Function at 0x140004150
Capabilities:
Check for software breakpoints
Get system information on windows
Parse credit card information

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1e8
mov qword [rsp + 0x48], r9
mov rax, qword [0x140062030]
xor rax, rsp
mov qword [rsp + 0x1e0], rax
cmp byte [rcx + 0x1c], 0
je 0x140005b3a
mov rsi, r8
mov r14, rdx
mov rbx, rcx
mov r15d, dword [rcx + 0x18]
test r15b, 4
jne 0x140005fed
mov rcx, r14
mov r15, rcx
movzx eax, byte [rcx]
cmp eax, 0x48
jne 0x140005791
cmp byte [r15 + 1], 0xff
mov rcx, r15
je 0x14000576c
cmp r15, rcx
jne 0x14000419e
cmp r15, r14
jne 0x140006018
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], r14
mov dword [rsp + 0x108], 0
cmp byte [rbx + 0x1c], 0
je 0x140005b3a
mov r15d, dword [rbx + 0x18]
mov qword [rsp + 0x40], rbx
and r15d, 1
shl r15d, 0x1e
mov eax, dword [0x140064b04]
mov ecx, dword [0x1400624b8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004e97
mov ebp, dword [0x140064b00]
lea rcx, [rsp + 0xa0]
mov edx, ebp
mov r8, r15
mov r9d, r15d
call fcn.140007ac0
mov eax, dword [0x140064b18]
mov ecx, dword [0x1400624b8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004e05
lea rcx, [0x140064b20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r12b, byte [rsp + 0xb0]
test r12b, r12b
jne 0x140004be4
xor edi, edi
xor ebx, ebx
mov r14, qword [0x140064af8]
test r14, r14
jne 0x1400042b5
mov ecx, 0x18
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov qword [rax], 0x18
mov qword [0x140064af8], rax
test r12b, r12b
mov qword [rsp + 0x58], rsi
jne 0x140004c09
cmp qword [r14 + 8], 0
jne 0x140004330
mov ecx, 0x20
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov dword [rax + 0x18], 0
mov rax, qword [r14 + 8]
cmp rax, qword [r14 + 0x10]
jne 0x1400042fc
mov rcx, r14
call fcn.140007e20
mov rax, qword [r14 + 8]
mov rcx, qword [r14]
lea rax, [rax + rax*2]
mov qword [rcx + rax*8], rdi
mov qword [rcx + rax*8 + 8], rbx
mov qword [rcx + rax*8 + 0x10], r15
inc qword [r14 + 8]
mov r14, qword [0x140064af8]
test r14, r14
je 0x14000600d
cmp qword [r14 + 8], 0
je 0x14000600d
mov rbx, qword [r14]
add rbx, 0x10
mov r14, qword [rbx]
test r14, r14
je 0x1400066ac
test ebp, ebp
je 0x1400066ac
cmp qword [r14 + 8], 0
jne 0x140005763
mov eax, dword [0x140064b04]
mov ecx, dword [0x1400624b8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004edc
mov esi, dword [0x140064b00]
mov eax, ebp
xor edx, edx
div esi
sub esi, edx
test edx, edx
cmove esi, edx
add esi, ebp
lea rdi, [r14 + 0x10]
mov dword [r14 + 0x10], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
test r12b, r12b
jne 0x140004ced
mov edx, esi
xor ecx, ecx
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x14000669e
mov qword [r14 + 8], rax
cmp dword [rdi], 0
je 0x1400066ac
mov rsi, qword [rsp + 0x40]
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], r14
mov byte [rsp + 0xf0], 1
lea rcx, [0x140064b20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x140064b18]
mov ecx, dword [0x1400624b8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004e4e
lea r15, [0x140064b20]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea r12, [rsp + 0xa0]
mov rcx, r14
mov rdx, r12
call fcn.140008000
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [r12 + 0x38], 0
je 0x1400066d0
mov r9, qword [rsp + 0xa0]
mov qword [rsp + 0x68], r9
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x70], eax
mov r8, qword [rsp + 0xb0]
mov qword [rsp + 0x78], r8
mov rdx, qword [rsp + 0xb8]
mov qword [rsp + 0x80], rdx
movups xmm0, xmmword [rsp + 0xc0]
movups xmmword [rsp + 0x88], xmm0
mov ecx, dword [rsp + 0xd0]
mov dword [rsp + 0x98], ecx
mov cl, byte [rsp + 0xd4]
mov byte [rsp + 0x9c], cl
mov dword [rsp + 0xa8], 0
mov byte [rsp + 0xd4], 0
mov r10, qword [rsp + 0x48]
mov qword [r10], 0
test r9, r9
je 0x140004501
test r8, r8
je 0x1400056c3
test rdx, rdx
je 0x1400056c3
test eax, eax
je 0x1400056c3
test cl, cl
je 0x1400056c3
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsp + 0x88]
lea edx, [rcx + 8]
cmp qword [rsp + 0x68], 0
je 0x14000602b
cmp edx, dword [rsp + 0x98]
ja 0x14000604e
mov rdx, qword [rsp + 0x78]
mov qword [rdx + rcx], rax
add dword [rsp + 0x88], 8
cmp qword [rsp + 0x68], 0
je 0x14000457b
mov al, byte [rsp + 0x9c]
cmp qword [rsp + 0x78], 0
je 0x1400056c3
cmp qword [rsp + 0x80], 0
je 0x1400056c3
cmp dword [rsp + 0x70], 0
je 0x1400056c3
test al, al
je 0x1400056c3
mov ecx, dword [rsp + 0x108]
add rcx, qword [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov edx, dword [rsp + 0x88]
lea ecx, [rdx + 8]
cmp qword [rsp + 0x68], 0
je 0x14000605d
cmp ecx, dword [rsp + 0x98]
ja 0x140006069
mov rcx, qword [rsp + 0x78]
mov qword [rcx + rdx], rax
mov ecx, dword [rsp + 0x88]
add ecx, 8
mov dword [rsp + 0x88], ecx
cmp qword [rsp + 0x68], 0
je 0x14000460a
mov al, byte [rsp + 0x9c]
cmp qword [rsp + 0x78], 0
je 0x1400056b4
cmp qword [rsp + 0x80], 0
je 0x1400056b4
cmp dword [rsp + 0x70], 0
je 0x1400056b4
test al, al
je 0x1400056b4
mov eax, dword [rsp + 0x108]
mov rdx, qword [rsp + 0x100]
cmp byte [rdx + rax], 0x48
jne 0x14000462a
cmp byte [rdx + rax + 1], 0xb8
je 0x140006320
mov dword [rsp + 0x8c], ecx
mov dword [rsp + 0x90], ecx
cmp byte [rsi + 0x1c], 0
je 0x140005b3a
mov eax, dword [rsi + 0x18]
and eax, 2
mov ebp, eax
shr ebp, 1
xor ecx, ecx
test eax, eax
sete cl
lea r13d, [rcx + rcx*2]
add r13d, 0xa
mov r15d, dword [rsp + 0x108]
cmp r15d, r13d
jae 0x140004f21
mov eax, r13d
mov qword [rsp + 0x40], rax
xor ebx, ebx
mov r14, qword [rsp + 0x100]
mov eax, r15d
mov r15, rax
test bl, 1
jne 0x1400059d3
movzx ecx, byte [r14 + rax]
cmp rcx, 0xf
je 0x140005a32
mov edx, ecx
and dl, 0xfc
cmp dl, 0x88
je 0x140005a74
lea edx, [rcx - 0x40]
cmp edx, 2
jb 0x1400049d3
cmp ecx, 0x44
je 0x140005ab6
cmp ecx, 0x45
je 0x140005af8
mov edx, ecx
and dl, 0xfa
cmp dl, 0x48
je 0x140004784
cmp cl, 0x66
je 0x140005b45
mov edx, ecx
and dl, 0xf0
cmp dl, 0x50
je 0x140004812
cmp cl, 0x90
je 0x140004812
cmp ecx, 0x80
je 0x140005e95
cmp ecx, 0x65
je 0x140005f02
mov edx, ecx
and dl, 0xf8
cmp dl, 0xb8
je 0x140006f28
cmp ecx, 0xd0
jle 0x140004932
lea edx, [rcx - 0xe8]
cmp edx, 2
jae 0x140004b96
xor ebx, ebx
cmp cl, 0xe9
sete bl
lea rcx, [rax + 1]
mov dword [rsp + 0x108], ecx
mov r8d, 4
sub r8d, ebx
lea rcx, [r14 + rax]
inc rcx
movsxd rdx, dword [r14 + rax + 1]
add rdx, rcx
add rdx, 4
add eax, 5
mov dword [rsp + 0x108], eax
lea rcx, [rsp + 0x68]
call fcn.140008240
test al, al
jne 0x14000491c
jmp 0x1400056b4
mov ecx, dword [rsp + 0x88]
lea edi, [rcx + 1]
cmp ecx, dword [rsp + 0x90]
jne 0x14000479e
mov dword [rsp + 0x90], edi
cmp qword [rsp + 0x68], 0
je 0x140005b87
cmp edi, dword [rsp + 0x98]
ja 0x140005b93
mov rdx, qword [rsp + 0x78]
mov al, byte [r14 + rax]
mov byte [rdx + rcx], al
mov edi, dword [rsp + 0x88]
inc edi
mov dword [rsp + 0x88], edi
mov r15d, dword [rsp + 0x108]
mov r14, qword [rsp + 0x100]
lea r12d, [r15 + 1]
mov dword [rsp + 0x108], r12d
movzx eax, byte [r14 + r12]
cmp eax, 0x82
jle 0x140004870
cmp eax, 0x83
je 0x140004a8f
cmp eax, 0x85
jne 0x140004884
jmp 0x140006659
mov ecx, dword [rsp + 0x88]
lea edx, [rcx + 1]
cmp ecx, dword [rsp + 0x90]
jne 0x14000482c
mov dword [rsp + 0x90], edx
cmp qword [rsp + 0x68], 0
je 0x140005fe1
cmp edx, dword [rsp + 0x98]
ja 0x140005da2
mov rdx, qword [rsp + 0x78]
mov al, byte [r14 + rax]
mov byte [rdx + rcx], al
inc dword [rsp + 0x88]
mov r15d, dword [rsp + 0x108]
inc r15d
mov dword [rsp + 0x108], r15d
jmp 0x14000491c
cmp eax, 0x81
je 0x140004b02
cmp eax, 0x2b
je 0x140006659
mov ecx, eax
and cl, 0xfd
cmp cl, 0x89
jne case.default.0x1400048ba
lea ecx, [r15 + 2]
movzx edx, byte [r14 + rcx]
