Function at 0x140005ac0
Capabilities:
Enumerate processes
Terminate process

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x908]
sub rsp, 0x9f0
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r13
mov rax, qword [0x140035410]
xor rax, rsp
mov qword [rbp + 0x8e0], rax
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
xor r14d, r14d
or rbx, 0xffffffffffffffff
cmp rax, rbx
je 0x140005b8d
mov dword [rsp + 0x60], 0x238
lea rdx, [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
jmp 0x140005b80
lea rdx, [0x14002c3b0]
lea rcx, [rbp - 0x74]
call fcn.140018b48
test eax, eax
jne 0x140005b72
mov r8d, dword [rsp + 0x68]
xor edx, edx
lea ecx, [rax + 1]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je 0x140005b72
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x60]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140005b32
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x6a0]
call fcn.140004f64
nop
lea r8, str.prefs.js
lea rdx, [rbp + 0x6a0]
lea rcx, [rbp + 0x680]
call fcn.14000a920
nop
lea rax, [0x14002ec08]
mov qword [rbp + 0x6c0], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x7a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x7b0], xmm1
mov qword [rbp + 0x7c0], r14
mov qword [rbp + 0x6d8], r14
movdqa xmmword [rbp + 0x6e0], xmm0
movdqa xmmword [rbp + 0x6f0], xmm1
movdqa xmmword [rbp + 0x700], xmm0
mov qword [rbp + 0x710], r14
movdqa xmmword [rbp + 0x720], xmm1
movdqa xmmword [rbp + 0x730], xmm0
movdqa xmmword [rbp + 0x740], xmm1
mov qword [rbp + 0x760], r14
lea rdx, [rbp + 0x680]
lea rcx, [rbp + 0x6c0]
call fcn.140008e30
nop
cmp qword [rbp + 0x760], r14
jne 0x140005c4e
lea rdi, vtable.std::ios_base.0
jmp 0x1400072a7
mov qword [rsp + 0x40], r14
mov byte [rsp + 0x48], 1
mov rax, qword [rbp + 0x6c0]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0x708]
mov qword [rsp + 0x30], rax
test rax, rax
sete byte [rsp + 0x38]
mov esi, 7
mov qword [rbp + 0x1b8], rsi
mov qword [rbp + 0x1b0], r14
mov word [rbp + 0x1a0], r14w
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
movaps xmm1, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm1
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x1a0]
call fcn.14000b640
nop
lea rcx, [rbp + 0x6d0]
call fcn.14000a31c
test rax, rax
jne 0x140005cfe
mov rax, qword [rbp + 0x6c0]
movsxd rcx, dword [rax + 4]
lea rcx, [rbp + rcx + 0x6c0]
mov edx, dword [rcx + 0x10]
or edx, 2
mov eax, edx
or eax, 4
cmp qword [rcx + 0x48], r14
cmove edx, eax
xor r8d, r8d
call fcn.1400012fc
mov qword [rbp + 0x2f8], rsi
mov qword [rbp + 0x2f0], r14
mov word [rbp + 0x2e0], r14w
mov r15d, 0x30
mov r8d, r15d
lea rdx, str.user_pref__network.http.http2.enabled___false___n
lea rcx, [rbp + 0x2e0]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x2e0]
lea edi, [r15 - 0x28]
cmp qword [rbp + 0x2f8], rdi
cmovae rdx, qword [rbp + 0x2e0]
mov r9, qword [rbp + 0x2f0]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140005d7c
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x2b8], rsi
mov qword [rbp + 0x2b0], r14
mov word [rbp + 0x2a0], r14w
mov r13d, 0x2f
mov r8d, r13d
lea rdx, str.user_pref__network.http.http3.enable___false___n
lea rcx, [rbp + 0x2a0]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], rdi
cmovae rdx, qword [rbp + 0x2a0]
mov r9, qword [rbp + 0x2b0]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140005df6
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x278], rsi
mov qword [rbp + 0x270], r14
mov word [rbp + 0x260], r14w
mov r8d, 0x26
lea rdx, str.user_pref__network.http.version___1___n
lea rcx, [rbp + 0x260]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x260]
cmp qword [rbp + 0x278], rdi
cmovae rdx, qword [rbp + 0x260]
mov r9, qword [rbp + 0x270]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140005e6d
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x238], rsi
mov qword [rbp + 0x230], r14
mov word [rbp + 0x220], r14w
mov r8, r13
lea rdx, str.user_pref__network.http.http4.enable___false___n
lea rcx, [rbp + 0x220]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x220]
cmp qword [rbp + 0x238], rdi
cmovae rdx, qword [rbp + 0x220]
mov r9, qword [rbp + 0x230]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140005ee1
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x1f8], rsi
mov qword [rbp + 0x1f0], r14
mov word [rbp + 0x1e0], r14w
mov r8d, 0x3a
lea rdx, str.user_pref__network.trr.no_warn_on_network_change___true___n
