Function at 0x14000ea90
Capabilities:
Check for software breakpoints
Get system information on windows
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x128
mov rsi, r9
mov rdi, r8
mov rbx, rdx
mov r15, rcx
mov rcx, qword [rsp + 0x198]
mov rax, qword [0x140042028]
xor rax, rsp
mov qword [rsp + 0x120], rax
mov qword [rcx], 0
cmp qword [r9], 0
je 0x14000eb00
cmp qword [rsi + 0x10], 0
je 0x140010f7e
cmp qword [rsi + 0x18], 0
je 0x140010f7e
cmp dword [rsi + 8], 0
je 0x140010f7e
cmp byte [rsi + 0x34], 0
je 0x140010f7e
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EncodePointer]
lea r14, [rsi + 0x20]
mov ecx, dword [rsi + 0x20]
lea edx, [rcx + 8]
cmp qword [rsi], 0
je 0x14000fc56
cmp edx, dword [rsi + 0x30]
ja 0x14000fc5e
mov rdx, qword [rsi + 0x10]
mov qword [rdx + rcx], rax
add dword [rsi + 0x20], 8
cmp qword [rsi], 0
je 0x14000eb63
mov al, byte [rsi + 0x34]
cmp qword [rsi + 0x10], 0
je 0x140010f7e
cmp qword [rsi + 0x18], 0
je 0x140010f7e
cmp dword [rsi + 8], 0
je 0x140010f7e
test al, al
je 0x140010f7e
mov ecx, dword [rbx + 0x10]
add rcx, qword [rbx + 8]
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov edx, dword [rsi + 0x20]
lea ecx, [rdx + 8]
cmp qword [rsi], 0
mov qword [rsp + 0x40], rdi
je case.0x14000eeb6.14
cmp ecx, dword [rsi + 0x30]
ja 0x14000fc71
mov rcx, qword [rsi + 0x10]
mov qword [rcx + rdx], rax
mov ecx, dword [rsi + 0x20]
add ecx, 8
mov dword [rsi + 0x20], ecx
cmp qword [rsi], 0
je 0x14000ebd0
mov al, byte [rsi + 0x34]
cmp qword [rsi + 0x10], 0
je 0x140010f70
cmp qword [rsi + 0x18], 0
je 0x140010f70
cmp dword [rsi + 8], 0
je 0x140010f70
test al, al
je 0x140010f70
mov eax, dword [rbx + 0x10]
mov rdx, qword [rbx + 8]
cmp byte [rdx + rax], 0x48
mov qword [rsp + 0x28], r14
jne 0x14000ebed
cmp byte [rdx + rax + 1], 0xb8
je 0x14000fe80
mov dword [rsi + 0x24], ecx
mov dword [rsi + 0x28], ecx
cmp byte [r15 + 0x1c], 0
je 0x14000fc7e
lea r10, [rsi + 0x28]
mov eax, dword [r15 + 0x18]
and eax, 2
mov ecx, eax
shr ecx, 1
mov dword [rsp + 0x3c], ecx
xor ecx, ecx
test eax, eax
sete cl
lea edi, [rcx + rcx*2]
add edi, 0xa
mov r12d, dword [rbx + 0x10]
cmp r12d, edi
mov qword [rsp + 0x30], r10
jae 0x14000f0b5
xor ebp, ebp
lea r13, [0x14003a214]
mov r15, qword [rbx + 8]
mov eax, r12d
mov r12, rax
test bpl, 1
jne 0x14000f737
movzx ecx, byte [r15 + rax]
cmp rcx, 0xf
je 0x14000f7a8
mov edx, ecx
and dl, 0xfc
cmp dl, 0x88
je 0x14000f7d7
lea edx, [rcx - 0x40]
cmp edx, 2
jb 0x14000eeeb
cmp ecx, 0x44
je 0x14000f80d
cmp ecx, 0x45
je 0x14000f83c
mov edx, ecx
and dl, 0xfa
cmp dl, 0x48
je 0x14000ed46
cmp ecx, 0x66
je 0x14000f86b
mov edx, ecx
and dl, 0xf0
cmp dl, 0x50
je 0x14000eda7