mov eax, 2
mov esi, 1
mov r8, rdx
shr r8, 6
lea r9, [0x140007a50]
lea ecx, [0x140007a50]
lea ecx, [0x140007a50]
movsxd r8, dword [r9 + r8*4]
add r8, r9
jmp r8
lea eax, [rdi + rsi]
inc eax
cmp edi, dword [rsp + 0x90]
jne 0x1400048d2
mov dword [rsp + 0x90], eax
inc esi
cmp qword [rsp + 0x68], 0
je 0x140005fc8
cmp eax, dword [rsp + 0x98]
ja 0x140005fd4
add r14, r12
mov r8d, esi
mov ecx, edi
add rcx, qword [rsp + 0x78]
mov rdx, r14
call sub.ntdll.dll_memcpy
add dword [rsp + 0x88], esi
mov r12d, dword [rsp + 0x108]
add r12d, esi
mov dword [rsp + 0x108], r12d
mov r15d, dword [rsp + 0x108]
cmp r15d, r13d
jb 0x140004676
jmp 0x140004f23
cmp ecx, 0x84
jle 0x140005857
cmp ecx, 0x85
jne case.default.0x14000496f
movzx ecx, byte [rax + r14 + 1]
mov edx, 2
mov esi, 1
mov r8, rcx
shr r8, 6
lea r9, [0x140007a40]
movsxd r8, dword [r9 + r8*4]
add r8, r9
jmp r8
mov ecx, dword [rsp + 0x88]
lea edx, [rcx + rsi]
inc edx
cmp ecx, dword [rsp + 0x90]
jne 0x14000498e
mov dword [rsp + 0x90], edx
inc esi
cmp qword [rsp + 0x68], 0
je 0x140006899
cmp edx, dword [rsp + 0x98]
ja 0x14000725f
add r14, rax
mov r8d, esi
add rcx, qword [rsp + 0x78]
mov rdx, r14
call sub.ntdll.dll_memcpy
add dword [rsp + 0x88], esi
mov r15d, dword [rsp + 0x108]
add r15d, esi
jmp 0x140004863
mov edx, dword [rsp + 0x88]
lea ecx, [rdx + 1]
cmp edx, dword [rsp + 0x90]
jne 0x1400049ed
mov dword [rsp + 0x90], ecx
cmp qword [rsp + 0x68], 0
je 0x140006546
cmp ecx, dword [rsp + 0x98]
ja 0x140006552
mov rcx, qword [rsp + 0x78]
mov al, byte [r14 + rax]
mov byte [rcx + rdx], al
mov ecx, dword [rsp + 0x88]
inc ecx
mov dword [rsp + 0x88], ecx
mov r15d, dword [rsp + 0x108]
mov r14, qword [rsp + 0x100]
inc r15d
mov dword [rsp + 0x108], r15d
movzx eax, byte [r14 + r15]
mov edx, eax
and dl, 0xf0
cmp dl, 0x50
jne 0x140006561
lea eax, [rcx + 1]
cmp ecx, dword [rsp + 0x90]
jne 0x140004a63
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x1400065aa
cmp eax, dword [rsp + 0x98]
ja 0x140005da2
mov rax, qword [rsp + 0x78]
mov ecx, ecx
mov dl, byte [r14 + r15]
mov byte [rax + rcx], dl
jmp 0x140004851
movzx eax, byte [r14 + r12 + 1]
and eax, 0xfffffff8
cmp eax, 0xe8
jne 0x1400066e3
lea eax, [rdi + 3]
cmp edi, dword [rsp + 0x90]
jne 0x140004ab6
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x1400066d7
cmp eax, dword [rsp + 0x98]
ja 0x140006725
add r14, r12
mov rax, qword [rsp + 0x78]
mov ecx, edi
mov dl, byte [r14 + 2]
mov byte [rax + rcx + 2], dl
movzx edx, word [r14]
mov word [rax + rcx], dx
add dword [rsp + 0x88], 3
mov r12d, dword [rsp + 0x108]
add r12d, 3
jmp 0x140004914
mov al, byte [r14 + r12 + 1]
and al, 0xf8
cmp al, 0xe8
jne 0x1400056b4
lea eax, [rdi + 6]
cmp edi, dword [rsp + 0x90]
jne 0x140004b24
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x140006866
cmp eax, dword [rsp + 0x98]
ja 0x140006872
add r14, r12
mov rax, qword [rsp + 0x78]
mov ecx, edi
movzx edx, word [r14 + 4]
mov word [rax + rcx + 4], dx
mov edx, dword [r14]
mov dword [rax + rcx], edx
add dword [rsp + 0x88], 6
mov r12d, dword [rsp + 0x108]
mov esp, dword [rsp + 0x108]
mov esp, dword [rsp + 0x108]
add r12d, 6
jmp 0x140004914
and dl, 7
xor esi, esi
cmp dl, 4
sete sil
add esi, eax
jmp case.0x1400048ba.3
and cl, 7
xor esi, esi
cmp cl, 4
sete sil
add esi, edx
jmp case.0x14000496f.3
cmp ecx, 0xd1
je 0x1400071a2
cmp ecx, 0xf6
je 0x1400071f4
lea edx, [rcx - 0x73]
cmp dl, 2
ja 0x140006ef6
lea rdx, [0x140055b88]
mov r8d, dword [rdx + rcx*4 - 0x1cc]
movzx ecx, byte [r14 + rax + 1]
lea edx, [rax + 2]
mov dword [rsp + 0x108], edx
add rdx, r14
add rdx, rcx
jmp 0x14000476d
mov rax, qword [rsp + 0xa0]
test rax, rax
je 0x140006446
mov rdi, qword [rsp + 0xa8]
lea rbx, [rax + rdi]
dec rbx
jmp 0x140004286
mov qword [rsp + 0x50], rbx
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
mov rbx, rax
test rcx, rcx
jle 0x140004c54
mov r8, rcx
mov rbx, rax
mov rdx, rcx
mov r10, qword [rsp + 0x50]
shr rdx, 1
lea r9, [rdx + rdx*2]
lea r9, [rbx + r9*8]
cmp qword [r9], rdi
jae 0x1400068a5
add r9, 0x18
not rdx
add rdx, r8
mov rbx, r9
mov r8, rdx
test rdx, rdx
jg 0x140004c2b
lea rcx, [rcx + rcx*2]
lea rax, [rax + rcx*8]
cmp rbx, rax
jne 0x1400068ba
mov ecx, 0x20
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov dword [rax + 0x18], 0
mov rax, qword [r14]
mov r13, qword [r14 + 8]
sub rbx, rax
sar rbx, 3
movabs rsi, 0xaaaaaaaaaaaaaaab
imul rsi, rbx
cmp rsi, r13
jne 0x1400068d7
mov rcx, rsi
cmp rsi, qword [r14 + 0x10]
mov rbx, qword [rsp + 0x50]
jne 0x140004cc3
mov rcx, r14
call fcn.140007e20
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
lea rcx, [rcx + rcx*2]
mov qword [rax + rcx*8], rdi
mov qword [rax + rcx*8 + 8], rbx
mov qword [rax + rcx*8 + 0x10], r15
inc qword [r14 + 8]
mov rax, qword [r14]
lea rcx, [rsi + rsi*2]
lea rbx, [rax + rcx*8]
add rbx, 0x10
jmp 0x140004337
mov r12, qword [rsp + 0xa0]
test r12, r12
je 0x140006446
mov r15, rax
mov r13, qword [rsp + 0xa8]
mov eax, dword [0x140064b58]
mov ecx, dword [0x1400624b8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x140004d8f
lea rcx, [0x140064b58]
call fcn.14002b4a4
cmp dword [0x140064b58], 0xffffffff
jne 0x140004d8f
lea rcx, str.kernelbase.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x140064b48], rax
mov qword [0x140064b50], 0
test rax, rax
je 0x140004d83
lea rdx, str.VirtualAlloc2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140064b50], rax
test rax, rax
je 0x140006b9d
lea rcx, [0x140064b58]
call fcn.14002b444
mov rax, qword [0x140064b50]
test rax, rax
je 0x1400069b6
lea rcx, [r12 + r13]
dec rcx
lea rdx, [rsp + 0x140]
mov qword [rdx], r13
mov qword [rdx + 8], rcx
mov qword [rdx + 0x10], 0
lea rcx, [rsp + 0x68]
mov qword [rcx], 1
mov qword [rcx + 8], rdx
mov r8d, esi
mov edx, 1
mov dword [rsp + 0x30], edx
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edx
mov rcx, r15
xor edx, edx
mov r9d, 0x2000
call qword [0x140068010]
mov qword [r14 + 8], rax
test rax, rax
jne 0x1400043ca
jmp 0x1400066ac
lea rcx, [0x140064b18]
call fcn.14002b4a4
cmp dword [0x140064b18], 0xffffffff
jne 0x140004264
lea rcx, [0x140064b20]
mov edx, 0xfa0
mov r8d, 0x1000000
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
mov byte [0x140064b14], 1
lea rcx, [0x140064b18]
call fcn.14002b444
jmp 0x140004264
lea rcx, [0x140064b18]
call fcn.14002b4a4
cmp dword [0x140064b18], 0xffffffff
jne 0x140004422
lea rcx, [0x140064b20]
mov edx, 0xfa0
mov r8d, 0x1000000
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
mov byte [0x140064b14], 1
lea rcx, [0x140064b18]
call fcn.14002b444
jmp 0x140004422
lea rcx, [0x140064b04]
call fcn.14002b4a4
cmp dword [0x140064b04], 0xffffffff
jne 0x140004224
lea r14, [rsp + 0x140]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [r14 + 0x28]
mov dword [0x140064b00], eax
lea rcx, [0x140064b04]
call fcn.14002b444
jmp 0x140004224
lea rcx, [0x140064b04]
call fcn.14002b4a4
cmp dword [0x140064b04], 0xffffffff
jne 0x14000437b
lea r15, [rsp + 0x140]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [r15 + 0x28]
mov dword [0x140064b00], eax
lea rcx, [0x140064b04]
call fcn.14002b444
jmp 0x14000437b
xor ebx, ebx
cmp r15d, 0x64
ja 0x1400056b4
test bl, 1
jne 0x140005060
cmp qword [rsp + 0x68], 0
mov eax, dword [rsp + 0x88]
je 0x1400060c6
mov ecx, r15d
add rcx, qword [rsp + 0x100]
mov edx, dword [rsp + 0x98]
cmp eax, edx
jae 0x1400060dc
mov rdx, qword [rsp + 0x78]
mov byte [rdx + rax], 0xff
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
cmp qword [rsp + 0x68], 0
je 0x1400060c8
mov edx, dword [rsp + 0x98]
cmp eax, edx
jae 0x140006122
mov rdx, qword [rsp + 0x78]
mov eax, eax
mov byte [rdx + rax], 0x25
