Function at 0x140005370
Capabilities:
Enumerate processes
Get graphical window text
Query environment variable
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x560]
sub rsp, 0x660
mov rax, qword [0x140025040]
xor rax, rsp
mov qword [rbp + 0x550], rax
xor r12d, r12d
mov r15d, r12d
mov dword [rsp + 0x40], r12d
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r8d, 0x100
lea rdx, [rbp + 0x450]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], r12b
mov rbx, qword [0x140026038]
mov r13, qword [0x140026040]
cmp rbx, r13
je 0x1400055bf
nop dword [rax]
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], r12
lea rax, [rbp + 0x450]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140005423
lea rdx, [rbp + 0x450]
lea rcx, [rbp + 0x70]
call fcn.140004c40
nop
mov rdi, qword [rbx + 0x10]
mov rsi, rbx
mov r14, qword [rbx + 0x18]
cmp r14, 0xf
jbe 0x140005452
mov rsi, qword [rbx]
test rdi, rdi
je 0x140005471
mov r8, rdi
mov edx, 0x2e
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140005471
sub rax, rsi
jmp 0x140005478
mov rax, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], r12
cmp rdi, rax
cmovb rax, rdi
mov rdx, rbx
cmp r14, 0xf
jbe 0x14000549a
mov rdx, qword [rbx]
mov r8, rax
lea rcx, [rbp + 0x40]
call fcn.140004c40
bts r15d, 0xf
mov dword [rsp + 0x40], r15d
lea r9, [rbp + 0x40]
mov rsi, qword [rbp + 0x40]
mov r15, qword [rbp + 0x58]
cmp r15, 0xf
cmova r9, rsi
lea rcx, [rbp + 0x70]
mov rdi, qword [rbp + 0x70]
mov r14, qword [rbp + 0x88]
cmp r14, 0xf
cmova rcx, rdi
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x20], rax
mov rdx, qword [rbp + 0x80]
call fcn.1400079e0
mov r12, rax
cmp r15, 0xf
jbe 0x140005531
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000551e
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005580
mov rcx, rsi
call fcn.1400176d4
mov r14, qword [rbp + 0x88]
mov rdi, qword [rbp + 0x70]
cmp r14, 0xf
jbe 0x140005564
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000555c
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005587
mov rcx, rdi
call fcn.1400176d4
cmp r12, 0xffffffffffffffff
jne 0x14000558e
add rbx, 0x20
cmp rbx, r13
je 0x1400055b1
mov r15d, dword [rsp + 0x40]
xor r12d, r12d
jmp 0x140005400
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rax, [rbp + 0x20]
cmp rax, rbx
je 0x1400055b1
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x1400055a5
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp + 0x20]
call fcn.140006b30
cmp qword [rbp + 0x30], 0
jne 0x1400056cf
xor r12d, r12d
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x1400055e1
lea rdx, str.No_supported_browser_is_currently_running.
jmp 0x1400065a3
mov dword [rbp + 0x100], 0x238
lea rdx, [rbp + 0x100]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1400056bb
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x340]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
lea r8, [rbp + 0x12c]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rbx, qword [0x140026038]
mov rdi, qword [0x140026040]
cmp rbx, rdi
je 0x14000569c
nop dword [rax + rax]
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14000565d
mov rdx, qword [rbx]
lea rcx, [rbp + 0x340]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x140005679
add rbx, 0x20
cmp rbx, rdi
jne 0x140005650
jmp 0x14000569c
lea rax, [rbp + 0x20]
cmp rax, rbx
je 0x14000569c
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x140005690
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp + 0x20]
call fcn.140006b30
cmp qword [rbp + 0x30], 0
jne 0x1400056bb
lea rdx, [rbp + 0x100]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140005603
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rbp + 0x30], 0
je 0x14000659c
lea rdx, str.Found___
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400071d0
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
mov rcx, rax
call fcn.1400085a0
lea rdx, [0x1400073b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.This_will_be_killed:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400071d0
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
mov rcx, rax
call fcn.1400085a0
lea rdx, [0x1400073b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400065c0
mov dword [rbp + 0x100], 0x238
lea rdx, [rbp + 0x100]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
xor r15d, r15d
test eax, eax
