Function at 0x140017f80
Capabilities:
Check for software breakpoints
Get system information on windows
Parse credit card information

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1d8
mov qword [rsp + 0x38], r9
mov rax, qword [0x140062018]
xor rax, rsp
mov qword [rsp + 0x1d0], rax
cmp byte [rcx + 0x1c], 0
je 0x1400198aa
mov r14, r8
mov rsi, rdx
mov r13, rcx
mov edi, dword [rcx + 0x18]
test dil, 4
jne 0x140019caf
mov rcx, rsi
mov rdi, rcx
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], rcx
mov dword [rsp + 0x140], 0
movzx eax, byte [rcx]
cmp eax, 0x48
jne 0x140019507
cmp byte [rdi + 1], 0xff
mov rcx, rdi
je 0x1400194e3
cmp rdi, rcx
jne 0x140017fcd
cmp rdi, rsi
jne 0x140019cda
mov qword [rsp + 0xe8], r13
mov qword [rsp + 0xf0], rsi
mov dword [rsp + 0xf8], 0
cmp byte [r13 + 0x1c], 0
je 0x1400198aa
mov edi, dword [r13 + 0x18]
and edi, 1
shl edi, 0x1e
lea rsi, [r13 + 1]
mov eax, dword [0x140062d6c]
mov ecx, dword [0x1400624b0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140019452
mov r12d, dword [0x140062d68]
mov dword [rsp + 0x20], edi
lea rdx, [rsp + 0x90]
mov rcx, rsi
mov r8d, r12d
mov r9, rdi
call fcn.14001b510
mov eax, dword [0x140064b24]
mov ecx, dword [0x1400624b0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140018bd7
lea rcx, [0x140064b28]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [rsp + 0xa0]
test al, al
jne 0x1400187eb
xor r15d, r15d
xor ebx, ebx
mov rsi, qword [0x140064b18]
test rsi, rsi
jne 0x140018108
mov ecx, 0x18
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov qword [rax], 0x18
mov qword [0x140064b18], rax
mov al, byte [rsp + 0xa0]
test al, al
mov qword [rsp + 0x48], r14
jne 0x140018810
cmp qword [rsi + 8], 0
jne 0x140018182
mov ecx, 0x20
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov dword [rax + 0x18], 0
mov rax, qword [rsi + 8]
cmp rax, qword [rsi + 0x10]
jne 0x14001814e
mov rcx, rsi
call fcn.14001b870
mov rax, qword [rsi + 8]
mov rcx, qword [rsi]
lea rax, [rax + rax*2]
mov qword [rcx + rax*8], r15
mov qword [rcx + rax*8 + 8], rbx
mov qword [rcx + rax*8 + 0x10], rdi
inc qword [rsi + 8]
mov rsi, qword [0x140064b18]
test rsi, rsi
je 0x140019ccf
cmp qword [rsi + 8], 0
je 0x140019ccf
mov rbp, qword [rsi]
add rbp, 0x10
mov rdi, qword [rbp]
test rdi, rdi
je 0x14001a150
test r12d, r12d
je 0x14001a150
cmp qword [rdi + 8], 0
jne 0x1400194da
mov eax, dword [0x140062d6c]
mov ecx, dword [0x1400624b0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140019496
mov ebx, dword [0x140062d68]
mov eax, r12d
xor edx, edx
div ebx
sub ebx, edx
test edx, edx
cmove ebx, edx
add ebx, r12d
lea r14, [rdi + 0x10]
mov dword [rdi + 0x10], ebx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp byte [rsp + 0xa0], 0
jne 0x1400188fb
mov edx, ebx
xor ecx, ecx
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x14001a142
mov qword [rdi + 8], rax
cmp dword [r14], 0
je 0x14001a150
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xd8], rdi
mov byte [rsp + 0xe0], 1
lea rcx, [0x140064b28]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x140064b24]
mov ecx, dword [0x1400624b0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140018c20
lea rsi, [0x140064b28]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rbp, [rsp + 0x90]
mov rcx, rdi
mov rdx, rbp
call fcn.14001ba50
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [rbp + 0x38], 0
je 0x14001a15d
mov rbx, qword [rsp + 0x90]
mov qword [rsp + 0x58], rbx
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x60], eax
mov rbp, qword [rsp + 0xa0]
mov qword [rsp + 0x68], rbp
mov rdx, qword [rsp + 0xa8]
mov qword [rsp + 0x70], rdx
mov ecx, dword [rsp + 0xb0]
mov dword [rsp + 0x78], ecx
movups xmm0, xmmword [rsp + 0xb4]
movups xmmword [rsp + 0x7c], xmm0
mov cl, byte [rsp + 0xc4]
mov byte [rsp + 0x8c], cl
mov dword [rsp + 0x98], 0
mov byte [rsp + 0xc4], 0
mov rdi, qword [rsp + 0x38]
mov qword [rdi], 0
test rbx, rbx
je 0x14001834c
test rbp, rbp
je 0x14001939c
test rdx, rdx
je 0x14001939c
test eax, eax
je 0x14001939c
test cl, cl
je 0x14001939c
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsp + 0x78]
lea edx, [rcx + 8]
cmp qword [rsp + 0x58], 0
je 0x140019ced
cmp edx, dword [rsp + 0x88]
ja 0x140019d0d
mov rdx, qword [rsp + 0x68]
mov qword [rdx + rcx], rax
add dword [rsp + 0x78], 8
cmp qword [rsp + 0x58], 0
je 0x1400183bd
mov al, byte [rsp + 0x8c]
cmp qword [rsp + 0x68], 0
je 0x14001939c
cmp qword [rsp + 0x70], 0
je 0x14001939c
cmp dword [rsp + 0x60], 0
je 0x14001939c
test al, al
je 0x14001939c
mov ecx, dword [rsp + 0xf8]
add rcx, qword [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov edx, dword [rsp + 0x78]
lea ecx, [rdx + 8]
cmp qword [rsp + 0x58], 0
je 0x140019d1c
cmp ecx, dword [rsp + 0x88]
ja 0x140019d25
mov rcx, qword [rsp + 0x68]
mov qword [rcx + rdx], rax
mov ecx, dword [rsp + 0x78]
add ecx, 8
mov dword [rsp + 0x78], ecx
cmp qword [rsp + 0x58], 0
je 0x140018440
mov al, byte [rsp + 0x8c]
cmp qword [rsp + 0x68], 0
je 0x14001938d
cmp qword [rsp + 0x70], 0
je 0x14001938d
cmp dword [rsp + 0x60], 0
je 0x14001938d
test al, al
je 0x14001938d
mov eax, dword [rsp + 0xf8]
mov rdx, qword [rsp + 0xf0]
cmp byte [rdx + rax], 0x48
jne 0x140018460
cmp byte [rdx + rax + 1], 0xb8
je 0x140019ef0
mov dword [rsp + 0x7c], ecx
mov dword [rsp + 0x80], ecx
cmp byte [r13 + 0x1c], 0
je 0x1400198aa
mov eax, dword [r13 + 0x18]
and eax, 2
mov r13d, eax
shr r13d, 1
xor ecx, ecx
test eax, eax
sete cl
lea r15d, [rcx + rcx*2]
add r15d, 0xa
mov r9d, dword [rsp + 0xf8]
cmp r9d, r15d
jae 0x140018c69
mov r12d, r15d
xor r14d, r14d
mov rdx, qword [rsp + 0xf0]
mov eax, r9d
test r14b, 1
jne 0x14001975a
movzx ecx, byte [rdx + rax]
cmp rcx, 0xf
je 0x140019796
mov ebx, ecx
and bl, 0xfc
cmp bl, 0x88
je 0x1400197d5
lea ebp, [rcx - 0x40]
cmp ebp, 2
jb 0x140018738
cmp ecx, 0x44
je 0x140019812
cmp ecx, 0x45
je 0x140019851
mov ebx, ecx
and bl, 0xfa
cmp bl, 0x48
jne 0x14001865a
mov ecx, dword [rsp + 0x78]
lea r10d, [rcx + 1]
cmp ecx, dword [rsp + 0x80]
jne 0x14001851f
mov dword [rsp + 0x80], r10d
cmp qword [rsp + 0x58], 0
je 0x140019890
cmp r10d, dword [rsp + 0x88]
ja 0x14001989a
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov r10d, dword [rsp + 0x78]
inc r10d
mov dword [rsp + 0x78], r10d
mov r9d, dword [rsp + 0xf8]
mov rdx, qword [rsp + 0xf0]
lea eax, [r9 + 1]
mov dword [rsp + 0xf8], eax
movzx ecx, byte [rdx + rax]
cmp ecx, 0x82
jle 0x140018592
cmp ecx, 0x83
je 0x1400186c9
cmp ecx, 0x85
jne 0x1400185a7
jmp 0x140019b22
cmp ecx, 0x81
je 0x14001956a
cmp ecx, 0x2b
je 0x140019b22
mov ebx, ecx
and bl, 0xfd
cmp bl, 0x89
jne 0x1400198b5
lea ebx, [r9 + 2]
movzx esi, byte [rdx + rbx]
mov ecx, esi
shr ecx, 6
mov edi, 2
cmp ecx, 1
jne 0x14001864b
and sil, 7
xor ebp, ebp
cmp sil, 4
sete bpl
add ebp, edi
lea ecx, [r10 + rbp]
inc ecx
cmp r10d, dword [rsp + 0x80]
jne 0x1400185f3
mov dword [rsp + 0x80], ecx
inc ebp
cmp qword [rsp + 0x58], 0
je 0x1400198fe
cmp ecx, dword [rsp + 0x88]
ja 0x140019907
add rdx, rax
mov r8d, ebp