cmp ecx, 0x90
je 0x14000f62e
cmp ecx, 0x80
je 0x14000fac9
cmp ecx, 0x65
je 0x14000fb15
mov edx, ecx
and dl, 0xf8
cmp dl, 0xb8
je 0x14000fb61
cmp ecx, 0xd0
jle 0x14000ee7f
lea edx, [rcx - 0xe8]
cmp edx, 2
jae 0x14000f051
xor ebp, ebp
cmp ecx, 0xe9
sete bpl
lea rcx, [rax + 1]
mov dword [rbx + 0x10], ecx
mov r8d, 4
sub r8d, ebp
lea rcx, [r15 + rax]
inc rcx
movsxd rdx, dword [r15 + rax + 1]
add rdx, rcx
add rdx, 4
add eax, 5
mov dword [rbx + 0x10], eax
mov rcx, rsi
call fcn.140011220
mov r10, qword [rsp + 0x30]
test al, al
jne 0x14000edd9
jmp 0x140010f70
mov ecx, dword [r14]
lea edx, [rcx + 1]
cmp ecx, dword [r10]
jne 0x14000ed54
mov dword [r10], edx
cmp qword [rsi], 0
je 0x14000f89a
cmp edx, dword [rsi + 0x30]
ja 0x14000f8a2
mov rdx, qword [rsi + 0x10]
mov al, byte [r15 + rax]
mov byte [rdx + rcx], al
inc dword [rsi + 0x20]
mov ecx, dword [rbx + 0x10]
lea r12d, [rcx + 1]
mov dword [rbx + 0x10], r12d
mov r15, qword [rbx + 8]
movzx eax, byte [r15 + r12]
cmp eax, 0x82
jle 0x14000edeb
cmp eax, 0x83
je 0x14000ef6e
cmp eax, 0x85
jne 0x14000edff
jmp 0x14000fbc0
mov ecx, dword [r14]
lea edx, [rcx + 1]
cmp ecx, dword [r10]
jne 0x14000edb5
mov dword [r10], edx
cmp qword [rsi], 0
je 0x14000fc4e
cmp edx, dword [rsi + 0x30]
ja 0x14000fa87
mov rdx, qword [rsi + 0x10]
mov al, byte [r15 + rax]
mov byte [rdx + rcx], al
inc dword [rsi + 0x20]
inc dword [rbx + 0x10]
mov r12d, dword [rbx + 0x10]
cmp r12d, edi
jb 0x14000ec39
jmp 0x14000f0b7
cmp eax, 0x81
je 0x14000efc7
cmp eax, 0x2b
je 0x14000fbc0
mov edx, eax
and dl, 0xfd
cmp dl, 0x89
jne case.default.0x14000ee29
lea eax, [rcx + 2]
movzx r9d, byte [r15 + rax]
mov edx, r9d
shr edx, 6
mov r14d, 1
movsxd rdx, dword [r13 + rdx*4]
add rdx, r13
jmp rdx
mov rax, qword [rsp + 0x28]
mov ecx, dword [rax]
lea eax, [rcx + r14]
inc eax
cmp ecx, dword [r10]
jne 0x14000ee40
mov dword [r10], eax
inc r14d
cmp qword [rsi], 0
je 0x140010abd
cmp eax, dword [rsi + 0x30]
ja 0x140010836
add r15, r12
mov r8d, r14d
add rcx, qword [rsi + 0x10]
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
add dword [rsi + 0x20], r14d
add dword [rbx + 0x10], r14d
mov r14, qword [rsp + 0x28]
mov r10, qword [rsp + 0x30]
jmp 0x14000edd9
cmp ecx, 0x84
jle 0x14000f5ac
cmp ecx, 0x85
jne case.default.0x14000eeb6
movzx ecx, byte [rax + r15 + 1]
mov edx, ecx
shr edx, 6
mov r14d, 1
lea r8, [0x14003a204]
movsxd rdx, dword [r8 + rdx*4]
add rdx, r8
jmp rdx
mov rcx, qword [rsp + 0x28]
mov ecx, dword [rcx]
lea edx, [rcx + r14]
inc edx
cmp ecx, dword [r10]
jne 0x14000eecd
mov dword [r10], edx
inc r14d
cmp qword [rsi], 0
je 0x1400102ce
cmp edx, dword [rsi + 0x30]
ja 0x140010836
add r15, rax
jmp 0x14000ee59