je 0x14000582c
nop dword [rax + rax]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x340]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
lea r8, [rbp + 0x12c]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rdx, qword [rbp + 0x20]
lea rcx, [rbp + 0x340]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
jne 0x140005814
mov r8d, dword [rbp + 0x108]
xor edx, edx
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140005814
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x100]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140005790
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rax
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x40]
call fcn.140008760
mov rbx, qword [rbp + 0x50]
cmp byte [rbx + 0x19], 0
jne 0x1400058a4
lea rdx, [rbx + 0x20]
mov rdi, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x14000586e
mov rdx, qword [rdx]
mov rsi, qword [rbp + 0x30]
lea rcx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rcx, qword [rbp + 0x20]
mov r8, rsi
cmp rdi, rsi
cmovb r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000589b
jns 0x140005928
jmp 0x1400058a4
cmp rsi, rdi
jae 0x140005928
movabs rax, 0x2e8ba2e8ba2e8ba
cmp qword [0x140026058], rax
je 0x140006642
mov rsi, qword [0x140026050]
lea r14, [0x140026050]
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], r15
mov ecx, 0x58
call fcn.140017380
mov rdi, rax
mov qword [rbp + 0x18], rax
lea rdx, [rbp + 0x20]
lea rcx, [rax + 0x20]
call fcn.140004dd0
mov qword [rdi + 0x40], r15
mov qword [rdi + 0x48], r15
mov qword [rdi + 0x50], r15
mov qword [rdi], rsi
mov qword [rdi + 8], rsi
mov qword [rdi + 0x10], rsi
mov word [rdi + 0x18], 0
movups xmm0, xmmword [rbp + 0x40]
movaps xmmword [rsp + 0x70], xmm0
mov r8, rdi
lea rdx, [rsp + 0x70]
mov rcx, r14
call fcn.1400082f0
mov rbx, rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r15
mov rdx, qword [rbx + 0x48]
sub rdx, qword [rbx + 0x40]
sar rdx, 5
test rdx, rdx
je 0x1400059af
lea rcx, [rbp + 0x70]
call fcn.140004d40
lea rax, [rbp + 0x70]
mov qword [rsp + 0x40], rax
mov rdi, qword [rbx + 0x48]
mov rbx, qword [rbx + 0x40]
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov r13, qword [rbp + 0x70]
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x48], r13
lea rax, [rbp + 0x70]
mov qword [rbp + 0x50], rax
cmp rbx, rdi
je 0x14000599e
mov rdx, rbx
mov rcx, r13
call fcn.140004dd0
add r13, 0x20
mov qword [rbp + 0x48], r13
add rbx, 0x20
cmp rbx, rdi
jne 0x140005982
mov rdx, r13
mov rcx, r13
call fcn.140004f00
mov qword [rbp + 0x78], r13
jmp 0x1400059b3
mov r13, qword [rbp + 0x78]
mov rdi, qword [rbp + 0x70]
mov qword [rsp + 0x40], rdi
cmp rdi, r13
je 0x14000651d
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400059d2
mov rcx, qword [rdi]
mov r8d, 0x104
lea rdx, [rbp + 0x340]
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
lea rcx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rcx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
cmp r8, 0xb
jne 0x140005a11
lea rdx, str.firefox.exe
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140005a11
mov cl, 1
jmp 0x140005a13
xor cl, cl
lea rdx, [rbp + 0x340]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdx + rax], 0
jne 0x140005a21
test cl, cl
lea rcx, [rbp + 0x340]
je 0x1400060f9
mov qword [rbp - 0x50], rcx
mov qword [rbp - 0x48], rax
call fcn.1400169f4
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x10], xmm0
lea r8, [rbp + 0x10]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.140003050
nop
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x60], xmm0
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x60]
call fcn.140006e80
test eax, eax
jne 0x14000669b
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x140005ac0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005abb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000656b
call fcn.1400176d4
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov rbx, qword [rbp + 0x68]
test rbx, rbx
je 0x140005ad8
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x68]
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x10], xmm0
test rbx, rbx
je 0x140005aee
lock inc dword [rbx + 8]
mov rbx, qword [rbp + 0x68]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
test rbx, rbx
je 0x140005b3b
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140005b37
