Function at 0x140026580
Capabilities:
Get system information on windows

Disassembly:
add qword [rax], rax
add byte [rcx - 0x576b307], cl
call fcn.140003330
cmp eax, r12d
cmp eax, esp
cmp eax, esp
loopne 0x140002ca7
jne case.0x1400260f8.52
test dword [rax + 3], ebp
add byte [rax], al
mov qword [rbp + 0x148], r15
mov ecx, r13d
mov ecx, ebp
mov ecx, ebp
mov edx, ebx
mov r8d, r12d
mov eax, esp
call fcn.140003310
test al, al
je case.0x1400260f8.52
test edi, edi
je 0x140002d46
mov rax, qword [rbp + 0xd8]
add rax, r15
mov ecx, ebx
add rcx, r15
lea rdx, [r15 + 0x70]
xor r8d, r8d
cmp r8, rsi
jae 0x140003019
mov r11d, dword [rdx]
mov r9d, dword [rdx - 8]
mov r10d, dword [rdx - 4]
add r10, r15
cmp r10, r15
jb 0x1400032a7
test r10, r10
je 0x1400032a7
test r9d, r9d
jle 0x1400032a7
cmp r9d, 6
jg 0x1400032a7
invalid
xchg esp, eax
invalid
add byte [rax], al
invalid
cmp r10, rcx
jb 0x1400032a7
cmp r10, rax
cmp edx, eax
ja 0x1400032a7
mov r11d, r11d
add r10, r11
jb 0x1400032a7
cmp r10, rax
ja 0x1400032a7
inc r8
add rdx, 0xc
cmp rdi, r8
jne 0x140002cd7
mov ecx, dword [r15]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb4], xmm0
movups xmmword [rbp + 0xa4], xmm0
mov dword [rbp + 0xc4], 0
mov dword [rbp + 0xa0], ecx
cmp esi, 9
ja 0x14000306c
test esi, esi
je 0x140002df0
lea r14, [r15 + 0x70]
lea rbx, [rbp + 0xe0]
lea rdx, [0x140055d18]
xor r12d, r12d
cmp esi, r12d
jbe 0x140003024
mov r13d, dword [r14]
mov eax, dword [r14 - 8]
mov edi, dword [r14 - 4]
add rdi, r15
mov qword [rbx], rdi
mov dword [rbp + r12*4 + 0xa4], eax
dec eax
cmp eax, 5
ja case.0x140002dbc.3
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
cmp r13d, 4
jne 0x140003059
mov eax, dword [rdi]
mov qword [rbx], rax
inc r12
mov eax, esi
add r14, 0xc
add rbx, 8
cmp r12, rax
jb 0x140002d8c
jmp 0x140002df0
cmp r13d, 8
jne 0x140003059
mov rax, qword [rdi]
jmp 0x140002dca
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
movaps xmmword [rbp + 0x80], xmm0
add byte [rdi], cl
sub dword [rbp + 0x70], eax
add byte [rdi], cl
sub dword [rbp + 0x70], eax
movaps xmmword [rbp + 0x60], xmm0
movaps xmmword [rbp + 0x50], xmm0
movaps xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x90], 0
mov dword [rbp + 0x30], ecx
mov r12, qword [rbp + 0x150]
add byte [rax], al
add byte [rax], al
lea rax, [r12 + 0x38]
mov qword [rbp + 0x38], rax
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
mov rax, qword [rax]
lea rdx, [rbp + 0xa0]
lea r8, [rbp + 0x140]
call qword [0x140068010]
xor r13d, r13d
test rax, rax
je 0x1400030c8
jno 0x140002e57
add byte [rax], al
jno 0x140002e57
add byte [rax], al
mov ecx, dword [r15 + 0x60]
mov esi, 6
cmp ecx, 2
jne 0x140002f32
mov r10, qword [rbp + 0x140]
mov r8, qword [rbp + 0xe0]
mov r9, qword [rbp + 0xe8]
lea rdx, [rbp + 0x30]
mov rcx, rax
mov rax, r10
call qword [0x140068010]
mov ebx, 0
mov r14d, 0
test al, al
je 0x140002ec5
lea rsi, [rbp + 0x50]
mov r13d, dword [rsi - 0x10]
mov ebx, dword [rsi - 8]
mov r14d, dword [rsi - 4]
lea rdi, [rbp - 0x20]
mov ecx, 9
rep movsq qword [rdi], qword [rsi]
xor esi, esi
cmp dword [r15 + 4], 1
je 0x1400030d7
lea rcx, [rbp + 0xa0]
lea rdx, [rbp + 0xe0]
call fcn.140003390
mov rcx, r15
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
invalid
mov rdi, qword [rbp + 0xd0]
mov dword [rdi + 8], r13d
mov dword [rdi + 0xc], esi
mov dword [rdi + 0x10], ebx
mov dword [rdi + 0x14], r14d
add rdi, 0x18
sbb byte [rax - 0x73], cl
jne 0x140002edd
sbb byte [rax - 0x73], cl
jne 0x140002edd
mov ecx, 9
rep movsq qword [rdi], qword [rsi]
mov rax, qword [r12 + 0x28]
and al, 0x28
and al, 0x28
mov ecx, 3
xchg dword [rax + 8], ecx
mov rcx, qword [r12 + 8]
call qword [sym.imp.KERNEL32.dll_SetEvent]
add byte [rax - 0x273b7eb8], dl
add dword [rax], eax
add byte [rbx + 0x5f], bl
add byte [rax - 0x273b7eb8], dl
add dword [rax], eax
add byte [rbx + 0x5f], bl
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
cmp ecx, 9
ja case.0x140002f4b.2
mov ecx, ecx
lea rdx, [0x140055d30]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov r10, qword [rbp + 0x140]
mov rcx, qword [rbp + 0x110]
movaps xmm0, xmmword [rbp + 0x100]
movaps xmm1, xmmword [rbp + 0xf0]
mov r8, qword [rbp + 0xe0]
mov r9, qword [rbp + 0xe8]
mov qword [rsp + 0x40], rcx
movups xmmword [rsp + 0x30], xmm0
adc dword [rsp + 0x30], eax
xor byte [rdi], cl
adc dword [rsp + 0x20], ecx
movups xmmword [rsp + 0x20], xmm1
jmp 0x140002e7e
mov dword [rbp + 0x13c], ecx
cmp al, 1
add byte [rax], al
mov ecx, 0x20
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 0x10], rcx
mov dword [rax + 0x10], ecx
mov dword [rax + 0x10], ecx
adc byte [rax - 0x39], cl
sbb byte [rdi], al
add byte [rax], al
add byte [rax - 0x77], cl
test dword [rax], esi
add dword [rax], eax
mov qword [rax + 0x18], 7
mov qword [rbp + 0x130], rax
add byte [rsi - 0x39], ah
add byte [rax], al
add byte [rbp - 0x7b], al
in eax, dx
add byte [rsi - 0x39], ah
add byte [rax], al
add byte [rbp - 0x7b], al
in eax, dx
je 0x140003245
add al, byte [rax]
add byte [rcx - 0xa], al
invalid
test r13b, 1
jne 0x140003085
invalid
invalid
add byte [rax], al
invalid
test dword [rdx + 0x44000000], edi
mov edx, ebp
mov edx, r13d
shr edx, 1
cmp r13d, 0xf
jbe 0x140003263
mov r13, qword [rbp + 0x130]
mov rcx, r13
mov ecx, ebp
mov r8, rdi
call fcn.14000c9e0
mov esi, dword [r15 + 0x60]
mov qword [rbx], r13
mov dword [rbx], ebp
mov ecx, dword [rbp + 0x13c]
lea rdx, [0x140055d18]
jmp case.0x140002dbc.3
mov qword [rbp + 0x148], r15
mov ebp, 0x148
mov rcx, r15
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
jmp 0x1400032af
add byte [rax], al
add byte [rax], al
xor r11d, r11d
xor r10d, r10d
jmp 0x140002cee
mov qword [rbx], 0
mov dword [rbx], 0
add cl, ch
popfq
std
invalid
jmp case.0x140002dbc.3
mov dword [rbp + 0x13c], ecx
mov ecx, 0x10
add byte [rcx + 0x10], bh
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rdx, [0x140055d18]
add byte [rbx + 0x13c8d], cl
invalid
add byte [rbx + 0x13c8d], cl
add byte [rcx + rcx*4 + 0x28], al
cmp al, 1
add byte [rax], al
mov dword [rax], r13d
mov qword [rax + 8], rdi
jmp 0x140002dca
invalid
invalid
invalid
lea rcx, [rbp + 0xa0]
lea rdx, [rbp + 0xe0]
call fcn.140003390
add eax, dword [rax]
add byte [rbp + 0x31], al
in eax, dx
xor r13d, r13d
xor ebx, ebx
xor r14d, r14d
mov r12, qword [rbp + 0x150]
mov esi, 5
jmp 0x140002ed8
add cl, ch
push rbx
invalid
mov qword [rbx], 0
lea rcx, [rbp + 0xa0]
movabs al, byte [0xe0958d48000000]
add byte [rax], al
movabs al, byte [0xe0958d48000000]
add byte [rax], al
call fcn.140003390
mov rcx, qword [rbp + 0x130]
add dword [rax], eax
add al, ch
invalid
invalid
add al, 0
add dword [rax], eax
add al, ch
and eax, 0xeb00040d
jmp 0x14000306c
xor ebx, ebx
xor r14d, r14d
jmp 0x1400032c0
xor ebx, ebx
xor r14d, r14d
test byte [rbx + rcx*4 - 0x5b], 0x50
add dword [rax], eax
add cl, ch
clc
add dword [rax], eax
invalid
jmp 0x14000306c
xor ebx, ebx
xor r14d, r14d
jmp 0x1400032c0
test byte [rbx + rcx*4 - 0x5b], 0x50
add dword [rax], eax
add cl, ch
clc
add dword [rax], eax
add byte [rsi + 5], bh
mov esi, 5
xor ebx, ebx
xor r14d, r14d
jmp 0x140002ec5
mov rcx, qword [rbp + 0xd0]
mov rdx, r15
mov edx, edi
mov edx, edi
mov r8, qword [rbp + 0xd8]
call sub.ntdll.dll_memcpy
jmp 0x140002ec5
mov r8, qword [rbp + 0x140]
lea rdx, [rbp + 0x30]
mov rcx, rax
mov rax, r8
call qword [0x140068010]
invalid
add cl, ch
cmp ch, 0xff
invalid
invalid
mov r9, qword [rbp + 0x140]
mov r8, qword [rbp + 0xe0]
lea rdx, [rbp + 0x30]
mov rcx, rax
mov rax, r9
call qword [0x140068010]
jmp 0x140002e8e
mov r10, qword [rbp + 0x140]
mov rcx, qword [rbp + 0xf0]
mov r8, qword [rbp + 0xe0]
mov r9, qword [rbp + 0xe8]
mov qword [rsp + 0x20], rcx
jmp 0x140002e7e
xchg ebp, eax
add dword [rax], eax
add byte [rax - 0x75], cl
invalid
mov r10, qword [rbp + 0x140]
movaps xmm0, xmmword [rbp + 0xf0]
mov r8, qword [rbp + 0xe0]
mov r9, qword [rbp + 0xe8]
jmp 0x14000319d
mov r10, qword [rbp + 0x140]
mov rcx, qword [rbp + 0x100]
movaps xmm0, xmmword [rbp + 0xf0]
mov r8, qword [rbp + 0xe0]
mov r9, qword [rbp + 0xe8]
mov qword [rsp + 0x30], rcx
movups xmmword [rsp + 0x20], xmm0
jmp 0x140002e7e
mov r10, qword [rbp + 0x140]
movaps xmm0, xmmword [rbp + 0x100]
movaps xmm1, xmmword [rbp + 0xf0]
mov r8, qword [rbp + 0xe0]
mov r9, qword [rbp + 0xe8]
jmp 0x140002f7c
mov r10, qword [rbp + 0x140]
movaps xmm0, xmmword [rbp + 0x110]
movaps xmm1, xmmword [rbp + 0x100]
movaps xmm2, xmmword [rbp + 0xf0]
mov r8, qword [rbp + 0xe0]
mov r9, qword [rbp + 0xe8]
jmp 0x140003231
mov r10, qword [rbp + 0x140]
mov rcx, qword [rbp + 0x120]
movaps xmm0, xmmword [rbp + 0x110]
movaps xmm1, xmmword [rbp + 0x100]
movaps xmm2, xmmword [rbp + 0xf0]
mov r8, qword [rbp + 0xe0]
mov r9, qword [rbp + 0xe8]
mov qword [rsp + 0x50], rcx
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rsp + 0x30], xmm1
movups xmmword [rsp + 0x20], xmm2
jmp 0x140002e7e
xor eax, eax
mov r13, qword [rbp + 0x130]
mov qword [r13], rax
mov qword [r13 + 0x10], rax
mov qword [r13 + 0x18], 7
jmp 0x140002ff0
mov rcx, qword [rbp + 0x130]
mov qword [rcx + 0x10], rdx
and r13d, 0xfffffffe
mov qword [rbp + 0xc8], rdx
mov rdx, rdi
mov r8, r13
mov r13, rcx
call sub.ntdll.dll_memcpy
mov rax, qword [rbp + 0xc8]
mov word [r13 + rax*2], 0
jmp 0x140002ff0
mov rcx, r15
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
xor ebx, ebx
xor r14d, r14d
mov r12, qword [rbp + 0x150]
mov esi, 5
xor r13d, r13d
jmp 0x140002ee0
rol byte [rbx + 0x48d0af9], cl
lea rax, [rax*4 + 0x74]
lea eax, [rax*4 + 0x74]
add byte [rax], al
add byte [rdi], cl
ret 0xccc3
ret 0xccc3
ret 0xccc3
int3
int3
int3
int3
sar byte [rcx], 0xd1
sal dword [rdx + 0x13], 1
adc eax, dword [rbx + 0xe7278fa]
js 0x14000338c
invalid
cmp eax, ecx
xchg esi, eax
rol dword [rcx + 0x39], 0xd0
xchg ebx, eax
shl byte [rax], 0xc8
and al, cl
enter 0xffffffffffffccc3, 0xffffffffffffffcc
int3
int3
int3
sub byte [0x14c637c4f], al
mov byte [rcx + rax - 0x3f], cl
int3
invalid
je case.0x14000bcc1.99
adc byte [rax - 0x77], cl
int1
add cl, ch
sub ah, byte [rdx]
add byte [rax], al
add eax, dword [rcx - 0x77]
adc cl, byte [rax - 0x7d]
add byte ds:[rdi], cl
test byte [rbx + rcx], bh
add byte [rax], al
or eax, dword [rax]
add byte [rax - 0x75], cl
push rsi
adc byte [rcx - 0x76], al
add al, 7
add dword [rdi], 0
add byte [rdx + 0xf], al
mov dh, 0x4c
cmp byte [rcx], al
mov esi, 1
loop 0x140004da1
mov ecx, dword [rsp + 0x28]
invalid
add byte [rax], al
adc r15b, dil
ror dword [rcx - 0x74b7efb5], 0x43
or byte [rdi], cl
adc byte [rax - 0x75], cl
or byte [r15], cl
mov dh, 0x14
or byte [rcx - 0x77], al
rol byte [rcx - 0x80], 1
loopne 0x140004dc1
std
invalid
mov byte [rcx + 1], 0xd6
invalid
movzx edx, byte [rdi + rax + 1]
sub ebp, edi
invalid
add byte [rax - 0x7d], cl
add byte ds:[rdi], cl
test byte [rax + 0x1e], bh
add byte [rax], al
test ecx, ecx
lea esp, [rsp + 0xb8]
mov dword [rsp - 0x38], edx
and al, 0xc8
and al, 0xd8
pop rsp
and al, 0xe0
invalid
loopne 0x1400052ef
mov dword [rsp - 0x10], ebx
and al, 0xe8
add byte [rax], al
adc byte [rdi], cl
test ch, al
or byte [rax], al
add byte [rax - 0x75], cl
mov ecx, dword [rsp + 0xa0]
mov byte [rcx + rax], 0x49
mov rax, qword [rsp + 0xa8]
invalid
mov ecx, dword [rsp + 0xa0]
add byte [rax - 1], cl
ror byte [rax - 0x77], 0x84
and al, 0xa8
add byte [rax], al
add bh, bh
test byte [rax + rbx*4], ah
add byte [rax], al
add byte [rax + 0x3b], cl
test byte [rax + rsi*4], ah
add byte [rax], al
add byte [rdi], cl
test byte [rbx + 0x48000008], dh
mov ecx, dword [rsp + 0xa0]
inc eax
mov word [rax + riz*4], fs
add byte [rax], al
add byte [rax - 0x75], cl
xchg esp, eax
and al, 0x90
add dword [rax], eax
add byte [rax - 0x77], cl
adc al, 1
add byte [rax], al
mov dword [rsp + 0xa8], eax
add byte [rax - 0x49], al
add ecx, ebp
test esp, edi
invalid
add edi, eax
adc cl, ch
pop rax
hlt
add ecx, dword [rsi + 0x10]
adc byte [rbx - 0x3f00efbd], cl
or bh, bh
and cl, r13b
sub dh, bh
invalid
add al, 7
invalid
and byte [rdi], r9b
test byte [rcx - 0x74fffffa], bl
xor byte [rcx], r15b
enter 0xffffffffffff830f, 0xffffffffffffffe7
invalid
add byte [rax], al
and dil, r15b
ror byte [rcx - 0x7cb7dfba], 0x3e
and byte [rax - 0x7d], r9b
add byte ds:[rdi], cl
and byte [rax - 0x7d], r9b
add byte ds:[rdi], cl
test byte [rsi + 6], dh
add byte [rax], al
invalid
add byte [rbx - 0x3616cfb2], cl
invalid
add byte [rcx - 0x76], al
invalid
adc byte [rax - 0x7d], cl
add byte ds:[rdi], cl
test byte [rdi + rax], cl
add byte [rax], al
test byte [rsi + 0x3b000004], bl
push rsi
xor byte [rdi], cl
xchg dh, bh
invalid
add byte [rbp - 0x74b7fab8], cl
push rsp
and al, 0x30
and al, 0x30
cli
invalid
add dword [rcx - 0x75], ecx
and dil, r15b
ror byte [rcx - 0x7cb7dfba], 0x3e
add byte [rdx + rcx - 0x75], dh
xor cl, r13b
sub eax, 0xff000001
sar bh, 0xc0
xor byte [rdi], cl
xchg byte [rcx - 0x39ffffff], bl
xor al, 0
add cl, ch
xchg ecx, eax
add dword [rax], eax
add dh, al
xor al, 0
mov edi, dword [rdx + rax]
add byte [rdi], cl
test byte [rax + 0x7e830000], bh
or byte [rax], al
xor al, byte [0x100846389]
add byte [rax + rax*8 + 0x70d850f], al
add byte [rax], al
add byte [rbx + rcx*4 + 0x74], cl
and al, 0x28
out dx, eax
out 0xff, al
dec dword [rbx + rcx*4 + 0x46]
adc byte [rdx - 0x77befefc], cl
add al, 0x10
invalid
test byte [rax + rdx*4], ah
add byte [rax], al
add byte [rdi], cl
xchg byte [rcx], cl
invalid
test al, 0
add byte [rax], al
add byte [rax], al
xor eax, esp
dec eax
div edi
test dword [rax - 0x7d], 0x834801fb
rol dword [rax], cl
je 0x140007028
or byte [rax - 1], cl
adc byte [rcx + 1], r9b
dec byte [rax - 1]
retf
loope 0x140007025
invalid
add byte [rax], al
mov eax, dword [rcx + 0x10]
and byte [r8 - 0x7d], cl
cmp dword [rax], eax
adc dword [rcx], 2
add byte [rax], al
add dword [rax], eax
add byte [rbx + rcx*4 + 0x41], al
mov eax, dword [rcx + 0x30]
lea r9d, [rax + 4]
cmp r9d, r8d
movabs al, byte [0x8910418b4c000001]
rol byte [rcx - 0x39], 4
add byte [rax], al
add byte [rax], al
add byte [rbx - 0x3f7cdfbf], cl
and byte [rbx + 0x418904c0], al
and byte [rax - 0x7d], cl
and byte [rbx + 0x418904c0], al
and byte [rax - 0x7d], cl
cmp dword [rax], eax
add byte [rbx + rcx*4 + 0x41], cl
adc byte [rcx + 0x148949c0], cl
add byte [rbx + 0x48082041], al
cmp dword [rcx], 0
add byte [rbx + rcx*4 + 0x41], al
xor byte [rcx + rdi - 0x40], al
lea rcx, [rsp + 0x310]
mov r8d, 0x90
xor edx, edx
call sub.ntdll.dll_memset
test r13d, r13d
jne 0x14000bca1
mov r12d, 0x400
mov dword [rsp + 0x2b0], 0x27
mov ecx, 0xff
or r12d, 8
mov dword [rsp + 0x338], 1
mov eax, r12d
mov r12d, ecx
test rbx, rbx
jne 0x14000bccd
or eax, 0x2000
lea r8, [rsp + 0x310]
mov dword [r8 + 0x10], eax
mov rcx, rdi
mov edx, 9
mov r9d, 0x90
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
test eax, eax
je 0x14000b8fc
not r15d
and r12d, r15d
lea r8, [rsp + 0x2b0]
mov dword [r8], r12d
mov rcx, qword [rsp + 0x210]
mov edx, 4
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
xor esi, esi
test eax, eax
je 0x14000b8fc
mov rdi, qword [rsp + 0x210]
test esi, esi
jne 0x14000bcdf
xor eax, eax
mov qword [rsp + 0x310], rax
mov qword [rsp + 0x210], rax
lea rax, [rdi + 1]
cmp rax, 2
jb 0x140007ea4
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea rdx, [rsp + 0x210]
mov rcx, rdi
mov r9, rax
call fcn.140001040
lea r15, [rsp + 0x310]
mov rcx, r15
mov rdx, rdi
call fcn.14000cb00
mov rdi, qword [r15]
mov qword [r15], 0
lea rax, [rdi + 1]
cmp rax, 2
jb 0x140007eeb
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea rdx, [rsp + 0x310]
mov rcx, rdi
mov r9, rax
call fcn.140001040
lea rcx, [rsp + 0x170]
mov rdx, rdi
call fcn.14000cb00
mov rdi, qword [rsp + 0x310]
lea rax, [rdi + 1]
cmp rax, 2
mov r15, qword [rsp + 0x68]
jae 0x14000b4fc
xor ebx, ebx
mov rdi, qword [rsp + 0x210]
lea rax, [rdi + 1]
cmp rax, 2
jae 0x14000b4c7
test esi, esi
jne 0x14000b41c
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x210], xmm0
movdqa xmmword [rsp + 0x250], xmm0
movdqa xmmword [rsp + 0x270], xmm0
movdqa xmmword [rsp + 0x260], xmm0
movdqa xmmword [rsp + 0x240], xmm0
movdqa xmmword [rsp + 0x230], xmm0
movdqa xmmword [rsp + 0x220], xmm0
xor eax, eax
mov qword [rsp + 0x280], rax
mov dword [rsp + 0x218], 0x70
mov dword [rsp + 0x254], 0x80
mov qword [rsp + 0x160], rax
movdqa xmmword [rsp + 0x150], xmm0
mov dword [rsp + 0x14c], 1
mov al, byte [r15 + 0x61]
mov cl, byte [r15 + 0x60]
or cl, al
je 0x14000b909
test al, al
je 0x14000bcee
mov r8, qword [0x140064918]
test r8, r8
je 0x14000b909
mov rdx, qword [0x140064910]
test rdx, rdx
je 0x14000b909
lea rcx, [rsp + 0x1e0]
call fcn.14000eea0
cmp qword [rsp + 0x1f0], 0
je 0x14000802a
cmp qword [rsp + 0x1f8], 8
jb 0x14000801a
mov rax, qword [rsp + 0x1e0]
jmp 0x140008022
lea rax, [rsp + 0x1e0]