mov ecx, dword [r14]
lea edx, [rcx + 1]
cmp ecx, dword [r10]
jne 0x14000eef9
mov dword [r10], edx
cmp qword [rsi], 0
je 0x140010028
cmp edx, dword [rsi + 0x30]
ja 0x140010030
mov rdx, qword [rsi + 0x10]
mov al, byte [r15 + rax]
mov byte [rdx + rcx], al
inc dword [rsi + 0x20]
mov ecx, dword [rbx + 0x10]
inc ecx
mov dword [rbx + 0x10], ecx
mov rax, qword [rbx + 8]
movzx edx, byte [rax + rcx]
mov r8d, edx
and r8b, 0xf0
cmp r8b, 0x50
jne 0x140010039
mov edx, dword [r14]
lea r8d, [rdx + 1]
cmp edx, dword [r10]
jne 0x14000ef4a
mov dword [r10], r8d
cmp qword [rsi], 0
je 0x140010095
cmp r8d, dword [rsi + 0x30]
ja 0x14000fa87
mov r8, qword [rsi + 0x10]
mov al, byte [rax + rcx]
mov byte [r8 + rdx], al
jmp 0x14000edd3
movzx eax, byte [r15 + r12 + 1]
and eax, 0xfffffff8
cmp eax, 0xe8
jne 0x140010120
mov eax, dword [r14]
lea ecx, [rax + 3]
cmp eax, dword [r10]
jne 0x14000ef90
mov dword [r10], ecx
cmp qword [rsi], 0
je 0x140010170
cmp ecx, dword [rsi + 0x30]
ja 0x140010178
add r15, r12
mov rcx, qword [rsi + 0x10]
mov dl, byte [r15 + 2]
mov byte [rcx + rax + 2], dl
movzx edx, word [r15]
mov word [rcx + rax], dx
add dword [rsi + 0x20], 3
add dword [rbx + 0x10], 3
jmp 0x14000edd9
mov al, byte [r15 + r12 + 1]
and al, 0xf8
cmp al, 0xe8
jne 0x140010f70
mov eax, dword [r14]
lea ecx, [rax + 6]
cmp eax, dword [r10]
jne 0x14000efe4
mov dword [r10], ecx
cmp qword [rsi], 0
je 0x1400102b1
cmp ecx, dword [rsi + 0x30]
ja 0x1400102b9
add r15, r12
mov rcx, qword [rsi + 0x10]
movzx edx, word [r15 + 4]
mov word [rcx + rax + 4], dx
mov edx, dword [r15]
mov dword [rcx + rax], edx
add dword [rsi + 0x20], 6
add dword [rbx + 0x10], 6
jmp 0x14000edd9
mov ecx, 2
and r9b, 7
xor r14d, r14d
cmp r9b, 4
sete r14b
add r14d, ecx
jmp case.0x14000ee29.3
mov edx, 2
and cl, 7
xor r14d, r14d
cmp cl, 4
sete r14b
add r14d, edx
jmp case.0x14000eeb6.3
cmp ecx, 0xd1
je 0x14001078a
cmp ecx, 0xf6
je 0x1400107ce
lea edx, [rcx - 0x73]
cmp dl, 2
ja 0x140010511
lea rdx, [0x14003a048]
mov r8d, dword [rdx + rcx*4 - 0x1cc]
lea rcx, [r15 + rax]
movzx edx, byte [r15 + rax + 1]
add eax, 2
mov dword [rbx + 0x10], eax
add rdx, rcx
add rdx, 2
mov rcx, rsi
call fcn.140011220
test al, al
mov r10, qword [rsp + 0x30]
jne 0x14000edd9
jmp 0x140010f70
xor ebp, ebp
cmp r12d, 0x64
ja 0x140010f70
test bpl, 1
jne 0x14000f0e4
mov edx, r12d
add rdx, qword [rbx + 8]
mov rcx, rsi
mov r8d, 3
call fcn.140011220
test al, al
je 0x140010f70
cmp byte [rsi + 0x34], 0
je 0x140010f70
cmp qword [rsi], 0
je 0x140010f70
mov eax, dword [rsi + 0x20]
mov ecx, dword [rsi + 0x24]
mov dword [rsi + 0x2c], eax
add rcx, qword [rsi + 0x18]
mov qword [rsp + 0x48], rcx
je 0x140010f70