mov ecx, r10d
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], ebp
mov eax, dword [rsp + 0xf8]
add eax, ebp
mov dword [rsp + 0xf8], eax
mov r9d, dword [rsp + 0xf8]
cmp r9d, r15d
jb 0x1400184a9
jmp 0x140018c6c
mov ebp, 1
cmp ecx, 3
je 0x1400185dc
jmp 0x140019f3b
cmp cl, 0x66
je 0x14001a0be
mov ebx, ecx
and bl, 0xf0
cmp bl, 0x50
jne 0x1400195d5
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 1]
cmp ecx, dword [rsp + 0x80]
jne 0x140018688
mov dword [rsp + 0x80], ebp
cmp qword [rsp + 0x58], 0
je 0x14001a0fd
cmp ebp, dword [rsp + 0x88]
ja 0x14001a01c
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
inc dword [rsp + 0x78]
mov r9d, dword [rsp + 0xf8]
inc r9d
mov dword [rsp + 0xf8], r9d
jmp 0x140018635
movzx ecx, byte [rdx + rax + 1]
and ecx, 0xfffffff8
cmp ecx, 0xe8
jne 0x14001a16d
lea ecx, [r10 + 3]
cmp r10d, dword [rsp + 0x80]
jne 0x1400186f2
mov dword [rsp + 0x80], ecx
cmp qword [rsp + 0x58], 0
je 0x14001a164
cmp ecx, dword [rsp + 0x88]
ja 0x14001a4b1
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, r10d
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 3
mov eax, dword [rsp + 0xf8]
add eax, 3
jmp 0x14001862e
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 1]
cmp ecx, dword [rsp + 0x80]
jne 0x14001874f
mov dword [rsp + 0x80], ebp
cmp qword [rsp + 0x58], 0
je 0x14001a6a2
cmp ebp, dword [rsp + 0x88]
ja 0x14001a6ab
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov ebp, dword [rsp + 0x78]
inc ebp
mov dword [rsp + 0x78], ebp
mov r9d, dword [rsp + 0xf8]
mov rdx, qword [rsp + 0xf0]
inc r9d
mov dword [rsp + 0xf8], r9d
movzx eax, byte [rdx + r9]
mov ecx, eax
and cl, 0xf0
cmp cl, 0x50
jne 0x14001a6c3
lea eax, [rbp + 1]
cmp ebp, dword [rsp + 0x80]
jne 0x1400187bf
mov dword [rsp + 0x80], eax
cmp qword [rsp + 0x58], 0
je 0x14001a6ba
cmp eax, dword [rsp + 0x88]
ja 0x14001a01c
mov rax, qword [rsp + 0x68]
mov ecx, ebp
mov dl, byte [rdx + r9]
mov byte [rax + rcx], dl
jmp 0x1400186ad
mov rcx, qword [rsp + 0x90]
test rcx, rcx
je 0x140019f7b
mov r15, qword [rsp + 0x98]
lea rbx, [rcx + r15]
dec rbx
jmp 0x1400180d2
mov qword [rsp + 0x40], rbx
mov r8, qword [rsi]
mov rbx, qword [rsi + 8]
mov rbp, r8
test rbx, rbx
jle 0x140018862
mov rbp, r8
mov rcx, rbx
mov rdx, rbx
mov rax, qword [rsp + 0x40]
shr rdx, 1
lea rdi, [rdx + rdx*2]
lea rdi, [rdi*8]
add rdi, rbp
cmp qword [rdi], r15
jae 0x14001a1e5
add rdi, 0x18
not rdx
add rdx, rcx
mov rbp, rdi
mov rcx, rdx
test rdx, rdx
jg 0x140018832
lea rcx, [rbx + rbx*2]
lea rax, [r8 + rcx*8]
cmp rbp, rax
jne 0x14001a1fa
mov ecx, 0x20
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov dword [rax + 0x18], 0
mov rax, qword [rsi]
mov r14, qword [rsi + 8]
sub rbp, rax
sar rbp, 3
movabs rbx, 0xaaaaaaaaaaaaaaab
imul rbx, rbp
cmp rbx, r14
jne 0x14001a218
mov rcx, rbx
cmp rbx, qword [rsi + 0x10]
jne 0x1400188cc
mov rcx, rsi
call fcn.14001b870
mov rax, qword [rsi]
mov rcx, qword [rsi + 8]
lea rcx, [rcx + rcx*2]
mov qword [rax + rcx*8], r15
mov rdx, qword [rsp + 0x40]
mov qword [rax + rcx*8 + 8], rdx
mov qword [rax + rcx*8 + 0x10], rdi
inc qword [rsi + 8]
mov rax, qword [rsi]
lea rcx, [rbx + rbx*2]
lea rbp, [rax + rcx*8]
add rbp, 0x10
jmp 0x140018189
mov r15, qword [rsp + 0x90]
test r15, r15
je 0x140019f7b
mov r12, rax
mov rsi, qword [rsp + 0x98]
mov eax, dword [0x140064b60]
mov ecx, dword [0x1400624b0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x1400189b1
lea rcx, [0x140064b60]
call fcn.14002e8cc
cmp dword [0x140064b60], 0xffffffff
jne 0x1400189b1
lea rcx, str.kernelbase.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x140064b50], rax
mov qword [0x140064b58], 0
test rax, rax
je 0x1400189a5
lea rdx, str.VirtualAlloc2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140064b58], rax
test rax, rax
jne 0x1400189a5
mov rcx, qword [0x140064b50]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140064b50], 0
lea rcx, [0x140064b60]
call fcn.14002e86c
mov rax, qword [0x140064b58]
test rax, rax
jne 0x14001a2f0
lea rax, [rdi + 1]
add r15, rsi
mov ebp, ebx
mov rbx, rax
mov qword [rsp + 0x20], r15
mov rcx, rax
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001bcb0
test rax, rax
je 0x14001a148
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140018220
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001bcb0
test rax, rax
je 0x14001a148
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140018220
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001bcb0
test rax, rax
je 0x14001a148
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140018220
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001bcb0
test rax, rax
je 0x14001a148
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140018220
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001bcb0
test rax, rax
je 0x14001a148
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140018220
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001bcb0
test rax, rax
je 0x14001a148
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140018220
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001bcb0
test rax, rax
je 0x14001a148
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140018220
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001bcb0
test rax, rax
je 0x14001a148
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140018220
xor ecx, ecx
mov rdx, rbp
jmp 0x140018205
lea rcx, [0x140064b24]
call fcn.14002e8cc
cmp dword [0x140064b24], 0xffffffff
jne 0x1400180b1
lea rcx, [0x140064b28]
mov edx, 0xfa0
mov r8d, 0x1000000
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
mov byte [0x140064b20], 1
lea rcx, [0x140064b24]
call fcn.14002e86c
jmp 0x1400180b1
lea rcx, [0x140064b24]
call fcn.14002e8cc
cmp dword [0x140064b24], 0xffffffff
jne 0x140018278
lea rcx, [0x140064b28]
mov edx, 0xfa0
mov r8d, 0x1000000
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
mov byte [0x140064b20], 1
lea rcx, [0x140064b24]
call fcn.14002e86c
jmp 0x140018278
xor r14d, r14d
cmp r9d, 0x64
ja 0x14001938d
test r14b, 1
jne 0x140018d8c
mov eax, dword [rsp + 0x78]
cmp qword [rsp + 0x58], 0
je 0x140019d79
mov ecx, r9d
add rcx, qword [rsp + 0xf0]
mov edx, dword [rsp + 0x88]
cmp eax, edx
jae 0x140019d8c
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rax], 0xff
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x140019d7b
mov edx, dword [rsp + 0x88]
cmp eax, edx
jae 0x140019d99
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov byte [rdx + rax], 0x25
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x140019d7d
mov edx, dword [rsp + 0x88]
lea ebp, [rax + 4]
cmp ebp, edx
ja 0x140019da6
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov dword [rdx + rax], 0
mov eax, dword [rsp + 0x78]
add eax, 4
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x140019d80
mov edx, dword [rsp + 0x88]
lea ebp, [rax + 8]
cmp ebp, edx
ja 0x140019db3
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov qword [rdx + rax], rcx
add dword [rsp + 0x78], 8
cmp qword [rsp + 0x58], 0