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
cmp qword [rsp + 0x68], 0
je 0x1400060ca
mov edx, dword [rsp + 0x98]
lea r8d, [rax + 4]
cmp r8d, edx
ja 0x14000612f
mov rdx, qword [rsp + 0x78]
mov eax, eax
mov dword [rdx + rax], 0
mov eax, dword [rsp + 0x88]
add eax, 4
mov dword [rsp + 0x88], eax
cmp qword [rsp + 0x68], 0
je 0x1400060cd
mov edx, dword [rsp + 0x98]
lea r8d, [rax + 8]
cmp r8d, edx
ja 0x14000613c
mov rdx, qword [rsp + 0x78]
mov eax, eax
mov qword [rdx + rax], rcx
add dword [rsp + 0x88], 8
cmp qword [rsp + 0x68], 0
je 0x140005060
cmp qword [rsp + 0x78], 0
je 0x1400056b4
cmp qword [rsp + 0x80], 0
je 0x1400056b4
cmp dword [rsp + 0x70], 0
je 0x1400056b4
cmp byte [rsp + 0x9c], 0
je 0x1400056b4
cmp byte [rsp + 0x9c], 0
je 0x1400056b4
cmp qword [rsp + 0x68], 0
je 0x1400056b4
mov eax, dword [rsp + 0x88]
mov ebx, dword [rsp + 0x8c]
mov dword [rsp + 0x94], eax
add rbx, qword [rsp + 0x80]
je 0x1400056b4
mov edi, dword [rsp + 0x108]
mov r15, qword [rsp + 0x100]
lea rdx, [rsp + 0x140]
mov qword [rdx], 0
mov rcx, r15
xor r8d, r8d
call qword [sym.imp.ntdll.dll_RtlLookupFunctionEntry]
test rax, rax
je 0x1400053de
mov rcx, qword [rsp + 0x140]
mov esi, dword [rax]
add esi, ecx
mov eax, dword [rax + 8]
lea r12, [rcx + rax]
movzx eax, byte [rcx + rax + 2]
lea r13, [rax + rax]
add r13, 4
mov rcx, r13
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov r14, rax
mov rcx, rax
mov rdx, r12
mov r8, r13
call sub.ntdll.dll_memcpy
cmp r15d, esi
jne 0x1400053d5
movzx eax, byte [r14 + 2]
test eax, eax
je case.default.0x140005149
movzx edx, byte [r14 + 5]
mov r8d, edx
and r8d, 0xf
cmp r8d, 0xa
ja case.default.0x140005149
mov r9b, 1
mov cl, 3
lea r10, [0x140007a60]
lea edx, [0x140007a60]
lea edx, [0x140007a60]
movsxd r8, dword [r10 + r8*4]
add r8, r10
jmp r8
mov ecx, dword [rsp + 0x90]
mov r8b, byte [r14 + 1]
cmp ecx, edi
jae 0x140005167
movzx edx, r8b
cmp ecx, edx
jb 0x1400053d5
lea rcx, [r14 + 1]
xor edx, edx
lea r10, [0x140007a8c]
add dword [rcx], esi
ror byte [rbp + rcx*4 + 0x15], cl
sbb byte [rcx], ch
add byte [rax], al
movzx r11d, dl
movzx r11d, byte [r14 + r11*2 + 4]
mov dh, 0x5c
pop rsi
add al, 0x44
cmp edi, ebx
mov dh, 0x5c
pop rsi
add al, 0x44
cmp edi, ebx
jae 0x1400051d2
add dl, r9b
cmp dl, al
jae case.default.0x1400051b3
movzx r11d, dl
movzx r15d, byte [r14 + r11*2 + 5]
mov r12d, r15d
and r12d, 0xf
cmp r12d, 0xa
ja case.default.0x1400051b3
mov sil, 3
movsxd r12, dword [r10 + r12*4]
add r12, r10
jmp r12
mov r15d, eax
sub r15d, r11d
movzx r11d, sil
movzx r9d, r9b
cmp r15d, r11d
cmovge r9d, r11d
jge 0x140005174
jmp case.default.0x1400051b3
sub al, dl
mov r10b, byte [r14]
test r10b, 0x20
jne 0x1400053d5
mov r12d, dword [rsp + 0x88]
mov r9d, dword [rsp + 0x98]
add r12d, 3
and r12d, 0xfffffffc
cmp r12d, r9d
ja 0x1400059c6
mov dword [rsp + 0x88], r12d
cmp byte [rsp + 0x9c], 0
je 0x1400053d5
and r10b, 0xc7
mov byte [r14], r10b
mov byte [r14 + 2], al
movzx r8d, r8b
cmp edi, r8d
jae 0x14000522f
mov byte [rcx], dil
cmp qword [rsp + 0x68], 0
je 0x1400062b4
lea rcx, [r12 + 4]
cmp rcx, r9
ja 0x1400059c6
mov rcx, qword [rsp + 0x78]
mov r8d, dword [r14]
mov dword [rcx + r12], r8d
mov ecx, dword [rsp + 0x88]
add ecx, 4
cmp byte [rsp + 0x9c], 0
mov dword [rsp + 0x88], ecx
je 0x1400053d5
movzx r15d, al
add r15, r15
cmp qword [rsp + 0x68], 0
je 0x1400062c0
mov ecx, ecx
lea rax, [r15 + rcx]
mov r8d, dword [rsp + 0x98]
cmp rax, r8
ja 0x1400059c6
movzx eax, dl
lea rdx, [r14 + rax*2]
add rdx, 4
add rcx, qword [rsp + 0x78]
mov r8, r15
call sub.ntdll.dll_memcpy
add r15d, dword [rsp + 0x88]
cmp byte [rsp + 0x9c], 0
mov dword [rsp + 0x88], r15d
je 0x1400053d5
add r15d, 3
and r15d, 0xfffffffc
mov ecx, dword [rsp + 0x98]
cmp r15d, ecx
ja 0x1400059c6
mov dword [rsp + 0x88], r15d
lea eax, [r15 + 4]
cmp qword [rsp + 0x68], 0
je 0x140005ba2
cmp eax, ecx
ja 0x1400059c6
mov eax, dword [rsp + 0x8c]
mov rcx, qword [rsp + 0x78]
mov dword [rcx + r15], eax
mov ecx, dword [rsp + 0x88]
lea eax, [rcx + 4]
cmp byte [rsp + 0x9c], 0
mov dword [rsp + 0x88], eax
je 0x1400053d5
cmp qword [rsp + 0x68], 0
je 0x140005ba2
add ecx, 8
cmp ecx, dword [rsp + 0x98]
ja 0x1400059c6
mov ecx, dword [rsp + 0x94]
mov rdx, qword [rsp + 0x78]
mov eax, eax
mov dword [rdx + rax], ecx
mov ecx, dword [rsp + 0x88]
lea eax, [rcx + 4]
cmp byte [rsp + 0x9c], 0
mov dword [rsp + 0x88], eax
je 0x1400053d5
cmp qword [rsp + 0x68], 0
je 0x140005bac
add ecx, 8
cmp ecx, dword [rsp + 0x98]
ja 0x1400059c6
mov rcx, qword [rsp + 0x78]
mov eax, eax
mov dword [rcx + rax], r12d
add dword [rsp + 0x88], 4
cmp byte [rsp + 0x9c], 0
je 0x1400053d5
mov r8, qword [rsp + 0x80]
add r15, r8
mov rcx, r15
mov edx, 1
call qword [sym.imp.ntdll.dll_RtlAddFunctionTable]
mov rcx, r14
call qword [sym.imp.mozglue.dll_free]
mov r9d, dword [rsp + 0x108]
test r9, r9
je 0x140006149
mov rdx, qword [rsp + 0xf8]
mov r8, qword [rsp + 0x100]
lea r15, [rsp + 0x178]
mov qword [r15 - 0x38], rdx
mov qword [r15 - 0x30], r8
mov qword [r15 - 0x28], r9
xor esi, esi
mov qword [r15 - 0x20], rsi
mov qword [r15 - 0x10], rsi
mov qword [r15 - 8], 0x20
mov qword [r15 - 0x18], r15
mov byte [r15 + 0x20], 1
lea r14, [rsp + 0x1a0]
mov rcx, r14
call fcn.140007c90
cmp qword [r14 + 0x10], rsi
je 0x140005613
cmp byte [rsp + 0x198], 0
je 0x140005613
test bpl, bpl
jne 0x14000616d
lea r14, [rsp + 0x160]
mov rax, qword [r14 + 8]
cmp rax, qword [r14 + 0x10]
je 0x1400061a2
mov rcx, qword [rsp + 0x160]
mov byte [rcx + rax], 0x49
mov rax, qword [rsp + 0x168]
inc rax
mov qword [rsp + 0x168], rax
inc dword [rsp + 0x158]
cmp rax, qword [rsp + 0x170]
je 0x1400061c4
mov rcx, qword [rsp + 0x160]
mov byte [rcx + rax], 0xbb
mov rax, qword [rsp + 0x168]
inc rax
mov qword [rsp + 0x168], rax
inc dword [rsp + 0x158]
lea rcx, [rax + 8]
cmp rcx, qword [rsp + 0x170]
ja 0x1400061e6
mov rcx, qword [rsp + 0x160]
mov rdx, qword [rsp + 0x58]
mov qword [rcx + rax], rdx
mov rax, qword [rsp + 0x168]
add rax, 8
mov qword [rsp + 0x168], rax
add dword [rsp + 0x158], 8
cmp rax, qword [rsp + 0x170]
je 0x140006208
mov rcx, qword [rsp + 0x160]
mov byte [rcx + rax], 0x41
mov rax, qword [rsp + 0x168]
inc rax
mov qword [rsp + 0x168], rax
inc dword [rsp + 0x158]
cmp rax, qword [rsp + 0x170]
je 0x14000622a
mov rcx, qword [rsp + 0x160]
mov byte [rcx + rax], 0xff
mov rax, qword [rsp + 0x168]
inc rax
mov qword [rsp + 0x168], rax
inc dword [rsp + 0x158]
cmp rax, qword [rsp + 0x170]
je 0x14000624c
mov rcx, qword [rsp + 0x160]
mov byte [rcx + rax], 0xe3
inc qword [rsp + 0x168]
inc dword [rsp + 0x158]
cmp qword [rsp + 0x1b0], 0
je 0x140005613
cmp byte [rsp + 0x198], 0
je 0x140005613
mov r8, qword [rsp + 0x168]
test r8, r8
je 0x14000560b
mov rdx, qword [rsp + 0x160]
mov ecx, dword [rsp + 0x15c]
add rcx, qword [rsp + 0x148]
call sub.ntdll.dll_memcpy
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov eax, dword [rsp + 0x168]
add dword [rsp + 0x15c], eax
mov qword [rsp + 0x168], 0
mov rax, qword [rsp + 0x48]
mov qword [rax], rbx
mov eax, dword [0x140064af4]
mov ecx, dword [0x1400624b8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005813
mov rdi, qword [rsp + 0x1a8]
mov rsi, qword [rsp + 0x1b0]
test rsi, rsi
je 0x14000568a
shl rsi, 4
add rsi, rdi
mov ebx, dword [0x140064af0]
lea r14, [rsp + 0x110]
mov r12, qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r8d, dword [rdi]
mov rcx, qword [rdi + 8]
mov rdx, rbx
mov r9, r14
call r12
add rdi, 0x10
cmp rdi, rsi
jne 0x140005669
mov rdi, qword [rsp + 0x1a8]
lea rax, [rsp + 0x1c0]
mov qword [rax - 0x10], 0
cmp rdi, rax
jne 0x140006154
mov rcx, qword [rsp + 0x160]
cmp rcx, r15
jne 0x140006162
mov rax, qword [rsp + 0x48]
cmp qword [rax], 0