lea rcx, [rbp + 0x1e0]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x1e0]
cmp qword [rbp + 0x1f8], rdi
cmovae rdx, qword [rbp + 0x1e0]
mov r9, qword [rbp + 0x1f0]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140005f58
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x398], rsi
mov qword [rbp + 0x390], r14
mov word [rbp + 0x380], r14w
mov r8d, 0x37
lea rdx, str.user_pref__network.http.max_response_headers_kb____1___n
lea rcx, [rbp + 0x380]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x380]
cmp qword [rbp + 0x398], rdi
cmovae rdx, qword [rbp + 0x380]
mov r9, qword [rbp + 0x390]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140005fcf
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x358], rsi
mov qword [rbp + 0x350], r14
mov word [rbp + 0x340], r14w
mov r8d, 0x4a
lea rdx, str.user_pref__network.http.enforce_framing.strict_chunked_encoding___false___n
lea rcx, [rbp + 0x340]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x340]
cmp qword [rbp + 0x358], rdi
cmovae rdx, qword [rbp + 0x340]
mov r9, qword [rbp + 0x350]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006046
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x1d8], rsi
mov qword [rbp + 0x1d0], r14
mov word [rbp + 0x1c0], r14w
mov r8, r15
lea rdx, str.user_pref__network.http.response.timeout____1___n
lea rcx, [rbp + 0x1c0]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x1c0]
cmp qword [rbp + 0x1d8], rdi
cmovae rdx, qword [rbp + 0x1c0]
mov r9, qword [rbp + 0x1d0]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x1400060ba
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x4f8], rsi
mov qword [rbp + 0x4f0], r14
mov word [rbp + 0x4e0], r14w
mov r8d, 0x43
lea rdx, str.user_pref__network.trr.send_empty_accept_encoding_headers___true___n
lea rcx, [rbp + 0x4e0]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x4e0]
cmp qword [rbp + 0x4f8], rdi
cmovae rdx, qword [rbp + 0x4e0]
mov r9, qword [rbp + 0x4f0]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006131
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x4e0]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x3f8], rsi
mov qword [rbp + 0x3f0], r14
mov word [rbp + 0x3e0], r14w
mov r8d, 0x55
lea rdx, str.user_pref__network.auth.non_web_content_triggered_resources_http_auth_allow___true___n
lea rcx, [rbp + 0x3e0]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x3e0]
cmp qword [rbp + 0x3f8], rdi
cmovae rdx, qword [rbp + 0x3e0]
mov r9, qword [rbp + 0x3f0]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x1400061a8
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x478], rsi
mov qword [rbp + 0x470], r14
mov word [rbp + 0x460], r14w
mov r8d, 0x29
lea rdx, str.user_pref__security.csp.enable___false___n
lea rcx, [rbp + 0x460]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x460]
cmp qword [rbp + 0x478], rdi
cmovae rdx, qword [rbp + 0x460]
mov r9, qword [rbp + 0x470]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x14000621f
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x3b8], rsi
mov qword [rbp + 0x3b0], r14
mov word [rbp + 0x3a0], r14w
mov r8d, 0x46
lea rdx, str.user_pref__security.xss_detection.main_thread_script_filter___false___n
lea rcx, [rbp + 0x3a0]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x3a0]
cmp qword [rbp + 0x3b8], rdi
cmovae rdx, qword [rbp + 0x3a0]
mov r9, qword [rbp + 0x3b0]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006296
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x3a0]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x4b8], rsi
mov qword [rbp + 0x4b0], r14
mov word [rbp + 0x4a0], r14w
mov r8d, 0x42
lea rdx, str.user_pref__security.mixed_content.block_display_content___false___n
lea rcx, [rbp + 0x4a0]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x4a0]
cmp qword [rbp + 0x4b8], rdi
cmovae rdx, qword [rbp + 0x4a0]
mov r9, qword [rbp + 0x4b0]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x14000630d
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x4a0]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x378], rsi
mov qword [rbp + 0x370], r14
mov word [rbp + 0x360], r14w
mov r8d, 0x44
lea rdx, str.user_pref__security.mixed_content.block_object_subrequest___false___n
lea rcx, [rbp + 0x360]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x360]
cmp qword [rbp + 0x378], rdi
cmovae rdx, qword [rbp + 0x360]
mov r9, qword [rbp + 0x370]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006384
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x518], rsi