mov rbx, qword [rbp + 0x68]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140005b37
mov rbx, qword [rbp + 0x68]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + VariantCopy]
jmp 0x140005b3b
mov rbx, qword [rbp + 0x68]
cmp qword [rbp + 0x60], 0
je 0x140006074
mov rbx, qword [rbp + 0x10]
nop word [rax + rax]
mov r8d, 3
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140003f80
mov rax, qword [rbp - 0x80]
mov edx, dword [rbp - 0x78]
test edx, edx
je 0x140005b7c
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x140006648
cmp eax, 3
jne 0x14000604d
lea rcx, [rbx + 0x20]
cmp qword [rbx + 0x38], 7
jbe 0x140005b94
mov rcx, qword [rbx + 0x20]
mov rax, qword [rbx + 0x30]
mov qword [rbp - 0x40], rcx
mov qword [rbp - 0x38], rax
call fcn.1400169f4
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp + 0x90], xmm0
lea r8, [rbp + 0x90]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.140008be0
nop
lea rax, [rsp + 0x48]
cmp qword [rsp + 0x60], 0xf
cmova rax, qword [rsp + 0x48]
mov qword [rbp - 0x30], rax
mov rax, qword [rsp + 0x58]
mov qword [rbp - 0x28], rax
call fcn.1400169f4
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x90], xmm0
lea r8, [rbp + 0x90]
mov edx, eax
lea rcx, [rbp + 0x40]
call fcn.140003050
nop
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0x40]
lea rcx, [rbp]
call fcn.140007020
test eax, eax
jne 0x140006679
mov rdx, qword [rbp + 0x58]
cmp rdx, 7
jbe 0x140005c64
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005c5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006572
call fcn.1400176d4
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], r15w
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x140005cb2
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005cad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006579
call fcn.1400176d4
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov r12, qword [rbp + 8]
test r12, r12
je 0x140005ccf
lock inc dword [r12 + 8]
mov r12, qword [rbp + 8]
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x90], xmm0
test r12, r12
je 0x140005cea
lock inc dword [r12 + 8]
mov r12, qword [rbp + 8]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa0], xmm1
test r12, r12
je 0x140005d3a
mov eax, 0xffffffff
lock xadd dword [r12 + 8], eax
cmp eax, 1
jne 0x140005d36
mov rbx, qword [rbp + 8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140005d36
mov r12, qword [rbp + 8]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + VariantCopy]
jmp 0x140005d3a
mov r12, qword [rbp + 8]
cmp qword [rbp], 0
je 0x140005fc8
mov rbx, qword [rbp + 0x90]
nop dword [rax]
mov r8d, 3
lea rdx, [rbp - 0x70]
mov rcx, rbx
call fcn.140003f80
mov rax, qword [rbp - 0x70]
mov edx, dword [rbp - 0x68]
test edx, edx
je 0x140005d7c
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x140006659
cmp eax, 2
jne 0x140005fa1
lea rcx, [rbx + 0x20]
cmp qword [rbx + 0x38], 7
jbe 0x140005d94
mov rcx, qword [rbx + 0x20]
mov rax, qword [rbx + 0x30]
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x18], rax
call fcn.1400169f4
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x40], xmm0
lea r8, [rbp + 0x40]
mov edx, eax
lea rcx, [rbp + 0xb0]
call fcn.140008be0
nop
lea rbx, [rbp + 0xb0]
mov r14, qword [rbp + 0xb0]
mov r15, qword [rbp + 0xc8]
cmp r15, 0xf
cmova rbx, r14
mov rsi, qword [rbp + 0xc0]
cmp rsi, 7
jb 0x140005e49
lea rdi, [rbx + rsi]
lea r8, [rdi - 6]
sub r8, rbx
mov edx, 0x43
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140005e49
cmp dword [rax], 0x6b6f6f43
jne 0x140005e1e
cmp word [rax + 4], 0x6569
jne 0x140005e1e
cmp byte [rax + 6], 0x73
je 0x140005e3c
inc rax
lea r8, [rdi - 6]
sub r8, rax
mov edx, 0x43
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140005e08
jmp 0x140005e49
sub rax, rbx
cmp rax, 0xffffffffffffffff
jne 0x140005ede
lea rbx, [rbp + 0xb0]
cmp r15, 0xf
cmova rbx, r14
cmp rsi, 0xe
jb 0x140005f6a
lea rdi, [rbx + rsi]
lea r8, [rdi - 0xd]
sub r8, rbx
mov edx, 0x63
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140005f6a
nop dword [rax]
nop word [rax + rax]
movabs rcx, 0x2e7365696b6f6f63
cmp qword [rax], rcx
jne 0x140005eb0
cmp dword [rax + 8], 0x696c7173
jne 0x140005eb0
cmp word [rax + 0xc], 0x6574
je 0x140005ed1
inc rax
lea r8, [rdi - 0xd]
sub r8, rax
mov edx, 0x63
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140005e90
jmp 0x140005f6a