mov r14d, dword [rbx + 0x10]
mov r13, qword [rbx + 8]
lea rdx, [rsp + 0x80]
mov qword [rdx], 0
mov rcx, r13
xor r8d, r8d
call qword [sym.imp.ntdll.dll_RtlLookupFunctionEntry]
test rax, rax
je 0x14000f3d3
mov rcx, qword [rsp + 0x80]
mov r15d, dword [rax]
add r15d, ecx
mov eax, dword [rax + 8]
lea rbp, [rcx + rax]
movzx eax, byte [rcx + rax + 2]
lea rdi, [rax*2 + 4]
mov rcx, rdi
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov r12, rax
mov rcx, rax
mov rdx, rbp
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
cmp r13d, r15d
jne 0x14000f3ca
movzx eax, byte [r12 + 2]
test eax, eax
je case.default.0x14000f1b9
movzx edx, byte [r12 + 5]
mov r8d, edx
and r8d, 0xf
cmp r8d, 0xa
ja case.default.0x14000f1b9
mov r9b, 1
mov cl, 3
lea r10, [0x14003a224]
lea edx, [0x14003a224]
lea edx, [0x14003a224]
movsxd r8, dword [r10 + r8*4]
add r8, r10
jmp r8
mov rcx, qword [rsp + 0x30]
mov ecx, dword [rcx]
mov r8b, byte [r12 + 1]
cmp ecx, r14d
jae 0x14000f1d9
movzx edx, r8b
cmp ecx, edx
jb 0x14000f3ca
lea rcx, [r12 + 1]
xor edx, edx
lea r10, [0x14003a250]
add dword [rcx], esi
ror byte [rbp + rcx*4 + 0x15], cl
imul esi, dword [rax + 0xf440002], 0xf47dab6
movzx r11d, dl
movzx r11d, byte [r12 + r11*2 + 4]
mov dh, 0x5c
pop rsp
add al, 0x45
cmp esi, ebx
mov dh, 0x5c
pop rsp
add al, 0x45
cmp esi, ebx
jae 0x14000f244
add dl, r9b
cmp dl, al
jae case.default.0x14000f226
movzx r11d, dl
movzx ebp, byte [rcx + r11*2 + 4]
mov r13d, ebp
and r13d, 0xf
cmp r13d, 0xa
ja case.default.0x14000f226
mov dil, 3
movsxd r15, dword [r10 + r13*4]
add r15, r10
jmp r15
mov ebp, eax
sub ebp, r11d
movzx r11d, dil
movzx r9d, r9b
cmp ebp, r11d
cmovge r9d, r11d
jge 0x14000f1e7
jmp case.default.0x14000f226
sub al, dl
mov r10b, byte [r12]
test r10b, 0x20
jne 0x14000f3ca
mov edi, dword [rsi + 0x20]
mov r9d, dword [rsi + 0x30]
add edi, 3
and edi, 0xfffffffc
cmp edi, r9d
ja 0x14000f72e
mov dword [rsi + 0x20], edi
cmp byte [rsi + 0x34], 0
je 0x14000f3ca
and r10b, 0xc7
mov byte [r12], r10b
mov byte [r12 + 2], al
movzx r8d, r8b
cmp r14d, r8d
jae 0x14000f290
mov byte [rcx], r14b
cmp qword [rsi], 0
je 0x14000fcdb
lea rcx, [rdi + 4]
cmp rcx, r9
ja 0x14000f72e
mov rcx, qword [rsi + 0x10]
mov r8d, dword [r12]
mov dword [rcx + rdi], r8d
mov ecx, dword [rsi + 0x20]
add ecx, 4
cmp byte [rsi + 0x34], 0
mov dword [rsi + 0x20], ecx
je 0x14000f3ca
movzx r13d, al
add r13, r13
cmp qword [rsi], 0
je 0x14000fce5
mov ecx, ecx
lea rax, [rcx + r13]
mov r8d, dword [rsi + 0x30]
cmp rax, r8
ja 0x14000f72e
movzx eax, dl
lea rdx, [r12 + rax*2]
add rdx, 4
add rcx, qword [rsi + 0x10]
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
add r13d, dword [rsi + 0x20]