mov qword [rbp + 0x510], r14
mov word [rbp + 0x500], r14w
mov r8d, 0x3b
lea rdx, str.user_pref__security.fileuri.strict_origin_policy___false___n
lea rcx, [rbp + 0x500]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x500]
cmp qword [rbp + 0x518], rdi
cmovae rdx, qword [rbp + 0x500]
mov r9, qword [rbp + 0x510]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x1400063fb
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x500]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x4d8], rsi
mov qword [rbp + 0x4d0], r14
mov word [rbp + 0x4c0], r14w
mov r8, r15
lea rdx, str.user_pref__security.fileuri.origin_policy___0___n
lea rcx, [rbp + 0x4c0]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x4c0]
cmp qword [rbp + 0x4d8], rdi
cmovae rdx, qword [rbp + 0x4c0]
mov r9, qword [rbp + 0x4d0]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x14000646f
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x318], rsi
mov qword [rbp + 0x310], r14
mov word [rbp + 0x300], r14w
mov r8d, 0x29
lea rdx, str.user_pref__security.sri.enable___false___n
lea rcx, [rbp + 0x300]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x300]
cmp qword [rbp + 0x318], rdi
cmovae rdx, qword [rbp + 0x300]
mov r9, qword [rbp + 0x310]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x1400064e6
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x498], rsi
mov qword [rbp + 0x490], r14
mov word [rbp + 0x480], r14w
mov r8, r15
lea rdx, str.user_pref__privacy.firstparty.isolate___false___n
lea rcx, [rbp + 0x480]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x480]
cmp qword [rbp + 0x498], rdi
cmovae rdx, qword [rbp + 0x480]
mov r9, qword [rbp + 0x490]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x14000655a
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x480]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x2d8], rsi
mov qword [rbp + 0x2d0], r14
mov word [rbp + 0x2c0], r14w
mov r8d, 0x3c
lea rdx, str.user_pref__browser.xul.error_pages.expert_bad_cert___true___n
lea rcx, [rbp + 0x2c0]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x2c0]
cmp qword [rbp + 0x2d8], rdi
cmovae rdx, qword [rbp + 0x2c0]
mov r9, qword [rbp + 0x2d0]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x1400065d1
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x458], rsi
mov qword [rbp + 0x450], r14
mov word [rbp + 0x440], r14w
mov r8, r13
lea rdx, str.user_pref__browser.ssl_override_behavior___1___n
lea rcx, [rbp + 0x440]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x440]
cmp qword [rbp + 0x458], rdi
cmovae rdx, qword [rbp + 0x440]
mov r9, qword [rbp + 0x450]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006645
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x440]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x298], rsi
mov qword [rbp + 0x290], r14
mov word [rbp + 0x280], r14w
mov r8d, 0x43
lea rdx, str.user_pref__browser.safebrowsing.downloads.remote.enabled___false___n
lea rcx, [rbp + 0x280]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x280]
cmp qword [rbp + 0x298], rdi
cmovae rdx, qword [rbp + 0x280]
mov r9, qword [rbp + 0x290]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x1400066bc
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x418], rsi
mov qword [rbp + 0x410], r14
mov word [rbp + 0x400], r14w
mov r8d, 0x4a
lea rdx, str.user_pref__security.tls.insecure_fallback_hosts.use_static_list___false___n
lea rcx, [rbp + 0x400]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x400]
cmp qword [rbp + 0x418], rdi
cmovae rdx, qword [rbp + 0x400]
mov r9, qword [rbp + 0x410]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006733
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x400]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x258], rsi
mov qword [rbp + 0x250], r14
mov word [rbp + 0x240], r14w
mov r15d, 0x2a
mov r8d, r15d
lea rdx, str.user_pref__security.tls.version.min___1___n
lea rcx, [rbp + 0x240]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x240]
cmp qword [rbp + 0x258], rdi
cmovae rdx, qword [rbp + 0x240]
mov r9, qword [rbp + 0x250]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x1400067ad
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x3d8], rsi
mov qword [rbp + 0x3d0], r14
mov word [rbp + 0x3c0], r14w
mov r8, r15
lea rdx, str.user_pref__security.tls.version.max___4___n
lea rcx, [rbp + 0x3c0]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x3c0]