je 0x14000607a
mov rax, qword [rsp + 0x48]
cmp qword [rax], 0
setne sil
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400056f3
mov r8d, dword [rsp + 0x70]
test r8d, r8d
je 0x1400056f3
lea r9, [rsp + 0x70]
mov edx, dword [r9 + 0x28]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp byte [rsp + 0xd8], 0
je 0x14000571b
mov rcx, qword [rsp + 0xb0]
test rcx, rcx
leave
leave
je 0x14000571b
mov r8d, dword [rsp + 0xa8]
test r8d, r8d
jne 0x140006037
sbb al, 9
add byte [rax], al
add byte [rax], al
add byte [rbp - 0x7b], al
ror byte [rdi], 0x85
sbb al, 9
add byte [rax], al
mov rcx, qword [rsp + 0x1e0]
loopne 0x140005722
add byte [rax], al
add byte [rax + 0x31], cl
loope case.0x14000496f.23
xor rcx, rsp
call fcn.14002c610
in eax, 0x6e
add al, byte [rax]
mov eax, esi
add rsp, 0x1e8
add dword [rax], eax
add byte [rbx + 0x5d], bl
add dword [rax], eax
add byte [rbx + 0x5d], bl
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov cl, 2
mov r9d, ecx
cmp al, cl
jae case.0x140005149.0
jmp case.default.0x140005149
mov sil, 1
jmp case.0x1400051b3.5
mov sil, 2
jmp case.0x1400051b3.5
lea rdi, [r14 + 0x10]
jmp 0x1400043ca
mov eax, 3
cmp byte [r15 + 2], 0x25
mov rcx, r15
jne 0x1400041bb
lea rcx, [r15 + rax]
movsxd rax, dword [r15 + rax]
mov rcx, qword [rax + rcx + 4]
jmp 0x1400041bb
cmp eax, 0xe9
je 0x14000746f
cmp eax, 0xff
je 0x140007480
mov rcx, r15
cmp eax, 0xeb
jne 0x1400041bb
mov r13, rbx
mov rdi, rsi
movsx rax, byte [r15 + 1]
lea r12, [r15 + rax]
add r12, 2
mov eax, r12d
sub eax, r15d
shl eax, 0x18
add eax, 0xfe000000
mov edx, eax
sar edx, 0x18
test eax, eax
js 0x14000762c
mov rcx, r15
mov rsi, rdi
mov rbx, r13
je 0x1400041bb
xor eax, eax
lea ecx, [rax + 2]
cmp byte [r15 + rcx], 0x90
jne 0x140007862
inc al
movsx eax, al
cmp edx, eax
jg 0x1400057f4
mov rcx, r12
jmp 0x140007865
lea rcx, [0x140064af4]
call fcn.14002b4a4
cmp dword [0x140064af4], 0xffffffff
jne 0x140005638
lea rdi, [rsp + 0x110]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rdi + 4]
mov dword [0x140064af0], eax
lea rcx, [0x140064af4]
call fcn.14002b444
jmp 0x140005638
cmp ecx, 0x33
je 0x1400071ae
cmp ecx, 0x83
jne 0x140004bae
mov cl, byte [r14 + rax + 1]
cmp cl, 0xc0
jb 0x140006f1c
mov ecx, dword [rsp + 0x88]
lea edx, [rcx + 3]
cmp ecx, dword [rsp + 0x90]
jne 0x140005894
mov dword [rsp + 0x90], edx
cmp qword [rsp + 0x68], 0
je 0x140007870
cmp edx, dword [rsp + 0x98]
ja 0x140007004
add r14, rax
mov rax, qword [rsp + 0x78]
jmp 0x14000743e
cmp ecx, 0xc3
je 0x140004812
cmp ecx, 0xcc
jne 0x140004bae
stc
int3
jmp 0x140004812
mov r8d, edx
and r8d, 7
cmp r8d, 5
jne 0x140007685
shr dl, 3
lea ecx, [r15 + 3]
lea r8, [r14 + rcx]
add r15d, 7
mov eax, edx
mov dword [rsp + 0x108], ecx
movsxd rcx, dword [r14 + rcx]
add rcx, r8
add rcx, 4
mov dword [rsp + 0x108], r15d
and al, 7
jne 0x1400076ae
cmp qword [rsp + 0x68], 0
je 0x140007568
mov eax, dword [rsp + 0x98]
cmp edi, eax
jae 0x140007703
mov rax, qword [rsp + 0x78]
mov edx, edi
mov byte [rax + rdx], 0xa1
mov edi, dword [rsp + 0x88]
inc edi
mov dword [rsp + 0x88], edi
cmp qword [rsp + 0x68], 0
je 0x14000756a
mov eax, dword [rsp + 0x98]
lea edx, [rdi + 8]
cmp edx, eax
ja 0x140007810
mov rax, qword [rsp + 0x78]
mov edx, edi
mov qword [rax + rdx], rcx
add dword [rsp + 0x88], 8
jmp 0x14000491c
mov r8d, ecx
and r8d, 7
cmp r8d, 5
je 0x1400056b4
mov edx, 1
cmp r8d, 4
jne case.0x14000496f.1
mov dl, byte [r14 + rax + 2]
and dl, 7
xor r8d, r8d
cmp dl, 5
sete r8b
lea edx, [r8*4 + 1]
jmp case.0x14000496f.1
mov byte [rsp + 0x9c], 0
jmp 0x1400053d5
movzx ecx, byte [r14 + r15]
cmp ecx, 0xcc
je 0x1400059e8
cmp ecx, 0x90
jne 0x140005a03
inc r15
mov dword [rsp + 0x108], r15d
cmp r15, qword [rsp + 0x40]
jb 0x140004684
jmp 0x140004f23
lea rcx, [rsp + 0xe0]
call fcn.1400512d0
test al, al
je 0x1400056b4
mov r15d, dword [rsp + 0x108]
mov bpl, 1
cmp r15d, 9
ja 0x140004f23
jmp 0x1400056b4
mov ecx, dword [rsp + 0x88]
lea edx, [rcx + 1]
cmp ecx, dword [rsp + 0x90]
jne 0x140005a4c
mov dword [rsp + 0x90], edx
cmp qword [rsp + 0x68], 0
je 0x140005bbb
cmp edx, dword [rsp + 0x98]
jbe 0x140005dd1
mov byte [rsp + 0x9c], 0
mov edx, ecx
jmp 0x140005bc2
mov ecx, dword [rsp + 0x88]
lea esi, [rcx + 1]
cmp ecx, dword [rsp + 0x90]
jne 0x140005a8e
mov dword [rsp + 0x90], esi
cmp qword [rsp + 0x68], 0
je 0x140005cba
cmp esi, dword [rsp + 0x98]
jbe 0x140005e02
mov byte [rsp + 0x9c], 0
mov esi, ecx
jmp 0x140005cc1
mov edx, dword [rsp + 0x88]
lea ecx, [rdx + 1]
cmp edx, dword [rsp + 0x90]
jne 0x140005ad0
mov dword [rsp + 0x90], ecx
cmp qword [rsp + 0x68], 0
je 0x140005c62
cmp ecx, dword [rsp + 0x98]
jbe 0x140005e33
mov byte [rsp + 0x9c], 0
mov ecx, edx
jmp 0x140005c69
mov edx, dword [rsp + 0x88]
lea ecx, [rdx + 1]
cmp edx, dword [rsp + 0x90]
jne 0x140005b12
mov dword [rsp + 0x90], ecx
cmp qword [rsp + 0x68], 0
je 0x140005d47
cmp ecx, dword [rsp + 0x98]
jbe 0x140005e64
mov byte [rsp + 0x9c], 0
mov ecx, edx
jmp 0x140005d4e
int3
mov edx, dword [rsp + 0x88]
lea ecx, [rdx + 1]
cmp edx, dword [rsp + 0x90]
jne 0x140005b5f
mov dword [rsp + 0x90], ecx
cmp qword [rsp + 0x68], 0
je 0x140006347
cmp ecx, dword [rsp + 0x98]
jbe 0x140006451
mov byte [rsp + 0x9c], 0
mov ecx, edx
jmp 0x14000634e
mov dword [rsp + 0x88], edi
jmp 0x1400047e3
mov byte [rsp + 0x9c], 0
mov edi, ecx
jmp 0x1400047e3
add eax, 4
mov dword [rsp + 0x88], eax
add eax, 4
mov dword [rsp + 0x88], eax
jmp 0x1400053bc
mov dword [rsp + 0x88], edx
lea edi, [r15 + 1]
mov dword [rsp + 0x108], edi
movzx eax, byte [r14 + rdi]
lea ecx, [rax - 0x10]
cmp ecx, 2
jb 0x140005c27
cmp eax, 5
je 0x1400060e9
cmp eax, 0x1f
jne 0x1400062d0
lea eax, [rdx + 1]
cmp edx, dword [rsp + 0x90]
jne 0x140005bff
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x140006ca8
cmp eax, dword [rsp + 0x98]
jbe 0x140006ea3
mov byte [rsp + 0x9c], 0
mov eax, edx
jmp 0x140006caf
lea esi, [rdx + 1]
cmp edx, dword [rsp + 0x90]
jne 0x140005c3a
mov dword [rsp + 0x90], esi
cmp qword [rsp + 0x68], 0
je 0x140006482
cmp esi, dword [rsp + 0x98]
jbe 0x1400064ef
mov byte [rsp + 0x9c], 0
mov esi, edx
jmp 0x140006489
mov dword [rsp + 0x88], ecx
inc r15d
mov dword [rsp + 0x108], r15d
cmp byte [r14 + r15], 0x89
jne 0x1400056b4
lea esi, [rcx + 1]
cmp ecx, dword [rsp + 0x90]
jne 0x140005c92
mov dword [rsp + 0x90], esi
cmp qword [rsp + 0x68], 0
je 0x140005cba
cmp esi, dword [rsp + 0x98]
ja 0x140005aa7
mov rax, qword [rsp + 0x78]
mov ecx, ecx
mov dl, byte [r14 + r15]
mov byte [rax + rcx], dl
jmp 0x140005e0e
mov dword [rsp + 0x88], esi
inc r15d
mov dword [rsp + 0x108], r15d
mov rcx, r14
mov edx, r15d
xor r8d, r8d
call fcn.140051320
test eax, eax
js 0x1400056b4
mov edi, eax
lea eax, [rsi + rdi]
cmp esi, dword [rsp + 0x90]
jne 0x140005cf7
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x140005d12
cmp eax, dword [rsp + 0x98]
jbe 0x140005d21
mov byte [rsp + 0x9c], 0
jmp 0x140005d19
mov dword [rsp + 0x88], eax
add r15d, edi
jmp 0x140004863
mov edx, r15d
add rdx, r14
mov r8d, edi
mov ecx, esi
add rcx, qword [rsp + 0x78]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x88], edi
mov r15d, dword [rsp + 0x108]
jmp 0x140005d19
mov dword [rsp + 0x88], ecx
inc r15d
mov dword [rsp + 0x108], r15d
cmp byte [r14 + r15], 0x33
jne 0x1400056b4
lea eax, [rcx + 2]
cmp ecx, dword [rsp + 0x90]
jne 0x140005d77
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x140005d92
cmp eax, dword [rsp + 0x98]
jbe 0x140005daf
mov byte [rsp + 0x9c], 0
jmp 0x140005d99
mov dword [rsp + 0x88], eax
add r15d, 2
jmp 0x140004863
mov byte [rsp + 0x9c], 0
jmp 0x140004860
mov rax, qword [rsp + 0x78]
mov ecx, ecx
movzx edx, word [r14 + r15]
mov word [rax + rcx], dx
add dword [rsp + 0x88], 2