sub rax, rbx
cmp rax, 0xffffffffffffffff
je 0x140005f6a
lea rdx, str.Clearing_cookies__trackers_for
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400071d0
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
mov rcx, rax
call fcn.1400085a0
lea rdx, str._at
mov rcx, rax
call fcn.1400071d0
lea rdx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0xf
cmova rdx, qword [rbp + 0xb0]
mov r8, qword [rbp + 0xc0]
mov rcx, rax
call fcn.1400085a0
lea rdx, [0x1400073b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xb0]
call fcn.1400050c0
mov r15, qword [rbp + 0xc8]
mov r14, qword [rbp + 0xb0]
cmp r15, 0xf
jbe 0x140005fa1
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140005f99
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006580
mov rcx, r14
call fcn.1400176d4
lea rcx, [rbp + 0x90]
call fcn.1400046d0
test eax, eax
jne 0x14000666a
mov rbx, qword [rbp + 0x90]
test rbx, rbx
jne 0x140005d50
xor r15d, r15d
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x140006012
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14000600e
mov rbx, qword [rbp + 0x98]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14000600e
mov rcx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov r12, qword [rbp + 8]
test r12, r12
je 0x14000604d
mov eax, 0xffffffff
lock xadd dword [r12 + 8], eax
cmp eax, 1
jne 0x14000604d
mov rbx, qword [rbp + 8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14000604d
mov rcx, qword [rbp + 8]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
lea rcx, [rbp + 0x10]
call fcn.1400040e0
test eax, eax
jne 0x14000668c
mov rbx, qword [rbp + 0x10]
test rbx, rbx
jne 0x140005b50
mov rbx, qword [rbp + 0x68]
mov rdi, qword [rsp + 0x40]
mov rcx, qword [rbp + 0x18]
test rcx, rcx
je 0x1400060b5
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400060b1
mov rbx, qword [rbp + 0x18]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400060b1
mov rcx, qword [rbp + 0x18]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov rbx, qword [rbp + 0x68]
test rbx, rbx
je 0x140006503
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140006503
mov rbx, qword [rbp + 0x68]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140006503
mov rcx, qword [rbp + 0x68]
jmp 0x1400064fd
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], rax
call fcn.1400169f4
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp + 0x40], xmm0
lea r8, [rbp + 0x40]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.140003050
nop
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
lea rdx, [rsp + 0x48]
lea rcx, [rbp]
call fcn.140007020
test eax, eax
jne 0x14000662e
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x140006180
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000617b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006587
call fcn.1400176d4
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov r12, qword [rbp + 8]
test r12, r12
je 0x14000619a
lock inc dword [r12 + 8]
mov r12, qword [rbp + 8]
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x10], xmm0
test r12, r12
je 0x1400061b2
lock inc dword [r12 + 8]
mov r12, qword [rbp + 8]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x40], xmm1
test r12, r12
je 0x1400061ff
mov eax, 0xffffffff
lock xadd dword [r12 + 8], eax
cmp eax, 1
jne 0x1400061fb
mov rbx, qword [rbp + 8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400061fb
mov r12, qword [rbp + 8]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + VariantCopy]
jmp 0x1400061ff
mov r12, qword [rbp + 8]
cmp qword [rbp], 0
je 0x140006487
mov rbx, qword [rbp + 0x10]
nop
mov r8d, 3
lea rdx, [rbp - 0x60]
mov rcx, rbx
call fcn.140003f80
mov rax, qword [rbp - 0x60]
mov edx, dword [rbp - 0x58]
test edx, edx
je 0x14000623c
lea ecx, [rax - 1]
test ecx, 0xfffffff7
jne 0x1400066af
cmp eax, 2
jne 0x140006461
lea rcx, [rbx + 0x20]
cmp qword [rbx + 0x38], 7
jbe 0x140006254
mov rcx, qword [rbx + 0x20]
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
call fcn.1400169f4
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0xf0], xmm0
lea r8, [rbp + 0xf0]
mov edx, eax
lea rcx, [rbp + 0xd0]
call fcn.140008be0
nop
lea rbx, [rbp + 0xd0]
mov r14, qword [rbp + 0xd0]
mov r15, qword [rbp + 0xe8]
cmp r15, 0xf
cmova rbx, r14
mov rsi, qword [rbp + 0xe0]
cmp rsi, 7
jb 0x140006312
lea rdi, [rbx + rsi]
lea r8, [rdi - 6]