cmp byte [rsi + 0x34], 0
mov dword [rsi + 0x20], r13d
je 0x14000f3ca
add r13d, 3
and r13d, 0xfffffffc
mov ecx, dword [rsi + 0x30]
cmp r13d, ecx
ja 0x14000f72e
mov dword [rsi + 0x20], r13d
mov eax, r13d
add eax, 4
cmp qword [rsi], 0
je 0x14000f8ab
cmp eax, ecx
ja 0x14000f72e
mov eax, dword [rsi + 0x24]
mov rcx, qword [rsi + 0x10]
mov dword [rcx + r13], eax
mov ecx, dword [rsi + 0x20]
lea eax, [rcx + 4]
cmp byte [rsi + 0x34], 0
mov dword [rsi + 0x20], eax
je 0x14000f3ca
cmp qword [rsi], 0
je 0x14000f8ab
add ecx, 8
cmp ecx, dword [rsi + 0x30]
ja 0x14000f72e
mov ecx, dword [rsi + 0x2c]
mov rdx, qword [rsi + 0x10]
mov eax, eax
mov dword [rdx + rax], ecx
mov ecx, dword [rsi + 0x20]
lea eax, [rcx + 4]
cmp byte [rsi + 0x34], 0
mov dword [rsi + 0x20], eax
je 0x14000f3ca
cmp qword [rsi], 0
je 0x14000f8b5
add ecx, 8
cmp ecx, dword [rsi + 0x30]
ja 0x14000f72e
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov dword [rcx + rax], edi
add dword [rsi + 0x20], 4
cmp byte [rsi + 0x34], 0
je 0x14000f3ca
mov r8, qword [rsi + 0x18]
lea rcx, [r8 + r13]
mov edx, 1
call qword [sym.imp.ntdll.dll_RtlAddFunctionTable]
mov rcx, r12
call qword [sym.imp.mozglue.dll_free]
mov r9d, dword [rbx + 0x10]
test r9, r9
je 0x14000fcf5
mov rdx, qword [rbx]
mov r8, qword [rbx + 8]
lea r12, [rsp + 0xb8]
mov qword [r12 - 0x38], rdx
mov qword [r12 - 0x30], r8
mov qword [r12 - 0x28], r9
xor ebx, ebx
mov qword [r12 - 0x20], rbx
mov qword [r12 - 0x10], rbx
mov qword [r12 - 8], 0x20
mov qword [r12 - 0x18], r12
mov byte [r12 + 0x20], 1
lea rdi, [rsp + 0xe0]
mov rcx, rdi
call fcn.1400110a0
cmp qword [rdi + 0x10], rbx
je 0x140010ed2
cmp byte [rsp + 0xd8], 0
je 0x140010ed2
cmp byte [rsp + 0x3c], 0
jne 0x14000fd00
lea rdi, [rsp + 0xa0]
mov rax, qword [rdi + 8]
cmp rax, qword [rdi + 0x10]
je 0x14000fd2c
mov rcx, qword [rsp + 0xa0]
mov byte [rcx + rax], 0x49
mov rax, qword [rsp + 0xa8]
inc rax
mov qword [rsp + 0xa8], rax
inc dword [rsp + 0x98]
cmp rax, qword [rsp + 0xb0]
je 0x14000fd4e
mov rcx, qword [rsp + 0xa0]
mov byte [rcx + rax], 0xbb
mov rax, qword [rsp + 0xa8]
inc rax
mov qword [rsp + 0xa8], rax
inc dword [rsp + 0x98]
lea rcx, [rax + 8]
cmp rcx, qword [rsp + 0xb0]
ja 0x14000fd70
mov rcx, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0x190]
mov qword [rcx + rax], rdx
mov rax, qword [rsp + 0xa8]
add rax, 8
mov qword [rsp + 0xa8], rax
add dword [rsp + 0x98], 8
cmp rax, qword [rsp + 0xb0]
je 0x14000fd92
mov rcx, qword [rsp + 0xa0]
mov byte [rcx + rax], 0x41
mov rax, qword [rsp + 0xa8]
inc rax
mov qword [rsp + 0xa8], rax
inc dword [rsp + 0x98]
cmp rax, qword [rsp + 0xb0]
je 0x14000fdb4
mov rcx, qword [rsp + 0xa0]