mov r15d, dword [rsp + 0x108]
jmp 0x140005d99
mov rdx, qword [rsp + 0x78]
mov al, byte [r14 + rax]
mov byte [rdx + rcx], al
mov edx, dword [rsp + 0x88]
inc edx
mov dword [rsp + 0x88], edx
mov r15d, dword [rsp + 0x108]
mov r14, qword [rsp + 0x100]
jmp 0x140005bc2
mov rdx, qword [rsp + 0x78]
mov al, byte [r14 + rax]
mov byte [rdx + rcx], al
mov esi, dword [rsp + 0x88]
inc esi
mov dword [rsp + 0x88], esi
mov r15d, dword [rsp + 0x108]
mov r14, qword [rsp + 0x100]
jmp 0x140005cc1
mov rcx, qword [rsp + 0x78]
mov al, byte [r14 + rax]
mov byte [rcx + rdx], al
mov ecx, dword [rsp + 0x88]
inc ecx
mov dword [rsp + 0x88], ecx
mov r15d, dword [rsp + 0x108]
mov r14, qword [rsp + 0x100]
jmp 0x140005c69
mov rcx, qword [rsp + 0x78]
mov al, byte [r14 + rax]
mov byte [rcx + rdx], al
mov ecx, dword [rsp + 0x88]
inc ecx
mov dword [rsp + 0x88], ecx
mov r15d, dword [rsp + 0x108]
mov r14, qword [rsp + 0x100]
jmp 0x140005d4e
cmp byte [r14 + rax + 1], 0x3d
jne 0x1400056b4
add eax, 2
mov dword [rsp + 0x108], eax
mov rcx, qword [rsp + 0x68]
mov eax, dword [rsp + 0x88]
test rcx, rcx
je 0x140006732
mov edx, dword [rsp + 0x98]
cmp eax, edx
jae 0x140006bba
mov rcx, qword [rsp + 0x78]
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140006734
mov edx, dword [rsp + 0x98]
jmp 0x140006bc2
cmp byte [r14 + rax + 1], 0x48
jne 0x1400056b4
mov cl, byte [r14 + rax + 2]
and cl, 0xfc
cmp cl, 0x88
jne 0x1400056b4
mov ecx, dword [rsp + 0x88]
lea esi, [rcx + 3]
cmp ecx, dword [rsp + 0x90]
jne 0x140005f39
mov dword [rsp + 0x90], esi
cmp qword [rsp + 0x68], 0
je 0x140006856
adc dword [rcx], ecx
add byte [rax], al
adc dword [rcx], ecx
add byte [rax], al
cmp esi, dword [rsp + 0x98]
jbe 0x140006c6a
invalid
add dh, al
test byte [rsp + rbx*4], ah
add byte [rax], al
add byte [rax], al
mov byte [rsp + 0x9c], 0
mov esi, ecx
jmp 0x14000685d
cmp dl, 0x1f
ja case.default.0x140005149
shr dl, 4
add dl, 2
mov ecx, edx
jmp case.0x140005149.5
mov ecx, eax
and cl, 0xf8
cmp cl, 0xb8
jne 0x1400065b6
lea eax, [rdi + 9]
cmp edi, dword [rsp + 0x90]
jne 0x140005f98
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x140007140
cmp eax, dword [rsp + 0x98]
jbe 0x140007177
adc dword [rax], eax
invalid
adc dword [rax], eax
add dh, al
test byte [rsp + rbx*4], ah
add byte [rax], al
add byte [rax], al
mov byte [rsp + 0x9c], 0
jmp 0x140007147
mov eax, 5
jmp case.0x1400048ba.1
mov dword [rsp + 0x88], eax
jmp 0x140004911
mov byte [rsp + 0x9c], 0
jmp 0x140004911
mov dword [rsp + 0x88], edx
jmp 0x140004860
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], r14
mov dword [rsp + 0x108], 0
jmp 0x1400041f2
int3
mov rcx, r15
call fcn.140051240
test al, al
cmovne r14, r15
jmp 0x1400041c9
mov dword [rsp + 0x88], edx
jmp 0x14000457b
lea r9, [rsp + 0xa8]
mov edx, dword [r9 + 0x28]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x14000571b
mov byte [rsp + 0x9c], 0
xor eax, eax
jmp 0x14000454d
mov dword [rsp + 0x88], ecx
jmp 0x14000460a
mov byte [rsp + 0x9c], 0
xor eax, eax
mov ecx, edx
jmp 0x1400045dc
mov dword [rsp + 0x88], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsp + 0x88]
lea edx, [rcx + 8]
cmp qword [rsp + 0x68], 0
je 0x140007a27
cmp edx, dword [rsp + 0x98]
ja 0x140007a33
mov rdx, qword [rsp + 0x78]
mov qword [rdx + rcx], rax
add dword [rsp + 0x88], 8
jmp 0x1400056c3
inc eax
inc eax
add eax, 4
add eax, 8
mov dword [rsp + 0x88], eax
jmp 0x140005060
mov byte [rsp + 0x9c], 0
jmp 0x140004f8f
lea eax, [rdx + 1]
cmp edx, dword [rsp + 0x90]
jne 0x1400060fc
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x140006cfa
cmp eax, dword [rsp + 0x98]
jbe 0x140006ed5
mov byte [rsp + 0x9c], 0
jmp 0x140006d01
mov byte [rsp + 0x9c], 0
jmp 0x140004fc5
mov byte [rsp + 0x9c], 0
jmp 0x140005004
mov byte [rsp + 0x9c], 0
jmp 0x14000502c
int3
mov rcx, rdi
call qword [sym.imp.mozglue.dll_free]
jmp 0x1400056a3
call qword [sym.imp.mozglue.dll_free]
jmp 0x1400056b4
lea rcx, [rsp + 0xe0]
lea r8, [rsp + 0x140]
test byte [rax + rax*2], ah
add dword [rax], eax
add byte [rax - 0x77], cl
fimul dword [rbx + rcx*4 + 0x4c]
and al, 0x58
test byte [rax + rax*2], ah
add dword [rax], eax
add byte [rax - 0x77], cl
fimul dword [rbx + rcx*4 + 0x4c]
and al, 0x58
call fcn.1400513c0
test al, al
jne 0x14000559f
mov dl, 4
add byte [rax + rax*8 - 0xbf27af1], al
invalid
jmp 0x140005613
mov dl, byte [r14]
and dl, 7
jmp 0x140006276
mov edx, 1
mov rcx, r14
call fcn.140011c90
test al, al
je 0x1400079b1
mov rax, qword [rsp + 0x168]
jmp 0x140005475
mov edx, 1
mov rcx, r14
call fcn.140011c90
test al, al
je 0x1400079c6
mov rax, qword [rsp + 0x168]
jmp 0x1400054a9
mov edx, 8
mov rcx, r14
call fcn.140011c90
test al, al
je 0x1400079db
mov rax, qword [rsp + 0x168]
jmp 0x1400054e1
mov edx, 1
mov rcx, r14
call fcn.140011c90
test al, al
je 0x1400079f0
mov rax, qword [rsp + 0x168]
jmp 0x14000551c
mov edx, 1
mov rcx, r14
call fcn.140011c90
test al, al
je 0x140007a05
mov rax, qword [rsp + 0x168]
jmp 0x140005550
mov edx, 1
mov rcx, r14
add byte [rax], al
add byte [rcx + rcx*4 - 0xf], cl
call fcn.140011c90
test al, al
je 0x140007a1a
invalid
add byte [rax], al
invalid
mov rax, qword [rsp + 0x168]
jmp 0x140005584
mov dl, byte [r14]
and dl, 7
mov cl, 2
cmp dl, 2
je case.0x140005149.5
mov r9d, dword [rsp + 0x90]
lea rcx, [r14 + 1]
xor edx, edx
mov r8b, byte [r14 + 1]
cmp r9d, edi
jae case.default.0x1400051b3
movzx r10d, r8b
cmp r9d, r10d
jb 0x1400053d5
cmp al, dl
ja 0x1400053d5
xor edx, edx
xor eax, eax
jmp 0x1400051d4
lea ecx, [r12 + 4]
movzx r15d, al
add r15, r15
add r15d, ecx
mov dword [rsp + 0x88], r15d
jmp 0x1400052d4
lea ecx, [rax + 0x7d]
cmp cl, 2
ja 0x1400056b4
lea rcx, [0x140055b88]
mov r8d, dword [rcx + rax*4 - 0x20c]
lea eax, [r15 + 2]
mov dword [rsp + 0x108], eax
dec edx
lea rcx, [rsp + 0x68]
mov dword [rcx + 0x20], edx
lea rdx, [r14 + rax]
movsxd rax, dword [r14 + rax]
add rdx, rax
add rdx, 4
add r15d, 6
mov dword [rsp + 0x108], r15d
jmp 0x140004772
movzx r8d, byte [rdx + rax + 0xa]
cmp r8d, 0x50
je 0x140006dc8
cmp r8d, 0xff
jne 0x140006e99
cmp byte [rdx + rax + 0xb], 0xe0
jmp 0x140006dcd
mov dword [rsp + 0x88], ecx
inc r15d
mov dword [rsp + 0x108], r15d
mov al, byte [r14 + r15]
mov edx, eax
and dl, 0xfc
cmp dl, 0x88
jne 0x1400063f0
movzx eax, byte [r14 + r15 + 1]
mov edx, eax
and edx, 0xffffffc0
cmp dl, 0xc0
je 0x140005d64
cmp edx, 0x40
je 0x1400063a6
test edx, edx
jne 0x1400056b4
mov r8d, eax
and r8d, 6
cmp r8d, 4
jne 0x140005d64
cmp edx, 0x40
jne 0x1400056b4
and eax, 7
add r14, r15
mov edx, dword [rsp + 0x90]
cmp eax, 4
jne 0x140006fdd
lea eax, [rcx + 4]
cmp ecx, edx
jne 0x1400063ca
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x140007344
cmp eax, dword [rsp + 0x98]
jbe 0x140007415
mov byte [rsp + 0x9c], 0
jmp 0x14000734b
cmp al, 0x44
jne 0x14000491c
cmp byte [r14 + r15 + 1], 0x89
jne 0x14000491c
mov eax, dword [rsp + 0x88]
lea esi, [rax + 2]
cmp eax, dword [rsp + 0x90]
jne 0x14000641e
mov dword [rsp + 0x90], esi
cmp qword [rsp + 0x68], 0
je 0x140007334
cmp esi, dword [rsp + 0x98]
jbe 0x1400073d1
mov byte [rsp + 0x9c], 0
mov esi, eax
jmp 0x14000733b
int3
mov rcx, qword [rsp + 0x78]
mov al, byte [r14 + rax]
mov byte [rcx + rdx], al
mov ecx, dword [rsp + 0x88]
inc ecx
mov dword [rsp + 0x88], ecx
mov r15d, dword [rsp + 0x108]
mov r14, qword [rsp + 0x100]
jmp 0x14000634e
mov dword [rsp + 0x88], esi
inc edi
mov dword [rsp + 0x108], edi
mov rcx, r14
mov edx, edi
xor r8d, r8d
call fcn.140051320
test eax, eax
js 0x1400056b4
mov r15d, eax
lea eax, [rsi + r15]
cmp esi, dword [rsp + 0x90]
jne 0x1400064be
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x1400064d9
cmp eax, dword [rsp + 0x98]