mov qword [rsp + 0x228], rax
mov rdi, qword [r15 + 0x80]
call fcn.14000dbe0
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x200], xmm0
mov ebx, 8
cmp eax, 5
jl 0x14000bd17
mov esi, eax
test dil, 8
jne 0x14000bd20
xor eax, eax
mov ecx, edi
and ecx, 0x20
shl ecx, 7
or rcx, rax
mov eax, edi
and eax, 0x40
shl eax, 0xa
or rax, rcx
test dil, dil
js 0x14000bd3f
bt edi, 8
jb 0x14000bd4a
mov ecx, edi
shl ecx, 0x11
and ecx, 0x10000000
or rcx, rax
mov eax, edi
and eax, 0x1000
shl rax, 0x14
or rax, rcx
test edi, 0x19e0
je 0x1400080b4
mov qword [rsp + 0x200], rax
cmp esi, 6
jb 0x14000821a
bt edi, 0xd
jb 0x14000bd55
test edi, edi
js 0x14000bd5f
cmp esi, 7
setae cl
mov edx, edi
shr edx, 0x10
and dl, cl
mov rcx, rax
bts rcx, 0x30
test dl, dl
cmove rcx, rax
test edi, 0x80002000
jne 0x1400080f6
test dl, dl
je 0x1400080fe
mov qword [rsp + 0x200], rcx
cmp esi, 8
jb 0x14000821a
bt edi, 0x11
jb 0x14000bd69
mov edx, edi
and edx, 0x40000
shl rdx, 0x22
or rdx, rcx
mov eax, edi
and eax, 0x80000
shl rax, 0x25
or rax, rdx
test edi, 0xe0000
je 0x14000813e
mov qword [rsp + 0x200], rax
cmp esi, 9
jb 0x14000821a
bt edi, 0xe
jb 0x14000bd73
test edi, 0x104000
je 0x140008170
mov ecx, edi
and ecx, 0x100000
shl rcx, 0x28
or rcx, rax
mov qword [rsp + 0x200], rcx
bt edi, 0x15
jae 0x14000817f
cmp esi, 0xb
jae 0x14000c6d6
bt edi, 0x1e
jae 0x14000821a
cmp esi, 0xf
jb 0x14000821a
mov eax, dword [0x14006485c]
mov ecx, dword [0x1400624b8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x14000820d
lea rcx, [0x14006485c]
call fcn.14002de38
cmp dword [0x14006485c], 0xffffffff
jne 0x14000820d
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.IsUserCetAvailableInEnvironment
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14000c644
xor ecx, ecx
call qword [0x140068010]
test eax, eax
setne al
mov byte [0x140064858], al
lea rcx, [0x14006485c]
call fcn.14002ddd8
cmp byte [0x140064858], 0
jne 0x14000bd85
mov rax, qword [0x140064860]
or rax, qword [0x140064868]
jne 0x140008285
lea rcx, [0x1400568b9]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.GetProcessMitigationPolicy
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140008285
mov rdi, rax
call fcn.14000dbe0
xor ecx, ecx
cmp eax, 0xa
setge cl
lea r15, [rcx*8 + 8]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [0x140064860]
mov rcx, rax
mov edx, 5
mov r9, r15
mov rax, rdi
call qword [0x140068010]
mov rax, qword [0x140064860]
and rax, qword [rsp + 0x200]
mov qword [rsp + 0x200], rax
mov rdi, qword [0x140064868]
and rdi, qword [rsp + 0x208]
mov qword [rsp + 0x208], rdi
cmp esi, 0xa
jb 0x1400082ce
test rdi, rdi
mov r15, qword [rsp + 0x68]
je 0x1400082d3
mov ebx, 0x10
mov edi, 1
jmp 0x1400082d3
mov r15, qword [rsp + 0x68]
xor esi, esi
or rdi, rax
setne sil
call fcn.14000dbe0
cmp eax, 8
jl 0x14000bd92
cmp rdi, 1
mov eax, 1
sbb eax, 0xffffffff
cmp dword [r15 + 0x50], 3
setl cl
mov dword [rsp + 0x80], ecx
cmovl esi, eax
mov rax, r15
mov r15, qword [r15 + 0x68]
mov qword [rsp + 0x140], r15
mov rdi, qword [rax + 0x70]
mov qword [rsp + 0x138], rdi
cmp r15, 0xffffffffffffffff
je 0x140008340
lea rcx, [rsp + 0x150]
lea r8, [rsp + 0x140]
xor edx, edx
call fcn.14000d1a0
cmp rdi, 0xffffffffffffffff
je 0x140008376
cmp rdi, r15
je 0x140008376
mov rdx, qword [rsp + 0x158]
cmp rdx, qword [rsp + 0x160]
jne 0x14000bda2
lea rcx, [rsp + 0x150]
lea r8, [rsp + 0x138]
call fcn.14000d1a0
mov rax, qword [rsp + 0x68]
mov r12, qword [rax + 0xf0]
mov r13, qword [rax + 0xf8]
cmp r12, r13
je 0x1400083d4
lea rdi, [rsp + 0x150]
lea r15, [rsp + 0x310]
mov rax, qword [r12]
mov qword [rsp + 0x310], rax
mov rdx, qword [rsp + 0x158]
cmp rdx, qword [rsp + 0x160]
jne 0x14000b936
mov rcx, rdi
mov r8, r15
call fcn.14000d1a0
add r12, 8
cmp r12, r13
jne 0x14000839e
mov rax, qword [rsp + 0x158]
xor ecx, ecx
cmp rax, qword [rsp + 0x150]
setne cl
add esi, ecx
mov r15, qword [rsp + 0x68]
mov r14, qword [r15 + 0x110]
test r14, r14
jne 0x14000bdb6
cmp dword [rsp + 0x218], 0x70
jne 0x14000bdfc
mov dword [rsp + 0x60], 0x11
cmp qword [rsp + 0x280], 0
jne 0x14000be11
lea rdi, [rsp + 0x310]
mov qword [rdi], 0
xor ecx, ecx
mov edx, esi
xor r8d, r8d
mov r9, rdi
call qword [sym.imp.KERNEL32.dll_InitializeProcThreadAttributeList]
mov r15, qword [rdi]
test r15, r15
je 0x14000be11
mov rcx, r15
call sub.mozglue.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
mov rdi, rax
mov rcx, rax
xor edx, edx
mov r8, r15
call sub.ntdll.dll_memset
lea r9, [rsp + 0x310]
mov rcx, rdi
mov edx, esi
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_InitializeProcThreadAttributeList]
test eax, eax
je 0x14000be09
mov rcx, qword [rsp + 0x210]
mov qword [rsp + 0x210], rdi
test rcx, rcx
mov r15, qword [rsp + 0x68]
jne 0x14000be1b
mov qword [rsp + 0x280], rdi
mov rax, qword [rsp + 0x200]
or rax, qword [rsp + 0x208]
je 0x1400084ee
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x200]
mov r8d, 0x20007
mov rcx, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_UpdateProcThreadAttribute]
test eax, eax
je 0x14000b390
cmp byte [rsp + 0x80], 0
mov rdi, qword [rsp + 0x90]
je 0x140008542
mov rcx, qword [rsp + 0x280]
test rcx, rcx
je 0x14000b390
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], 4
lea r9, [rsp + 0x14c]
mov r8d, 0x2000e
xor edx, edx
call qword [sym.imp.KERNEL32.dll_UpdateProcThreadAttribute]
test eax, eax
je 0x14000b390
mov rsi, qword [rsp + 0x150]
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x98], rax
sub rax, rsi
je 0x1400085cc
mov rcx, qword [rsp + 0x280]
test rcx, rcx
je 0x14000b390
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
mov r8d, 0x20002
xor edx, edx
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_UpdateProcThreadAttribute]
test eax, eax
je 0x14000b390
or byte [rsp + 0x255], 1
mov qword [rsp + 0x268], 0xffffffffffffffff
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x278], rax
mov dword [rsp + 0x134], 1
test r14, r14
mov qword [rsp + 0xa0], rsi
jne 0x14000be25
xor eax, eax
mov qword [rsp + 0xa8], rax
cmp qword [rdi + 0x20], 0
jne 0x14000861f
mov ecx, 0x40
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rsi, rax
mov rcx, rax
call fcn.14002f960
mov rcx, qword [rdi + 0x20]
mov qword [rdi + 0x20], rsi
test rcx, rcx
jne 0x14000c64b
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
mov ecx, 0x70
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rsp + 0x78], rax
test r14, r14
mov qword [rsp + 0xc0], r14
jne 0x14000bee4
xor eax, eax
mov qword [rsp + 0x60], rax
xor r14d, r14d
xor esi, esi
mov r15, qword [rdi + 0x20]
mov rdi, qword [rsp + 0x170]
xor eax, eax
mov qword [rsp + 0x108], rax
mov r12, qword [rsp + 0x180]
mov qword [rsp + 0x180], rax
lea rax, [r12 + 1]
cmp rax, 2
jb 0x1400086b5
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea rdx, [rsp + 0x180]
mov rcx, r12
mov r9, rax
call fcn.140001040
lea rcx, [rsp + 0x108]
mov rdx, r12
call fcn.14000cb00
xor eax, eax
mov qword [rsp + 0x100], rax
mov r12, qword [rsp + 0x188]
mov qword [rsp + 0x188], rax
lea rax, [r12 + 1]
cmp rax, 2
jb 0x14000870a
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea rdx, [rsp + 0x188]
mov rcx, r12
mov r9, rax
call fcn.140001040
lea rcx, [rsp + 0x100]
mov rdx, r12
call fcn.14000cb00
mov rax, qword [rsp + 0x78]
lea rbx, [rax + 0x18]
pxor xmm0, xmm0
movdqu xmmword [rax + 0x10], xmm0
movdqu xmmword [rax], xmm0
mov r12, qword [rsp + 0x108]
mov qword [rsp + 0x108], 0
lea rax, [r12 + 1]
cmp rax, 2
jb 0x14000876f
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea rdx, [rsp + 0x108]
mov rcx, r12
mov r9, rax
call fcn.140001040
mov qword [rsp + 0xb8], rbx
mov rcx, rbx
mov rdx, r12
call fcn.14000cb00
mov rcx, qword [rsp + 0x78]
lea rax, [rcx + 0x20]
mov qword [rsp + 0x80], rax
xor eax, eax
mov qword [rcx + 0x20], rax
mov r13, qword [rsp + 0x100]
mov qword [rsp + 0x100], rax
lea rax, [r13 + 1]
cmp rax, 2
jb 0x1400087d3
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea rdx, [rsp + 0x100]
mov rcx, r13
mov r9, rax
call fcn.140001040
mov rcx, qword [rsp + 0x80]
mov rdx, r13
call fcn.14000cb00
xor eax, eax
mov rcx, qword [rsp + 0x78]
mov qword [rcx + 0x28], rax
mov qword [rcx + 0x30], rdi
mov qword [rcx + 0x38], rax
mov qword [rcx + 0x40], r15
pxor xmm0, xmm0
movdqu xmmword [rcx + 0x48], xmm0
movdqu xmmword [rcx + 0x58], xmm0
mov qword [rcx + 0x68], rax
cmp rsi, r14
jne 0x14000bf43
mov rdi, qword [rsp + 0x100]
lea rax, [rdi + 1]
cmp rax, 2
jae 0x14000b531
mov rdi, qword [rsp + 0x108]
lea rax, [rdi + 1]
cmp rax, 2
jae 0x14000b56a
test rsi, rsi
jne 0x14000bf96
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.mozglue.dll__wcsdup]
mov rsi, qword [rsp + 0x78]
mov rcx, qword [rsi + 0x50]
mov qword [rsi + 0x50], rax
test rcx, rcx
jne 0x14000bfd2
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.mozglue.dll__wcsdup]
mov qword [rsp + 0x60], rax
xor edi, edi
cmp qword [rsp + 0x280], 0
setne dil
shl edi, 0x13
or edi, 0x40c
cmp qword [rsi + 0x30], 0
je 0x14000bfdd
call fcn.14000dbe0
lea ecx, [rdi + 0x1000000]
cmp eax, 5
cmovge ecx, edi
mov eax, ecx
mov qword [rsp + 0xb0], rax
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
xor ecx, ecx
mov qword [rsp + 0x290], rcx
mov qword [rsp + 0x2a0], rcx
mov qword [rsp + 0x2a8], 7
mov word [rsp + 0x290], 0
mov qword [rsp + 0x70], rax
movzx eax, word [rax]
test ax, ax
je 0x140008bad
xor r13d, r13d
lea rsi, [rsp + 0x310]
mov r15, qword [rsp + 0x70]
mov qword [rsp + 0x2b0], r13
mov qword [rsp + 0x2c0], r13
mov qword [rsp + 0x2c8], 7
mov word [rsp + 0x2b0], 0
xor edi, edi
cmp ax, 0x3d
je 0x14000894b
movzx eax, ax
test eax, eax
je 0x14000894b
movzx eax, word [r15 + rdi*2 + 2]
inc rdi
jmp 0x140008933
mov qword [rsp + 0x310], r13
mov qword [rsp + 0x320], r13
mov qword [rsp + 0x328], 7
mov word [rsp + 0x310], 0
cmp rdi, 7
jbe 0x140008b60
mov rcx, rsi
mov rdx, rdi
mov r8, r15
call fcn.14000c9e0
movdqu xmm0, xmmword [rsp + 0x310]
movdqu xmm1, xmmword [rsp + 0x320]
movdqa xmmword [rsp + 0x2c0], xmm1
movdqa xmmword [rsp + 0x2b0], xmm0
cmp word [r15 + rdi*2], 0
lea rdi, [rdi + 1]
jne 0x1400089ad
mov rax, qword [rbp]
mov rdx, qword [rax + 8]
cmp byte [rdx + 0x19], 0
mov rcx, rax
jne 0x140008a53
cmp qword [rsp + 0x2c8], 8
lea r8, [rsp + 0x2b0]
jb 0x1400089e9
mov r8, qword [rsp + 0x2b0]
mov r9, qword [rsp + 0x2c0]
mov rcx, rax
mov r10, qword [rdx + 0x30]
cmp r9, r10
mov r11, r10
cmovb r11, r9
test r11, r11
je 0x140008ba1
cmp qword [rdx + 0x38], 8
jb 0x140008a18
mov r12, qword [rdx + 0x20]
jmp 0x140008a1c
lea r12, [rdx + 0x20]
xor ebx, ebx
movzx r14d, word [r8 + rbx*2]
cmp word [r12 + rbx*2], r14w
jne 0x140008a37
inc rbx
cmp r11, rbx
jne 0x140008a1e
jmp 0x140008ba1
setbe r10b
lea r11, [rdx + 0x10]
test r10b, r10b
cmove rcx, rdx
cmove r11, rdx
mov rdx, qword [r11]
cmp byte [rdx + 0x19], 0
je 0x1400089f4
cmp byte [rcx + 0x19], 0
jne 0x140008ac5
mov rdx, qword [rcx + 0x30]
mov r8, qword [rsp + 0x2c0]
cmp rdx, r8
mov r9, r8
cmovb r9, rdx
test r9, r9
je 0x14000b733
cmp qword [rsp + 0x2c8], 8
lea r10, [rsp + 0x2b0]
jb 0x140008a93
mov r10, qword [rsp + 0x2b0]
cmp qword [rcx + 0x38], 8
jb 0x140008aa0
mov r11, qword [rcx + 0x20]
jmp 0x140008aa4
lea r11, [rcx + 0x20]
xor ebx, ebx
movzx r14d, word [r11 + rbx*2]
cmp word [r10 + rbx*2], r14w
jne 0x140008abf
inc rbx
cmp r9, rbx
jne 0x140008aa6
jmp 0x14000b733
ja 0x14000b73c
mov rax, qword [rsp + 0x2a0]
mov rcx, qword [rsp + 0x2a8]
mov rdx, rcx
sub rdx, rax
cmp rdx, rdi
jb 0x140008b86
lea r12, [rax + rdi]
mov qword [rsp + 0x2a0], r12
lea rbx, [rsp + 0x290]
cmp rcx, 8
jb 0x140008b06
mov rbx, qword [rsp + 0x290]
lea rcx, [rbx + rax*2]
lea r8, [rdi + rdi]
mov rdx, r15
call sub.ntdll.dll_memmove
mov word [rbx + r12*2], 0
mov rax, qword [rsp + 0x2c8]
cmp rax, 8
jb 0x140008b4d
mov rcx, qword [rsp + 0x2b0]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jae 0x14000b7b8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
lea r15, [r15 + rdi*2]
movzx eax, word [r15]
test ax, ax
jne 0x14000890b
jmp 0x140008bad
mov qword [rsp + 0x320], rdi
lea r8, [rdi + rdi]
mov rcx, rsi
mov rdx, r15
call sub.ntdll.dll_memcpy
mov word [rsp + rdi*2 + 0x310], 0
jmp 0x140008989
lea rcx, [rsp + 0x290]
mov rdx, rdi
mov r8, r15
mov r9, rdi
call fcn.14000ce90
jmp 0x140008b1d
cmp r10, r9
setb r10b
jmp 0x140008a3b
mov r14, qword [rbp]
mov r15, qword [r14]
cmp r15, r14
je 0x140008c5f
lea r12, [rsp + 0x290]
lea r13, [0x140054d48]
lea rdx, [rsp + 0x310]
lea rbp, str._builds_worker_checkouts_gecko_security_sandbox_chromium_base_process_environment_internal.cc
lea rsi, str.std::wstring::npos__i.first.find_L0_
lea rbx, [r15 + 0x20]
cmp qword [r15 + 0x38], 8
mov rax, rbx
jb 0x140008bf4
mov rax, qword [r15 + 0x20]
mov r8, qword [r15 + 0x30]
test r8, r8
je 0x140008c13
mov rcx, rax
cmp word [rcx], 0
je 0x14000b806
add rcx, 2
dec r8
jne 0x140008c00
lea rdi, [r15 + 0x40]
mov rax, qword [r15 + 0x50]
cmp qword [r15 + 0x58], 8
mov rcx, rdi
jb 0x140008c29
mov rcx, qword [r15 + 0x40]
test rax, rax
jne 0x14000bfea
test rax, rax
jne 0x14000c011
mov rcx, qword [r15 + 0x10]
cmp byte [rcx + 0x19], 0
je 0x14000b7df
mov rax, qword [r15 + 8]
cmp byte [rax + 0x19], 0
je 0x14000c057
mov r15, rax
cmp rax, r14
jne 0x140008be2
mov rax, qword [rsp + 0x2a0]
mov rcx, qword [rsp + 0x2a8]
cmp rax, rcx
jae 0x14000c069
lea rdx, [rax + 1]
mov qword [rsp + 0x2a0], rdx
cmp rcx, 8
mov r13, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x60]
mov r8, qword [rsp + 0x98]
mov r14, qword [rsp + 0xb0]
jb 0x140008cae
mov rcx, qword [rsp + 0x290]
jmp 0x140008cb6
lea rcx, [rsp + 0x290]
xor edx, edx
mov word [rcx + rax*2], dx
mov word [rcx + rax*2 + 2], dx
lea rdi, [rsp + 0x218]
xor esi, esi
cmp r8, qword [rsp + 0xa0]
setne bl
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
cmp qword [rsp + 0x2a8], 8
jb 0x140008cf6
mov rax, qword [rsp + 0x290]
jmp 0x140008cfe
lea rax, [rsp + 0x290]
xor edx, edx
lea r8, [rsp + 0x1b0]
mov qword [r8 + 0x10], rdx
pxor xmm6, xmm6
movdqa xmmword [r8], xmm6
mov sil, bl
mov rcx, qword [rsp + 0xb8]
mov rcx, qword [rcx]
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdx
mov rdx, qword [rsp + 0x88]
mov r8, rbp
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
test eax, eax
je 0x14000c097
lea rdi, [rsp + 0x198]
movdqa xmmword [rdi - 8], xmm6
mov qword [rdi + 8], 0
mov rdx, qword [rsp + 0x1b0]
lea rsi, [rsp + 0x190]
mov rcx, rsi
call fcn.14000cb00
mov rdx, qword [rsp + 0x1b8]
mov rcx, rdi
call fcn.14000cb00
mov rax, qword [rsp + 0x1c0]
mov qword [rsi + 0x10], rax
mov rcx, qword [r13 + 0x30]
test rcx, rcx
je 0x140008dc9
mov rdx, qword [rsp + 0x190]
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
test eax, eax
je 0x14000c0b9
mov rax, qword [rsp + 0x80]
mov rsi, qword [rax]
lea rax, [rsi + 1]
cmp rax, 2
jb 0x140008f27
mov qword [rsp + 0x1d0], 0
mov rcx, qword [rsp + 0x190]
lea r8, [rsp + 0x310]
mov edx, 8
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140008eca
mov rdx, qword [rsp + 0x310]
lea rbx, [rsp + 0x2b0]
mov qword [rbx], 0
mov rcx, rbx
call fcn.14000cb00
mov rbx, qword [rbx]
mov ecx, 0x4c
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r14, rax
pxor xmm0, xmm0
movdqu xmmword [rax], xmm0
movdqu xmmword [rax + 0x10], xmm0
movdqu xmmword [rax + 0x20], xmm0
movdqu xmmword [rax + 0x30], xmm0
movdqu xmmword [rax + 0x3c], xmm0
lea rax, [rsp + 0x1dc]
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov edx, 0x1f
mov r8, r14
mov r9d, 0x4c
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x140008e90
mov r15, qword [r14]
test r15, r15
jne 0x14000c0e6
xor ebx, ebx
xor r12d, r12d
mov edx, 0x4c
mov rcx, r14
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov r14, qword [rsp + 0x2b0]
lea rax, [r14 + 1]
cmp rax, 2
jae 0x14000b5d3
test r12b, r12b
jne 0x14000c12a
test rbx, rbx
jne 0x14000c193
mov rax, qword [rsp + 0x198]
lea rcx, [rsp + 0x310]
mov qword [rcx], rax
mov rdx, rsi
call qword [sym.imp.ADVAPI32.dll_SetThreadToken]
mov esi, eax
test eax, eax
je 0x14000c1a0
mov r14, qword [rsp + 0x80]
mov rbx, qword [r14]
lea rax, [rbx + 1]
cmp rax, 2
jae 0x14000b603
mov rbx, qword [rsp + 0x1d0]
lea rax, [rbx + 1]
cmp rax, 2
jae 0x14000b5a3
test esi, esi
je 0x14000c1c5
mov rcx, qword [rsp + 0x190]
lea rdx, [rsp + 0x110]
call fcn.14000da30
test al, al
je 0x14000b95e
lea rdx, [rsp + 0x118]
mov rcx, qword [rsp + 0x198]
call fcn.14000da30
test al, al
je 0x14000b95e
mov rsi, qword [rsp + 0x190]
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x120], rax
mov rax, qword [0x140064a50]
test rax, rax
je 0x14000b758
mov rax, qword [0x140064a50]
test rax, rax
je 0x14000c1d2
lea r14, [r13 + 0x48]
mov rcx, qword [0x140064a50]
lea rdx, [0x140056248]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14000c1d8
mov rcx, r13