mov byte [rcx + rax], 0xff
dec dword [rax - 0x75]
test byte [rax + rbp*4], ah
add byte [rax], al
add byte [rax - 1], cl
ror byte [rax - 0x77], 0x84
and al, 0xa8
test al, 0
add byte [rax], al
dec dword [rax - 0x75]
test byte [rax + rbp*4], ah
add byte [rax], al
add byte [rax - 1], cl
ror byte [rax - 0x77], 0x84
and al, 0xa8
test al, 0
add byte [rax], al
invalid
test byte [rax + rbx*4], ah
test al, 0
add byte [rax], al
inc dword [rsp + 0x98]
add byte [rax], al
add byte [rax + 0x3b], cl
test byte [rax + rsi*4], ah
add byte [rax], al
add byte [rdi], cl
test byte [rbp + 8], bl
add byte [rax], al
cmp rax, qword [rsp + 0xb0]
cmp eax, dword [rsp + 0xb0]
mov al, 0
add byte [rax], al
je 0x14000fdd6
mov rcx, qword [rsp + 0xa0]
mov ecx, dword [rsp + 0xa0]
and al, 0xa0
add byte [rax], al
add dh, al
add al, 1
jrcxz 0x14000f56f
mov byte [rcx + rax], 0xe3
jmp 0x14001101d
xchg ebx, eax
sbb al, byte [rax]
add byte [rcx - 0x3676befe], dh
mov cl, 2
mov r9d, ecx
mov cl, 2
mov r9d, ecx
cmp al, cl
jae case.0x14000f1b9.0
jmp case.default.0x14000f1b9
mov dil, 1
jmp case.0x14000f226.5
mov dil, 2
jmp case.0x14000f226.5
cmp ecx, 0x33
je 0x140010796
cmp ecx, 0x83
jne 0x14000f069
mov cl, byte [r15 + rax + 1]
cmp cl, 0xc0
jb 0x14001053b
mov rcx, qword [rsp + 0x28]
mov ecx, dword [rcx]
lea edx, [rcx + 3]
mov r8, qword [rsp + 0x30]
cmp ecx, dword [r8]
jne 0x14000f5eb
mov r8, qword [rsp + 0x30]
mov dword [r8], edx
cmp qword [rsi], 0
je 0x140010928
cmp edx, dword [rsi + 0x30]
ja 0x1400103cb
add r15, rax
mov rax, qword [rsi + 0x10]
mov dl, byte [r15 + 2]
mov byte [rax + rcx + 2], dl
movzx edx, word [r15]
mov word [rax + rcx], dx
jmp 0x14001057b
cmp ecx, 0xc3
je 0x14000f62e
cmp ecx, 0xcc
jne 0x14000f069
mov ecx, dword [r14]
lea edx, [rcx + 1]
cmp ecx, dword [r10]
jne 0x14000f641
mov r8, qword [rsp + 0x30]
mov dword [r8], edx
cmp qword [rsi], 0
je 0x140010010
cmp edx, dword [rsi + 0x30]
jbe 0x14001026f
xor byte [rdi], cl
xchg byte [rbx], bl
or al, 0
add dh, al
xor al, 0
mov byte [rsi + 0x34], 0
jmp 0x14001027d
mov edx, r9d
and edx, 7
cmp edx, 5
jne 0x140010b7d
shr r9b, 3
lea eax, [rcx + 3]
lea r8, [r15 + rax]
add ecx, 7
mov edx, r9d
mov dword [rbx + 0x10], eax
movsxd rax, dword [r15 + rax]
add r8, rax
add r8, 4
mov dword [rbx + 0x10], ecx
and dl, 7
mov r14, qword [rsp + 0x28]
jne 0x140010ba5
cmp qword [rsi], 0
mov eax, dword [rsi + 0x20]
je 0x140010ac9
mov ecx, dword [rsi + 0x30]
cmp eax, ecx
jae 0x140010be3
mov rcx, qword [rsi + 0x10]
mov byte [rcx + rax], 0xa1
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
je 0x140010acb
mov ecx, dword [rsi + 0x30]
lea edx, [rax + 8]
cmp edx, ecx
ja 0x140010bec