jbe 0x140006521
mov byte [rsp + 0x9c], 0
jmp 0x1400064e0
mov dword [rsp + 0x88], eax
add edi, r15d
mov dword [rsp + 0x108], edi
jmp 0x14000491c
mov rax, qword [rsp + 0x78]
mov ecx, edx
mov dl, byte [r14 + rdi]
mov byte [rax + rcx], dl
mov esi, dword [rsp + 0x88]
inc esi
mov dword [rsp + 0x88], esi
mov edi, dword [rsp + 0x108]
mov r14, qword [rsp + 0x100]
jmp 0x140006489
mov edx, edi
add rdx, r14
mov r8d, r15d
mov ecx, esi
add rcx, qword [rsp + 0x78]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x88], r15d
mov edi, dword [rsp + 0x108]
jmp 0x1400064e0
mov dword [rsp + 0x88], ecx
jmp 0x140004a32
mov byte [rsp + 0x9c], 0
mov ecx, edx
jmp 0x140004a32
mov edx, eax
and dl, 0xf8
cmp dl, 0xb8
jne 0x140007050
lea eax, [rcx + 5]
cmp ecx, dword [rsp + 0x90]
jne 0x140006582
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x140007364
cmp eax, dword [rsp + 0x98]
ja 0x140006f53
add r14, r15
mov rax, qword [rsp + 0x78]
mov ecx, ecx
jmp 0x140006f6e
mov dword [rsp + 0x88], eax
jmp 0x140004860
cmp eax, 0xc6
jg 0x140007077
cmp eax, 0x63
je 0x140006659
cmp eax, 0x8d
jne 0x1400056b4
mov dl, byte [r14 + r12 + 1]
mov eax, edx
and al, 0xc7
cmp al, 5
jne 0x140007512
lea eax, [r15 + 3]
mov dword [rsp + 0x108], eax
movsxd rcx, dword [r14 + rax]
add r15d, 7
mov dword [rsp + 0x108], r15d
cmp qword [rsp + 0x68], 0
je 0x140007568
mov r8d, dword [rsp + 0x98]
cmp edi, r8d
jae 0x140007800
shr dl, 3
or dl, 0xb8
mov r8, qword [rsp + 0x78]
mov r9d, edi
mov byte [r8 + r9], dl
mov edi, dword [rsp + 0x88]
inc edi
mov dword [rsp + 0x88], edi
cmp qword [rsp + 0x68], 0
je 0x14000756a
mov r8d, dword [rsp + 0x98]
jmp 0x140007808
cmp byte [r14 + r12 + 1], 0xc0
jb 0x1400056b4
lea eax, [rdi + 2]
cmp edi, dword [rsp + 0x90]
jne 0x140006678
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x140006889
cmp eax, dword [rsp + 0x98]
jbe 0x140006d08
mov byte [rsp + 0x9c], 0
jmp 0x140006890
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [r14 + 8], 0
xorps xmm0, xmm0
movaps xmmword [rsp + 0xe0], xmm0
mov qword [rsp + 0xf0], 0
lea rcx, [0x140064b20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor esi, esi
jmp 0x14000571b
mov dword [rsp + 0x88], eax
jmp 0x140004af9
cmp eax, 0x60
jne 0x1400070f4
lea eax, [rdi + 5]
cmp edi, dword [rsp + 0x90]
jne 0x1400066ff
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x140007405
cmp eax, dword [rsp + 0x98]
jbe 0x1400074d2
mov byte [rsp + 0x9c], 0
jmp 0x14000740c
mov byte [rsp + 0x9c], 0
jmp 0x140004af9
inc eax
inc eax
mov dword [rsp + 0x88], eax
xor ecx, ecx
mov edx, dword [rsp + 0x108]
mov r8, qword [rsp + 0x100]
movsxd r9, dword [r8 + rdx]
lea r10d, [rdx + 4]
mov dword [rsp + 0x108], r10d
test rcx, rcx
je 0x1400067a1
mov ecx, dword [rsp + 0x98]
cmp eax, ecx
jae 0x140006bef
mov rcx, qword [rsp + 0x78]
mov eax, eax
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
cmp qword [rsp + 0x68], 0
je 0x1400067a3
mov ecx, dword [rsp + 0x98]
jmp 0x140006bf7
inc eax
inc eax
add eax, 8
inc eax
inc eax
inc eax
mov dword [rsp + 0x88], eax
mov r8, qword [rsp + 0x100]
mov edx, dword [rsp + 0x108]
lea ecx, [rax + 1]
cmp eax, dword [rsp + 0x90]
jne 0x1400067d7
mov dword [rsp + 0x90], ecx
cmp qword [rsp + 0x68], 0
je 0x14000683b
cmp ecx, dword [rsp + 0x98]
jbe 0x140006c32
mov byte [rsp + 0x9c], 0
inc edx
mov dword [rsp + 0x108], edx
mov ecx, dword [rsp + 0x98]
cmp eax, ecx
jae 0x140006d3c
mov rcx, qword [rsp + 0x78]
mov eax, eax
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
cmp qword [rsp + 0x68], 0
je 0x140006848
mov ecx, dword [rsp + 0x98]
jmp 0x140006d44
inc edx
mov dword [rsp + 0x108], edx
inc ecx
mov eax, ecx
inc eax
mov dword [rsp + 0x88], eax
jmp 0x14000491c
mov dword [rsp + 0x88], esi
add r15d, 3
jmp 0x140005cc4
mov dword [rsp + 0x88], eax
jmp 0x140004b67
mov byte [rsp + 0x9c], 0
jmp 0x140004b67
mov edx, 5
jmp case.0x14000496f.1
mov dword [rsp + 0x88], eax
add r12d, 2
jmp 0x140004914
mov dword [rsp + 0x88], edx
jmp 0x1400049cb
jne 0x140004c4c
cmp qword [r9 + 8], r10
jb 0x140004c3f
jmp 0x140004c4c
cmp qword [rbx], rdi
ja 0x140004c65
mov rax, qword [rsp + 0x50]
cmp qword [rbx + 8], rax
jae 0x140004333
jmp 0x140004c65
lea rbx, [r13*2]
add rbx, r13
movups xmm0, xmmword [rax + rbx*8 - 0x18]
movaps xmmword [rsp + 0x140], xmm0
mov rcx, qword [rax + rbx*8 - 8]
mov qword [rsp + 0x60], rcx
mov qword [rax + rbx*8 - 8], 0
mov rax, qword [r14 + 8]
cmp rax, qword [r14 + 0x10]
jne 0x140006918
mov rcx, r14
call fcn.140007e20
mov rax, qword [r14 + 8]
mov rcx, qword [r14]
lea rax, [rax + rax*2]
movaps xmm0, xmmword [rsp + 0x140]
movups xmmword [rcx + rax*8], xmm0
mov rdx, qword [rsp + 0x60]
mov qword [rcx + rax*8 + 0x10], rdx
inc qword [r14 + 8]
dec r13
cmp r13, rsi
jbe 0x140006983
lea rbx, [rbx*8 - 8]
mov rax, qword [r14]
movups xmm0, xmmword [rax + rbx - 0x28]
movups xmmword [rax + rbx - 0x10], xmm0
mov rdx, qword [rax + rbx - 0x18]
mov qword [rax + rbx - 0x18], 0
mov rcx, qword [rax + rbx]
mov qword [rax + rbx], rdx
test rcx, rcx
je 0x140006977
call qword [sym.imp.mozglue.dll_free]
dec r13
add rbx, 0xffffffffffffffe8
cmp r13, rsi
ja 0x140006949
mov rax, qword [r14]
lea rdx, [rsi + rsi*2]
mov qword [rax + rdx*8], rdi
mov rcx, qword [rsp + 0x50]
mov qword [rax + rdx*8 + 8], rcx
mov rcx, qword [rax + rdx*8 + 0x10]
mov qword [rax + rdx*8 + 0x10], r15
test rcx, rcx
je 0x140004cd9
call qword [sym.imp.mozglue.dll_free]
jmp 0x140004cd9
add r12, r13
mov ebp, esi
mov rcx, r15
mov rdx, rbp
mov r8, r13
mov r9, r12
call fcn.140034950
test rax, rax
je 0x1400066a4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400043c6
mov rcx, r15
mov rdx, rbp
mov r8, r13
mov r9, r12
call fcn.140034950
test rax, rax
je 0x1400066a4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400043c6
mov rcx, r15
mov rdx, rbp
mov r8, r13
mov r9, r12
call fcn.140034950
test rax, rax
je 0x1400066a4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400043c6
mov rcx, r15
mov rdx, rbp
mov r8, r13
mov r9, r12
call fcn.140034950
test rax, rax
je 0x1400066a4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400043c6
mov rcx, r15
mov rdx, rbp
mov r8, r13
mov r9, r12
call fcn.140034950
test rax, rax
je 0x1400066a4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400043c6
mov rcx, r15
mov rdx, rbp
mov r8, r13
mov r9, r12
call fcn.140034950
test rax, rax
je 0x1400066a4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400043c6
mov rcx, r15
mov rdx, rbp
mov r8, r13
mov r9, r12
call fcn.140034950
test rax, rax
je 0x1400066a4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400043c6
mov rcx, r15
mov rdx, rbp
mov r8, r13
mov r9, r12
call fcn.140034950
test rax, rax
je 0x1400066a4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400043c6
xor ecx, ecx
mov rdx, rbp
jmp 0x1400043ab
mov rcx, qword [0x140064b48]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140064b48], 0
jmp 0x140004d83
mov byte [rsp + 0x9c], 0
cmp eax, edx
jae 0x140006d63
mov rcx, qword [rsp + 0x78]
mov eax, eax
mov byte [rcx + rax], 0x53
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
mov rcx, qword [rsp + 0x68]
jmp 0x14000673f
mov byte [rsp + 0x9c], 0
cmp eax, ecx
jae 0x140006d70
mov rcx, qword [rsp + 0x78]
mov eax, eax
mov byte [rcx + rax], 0xbb
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
cmp qword [rsp + 0x68], 0
je 0x1400067a5
mov ecx, dword [rsp + 0x98]
jmp 0x140006d78
mov rcx, qword [rsp + 0x78]
mov eax, eax
mov dl, byte [r8 + rdx]
mov byte [rcx + rax], dl
mov ecx, dword [rsp + 0x88]
inc ecx
inc dword [rsp + 0x108]
mov dword [rsp + 0x88], ecx
cmp qword [rsp + 0x68], 0
mov eax, ecx
jne 0x1400067fd
jmp 0x140006844
add r14, rax
mov rax, qword [rsp + 0x78]