mov rdx, rsi
call fcn.14000cb00
lea rcx, [r13 + 8]
mov rdx, rbx
call fcn.14000cb00
movd dword [r13 + 0x10], xmm6
pshufd xmm0, xmm6, 0x55
movd dword [r13 + 0x14], xmm0
mov dword [rsp + 0x60], 0
lea rcx, [rsp + 0x190]
call fcn.14000dae0
mov rax, qword [rsp + 0x2a8]
cmp rax, 8
jb 0x140009204
mov rcx, qword [rsp + 0x290]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x1400091ff
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000c62b
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
test rbp, rbp
je 0x140009212
mov rcx, rbp
call qword [sym.imp.mozglue.dll_free]
cmp dword [rsp + 0x60], 0
jne 0x14000c21c
mov rdx, qword [rsp + 0x178]
lea rax, [rdx + 1]
cmp rax, 2
jae 0x14000c234
cmp qword [r15 + 0xa0], 0
je 0x1400098c7
mov rsi, qword [r15 + 0x98]
mov qword [rsp + 0x318], 0
mov ecx, 0x38
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x310], rax
mov qword [rsp + 0xd0], rsi
mov rax, qword [rsi]
mov r15, qword [rax]
cmp r15, rax
je 0x1400098a4
movabs r12, 0x492492492492492
mov rsi, qword [rsp + 0x310]
mov rdi, qword [rsi + 8]
cmp byte [rdi + 0x19], 0
jne 0x140009597
mov eax, dword [r15 + 0x18]
mov r13, rsi
mov rcx, rdi
mov edx, dword [rdi + 0x20]
lea r8, [rdi + 0x10]
cmp edx, eax
cmovge r13, rdi
cmovge r8, rdi
mov rdi, qword [r8]
cmp byte [rdi + 0x19], 0
je 0x1400092b5
xor r14d, r14d
cmp edx, eax
setge r14b
mov rdi, rcx
cmp byte [r13 + 0x19], 0
jne 0x140009348
mov eax, dword [r15 + 0x18]
cmp eax, dword [r13 + 0x20]
jl 0x140009348
movabs rax, 0xaaaaaaaaaaaaaaa
cmp qword [r13 + 0x30], rax
je 0x14000b7f0
mov rsi, qword [r13 + 0x28]
mov ecx, 0x18
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rcx, qword [r15 + 0x10]
mov qword [rax + 0x10], rcx
inc qword [r13 + 0x30]
mov rcx, qword [rsi + 8]
mov qword [rax], rsi
mov qword [rax + 8], rcx
mov qword [rsi + 8], rax
mov qword [rcx], rax
mov r15, qword [r15]
mov rax, qword [rsp + 0xd0]
cmp r15, qword [rax]
jne 0x140009298
jmp 0x1400095d5
mov rbp, qword [rsp + 0x318]
cmp rbp, r12
je 0x14000b8d9
mov ecx, 0x38
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rbx, rax
mov r13, rax
mov eax, dword [r15 + 0x18]
mov dword [rbx + 0x20], eax
mov qword [rbx + 0x30], 0
mov ecx, 0x18
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbx + 0x28], rax
mov qword [rbx], rsi
mov qword [rbx + 0x10], rsi
mov word [rbx + 0x18], 0
inc rbp
mov qword [rsp + 0x318], rbp
mov qword [rbx + 8], rdi
cmp rdi, rsi
je 0x1400095b6
test r14d, r14d
jne 0x1400095a2
mov qword [rdi + 0x10], r13
cmp rdi, qword [rsi + 0x10]
jne 0x1400093cc
lea rax, [rsi + 0x10]
mov qword [rax], r13
add rbx, 8
mov rdi, qword [rbx]
cmp byte [rdi + 0x18], 0
jne 0x14000958a
lea rcx, [rdi + 0x18]
mov rax, r13
mov rdx, qword [rdi + 8]
mov r8, qword [rdx]
cmp rdi, r8
jne 0x1400094bb
mov r8, qword [rdx + 0x10]
cmp byte [r8 + 0x18], 0
je 0x1400094c2
cmp rax, qword [rdi + 0x10]
jne 0x14000b94a
mov rcx, qword [rax]
mov qword [rdi + 0x10], rcx
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
je 0x140009574
mov qword [rax + 8], rdx
mov rcx, qword [rsp + 0x310]
cmp qword [rcx + 8], rdi
je 0x140009581
mov rcx, qword [rdi + 8]
cmp qword [rcx], rdi
jne 0x14000b955
mov qword [rcx], rax
mov qword [rax], rdi
mov qword [rdi + 8], rax
mov rcx, rax
mov byte [rcx + 0x18], 1
mov rax, qword [rdi + 8]
mov rax, qword [rax + 8]
mov byte [rax + 0x18], 0
mov rax, qword [rdi + 8]
mov rax, qword [rax + 8]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
mov qword [rax], rdx
mov rdx, qword [rcx + 0x10]
cmp byte [rdx + 0x19], 0
jne 0x140009481
mov qword [rdx + 8], rax
mov rdx, qword [rax + 8]
mov qword [rcx + 8], rdx
mov rdx, qword [rsp + 0x310]
cmp qword [rdx + 8], rax
je 0x14000956b
mov r8, qword [rax + 8]
lea rdx, [r8 + 0x10]
cmp qword [r8 + 0x10], rax
cmovne rdx, r8
mov qword [rdx], rcx
mov qword [rcx + 0x10], rax
mov qword [rax + 8], rcx
mov rax, rdi
jmp 0x1400094dc
cmp byte [r8 + 0x18], 0
jne 0x1400094f7
mov al, 1
mov byte [rcx], al
mov byte [r8 + 0x18], al
mov rax, qword [rbx]
mov rax, qword [rax + 8]
mov byte [rax + 0x18], 0
mov rax, qword [rbx]
mov rax, qword [rax + 8]
lea rbx, [rax + 8]
mov rdi, qword [rax + 8]
lea rcx, [rdi + 0x18]
cmp byte [rdi + 0x18], 0
je 0x1400093e4
jmp 0x14000958a
cmp rax, qword [rdi]
je 0x14000c263
mov rcx, qword [rax + 8]
mov byte [rcx + 0x18], 1
mov rcx, qword [rax + 8]
mov rcx, qword [rcx + 8]
mov byte [rcx + 0x18], 0
mov rcx, qword [rax + 8]
mov rcx, qword [rcx + 8]
mov rdx, qword [rcx + 0x10]
mov r8, qword [rdx]
mov qword [rcx + 0x10], r8
mov r8, qword [rdx]
cmp byte [r8 + 0x19], 0
je 0x1400095c6
mov r8, qword [rcx + 8]
mov qword [rdx + 8], r8
mov r8, qword [rsp + 0x310]
cmp qword [r8 + 8], rcx
je 0x1400095cf
mov r8, qword [rcx + 8]
cmp qword [r8], rcx
jne 0x14000c631
mov qword [r8], rdx
mov qword [rdx], rcx
mov qword [rcx + 8], rdx
jmp 0x1400094dc
add rdx, 8
jmp 0x1400094ab
mov qword [rcx + 8], rdi
mov rdx, qword [rdi + 8]
jmp 0x140009421
add rcx, 8
jmp 0x140009444
mov rax, qword [rsi + 8]
mov byte [rax + 0x18], 1
jmp 0x1400092ef
xor r14d, r14d
mov r13, rsi
jmp 0x1400092de
mov qword [rdi], r13
mov rax, rsi
cmp rdi, qword [rsi]
jne 0x1400093cc
jmp 0x1400093c9
mov qword [rsi], r13
mov qword [rsi + 8], r13
mov qword [rsi + 0x10], r13
mov rax, r13
jmp 0x14000958e
mov qword [r8 + 8], rcx
jmp 0x140009535
add r8, 8
jmp 0x14000955c
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
mov qword [rsp + 0x70], rcx
cmp rcx, rax
je 0x1400098a4
mov rax, qword [rsp + 0xd0]
mov rax, qword [rax + 0x10]
lea rcx, [rax + 0x208]
mov qword [rsp + 0xc8], rcx
mov r10, qword [rax + 0x200]
lea r9, [rax + r10]
add r9, 0x208
mov rax, qword [rsp + 0x70]
mov eax, dword [rax + 0x20]
cmp rax, 0x3f
ja 0x1400098a4
mov rcx, qword [rsp + 0xd0]
mov rcx, qword [rcx + 0x10]
mov rdx, qword [rsp + 0xc8]
mov qword [rcx + rax*8], rdx
mov rax, qword [rsp + 0x70]
mov rax, qword [rax + 0x28]
mov r11, qword [rax]
mov qword [rsp + 0xe8], rax
cmp r11, rax
je 0x14000989d
lea rax, [rdx + 0x18]
mov qword [rsp + 0xe0], rax
mov rax, 0xfffffffffffffff8
sub rax, rdx
mov qword [rsp + 0xd8], rax
mov r12, r10
xor edx, edx
mov rax, qword [r11 + 0x10]
mov qword [rsp + 0x80], rax
mov rax, qword [rax]
mov r13, qword [rax]
mov rax, r13
shl rax, 4
lea r15, [rax + rax*2]
sub r10, r15
jb 0x1400098a4
test r13, r13
sete al
je 0x1400097ed
cmp r15, 0x30
jb 0x1400097ed
lea rbp, [r13 - 1]
add r15, 0xffffffffffffffd0
mov rax, rdx
shl rax, 4
lea rax, [rax + rax*2]
mov rcx, qword [rsp + 0xe0]
lea rsi, [rcx + rax]
mov rdi, qword [rsp + 0xd8]
sub rdi, rax
xor r14d, r14d
mov qword [rsp + 0x88], r9
mov qword [rsp + 0xa0], rdx
mov qword [rsp + 0x98], r12
mov qword [rsp + 0xb8], r13
mov qword [rsp + 0xb0], r11
mov rax, qword [rsp + 0x80]
mov rax, qword [rax]
movdqu xmm0, xmmword [rax + r14 + 8]
movdqu xmm1, xmmword [rax + r14 + 0x18]
movdqu xmm2, xmmword [rax + r14 + 0x28]
movdqu xmmword [rsi + r14 + 0x10], xmm2
movdqu xmmword [rsi + r14], xmm1
movdqu xmmword [rsi + r14 - 0x10], xmm0
cmp dword [rax + r14 + 8], 5
je 0x140009774
sub r15, 0x30
setb cl
sub rbp, 1
setb al
jb 0x1400097ed
add r14, 0x30
add rdi, 0xffffffffffffffd0
test cl, cl
je 0x140009716
jmp 0x1400097ed
mov r8, qword [rax + r14 + 0x20]
add r8, r8
sub r10, r8
jb 0x1400098a4
mov rcx, qword [rax + r14 + 0x18]
add rax, r14
lea rdx, [rcx + rax]
add rdx, 8
mov rbx, qword [rsp + 0x88]
sub rbx, r8
mov rcx, rbx
mov r12, r9
mov qword [rsp + 0x60], r10
call sub.ntdll.dll_memcpy
mov rdx, qword [rsp + 0xa0]
mov r11, qword [rsp + 0xb0]
mov r10, qword [rsp + 0x60]
mov r13, qword [rsp + 0xb8]
mov r9, r12
mov r12, qword [rsp + 0x98]
mov qword [rsp + 0x88], rbx
lea rax, [rdi + rbx]
mov qword [rsi + r14], rax
jmp 0x140009752
test al, al
je 0x1400098a4
mov rax, r10
sub rax, r12
add r9, rax
add rdx, r13
mov r11, qword [r11]
mov r12, r10
cmp r11, qword [rsp + 0xe8]
jne 0x140009685
mov r8, qword [rsp + 0xc8]
mov qword [r8], rdx
shl rdx, 4
lea rax, [rdx + rdx*2]
shr rax, 3
movabs rcx, 0x2492492492492493
mul rcx
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x10]
cmp byte [rcx + 0x19], 0
je 0x140009869
mov rax, qword [rsp + 0x70]
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
jne 0x140009875
mov rcx, qword [rsp + 0x70]
cmp rcx, qword [rax + 0x10]
mov qword [rsp + 0x70], rax
jne 0x140009875
jmp 0x140009848
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
je 0x140009869
imul rcx, rdx, 0x38
add r8, rcx
add r8, 0x38
mov qword [rsp + 0xc8], r8
mov qword [rsp + 0x70], rax
cmp rax, qword [rsp + 0x310]
jne 0x14000961b
jmp 0x1400098a4
xor edx, edx
jmp 0x140009815
mov rsi, qword [rsp + 0x310]
mov rcx, qword [rsi + 8]
call fcn.14000ce10
mov edx, 0x38
mov rcx, rsi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov r15, qword [rsp + 0x68]
mov bl, byte [r15 + 0x63]
mov r14, qword [rsp + 0x78]
mov qword [rsp + 0x290], r14
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x298], xmm0
mov ecx, 0x80
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rsp + 0x298], rax
mov byte [rsp + 0x2a8], 0
mov byte [rsp + 0x2a9], bl
cmp qword [r15 + 0xa0], 0
je 0x140009962
xor esi, esi
lea rdi, [rsp + 0x290]
mov rax, qword [r15 + 0xa0]
cmp qword [rax + rsi*8], 0
jne 0x14000993a
inc rsi
cmp rsi, 0x25
jne 0x140009921
jmp 0x140009962
mov rcx, qword [r15 + 0xe0]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
mov rdx, rdi
mov r8d, esi
call qword [0x140068010]
test al, al
jne 0x14000992f
mov esi, 0x1e
jmp 0x14000aa11
mov rdi, qword [r15 + 0xa8]
mov rbx, qword [r15 + 0xb0]
cmp rdi, rbx
jne 0x14000c27b
mov bl, byte [r15 + 0x90]
lea rax, str.TargetNtOpenThread64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 6
lea rsi, [0x140055130]
lea r8, str.NtOpenThread
lea rdi, [rsp + 0x290]
mov rcx, rdi
mov rdx, rsi
mov r9d, 1
call fcn.14000d310
lea rax, str.TargetNtOpenProcess64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 7
lea r8, str.NtOpenProcess
mov rcx, rdi
mov rdx, rsi
mov r9d, 1
call fcn.14000d310
lea rax, str.TargetNtOpenProcessToken64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 8
lea r8, str.NtOpenProcessToken
mov rcx, rdi
mov rdx, rsi
mov r9d, 1
call fcn.14000d310
lea rax, str.TargetNtSetInformationThread64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 3
lea r8, str.NtSetInformationThread
mov rcx, rdi
mov rdx, rsi
mov r9d, 1
call fcn.14000d310
lea rax, str.TargetNtImpersonateAnonymousToken64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 2
lea r8, str.NtImpersonateAnonymousToken
mov rcx, rdi
mov rdx, rsi
mov r9d, 1
call fcn.14000d310
lea rax, str.TargetNtOpenThreadToken64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 4
lea r8, str.NtOpenThreadToken
mov rcx, rdi
mov rdx, rsi
mov r9d, 1
call fcn.14000d310
lea rax, str.TargetNtOpenProcessTokenEx64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 9
lea r8, str.NtOpenProcessTokenEx
mov rcx, rdi
mov rdx, rsi
mov r9d, 1
call fcn.14000d310
lea rax, str.TargetNtOpenThreadTokenEx64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 5
lea r8, str.NtOpenThreadTokenEx
mov rcx, rdi
mov rdx, rsi
mov r9d, 1
call fcn.14000d310
test bl, bl
je 0x14000c2b1
cmp qword [rsp + 0x2a0], 0
je 0x14000a66f
mov qword [rsp + 0x2b8], 0
mov ecx, 0x40
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x2b0], rax
mov r15, qword [rsp + 0x298]
mov r12, qword [r15]
cmp r12, r15
je 0x14000b74a
xor r13d, r13d
lea rsi, [rsp + 0x2b0]
lea rdi, [rsp + 0x310]
lea rcx, [r12 + 0x10]
call fcn.14000cd40
test al, al
jne 0x140009b75
mov r12, qword [r12]
cmp r12, r15
jne 0x140009b5c
jmp 0x140009bcb
lea rbx, [r12 + 0x18]
mov rcx, qword [rsp + 0x2b0]
mov rdx, rbx
call fcn.14000d930
test rax, rax
jne 0x140009bb1
mov rax, qword [r12 + 0x28]
lea rax, [rax*2 + 0x1f]
and rax, 0xfffffffffffffff8
add r13, rax
mov rcx, rsi
mov rdx, rdi
mov r8, rbx
call fcn.14000e870
mov rax, qword [r12 + 0x48]
mov rcx, qword [r12 + 0x68]
add rax, rcx
add rax, 0x21
and rax, 0xfffffffffffffff8
add r13, rax
jmp 0x140009b6a
mov rsi, qword [rsp + 0x2b0]
mov rcx, qword [rsi + 8]
test r13, r13
je 0x14000b750
add r13, 0xc
call fcn.14000d110
mov edx, 0x40
mov rcx, rsi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rcx, r13
call sub.mozglue.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
test r13, r13
mov qword [rsp + 0x98], rax
je 0x14000c2eb
cmp byte [rsp + 0x2a8], 0
je 0x14000c307
mov rcx, qword [rsp + 0x290]
mov rcx, qword [rcx + 0x48]
lea r14, [rsp + 0x310]
mov r12, rax
add r12, 0xc
mov qword [rax + 4], rcx
lea rbx, [r13 - 0xc]
mov rax, qword [rsp + 0x298]
mov r15, qword [rax]
pxor xmm6, xmm6
mov qword [rsp + 0x80], r12
mov dword [rsp + 0x70], 0
mov qword [rsp + 0x60], r13
cmp r15, qword [rsp + 0x298]
je 0x140009f78
lea rcx, [r15 + 0x10]
call fcn.14000cd40
test al, al
jne 0x140009c84
mov r15, qword [r15]
jmp 0x140009c64
lea rsi, [r15 + 0x18]
lea rax, [rsp + 0x320]
movdqu xmmword [rax], xmm6
cmp qword [r15 + 0x30], 8
mov rdi, rsi
jb 0x140009ca2
mov rdi, qword [r15 + 0x18]
mov r13, qword [r15 + 0x28]
cmp r13, 7
jbe 0x14000b990
mov rbp, r13
or rbp, 7
movabs rax, 0x7ffffffffffffffe
cmp rbp, rax
cmovae rbp, rax
lea rcx, [rbp*2]
cmp rbp, 0x7ff
jae 0x14000b9aa
add rcx, 2
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rsp + 0x310], rax
lea r8, [r13*2 + 2]
mov rcx, rax
mov rdx, rdi
call sub.ntdll.dll_memcpy
mov rax, qword [r15 + 0x28]
mov qword [rsp + 0x320], r13
mov qword [rsp + 0x328], rbp
lea rdi, [rax*2 + 0x1f]
and rdi, 0xfffffffffffffff8
mov r13, rbx
sub r13, rdi
jb 0x14000b9e2
cmp dword [r15 + 0x10], 5
sete byte [r12 + 0x14]
mov qword [r12], rdi
mov qword [r12 + 8], rdi
mov dword [r12 + 0x10], 0
cmp qword [r15 + 0x30], 8
jb 0x140009d55
mov rsi, qword [r15 + 0x18]
add rdi, r12
lea rcx, [r12 + 0x16]
mov r8, qword [r15 + 0x28]
add r8, r8
mov rdx, rsi
call sub.ntdll.dll_memcpy
mov rax, qword [r15 + 0x28]
mov word [r12 + rax*2 + 0x16], 0
mov rax, qword [rsp + 0x298]
cmp r15, rax
je 0x140009f09
mov rsi, r15
mov rcx, qword [rsp + 0x320]
cmp qword [rsi + 0x28], rcx
jne 0x140009e3b
mov rbp, qword [rsp + 0x328]
test rcx, rcx
je 0x140009de4
mov rdx, r14
cmp rbp, 8
jb 0x140009dbc
mov rdx, qword [rsp + 0x310]
cmp qword [rsi + 0x30], 8
jb 0x140009dc9
mov r8, qword [rsi + 0x18]
jmp 0x140009dcd
lea r8, [rsi + 0x18]
xor r9d, r9d
movzx r10d, word [r8 + r9*2]
cmp r10w, word [rdx + r9*2]
jne 0x140009e3b
inc r9
cmp rcx, r9
jne 0x140009dd0
mov rbx, qword [rsi + 0x48]
mov r14, qword [rsi + 0x68]
lea r12, [rbx + r14]
add r12, 0x21
and r12, 0xfffffffffffffff8
mov rax, r13
sub rax, r12
mov qword [rsp + 0x88], rax
jb 0x14000ba93
mov qword [rdi], r12
mov eax, dword [rsi + 0x10]
mov dword [rdi + 8], eax
mov eax, dword [rsi + 0x14]
mov dword [rdi + 0xc], eax
mov rax, qword [rsi + 0x78]
mov qword [rdi + 0x10], rax
mov r8, qword [rsi + 0x48]
cmp r8, rbx
cmovae r8, rbx
cmp qword [rsi + 0x50], 0x10
jb 0x140009e4f
mov rdx, qword [rsi + 0x38]
jmp 0x140009e53
mov rsi, qword [rsi]
mov rbx, r13
cmp rsi, rax
jne 0x140009d8c
jmp 0x140009f0c
lea rdx, [rsi + 0x38]
lea rcx, [rdi + 0x18]
call sub.ntdll.dll_memcpy
xor eax, eax
mov byte [rdi + rbx + 0x18], al
mov r8, qword [rsi + 0x68]
cmp r8, r14
cmovae r8, r14
cmp qword [rsi + 0x70], 0x10
jb 0x140009e7a
mov rdx, qword [rsi + 0x58]
jmp 0x140009e7e
lea rdx, [rsi + 0x58]
lea r13, [rdi + rbx]
add r13, 0x18
lea rcx, [rdi + rbx]
add rcx, 0x19
call sub.ntdll.dll_memcpy
xor eax, eax
mov byte [r14 + r13 + 1], al
mov rax, qword [rsp + 0x80]
inc dword [rax + 0x10]
add qword [rax], r12
cmp r15, rsi
jne 0x140009eb0
mov r15, qword [r15]
lea r14, [rsp + 0x310]
lea rcx, [rsi + 0x10]
add rdi, r12
mov rbx, qword [rsi]
mov rax, qword [rsi + 8]
mov qword [rax], rbx
mov rax, qword [rsi]
mov rdx, qword [rsi + 8]
mov qword [rax + 8], rdx
dec qword [rsp + 0x2a0]
call fcn.14000cc20
mov edx, 0x80
mov rcx, rsi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rax, qword [rsp + 0x298]
mov rsi, rbx
mov rbx, qword [rsp + 0x88]
mov r13, rbx
jmp 0x140009e41
mov rbx, r13
inc dword [rsp + 0x70]
mov sil, 1
mov rbp, qword [rsp + 0x328]
mov r12, rdi
mov qword [rsp + 0x80], rdi
cmp rbp, 8
jb 0x140009f4e
mov rcx, qword [rsp + 0x310]
lea rdx, [rbp*2 + 2]
cmp rdx, 0x1000
jae 0x14000b9e9
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
test sil, sil
mov r13, qword [rsp + 0x60]
jne 0x140009c64
mov rcx, qword [rsp + 0x98]
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
mov esi, 0x26
mov r15, qword [rsp + 0x68]
jmp 0x14000aa11
mov rdi, qword [rsp + 0x98]
mov eax, dword [rsp + 0x70]
mov dword [rdi], eax
mov rax, qword [rsp + 0x290]
mov rsi, qword [rax]
mov dword [rsp + 0x20], 4
mov rcx, rsi
xor edx, edx
mov r8, r13
mov r9d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ebx, 0x27
test rax, rax
je 0x14000c3ab
mov r12, rax
lea rax, [rsp + 0x310]
mov qword [rsp + 0x20], rax