je 0x140018d8c
mov al, byte [rsp + 0x8c]
cmp qword [rsp + 0x68], 0
je 0x14001938d
cmp qword [rsp + 0x70], 0
je 0x14001938d
cmp dword [rsp + 0x60], 0
je 0x14001938d
test al, al
je 0x14001938d
cmp byte [rsp + 0x8c], 0
je 0x14001938d
cmp qword [rsp + 0x58], 0
je 0x14001938d
mov eax, dword [rsp + 0x78]
mov r12d, dword [rsp + 0x7c]
mov dword [rsp + 0x84], eax
add r12, qword [rsp + 0x70]
je 0x14001938d
mov r14d, dword [rsp + 0xf8]
mov rsi, qword [rsp + 0xf0]
lea rdx, [rsp + 0x130]
mov qword [rdx], 0
mov rcx, rsi
xor r8d, r8d
call qword [sym.imp.ntdll.dll_RtlLookupFunctionEntry]
test rax, rax
je 0x1400190b8
mov rcx, qword [rsp + 0x130]
mov edi, dword [rax]
add edi, ecx
mov eax, dword [rax + 8]
lea rbp, [rcx + rax]
movzx eax, byte [rcx + rax + 2]
lea rbx, [rax + rax]
add rbx, 4
mov rcx, rbx
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov r15, rax
mov rcx, rax
mov rdx, rbp
mov r8, rbx
call sub.ntdll.dll_memcpy
cmp esi, edi
jne 0x1400190af
movzx eax, byte [r15 + 2]
test eax, eax
je case.0x140019437.4
movzx ebp, byte [r15 + 5]
mov edx, ebp
and edx, 0xf
cmp edx, 4
jne 0x14001941a
mov cl, 2
mov ebx, ecx
cmp al, cl
jb case.0x140019437.4
mov ecx, dword [rsp + 0x80]
mov r10b, byte [r15 + 1]
cmp ecx, r14d
jae 0x140018e7f
movzx edx, r10b
cmp ecx, edx
jb 0x1400190af
lea r8, [r15 + 1]
xor ebp, ebp
lea r9, [0x14001b4d8]
mov edx, ebp
movzx ecx, bpl
movzx ecx, byte [r15 + rcx*2 + 4]
cmp r14d, ecx
jae 0x140018eeb
mov ebp, ebx
add bpl, dl
cmp bpl, al
jae case.0x140018ee5.4
movzx edx, bpl
movzx esi, byte [r15 + rdx*2 + 5]
mov ecx, esi
and ecx, 0xf
cmp ecx, 4
jne 0x140018ed1
mov bl, 2
mov ecx, eax
sub ecx, edx
movzx edx, bl
cmp ecx, edx
jge 0x140018e8c
jmp case.0x140018ee5.4
cmp ecx, 0xa
ja case.0x140018ee5.4
mov bl, 3
mov ecx, ecx
movsxd rcx, dword [r9 + rcx*4]
add rcx, r9
jmp rcx
mov bl, 1
jmp case.0x140018ee5.5
sub al, dl
mov cl, byte [r15]
test cl, 0x20
jne 0x1400190af
mov ebx, dword [rsp + 0x78]
mov ebp, dword [rsp + 0x88]
add ebx, 3
and ebx, 0xfffffffc
cmp ebx, ebp
ja 0x140019789
mov dword [rsp + 0x78], ebx
cmp byte [rsp + 0x8c], 0
je 0x1400190af
and cl, 0xc7
mov byte [r15], cl
mov byte [r15 + 2], al
movzx ecx, r10b
cmp r14d, ecx
jae 0x140018f3a
mov byte [r8], r14b
cmp qword [rsp + 0x58], 0
je 0x140019edc
lea rcx, [rbx + 4]
cmp rcx, rbp
ja 0x140019789
mov rcx, qword [rsp + 0x68]
mov ebp, dword [r15]
mov dword [rcx + rbx], ebp
mov ecx, dword [rsp + 0x78]
add ecx, 4
cmp byte [rsp + 0x8c], 0
mov dword [rsp + 0x78], ecx
je 0x1400190af
movzx esi, al
add rsi, rsi
cmp qword [rsp + 0x58], 0
je 0x140019ee5
mov ecx, ecx
lea rax, [rsi + rcx]
mov ebp, dword [rsp + 0x88]
cmp rax, rbp
ja 0x140019789
movzx eax, dl
lea rdx, [r15 + rax*2]
add rdx, 4
add rcx, qword [rsp + 0x68]
mov r8, rsi
call sub.ntdll.dll_memcpy
add esi, dword [rsp + 0x78]
cmp byte [rsp + 0x8c], 0
mov dword [rsp + 0x78], esi
je 0x1400190af
add esi, 3
and esi, 0xfffffffc
mov ecx, dword [rsp + 0x88]
cmp esi, ecx
ja 0x140019789
mov dword [rsp + 0x78], esi
lea eax, [rsi + 4]
cmp qword [rsp + 0x58], 0
je 0x140019914
cmp eax, ecx
ja 0x140019789
mov eax, dword [rsp + 0x7c]
mov rcx, qword [rsp + 0x68]
mov dword [rcx + rsi], eax
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + 4]
cmp byte [rsp + 0x8c], 0
mov dword [rsp + 0x78], eax
je 0x1400190af
cmp qword [rsp + 0x58], 0
je 0x140019914
add ecx, 8
cmp ecx, dword [rsp + 0x88]
ja 0x140019789
mov ecx, dword [rsp + 0x84]
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov dword [rdx + rax], ecx
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + 4]
cmp byte [rsp + 0x8c], 0
mov dword [rsp + 0x78], eax
je 0x1400190af
cmp qword [rsp + 0x58], 0
je 0x140019917
add ecx, 8
cmp ecx, dword [rsp + 0x88]
ja 0x140019789
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov dword [rcx + rax], ebx
add dword [rsp + 0x78], 4
cmp byte [rsp + 0x8c], 0
je 0x1400190af
mov r8, qword [rsp + 0x70]
add rsi, r8
mov rcx, rsi
mov edx, 1
call qword [sym.imp.ntdll.dll_RtlAddFunctionTable]
mov rcx, r15
call qword [sym.imp.mozglue.dll_free]
mov r9d, dword [rsp + 0xf8]
test r9, r9
je 0x140019dc2
mov rdx, qword [rsp + 0xe8]
mov r8, qword [rsp + 0xf0]
lea r14, [rsp + 0x168]
mov qword [r14 - 0x38], rdx
mov qword [r14 - 0x30], r8
mov qword [r14 - 0x28], r9
xor edi, edi
mov qword [r14 - 0x20], rdi
mov qword [r14 - 0x10], rdi
mov qword [r14 - 8], 0x20
mov qword [r14 - 0x18], r14
mov byte [r14 + 0x20], 1
lea rsi, [rsp + 0x190]
mov rcx, rsi
call fcn.14001b6e0
cmp qword [rsi + 0x10], rdi
je 0x1400192ed
cmp byte [rsp + 0x188], 0
je 0x1400192ed
test r13b, r13b
jne 0x140019de6
lea rsi, [rsp + 0x150]
mov rax, qword [rsi + 8]
cmp rax, qword [rsi + 0x10]
je 0x140019e10
mov rcx, qword [rsp + 0x150]
mov byte [rcx + rax], 0x49
mov rax, qword [rsp + 0x158]
inc rax
mov qword [rsp + 0x158], rax
inc dword [rsp + 0x148]
cmp rax, qword [rsp + 0x160]
je 0x140019e32
mov rcx, qword [rsp + 0x150]
mov byte [rcx + rax], 0xbb
mov rax, qword [rsp + 0x158]
inc rax
mov qword [rsp + 0x158], rax
inc dword [rsp + 0x148]
lea rcx, [rax + 8]
cmp rcx, qword [rsp + 0x160]
ja 0x140019e54
mov rcx, qword [rsp + 0x150]
mov rdx, qword [rsp + 0x48]
mov qword [rcx + rax], rdx
mov rax, qword [rsp + 0x158]
add rax, 8
mov qword [rsp + 0x158], rax
add dword [rsp + 0x148], 8
cmp rax, qword [rsp + 0x160]
je 0x140019e76
mov rcx, qword [rsp + 0x150]
mov byte [rcx + rax], 0x41
mov rax, qword [rsp + 0x158]
inc rax
mov qword [rsp + 0x158], rax
inc dword [rsp + 0x148]
cmp rax, qword [rsp + 0x160]
je 0x140019e98
mov rcx, qword [rsp + 0x150]
mov byte [rcx + rax], 0xff
mov rax, qword [rsp + 0x158]
inc rax
mov qword [rsp + 0x158], rax
inc dword [rsp + 0x148]
cmp rax, qword [rsp + 0x160]
je 0x140019eba
mov rcx, qword [rsp + 0x150]
mov byte [rcx + rax], 0xe3
inc qword [rsp + 0x158]
inc dword [rsp + 0x148]
cmp qword [rsp + 0x1a0], 0
je 0x1400192ed
cmp byte [rsp + 0x188], 0
je 0x1400192ed
mov r8, qword [rsp + 0x158]
test r8, r8
je 0x1400192e5
mov rdx, qword [rsp + 0x150]
mov ecx, dword [rsp + 0x14c]
add rcx, qword [rsp + 0x138]
call sub.ntdll.dll_memcpy
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov eax, dword [rsp + 0x158]
add dword [rsp + 0x14c], eax
mov qword [rsp + 0x158], 0
mov rax, qword [rsp + 0x38]
mov qword [rax], r12
mov eax, dword [0x140062d64]
mov ecx, dword [0x1400624b0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140019526
mov rsi, qword [rsp + 0x198]
mov rbp, qword [rsp + 0x1a0]
test rbp, rbp
je 0x140019363
shl rbp, 4
add rbp, rsi
mov edi, dword [0x140062d60]
lea r15, [rsp + 0x100]
mov rbx, qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r8d, dword [rsi]
mov rcx, qword [rsi + 8]
mov rdx, rdi
mov r9, r15
call rbx
add rsi, 0x10
cmp rsi, rbp
jne 0x140019343
mov rsi, qword [rsp + 0x198]
lea rax, [rsp + 0x1b0]
mov qword [rax - 0x10], 0
cmp rsi, rax
jne 0x140019dcd
mov rcx, qword [rsp + 0x150]
cmp rcx, r14
jne 0x140019ddb
mov rax, qword [rsp + 0x38]
cmp qword [rax], 0
je 0x140019d36
mov rax, qword [rsp + 0x38]
cmp qword [rax], 0
setne sil