mov dl, byte [r14 + 2]
mov byte [rax + rcx + 2], dl
movzx edx, word [r14]
mov word [rax + rcx], dx
mov esi, dword [rsp + 0x88]
add esi, 3
mov dword [rsp + 0x88], esi
mov r15d, dword [rsp + 0x108]
mov r14, qword [rsp + 0x100]
jmp 0x14000685d
mov dword [rsp + 0x88], eax
inc edi
mov dword [rsp + 0x108], edi
mov cl, byte [r14 + rdi]
and cl, 0xc7
cmp cl, 0x44
jne 0x1400056b4
lea ecx, [rax + 3]
cmp eax, dword [rsp + 0x90]
jne 0x140006cdb
mov dword [rsp + 0x90], ecx
cmp qword [rsp + 0x68], 0
je 0x140006d2d
cmp ecx, dword [rsp + 0x98]
jbe 0x140006f95
mov byte [rsp + 0x9c], 0
jmp 0x140006d34
mov dword [rsp + 0x88], eax
inc edi
jmp 0x1400064e3
mov rax, qword [rsp + 0x78]
mov ecx, edi
movzx edx, word [r14 + r12]
mov word [rax + rcx], dx
add dword [rsp + 0x88], 2
mov r12d, dword [rsp + 0x108]
jmp 0x140006890
mov dword [rsp + 0x88], ecx
add edi, 3
jmp 0x1400064e3
mov byte [rsp + 0x9c], 0
cmp eax, ecx
jae 0x140007810
mov rcx, qword [rsp + 0x78]
mov eax, eax
mov byte [rcx + rax], 0x5b
inc dword [rsp + 0x88]
jmp 0x14000491c
mov byte [rsp + 0x9c], 0
jmp 0x14000673f
mov byte [rsp + 0x9c], 0
lea r10d, [rax + 8]
cmp r10d, ecx
jbe 0x140007011
mov byte [rsp + 0x9c], 0
cmp eax, ecx
jae 0x140007104
mov rcx, qword [rsp + 0x78]
mov eax, eax
mov byte [rcx + rax], 0x41
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
cmp qword [rsp + 0x68], 0
je 0x1400067aa
mov ecx, dword [rsp + 0x98]
jmp 0x14000710c
cmp byte [rdx + rax + 0xb], 0xc3
mov rsi, qword [rsp + 0x40]
jne 0x14000462a
add eax, 2
mov rsi, qword [rdx + rax]
lea rcx, [rsp + 0xf8]
lea r14, [rsp + 0x140]
mov rdx, r14
call fcn.140051920
xor edi, edi
cmp qword [r14 + 0x70], 0
je 0x140007491
cmp byte [rsp + 0x198], 0
je 0x140007491
lea r14, [rsp + 0x140]
mov rcx, r14
mov rdx, qword [rsp + 0x58]
call fcn.14002fb40
mov rcx, r14
call fcn.140051a10
test al, al
je 0x14000748f
mov eax, dword [rsp + 0x88]
lea ecx, [rax + 8]
cmp qword [rsp + 0x68], 0
je 0x140007710
cmp ecx, dword [rsp + 0x98]
jbe 0x140007736
mov byte [rsp + 0x9c], 0
xor eax, eax
xor edi, edi
cmp qword [rsp + 0x78], 0
je 0x140007491
cmp qword [rsp + 0x80], 0
je 0x140007491
cmp dword [rsp + 0x70], 0
je 0x140007491
test al, al
jne 0x140007717
jmp 0x140007491
mov rsi, qword [rsp + 0x40]
jmp 0x14000462a
mov rax, qword [rsp + 0x78]
mov ecx, edx
mov dl, byte [r14 + rdi]
mov byte [rax + rcx], dl
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
mov edi, dword [rsp + 0x108]
mov r14, qword [rsp + 0x100]
jmp 0x140006caf
mov rax, qword [rsp + 0x78]
mov ecx, edx
mov dl, byte [r14 + rdi]
mov byte [rax + rcx], dl
inc dword [rsp + 0x88]
mov edi, dword [rsp + 0x108]
jmp 0x140006d01
cmp cl, 0xff
je 0x14000738e
cmp ecx, 0xc6
je 0x140007370
cmp ecx, 0x83
jne 0x1400056b4
mov cl, byte [r14 + rax + 1]
and cl, 0xf8
cmp cl, 0x60
jne 0x1400056b4
mov ecx, dword [rsp + 0x88]
lea edx, [rcx + 5]
cmp ecx, dword [rsp + 0x90]
jne 0x140006f42
mov dword [rsp + 0x90], edx
cmp qword [rsp + 0x68], 0
je 0x140006f5d
cmp edx, dword [rsp + 0x98]
jbe 0x140006f66
mov byte [rsp + 0x9c], 0
jmp 0x140006f8c
mov dword [rsp + 0x88], edx
jmp 0x140006f8c
add r14, rax
mov rax, qword [rsp + 0x78]
mov dl, byte [r14 + 4]
mov byte [rax + rcx + 4], dl
mov edx, dword [r14]
mov edx, dword [rsi]
mov edx, dword [rsi]
mov dword [rax + rcx], edx
add dword [rsp + 0x88], 5
mov r15d, dword [rsp + 0x108]
and al, 8
add dword [rax], eax
invalid
and al, 8
add dword [rax], eax
add byte [rcx - 0x7d], al
mov dword [0x13fd93e81], 0xfe0149ff
add r15d, 5
jmp 0x140004863
add r14, rdi
mov rcx, qword [rsp + 0x78]
mov eax, eax
mov dl, byte [r14 + 2]
mov byte [rcx + rax + 2], dl
movzx edx, word [r14]
mov word [rcx + rax], dx
add dword [rsp + 0x88], 3
mov edi, dword [rsp + 0x108]
jmp 0x140006d34
cmp r15b, 0x1f
ja case.default.0x1400051b3
shr r15b, 4
add r15b, 2
mov esi, r15d
jmp case.0x1400051b3.5
lea eax, [rcx + 3]
cmp ecx, edx
jne 0x140006feb
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x140007354
cmp eax, dword [rsp + 0x98]
jbe 0x140007437
mov byte [rsp + 0x9c], 0
jmp 0x14000735b
add r8, rdx
lea rcx, [r9 + r8]
add rcx, 4
mov rdx, qword [rsp + 0x78]
mov eax, eax
mov qword [rdx + rax], rcx
mov eax, dword [rsp + 0x88]
add eax, 8
mov dword [rsp + 0x88], eax
cmp qword [rsp + 0x68], 0
je 0x1400067a8
mov ecx, dword [rsp + 0x98]
jmp 0x140006d8d
cmp eax, 0xf7
je 0x1400072ec
cmp eax, 0x8b
jne 0x1400056b4
cmp byte [r14 + r15 + 1], 0xc0
jae 0x140005d64
jmp 0x1400056b4
cmp eax, 0xff
je 0x140007279
cmp eax, 0xc7
jne 0x1400056b4
add byte [rdi], cl
test dword [rdi], esp
out 0xff, al
inc dword [rbx - 0x80]
jl 0x1400070b7
cmp byte [r14 + r12 + 1], 0x44
jne 0x1400056b4
out 0xff, al
invalid
add dword [rdi + rcx - 0x7b], eax
sbb esp, esi
out 0xff, al
jne 0x1400056b4
out 0xff, al
dec dword [rbp - 0x43c4f7b9]
and al, 0x90
add byte [rax], al
lea eax, [rdi + 8]
cmp edi, dword [rsp + 0x90]
add byte [rbp + 7], dh
add byte [rbp + 7], dh
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x1400075bf
add byte [rbx], bh
test byte [rax + rbx*4], ah
add byte [rax], al
add byte [rdi], cl
xchg byte [rdx], bl
add eax, 0x84c60000
and al, 0x9c
add byte [rax], al
add byte [rax], al
cmp eax, dword [rsp + 0x98]
jbe 0x1400075df
mov byte [rsp + 0x9c], 0
jmp 0x1400075c6
mov r15b, byte [r14]
and r15b, 7
mov sil, 2
jmp 0x1400070e5
mov r15b, byte [r14]
and r15b, 7
cmp r15b, 2
je case.0x1400051b3.5
jmp case.default.0x1400051b3
cmp eax, 0xc0
jne 0x1400056b4
jmp 0x140004aa3
mov byte [rsp + 0x9c], 0
cmp eax, ecx
jae 0x140007150
mov rcx, qword [rsp + 0x78]
mov eax, eax
mov byte [rcx + rax], 0x80
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
cmp qword [rsp + 0x68], 0
je 0x1400067ac
mov ecx, dword [rsp + 0x98]
jmp 0x140007158
mov dword [rsp + 0x88], eax
add r12d, 9
jmp 0x140004914
mov byte [rsp + 0x9c], 0
cmp eax, ecx
jae 0x14000726c
mov rcx, qword [rsp + 0x78]
mov eax, eax
mov byte [rcx + rax], 0x3b
mov eax, dword [rsp + 0x88]
jmp 0x1400067ac
add r14, r12
mov rax, qword [rsp + 0x78]
mov ecx, edi
mov dl, byte [r14 + 8]
mov byte [rax + rcx + 8], dl
mov rdx, qword [r14]
mov qword [rax + rcx], rdx
add dword [rsp + 0x88], 9
mov r12d, dword [rsp + 0x108]
jmp 0x140007147
cmp byte [r14 + rax + 1], 0xc0
jb 0x1400056b4
mov ecx, dword [rsp + 0x88]
lea edx, [rcx + 2]
cmp ecx, dword [rsp + 0x90]
jne 0x1400071c8
mov dword [rsp + 0x90], edx
cmp qword [rsp + 0x68], 0
je 0x1400073c5
cmp edx, dword [rsp + 0x98]
ja 0x140005d88
mov rdx, qword [rsp + 0x78]
movzx eax, word [r14 + rax]
mov word [rdx + rcx], ax
jmp 0x140005dbf
lea r8, [rsp + 0x140]
mov byte [r8], 0
lea rcx, [rax + r14]
inc rcx
xor edx, edx
call fcn.140051320
test eax, eax
js 0x1400056b4
cmp byte [rsp + 0x140], 0
jne 0x1400056b4
mov esi, eax
mov ecx, dword [rsp + 0x88]
lea eax, [rcx + rsi]
add eax, 2
cmp ecx, dword [rsp + 0x90]
jne 0x140007243
mov dword [rsp + 0x90], eax
add esi, 2
cmp qword [rsp + 0x68], 0
je 0x140007463
cmp eax, dword [rsp + 0x98]
jbe 0x1400074ff
mov byte [rsp + 0x9c], 0
jmp 0x1400049cb
mov byte [rsp + 0x9c], 0
jmp 0x1400067b5
movzx eax, byte [r14 + r12 + 1]
mov ecx, eax
and cl, 0xc7
cmp cl, 5
jne 0x1400056b4
and eax, 0x38
cmp eax, 0x20
je 0x14000729e
cmp eax, 0x10
jne 0x1400056b4
lea eax, [r15 + 3]
mov dword [rsp + 0x108], eax
dec edi
lea rcx, [rsp + 0x68]
mov dword [rcx + 0x20], edi
lea rdx, [r14 + rax]
mov r8b, byte [r14 + rax + 1]
and r8b, 0x38
xor ebx, ebx
cmp r8b, 0x20
sete bl
mov r8d, 4
sub r8d, ebx
movsxd rax, dword [r14 + rax]
add r15d, 7
mov dword [rsp + 0x108], r15d
mov rdx, qword [rax + rdx + 4]
jmp 0x140004772
mov al, byte [r14 + r15 + 1]
and al, 0xf8
cmp al, 0xc0
jne 0x1400056b4
lea eax, [rcx + 6]
cmp ecx, dword [rsp + 0x90]