cmp qword [rbp + 0x3d8], rdi
cmovae rdx, qword [rbp + 0x3c0]
mov r9, qword [rbp + 0x3d0]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006821
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x218], rsi
mov qword [rbp + 0x210], r14
mov word [rbp + 0x200], r14w
mov r8d, 0x35
lea rdx, str.user_pref__security.tls.version.fallback_limit___4___n
lea rcx, [rbp + 0x200]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x200]
cmp qword [rbp + 0x218], rdi
cmovae rdx, qword [rbp + 0x200]
mov r9, qword [rbp + 0x210]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006898
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x438], rsi
mov qword [rbp + 0x430], r14
mov word [rbp + 0x420], r14w
mov r8d, 0x32
lea rdx, str.user_pref__security.tls.insecure_alerts___false___n
lea rcx, [rbp + 0x420]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x420]
cmp qword [rbp + 0x438], rdi
cmovae rdx, qword [rbp + 0x420]
mov r9, qword [rbp + 0x430]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x14000690f
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
mov qword [rbp + 0x338], rsi
mov qword [rbp + 0x330], r14
mov word [rbp + 0x320], r14w
mov r8d, 0x37
lea rdx, str.user_pref__security.ssl.enable_ocsp_stapling___false___n
lea rcx, [rbp + 0x320]
call fcn.140003c1c
nop
lea rdx, [rbp + 0x320]
cmp qword [rbp + 0x338], rdi
cmovae rdx, qword [rbp + 0x320]
mov r9, qword [rbp + 0x330]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006986
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x320]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
lea rdx, str.user_pref__security.OCSP.require___false___n
lea rcx, [rbp + 0x560]
call fcn.140003a60
nop
lea rdx, [rbp + 0x560]
cmp qword [rbp + 0x578], rdi
cmovae rdx, qword [rbp + 0x560]
mov r9, qword [rbp + 0x570]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x1400069e1
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x560]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
lea rdx, str.user_pref__security.cert_pinning.enforcement_level___0___n
lea rcx, [rbp + 0x540]
call fcn.140003a60
nop
lea rdx, [rbp + 0x540]
cmp qword [rbp + 0x558], rdi
cmovae rdx, qword [rbp + 0x540]
mov r9, qword [rbp + 0x550]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006a3c
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x540]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
lea rdx, str.user_pref__browser.safebrowsing.downloads.remote.url________n
lea rcx, [rbp + 0x5a0]
call fcn.140003a60
nop
lea rdx, [rbp + 0x5a0]
cmp qword [rbp + 0x5b8], rdi
cmovae rdx, qword [rbp + 0x5a0]
mov r9, qword [rbp + 0x5b0]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006a97
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x5a0]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
lea rdx, str.user_pref__browser.safebrowsing.malware.enabled___false___n
lea rcx, [rbp + 0x5e0]
call fcn.140003a60
nop
lea rdx, [rbp + 0x5e0]
cmp qword [rbp + 0x5f8], rdi
cmovae rdx, qword [rbp + 0x5e0]
mov r9, qword [rbp + 0x5f0]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006af2
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x5e0]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
lea rdx, str.user_pref__browser.safebrowsing.phishing.enabled___false___n
lea rcx, [rbp + 0x640]
call fcn.140003a60
nop
lea rdx, [rbp + 0x640]
cmp qword [rbp + 0x658], rdi
cmovae rdx, qword [rbp + 0x640]
mov r9, qword [rbp + 0x650]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006b4d
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x640]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
lea rdx, str.user_pref__privacy.trackingprotection.enabled___false___n
lea rcx, [rbp + 0x600]
call fcn.140003a60
nop
lea rdx, [rbp + 0x600]
cmp qword [rbp + 0x618], rdi
cmovae rdx, qword [rbp + 0x600]
mov r9, qword [rbp + 0x610]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006ba8
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x600]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
lea rdx, str.user_pref__privacy.donottrackheader.enabled___false___n
lea rcx, [rbp + 0x580]
call fcn.140003a60
nop
lea rdx, [rbp + 0x580]
cmp qword [rbp + 0x598], rdi
cmovae rdx, qword [rbp + 0x580]
mov r9, qword [rbp + 0x590]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006c03
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x580]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
lea rdx, str.user_pref__dom.security.https_only_mode___false___n