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400193cc
mov r8d, dword [rsp + 0x60]
test r8d, r8d
je 0x1400193cc
lea r9, [rsp + 0x60]
mov edx, dword [r9 + 0x28]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp byte [rsp + 0xc8], 0
je 0x1400193f4
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x1400193f4
mov r8d, dword [rsp + 0x98]
test r8d, r8d
jne 0x140019cf6
mov rcx, qword [rsp + 0x1d0]
xor rcx, rsp
call fcn.14002fae0
mov eax, esi
add rsp, 0x1d8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp edx, 0xa
ja case.0x140019437.4
mov bl, 1
mov cl, 3
mov edx, edx
lea rdi, [0x14001b4ac]
movsxd rdx, dword [rdi + rdx*4]
add rdx, rdi
jmp rdx
cmp bpl, 0x1f
ja case.0x140019437.4
shr bpl, 4
add bpl, 2
mov ecx, ebp
jmp case.0x140019437.5
lea rcx, [0x140062d6c]
call fcn.14002e8cc
cmp dword [0x140062d6c], 0xffffffff
jne 0x14001806b
lea rbp, [rsp + 0x130]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbp + 0x28]
mov dword [0x140062d68], eax
lea rcx, [0x140062d6c]
call fcn.14002e86c
jmp 0x14001806b
lea rcx, [0x140062d6c]
call fcn.14002e8cc
cmp dword [0x140062d6c], 0xffffffff
jne 0x1400181cf
lea rsi, [rsp + 0x130]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsi + 0x28]
mov dword [0x140062d68], eax
lea rcx, [0x140062d6c]
call fcn.14002e86c
jmp 0x1400181cf
lea r14, [rdi + 0x10]
jmp 0x140018224
mov eax, 3
cmp byte [rdi + 2], 0x25
mov rcx, rdi
jne 0x140018004
lea rcx, [rdi + rax]
movsxd rax, dword [rdi + rax]
mov rcx, qword [rax + rcx + 4]
jmp 0x140018004
cmp eax, 0xff
jne 0x14001a83b
cmp byte [rdi + 1], 0x25
mov rcx, rdi
jne 0x140018004
mov eax, 2
jmp 0x1400194f5
lea rcx, [0x140062d64]
call fcn.14002e8cc
cmp dword [0x140062d64], 0xffffffff
jne 0x140019312
lea rsi, [rsp + 0x100]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsi + 4]
mov dword [0x140062d60], eax
lea rcx, [0x140062d64]
call fcn.14002e86c
jmp 0x140019312
mov cl, byte [rdx + rax + 1]
and cl, 0xf8
cmp cl, 0xe8
jne 0x14001938d
lea ecx, [r10 + 6]
cmp r10d, dword [rsp + 0x80]
jne 0x14001958f
mov dword [rsp + 0x80], ecx
cmp qword [rsp + 0x58], 0
je 0x14001a96a
cmp ecx, dword [rsp + 0x88]
ja 0x14001a973
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, r10d
movzx ebp, word [rdx + 4]
mov word [rax + rcx + 4], bp
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 6
mov eax, dword [rsp + 0xf8]
add eax, 6
jmp 0x14001862e
cmp cl, 0x90
je 0x140018671
cmp ecx, 0x80
je 0x14001a980
cmp ecx, 0x65
je 0x14001a9e5
mov ebx, ecx
and bl, 0xf8
cmp bl, 0xb8
je 0x14001ae32
cmp ecx, 0xcb
jg 0x140019674
cmp ecx, 0x84
jg 0x14001969c
cmp ecx, 0x33
je 0x140019706
cmp ecx, 0x83
jne 0x1400196d0
mov cl, byte [rdx + rax + 1]
cmp cl, 0xc0
jb 0x14001ae26
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 3]
cmp ecx, dword [rsp + 0x80]
jne 0x14001964e
mov dword [rsp + 0x80], ebp
cmp qword [rsp + 0x58], 0
je 0x14001b414
cmp ebp, dword [rsp + 0x88]
ja 0x14001a884
add rdx, rax
mov rax, qword [rsp + 0x68]
jmp 0x14001ad9a
cmp ecx, 0xe7
jg 0x1400196b5
cmp ecx, 0xcc
je 0x140018671
cmp ecx, 0xd1
jne 0x1400196d0
cmp byte [rdx + rax + 1], 0xc0
jae 0x140019706
jmp 0x14001938d
cmp ecx, 0x85
je 0x14001b1b0
cmp ecx, 0xc3
jne 0x1400196d0
jmp 0x140018671
lea ebp, [rcx - 0xe8]
cmp ebp, 2
jb 0x14001b1e8
cmp ecx, 0xf6
je 0x14001b230
lea ebp, [rcx - 0x73]
cmp bpl, 2
jbe 0x14001aa3d
cmp cl, 0xff
jne 0x14001aa79
movzx ebp, byte [rdx + rax + 1]
mov ecx, ebp
shr ecx, 3
and ecx, 7
cmp bpl, 0xc0
jb 0x14001aadc
cmp ecx, 6
jne 0x14001ab27
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 2]
cmp ecx, dword [rsp + 0x80]
jne 0x14001971d
mov dword [rsp + 0x80], ebp
cmp qword [rsp + 0x58], 0
je 0x14001aa70
cmp ebp, dword [rsp + 0x88]
ja 0x140019a64
mov rbp, qword [rsp + 0x68]
movzx eax, word [rdx + rax]
mov word [rbp + rcx], ax
add dword [rsp + 0x78], 2
mov r9d, dword [rsp + 0xf8]
add r9d, 2
jmp 0x1400186bc
movzx ecx, byte [rdx + rax]
cmp ecx, 0xcc
je 0x140019772
cmp ecx, 0x90
jne 0x14001aec3
inc rax
mov dword [rsp + 0xf8], eax
cmp rax, r12
jb 0x14001975a
mov r9d, eax
jmp 0x140018c6c
mov byte [rsp + 0x8c], 0
jmp 0x1400190af
mov ecx, dword [rsp + 0x78]
lea esi, [rcx + 1]
cmp ecx, dword [rsp + 0x80]
jne 0x1400197ad
mov dword [rsp + 0x80], esi
cmp qword [rsp + 0x58], 0
je 0x140019923
cmp esi, dword [rsp + 0x88]
jbe 0x140019b68
mov byte [rsp + 0x8c], 0
mov esi, ecx
jmp 0x140019927
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 1]
cmp ecx, dword [rsp + 0x80]
jne 0x1400197ec
mov dword [rsp + 0x80], ebp
cmp qword [rsp + 0x58], 0
je 0x1400199c4
cmp ebp, dword [rsp + 0x88]
jbe 0x140019b93
mov byte [rsp + 0x8c], 0
jmp 0x140019bab
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 1]
cmp ecx, dword [rsp + 0x80]
jne 0x140019829
mov dword [rsp + 0x80], ebp
cmp qword [rsp + 0x58], 0
je 0x1400199cd
cmp ebp, dword [rsp + 0x88]
jbe 0x140019c4d
mov byte [rsp + 0x8c], 0
mov ebp, ecx
jmp 0x1400199d1
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 1]
cmp ecx, dword [rsp + 0x80]
jne 0x140019868
mov dword [rsp + 0x80], ebp
cmp qword [rsp + 0x58], 0
je 0x140019a22
cmp ebp, dword [rsp + 0x88]
jbe 0x140019c78
mov byte [rsp + 0x8c], 0
mov ebp, ecx
jmp 0x140019a26
mov dword [rsp + 0x78], r10d
jmp 0x140018562
mov byte [rsp + 0x8c], 0
mov r10d, ecx
jmp 0x140018562
int3
mov ebx, ecx
and bl, 0xf8
cmp bl, 0xb8
jne 0x140019a83
lea ecx, [r10 + 9]
cmp r10d, dword [rsp + 0x80]
jne 0x1400198d8
mov dword [rsp + 0x80], ecx
cmp qword [rsp + 0x58], 0
je 0x14001a136
cmp ecx, dword [rsp + 0x88]
jbe 0x14001a1bb
mov byte [rsp + 0x8c], 0
jmp 0x14001a13a
mov dword [rsp + 0x78], ecx
jmp 0x14001862c
mov byte [rsp + 0x8c], 0
jmp 0x14001862c
add eax, 4
add eax, 4
mov dword [rsp + 0x78], eax
jmp 0x140019099
mov dword [rsp + 0x78], esi
lea eax, [r9 + 1]
mov dword [rsp + 0xf8], eax
movzx ecx, byte [rdx + rax]
lea ebp, [rcx - 0x10]
cmp ebp, 2
jb 0x14001998b
cmp ecx, 5
je 0x140019f86
cmp ecx, 0x1f
jne 0x140019fbf
lea ecx, [rsi + 1]
cmp esi, dword [rsp + 0x80]
jne 0x140019963
mov dword [rsp + 0x80], ecx
cmp qword [rsp + 0x58], 0
je 0x14001a46d
cmp ecx, dword [rsp + 0x88]
jbe 0x14001a51f
mov byte [rsp + 0x8c], 0
mov ecx, esi
jmp 0x14001a471
lea ecx, [rsi + 1]
cmp esi, dword [rsp + 0x80]
jne 0x14001999e
mov dword [rsp + 0x80], ecx
cmp qword [rsp + 0x58], 0
je 0x14001a106
cmp ecx, dword [rsp + 0x88]
jbe 0x14001a11c
mov byte [rsp + 0x8c], 0
jmp 0x14001a10a
mov dword [rsp + 0x78], ebp
jmp 0x140019bab
mov dword [rsp + 0x78], ebp
inc r9d
mov dword [rsp + 0xf8], r9d
cmp byte [rdx + r9], 0x89
jne 0x14001938d
lea eax, [rbp + 1]
cmp ebp, dword [rsp + 0x80]
jne 0x1400199fa
mov dword [rsp + 0x80], eax
cmp qword [rsp + 0x58], 0
je 0x140019a7a
cmp eax, dword [rsp + 0x88]
ja 0x140019805
mov rax, qword [rsp + 0x68]
mov ecx, ebp
mov dl, byte [rdx + r9]
mov byte [rax + rcx], dl
jmp 0x140019b9f
mov dword [rsp + 0x78], ebp
inc r9d
mov dword [rsp + 0xf8], r9d
cmp byte [rdx + r9], 0x33
jne 0x14001938d
lea eax, [rbp + 2]
cmp ebp, dword [rsp + 0x80]
jne 0x140019a4f
mov dword [rsp + 0x80], eax
cmp qword [rsp + 0x58], 0
je 0x140019a71