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov qword [rcx + rax], r8
add dword [rsi + 0x20], 8
jmp 0x14000edd9
mov r8d, ecx
and r8d, 7
cmp r8d, 5
je 0x140010f70
mov edx, 1
cmp r8d, 4
jne 0x14000f03c
mov dl, byte [r15 + rax + 2]
and dl, 7
xor r8d, r8d
cmp dl, 5
sete r8b
lea edx, [r8*4 + 1]
jmp 0x14000f03c
mov byte [rsi + 0x34], 0
jmp 0x14000f3ca
movzx ecx, byte [r15 + r12]
cmp ecx, 0xcc
je 0x14000f74c
cmp ecx, 0x90
jne 0x14000f771
mov ecx, r12d
mov edx, edi
inc r12
inc ecx
mov dword [rbx + 0x10], ecx
cmp r12, rdx
mov r14, qword [rsp + 0x28]
mov r10, qword [rsp + 0x30]
jb 0x14000ec43
jmp 0x14000f0b7
cmp qword [rsp + 0x40], 0
je 0x140010f70
mov rcx, qword [rsp + 0x40]
call fcn.140037450
test al, al
je 0x140010f70
mov r12d, dword [rbx + 0x10]
mov al, 1
mov dword [rsp + 0x3c], eax
cmp r12d, 9
ja 0x14000f0b7
jmp 0x140010f70
mov ecx, dword [r14]
lea edx, [rcx + 1]
cmp ecx, dword [r10]
jne 0x14000f7bb
mov r8, qword [rsp + 0x30]
mov dword [r8], edx
cmp qword [rsi], 0
je 0x14000f8c4
cmp edx, dword [rsi + 0x30]
jbe 0x14000fa90
mov byte [rsi + 0x34], 0
jmp 0x14000f8cb
mov ecx, dword [r14]
lea edx, [rcx + 1]
cmp ecx, dword [r10]
jne 0x14000f7ea
mov r8, qword [rsp + 0x30]
mov dword [r8], edx
cmp qword [rsi], 0
je 0x14000f947
cmp edx, dword [rsi + 0x30]
ja 0x14000f996
mov rdx, qword [rsi + 0x10]
mov al, byte [r15 + rax]
mov byte [rdx + rcx], al
jmp 0x14000f9b1
mov ecx, dword [r14]
lea edx, [rcx + 1]
cmp ecx, dword [r10]
jne 0x14000f820
mov r8, qword [rsp + 0x30]
mov dword [r8], edx
cmp qword [rsi], 0
je 0x14000f950
cmp edx, dword [rsi + 0x30]
jbe 0x14000faa3
mov byte [rsi + 0x34], 0
jmp 0x14000f957
mov ecx, dword [r14]
lea edx, [rcx + 1]
cmp ecx, dword [r10]
jne 0x14000f84f
mov r8, qword [rsp + 0x30]
mov dword [r8], edx
cmp qword [rsi], 0
je 0x14000fa30
cmp edx, dword [rsi + 0x30]
jbe 0x14000fab6
mov byte [rsi + 0x34], 0
jmp 0x14000fa37
mov ecx, dword [r14]
lea edx, [rcx + 1]
cmp ecx, dword [r10]
jne 0x14000f87e
mov r8, qword [rsp + 0x30]
mov dword [r8], edx
cmp qword [rsi], 0
je 0x14000fea7
cmp edx, dword [rsi + 0x30]
jbe 0x14000ffb6
mov byte [rsi + 0x34], 0
jmp 0x14000feae
mov dword [r14], edx
jmp 0x14000ed75
mov byte [rsi + 0x34], 0
jmp 0x14000ed75
add eax, 4
mov rcx, qword [rsp + 0x28]
mov dword [rcx], eax
add eax, 4
mov rcx, qword [rsp + 0x28]
mov dword [rcx], eax
jmp 0x14000f3b7
mov rax, qword [rsp + 0x28]
mov dword [rax], edx
mov edx, dword [rbx + 0x10]
lea eax, [rdx + 1]
mov dword [rbx + 0x10], eax
mov rcx, qword [rbx + 8]
movzx r8d, byte [rcx + rax]
lea r9d, [r8 - 0x10]
cmp r9d, 2
jb 0x14000f935
cmp r8d, 5
je 0x14000fdf8
cmp r8d, 0x1f
jne 0x14000fe39
mov rdx, qword [rsp + 0x28]