lea rcx, [rbp + 0x5c0]
call fcn.140003a60
nop
lea rdx, [rbp + 0x5c0]
cmp qword [rbp + 0x5d8], rdi
cmovae rdx, qword [rbp + 0x5c0]
mov r9, qword [rbp + 0x5d0]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006c5e
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x5c0]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
lea rdx, str.user_pref__security.enterprise_roots.enabled___true___nuser_pref__security.ssl.errorReporting.enabled___false___nuser_pref__security.ssl.errorReporting.url________nuser_pref__security.ssl.enable_false_start___true___nuser_pref__security.ssl.require_safe_negotiation___false___nuser_pref__security.ssl.treat_unsafe_negotiation_as_broken___false___nuser_pref__security.ssl3.ecdhe_ecdsa_rc4_128_sha___false___nuser_pref__security.ssl3.ecdhe_rsa_rc4_128_sha___false___nuser_pref__security.ssl3.rsa_rc4_128_md5___false___nuser_pref__security.ssl3.rsa_rc4_128_sha___false___nuser_pref__security.tls.version.enable_deprecated___true___nuser_pref__security.warn_entering_weak___false___nuser_pref__security.warn_viewing_mixed___false___nuser_pref__security.warn_viewing_mixed.show_once___false___n
lea rcx, [rbp + 0x620]
call fcn.140003a60
nop
lea rdx, [rbp + 0x620]
cmp qword [rbp + 0x638], rdi
cmovae rdx, qword [rbp + 0x620]
mov r9, qword [rbp + 0x630]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006cb9
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x620]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
lea rdx, str.user_pref__network.http.spdy.enabled.v3_1___false___nuser_pref__network.http.spdy.enabled.v3___false___nuser_pref__network.http.spdy.enabled___false___nuser_pref__browser.tabs.remote.autostart___false___nuser_pref__browser.tabs.remote.autostart.2___false___nuser_pref__gfx.direct2d.disabled___true___nuser_pref__layers.acceleration.disabled___true___nuser_pref__network.stricttransportsecurity.preloadlist___false___n
lea rcx, [rbp + 0x660]
call fcn.140003a60
nop
mov r9d, 0x1e
lea rdx, str.network.http.spdy.enabled.v3_1
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006cfe
lea rdx, str.user_pref__network.http.spdy.enabled.v3_1___false___n
lea rcx, [rbp + 0x1a0]
call fcn.140003aa4
mov esi, 0x1c
mov r9d, esi
lea rdx, str.network.http.spdy.enabled.v3
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006d31
lea rdx, str.user_pref__network.http.spdy.enabled.v3___false___n
lea rcx, [rbp + 0x1a0]
call fcn.140003aa4
mov r9d, 0x19
lea rdx, str.network.http.spdy.enabled
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006d62
lea rdx, str.user_pref__network.http.spdy.enabled___false___n
lea rcx, [rbp + 0x1a0]
call fcn.140003aa4
mov r9d, 0x1d
lea rdx, str.browser.tabs.remote.autostart
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006d93
lea rdx, str.user_pref__browser.tabs.remote.autostart___false___n
lea rcx, [rbp + 0x1a0]
call fcn.140003aa4
mov r9d, 0x1f
lea rdx, str.browser.tabs.remote.autostart.2
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006dc4
lea rdx, str.user_pref__browser.tabs.remote.autostart.2___false___n
lea rcx, [rbp + 0x1a0]
call fcn.140003aa4
mov r9d, 0x15
lea rdx, str.gfx.direct2d.disabled
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006df5
lea rdx, str.user_pref__gfx.direct2d.disabled___true___n
lea rcx, [rbp + 0x1a0]
call fcn.140003aa4
mov r9, rsi
lea rdx, str.layers.acceleration.disabled
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006e23
lea rdx, str.user_pref__layers.acceleration.disabled___true___n
lea rcx, [rbp + 0x1a0]
call fcn.140003aa4
mov r9d, 0x2b
lea rdx, str.network.stricttransportsecurity.preloadlist
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006e54
lea rdx, str.user_pref__network.stricttransportsecurity.preloadlist___false___n
lea rcx, [rbp + 0x1a0]
call fcn.140003aa4
lea rdx, str.user_pref__network.http.altsvc.enabled___false___n
lea rcx, [rbp + 0x520]
call fcn.140003a60
nop
lea rdx, [rbp + 0x520]
cmp qword [rbp + 0x538], rdi
cmovae rdx, qword [rbp + 0x520]
mov r9, qword [rbp + 0x530]
lea rcx, [rbp + 0x1a0]
call fcn.140009f98
cmp rax, rbx
jne 0x140006eaf
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x520]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