jne 0x14000730e
mov dword [rsp + 0x90], eax
cmp qword [rsp + 0x68], 0
je 0x1400075cf
cmp eax, dword [rsp + 0x98]
jbe 0x140007600
mov byte [rsp + 0x9c], 0
jmp 0x1400075d6
mov dword [rsp + 0x88], esi
add r15d, 2
jmp 0x140005cc4
mov dword [rsp + 0x88], eax
add r15d, 4
jmp 0x140004863
mov dword [rsp + 0x88], eax
add r15d, 3
jmp 0x140004863
mov dword [rsp + 0x88], eax
jmp 0x140006f8c
lea rcx, [rax + r14]
inc rcx
xor edx, edx
xor r8d, r8d
call fcn.140051320
test eax, eax
jns 0x140007224
jmp 0x1400056b4
movzx edx, byte [r14 + rax + 1]
mov ecx, edx
shr ecx, 3
and ecx, 7
cmp dl, 0xc0
jb 0x140007579
cmp ecx, 3
jb 0x1400071ae
cmp ecx, 4
je 0x1400077a1
cmp ecx, 6
je 0x1400071ae
jmp 0x1400056b4
mov dword [rsp + 0x88], edx
jmp 0x140005d99
mov rcx, qword [rsp + 0x78]
movzx edx, word [r14 + r15]
mov word [rcx + rax], dx
mov esi, dword [rsp + 0x88]
add esi, 2
mov dword [rsp + 0x88], esi
mov r15d, dword [rsp + 0x108]
mov r14, qword [rsp + 0x100]
jmp 0x14000733b
mov dword [rsp + 0x88], eax
add r12d, 5
jmp 0x140004914
mov rax, qword [rsp + 0x78]
mov ecx, ecx
mov edx, dword [r14]
mov dword [rax + rcx], edx
add dword [rsp + 0x88], 4
mov r15d, dword [rsp + 0x108]
jmp 0x14000734b
mov rax, qword [rsp + 0x78]
mov ecx, ecx
mov dl, byte [r14 + 2]
mov byte [rax + rcx + 2], dl
movzx edx, word [r14]
mov word [rax + rcx], dx
add dword [rsp + 0x88], 3
mov r15d, dword [rsp + 0x108]
jmp 0x14000735b
mov dword [rsp + 0x88], eax
jmp 0x1400049cb
movsxd rax, dword [r15 + 1]
lea rcx, [r15 + rax]
add rcx, 5
jmp 0x1400041bb
mov eax, 2
cmp byte [r15 + 1], 0x25
jmp 0x140005776
xor edi, edi
lea r14, [rsp + 0x1a0]
mov rcx, r14
call fcn.140051a80
mov rcx, qword [r14 - 0x40]
lea rax, [rsp + 0x178]
cmp rcx, rax
je 0x1400074b8
call qword [sym.imp.mozglue.dll_free]
test dil, dil
mov rsi, qword [rsp + 0x40]
jne 0x1400056b4
mov ecx, dword [rsp + 0x88]
jmp 0x14000462a
add r14, r12
mov rax, qword [rsp + 0x78]
mov ecx, edi
mov dl, byte [r14 + 4]
mov byte [rax + rcx + 4], dl
mov edx, dword [r14]
mov dword [rax + rcx], edx
add dword [rsp + 0x88], 5
mov r12d, dword [rsp + 0x108]
jmp 0x14000740c
mov edx, r15d
add rdx, r14
mov r8d, esi
add rcx, qword [rsp + 0x78]
jmp 0x1400049b7
add r15d, 2
add r15, r14
mov rcx, r15
xor edx, edx
xor r8d, r8d
call fcn.140051320
mov r15d, eax
lea eax, [rdi + r15]
inc eax
cmp edi, dword [rsp + 0x90]
jne 0x14000753f
mov dword [rsp + 0x90], eax
inc r15d
cmp qword [rsp + 0x68], 0
je 0x140007727
cmp eax, dword [rsp + 0x98]
jbe 0x14000781d
mov byte [rsp + 0x9c], 0
jmp 0x14000772e
inc edi
add edi, 8
mov dword [rsp + 0x88], edi
jmp 0x14000491c
and dl, 0xc7
cmp dl, 5
jne 0x14000775b
cmp cl, 2
jne 0x14000775b
lea ecx, [rax + 2]
mov dword [rsp + 0x108], ecx
lea rdx, [r14 + rcx]
movsxd rcx, dword [r14 + rcx]
add eax, 6
mov dword [rsp + 0x108], eax
mov rdx, qword [rcx + rdx + 4]
lea rcx, [rsp + 0x68]
mov r8d, 4
jmp 0x140004772
mov dword [rsp + 0x88], eax
add r12d, 8
jmp 0x140004914
mov dword [rsp + 0x88], eax
add r15d, 6
jmp 0x140004863
mov rax, qword [rsp + 0x78]
mov ecx, edi
mov rdx, qword [r14 + r12]
mov qword [rax + rcx], rdx
add dword [rsp + 0x88], 8
mov r12d, dword [rsp + 0x108]
jmp 0x1400075c6
add r14, r15
mov rax, qword [rsp + 0x78]
mov ecx, ecx
movzx edx, word [r14 + 4]
mov word [rax + rcx + 4], dx
mov edx, dword [r14]
mov dword [rax + rcx], edx
add dword [rsp + 0x88], 6
mov r15d, dword [rsp + 0x108]
jmp 0x1400075d6
add dl, 2
mov rcx, r15
call fcn.140051ab0
mov rcx, r15
test al, al
mov rsi, rdi
mov rbx, r13
je 0x1400041bb
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], r12
mov dword [rsp + 0x108], 0
lea r8, [rsp + 0x140]
mov rcx, r12
xor edx, edx
call fcn.14002b3c0
mov rcx, r15
test al, al
je 0x1400041bb
jmp 0x1400041e4
mov eax, 1
cmp r8d, 4
jne case.0x1400048ba.1
mov al, byte [r14 + rcx + 1]
and al, 7
xor ecx, ecx
cmp al, 5
sete cl
lea eax, [rcx*4 + 1]
jmp case.0x1400048ba.1
cmp qword [rsp + 0x68], 0
je 0x14000787c
mov r8d, dword [rsp + 0x98]
cmp edi, r8d
jae 0x14000788c
or dl, 0xb8
mov r8, qword [rsp + 0x78]
mov r9d, edi
mov byte [r8 + r9], dl
mov edi, dword [rsp + 0x88]
inc edi
mov dword [rsp + 0x88], edi
cmp qword [rsp + 0x68], 0
je 0x14000787e
mov r8d, dword [rsp + 0x98]
jmp 0x140007894
mov byte [rsp + 0x9c], 0
jmp 0x140005964
mov dword [rsp + 0x88], ecx
mov rax, qword [rsp + 0x48]
mov qword [rax], rsi
mov dil, 1
jmp 0x140007491
mov dword [rsp + 0x88], eax
add r12d, r15d
jmp 0x140004914
mov rcx, qword [rsp + 0x78]
mov qword [rcx + rax], rsi
add dword [rsp + 0x88], 8
cmp qword [rsp + 0x68], 0
je 0x140007717
mov al, byte [rsp + 0x9c]
jmp 0x140006e64
cmp cl, 4
jne 0x1400056b4
cmp dl, 5
jne 0x1400077a1
lea ecx, [rax + 2]
mov dword [rsp + 0x108], ecx
lea rdx, [r14 + rcx]
movsxd rcx, dword [r14 + rcx]
add eax, 6
mov dword [rsp + 0x108], eax
mov rdx, qword [rcx + rdx + 4]
lea rcx, [rsp + 0x68]
mov r8d, 3
call fcn.140008240
mov bl, 1
jmp 0x140004777
lea rcx, [rax + r14]
inc rcx
xor edx, edx
xor r8d, r8d
call fcn.140051320
test eax, eax
js 0x1400056b4
mov esi, eax
mov ecx, dword [rsp + 0x88]
lea eax, [rcx + rsi]
inc eax
cmp ecx, dword [rsp + 0x90]
jne 0x1400077d8
mov dword [rsp + 0x90], eax
inc esi
cmp qword [rsp + 0x68], 0
je 0x1400078da
cmp eax, dword [rsp + 0x98]
jbe 0x140007929
mov byte [rsp + 0x9c], 0
jmp 0x1400078e1
mov byte [rsp + 0x9c], 0
lea edx, [rdi + 8]
cmp edx, r8d
jbe 0x140007847
mov byte [rsp + 0x9c], 0
jmp 0x14000491c
add r14, r12
mov r8d, r15d
mov ecx, edi
add rcx, qword [rsp + 0x78]
mov rdx, r14
call sub.ntdll.dll_memcpy
add dword [rsp + 0x88], r15d
mov r12d, dword [rsp + 0x108]
jmp 0x14000772e
add r14, rax
lea rax, [rcx + r14]
add rax, 4
mov rcx, qword [rsp + 0x78]
mov edx, edi
mov qword [rcx + rdx], rax
jmp 0x14000597a
mov rcx, r15
mov rsi, rdi
mov rbx, r13
jmp 0x1400041bb
mov dword [rsp + 0x88], edx
jmp 0x14000735b
inc edi
add edi, 8
inc edi
inc edi
inc edi
jmp 0x14000756d
mov byte [rsp + 0x9c], 0
lea edx, [rdi + 8]
cmp edx, r8d
jbe 0x1400078f3
mov byte [rsp + 0x9c], 0
cmp edi, r8d
jae 0x14000794d
mov rcx, qword [rsp + 0x78]
mov edx, edi
mov byte [rcx + rdx], 0x48
mov edi, dword [rsp + 0x88]
inc edi
mov dword [rsp + 0x88], edi
cmp qword [rsp + 0x68], 0
je 0x140007883
mov r8d, dword [rsp + 0x98]
jmp 0x140007955
mov dword [rsp + 0x88], eax
add r15d, esi
mov dword [rsp + 0x108], r15d
mov bl, 1
jmp 0x14000491c
mov rdx, qword [rsp + 0x78]
mov r8d, edi
mov qword [rdx + r8], rcx
mov edi, dword [rsp + 0x88]
add edi, 8
mov dword [rsp + 0x88], edi
cmp qword [rsp + 0x68], 0
je 0x140007881
mov r8d, dword [rsp + 0x98]
jmp 0x1400078a4
mov edx, r15d
add rdx, r14
mov r8d, esi
add rcx, qword [rsp + 0x78]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x88], esi
mov r15d, dword [rsp + 0x108]
jmp 0x1400078e1
mov byte [rsp + 0x9c], 0
cmp edi, r8d
jae 0x14000798b
mov rcx, qword [rsp + 0x78]
mov edx, edi
mov byte [rcx + rdx], 0x8b
mov edi, dword [rsp + 0x88]
inc edi
mov dword [rsp + 0x88], edi
cmp qword [rsp + 0x68], 0
je 0x140007885
mov r8d, dword [rsp + 0x98]
jmp 0x140007993
mov byte [rsp + 0x9c], 0
cmp edi, r8d
jae 0x140007810
movzx eax, al
lea eax, [rax + rax*8]
mov rcx, qword [rsp + 0x78]
mov edx, edi
mov byte [rcx + rdx], al
jmp 0x140006d57
mov byte [rsp + 0x198], 0
mov rax, qword [rsp + 0x168]
jmp 0x14000549b
mov byte [rsp + 0x198], 0
mov rax, qword [rsp + 0x168]
jmp 0x1400054cf
mov byte [rsp + 0x198], 0
mov rax, qword [rsp + 0x168]
jmp 0x14000550e
mov byte [rsp + 0x198], 0
mov rax, qword [rsp + 0x168]
jmp 0x140005542
mov byte [rsp + 0x198], 0
mov rax, qword [rsp + 0x168]
jmp 0x140005576
mov byte [rsp + 0x198], 0
jmp 0x14000559f
mov dword [rsp + 0x88], edx
jmp 0x1400056c3
mov byte [rsp + 0x9c], 0
jmp 0x1400056c3