cmp eax, dword [rsp + 0x88]
jbe 0x140019c38
mov byte [rsp + 0x8c], 0
jmp 0x140019751
mov dword [rsp + 0x78], eax
jmp 0x140019751
mov dword [rsp + 0x78], eax
jmp 0x140019bab
cmp ecx, 0xc6
jg 0x14001a060
cmp ecx, 0x63
je 0x140019b22
cmp ecx, 0x8d
jne 0x14001938d
mov bl, byte [rdx + rax + 1]
mov eax, ebx
and al, 0xc7
cmp al, 5
jne 0x14001a70a
lea eax, [r9 + 3]
mov dword [rsp + 0xf8], eax
movsxd rcx, dword [rdx + rax]
add r9d, 7
mov dword [rsp + 0xf8], r9d
cmp qword [rsp + 0x58], 0
je 0x14001a938
mov ebp, dword [rsp + 0x88]
cmp r10d, ebp
jae 0x14001a949
shr bl, 3
or bl, 0xb8
mov rbp, qword [rsp + 0x68]
mov edi, r10d
mov byte [rbp + rdi], bl
mov r10d, dword [rsp + 0x78]
inc r10d
mov dword [rsp + 0x78], r10d
cmp qword [rsp + 0x58], 0
je 0x14001a93b
mov ebp, dword [rsp + 0x88]
jmp 0x14001a951
cmp byte [rdx + rax + 1], 0xc0
jb 0x14001938d
lea ecx, [r10 + 2]
cmp r10d, dword [rsp + 0x80]
jne 0x140019b42
mov dword [rsp + 0x80], ecx
cmp qword [rsp + 0x58], 0
je 0x140019ca3
cmp ecx, dword [rsp + 0x88]
jbe 0x140019f1a
mov byte [rsp + 0x8c], 0
jmp 0x140019ca7
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov esi, dword [rsp + 0x78]
inc esi
mov dword [rsp + 0x78], esi
mov r9d, dword [rsp + 0xf8]
mov rdx, qword [rsp + 0xf0]
jmp 0x140019927
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
inc dword [rsp + 0x78]
mov r9d, dword [rsp + 0xf8]
inc r9d
lea rcx, [rsp + 0xe8]
mov dword [rcx + 0x10], r9d
xor edx, edx
call fcn.1400519f0
test eax, eax
js 0x14001938d
mov esi, eax
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rsi]
cmp ecx, dword [rsp + 0x80]
jne 0x140019be2
mov dword [rsp + 0x80], eax
mov edx, dword [rsp + 0xf8]
cmp qword [rsp + 0x58], 0
je 0x140019c04
cmp eax, dword [rsp + 0x88]
jbe 0x140019c16
mov byte [rsp + 0x8c], 0
jmp 0x140019c08
mov dword [rsp + 0x78], eax
add edx, esi
mov dword [rsp + 0xf8], edx
jmp 0x140018635
add rdx, qword [rsp + 0xf0]
mov r8d, esi
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], esi
mov edx, dword [rsp + 0xf8]
jmp 0x140019c08
mov rax, qword [rsp + 0x68]
mov ecx, ebp
movzx edx, word [rdx + r9]
mov word [rax + rcx], dx
jmp 0x140019744
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov ebp, dword [rsp + 0x78]
inc ebp
mov dword [rsp + 0x78], ebp
mov r9d, dword [rsp + 0xf8]
mov rdx, qword [rsp + 0xf0]
jmp 0x1400199d1
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov ebp, dword [rsp + 0x78]
inc ebp
mov dword [rsp + 0x78], ebp
mov r9d, dword [rsp + 0xf8]
mov rdx, qword [rsp + 0xf0]
jmp 0x140019a26
mov dword [rsp + 0x78], ecx
add eax, 2
jmp 0x14001862e
mov qword [rsp + 0xe8], r13
mov qword [rsp + 0xf0], rsi
mov dword [rsp + 0xf8], 0
jmp 0x14001803c
int3
mov rcx, rdi
call fcn.140051840
test al, al
cmovne rsi, rdi
jmp 0x140018012
mov dword [rsp + 0x78], edx
jmp 0x1400183bd
lea r9, [rsp + 0x98]
mov edx, dword [r9 + 0x28]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x1400193f4
mov byte [rsp + 0x8c], 0
xor eax, eax
jmp 0x140018392
mov dword [rsp + 0x78], ecx
jmp 0x140018440
mov byte [rsp + 0x8c], 0
xor eax, eax
mov ecx, edx
jmp 0x140018415
mov dword [rsp + 0x78], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsp + 0x78]
lea edx, [rcx + 8]
cmp qword [rsp + 0x58], 0
je 0x14001b493
cmp edx, dword [rsp + 0x88]
ja 0x14001b49c
mov rdx, qword [rsp + 0x68]
mov qword [rdx + rcx], rax
add dword [rsp + 0x78], 8
jmp 0x14001939c
inc eax
inc eax
add eax, 4
add eax, 8
mov dword [rsp + 0x78], eax
jmp 0x140018d8c
mov byte [rsp + 0x8c], 0
jmp 0x140018cd0
mov byte [rsp + 0x8c], 0
jmp 0x140018d00
mov byte [rsp + 0x8c], 0
jmp 0x140018d37
mov byte [rsp + 0x8c], 0
xor eax, eax
jmp 0x140018d61
int3
mov rcx, rsi
call qword [sym.imp.mozglue.dll_free]
jmp 0x14001937c
call qword [sym.imp.mozglue.dll_free]
jmp 0x14001938d
lea rcx, [rsp + 0xd0]
lea r8, [rsp + 0x130]
mov rdx, r12
mov r9, qword [rsp + 0x48]
call fcn.140051e80
test al, al
jne 0x140019279
jmp 0x1400192ed
mov edx, 1
mov rcx, rsi
call fcn.140013d80
test al, al
je 0x14001b41d
mov rax, qword [rsp + 0x158]
jmp 0x14001914f
mov edx, 1
mov rcx, rsi
call fcn.140013d80
test al, al
je 0x14001b432
mov rax, qword [rsp + 0x158]
jmp 0x140019183
mov edx, 8
mov rcx, rsi
call fcn.140013d80
test al, al
je 0x14001b447
mov rax, qword [rsp + 0x158]
jmp 0x1400191bb
mov edx, 1
mov rcx, rsi
call fcn.140013d80
test al, al
je 0x14001b45c
mov rax, qword [rsp + 0x158]
jmp 0x1400191f6
mov edx, 1
mov rcx, rsi
call fcn.140013d80
test al, al
je 0x14001b471
mov rax, qword [rsp + 0x158]
jmp 0x14001922a
mov edx, 1
mov rcx, rsi
call fcn.140013d80
test al, al
je 0x14001b486
mov rax, qword [rsp + 0x158]
jmp 0x14001925e
lea ecx, [rbx + 4]
movzx esi, al
add rsi, rsi
add esi, ecx
mov dword [rsp + 0x78], esi
jmp 0x140018fcd
movzx ebp, byte [rdx + rax + 0xa]
cmp ebp, 0x50
je 0x14001a3a7
cmp ebp, 0xff
jne 0x140018460
cmp byte [rdx + rax + 0xb], 0xe0
jne 0x140018460
jmp 0x14001a3b2
mov rcx, qword [rsp + 0x68]
mov ebp, r10d
movzx eax, word [rdx + rax]
mov word [rcx + rbp], ax
add dword [rsp + 0x78], 2
mov eax, dword [rsp + 0xf8]
jmp 0x140019ca7
test ecx, ecx
jne 0x14001a1b1
mov ecx, esi
and ecx, 7
cmp ecx, 5
je 0x14001a758
mov edi, 1
cmp ecx, 4
jne 0x1400185cc
mov cl, byte [rdx + rbx + 1]
and cl, 7
xor ebp, ebp
cmp cl, 5
sete bpl
lea edi, [rbp*4 + 1]
jmp 0x1400185cc
int3
lea ecx, [rsi + 1]
cmp esi, dword [rsp + 0x80]
jne 0x140019f99
mov dword [rsp + 0x80], ecx
cmp qword [rsp + 0x58], 0
je 0x14001a4be
cmp ecx, dword [rsp + 0x88]
jbe 0x14001a54a
mov byte [rsp + 0x8c], 0
jmp 0x14001a4c2
lea eax, [rcx + 0x7d]
cmp al, 2
ja 0x14001938d
lea rax, [0x1400543c0]
mov r8d, dword [rax + rcx*4 - 0x20c]
lea eax, [r9 + 2]
mov dword [rsp + 0xf8], eax
dec esi
lea rcx, [rsp + 0x58]
mov dword [rcx + 0x20], esi
lea rbp, [rdx + rax]
movsxd rax, dword [rdx + rax]
lea rdx, [rax + rbp]
add rdx, 4
add r9d, 6
mov dword [rsp + 0xf8], r9d
call fcn.140051a80
test al, al
jne 0x140018635
jmp 0x14001938d
mov byte [rsp + 0x8c], 0
jmp 0x1400186b9
mov cl, byte [r15]
and cl, 7
jmp 0x14001a052
cmp sil, 0x1f
ja case.0x140018ee5.4
shr sil, 4
add sil, 2
mov ebx, esi
jmp case.0x140018ee5.5
mov cl, byte [r15]
and cl, 7
mov bl, 2
cmp cl, 2
je case.0x140018ee5.5
jmp case.0x140018ee5.4
cmp ecx, 0xff
je 0x14001a356
cmp ecx, 0xc7
jne 0x14001938d
cmp byte [rdx + rax + 1], 0x44
jne 0x14001938d
lea ecx, [r10 + 8]
cmp r10d, dword [rsp + 0x80]
jne 0x14001a098
mov dword [rsp + 0x80], ecx
cmp qword [rsp + 0x58], 0
je 0x14001a7de
cmp ecx, dword [rsp + 0x88]
jbe 0x14001a7ea
mov byte [rsp + 0x8c], 0
jmp 0x14001a7e2
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 1]
cmp ecx, dword [rsp + 0x80]
jne 0x14001a0d5
mov dword [rsp + 0x80], ebp
cmp qword [rsp + 0x58], 0
je 0x14001a567
cmp ebp, dword [rsp + 0x88]
jbe 0x14001a677
mov byte [rsp + 0x8c], 0
mov ebp, ecx
jmp 0x14001a56b
mov dword [rsp + 0x78], ebp
jmp 0x1400186b9
mov dword [rsp + 0x78], ecx
inc eax
lea rcx, [rsp + 0xe8]
mov dword [rcx + 0x10], eax
jmp 0x140019bba
mov rcx, qword [rsp + 0x68]
mov ebp, esi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
inc dword [rsp + 0x78]
mov eax, dword [rsp + 0xf8]
jmp 0x14001a10a
mov dword [rsp + 0x78], ecx
add eax, 9
jmp 0x14001862e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rdi + 8], 0
lea rcx, [0x140064b28]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor esi, esi
jmp 0x1400193f4
mov dword [rsp + 0x78], ecx
jmp 0x140018730
cmp ecx, 0x60
jne 0x14001a666
lea ecx, [r10 + 5]
cmp r10d, dword [rsp + 0x80]
jne 0x14001a18b
mov dword [rsp + 0x80], ecx
cmp qword [rsp + 0x58], 0
je 0x14001a808
cmp ecx, dword [rsp + 0x88]
jbe 0x14001a8cb
mov byte [rsp + 0x8c], 0
jmp 0x14001a80c
mov edi, 5
jmp 0x1400185cc
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, r10d
mov bl, byte [rdx + 8]
mov byte [rax + rcx + 8], bl
mov rdx, qword [rdx]
mov qword [rax + rcx], rdx
add dword [rsp + 0x78], 9
mov eax, dword [rsp + 0xf8]
jmp 0x14001a13a
jne 0x14001885a
cmp qword [rdi + 8], rax
jb 0x14001884d
jmp 0x14001885a
cmp qword [rbp], r15
ja 0x140018873
mov rax, qword [rsp + 0x40]
cmp qword [rbp + 8], rax
jae 0x140018185
jmp 0x140018873
lea rbp, [r14 + r14*2]
movups xmm0, xmmword [rax + rbp*8 - 0x18]
movaps xmmword [rsp + 0x130], xmm0
mov rcx, qword [rax + rbp*8 - 8]
mov qword [rsp + 0x50], rcx
mov qword [rax + rbp*8 - 8], 0
mov rax, qword [rsi + 8]
cmp rax, qword [rsi + 0x10]
jne 0x14001a252
mov rcx, rsi
call fcn.14001b870
mov rax, qword [rsi + 8]
mov rcx, qword [rsi]
lea rax, [rax + rax*2]
movaps xmm0, xmmword [rsp + 0x130]
movups xmmword [rcx + rax*8], xmm0
mov rdx, qword [rsp + 0x50]
mov qword [rcx + rax*8 + 0x10], rdx
inc qword [rsi + 8]
dec r14
cmp r14, rbx
jbe 0x14001a2bd
lea rbp, [rbp*8 - 8]
mov rax, qword [rsi]
movups xmm0, xmmword [rax + rbp - 0x28]
movups xmmword [rax + rbp - 0x10], xmm0
mov rdx, qword [rax + rbp - 0x18]
mov qword [rax + rbp - 0x18], 0
mov rcx, qword [rax + rbp]
mov qword [rax + rbp], rdx
test rcx, rcx
je 0x14001a2b1
call qword [sym.imp.mozglue.dll_free]
dec r14
add rbp, 0xffffffffffffffe8
cmp r14, rbx
ja 0x14001a283
mov rax, qword [rsi]
lea rdx, [rbx + rbx*2]
mov qword [rax + rdx*8], r15
mov rcx, qword [rsp + 0x40]
mov qword [rax + rdx*8 + 8], rcx
mov rcx, qword [rax + rdx*8 + 0x10]
mov qword [rax + rdx*8 + 0x10], rdi
test rcx, rcx
je 0x1400188e7
call qword [sym.imp.mozglue.dll_free]
jmp 0x1400188e7
lea rcx, [rsi + r15]
dec rcx
lea rdx, [rsp + 0x130]
mov qword [rdx], rsi
mov qword [rdx + 8], rcx
mov qword [rdx + 0x10], 0
lea rcx, [rsp + 0x58]
mov qword [rcx], 1
mov qword [rcx + 8], rdx
mov r8d, ebx
mov edx, 1
mov dword [rsp + 0x30], edx
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edx
mov rcx, r12
xor edx, edx
mov r9d, 0x2000
call qword [case.0x14002f18e.0]
mov qword [rdi + 8], rax
test rax, rax
jne 0x140018224
jmp 0x14001a150
mov al, byte [rdx + rax + 1]
and al, 0xc7
cmp al, 5
jne 0x14001938d
lea eax, [r9 + 3]
mov dword [rsp + 0xf8], eax
dec r10d
lea rcx, [rsp + 0x58]
mov dword [rcx + 0x20], r10d
lea rbp, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r9d, 7
mov dword [rsp + 0xf8], r9d
mov rdx, qword [rax + rbp + 4]
mov r8d, 3
call fcn.140051a80
mov r14b, 1
jmp 0x14001a00f
cmp byte [rdx + rax + 0xb], 0xc3
jne 0x140018460
add eax, 2
mov rdi, qword [rdx + rax]
lea rcx, [rsp + 0xe8]
lea rsi, [rsp + 0x130]
mov rdx, rsi
call fcn.140051d90
xor ebx, ebx
cmp qword [rsi + 0x70], 0
je 0x14001a893
cmp byte [rsp + 0x188], 0
je 0x14001a893
lea rsi, [rsp + 0x130]
mov rcx, rsi
mov rdx, qword [rsp + 0x48]
call fcn.140036200
mov rcx, rsi
call fcn.140052250
test al, al
je 0x14001a891
mov eax, dword [rsp + 0x78]
lea ecx, [rax + 8]
cmp qword [rsp + 0x58], 0
je 0x14001acbe
cmp ecx, dword [rsp + 0x88]
jbe 0x14001adba
mov byte [rsp + 0x8c], 0
xor eax, eax
xor ebx, ebx
cmp qword [rsp + 0x68], 0
je 0x14001a893
cmp qword [rsp + 0x70], 0
je 0x14001a893
cmp dword [rsp + 0x60], 0
je 0x14001a893
test al, al
jne 0x14001acc2
jmp 0x14001a893
mov dword [rsp + 0x78], ecx
inc eax
mov dword [rsp + 0xf8], eax
mov bl, byte [rdx + rax]
and bl, 0xc7
cmp bl, 0x44
jne 0x14001938d
lea ebp, [rcx + 3]
cmp ecx, dword [rsp + 0x80]
jne 0x14001a49c
mov dword [rsp + 0x80], ebp
cmp qword [rsp + 0x58], 0
je 0x14001a516
cmp ebp, dword [rsp + 0x88]
jbe 0x14001a657
mov byte [rsp + 0x8c], 0
jmp 0x140018730
mov dword [rsp + 0x78], ecx
inc eax
jmp 0x14001862e
mov dl, byte [r15]
and dl, 7
mov cl, 2
jmp 0x14001a4d9
mov dl, byte [r15]
and dl, 7
cmp dl, 2
je case.0x140019437.5
mov ecx, dword [rsp + 0x80]
lea r8, [r15 + 1]
xor ebp, ebp
mov r10b, byte [r15 + 1]
cmp ecx, r14d
jae case.0x140018ee5.4
movzx edx, r10b
cmp ecx, edx
jb 0x1400190af
cmp al, bpl
ja 0x1400190af
xor edx, edx
xor eax, eax
jmp 0x140018eed
mov dword [rsp + 0x78], ebp
jmp 0x140018730
mov rcx, qword [rsp + 0x68]
mov ebp, esi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
mov eax, dword [rsp + 0xf8]
mov rdx, qword [rsp + 0xf0]
jmp 0x14001a471
mov rcx, qword [rsp + 0x68]
mov ebp, esi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
inc dword [rsp + 0x78]
mov eax, dword [rsp + 0xf8]
jmp 0x14001a4c2
mov dword [rsp + 0x78], ebp
inc r9d
mov dword [rsp + 0xf8], r9d
mov al, byte [rdx + r9]
mov ecx, eax
and cl, 0xfc
cmp cl, 0x88
jne 0x14001a60a
movzx ebx, byte [rdx + r9 + 1]
mov ecx, ebx
and ecx, 0xffffffc0
cmp cl, 0xc0
je 0x140019a3c
cmp ecx, 0x40
je 0x14001a5c0
test ecx, ecx
jne 0x14001938d
mov eax, ebx
and eax, 6
cmp eax, 4
jne 0x140019a3c
cmp ecx, 0x40
jne 0x14001938d
and ebx, 7
add rdx, r9
mov ecx, dword [rsp + 0x80]
cmp ebx, 4
jne 0x14001a85d
lea eax, [rbp + 4]
cmp ebp, ecx
jne 0x14001a5e4
mov dword [rsp + 0x80], eax
cmp qword [rsp + 0x58], 0
je 0x14001aca4
cmp eax, dword [rsp + 0x88]
jbe 0x14001ad75
mov byte [rsp + 0x8c], 0
jmp 0x14001aca8
cmp al, 0x44
jne 0x140018635
cmp byte [rdx + r9 + 1], 0x89
jne 0x140018635
lea eax, [rbp + 2]
cmp ebp, dword [rsp + 0x80]
jne 0x14001a631
mov dword [rsp + 0x80], eax
cmp qword [rsp + 0x58], 0
je 0x14001ac97
cmp eax, dword [rsp + 0x88]
jbe 0x14001ad53
mov byte [rsp + 0x8c], 0
jmp 0x14001ac9b
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, ecx
jmp 0x140018716
cmp ecx, 0xc0
jne 0x14001938d
jmp 0x1400186dd
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov ebp, dword [rsp + 0x78]
inc ebp
mov dword [rsp + 0x78], ebp
mov r9d, dword [rsp + 0xf8]
mov rdx, qword [rsp + 0xf0]
jmp 0x14001a56b
mov dword [rsp + 0x78], ebp
jmp 0x14001878e
mov byte [rsp + 0x8c], 0
mov ebp, ecx
jmp 0x14001878e
mov dword [rsp + 0x78], eax
jmp 0x1400186b9
mov ecx, eax
and cl, 0xf8
cmp cl, 0xb8
jne 0x14001a814
lea eax, [rbp + 5]
cmp ebp, dword [rsp + 0x80]
jne 0x14001a6e4
mov dword [rsp + 0x80], eax
cmp qword [rsp + 0x58], 0
je 0x14001ac8e
cmp eax, dword [rsp + 0x88]
jbe 0x14001ad27
mov byte [rsp + 0x8c], 0
jmp 0x14001ad4a
add r9d, 2
mov rax, qword [rsp + 0xe8]
lea rcx, [rsp + 0x130]
mov qword [rcx], rax
add rdx, r9
mov qword [rcx + 8], rdx
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.1400519f0
mov esi, eax
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rsi]
inc eax
cmp ecx, dword [rsp + 0x80]
jne 0x14001a751
mov dword [rsp + 0x80], eax
inc esi
jmp 0x140019be2
shr sil, 3
lea ecx, [r9 + 3]
lea rbp, [rdx + rcx]
add r9d, 7
mov eax, esi
mov dword [rsp + 0xf8], ecx
movsxd rcx, dword [rdx + rcx]
lea rdx, [rcx + rbp]
add rdx, 4
mov dword [rsp + 0xf8], r9d
and al, 7
je 0x14001a8f3
cmp qword [rsp + 0x58], 0
je 0x14001ac79
mov ebp, dword [rsp + 0x88]
cmp r10d, ebp
jae 0x14001acd1
or sil, 0xb8
mov rcx, qword [rsp + 0x68]
mov ebp, r10d
mov byte [rcx + rbp], sil
mov r10d, dword [rsp + 0x78]
inc r10d
mov dword [rsp + 0x78], r10d
cmp qword [rsp + 0x58], 0
je 0x14001ac7c
mov ebp, dword [rsp + 0x88]
jmp 0x14001acd9
mov dword [rsp + 0x78], ecx
add eax, 8
jmp 0x14001862e
mov rcx, qword [rsp + 0x68]
mov ebp, r10d
mov rax, qword [rdx + rax]
mov qword [rcx + rbp], rax
add dword [rsp + 0x78], 8
mov eax, dword [rsp + 0xf8]
jmp 0x14001a7e2
mov dword [rsp + 0x78], ecx
add eax, 5
jmp 0x14001862e
cmp eax, 0xf7
je 0x14001abce
cmp eax, 0x8b
jne 0x14001938d
cmp byte [rdx + r9 + 1], 0xc0
jae 0x140019a3c
jmp 0x14001938d
mov rbp, r14
cmp eax, 0xe9
jne 0x14001ac16
movsxd rax, dword [rdi + 1]
lea rcx, [rdi + rax]
add rcx, 5
mov r14, rbp
jmp 0x140018004
lea eax, [rbp + 3]
cmp ebp, ecx
jne 0x14001a86b
mov dword [rsp + 0x80], eax
cmp qword [rsp + 0x58], 0
je 0x14001acb1
cmp eax, dword [rsp + 0x88]
jbe 0x14001ad93
mov byte [rsp + 0x8c], 0
jmp 0x14001acb5
xor ebx, ebx
lea rsi, [rsp + 0x190]
mov rcx, rsi
call fcn.140052400
mov rcx, qword [rsi - 0x40]
lea rax, [rsp + 0x168]
cmp rcx, rax
je 0x14001a8ba
call qword [sym.imp.mozglue.dll_free]
test bl, bl
jne 0x14001938d
mov ecx, dword [rsp + 0x78]
jmp 0x140018460
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, r10d
mov bl, byte [rdx + 4]
mov byte [rax + rcx + 4], bl
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 5
mov eax, dword [rsp + 0xf8]
jmp 0x14001a80c
cmp qword [rsp + 0x58], 0
je 0x14001a938
mov eax, dword [rsp + 0x88]
cmp r10d, eax
jae 0x14001af34
mov rax, qword [rsp + 0x68]
mov ecx, r10d
mov byte [rax + rcx], 0xa1
mov r10d, dword [rsp + 0x78]
inc r10d
mov dword [rsp + 0x78], r10d
cmp qword [rsp + 0x58], 0
je 0x14001a93b
mov eax, dword [rsp + 0x88]
jmp 0x14001af3c
inc r10d
add r10d, 8
mov dword [rsp + 0x78], r10d
jmp 0x140018635
mov byte [rsp + 0x8c], 0
lea ebx, [r10 + 8]
cmp ebx, ebp
jbe 0x14001abad
mov byte [rsp + 0x8c], 0
jmp 0x140018635
mov dword [rsp + 0x78], ecx
jmp 0x1400195cd
mov byte [rsp + 0x8c], 0
jmp 0x1400195cd
cmp byte [rdx + rax + 1], 0x3d
jne 0x14001938d
add r9d, 2
mov dword [rsp + 0xf8], r9d
mov rcx, qword [rsp + 0x58]
mov eax, dword [rsp + 0x78]
test rcx, rcx
je 0x14001af59
mov edx, dword [rsp + 0x88]
cmp eax, edx
jae 0x14001b0ab
mov rcx, qword [rsp + 0x68]
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14001af5b
mov edx, dword [rsp + 0x88]
jmp 0x14001b0b3
cmp byte [rdx + rax + 1], 0x48
jne 0x14001938d
mov cl, byte [rdx + rax + 2]
and cl, 0xfc
cmp cl, 0x88
jne 0x14001938d
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 3]
cmp ecx, dword [rsp + 0x80]
jne 0x14001aa17
mov dword [rsp + 0x80], ebp
cmp qword [rsp + 0x58], 0
je 0x14001b073
cmp ebp, dword [rsp + 0x88]
jbe 0x14001b173
mov byte [rsp + 0x8c], 0
jmp 0x14001b077
lea rbp, [0x1400543c0]
mov r8d, dword [rbp + rcx*4 - 0x1cc]
movzx eax, byte [rdx + rax + 1]
add r9d, 2
mov dword [rsp + 0xf8], r9d
add r9, rdx
add r9, rax
lea rcx, [rsp + 0x58]
mov rdx, r9
jmp 0x14001a00a
mov dword [rsp + 0x78], ebp
jmp 0x140019751
cmp ecx, 0xc6
jne 0x14001ae16
mov rbp, qword [rsp + 0xe8]
lea rcx, [rsp + 0x130]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.1400519f0
test eax, eax
js 0x14001938d
mov esi, eax
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rsi]
add eax, 2
cmp ecx, dword [rsp + 0x80]
jne 0x14001aad4
mov dword [rsp + 0x80], eax
add esi, 2
jmp 0x140019be2
and bpl, 0xc7
cmp bpl, 5
jne 0x14001ae74
cmp cl, 2
jne 0x14001ae74
lea eax, [r9 + 2]
mov dword [rsp + 0xf8], eax
lea rcx, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r9d, 6
mov dword [rsp + 0xf8], r9d
mov rdx, qword [rax + rcx + 4]
lea rcx, [rsp + 0x58]
mov r8d, 4
jmp 0x14001a00a
cmp ecx, 4
jne 0x14001aeb5
mov rbp, qword [rsp + 0xe8]
lea rcx, [rsp + 0x130]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.1400519f0
test eax, eax
js 0x14001938d
mov esi, eax
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rsi]
inc eax
cmp ecx, dword [rsp + 0x80]
jne 0x14001ab7e
mov dword [rsp + 0x80], eax
inc esi
mov edx, dword [rsp + 0xf8]
cmp qword [rsp + 0x58], 0
je 0x14001b19b
cmp eax, dword [rsp + 0x88]
jbe 0x14001b2fa
mov byte [rsp + 0x8c], 0
jmp 0x14001b19f
add rdx, rax
lea rax, [rcx + rdx]
add rax, 4
mov rcx, qword [rsp + 0x68]
mov edx, r10d
mov qword [rcx + rdx], rax
add dword [rsp + 0x78], 8
jmp 0x140018635
mov al, byte [rdx + r9 + 1]
and al, 0xf8
cmp al, 0xc0
jne 0x14001938d
lea eax, [rbp + 6]
cmp ebp, dword [rsp + 0x80]
jne 0x14001abf0
mov dword [rsp + 0x80], eax
cmp qword [rsp + 0x58], 0
je 0x14001b066
cmp eax, dword [rsp + 0x88]
jbe 0x14001b149
mov byte [rsp + 0x8c], 0
jmp 0x14001b06a
mov rcx, rdi
cmp eax, 0xeb
mov r14, rbp
jne 0x140018004
movsx rax, byte [rdi + 1]
lea rbx, [rdi + rax]
add rbx, 2
mov eax, ebx
sub eax, edi
shl eax, 0x18
add eax, 0xfe000000
mov edx, eax
sar edx, 0x18
test eax, eax
js 0x14001b358
mov rcx, rdi
mov r14, rbp
je 0x140018004
xor eax, eax
lea ecx, [rax + 2]
cmp byte [rdi + rcx], 0x90
jne 0x14001b40c
inc al
movsx eax, al
cmp edx, eax
jg 0x14001ac5b
mov rcx, rbx
jmp 0x14001a855
inc r10d
add r10d, 8
inc r10d
inc r10d
inc r10d
jmp 0x14001a93f
mov dword [rsp + 0x78], eax
jmp 0x14001ad4a
mov dword [rsp + 0x78], eax
add r9d, 2
jmp 0x140019bae
mov dword [rsp + 0x78], eax
add r9d, 4
jmp 0x1400186bc
mov dword [rsp + 0x78], eax
add r9d, 3
jmp 0x1400186bc
mov dword [rsp + 0x78], ecx
mov rax, qword [rsp + 0x38]
mov qword [rax], rdi
mov bl, 1
jmp 0x14001a893
mov byte [rsp + 0x8c], 0
lea ecx, [r10 + 8]
cmp ecx, ebp
jbe 0x14001ade4
mov byte [rsp + 0x8c], 0
cmp r10d, ebp
jae 0x14001aef2
mov rcx, qword [rsp + 0x68]
mov edx, r10d
mov byte [rcx + rdx], 0x48
mov r10d, dword [rsp + 0x78]
inc r10d
mov dword [rsp + 0x78], r10d
cmp qword [rsp + 0x58], 0
je 0x14001ac83
mov ebp, dword [rsp + 0x88]
jmp 0x14001aefa
add rdx, r9
mov rax, qword [rsp + 0x68]
mov ecx, ebp
mov bl, byte [rdx + 4]
mov byte [rax + rcx + 4], bl
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 5
mov r9d, dword [rsp + 0xf8]
add r9d, 5
jmp 0x1400186bc
mov rax, qword [rsp + 0x68]
mov ecx, ebp
movzx edx, word [rdx + r9]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 2
mov r9d, dword [rsp + 0xf8]
jmp 0x14001ac9b
mov rax, qword [rsp + 0x68]
mov ecx, ebp
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 4
mov r9d, dword [rsp + 0xf8]
jmp 0x14001aca8
mov rax, qword [rsp + 0x68]
mov ecx, ebp
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 3
mov r9d, dword [rsp + 0xf8]
jmp 0x14001acb5
mov rcx, qword [rsp + 0x68]
mov qword [rcx + rax], rdi
add dword [rsp + 0x78], 8
cmp qword [rsp + 0x58], 0
je 0x14001acc2
cmp byte [rsp + 0x8c], 0
setne al
jmp 0x14001a43b
mov rcx, qword [rsp + 0x68]
mov ebp, r10d
mov qword [rcx + rbp], rdx
mov r10d, dword [rsp + 0x78]
add r10d, 8
mov dword [rsp + 0x78], r10d
cmp qword [rsp + 0x58], 0
je 0x14001ac80
mov ebp, dword [rsp + 0x88]
jmp 0x14001aced
cmp ecx, 0x83
jne 0x14001938d
mov cl, byte [rdx + rax + 1]
and cl, 0xf8
cmp cl, 0x60
jne 0x14001938d
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 5]
cmp ecx, dword [rsp + 0x80]
jne 0x14001ae49
mov dword [rsp + 0x80], ebp
cmp qword [rsp + 0x58], 0
je 0x14001ae6b
cmp ebp, dword [rsp + 0x88]
ja 0x14001a6fd
add rdx, rax
mov rax, qword [rsp + 0x68]
jmp 0x14001ad31
mov dword [rsp + 0x78], ebp
jmp 0x14001ad4a
cmp cl, 4
jne 0x14001938d
cmp bpl, 5
jne 0x14001ab30
lea eax, [r9 + 2]
mov dword [rsp + 0xf8], eax
lea rcx, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r9d, 6
mov dword [rsp + 0xf8], r9d
mov rdx, qword [rax + rcx + 4]
lea rcx, [rsp + 0x58]
jmp 0x14001a394
cmp ecx, 2
ja 0x14001938d
jmp 0x140019706
lea rcx, [rsp + 0xd0]
call fcn.1400519a0
test al, al
je 0x14001938d
mov r9d, dword [rsp + 0xf8]
mov r13b, 1
cmp r9d, 9
ja 0x140018c6c
jmp 0x14001938d
mov byte [rsp + 0x8c], 0
cmp r10d, ebp
jae 0x14001b080
mov rcx, qword [rsp + 0x68]
mov edx, r10d
mov byte [rcx + rdx], 0x8b
mov r10d, dword [rsp + 0x78]
inc r10d
mov dword [rsp + 0x78], r10d
cmp qword [rsp + 0x58], 0
je 0x14001ac86
mov ebp, dword [rsp + 0x88]
jmp 0x14001b088
mov byte [rsp + 0x8c], 0
lea ecx, [r10 + 8]
cmp ecx, eax
ja 0x14001a95d
mov rax, qword [rsp + 0x68]
mov ecx, r10d
mov qword [rax + rcx], rdx
jmp 0x14001abc4
inc eax
inc eax
mov dword [rsp + 0x78], eax
xor ecx, ecx
mov edx, dword [rsp + 0xf8]
mov rdi, qword [rsp + 0xf0]
movsxd rsi, dword [rdi + rdx]
lea ebp, [rdx + 4]
mov dword [rsp + 0xf8], ebp
test rcx, rcx
je 0x14001afbd
mov ecx, dword [rsp + 0x88]
cmp eax, ecx
jae 0x14001b0da
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001afbf
mov ecx, dword [rsp + 0x88]
jmp 0x14001b0e2
inc eax
inc eax
add eax, 8
inc eax
inc eax
inc eax
mov dword [rsp + 0x78], eax
mov rbp, qword [rsp + 0xf0]
mov edx, dword [rsp + 0xf8]
lea ecx, [rax + 1]
cmp eax, dword [rsp + 0x80]
jne 0x14001aff0
mov dword [rsp + 0x80], ecx
cmp qword [rsp + 0x58], 0
je 0x14001b04e
cmp ecx, dword [rsp + 0x88]
jbe 0x14001b117
mov byte [rsp + 0x8c], 0
inc edx
mov dword [rsp + 0xf8], edx
mov ecx, dword [rsp + 0x88]
cmp eax, ecx
jae 0x14001b281
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001b05b
mov ecx, dword [rsp + 0x88]
jmp 0x14001b289
inc edx
mov dword [rsp + 0xf8], edx
inc ecx
mov eax, ecx
inc eax
mov dword [rsp + 0x78], eax
jmp 0x140018635
mov dword [rsp + 0x78], eax
add r9d, 6
jmp 0x1400186bc
mov dword [rsp + 0x78], ebp
add r9d, 3
jmp 0x140019bae
mov byte [rsp + 0x8c], 0
cmp r10d, ebp
jae 0x14001a95d
movzx eax, al
lea eax, [rax + rax*8]
mov rcx, qword [rsp + 0x68]
mov edx, r10d
mov byte [rcx + rdx], al
inc dword [rsp + 0x78]
jmp 0x140018635
mov byte [rsp + 0x8c], 0
cmp eax, edx
jae 0x14001b2a1
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x53
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
mov rcx, qword [rsp + 0x58]
jmp 0x14001af63
mov byte [rsp + 0x8c], 0
cmp eax, ecx
jae 0x14001b2ae
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0xbb
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001afc1
mov ecx, dword [rsp + 0x88]
jmp 0x14001b2b6
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov dl, byte [rbp + rdx]
mov byte [rcx + rax], dl
mov ecx, dword [rsp + 0x78]
inc ecx
inc dword [rsp + 0xf8]
mov dword [rsp + 0x78], ecx
cmp qword [rsp + 0x58], 0
mov eax, ecx
jne 0x14001b016
jmp 0x14001b057
add rdx, r9
mov rax, qword [rsp + 0x68]
mov ecx, ebp
movzx ebp, word [rdx + 4]
mov word [rax + rcx + 4], bp
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 6
mov r9d, dword [rsp + 0xf8]
jmp 0x14001b06a
add rdx, rax
mov rax, qword [rsp + 0x68]
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 3
mov r9d, dword [rsp + 0xf8]
jmp 0x14001b077
mov dword [rsp + 0x78], eax
add edx, esi
mov dword [rsp + 0xf8], edx
mov r14b, 1
jmp 0x140018635
mov rbp, qword [rsp + 0xe8]
lea rcx, [rsp + 0x130]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.1400519f0
test eax, eax
jns 0x14001a736
jmp 0x14001938d
xor r14d, r14d
cmp cl, 0xe9
sete r14b
lea rcx, [rax + 1]
mov dword [rsp + 0xf8], ecx
mov r8d, 4
sub r8d, r14d
lea rcx, [rdx + rax]
inc rcx
movsxd rax, dword [rdx + rax + 1]
lea rdx, [rax + rcx]
add rdx, 4
add r9d, 5
mov dword [rsp + 0xf8], r9d
lea rcx, [rsp + 0x58]
jmp 0x14001a00a
lea rdi, [rsp + 0x100]
mov byte [rdi], 0
mov rbp, qword [rsp + 0xe8]
lea rcx, [rsp + 0x130]
mov qword [rcx], rbp
lea rax, [rax + rdx + 1]
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
mov rdx, rdi
call fcn.1400519f0
test eax, eax
js 0x14001938d
cmp byte [rsp + 0x100], 0
je 0x14001aab8
jmp 0x14001938d
mov byte [rsp + 0x8c], 0
cmp eax, ecx
jae 0x14001a95d
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x5b
jmp 0x14001b0a2
mov byte [rsp + 0x8c], 0
jmp 0x14001af63
mov byte [rsp + 0x8c], 0
lea ebp, [rax + 8]
cmp ebp, ecx
jbe 0x14001b31f
mov byte [rsp + 0x8c], 0
cmp eax, ecx
jae 0x14001b3a9
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x41
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001afc6
mov ecx, dword [rsp + 0x88]
jmp 0x14001b3b1
add rdx, qword [rsp + 0xf0]
mov r8d, esi
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], esi
mov edx, dword [rsp + 0xf8]
jmp 0x14001b19f
add rdi, rdx
lea rcx, [rsi + rdi]
add rcx, 4
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov qword [rdx + rax], rcx
mov eax, dword [rsp + 0x78]
add eax, 8
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001afc4
mov ecx, dword [rsp + 0x88]
jmp 0x14001b2c5
add dl, 2
lea rcx, [rsp + 0x130]
call fcn.1400518d0
mov rcx, rdi
test al, al
mov r14, rbp
je 0x140018004
lea rcx, [rsp + 0xe8]
mov qword [rcx], r13
mov qword [rcx + 8], rbx
mov dword [rcx + 0x10], 0
lea rdx, [rsp + 0x90]
call fcn.14002e780
mov rcx, rdi
test al, al
je 0x140018004
jmp 0x14001802d
mov byte [rsp + 0x8c], 0
cmp eax, ecx
jae 0x14001b3df
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x80
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001afc8
mov ecx, dword [rsp + 0x88]
jmp 0x14001b3e7
mov byte [rsp + 0x8c], 0
cmp eax, ecx
jae 0x14001b3ff
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x3b
mov eax, dword [rsp + 0x78]
jmp 0x14001afc8
mov byte [rsp + 0x8c], 0
jmp 0x14001afce
mov rcx, rdi
jmp 0x14001a855
mov dword [rsp + 0x78], ebp
jmp 0x14001acb5
mov byte [rsp + 0x188], 0
mov rax, qword [rsp + 0x158]
jmp 0x140019175
mov byte [rsp + 0x188], 0
mov rax, qword [rsp + 0x158]
jmp 0x1400191a9
mov byte [rsp + 0x188], 0
mov rax, qword [rsp + 0x158]
jmp 0x1400191e8
mov byte [rsp + 0x188], 0
mov rax, qword [rsp + 0x158]
jmp 0x14001921c
mov byte [rsp + 0x188], 0
mov rax, qword [rsp + 0x158]
jmp 0x140019250
mov byte [rsp + 0x188], 0
jmp 0x140019279
mov dword [rsp + 0x78], edx
jmp 0x14001939c
mov byte [rsp + 0x8c], 0
jmp 0x14001939c