lea rdx, str.user_pref__network.http.spdy.enabled___false___nuser_pref__network.http.spdy.enabled.http2___false___nuser_pref__network.http.spdy.enabled.http2draft___false___nuser_pref__network.http.spdy.enabled.v3_1___false___nuser_pref__network.http.spdy.enabled.v3___false___nuser_pref__network.http.spdy.enabled___false___nuser_pref__network.http.spdy.enabled.http2___false___nuser_pref__network.http.spdy.enabled.http2draft___false___nuser_pref__network.http.spdy.enabled___false___nuser_pref__network.http.spdy.enabled.v3_1___false___nuser_pref__network.http.spdy.enabled.v3___false___nuser_pref__network.http.spdy.enabled___false___n
lea rcx, [rbp + 0x660]
call fcn.140003aa4
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0x660]
lea rcx, [rbp + 0x1a0]
call fcn.140003d3c
lea rax, [0x14002ebe0]
mov qword [rbp + 0x7d0], rax
mov qword [rbp + 0x8a8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x8b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x8c0], xmm1
movdqa xmmword [rbp + 0x7e0], xmm0
movdqa xmmword [rbp + 0x7f0], xmm1
movdqa xmmword [rbp + 0x800], xmm0
movdqa xmmword [rbp + 0x810], xmm1
mov qword [rbp + 0x828], r14
movdqa xmmword [rbp + 0x830], xmm0
movdqa xmmword [rbp + 0x840], xmm1
mov qword [rbp + 0x850], r14
mov qword [rbp + 0x868], r14
mov r8d, 2
lea rdx, [rbp + 0x680]
lea rcx, [rbp + 0x7d0]
call fcn.140009a38
nop
cmp qword [rbp + 0x868], r14
je 0x140006fc2
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x7d0]
call fcn.14000aab0
lea rcx, [rbp + 0x7d8]
call fcn.14000a31c
test rax, rax
jne 0x140006fbf
mov rax, qword [rbp + 0x7d0]
movsxd rcx, dword [rax + 4]
lea rcx, [rbp + rcx + 0x7d0]
mov edx, dword [rcx + 0x10]
or edx, 2
mov eax, edx
or eax, 4
cmp qword [rcx + 0x48], r14
cmove edx, eax
xor r8d, r8d
call fcn.1400012fc
mov ebx, r14d
lea rcx, [rbp + 0x878]
call fcn.140009b3c
lea rdi, vtable.std::ios_base.0
mov qword [rbp + 0x878], rdi
lea rcx, [rbp + 0x878]
call fcn.14001c9b4
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x520]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x660]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x620]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x5c0]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x580]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x600]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x640]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x5e0]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x5a0]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x540]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x560]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x320]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x420]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x200]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x3c0]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x240]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x400]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x280]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x440]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x2c0]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x480]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x300]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x4c0]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x500]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x360]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x4a0]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x3a0]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x460]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x3e0]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x4e0]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x1c0]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x340]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x380]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x1e0]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x220]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x260]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x2a0]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x2e0]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x1a0]
call fcn.140002700
nop
lea rcx, [rbp + 0x770]
call fcn.140008f3c
mov qword [rbp + 0x770], rdi
lea rcx, [rbp + 0x770]
call fcn.14001c9b4
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x680]
call fcn.140002700
nop
xor r8d, r8d
mov dl, 1
lea rcx, [rbp + 0x6a0]
call fcn.140002700
mov eax, ebx
mov rcx, qword [rbp + 0x8e0]
xor rcx, rsp
call fcn.14000bb20
lea r11, [rsp + 0x9f0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r13, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret