [rsp + 0x88]
mov eax, eax
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
cmp qword [rsp + 0x78], 0
je 0x14001534d
mov ecx, dword [rsp + 0xa8]
jmp 0x140015574
inc edx
mov dword [rsp + 0x118], edx
inc ecx
mov eax, ecx
inc eax
mov dword [rsp + 0x98], eax
jmp 0x14001271d
mov dword [rsp + 0x98], ebp
add r9d, 3
jmp 0x140013d84
mov byte [rsp + 0xac], 0
cmp r10d, ebp
jae 0x140014c0f
movzx eax, al
lea eax, [rax + rax*8]
mov rcx, qword [rsp + 0x88]
mov edx, r10d
mov byte [rcx + rdx], al
inc dword [rsp + 0x98]
jmp 0x14001271d
mov byte [rsp + 0xac], 0
cmp eax, edx
jae 0x14001558f
mov rcx, qword [rsp + 0x88]
mov eax, eax
mov byte [rcx + rax], 0x53
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
mov rcx, qword [rsp + 0x78]
jmp 0x140015240
mov byte [rsp + 0xac], 0
cmp eax, ecx
jae 0x14001559c
mov rcx, qword [rsp + 0x88]
mov eax, eax
mov byte [rcx + rax], 0xbb
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
cmp qword [rsp + 0x78], 0
je 0x1400152a7
mov ecx, dword [rsp + 0xa8]
jmp 0x1400155a4
mov rcx, qword [rsp + 0x88]
mov eax, eax
mov dl, byte [rbp + rdx]
mov byte [rcx + rax], dl
mov ecx, dword [rsp + 0x98]
inc ecx
inc dword [rsp + 0x118]
mov dword [rsp + 0x98], ecx
cmp qword [rsp + 0x78], 0
mov eax, ecx
jne 0x1400152ff
jmp 0x140015349
add rdx, rax
mov rax, qword [rsp + 0x88]
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x98], 3
mov r9d, dword [rsp + 0x118]
jmp 0x140015362
mov dword [rsp + 0x98], eax
add edx, esi
mov dword [rsp + 0x118], edx
mov r14b, 1
jmp 0x14001271d
mov rbp, qword [rsp + 0x108]
lea rcx, [rsp + 0x150]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.140038ab0
test eax, eax
jns 0x1400149cb
jmp 0x1400134bb
xor r14d, r14d
cmp cl, 0xe9
sete r14b
lea rcx, [rax + 1]
mov dword [rsp + 0x118], ecx
mov r8d, 4
sub r8d, r14d
lea rcx, [rdx + rax]
inc rcx
movsxd rax, dword [rdx + rax + 1]
lea rdx, [rax + rcx]
add rdx, 4
add r9d, 5
mov dword [rsp + 0x118], r9d
lea rcx, [rsp + 0x78]
jmp 0x140014227
lea rdi, [rsp + 0x120]
mov byte [rdi], 0
mov rbp, qword [rsp + 0x108]
lea rcx, [rsp + 0x150]
mov qword [rcx], rbp
lea rax, [rax + rdx + 1]
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
mov rdx, rdi
call fcn.140038ab0
test eax, eax
js 0x1400134bb
cmp byte [rsp + 0x120], 0
je 0x140014db1
jmp 0x1400134bb
mov byte [rsp + 0xac], 0
cmp eax, ecx
jae 0x140014c0f
mov rcx, qword [rsp + 0x88]
mov eax, eax
mov byte [rcx + rax], 0x5b
jmp 0x140015390
mov byte [rsp + 0xac], 0
jmp 0x140015240
mov byte [rsp + 0xac], 0
lea ebp, [rax + 8]
cmp ebp, ecx
jbe 0x14001561c
mov byte [rsp + 0xac], 0
cmp eax, ecx
jae 0x1400156b2
mov rcx, qword [rsp + 0x88]
mov eax, eax
mov byte [rcx + rax], 0x41
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
cmp qword [rsp + 0x78], 0
je 0x1400152ac
mov ecx, dword [rsp + 0xa8]
jmp 0x1400156ba
add rdx, qword [rsp + 0x110]
mov r8d, esi
add rcx, qword [rsp + 0x88]
call sub.VCRUNTIME140.dll_memcpy
add dword [rsp + 0x98], esi
mov edx, dword [rsp + 0x118]
jmp 0x14001548a
add rdi, rdx
lea rcx, [rsi + rdi]
add rcx, 4
mov rdx, qword [rsp + 0x88]
mov eax, eax
mov qword [rdx + rax], rcx
mov eax, dword [rsp + 0x98]
add eax, 8
mov dword [rsp + 0x98], eax
cmp qword [rsp + 0x78], 0
je 0x1400152aa
mov ecx, dword [rsp + 0xa8]
jmp 0x1400155b3
add dl, 2
lea rcx, [rsp + 0x150]
call fcn.1400389a0
mov rcx, rdi
test al, al
mov r15, rbp
mov rbx, r12
je 0x140011fc4
lea rcx, [rsp + 0x108]
mov qword [rcx], rbx
mov qword [rcx + 8], r14
mov dword [rcx + 0x10], 0
lea rdx, [rsp + 0xb0]
call fcn.14001c040
mov rcx, rdi
test al, al
je 0x140011fc4
jmp 0x140011fed
mov byte [rsp + 0xac], 0
cmp eax, ecx
jae 0x1400156f1
mov rcx, qword [rsp + 0x88]
mov eax, eax
mov byte [rcx + rax], 0x80
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
cmp qword [rsp + 0x78], 0
je 0x1400152ae
mov ecx, dword [rsp + 0xa8]
jmp 0x1400156f9
mov byte [rsp + 0xac], 0
cmp eax, ecx
jae 0x140015717
mov rcx, qword [rsp + 0x88]
mov eax, eax
mov byte [rcx + rax], 0x3b
mov eax, dword [rsp + 0x98]
jmp 0x1400152ae
mov byte [rsp + 0xac], 0
jmp 0x1400152b7
mov rcx, rdi
jmp 0x140014ade
mov dword [rsp + 0x98], ebp
jmp 0x140014f79
mov byte [rsp + 0x1a8], 0
mov rax, qword [rsp + 0x178]
jmp 0x1400132a3
mov byte [rsp + 0x1a8], 0
mov rax, qword [rsp + 0x178]
jmp 0x1400132d7
mov byte [rsp + 0x1a8], 0
mov rax, qword [rsp + 0x178]
jmp 0x140013316
mov byte [rsp + 0x1a8], 0
mov rax, qword [rsp + 0x178]
jmp 0x14001334a
mov byte [rsp + 0x1a8], 0
mov rax, qword [rsp + 0x178]
jmp 0x14001337e
mov byte [rsp + 0x1a8], 0
jmp 0x1400133a7
mov dword [rsp + 0x98], edx
jmp 0x1400134ca
mov byte [rsp + 0xac], 0
jmp 0x1400134ca