sub r8, rbx
mov edx, 0x43
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140006312
cmp dword [rax], 0x6b6f6f43
jne 0x1400062e7
cmp word [rax + 4], 0x6569
jne 0x1400062e7
cmp byte [rax + 6], 0x73
je 0x140006305
inc rax
lea r8, [rdi - 6]
sub r8, rax
mov edx, 0x43
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x1400062d1
jmp 0x140006312
sub rax, rbx
cmp rax, 0xffffffffffffffff
jne 0x14000639e
lea rbx, [rbp + 0xd0]
cmp r15, 0xf
cmova rbx, r14
cmp rsi, 0xe
jb 0x14000642a
lea rdi, [rsi + rbx]
lea r8, [rdi - 0xd]
sub r8, rbx
mov edx, 0x63
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14000642a
nop dword [rax]
movabs rcx, 0x2e7365696b6f6f63
cmp qword [rax], rcx
jne 0x140006370
cmp dword [rax + 8], 0x696c7173
jne 0x140006370
cmp word [rax + 0xc], 0x6574
je 0x140006391
inc rax
lea r8, [rdi - 0xd]
sub r8, rax
mov edx, 0x63
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140006350
jmp 0x14000642a
sub rax, rbx
cmp rax, 0xffffffffffffffff
je 0x14000642a
lea rdx, str.Clearing_cookies__trackers_for
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400071d0
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
mov rcx, rax
call fcn.1400085a0
lea rdx, str._at
mov rcx, rax
call fcn.1400071d0
lea rdx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0xf
cmova rdx, qword [rbp + 0xd0]
mov r8, qword [rbp + 0xe0]
mov rcx, rax
call fcn.1400085a0
lea rdx, [0x1400073b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xd0]
call fcn.1400050c0
mov r15, qword [rbp + 0xe8]
mov r14, qword [rbp + 0xd0]
cmp r15, 0xf
jbe 0x140006461
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140006459
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000658e
mov rcx, r14
call fcn.1400176d4
lea rcx, [rbp + 0x10]
call fcn.1400046d0
test eax, eax
jne 0x1400066c0
mov rbx, qword [rbp + 0x10]
test rbx, rbx
jne 0x140006210
mov rdi, qword [rsp + 0x40]
xor r15d, r15d
mov rcx, qword [rbp + 0x18]
test rcx, rcx
je 0x1400064c8
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400064c4
mov rbx, qword [rbp + 0x18]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400064c4
mov rcx, qword [rbp + 0x18]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
mov r12, qword [rbp + 8]
test r12, r12
je 0x140006503
mov eax, 0xffffffff
lock xadd dword [r12 + 8], eax
cmp eax, 1
jne 0x140006503
mov rbx, qword [rbp + 8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140006503
mov rcx, qword [rbp + 8]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
add rdi, 0x20
mov qword [rsp + 0x40], rdi
cmp rdi, r13
jne 0x1400059c5
mov r13, qword [rbp + 0x78]
mov rdi, qword [rbp + 0x70]
test rdi, rdi
je 0x1400065c0
mov rdx, r13
mov rcx, rdi
call fcn.140004f00
mov rdx, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x70]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006595
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006595
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400176d4
jmp 0x1400065c0
lea rdx, str.No_supported_browser_is_running.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400071d0
lea rdx, [0x1400073b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400065fe
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400065f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400065f9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400176d4
mov rcx, qword [rbp + 0x550]
xor rcx, rsp
call fcn.140017360
lea r11, [rsp + 0x660]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea r8, [rsp + 0x48]
mov edx, eax
lea rcx, str.recursive_directory_iterator::recursive_directory_iterator
call fcn.140003f10
nop
call fcn.140002990
nop
lea r8, [rbx + 0x20]
lea rcx, str.directory_entry::status
call fcn.140003f10
nop
lea r8, [rbx + 0x20]
lea rcx, str.directory_entry::status
call fcn.140003f10
int3
mov edx, eax
lea rcx, str.recursive_directory_iterator::operator
call fcn.140003e20
nop
lea r8, [rbp + 0x40]
mov edx, eax
lea rcx, str.recursive_directory_iterator::recursive_directory_iterator
call fcn.140003f10
nop
mov edx, eax
lea rcx, str.directory_iterator::operator
call fcn.140003e20
nop
lea r8, [rsp + 0x48]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140003f10
nop
lea r8, [rbx + 0x20]
lea rcx, str.directory_entry::status
call fcn.140003f10
int3
mov edx, eax
lea rcx, str.recursive_directory_iterator::operator
call fcn.140003e20
int3