mov rcx, rsi
mov rdx, r12
mov r8, rdi
mov r9, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x14000ba18
cmp qword [rsp + 0x310], r13
jne 0x14000ba18
lea rax, str.TargetNtMapViewOfSection64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0
lea rsi, [0x140055040]
lea r8, [0x1400566e0]
lea rdi, [rsp + 0x290]
mov rcx, rdi
mov rdx, rsi
mov r9d, 1
call fcn.14000d310
lea rax, str.TargetNtUnmapViewOfSection64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 1
lea r8, [0x1400566cb]
mov rcx, rdi
mov rdx, rsi
mov r9d, 1
call fcn.14000d310
mov rax, qword [rsp + 0x290]
mov r13, qword [rax]
mov dword [rsp + 0x20], 1
mov r8d, 0x10000
mov rcx, r13
xor edx, edx
mov r9d, 0x2000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rsi, rax
mov rdi, qword [rsp + 0x2a0]
shl rdi, 6
lea rax, [rdi + 0x60]
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x88], rax
cmp rax, 0x10001
jae 0x14000c30e
mov r15d, 0xffa0
sub r15, rdi
lea rbx, [rsp + 0x310]
mov rcx, rbx
mov edx, 4
call sub.ADVAPI32.dll_SystemFunction036
movzx r14d, word [rsp + 0x310]
mov dword [rsp + 0x310], r14d
cmp r15, r14
jb 0x14000a0c4
mov qword [rsp + 0xb0], r12
mov ecx, 0x800
mov r8d, 0x1000
mov edx, 0x800
mov rax, r8
shr rdx, 1
mov r8, rcx
cmp rcx, qword [rsp + 0x88]
mov rcx, rdx
jae 0x14000a0ff
neg eax
and r14d, eax
mov eax, r14d
and eax, 0xf000
add rsi, rax
add rdi, 0x105f
and rdi, 0xfffffffffffff000
mov dword [rsp + 0x20], 0x40
mov qword [rsp + 0xb8], r13
mov rcx, r13
mov rdx, rsi
mov r8, rdi
mov r9d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
test rax, rax
je 0x14000c356
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x2b0], rax
mov dword [rsp + 0x2c8], 0
mov qword [rsp + 0x2b8], 0x20
lea rcx, [sym.firefox.exe_g_originals]
mov r8d, 0x158
xor edx, edx
call sub.ntdll.dll_memset
lea rcx, [0x140055040]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0xa0], rax
test rax, rax
je 0x14000c3a4
and r14d, 0xfff
add rdi, r14
mov qword [rsp + 0x70], rdi
mov rax, qword [rsp + 0x290]
mov rcx, qword [rax + 0x48]
mov qword [rsp + 0x80], rcx
mov rcx, qword [rax + 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbp, rax
mov ecx, 0x30
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rsi, rax
mov al, byte [rsp + 0x2a9]
mov rcx, qword [rsp + 0x290]
mov rcx, qword [rcx]
lea rdx, [0x140055060]
mov qword [rsi], rdx
mov qword [rsi + 0x18], 0
mov qword [rsi + 0x20], rcx
mov byte [rsi + 0x28], al
mov dword [rsi + 0x2c], 0
mov rdi, qword [rsp + 0x298]
lea r15, [rsp + 0x358]
lea r13, [rsp + 0x310]
mov qword [rsp + 0x60], rdi
mov rdi, qword [rdi]
cmp rdi, qword [rsp + 0x60]
je 0x14000a55b
lea rdx, [rdi + 0x10]
mov rcx, r13
call fcn.14000d6e0
mov ecx, 0x20
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov r13, rax
movdqa xmm0, xmmword [0x140055040]
movdqu xmmword [rax], xmm0
mov dword [rax + 0x10], 0x6c
mov r8d, 2
cmp qword [rsp + 0x328], 9
jne 0x14000b88e
mov rax, qword [rsp + 0x318]
mov rcx, qword [rsp + 0x330]
cmp rcx, 8
lea rdx, [rsp + 0x318]
cmovae rdx, rax
movzx edx, word [rdx]
cmp dx, word [r13]
jne 0x14000b88e
lea rdx, [rax + 2]
cmp rcx, 8
lea r9, [rsp + 0x31a]
cmovb rdx, r9
movzx edx, word [rdx]
cmp dx, word [r13 + 2]
jne 0x14000b88e
lea rdx, [rax + 4]
cmp rcx, 8
lea r9, [rsp + 0x31c]
cmovb rdx, r9
movzx edx, word [rdx]
cmp dx, word [r13 + 4]
jne 0x14000b88e
lea rdx, [rax + 6]
cmp rcx, 8
lea r9, [rsp + 0x31e]
cmovb rdx, r9
movzx edx, word [rdx]
cmp dx, word [r13 + 6]
jne 0x14000b88e
lea rdx, [rax + 8]
cmp rcx, 8
lea r9, [rsp + 0x320]
cmovb rdx, r9
movzx edx, word [rdx]
cmp dx, word [r13 + 8]
jne 0x14000b88e
lea rdx, [rax + 0xa]
cmp rcx, 8
lea r9, [rsp + 0x322]
cmovb rdx, r9
movzx edx, word [rdx]
cmp dx, word [r13 + 0xa]
jne 0x14000b88e
lea rdx, [rax + 0xc]
cmp rcx, 8
lea r9, [rsp + 0x324]
cmovb rdx, r9
movzx edx, word [rdx]
cmp dx, word [r13 + 0xc]
jne 0x14000b88e
lea rdx, [rax + 0xe]
cmp rcx, 8
lea r9, [rsp + 0x326]
cmovb rdx, r9
movzx edx, word [rdx]
cmp dx, word [r13 + 0xe]
jne 0x14000b88e
add rax, 0x10
cmp rcx, 8
lea rcx, [rsp + 0x328]
cmovb rax, rcx
movzx eax, word [rax]
xor r12d, r12d
cmp ax, word [r13 + 0x10]
jne 0x14000a52d
cmp dword [rsp + 0x310], 1
jne 0x14000a52d
mov rcx, qword [rsp + 0x378]
test rcx, rcx
jne 0x14000a449
cmp qword [rsp + 0x370], 0x10
mov r8, r15
jb 0x14000a40b
mov r8, qword [rsp + 0x358]
mov rax, qword [rsi]
mov rax, qword [rax + 0x10]
mov rcx, rsi
mov rdx, rbp
lea r9, [rsp + 0x190]
call qword [0x140068010]
test eax, eax
js 0x14000b853
mov rcx, qword [rsp + 0x190]
sub rcx, rbp
add rcx, qword [rsp + 0x80]
mov qword [rsp + 0x378], rcx
cmp qword [rsp + 0x370], 0x10
mov rdx, r15
jb 0x14000a45f
mov rdx, qword [rsp + 0x358]
mov rbx, r15
cmp qword [rsp + 0x350], 0x10
lea r9, [rsp + 0x338]
jb 0x14000a47d
mov r9, qword [rsp + 0x338]
mov r8, qword [rsp + 0x88]
sub r8, qword [rsp + 0x2b8]
movsxd rax, dword [rsp + 0x2c8]
shl rax, 6
mov r15, qword [rsp + 0x70]
lea r10, [r15 + rax]
add r10, 0x20
mov rax, qword [rsi]
mov rax, qword [rax + 8]
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x40], 0
mov rcx, rsi
mov rdx, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x80]
call qword [0x140068010]
test eax, eax
js 0x14000b896
movsxd rax, dword [rsp + 0x2c8]
lea ecx, [rax + 1]
shl rax, 6
add rax, r15
add rax, 0x20
mov dword [rsp + 0x2c8], ecx
add qword [rsp + 0x2b8], 0x40
movsxd rcx, dword [rsp + 0x314]
lea rdx, [sym.firefox.exe_g_originals]
mov qword [rdx + rcx*8], rax
mov r12b, 1
mov r8d, r14d
mov r15, rbx
mov edx, 0x20
mov rcx, r13
mov r14d, r8d
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
lea r13, [rsp + 0x310]
mov rcx, r13
call fcn.14000cc20
mov eax, r14d
test r12b, r12b
jne 0x14000a249
jmp 0x14000a55d
xor eax, eax
mov edi, eax
mov rax, qword [rsi]
mov rax, qword [rax]
mov rcx, rsi
mov edx, 1
call qword [0x140068010]
test rbp, rbp
je 0x14000a581
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test edi, edi
mov r15, qword [rsp + 0x68]
jne 0x14000c3a9
mov qword [rsp + 0x20], r13
lea r8, [rsp + 0x2b0]
mov r9d, 0x20
mov rcx, qword [rsp + 0xb8]
mov rsi, qword [rsp + 0x70]
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x14000ba32
cmp qword [rsp + 0x310], 0x20
jne 0x14000ba32
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0xb8]
mov rdx, rsi
mov r8, qword [rsp + 0x88]
mov r9d, 0x20
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [rsp + 0x290]
lea rdx, str.g_originals
lea r8, [sym.firefox.exe_g_originals]
mov r9d, 0x158
call fcn.14000d020
test eax, eax
mov r14, qword [rsp + 0x78]
mov r12, qword [rsp + 0xb0]
jne 0x14000c3c4
mov qword [sym.firefox.exe_g_interceptions], r12
lea r8, [sym.firefox.exe_g_interceptions]
mov rcx, qword [rsp + 0x290]
lea rdx, str.g_interceptions
mov r9d, 8
call fcn.14000d020
mov esi, eax
mov rcx, qword [rsp + 0x98]
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
test esi, esi
jne 0x14000aa11
lea rcx, [0x140055130]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, [0x140055b10]
lea rcx, [rsp + 0x310]
mov qword [rcx], rdx
mov qword [rcx + 8], rax
lea rdx, str.NtAllocateVirtualMemory
call fcn.1400013e0
mov qword [sym.firefox.exe_g_nt], rax
test rax, rax
je 0x14000b7fc
lea rdx, str.NtClose
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x140064998], rax
test rax, rax
je 0x14000b7fc
lea rdx, str.NtDuplicateObject
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x1400649a0], rax
test rax, rax
je 0x14000b7fc
lea rdx, str.NtFreeVirtualMemory
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x1400649a8], rax
test rax, rax
je 0x14000b7fc
lea rdx, [0x1400566e0]
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x1400649b0], rax
test rax, rax
je 0x14000b7fc
lea rdx, str.NtProtectVirtualMemory
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x1400649b8], rax
test rax, rax
je 0x14000b7fc
lea rdx, [0x140056248]
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x1400649c0], rax
test rax, rax
je 0x14000b7fc
lea rdx, [0x140056170]
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x1400649c8], rax
test rax, rax
je 0x14000b7fc
lea rdx, str.NtQuerySection
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x1400649d0], rax
test rax, rax
je 0x14000b7fc
lea rdx, [0x140055f0c]
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x1400649d8], rax
test rax, rax
je 0x14000b7fc
lea rdx, [0x1400566cb]
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x1400649e0], rax
test rax, rax
je 0x14000b7fc
lea rdx, str.NtSignalAndWaitForSingleObject
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x1400649e8], rax
test rax, rax
je 0x14000b7fc
lea rdx, str.NtWaitForSingleObject
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x1400649f0], rax
test rax, rax
je 0x14000b7fc
lea rdx, [0x140056631]
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x1400649f8], rax
test rax, rax
je 0x14000b7fc
lea rdx, [0x140056ba9]
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x140064a00], rax
test rax, rax
je 0x14000b7fc
lea rdx, [0x140056bc6]
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x140064a08], rax
test rax, rax
je 0x14000b7fc
lea rdx, str.RtlCreateHeap
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x140064a10], rax
test rax, rax
je 0x14000b7fc
lea rdx, str.RtlCreateUserThread
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x140064a18], rax
test rax, rax
je 0x14000b7fc
lea rdx, str.RtlDestroyHeap
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x140064a20], rax
test rax, rax
je 0x14000b7fc
lea rdx, [0x140056641]
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x140064a28], rax
test rax, rax
je 0x14000b7fc
lea rdx, str._strnicmp
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x140064a30], rax
test rax, rax
je 0x14000b7fc
lea rdx, [0x140056793]
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x140064a38], rax
test rax, rax
je 0x14000b7fc
lea rdx, [0x14005678c]
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x140064a40], rax
test rax, rax
je 0x14000b7fc
lea rdx, [0x140055f7a]
lea rcx, [rsp + 0x310]
call fcn.1400013e0
mov qword [0x140064a48], rax
test rax, rax
je 0x14000b7fc
lea rdx, str.g_nt
lea r8, [sym.firefox.exe_g_nt]
mov r9d, 0xc0
mov rcx, r14
call fcn.14000d020
xor esi, esi
test eax, eax
setne sil
shl esi, 5
mov dword [rsp + 0x60], esi
mov rax, qword [rsp + 0x298]
mov rcx, qword [rax + 8]
mov qword [rcx], 0
mov rsi, qword [rax]
test rsi, rsi
je 0x14000aa51
mov rdi, qword [rsi]
lea rcx, [rsi + 0x10]
call fcn.14000cc20
mov edx, 0x80
mov rcx, rsi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rsi, rdi
test rdi, rdi
jne 0x14000aa30
mov rcx, qword [rsp + 0x298]
mov edx, 0x80
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
cmp dword [rsp + 0x60], 0
jne 0x14000ba4b
cmp qword [r15 + 0xc8], 0
jne 0x14000c3c8
mov r12, qword [rsp + 0x78]
lea rsi, [r12 + 0x28]
mov rdi, qword [r15 + 0xa0]
mov r14, qword [r15 + 0xe0]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x10000
mov rcx, 0xffffffffffffffff
xor edx, edx
mov r8d, 0x8000004
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rcx, rsi
mov rdx, rax
call fcn.14000cb00
mov rcx, qword [rsi]
lea rax, [rcx + 1]
cmp rax, 1
jbe 0x14000c477
mov qword [rsp + 0x20], 0
mov edx, 6
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [rsp + 0xa0], rax
test rax, rax
je 0x14000c48a
test rdi, rdi
je 0x14000ab8e
mov rax, qword [rsp + 0xa0]
lea rbx, [rax + 0x2000]
mov r8d, 0xe000
mov rcx, rbx
mov rdx, rdi
call sub.ntdll.dll_memcpy
xor eax, eax
pxor xmm0, xmm0
pcmpeqd xmm1, xmm1
movdqu xmm2, xmmword [rbx + rax*8]
movdqa xmm4, xmm2
pcmpeqd xmm4, xmm0
pshufd xmm3, xmm4, 0xb1
pand xmm3, xmm4
movd ecx, xmm3
not ecx
test cl, 1
je 0x14000ab64
movq rcx, xmm2
sub rcx, rdi
mov qword [rbx + rax*8], rcx
pxor xmm3, xmm1
pextrw ecx, xmm3, 4
test cl, 1
je 0x14000ab84
pshufd xmm2, xmm2, 0xee
movq rcx, xmm2
sub rcx, rdi
mov qword [rbx + rax*8 + 8], rcx
add rax, 2
cmp rax, 0x40
jne 0x14000ab37
mov qword [sym.firefox.exe_g_shared_IPC_size], 0x2000
lea r8, [sym.firefox.exe_g_shared_IPC_size]
lea rdx, str.g_shared_IPC_size
mov r9d, 8
mov rcx, r12
call fcn.14000d020
mov qword [sym.firefox.exe_g_shared_IPC_size], 0
test eax, eax
jne 0x14000c49d
mov qword [sym.firefox.exe_g_shared_policy_size], 0xe000
lea r8, [sym.firefox.exe_g_shared_policy_size]
lea rdx, str.g_shared_policy_size
mov r9d, 8
mov rcx, r12
call fcn.14000d020
mov qword [sym.firefox.exe_g_shared_policy_size], 0
test eax, eax
jne 0x14000ba3c
mov ecx, 0x38
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rdi, rax
mov rsi, qword [r12 + 0x40]
mov ebx, dword [r12 + 0x10]
mov r15, qword [r12]
pxor xmm0, xmm0
movdqu xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov ecx, 0x18
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rsi
mov qword [rdi + 0x20], r15
mov dword [rdi + 0x28], ebx
mov rsi, rdi
mov qword [rdi + 0x30], r14
mov rax, qword [0x140064938]
test rax, rax
jne 0x14000ac84
xor ecx, ecx
mov edx, 1
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov rcx, rax
xor eax, eax
lock cmpxchg qword [0x140064938], rcx
jne 0x14000c662
mov rbx, qword [r12 + 0x38]
mov rcx, rsi
mov qword [r12 + 0x38], rsi
test rbx, rbx
jne 0x14000c4ac
mov rax, qword [rsp + 0xa0]
mov qword [rcx], rax
mov qword [rax], 0
mov ebx, 0x128
mov esi, 0x28
pxor xmm6, xmm6
mov r13, qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rdi, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r12, rcx
mov qword [rsp + 0x70], rbx
mov rbx, qword [r12]
mov ecx, 0x48
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r14, rax
movdqu xmmword [rax], xmm6
movabs rax, 0xaaaaaaaaaaaaaaa
cmp qword [r12 + 0x10], rax
je 0x14000b7f0
mov r15, r12
mov r12, qword [r12 + 8]
mov ecx, 0x18
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rax + 0x10], r14
inc qword [r15 + 0x10]
mov rcx, qword [r12 + 8]
mov qword [rax], r12
mov qword [rax + 8], rcx
mov qword [r12 + 8], rax
mov qword [rcx], rax
mov qword [rsp + 0x80], rbx
lea rax, [rbx + rsi]
add rax, 0xfffffffffffffff8
mov qword [rsp + 0x88], rax
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call r13
mov rcx, r14
mov rdx, rax
call fcn.14000cb00
mov rbp, qword [r15 + 0x20]
mov r12, r13
mov r13, qword [r14]
call rdi
xor ebx, ebx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0x100002
mov rcx, rax
mov rdx, r13
mov r8, rbp
mov r9, qword [rsp + 0x88]
mov rbp, rsi
mov rsi, qword [sym.imp.KERNEL32.dll_DuplicateHandle]
call rsi
mov dword [rsp + 0x60], 4
test eax, eax
je 0x14000ba46
mov rax, qword [rsp + 0x80]
add rax, rbp
mov qword [rsp + 0x88], rax
mov r13, r14
add r13, 8
xor ecx, ecx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call r12
mov rcx, r13
mov rdx, rax
call fcn.14000cb00
mov r13, qword [r15 + 0x20]
mov r12, qword [r14 + 8]
call rdi
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0x100002
mov rcx, rax
mov rdx, r12
mov r8, r13
mov r9, qword [rsp + 0x88]
call rsi
test eax, eax
je 0x14000ba46
mov r12, r15
mov rax, qword [rsp + 0x80]
add rax, rbp
add rax, 0xffffffffffffffe8
mov rbx, qword [rsp + 0x70]
mov qword [rax], rbx
mov dword [rax + 8], 1
mov rcx, qword [rsp + 0xa0]
mov qword [r14 + 0x20], rcx
mov dword [r14 + 0x10], 0x400
mov qword [r14 + 0x28], rax
mov rax, qword [rax]
add rax, rcx
mov qword [r14 + 0x18], rax
mov rax, qword [r15 + 0x30]
mov qword [r14 + 0x30], rax
mov rax, qword [r15 + 0x20]
mov qword [r14 + 0x38], rax
mov eax, dword [r15 + 0x28]
mov dword [r14 + 0x40], eax
add rbx, 0x400
mov rcx, qword [r15 + 0x18]
mov r8, qword [r14]
mov rax, qword [rcx]
mov rax, qword [rax]
mov qword [rsp + 0x20], r14
mov rdx, r15
lea r9, [0x140002b20]
call qword [0x140068010]
add rbp, 0x28
cmp rbx, 0x1d28
mov r13, qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rsi, rbp
jne 0x14000accb
mov rsi, qword [r12]
mov rbx, qword [r12 + 0x20]
add rsi, 8
mov r14, qword [0x140064938]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor ebp, ebp
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 0x100002
mov rcx, rax
mov rdx, r14
mov r8, rbx
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
mov r15, qword [rsp + 0x68]
je 0x14000ba4b
mov rax, qword [r12]
mov qword [rax], 7
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rbx]
mov rdi, qword [rbx + 0x28]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 7
lea r9, [rsp + 0x310]
mov rcx, rax
mov rdx, rdi
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x14000c4c6
mov rax, qword [rsp + 0x310]
mov qword [sym.firefox.exe_g_shared_section], rax
lea r8, [sym.firefox.exe_g_shared_section]
lea rdx, str.g_shared_section
mov r9d, 8
mov rcx, rbx
call fcn.14000d020
mov qword [sym.firefox.exe_g_shared_section], 0
test eax, eax
jne 0x14000ba3c
mov dword [rbx + 0x14], 0
mov rsi, qword [rbx + 8]
mov qword [rbx + 8], 0
lea rax, [rsi + 1]
cmp rax, 2
jb 0x14000afbd
mov rdi, rbx
add rdi, 8
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
mov rcx, rsi
mov rdx, rdi
mov r9, rax
call fcn.140001040
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [r15 + 0x7c]
mov dword [sym.firefox.exe_g_shared_delayed_integrity_level], eax
lea r8, sym.firefox.exe_g_shared_delayed_integrity_level
lea rdx, str.g_shared_delayed_integrity_level
mov r9d, 4
mov rcx, rbx
call fcn.14000d020
mov dword [sym.firefox.exe_g_shared_delayed_integrity_level], 7
test eax, eax
jne 0x14000ba8d
mov rsi, qword [r15 + 0x88]
mov edi, dword [r15 + 0x80]
call fcn.14000dbe0
xor ecx, ecx
cmp eax, 5
setl cl
or ecx, 0x12
shl ecx, 5
and ecx, edi
or rcx, rsi
mov qword [sym.firefox.exe_g_shared_delayed_mitigations], rcx
test rsi, 0xffffffffffe08084
jne 0x14000c4d3
lea rdx, str.g_shared_delayed_mitigations
lea r8, [sym.firefox.exe_g_shared_delayed_mitigations]
mov r9d, 8
mov rcx, rbx
call fcn.14000d020
mov qword [sym.firefox.exe_g_shared_delayed_mitigations], 0
test eax, eax
jne 0x14000ba8d
lea rsi, [r15 + 8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
movabs rax, 0xaaaaaaaaaaaaaaa
cmp qword [r15 + 0x38], rax
je 0x14000b7f0
mov rdi, qword [r15 + 0x30]
mov ecx, 0x18
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rax + 0x10], rbx
inc qword [r15 + 0x38]
mov rcx, qword [rdi + 8]
mov qword [rax], rdi
mov qword [rax + 8], rcx
mov qword [rdi + 8], rax
mov qword [rcx], rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [rsp + 0x170]
inc rax
cmp rax, 2
jb 0x14000c4e0
mov ecx, 0x18
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov ebp, dword [rsp + 0x120]
lock inc dword [r15 + 0x40]
mov rsi, rax
xor eax, eax
mov qword [rsp + 0xf8], rax
mov rdi, qword [rsp + 0x170]
mov qword [rsp + 0x170], rax
lea rax, [rdi + 1]
cmp rax, 2
jb 0x14000b12b
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea rdx, [rsp + 0x170]
mov rcx, rdi
mov r9, rax
call fcn.140001040
lea rbx, [rsp + 0xf8]
mov rcx, rbx
mov rdx, rdi
call fcn.14000cb00
xor eax, eax
mov qword [rsi], rax
mov rdi, qword [rbx]
mov qword [rbx], rax
lea rax, [rdi + 1]
cmp rax, 2
jb 0x14000b173
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea rdx, [rsp + 0xf8]
mov rcx, rdi
mov r9, rax
call fcn.140001040
mov rcx, rsi
mov rdx, rdi
call fcn.14000cb00
mov qword [rsi + 8], r15
lock inc dword [r15 + 0x40]
mov dword [rsi + 0x10], ebp
mov rdi, qword [rsp + 0xf8]
lea rax, [rdi + 1]
cmp rax, 2
jae 0x14000b6f2
mov rcx, r15
call fcn.14000e120
mov rdi, qword [rsp + 0x90]
mov rcx, qword [rdi + 8]
mov r8d, 1
xor edx, edx
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
test eax, eax
je 0x14000c53d
mov rax, qword [rdi + 8]
mov rcx, qword [rsi]
lea r8, [rsp + 0x310]
mov qword [r8], rsi
mov qword [r8 + 8], rax
mov edx, 7
mov r9d, 0x10
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
test eax, eax
je 0x14000c593
lea rsi, [rdi + 0x38]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ebx, dword [rsp + 0x120]
mov rdi, qword [rdi + 0x28]
mov r14, qword [rdi + 8]
cmp byte [r14 + 0x19], 0
jne 0x14000b729
mov rax, rdi
mov rcx, r14
mov edx, dword [r14 + 0x1c]
lea r8, [r14 + 0x10]
cmp edx, ebx
cmovae rax, r14
cmovae r8, r14
mov r14, qword [r8]
cmp byte [r14 + 0x19], 0
je 0x14000b226
xor ebp, ebp
cmp edx, ebx
setae bpl
mov r14, rcx
cmp byte [rax + 0x19], 0
jne 0x14000b25b
cmp ebx, dword [rax + 0x1c]
jae 0x14000b2b3
movabs rax, 0x7ffffffffffffff
mov r12, qword [rsp + 0x90]
cmp qword [r12 + 0x30], rax
je 0x14000b8d9
add r12, 0x28
mov ecx, 0x20
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov dword [rax + 0x1c], ebx
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
mov word [rax + 0x18], 0
lea rdx, [rsp + 0x310]
mov qword [rdx], r14
mov dword [rdx + 8], ebp
mov rcx, r12
mov r8, rax
call fcn.140007820
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14, qword [rsp + 0xc0]
mov rsi, qword [rsp + 0x110]
mov qword [rsp + 0x110], 0
lea rax, [rsi + 1]
cmp rax, 2
mov r12, qword [rsp + 0xa8]
jb 0x14000b30a
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea rdx, [rsp + 0x110]
mov rcx, rsi
mov r9, rax
call fcn.140001040
mov rdi, qword [rsp + 0x118]
mov qword [rsp + 0x118], 0
lea rax, [rdi + 1]
cmp rax, 2
jb 0x14000b34b
lea rbx, [rsp + 0x118]
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
mov rcx, rdi
mov rdx, rbx
mov r9, rax
call fcn.140001040
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x120], 0
mov rcx, qword [rsp + 0x4c8]
mov qword [rcx], rsi
mov qword [rcx + 8], rdi
mov qword [rcx + 0x10], rax
mov dword [rsp + 0x60], 0
lea rcx, [rsp + 0x110]
call fcn.14000dae0
test r12, r12
jne 0x14000c9b1
test r14, r14
jne 0x14000c9ce
mov rax, qword [rsp + 0x1f8]
cmp rax, 8
jb 0x14000b3c9
mov rcx, qword [rsp + 0x1e0]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jae 0x14000c5e1
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rcx, qword [rsp + 0x150]
test rcx, rcx
je 0x14000b3f3
mov rdx, qword [rsp + 0x160]
sub rdx, rcx
cmp rdx, 0x1000
jae 0x14000c609
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rcx, qword [rsp + 0x280]
test rcx, rcx
je 0x14000b406
call qword [sym.imp.KERNEL32.dll_DeleteProcThreadAttributeList]
mov rcx, qword [rsp + 0x210]
test rcx, rcx
je 0x14000b418
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
mov ebx, dword [rsp + 0x60]
mov rsi, qword [rsp + 0x170]
lea rax, [rsi + 1]
cmp rax, 2
jae 0x14000b6c2
mov rsi, qword [rsp + 0x178]
lea rax, [rsi + 1]
cmp rax, 2
jae 0x14000b632
mov rsi, qword [rsp + 0x180]
lea rax, [rsi + 1]
cmp rax, 2
jae 0x14000b662
mov rsi, qword [rsp + 0x188]
lea rax, [rsi + 1]
cmp rax, 2
jae 0x14000b692
mov rcx, r15
call fcn.14000e120
mov rax, qword [rsp + 0x4b0]
mov rcx, qword [rax]
test rcx, rcx
je 0x14000b499
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x140068010]
mov rcx, qword [rsp + 0x428]
xor rcx, rsp
call fcn.14002ef70
mov eax, ebx
movaps xmm6, xmmword [rsp + 0x430]
add rsp, 0x448
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea r15, [rsp + 0x210]
mov rcx, rdi
mov rdx, r15
mov r9, rax
call fcn.140001040
mov rcx, qword [r15]
mov r15, qword [rsp + 0x68]
call fcn.140001c00
jmp 0x140007f2e
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea r15, [rsp + 0x310]
mov rcx, rdi
mov rdx, r15
mov r9, rax
call fcn.140001040
mov rcx, qword [r15]
mov r15, qword [rsp + 0x68]
call fcn.140001c00
jmp 0x140007f16
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea r13, [rsp + 0x100]
mov rcx, rdi
mov rdx, r13
mov r9, rax
call fcn.140001040
mov rcx, qword [r13]
call fcn.140001c00
mov qword [r13], 0
jmp 0x14000882b
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea r13, [rsp + 0x108]
mov rcx, rdi
mov rdx, r13
mov r9, rax
call fcn.140001040
mov rcx, qword [r13]
call fcn.140001c00
mov qword [r13], 0
jmp 0x140008841
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea r14, [rsp + 0x1d0]
mov rcx, rbx
mov rdx, r14
mov r9, rax
call fcn.140001040
mov rcx, qword [r14]
call fcn.140001c00
jmp 0x140008f1f
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea r15, [rsp + 0x2b0]
mov rcx, r14
mov rdx, r15
mov r9, rax
call fcn.140001040
mov rcx, qword [r15]
call fcn.140001c00
jmp 0x140008eb8
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
mov rcx, rbx
mov rdx, r14
mov r9, rax
call fcn.140001040
mov rcx, qword [r14]
call fcn.140001c00
mov qword [r14], 0
jmp 0x140008f09
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea rdi, [rsp + 0x178]
mov rcx, rsi
mov rdx, rdi
mov r9, rax
call fcn.140001040
mov rcx, qword [rdi]
call fcn.140001c00
jmp 0x14000b448
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea rdi, [rsp + 0x180]
mov rcx, rsi
mov rdx, rdi
mov r9, rax
call fcn.140001040
mov rcx, qword [rdi]
call fcn.140001c00
jmp 0x14000b45e
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea rdi, [rsp + 0x188]
mov rcx, rsi
mov rdx, rdi
mov r9, rax
call fcn.140001040
mov rcx, qword [rdi]
call fcn.140001c00
jmp 0x14000b474
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea rdi, [rsp + 0x170]
mov rcx, rsi
mov rdx, rdi
mov r9, rax
call fcn.140001040
mov rcx, qword [rdi]
call fcn.140001c00
jmp 0x14000b432
call fcn.14000cc10
mov r8, qword [rsp + 0x488]
lea rbx, [rsp + 0xf8]
mov rcx, rdi
mov rdx, rbx
mov r9, rax
call fcn.140001040
mov rcx, qword [rbx]
call fcn.140001c00
mov qword [rbx], 0
jmp 0x14000b1a0
xor ebp, ebp
mov rax, rdi
jmp 0x14000b250
cmp r8, rdx
jb 0x140008ac5
cmp rcx, rax
je 0x140008ac5
jmp 0x140008b1d
mov rsi, rax
mov rcx, rax
xor r13d, r13d
jmp 0x140009be4
lea rcx, [0x140055aa0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
movzx eax, word [rax]
cmp eax, 0x5a4d
jne 0x14000c96d
movsxd rax, dword [rcx + 0x3c]
cmp dword [rcx + rax], 0x4550
jne 0x14000c96d
movzx edx, word [rcx + rax + 0x14]
cmp edx, 0xf0
jne 0x14000c96d
movzx eax, word [rcx + rax + 0x18]
cmp eax, 0x20b
jne 0x14000c96d
xor eax, eax
lock cmpxchg qword [0x140064a50], rcx
jmp 0x140008f89
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000c62b
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
jmp 0x140008b48
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
je 0x14000b7df
jmp 0x140008c57
lea rcx, str.list_too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
mov esi, 0x20
jmp 0x14000aa11
sub rcx, rax
mov rax, rcx
sar rax, 1
mov qword [rsp + 0x310], rax
cmp rcx, 0xfffffffffffffffe
je 0x140008c13
mov rcx, r13
mov r8, rsi
mov rdi, rdx
call fcn.14003aca0
mov rcx, rdi
mov rdx, rbp
mov r8d, 0x6e
mov r9, rax
call fcn.1400398c0
mov rcx, rdi
call fcn.140039960
mov rdx, rdi
jmp 0x140008c13
mov r12d, eax
lea r14, [rsp + 0x1b0]
mov qword [r14], 0
lea rcx, [0x140056360]
mov rdx, r14
call fcn.140050660
mov rax, qword [r14]
mov ecx, r12d
call qword [0x140068010]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r8d, 0x29
xor r12d, r12d
jmp 0x14000a52d
mov r12d, eax
lea r14, [rsp + 0x1b0]
mov qword [r14], 0
lea rcx, [0x140056360]
mov rdx, r14
call fcn.140050660
mov rax, qword [r14]
mov ecx, r12d
call qword [0x140068010]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r8d, 0x28
xor r12d, r12d
jmp 0x14000a52a
call fcn.14003cb00
mov rcx, r13
call fcn.140001bb0
lea rcx, [r13 + 8]
call fcn.140001bb0
mov qword [r13 + 0x10], 0
jmp 0x140009179
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
jmp case.default.0x14000bcc1
xor eax, eax
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1f8], 7
mov word [rsp + 0x1e0], 0
jmp 0x140007ffa
mov qword [rdx], rax
add rdx, 8
mov qword [rsp + 0x158], rdx
jmp 0x1400083cb
mov rcx, rdi
mov rdi, rax
jmp 0x140009451
add rcx, 0x10
jmp 0x140009444
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x4c0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x190]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [rsp + 0x60], 0x17
mov r15, qword [rsp + 0x68]
jmp 0x1400091a9
movdqu xmm0, xmmword [rdi]
movdqa xmmword [rsp + 0x310], xmm0
mov ebp, 7
mov rax, r13
jmp 0x140009d05
movabs rax, 0x7fffffffffffffec
cmp rbp, rax
jae 0x14000bf91
add rcx, 0x29
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
lea r14, [rsp + 0x310]
jmp 0x140009ce6
xor esi, esi
jmp 0x140009f26
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x14000c62b
add rbp, rbp
add rbp, 0x29
mov rdx, rbp
mov rcx, rax
lea r14, [rsp + 0x310]
jmp 0x140009f49
mov rcx, rsi
mov rdx, r12
xor r8d, r8d
mov r9d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
jmp 0x14000c3ab
mov ebx, 0x2a
jmp 0x14000c3ab
mov dword [rsp + 0x60], eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x4c0]
mov dword [rcx], eax
mov rsi, qword [rsp + 0x78]
mov rcx, rsi
call fcn.14004fc40
mov rcx, rsi
call fcn.14001bc20
mov rcx, rsi
call fcn.1400518b0
mov r14, qword [rsp + 0xc0]
mov r12, qword [rsp + 0xa8]
jmp 0x14000b37a
mov dword [rsp + 0x60], eax
jmp 0x14000ba4b
xor esi, esi
mov rbx, r13
mov r12, rdi
lea r14, [rsp + 0x310]
jmp 0x140009f26
invalid
mov esi, 0xa0
dec r13d
cmp r13d, 3
ja case.default.0x14000bcc1
movsd dword [rdi], dword [rsi]
sar edi, 0xff
movsd dword [rdi], dword [rsi]
sar edi, 0xff
lea rax, [0x140055c04]
movsxd rcx, dword [rax + r13*4]
add rcx, rax
jmp rcx
mov ecx, 0xd8
jmp 0x140007dd9
or eax, 0x100
mov qword [rsp + 0x380], rbx
jmp 0x140007df7
mov ebx, 0x2f
mov r15, qword [rsp + 0x68]
jmp 0x140007f20
mov r8, qword [0x140064920]
test r8, r8
je 0x14000c8da
lea rcx, [rsp + 0x1e0]
xor edx, edx
call fcn.14000eea0
mov r15, qword [rsp + 0x68]
jmp 0x140007ffa
xor edi, edi
xor eax, eax
jmp 0x1400082d3
mov eax, edi
and eax, 0x10
shr eax, 4
shl rax, 9
or rax, 0x100
mov qword [rsp + 0x200], rax
jmp 0x14000805f
or rax, 0x100000
jmp 0x14000807e
or rax, 0x1000000
jmp 0x140008088
bts rax, 0x24
jmp 0x1400080c7
bts rax, 0x29
jmp 0x1400080cf
bts rcx, 0x2c
jmp 0x140008111
movabs rcx, 0x3000000000
or rax, rcx
jmp 0x140008151
or byte [rsp + 0x20b], 0x10
jmp 0x14000821a
mov dword [rsp + 0x80], 0
jmp 0x140008308
mov qword [rdx], rdi
add rdx, 8
mov qword [rsp + 0x158], rdx
jmp 0x140008376
mov rdi, r14
lock inc dword [r14 + 8]
call fcn.14000dbe0
mov dword [rsp + 0x60], 2
cmp eax, 5
jl 0x14000c9c6
cmp byte [rdi + 0x50], 0
je 0x14000c915
call fcn.14000dbe0
cmp eax, 9
mov r15, qword [rsp + 0x68]
mov r14, rdi
jl 0x14000c9ce
add esi, 2
jmp 0x140008400
mov dword [rsp + 0x60], 0x11
jmp 0x14000b390
mov rcx, rdi
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
mov r15, qword [rsp + 0x68]
jmp 0x14000b390
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
jmp 0x1400084a4
mov ecx, 0x90
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea r8, [r14 + 0x58]
mov rsi, r14
lea rdx, [r14 + 0xc]
mov rcx, rax
mov qword [rsp + 0xa8], rax
call fcn.14004d0c0
mov rcx, qword [rsp + 0x280]
test rcx, rcx
je 0x14000c999
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], 0x18
mov r8d, 0x20009
xor edx, edx
mov r9, qword [rsp + 0xa8]
call qword [sym.imp.KERNEL32.dll_UpdateProcThreadAttribute]
test eax, eax
je 0x14000c999
cmp byte [rsi + 0x50], 0
je 0x14000bed4
mov rcx, qword [rsp + 0x280]
test rcx, rcx
je 0x14000c999
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], 4
lea r9, [rsp + 0x134]
mov r8d, 0x2000f
xor edx, edx
call qword [sym.imp.KERNEL32.dll_UpdateProcThreadAttribute]
test eax, eax
je 0x14000c999
mov rdi, qword [rsp + 0x90]
mov r14, rsi
jmp 0x1400085f2
mov r15, qword [r14 + 0x70]
mov rdi, qword [r14 + 0x78]
cmp r15, rdi
je 0x14000c907
mov rcx, rdi
sub rcx, r15
mov rax, rcx
sar rax, 2
movabs r12, 0xf0f0f0f0f0f0f0f1
imul r12, rax
movabs rax, 0x3c3c3c3c3c3c3c3
cmp r12, rax
ja 0x14000bf91
cmp r12, 0x3d
jb 0x14000c924
add rcx, 0x27
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000c92c
mov rcx, r14
sub rcx, rsi
mov rax, rcx
sar rax, 2
movabs rdi, 0xf0f0f0f0f0f0f0f1
imul rdi, rax
movabs rax, 0x3c3c3c3c3c3c3c3
cmp rdi, rax
ja 0x14000bf91
cmp rdi, 0x3d
jb 0x14000c884
add rcx, 0x27
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14000c88c
call fcn.1400336d0
mov rax, qword [rsp + 0x60]
sub rax, rsi
mov rdx, rax
cmp rax, 0x1000
jb 0x14000bfc5
mov rax, qword [rsi - 8]
add rsi, 0xfffffffffffffff8
sub rsi, rax
cmp rsi, 0x20
jae 0x14000c62b
add rdx, 0x27
mov rsi, rax
mov rcx, rsi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
jmp 0x14000884a
call qword [sym.imp.mozglue.dll_free]
jmp 0x14000886e
mov qword [rsp + 0xb0], rdi
jmp 0x1400088bc
mov r10, rcx
mov r8, rax
cmp word [r10], 0
je 0x14000c66d
add r10, 2
dec r8
lea rdx, [rsp + 0x310]
jne 0x14000bff0
jmp 0x140008c32
cmp qword [r15 + 0x38], 8
jb 0x14000c01c
mov rbx, qword [r15 + 0x20]
mov r9, qword [r15 + 0x30]
mov rax, qword [rsp + 0x2a0]
mov rcx, qword [rsp + 0x2a8]
mov rdx, rcx
sub rdx, rax
cmp rdx, r9
jae 0x14000c6fe
lea rcx, [rsp + 0x290]
mov rdx, r9
mov r8, rbx
call fcn.14000ce90
jmp 0x14000c741
cmp r15, qword [rax + 0x10]
mov r15, rax
je 0x140008c49
jmp 0x140008c57
lea rcx, [rsp + 0x290]
xor edx, edx
call fcn.140019d50
mov r13, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x60]
mov r8, qword [rsp + 0x98]
mov r14, qword [rsp + 0xb0]
jmp 0x140008cc1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x4c0]
mov dword [rcx], eax
mov dword [rsp + 0x60], 0x12
mov r15, qword [rsp + 0x68]
jmp 0x1400091b6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x4c0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x190]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [rsp + 0x60], 0x14
jmp 0x14000b986
mov ecx, 0x44
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rbx, rax
pxor xmm0, xmm0
movdqu xmmword [rax], xmm0
movdqu xmmword [rax + 0x10], xmm0
movdqu xmmword [rax + 0x20], xmm0
movdqu xmmword [rax + 0x30], xmm0
mov dword [rax + 0x40], 0
mov ecx, 0x44
mov rdx, rax
mov r8, r15
call qword [sym.imp.ADVAPI32.dll_CopySid]
mov r12b, 1
jmp 0x140008e95
lea r8, [r13 + 0x58]
lea r14, [rsp + 0x310]
mov rcx, r14
mov rdx, rbx
call fcn.14004d0c0
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov rcx, rsi
xor edx, edx
mov r8, r14
xor r9d, r9d
call fcn.14004b320
mov ebp, eax
mov rcx, r14
call fcn.14004d400
mov rcx, rbx
call fcn.1400518b0
test ebp, ebp
jne 0x14000c184
mov rsi, qword [rsp + 0x1d0]
mov r13, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x60]
jmp 0x140008eca
mov rcx, rbx
call fcn.1400518b0
jmp 0x140008eca
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x4c0]
mov dword [rcx], eax
mov rcx, qword [rsp + 0x190]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x140008f09
mov dword [rsp + 0x60], 0x15
jmp 0x14000b986
int3
mov rcx, r13
call fcn.14004fc40
mov rcx, r13
call fcn.14001bc20
mov rcx, r13
jmp 0x14000ba73
mov rcx, r13
call fcn.14004fc70
mov rcx, qword [rsp + 0x4b8]
mov dword [rcx], eax
test eax, eax
je 0x140009233
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x4c0]
mov dword [rcx], eax
jmp 0x140009233
lea rcx, [rsp + 0x310]
mov rdx, rdi
call fcn.14003cb70
mov rax, rdi
jmp 0x140009500
lea rsi, [rsp + 0x290]
mov r15, qword [rsp + 0x68]
mov r14, qword [rsp + 0x78]
cmp qword [rdi + 0x18], 8
mov rdx, rdi
jb 0x14000c29a
mov rdx, qword [rdi]
mov rcx, rsi
call fcn.140043030
add rdi, 0x20
cmp rdi, rbx
je 0x140009979
jmp 0x14000c28d
lea rax, str.TargetCreateThread64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x12
lea rdx, [0x140055150]
lea r8, [0x140056f9b]
lea rcx, [rsp + 0x290]
mov r9d, 2
call fcn.14000d310
jmp 0x140009af7
xor r12d, r12d
cmp qword [rsp + 0x2a0], 0
mov r15, qword [rsp + 0x68]
jne 0x14000a05a
jmp 0x14000a630
xor ecx, ecx
jmp 0x140009c29
lea rdx, [0x140055038]
lea r8, str.size___kAllocGranularity
lea rcx, [rsp + 0x2b0]
call fcn.14003aca0
lea rdx, str._builds_worker_checkouts_gecko_security_sandbox_chromium_sandbox_win_src_interception.cc
lea rbx, [rsp + 0x310]
mov rcx, rbx
mov r8d, 0x2b
mov r9, rax
call fcn.1400398c0
mov rcx, rbx
call fcn.140039960
jmp 0x14000a0b3
lea rsi, [rsp + 0x318]
mov dword [rsi - 8], 3
mov rcx, rsi
call fcn.1400266f0
lea rax, str._builds_worker_checkouts_gecko_security_sandbox_chromium_sandbox_win_src_interception.cc
mov qword [rsi + 0xf0], rax
mov dword [rsi + 0xf8], 0x188
lea rcx, [rsp + 0x420]
call fcn.14003b990
lea rcx, [rsp + 0x310]
call fcn.140039960
jmp 0x14000a164
mov edi, 7
mov ebx, edi
mov rcx, qword [rsp + 0x98]
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
mov r15, qword [rsp + 0x68]
mov esi, ebx
jmp 0x14000aa11
mov ebx, eax
jmp 0x14000c3ab
lea rbx, [r15 + 0xc0]
mov rcx, qword [r15 + 0xc0]
call fcn.140041630
mov rdi, rax
mov rcx, rax
and rcx, 0xfffffffffffffff8
call sub.mozglue.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
mov rsi, rax
mov rcx, rbx
mov rdx, rax
mov r8, rdi
call fcn.1400416f0
test al, al
je 0x14000c984
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax]
lea r9, [rsp + 0x310]
mov rdx, rsi
mov r8, rdi
call fcn.140050b30
test al, al
je 0x14000c984
mov rax, qword [rsp + 0x310]
mov qword [sym.firefox.exe_g_handles_to_close], rax
lea r8, [sym.firefox.exe_g_handles_to_close]
lea rdx, str.g_handles_to_close
mov r9d, 8
mov rcx, qword [rsp + 0x78]
call fcn.14000d020
mov edi, eax
mov rcx, rsi
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
mov dword [rsp + 0x60], 0x21
test edi, edi
mov r15, qword [rsp + 0x68]
je 0x14000aa7c
jmp 0x14000ba4b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x60], 0x19
jmp 0x14000ba4b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x60], 0x1b
jmp 0x14000ba4b
mov dword [rsp + 0x60], eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x14000ba4b
mov rcx, rbx
call fcn.14001bde0
mov rcx, rbx
call fcn.1400518b0
mov rcx, qword [r12 + 0x38]
jmp 0x14000ac9a
mov dword [rsp + 0x60], 0x1a
jmp 0x14000ba40
mov dword [rsp + 0x60], 2
jmp 0x14000ba4b
lea r9, [rsp + 0xf0]
mov qword [r9], r15
lock inc dword [r15 + 0x40]
mov r8d, dword [rsp + 0x120]
mov rdx, qword [rsp + 0x110]
mov rax, qword [rsp + 0x4c0]
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x90]
call fcn.1400074a0
mov dword [rsp + 0x60], eax
test eax, eax
mov r14, qword [rsp + 0xc0]
je 0x14000b2c4
mov rcx, qword [rsp + 0x78]
call fcn.14004fc40
jmp 0x14000ba80
lea rdi, [rsp + 0x318]
mov dword [rdi - 8], 3
mov rcx, rdi
call fcn.1400266f0
lea rax, str._builds_worker_checkouts_gecko_security_sandbox_chromium_sandbox_win_src_broker_services.cc
mov qword [rdi + 0xf0], rax
mov dword [rdi + 0xf8], 0x28e
mov rdi, qword [rsp + 0x90]
lea rcx, [rsp + 0x420]
call fcn.14003b990
lea rcx, [rsp + 0x310]
call fcn.140039960
jmp 0x14000b1cd
lea rsi, [rsp + 0x318]
mov dword [rsi - 8], 3
mov rcx, rsi
call fcn.1400266f0
lea rax, str._builds_worker_checkouts_gecko_security_sandbox_chromium_sandbox_win_src_broker_services.cc
mov qword [rsi + 0xf0], rax
mov dword [rsi + 0xf8], 0x292
lea rcx, [rsp + 0x420]
call fcn.14003b990
lea rcx, [rsp + 0x310]
call fcn.140039960
jmp 0x14000b1fc
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000c62b
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
mov r15, qword [rsp + 0x68]
jmp 0x14000b3c4
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x14000c62b
add rdx, 0x27
mov rcx, rax
mov r15, qword [rsp + 0x68]
jmp 0x14000b3ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
add r8, 0x10
jmp 0x14000955c
xor eax, eax
jmp 0x1400081fb
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
mov edx, 1
call qword [0x140068010]
jmp 0x14000861f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000ac84
sub r10, rcx
mov rcx, r10
sar rcx, 1
mov qword [rsp + 0x310], rcx
cmp r10, 0xfffffffffffffffe
lea r8, str.std::wstring::npos__i.second.find_L0_
lea rdx, [rsp + 0x310]
je 0x140008c32
mov rcx, r13
call fcn.14003aca0
lea rcx, [rsp + 0x310]
mov rdx, rbp
mov r8d, 0x6f
mov r9, rax
call fcn.1400398c0
lea rcx, [rsp + 0x310]
call fcn.140039960
lea rdx, [rsp + 0x310]
mov rax, qword [r15 + 0x50]
jmp 0x140008c32
mov qword [rsp + 0x208], 0x10000
jmp 0x14000817f
lea r12, [rax + r9]
mov qword [rsp + 0x2a0], r12
lea r13, [rsp + 0x290]
cmp rcx, 8
jb 0x14000c720
mov r13, qword [rsp + 0x290]
lea rcx, [rax*2]
add rcx, r13
add r9, r9
mov rdx, rbx
mov r8, r9
call sub.ntdll.dll_memmove
mov word [r13 + r12*2], 0
mov rax, qword [rsp + 0x2a0]
mov rcx, qword [rsp + 0x2a8]
cmp rax, rcx
jae 0x14000c787
lea rdx, [rax + 1]
mov qword [rsp + 0x2a0], rdx
lea rdx, [rsp + 0x290]
cmp rcx, 8
jb 0x14000c778
mov rdx, qword [rsp + 0x290]
mov word [rdx + rax*2], 0x3d
mov word [rdx + rax*2 + 2], 0
jmp 0x14000c798
lea rcx, [rsp + 0x290]
mov dx, 0x3d
call fcn.140019d50
mov r9, qword [r15 + 0x50]
cmp qword [r15 + 0x58], 8
jb 0x14000c7a7
mov rdi, qword [r15 + 0x40]
mov rax, qword [rsp + 0x2a0]
mov rcx, qword [rsp + 0x2a8]
mov rdx, rcx
sub rdx, rax
cmp rdx, r9
jae 0x14000c7d7
lea rcx, [rsp + 0x290]
mov rdx, r9
mov r8, rdi
call fcn.14000ce90
jmp 0x14000c812
lea rbx, [rax + r9]
mov qword [rsp + 0x2a0], rbx
lea r12, [rsp + 0x290]
cmp rcx, 8
jb 0x14000c7f9
mov r12, qword [rsp + 0x290]
lea rcx, [r12 + rax*2]
add r9, r9
mov rdx, rdi
mov r8, r9
call sub.ntdll.dll_memmove
mov word [r12 + rbx*2], 0
mov rax, qword [rsp + 0x2a0]
mov rcx, qword [rsp + 0x2a8]
cmp rax, rcx
jae 0x14000c85e
lea rdx, [rax + 1]
mov qword [rsp + 0x2a0], rdx
lea rdx, [rsp + 0x290]
cmp rcx, 8
jb 0x14000c849
lea r12, [rsp + 0x290]
mov rcx, r12
xor edx, edx
call fcn.140019d50
lea r13, [0x140054d48]
lea rdx, [rsp + 0x310]
jmp 0x140008c3b
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rbx, rax
mov rcx, qword [rsp + 0x78]
mov qword [rcx + 0x58], rbx
mov qword [rcx + 0x60], rbx
mov rax, rdi
shl rax, 6
lea rax, [rax + rdi*4]
add rax, rbx
mov qword [rcx + 0x68], rax
mov r13, rsi
mov r8d, 0x44
mov rcx, rbx
mov rdx, r13
call sub.ntdll.dll_memcpy
add rbx, 0x44
add r13, 0x44
cmp r13, r14
jne 0x14000c8ae
mov rax, qword [rsp + 0x78]
mov qword [rax + 0x60], rbx
jmp 0x140008815
xor eax, eax
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1f8], 7
mov word [rsp + 0x1e0], 0
jmp 0x14000bd0d
xor eax, eax
mov qword [rsp + 0x60], rax
xor r14d, r14d
xor esi, esi
jmp 0x14000c960
inc esi
mov r15, qword [rsp + 0x68]
mov r14, rdi
jmp 0x140008400
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rsi, rax
mov r14, rsi
mov r8d, 0x44
mov rcx, r14
mov rdx, r15
call sub.ntdll.dll_memcpy
add r14, 0x44
add r15, 0x44
cmp r15, rdi
jne 0x14000c92f
mov rax, r12
shl rax, 6
loopne 0x14000c999
shl eax, 6
lea rax, [rax + r12*4]
add rax, rsi
add eax, esi
add eax, esi
mov qword [rsp + 0x60], rax
invalid
mov rdi, qword [rsp + 0x90]
jmp 0x140008664
invalid
invalid
invalid
invalid
idiv dword [rdi + rdi*8 + 0x35e9ccff]
out dx, al
invalid
int3
mov ecx, 0xc8
jmp 0x140007de8
xor eax, eax
jmp 0x140007dee
mov rcx, rsi
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
mov dword [rsp + 0x60], 0x21
jmp 0x14000ba46
mov dword [rsp + 0x60], 0x11
mov r15, qword [rsp + 0x68]
mov r14, rsi
mov r12, qword [rsp + 0xa8]
mov rcx, r12
call fcn.14004d400
mov rcx, r12
call fcn.1400518b0
jmp 0x14000b390
mov r15, qword [rsp + 0x68]
mov r14, rdi
mov rcx, r14
call fcn.14003da20
jmp 0x14000b399
xor byte [rcx], al
add byte [rax], al
add dword [rax - 0x7b], ecx
fisttp dword [rdi]
test byte [rax + 0xf000000], cl
push rdi
ror byte [rbp + rcx*4 - 0x4c], 0x24
xor byte [rcx], al
add byte [rax], al
add dword [rax + rax], eax
add byte [rbp + rcx*4 - 0x4c], cl
and al, 0x30
add dword [rax], eax
add byte [rcx + 0x47], bh
add byte [rax - 0x75], cl
mov word [rax + rax], fs
add dword [rax], eax
add byte [rdx + 2], bh
invalid
add byte [rax], al
add byte [rax], al
add byte [rcx + 0x44], bh
cmp esi, 0xb
add byte [rax], al
add al, 0
rol byte [rax], 1
add byte [rax], al
and al, 0xb8
add byte [rax], al
add al, ch
sbb al, 4
add byte [rdi], cl
push rdi
ror byte [rdi], 0x11
invalid
xor byte [rcx], al
add byte [rax], al
add eax, 0xc5ffea89
or eax, 0x48ffffff
lea edi, [rsp + 0x100]
invalid
mov r8, rbx
add byte [rax], al
sbb dword [rax], eax
add cl, ch
and al, 0xf9
invalid
add byte [rax], al
add byte [rax], cl
invalid
add byte [rbp + rcx*4 + 0x60], cl
invalid
add dword [rax], eax
add byte [rcx + rcx*4 - 7], cl
ja 0x1400105d1
add byte [rsi + 0x44], bh
sub byte [rcx], al
add byte [rax], al
add byte [rax], al
add byte [rbp + rcx*4 - 0x74], cl
and al, 0x30
add dword [rax], eax
add byte [rax - 0x77], cl
ror dword [rax - 0x77], 0xda
mov eax, esi
lahf
int1
invalid
add byte [rax - 0x73], cl
adc al, 0x45
add al, byte [rax]
add byte [rax], al
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov rcx, qword [rcx]
mov edx, dword [rdi + 0x10]
call fcn.140017b70
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14001815e
mov rax, qword [rcx + 8]
mov edx, dword [rdi + 0x10]
movzx eax, byte [rax + rdx]
shr eax, 6
mov ebx, 2
lea r8, [0x140055be0]
movsxd rax, dword [r8 + rax*4]
add rax, r8
jmp rax
mov rcx, qword [rdi]
mov edx, dword [rdi + 0x10]
call fcn.140017b70
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140018198
mov rax, qword [rcx + 8]
mov edx, dword [rdi + 0x10]
mov al, byte [rax + rdx]
and al, 7
xor r8d, r8d
cmp al, 4
sete r8b
add ebx, r8d
test rsi, rsi
je 0x1400181d3
call fcn.140017b70
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x1400181c6
mov rax, qword [rcx + 8]
mov ecx, dword [rdi + 0x10]
mov al, byte [rax + rcx]
shr al, 3
and al, 7
mov byte [rsi], al
mov eax, ebx
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
mov ebx, 1
jmp 0x1400181d3
call fcn.140017b70
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x1400181ff
mov rax, qword [rcx + 8]
mov edx, dword [rdi + 0x10]
mov al, byte [rax + rdx]
and al, 7
cmp al, 5
je 0x1400182db
call fcn.140017b70
mov rbx, qword [rdi]
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x140018224
mov rax, qword [rbx + 8]
mov r15d, dword [rdi + 0x10]
mov al, byte [rax + r15]
and al, 7
cmp al, 4
jne 0x1400182ef
inc r15d
mov ecx, 0x58
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov r14, rax
movabs rax, 0x100000001
mov qword [r14 + 8], rax
lea rax, [0x140053420]
mov qword [r14], rax
lea r12, [r14 + 0x10]
mov rcx, r12
mov rdx, rbx
mov r8d, r15d
call fcn.140018080
mov rcx, r12
xor edx, edx
call fcn.140017b70
mov rax, qword [r14 + 0x18]
mov al, byte [rax]
and al, 7
xor ecx, ecx
cmp al, 5
sete cl
lea ebx, [rcx*4 + 1]
lock dec dword [r14 + 8]
jne case.0x14001817b.1
mov r15, r14
add r15, 0xc
mov rax, qword [r14]
mov rax, qword [rax]
mov rcx, r14
call qword [0x140068010]
lock dec dword [r15]
jne case.0x14001817b.1
mov rax, qword [r14]
mov rax, qword [rax + 8]
mov rcx, r14
call qword [0x140068010]
jmp case.0x14001817b.1
mov ebx, 5
jmp case.0x14001817b.1
test rsi, rsi
je 0x1400182f9
call fcn.140017b70
mov ebx, 0xfffffffe
jmp 0x1400181b6
mov ebx, 1
jmp case.0x14001817b.1
mov ebx, 0xfffffffe
jmp 0x1400181d3
lea r8, [0x140055bf0]
movsxd rax, dword [r8 + rax*4]
add rax, r8
jmp rax
mov eax, dword [rcx + 0x20]
cmp qword [rcx], 0
je 0x1400183f3
mov r8d, dword [rcx + 0x30]
cmp eax, r8d
jae 0x140018404
mov r8, qword [rcx + 0x10]
mov eax, eax
mov byte [r8 + rax], 0xff
mov eax, dword [rcx + 0x20]
inc eax
mov dword [rcx + 0x20], eax
cmp qword [rcx], 0
je 0x1400183f5
mov r8d, dword [rcx + 0x30]
cmp eax, r8d
jae 0x14001840d
mov r8, qword [rcx + 0x10]
mov eax, eax
mov byte [r8 + rax], 0x25
mov eax, dword [rcx + 0x20]
inc eax
mov dword [rcx + 0x20], eax
cmp qword [rcx], 0
je 0x1400183f7
mov r8d, dword [rcx + 0x30]
lea r9d, [rax + 4]
cmp r9d, r8d
ja 0x140018598
mov r8, qword [rcx + 0x10]
mov eax, eax
mov dword [r8 + rax], 0
mov eax, dword [rcx + 0x20]
add eax, 4
mov dword [rcx + 0x20], eax
cmp qword [rcx], 0
je 0x1400183fa
mov r8d, dword [rcx + 0x30]
lea r9d, [rax + 8]
cmp r9d, r8d
ja 0x140018416
mov r8, qword [rcx + 0x10]
mov eax, eax
mov qword [r8 + rax], rdx
add dword [rcx + 0x20], 8
cmp qword [rcx], 0
je 0x140018400
xor eax, eax
cmp qword [rcx + 0x10], 0
je 0x1400183f2
cmp qword [rcx + 0x18], 0
je 0x1400183f2
cmp dword [rcx + 8], 0
je 0x1400183f2
cmp byte [rcx + 0x34], 0
setne al
ret
inc eax
inc eax
add eax, 4
add eax, 8
mov dword [rcx + 0x20], eax
mov al, 1
jmp 0x1400183f2
mov byte [rcx + 0x34], 0
jmp 0x140018364
invalid
inc esi
xor al, 0
mov byte [rcx + 0x34], 0
jmp 0x14001838a
mov byte [rcx + 0x34], 0
jmp 0x1400183d5
cmp qword [rcx], 0
mov eax, dword [rcx + 0x20]
je 0x140018489
mov r8d, dword [rcx + 0x30]
cmp eax, r8d
xor byte [r9 + rdi - 0x40], al
jae 0x1400184c4
adc dword [rdx + 0x4c000000], 0xffffff8b
adc byte [r9 - 0x3a], al
add al, 0
jne 0x140018427
mov r8, qword [rcx + 0x10]
mov byte [r8 + rax], 0x75
jmp 0x140018475
cmp byte [rax - 0x7d], cl
cmp dword [rax], eax
cmp qword [rcx], 0
mov eax, dword [rcx + 0x20]
je 0x140018489
mov r8d, dword [rcx + 0x30]
cmp eax, r8d
jae 0x1400184c4
mov r8, qword [rcx + 0x10]
mov byte [r8 + rax], 0x74
jmp 0x140018475
cmp qword [rcx], 0
mov eax, dword [rcx + 0x20]
je 0x140018489
mov r8d, dword [rcx + 0x30]
cmp eax, r8d
jae 0x1400184c4
mov r8, qword [rcx + 0x10]
mov byte [r8 + rax], 0x72
mov eax, dword [rcx + 0x20]
inc eax
mov dword [rcx + 0x20], eax
cmp qword [rcx], 0
je 0x14001848b
mov r8d, dword [rcx + 0x30]
jmp 0x1400184c8
xor r11b, bpl
invalid
inc eax
inc eax
mov dword [rcx + 0x20], eax
jmp 0x14001832c
cmp qword [rcx], 0
mov eax, dword [rcx + 0x20]
je 0x1400184e6
mov r8d, dword [rcx + 0x30]
cmp eax, r8d
jae 0x1400184f6
mov r8, qword [rcx + 0x10]
mov byte [r8 + rax], 0xff
mov eax, dword [rcx + 0x20]
inc eax
mov dword [rcx + 0x20], eax
cmp qword [rcx], 0
je 0x1400184e8
mov r8d, dword [rcx + 0x30]
jmp 0x1400184fa
mov byte [rcx + 0x34], 0
cmp eax, r8d
jae 0x1400184dd
mov r8, qword [rcx + 0x10]
mov eax, eax
mov byte [r8 + rax], 0xe
mov eax, dword [rcx + 0x20]
jmp 0x14001848b
mov byte [rcx + 0x34], 0
jmp 0x14001832c
inc eax
inc eax
add eax, 4
inc eax
inc eax
jmp 0x1400183fa
mov byte [rcx + 0x34], 0
cmp eax, r8d
jae 0x14001851e
mov r8, qword [rcx + 0x10]
mov eax, eax
mov byte [r8 + rax], 0x15
mov eax, dword [rcx + 0x20]
inc eax
mov dword [rcx + 0x20], eax
cmp qword [rcx], 0
je 0x1400184ea
mov r8d, dword [rcx + 0x30]
jmp 0x140018522
mov byte [rcx + 0x34], 0
lea r9d, [rax + 4]
cmp r9d, r8d
jbe 0x140018553
mov byte [rcx + 0x34], 0
cmp eax, r8d
jae 0x14001857a
mov r8, qword [rcx + 0x10]
mov eax, eax
mov byte [r8 + rax], 0xeb
mov eax, dword [rcx + 0x20]
inc eax
mov dword [rcx + 0x20], eax
cmp qword [rcx], 0
je 0x1400184ef
mov r8d, dword [rcx + 0x30]
jmp 0x14001857e
mov r8, qword [rcx + 0x10]
mov eax, eax
mov dword [r8 + rax], 2
mov eax, dword [rcx + 0x20]
add eax, 4
mov dword [rcx + 0x20], eax
cmp qword [rcx], 0
je 0x1400184ed
mov r8d, dword [rcx + 0x30]
jmp 0x14001852f
mov byte [rcx + 0x34], 0
cmp eax, r8d
jae 0x140018598
mov r8, qword [rcx + 0x10]
mov eax, eax
mov byte [r8 + rax], 8
mov eax, dword [rcx + 0x20]
inc eax
jmp 0x1400183ab
mov byte [rcx + 0x34], 0
jmp 0x1400183b8
or qword [rax], r8
add byte [rdx - 0x73], cl
add al, 0x2e
mov qword [rsp + 0x1f0], rax
cmp rdi, 8
jb 0x140018b77
mov r12, qword [rsp + 0x1e0]
lea rdx, [r12 + 8]
lea rcx, [rsp + r15*2]
lea ecx, [rsp + rdi*2]
lea ecx, [rsp + rdi*2]
add rcx, 0x1c8
lea rax, [r12 + rsi*2]
cmp rax, rbp
setb al
mov rsi, r15
cmp rcx, r12
jbe 0x140018ba1
test al, al
je 0x14001985e
lea rcx, [r12 + r15*2]
add rbx, rbx
mov r8, rbx
call sub.ntdll.dll_memmove
lea r8, [rsi + rsi]
lea rdx, [rsp + 0x1c8]
mov rcx, r12
call sub.ntdll.dll_memmove
sub r15, rsi
lea rax, [rsp + r13*2]
add rax, 0x1c8
lea rdx, [rax + rsi*2]
lea rcx, [r12 + rsi*2]
add r15, r15
mov r8, r15
call sub.ntdll.dll_memcpy
mov es, word [rbx]
invalid
mov es, word [rbx]
add byte [rax - 0x75], cl
test byte [rax + rcx*8], ah
add byte [rax], al
add byte [rax - 0x7d], cl
clc
or byte [rdx + 0x22], dh
mov rax, qword [rsp + 0xc8]
cmp rax, 8
jb 0x140018c14
mov rcx, qword [rsp + 0xb0]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jae 0x140019328
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
movaps xmm0, xmmword [rsp + 0x1e0]
movaps xmm1, xmmword [rsp + 0x1f0]
movaps xmmword [rsp + 0xc0], xmm1
movaps xmmword [rsp + 0xb0], xmm0
cmp qword [rsp + 0xc8], 8
jb 0x140018e0a
mov rsi, qword [rsp + 0xb0]
jmp 0x140018e12
lea rsi, [rsp + 0xb0]
mov qword [rsp + 0x40], rsi
mov r15d, 3
mov dword [rsp + 0x1f0], r15d
xor esi, esi
mov byte [rsp + 0x1f4], sil
mov r14d, 0x1038
mov ecx, 0x1038
call sub.mozglue.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
mov r12, rax
mov qword [rsp + 0x1e0], rax
mov qword [rax], rsi
mov ecx, 0x10
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r13, rax
lea rax, [r12 + 8]
mov qword [rsp + 0x58], rax
mov qword [r13], rax
lea rax, [r12 + r14]
mov qword [r13 + 8], rax
mov qword [rsp + 0x1e8], r13
mov dword [rsp + 0x1d8], r15d
mov byte [rsp + 0x1dc], sil
mov ecx, 0x1038
call sub.mozglue.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
mov rbp, rax
mov qword [rsp + 0x1c8], rax
mov qword [rax], rsi
mov ecx, 0x10
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rbx, rax
lea rax, [rbp + 8]
mov qword [rsp + 0x50], rax
mov qword [rbx], rax
lea rax, [rbp + r14]
mov qword [rbx + 8], rax
mov qword [rsp + 0x1d0], rbx
mov dword [rsp + 0xa8], r15d
mov byte [rsp + 0xac], sil
mov ecx, 0x1038
call sub.mozglue.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
mov rdi, rax
mov qword [rsp + 0x98], rax
mov qword [rax], rsi
mov ecx, 0x10
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rcx, [rdi + 8]
mov qword [rax], rcx
add rdi, r14
mov qword [rax + 8], rdi
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x90], r15d
mov byte [rsp + 0x94], sil
mov ecx, 0x1038
call sub.mozglue.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
mov rdi, rax
mov qword [rsp + 0x80], rax
mov qword [rax], rsi
mov ecx, 0x10
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rcx, [rdi + 8]
mov qword [rax], rcx
add rdi, r14
mov qword [rax + 8], rdi
mov qword [rsp + 0x88], rax
mov dword [rsp + 0x78], r15d
mov byte [rsp + 0x7c], sil
mov ecx, 0x1038
call sub.mozglue.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
mov rdi, rax
mov qword [rsp + 0x68], rax
mov qword [rax], rsi
mov ecx, 0x10
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rcx, [rdi + 8]
mov qword [rax], rcx
add rdi, r14
mov qword [rax + 8], rdi
mov qword [rsp + 0x70], rax
cmp dword [rsp + 0x34], 0
jne 0x14001934f
xor edi, edi
mov r14, qword [rsp + 0x48]
mov r15, qword [rsp + 0x40]
lea rcx, [rsp + 0x1e0]
xor esi, esi
xor edx, edx
mov r8, r15
mov r9d, 1
call fcn.140019a10
test al, al
je 0x1400190e2
lea r8, [rsp + 0x1e0]
mov rcx, r14
mov edx, 3
call fcn.1400198d0
test al, al
je 0x140019252
lea rcx, [rsp + 0x1c8]
xor esi, esi
xor edx, edx
mov r8, r15
mov r9d, 1
call fcn.140019a10
test al, al
je 0x1400190e2
lea r8, [rsp + 0x1c8]
mov rcx, r14
mov edx, 4
call fcn.1400198d0
test al, al
je 0x140019252
lea rcx, [rsp + 0x98]
xor esi, esi
xor edx, edx
mov r8, r15
mov r9d, 1
call fcn.140019a10
test al, al
je 0x1400190e2
lea r8, [rsp + 0x98]
mov rcx, r14
mov edx, 5
call fcn.1400198d0
test al, al
je 0x140019252
lea rcx, [rsp + 0x80]
xor esi, esi
xor edx, edx
mov r8, r15
mov r9d, 1
call fcn.140019a10
test al, al
je 0x1400190e2
lea r8, [rsp + 0x80]
mov rcx, r14
mov edx, 6
call fcn.1400198d0
test al, al
je 0x140019252
test dil, dil
jne 0x1400190df
lea rcx, [rsp + 0x68]
xor esi, esi
xor edx, edx
mov r8, r15
mov r9d, 1
call fcn.140019a10
test al, al
je 0x1400190e2
lea r8, [rsp + 0x68]
mov rcx, r14
mov edx, 7
call fcn.1400198d0
test al, al
je 0x140019252
mov sil, 1
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400190f1
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140019100
call fcn.1400518b0
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x140019112
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x140019124
call fcn.1400518b0
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x140019136
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x140019148
call fcn.1400518b0
mov rcx, qword [rsp + 0x1c8]
test rcx, rcx
je 0x14001915a
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, qword [rsp + 0x1d0]
test rcx, rcx
je 0x14001916c
call fcn.1400518b0
mov rcx, qword [rsp + 0x1e0]
test rcx, rcx
je 0x14001917e
call sub.mozglue.dll_void___cdecl_operator_delete___void____ptr64_
mov rcx, qword [rsp + 0x1e8]
test rcx, rcx
je 0x140019190
call fcn.1400518b0
mov rax, qword [rsp + 0xc8]
cmp rax, 8
jb 0x1400191c0
mov rcx, qword [rsp + 0xb0]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jae 0x140019444
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
xor ebp, ebp
test sil, sil
je 0x140019592
mov rcx, qword [rsp + 0x200]
xor rcx, rsp
call fcn.14002ef70
mov eax, ebp
add rsp, 0x208
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor esi, esi
jmp 0x1400190e2
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400198c4
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
jmp 0x140018c0f
mov rax, qword [rsp + 0x50]
mov r9, qword [rsp + 0x58]
cmp dword [rsp + 0x34], 1
jne 0x1400197cf
xorps xmm0, xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov rax, rbp
add rax, 0x38
mov qword [rbx], rax
mov dword [rbp + 8], 4
mov dword [rbp + 0x10], 1
mov word [rbp + 0xc], 2
mov dword [rbp + 0x18], 0x5fedff56
mov qword [rbp], 1
mov dword [rsp + 0x20], 0
lea rcx, [rsp + 0x1c8]
xor edx, edx
mov r8w, 3
mov r9d, 1
add byte [rax], al
add al, ch
outsd dx, dword [rsi]
mov ch, 2
add byte [rax + 0x1f424bc], al
add byte [rax], al
invalid
add byte [rax], al
add al, ch
outsd dx, dword [rsi]
mov ch, 2
add byte [rax + 0x1f424bc], al
add byte [rax], al
add byte [rbp + 0x4f], dh
jne 0x14001941a
jne 0x14001941a
mov rcx, qword [rsp + 0x1e8]
add byte [rax], al
mov rax, qword [rcx]
mov rdx, qword [rcx + 8]
sub rdx, rax
cmp rdx, 0x30
jb 0x14001941a
xorps xmm0, xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
add qword [rcx], 0x30
mov dword [rax], 4
mov dword [rax + 8], 1
mov word [rax + 4], 2
mov dword [rax + 0x10], 0x5fedff56
adc byte [rsi - 1], dl
in eax, dx
pop rdi
add bh, al
or byte [rcx], al
add byte [rax], al
add byte [rsi - 0x39], ah
add al, 2
add bh, al
adc byte [rsi - 1], dl
adc byte [rsi - 1], dl
adc byte [rsi - 1], dl
in eax, dx
pop rdi
mov rax, qword [rsp + 0x1e0]
inc qword [rax]
mov dword [rsp + 0x20], 0
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax - 0x73], cl
lea rcx, [rsp + 0x1e0]
xor edx, edx
mov r8w, 3
mov r9d, 1
add dword [rax], eax
add byte [rax], al
mov word [rax + riz*8], fs
add dword [rax], eax
add byte [rcx], dh
shl byte [rsi + 0x41], cl
mov eax, 0xb9410003
add dword [rax], eax
add byte [rax], al
add byte [rax], al
add al, ch
hlt
call fcn.140044930
mov dil, 1
jmp 0x140018fa3
sti
invalid
invalid
mov ah, 2
add byte [rax - 0x49], al
add ecx, ebp
pop rdi
sti
invalid
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
add ecx, 0xfffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400198c4
add rax, rax
add rax, 0x29
add eax, 0x29
add eax, 0x29
mov rdx, rax
mov rcx, r8
jmp 0x1400191bb
invalid
lea rax, [rsi + r15]
add al, 0x3e
add rax, 0xfffffffffffffffc
mov qword [rsp + 0x1f0], rax
cmp rdi, 8
jb 0x140019886
invalid
invalid
add eax, dword [rax]
invalid
invalid
mov r12, qword [rsp + 0x1e0]
jmp 0x14001988e
and al, 0x20
lea rcx, [rsp + 0x1e0]
lea r9, [rsp + 0x1c8]
mov r8d, 4
add byte [rax], al
add byte [rcx + rcx*4 - 0x16], cl
add byte [rax], al
add byte [rcx + rcx*4 - 0x16], cl
call fcn.14003c210
jmp 0x140018be4
add byte [rbx + 0x834247c], al
jne 0x1400194fb
cmp dword [r14 + 0x44], 3
jl 0x140019597
mov r8, qword [r14 + 0x98]
mov rcx, qword [rsp + 0x38]
mov edx, dword [rsp + 0x34]
call fcn.140049090
jmp 0x140019588
xor ebp, ebp
test al, al
jne 0x1400191cb
mov ebp, 2
lea rdi, [rsp + 0xb8]
mov dword [rdi - 8], 2
mov rcx, rdi
call fcn.1400266f0
lea rax, str._builds_worker_checkouts_gecko_security_sandbox_chromium_sandbox_win_src_sandbox_policy_base.cc
mov qword [rdi + 0xf0], rax
mov dword [rdi + 0xf8], 0x16e
lea rcx, [rsp + 0x1c0]
call fcn.14003b990
lea rdx, str.Failed_to_add_sandbox_rule.
mov rcx, rdi
call fcn.1400367b0
lea rdx, str._error_
mov rcx, rdi
call fcn.1400367b0
mov rsi, qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rdi
mov edx, ebp
call rsi
mov rdi, rax
lea rdx, str.__subsystem_
mov rcx, rax
call fcn.1400367b0
mov rcx, rdi
mov rdx, qword [rsp + 0x60]
call rsi
mov rdi, rax
lea rdx, str.__semantics_
mov rcx, rax
call fcn.1400367b0
mov rcx, rdi
mov edx, dword [rsp + 0x34]
call rsi
mov rdi, rax
lea rdx, str.__pattern__
mov rcx, rax
call fcn.1400367b0
mov rcx, rdi
mov rdx, qword [rsp + 0x38]
call fcn.140039a60
lea rdx, [0x140057ca6]
mov rcx, rdi
call fcn.1400367b0
lea rcx, [rsp + 0xb0]
call fcn.140039960
jmp 0x1400191cb
mov dil, 1
cmp dword [rsp + 0x34], 2
mov r14, qword [rsp + 0x48]
mov r15, qword [rsp + 0x40]
je 0x14001902b
cmp dword [rsp + 0x34], 3
jne 0x1400190e2
xorps xmm0, xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax], xmm0
mov rax, rbp
add rax, 0x38
mov qword [rbx], rax
mov eax, 4
mov dword [rbp + 8], eax
mov cx, 4
mov word [rbp + 0xc], cx
mov edx, 1
mov dword [rbp + 0x18], edx
mov r8d, 1
mov qword [rbp], r8
movups xmmword [r9 + 0x20], xmm0
movups xmmword [r9 + 0x10], xmm0
movups xmmword [r9], xmm0
mov r9, r12
add r9, 0x38
mov qword [r13], r9
mov dword [r12 + 8], eax
mov word [r12 + 0xc], cx
mov dword [r12 + 0x18], edx
mov qword [r12], r8
jmp 0x140018fa1
mov rsi, rdx
sub rsi, rbp
jbe 0x1400198bd
sar rsi, 1
jmp 0x140018ba1
lea r12, [rsp + 0x1e0]
lea r8, [r15 + r15]
lea rdx, [rsp + 0x1c8]
mov rcx, r12
call sub.ntdll.dll_memmove
lea rcx, [r12 + r15*2]
add r12, 8
add rbx, rbx
mov rdx, r12
mov r8, rbx
call sub.ntdll.dll_memmove
jmp 0x140018be4
xor esi, esi
jmp 0x140018ba1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call fcn.1400336d0
int3
add eax, dword [rax]
mov rbx, rax
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rsp + 0x48], rdi
mov rcx, rdi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rax, [rsi + 0x38]
mov qword [rsp + 0x60], rax
lea rax, [rsi + 0x28]
lea eax, [rsi + 0x28]
lea eax, [rsi + 0x28]
mov qword [rsp + 0x58], rax
xor r15d, r15d
lea r13, [rsp + 0x94]
xor edi, edi
xor eax, eax
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x3c], 0
mov dword [rsp + 0x94], 0
mov qword [rsp + 0x88], r15
mov qword [rsp + 0x80], r15
mov dword [rsp + 0x20], 0xffffffff
mov rcx, r14
mov rdx, r13
lea r8, [rsp + 0x88]
lea r9, [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetQueuedCompletionStatus]
add byte [rbp + 0x14840fc0], al
add al, 0
invalid
add byte [rbp + 0x14840fc0], al
add al, 0
add byte [rbx + rcx*4 - 0x5c], cl
and al, 0x88
add byte [rax], al
mov r12, qword [rsp + 0x88]
cmp r12, 7
jae case.0x140018327.15
add byte [rcx - 0x7d], cl
cld
invalid
dec r12
cmp r12, 4
ja case.0x14001b115.5
lea rcx, [0x140055c14]
movsxd rax, dword [rcx + r12*4]
add rax, rcx
jmp rax
mov rsi, qword [rsp + 0x80]
cmp qword [rsp + 0xa0], 0
jne 0x14001afbc
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov qword [rsi + 0x20], r14
mov rdx, qword [rsi + 0x10]
lea r12, [rsi + 0x18]
mov dword [rsp + 0x28], 8
mov dword [rsp + 0x20], 0xffffffff
mov rcx, r12
lea r8, [0x14002b470]
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_RegisterWaitForSingleObject]
test eax, eax
je 0x14001b47a
movabs rax, 0xaaaaaaaaaaaaaaa
cmp rdi, rax
je 0x14001b46e
stosb byte [rdi], al
stosb byte [rdi], al
or cl, byte [rax + 0x39]
invalid
mov ecx, 0x18
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rax + 0x10], rsi
add al, ch
nop
push 0xffffffff89480003
jo 0x14001b024
inc rdi
mov rcx, qword [rbx + 8]
mov qword [rax], rbx
mov qword [rax + 8], rcx
mov qword [rbx + 8], rax
mov qword [rcx], rax
jmp case.0x14001b115.5
or byte [r8 - 0x77], cl
add ecx, ebp
cli
invalid
mov rsi, qword [rsp + 0x80]
mov r12, qword [rsp + 0x60]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [rsi + 8]
mov rcx, qword [rsp + 0x58]
call fcn.14001b650
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rsi + 0x18]
call qword [sym.imp.KERNEL32.dll_UnregisterWait]
mov qword [rsi + 0x18], 0xffffffffffffffff
mov r12d, dword [rsi + 8]
mov rsi, rbx
mov rsi, qword [rsi]
cmp rsi, rbx
je case.0x14001b115.5
mov rax, qword [rsi + 0x10]
cmp dword [rax + 8], r12d
jne 0x14001b073
mov r13, qword [rsi]
cmp r13, rbx
je 0x14001b0c3
mov rax, qword [r13 + 0x10]
cmp dword [rax + 8], r12d
je 0x14001b0bd
cmp rsi, r13
je 0x14001b0ba
mov qword [r13 + 0x10], 0
mov rcx, qword [rsi + 0x10]
mov qword [rsi + 0x10], rax
test rcx, rcx
je 0x14001b0ba
call fcn.14001b5c0
mov rsi, qword [rsi]
mov r13, qword [r13]
jmp 0x14001b08c
cmp rsi, rbx
je 0x14001b19e
mov rax, qword [rsi + 8]
mov qword [rax], rbx
mov qword [rbx + 8], rax
xor r12d, r12d
jmp case.0x14001817b.13
or byte [rax - 0x77], cl
sbb byte [rax - 0x77], cl
or byte [r13 + 0x31], al
in al, 0xe9
cwde
add byte [rax], al
add byte [rax - 0x77], cl
mov rax, rbp
mov rax, qword [rax]
cmp rax, rbp
mov rax, rbp
mov rax, qword [rax]
cmp rax, rbp
je case.0x14001817b.18
cmp qword [rax + 0x10], r12
jne 0x14001b0e2
out dx, al
out dx, al
mov eax, dword [rsp + 0x94]
add eax, 0xfffffffd
cmp eax, 6
ja case.0x14001b115.5
lea rcx, [0x140055c28]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov r12, qword [r12]
mov rsi, rbp
mov rsi, qword [rsi]
cmp rsi, rbp
je case.0x14001b115.5
mov rax, qword [rsi + 0x10]
cmp qword [rax], r12
jne 0x14001b11e
mov r13, qword [rsi]
cmp r13, rbp
je 0x14001b235
mov rax, qword [r13 + 0x10]
cmp qword [rax], r12
je 0x14001b16a
cmp rsi, r13
je 0x14001b167
mov qword [r13 + 0x10], 0
mov rcx, qword [rsi + 0x10]
mov qword [rsi + 0x10], rax
test rcx, rcx
je 0x14001b167
call fcn.14001bad0
mov rsi, qword [rsi]
mov r13, qword [r13]
jmp 0x14001b136
call fcn.14001b5c0
jmp 0x14001b183
mov r13, qword [rsi]
mov rcx, qword [rsi + 0x10]
test rcx, rcx
jne 0x14001b170
mov edx, 0x18
mov rcx, rsi
add byte [rax - 0x77], cl
int1
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
inc r12
mov rsi, r13
cmp r13, rbx
jne case.0x14001817b.13
sub rdi, r12
lea r13, [rsp + 0x94]
jmp case.0x14001b115.5
mov rsi, qword [rsp + 0x80]
lea r8, [rsi + 0x10]
lea rcx, [rsp + 0x98]
lea rdx, [rsp + 0xa8]
call fcn.140007720
invalid
invalid
dec dword [rax - 0x48]
stosb byte [rdi], al
stosb byte [rdi], al
stosb byte [rdi], al
stosb byte [rdi], al
stosb byte [rdi], al
stosb byte [rdi], al
stosb byte [rdi], al
or cl, byte [rbx + rcx*4 + 0x64]
and al, 0x40
invalid
and al, 0x40
cmp r12, rax
je 0x14001b46e
mov ecx, 0x18
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
add byte [rax - 0x77], cl
jo 0x14001b202
add byte [rax - 0x77], cl
jo 0x14001b202
inc r12
mov qword [rsp + 0x40], r12
mov rcx, qword [rbp + 8]
mov qword [rax], rbp
mov qword [rax + 8], rcx
mov dword [rax + 8], ecx
mov qword [rbp + 8], rax
mov qword [rcx], rax
jmp case.0x14001b115.5
mov eax, dword [rsp + 0x3c]
test eax, eax
jne 0x14001b2cd
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov dword [rsp + 0x3c], 1
jmp case.0x14001b115.5
cmp rsi, rbp
je 0x14001b19e
mov rax, qword [rsi + 8]
mov eax, dword [rsi + 8]
mov qword [rax], rbp
mov qword [rbp + 8], rax
xor r12d, r12d
mov r13, qword [rsi]
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x14001b25d
call fcn.14001bad0
mov edx, 0x18
mov rcx, rsi
mov ecx, esi
mov ecx, esi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
inc r12
mov rsi, r13
cmp r13, rbp
mov rax, qword [rsp + 0x40]
jne 0x14001b24c
sub rax, r12
mov qword [rsp + 0x40], rax
jmp 0x14001b19e
mov rsi, qword [rsp + 0x60]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [rsp + 0x80]
mov rcx, qword [rsp + 0x58]
call fcn.14001b650
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [rsp + 0x80]
add byte [rax], al
add byte [rax], al
lea rcx, [rsp + 0x98]
call fcn.14001b650
mov eax, dword [rsp + 0x3c]
and al, 0x3c
and al, 0x3c
dec eax
je case.0x14000bcc1.8
jmp 0x14001b2cf
inc eax
mov dword [rsp + 0x3c], eax
jmp case.0x14001b115.5
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x14001af20
mov rsi, qword [rbx]
xor edi, edi
cmp rsi, rbx
jne 0x14001b534
mov rax, qword [rbx + 8]
mov qword [rax], 0
mov rsi, qword [rbx]
test rsi, rsi
jne 0x14001b556
mov edx, 0x18
mov rcx, rbx
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rax, qword [rbp + 8]
mov qword [rax], 0
mov rsi, qword [rbp]
test rsi, rsi
jne 0x14001b582
mov edx, 0x18
mov rcx, rbp
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rsi, qword [rsp + 0x98]
mov rcx, qword [rsi + 8]
call fcn.14001ba40
mov edx, 0x20
mov rcx, rsi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
invalid
add eax, dword gs:[rax]
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.14002ef70
add edi, dword [rcx + rax]
add byte [rcx - 0x3b7eb708], cl
enter 1, 0
invalid
add edi, dword [rcx + rax]
add byte [rcx - 0x3b7eb708], cl
enter 1, 0
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop rbp
pop rbp
pop r14
pop r15
ret
mov edi, 1
jmp 0x14001b2f6
mov r13, qword [rsp + 0x80]
mov ecx, 0x20
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rsi, rax
lea rax, [0x140054e70]
mov qword [rsi], rax
xorps xmm0, xmm0
movups xmmword [rsi + 8], xmm0
mov qword [rsi + 0x18], 0
mov r12, qword [rbx]
cmp r12, rbx
je 0x14001b3fa
mov rax, qword [r12 + 0x10]
cmp qword [rax], 0
jne 0x14001b3d4
mov r12, qword [r12]
jmp 0x14001b3be
mov ecx, 8
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rcx, [0x140054e90]
mov qword [rax], rcx
lea rdx, [rsp + 0x78]
mov qword [rdx], rax
mov rcx, rsi
call fcn.14003e310
jmp 0x14001b3ce
mov r12, qword [rbp]
cmp r12, rbp
je 0x14001b43b
mov rax, qword [r12 + 0x10]
cmp qword [rax + 8], 0
jne 0x14001b415
mov r12, qword [r12]
jmp 0x14001b3fe
mov ecx, 8
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rcx, [0x140054e90]
mov qword [rax], rcx
lea rdx, [rsp + 0x70]
mov qword [rdx], rax
mov rcx, rsi
call fcn.14003e310
jmp 0x14001b40f
lea rdx, [rsp + 0x68]
mov qword [rdx], rsi
mov rax, qword [r13]
mov rax, qword [rax]
mov rcx, r13
call qword [0x140068010]
mov rax, qword [r13]
mov rax, qword [rax + 0x10]
mov rcx, r13
mov edx, 1
call qword [0x140068010]
jmp 0x14001b19e
lea rcx, str.list_too_long
call sub.MSVCP140.dll_void___cdecl_std::_Xlength_error_char_const____ptr64_
mov qword [r12], 0xffffffffffffffff
jmp 0x14001aff3
lea rcx, [rsp + 0xb0]
lea rsi, [rsp + 0x1b8]
lea esi, [rsp + 0x1b8]
lea esi, [rsp + 0x1b8]
mov dword [rcx - 8], 3
call fcn.1400266f0
mov dl, 0
add byte [rax - 0x73], cl
add eax, 0x3bc2a
mov dl, 0
add byte [rax - 0x73], cl
add eax, 0x3bc2a
mov qword [rsi - 0x18], rax
mov dword [rsi - 0x18], eax
mov dword [rsi - 0x10], 0x102
mov rcx, rsi
add byte [rax - 0x77], cl
int1
call fcn.14003b990
lea rcx, [rsp + 0xa8]
call fcn.140039960
jmp 0x14001b0f4
inc dword [rsp + 0x3c]
jmp case.0x14001b115.5
mov rcx, qword [r12]
mov edx, 0x1b64
call qword [sym.imp.KERNEL32.dll_TerminateJobObject]
jmp case.0x14001b115.5
mov rax, qword [rsi + 0x10]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.KERNEL32.dll_UnregisterWait]
mov rax, qword [rsi + 0x10]
mov qword [rax + 0x18], 0xffffffffffffffff
mov rsi, qword [rsi]
jmp 0x14001b2ed
mov r14, qword [rsi]
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x14001b567
call fcn.14001b5c0
mov edx, 0x18
mov rcx, rsi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rsi, r14
test r14, r14
je 0x14001b30d
jmp 0x14001b556
mov rbx, qword [rsi]
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x14001b593
call fcn.14001bad0
mov edx, 0x18
mov rcx, rsi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rsi, rbx
test rbx, rbx
je 0x14001b332
jmp 0x14001b582
mov r11d, 1
lea r13, [0x140055c7c]
xor eax, eax
xor ecx, ecx
leave
leave
xor ebp, ebp
xor r15d, r15d
xor r9d, r9d
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x38], edx
mov qword [rsp + 0x30], r10
mov r14, qword [rbx + 0x10]
lea rsi, [r15 + r15*2]
shl rsi, 4
lea rdi, [r14 + rsi]
add rdi, 8
test r9b, r9b
jne 0x140024ed8
mov r9d, eax
test rdx, rdx
je 0x14002510f
invalid
add byte [rcx + 0xf], al
mov bh, 0x44
or al, 0x66
test eax, eax
movzx eax, word [r14 + rsi + 0xc]
test ax, ax
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x68], r9
mov dword [rsp + 0x68], ecx
mov dword [rsp + 0x68], ecx
js 0x1400250b5
cmp rax, r8
jae 0x14002510f
shl rax, 4
shl eax, 4
add rax, rdx
mov r9d, dword [rdi]
mov ecx, 2
cmp r9, 6
cmp ecx, 6
cmp ecx, 6
ja 0x140025044
movsxd r9, dword [r13 + r9*4]
add r9, r13
jmp r9
cmp dword [rdi], 6
jne 0x140024ef7
xor r9d, r9d
mov ecx, 0
cmp eax, 4
je 0x140024e5b
invalid
invalid
invalid
invalid
xor eax, eax
xor ecx, ecx
jmp 0x140025093
mov r9b, 1
jmp 0x140025093
mov r11d, 1
lea r13, [0x140055c7c]
or al, 3
add byte [rbx + 0x482c246c], cl
mov ebx, dword [rsp + 0x48]
or al, 3
add byte [rbx + 0x482c246c], cl
mov ebx, dword [rsp + 0x48]
mov eax, dword [r14 + rsi + 0x10]
test eax, eax
je 0x1400250bc
adc byte ss:[rbp + 0x456f74c0], al
xor ecx, ecx
xor r9d, r9d
cmp ecx, 1
setne r9b
add r9d, r9d
test ecx, ecx
leave
leave
cmove r9d, r11d
test al, 1
cmove r9d, ecx
test al, 2
mov rsi, qword [rsp + 0x68]
cmovne esi, r12d
mov rcx, qword [rsp + 0x50]
cmovne rcx, r12
test al, 4
jne 0x140025187
mov eax, esi
cmp r9d, 1
jne 0x1400250a4
cmp eax, 4
setne r9b
xor ebp, ebp
inc r15
cmp r15, r10
jne 0x140024e3b
invalid
jmp 0x1400252c5
test r9d, r9d
test ecx, ecx
leave
jne 0x1400250cb
cmp eax, 4
sete r9b
rol dword [rax - 0x4b], 1
rol dword [rax - 0x4b], 1
jmp 0x140025093
xor eax, eax
jmp 0x140024e8d
std
invalid
invalid
shr cl, 0xd1
std
invalid
mov rax, qword [rsp + 0x68]
and al, 0x68
mov r9d, ecx
mov ecx, ecx
leave
mov rcx, qword [rsp + 0x50]
jmp 0x140025084
invalid
mov ecx, 0x2f98341
cmp r9d, 2
jne 0x1400250dd
jmp 0x140025112
invalid
mov qword [rbx], r15
mov dword [rbx + 8], r9d
mov ebp, 1
add byte [rax], al
invalid
add byte [rax], al
add byte [rax - 0x75], cl
mov word [rax + rdx*4], fs
add byte [rax], al
add byte [rax + 0x31], cl
loope 0x1400250dd
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.14002ef70
ja case.0x14001817b.39
add byte [rax], al
mov eax, ebp
add rsp, 0x98
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov eax, r9d
xor r9d, r9d
jmp 0x140025093
and al, 0x40
mov rdx, qword [rsp + 0x38]
mov r10, qword [rsp + 0x30]
and al, 0x30
and al, 0x30
xor r12d, r12d
jmp 0x14002502e
invalid
invalid
invalid
invalid
mov eax, dword [rax + 8]
mov edx, dword [r14 + rsi + 0x18]
xor ecx, ecx
cmp edx, dword [rax]
setne cl
jmp 0x14002529a
mov eax, 4
jmp 0x140025084
mov rbx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x38]
mov r10, qword [rsp + 0x30]
xor r12d, r12d
mov r11d, 1
lea r13, [0x140055c7c]
jmp 0x140025044
add bpl, bpl
and bpl, 2
movzx ebp, bpl
jmp 0x1400250e9
add eax, dword [rax]
mov qword [0x140062cf8], 0
test rax, rax
je 0x140025f7a
lea rdx, [0x140056c05]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
add byte [rax - 0x77], cl
add eax, 0x3cd83
add byte [rax - 0x77], cl
add eax, 0x3cd83
test rax, rax
je 0x140025fa9
lea rcx, [0x140062d00]
jg 0x140025f4c
add eax, dword [rax]
call fcn.14002ddd8
mov rax, qword [0x140062cf8]
test rax, rax
je 0x140025f9d
invalid
or ecx, dword [rax - 0x7d]
add rsp, 0x28
jmp qword [0x140068010]
invalid
nop
add rsp, 0x28
jmp qword [sym.imp.ole32.dll_CoUninitialize]
and eax, 0x3c1e7
and eax, 0x3c1e7
mov rcx, qword [0x140062cf0]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140062cf0], 0
add eax, 0x3cd2f
add byte [rax], al
add byte [rax], al
add eax, 0x3cd2f
add byte [rax], al
add byte [rax], al
jmp 0x140025f7a
int3
ja 0x1400260bc
mov rcx, rdx
lea rax, [0x140055c68]
movsxd rdx, dword [rax + r8*4]
add rdx, rax
jmp rdx
lea rax, str.TargetNtCreateFile64
mov qword [rsp + 0x20], rax
and bh, al
and al, 0x28
or al, byte [rax]
add byte [rax], al
and bh, al
and al, 0x28
or al, byte [rax]
add byte [rax], al
lea rdx, [0x1400598e0]
lea r8, str.NtCreateFile
jmp 0x1400260aa
lea rax, str.TargetNtSetInformationFile64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x28], 0xe
lea rdx, [0x1400598e0]
lea r8, str.NtSetInformationFile
jmp 0x1400260aa
lea rax, str.TargetNtQueryAttributesFile64
add eax, 0x318cb
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0xc
add byte [rax], al
add byte [rax], al
lea rdx, [0x1400598e0]
lea r8, str.NtQueryAttributesFile
jmp 0x1400260aa
lea rax, str.TargetNtQueryFullAttributesFile64
add eax, 0x318c5
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0xd
add byte [rax], al
add byte [rax], al
lea rdx, [0x1400598e0]
lea r8, str.NtQueryFullAttributesFile
jmp 0x1400260aa
lea rax, str.TargetNtOpenFile64
add eax, 0x318e0
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0xb
add byte [rax], al
add byte [rax], al
lea rdx, [0x1400598e0]
lea r8, [0x140056e11]
mov r9d, 1
add byte [rax], al
call fcn.14000d310
mov al, 1
add rsp, 0x38
ret
xor eax, eax
jmp 0x1400260b7
shr bl, 0xf7
push rsi
push rdi
sub rsp, 0x38
mov rax, qword [rcx + 0x20]
test byte [rax + 0x81], 8
add byte [rax], al
add byte [rax], cl
je 0x14002617e
xor edi, edi
add r8d, 0xffffffed
add eax, 0xffffffed
add eax, 0xffffffed
cmp r8d, 0xf
ja case.default.0x1400260f8
mov rsi, rdx
lea rax, [0x140055c98]
sti
add al, byte [rax]
sti
add al, byte [rax]
movsxd rcx, dword [rax + r8*4]
add rcx, rax
jmp rcx
lea rax, str.TargetGdiDllInitialize64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x18
lea rdx, str.gdi32.dll
xor dword [rbx], eax
add byte [rbp + rcx*4 + 5], cl
clc
or al, byte [rbx]
add bl, ch
invalid
xor dword [rbx], eax
add byte [rbp + rcx*4 + 5], cl
clc
or al, byte [rbx]
add bl, ch
lea rax, str.TargetGetStockObject64
lea rax, str.TargetGetStockObject64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x19
sbb dword [rax], eax
add byte [rax], al
sbb dword [rax], eax
add byte [rax], al
lea rdx, str.gdi32.dll
lea r8, str.GetStockObject
add eax, dword [rax]
add eax, dword [rax]
jmp 0x140026164
lea rax, str.TargetRegisterClassW64
mov qword [rsp + 0x20], rax
lock sbb byte [rbx], al
add byte [rax - 0x77], cl
and al, 0x20
mov dword [rsp + 0x28], 0x1a
sbb al, byte [rax]
add byte [rax], al
invalid
add byte [rax - 0x73], cl
adc eax, 0x3309b
lea rdx, str.user32.dll
lea r8, str.RegisterClassW
mov rcx, rsi
mov ecx, esi
mov r9d, 2
call fcn.14000d310
mov dil, 1
mov eax, edi
add rsp, 0x38
invalid
invalid
pop rdi
invalid
pop rsi
ret
xor edi, edi
jmp case.default.0x1400260f8
lea rax, str.TargetGetCertificateSize64
mov qword [rsp + 0x20], rax
and al, 0x20
and al, 0x20
mov dword [rsp + 0x28], 0x21
lea rdx, str.gdi32.dll
lea r8, str.GetCertificateSize
test eax, 0x4800030a
mov ecx, esi
test eax, 0x4800030a
mov ecx, esi
add byte [rax - 0x77], cl
int1
mov r9d, 2
call fcn.14000d310
call fcn.14000dbe0
sub dword [rdx - 2], edi
inc dword [rax - 0x49]
add dword [rbx - 0x4983f708], eax
sub dword [rdx - 2], edi
inc dword [rax - 0x49]
add dword [rbx - 0x4983f708], eax
lea rax, str.TargetGetCertificateSizeByHandle64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x20], eax
and bh, al
and al, 0x28
and eax, dword [rax]
add byte [rax], al
mov dword [rsp + 0x28], 0x23
lea rdx, str.gdi32.dll
lea r8, str.GetCertificateSizeByHandle
jmp 0x140026401
or al, 3
add cl, ch
sbb eax, dword [rdx]
add byte [rax], al
lea rax, str.TargetDestroyOPMProtectedOutput64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x20], eax
and bh, al
and al, 0x28
and al, 0
add byte [rax], al
mov dword [rsp + 0x28], 0x24
lea rdx, str.gdi32.dll
lea r8, str.DestroyOPMProtectedOutput
cmp bh, dh
add al, byte [rax]
jmp 0x140026164
lea rax, str.TargetConfigureOPMProtectedOutput64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x20], eax
and bh, al
and al, 0x28
and eax, 0x48000000
lea edx, str.gdi32.dll
mov dword [rsp + 0x28], 0x25
lea rdx, str.gdi32.dll
lea r8, str.ConfigureOPMProtectedOutput
jmp 0x140026164
sub eax, 0xe90002fe
xor bh, bh
invalid
lea rax, str.TargetGetOPMInformation64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x20], eax
and bh, al
and al, 0x28
add byte es:[rax], al
add byte [rax - 0x73], cl
adc eax, 0x33035
mov dword [rsp + 0x28], 0x26
lea rdx, str.gdi32.dll
lea r8, str.GetOPMInformation
jmp 0x140026164
fld dword [rbx + rax]
add cl, ch
or edi, edi
invalid
lea rax, str.TargetGetOPMRandomNumber64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x20], eax
and bh, al
and al, 0x28
invalid
mov dword [rsp + 0x28], 0x27
lea rdx, str.gdi32.dll
lea r8, str.GetOPMRandomNumber
sub eax, dword [rcx]
add eax, dword [rax]
jmp 0x140026164
lea rax, str.TargetGetSuggestedOPMProtectedOutputArraySize64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x28], 0x28
lea rdx, str.gdi32.dll
lea r8, str.GetSuggestedOPMProtectedOutputArraySize
or dword [rcx], 0xbbe90003
invalid
invalid
invalid
or dword [rcx], 0xbbe90003
invalid
lea rax, str.TargetSetOPMSigningKeyAndSequenceNumbers64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x29
lea rdx, str.gdi32.dll
adc eax, 0x32fc0
adc eax, 0x32fc0
lea r8, str.SetOPMSigningKeyAndSequenceNumbers
sar edi, 1
add al, byte [rax]
jmp 0x140026164
dec dword [rax - 0x73]
add eax, 0x3149b
lea rax, str.TargetEnumDisplayMonitors64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x1b
add byte [rax - 0x73], cl
adc eax, 0x32f0d
add byte [rax - 0x73], cl
adc eax, 0x32f0d
lea r8, str.EnumDisplayMonitors
jmp 0x140026164
invalid
xchg esi, eax
inc dword [rdx]
add cl, ch
insd dword [rdi], dx
invalid
dec dword [rax - 0x73]
add eax, 0x3179a
lea rax, str.TargetEnumDisplayDevicesA64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x1c
add byte [rax - 0x73], cl
adc eax, 0x32ee6
add byte [rax - 0x73], cl
adc eax, 0x32ee6
lea r8, str.EnumDisplayDevicesA
jmp 0x140026164
lea rax, str.TargetGetMonitorInfoA64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x1d
lea rdi, str.user32.dll
lea r8, str.GetMonitorInfoA
mov rcx, rsi
mov rdx, rdi
mov r9d, 2
mov ecx, 2
mov ecx, 2
call fcn.14000d310
lea rax, str.TargetGetMonitorInfoW64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x1e
lea r8, str.GetMonitorInfoW
mov rcx, rsi
int1
int1
mov rdx, rdi
jmp 0x140026167
lea rax, str.TargetCreateOPMProtectedOutputs64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x1f
lea rdx, str.gdi32.dll
lea r8, str.CreateOPMProtectedOutputs
jmp 0x140026164
lea rax, str.TargetGetCertificate64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x20
lea rdx, str.gdi32.dll
lea r8, str.GetCertificate
mov rcx, rsi
mov r9d, 2
call fcn.14000d310
call fcn.14000dbe0
mov dil, 1
cmp eax, 8
jl case.default.0x1400260f8
lea rax, str.TargetGetCertificateByHandle64
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x22
lea rdx, str.gdi32.dll
lea r8, str.GetCertificateByHandle
mov rcx, rsi
mov r9d, 2
call fcn.14000d310
jmp case.default.0x1400260f8
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rsi, r9
mov rdi, r8
mov rbx, rdx
mov r14, rcx
cmp byte [rcx + 0x1c], 0
jne 0x1400265c6
mov r15, qword [r14 + 0x20]
lea rcx, [0x1400598e0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
cmp byte [r14 + 0x1c], 0
jne 0x1400265c6
xor ecx, ecx
cmp r15, rax
sete cl
bts rcx, 0x20
mov qword [r14 + 0x18], rcx
mov rcx, r14
mov rdx, rbx
mov r8, rdi
mov r9, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
pop r14
pop r15
jmp fcn.140003770
add eax, 0x13dc7
mov r8, qword [0x140068010]
mov rcx, rdi
mov rdx, rsi
mov edx, esi
invalid
mov edx, esi
add rsp, 0x28
add rsp, 0x28
pop rdi
pop rsi
jmp r8
add esp, 0x28
pop rdi
pop rsi
ret
invalid
int3
or cl, byte [rax - 0x75]
or byte [rbx + r9*4 + 0x42], cl
sbb byte [rax - 0x75], cl
push rdx
adc byte [rdx + rbx - 0x18], dh
invalid
mov ecx, dword [rdx + 8]
mov r8, qword [rdx + 0x18]
mov rdx, qword [rdx + 0x10]
je 0x140050df7
call fcn.140003600
sti
dec dword [rdi]
movzx eax, al
movzx eax, al
shl rax, 2
mov qword [rsi], rax
mov eax, 1
add rsp, 0x20
and byte [rsi - 0x3d], bl
and byte [rsi - 0x3d], bl
call fcn.140050e00
jmp case.0x14000bcc1.115
mov esi, edx
invalid
and rcx, 0xfffffffffffffffc
call fcn.140050e80
test al, al
je 0x140050e66
mov rcx, qword [rbx + 0x20]
mov rdx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140050e66
mov r14, rax
mov rcx, rax
call fcn.140050e80
add byte [rax], al
add byte [rax], al
test al, al
je 0x140050e66
mov rcx, rbx
mov rdx, r14
mov r8, rdi
mov r9, rsi
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
jmp 0x140026580
xor eax, eax
add rsp, 0x28
pop rbx
pop rdi
pop rsi
pop r14
ret