mov edx, dword [rdx]
lea r8d, [rdx + 1]
mov r9, qword [rsp + 0x30]
cmp edx, dword [r9]
jne 0x14000f918
mov r9, qword [rsp + 0x30]
mov dword [r9], r8d
cmp qword [rsi], 0
je 0x14001037b
cmp r8d, dword [rsi + 0x30]
jbe 0x1400104fe
mov byte [rsi + 0x34], 0
jmp 0x140010383
mov rdx, qword [rsp + 0x28]
mov edx, dword [rdx]
lea r8d, [rdx + 1]
mov r9, qword [rsp + 0x30]
jmp 0x14000f97d
mov rax, qword [rsp + 0x28]
mov dword [rax], edx
jmp 0x14000f9b4
mov rax, qword [rsp + 0x28]
mov dword [rax], edx
mov eax, dword [rbx + 0x10]
inc eax
mov dword [rbx + 0x10], eax
mov rcx, qword [rbx + 8]
cmp byte [rcx + rax], 0x89
mov rdx, qword [rsp + 0x28]
mov r9, qword [rsp + 0x30]
jne 0x140010f70
mov edx, dword [rdx]
lea r8d, [rdx + 1]
cmp edx, dword [r9]
jne 0x14000f98a
mov r9, qword [rsp + 0x30]
mov dword [r9], r8d
cmp qword [rsi], 0
je 0x14000f99c
cmp r8d, dword [rsi + 0x30]
jbe 0x14000f9a6
mov byte [rsi + 0x34], 0
jmp 0x14000f9b4
mov rax, qword [rsp + 0x28]
mov dword [rax], r8d
jmp 0x14000f9b4
mov r8, qword [rsi + 0x10]
mov al, byte [rcx + rax]
mov byte [r8 + rdx], al
inc dword [rsi + 0x20]
mov r12d, dword [rbx + 0x10]
inc r12d
mov dword [rbx + 0x10], r12d
mov r14, qword [rbx + 8]
mov rcx, r14
mov edx, r12d
xor r8d, r8d
call fcn.1400374a0
mov r15d, eax
test eax, eax
mov rax, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
js 0x140010f70
mov ecx, dword [rax]
lea eax, [rcx + r15]
cmp ecx, dword [rdx]
jne 0x14000f9f7
mov rdx, qword [rsp + 0x30]
mov dword [rdx], eax
cmp qword [rsi], 0
je 0x14000fa08
cmp eax, dword [rsi + 0x30]
jbe 0x14000fa18
mov byte [rsi + 0x34], 0
jmp 0x14000fa0f
mov rcx, qword [rsp + 0x28]
mov dword [rcx], eax
add dword [rbx + 0x10], r15d
jmp 0x14000ee70
mov edx, r12d
add rdx, r14
mov r8d, r15d
add rcx, qword [rsi + 0x10]
call sub.VCRUNTIME140.dll_memcpy
add dword [rsi + 0x20], r15d
jmp 0x14000fa0f
mov rax, qword [rsp + 0x28]
mov dword [rax], edx
mov eax, dword [rbx + 0x10]
inc eax
mov dword [rbx + 0x10], eax
mov rcx, qword [rbx + 8]
cmp byte [rcx + rax], 0x33
mov rdx, qword [rsp + 0x28]
mov r9, qword [rsp + 0x30]
jne 0x140010f70
mov edx, dword [rdx]
lea r8d, [rdx + 2]
cmp edx, dword [r9]
jne 0x14000fa6a
mov r9, qword [rsp + 0x30]
mov dword [r9], r8d
cmp qword [rsi], 0
je 0x140010003
cmp r8d, dword [rsi + 0x30]
jbe 0x14000fb90
mov byte [rsi + 0x34], 0
jmp 0x14000fba1
mov byte [rsi + 0x34], 0
jmp 0x14000edd6
mov rdx, qword [rsi + 0x10]
mov al, byte [r15 + rax]
mov byte [rdx + rcx], al
inc dword [rsi + 0x20]
jmp 0x14000f8cb
mov rdx, qword [rsi + 0x10]
mov al, byte [r15 + rax]
mov byte [rdx + rcx], al
inc dword [rsi + 0x20]
jmp 0x14000f957
mov rdx, qword [rsi + 0x10]
mov al, byte [r15 + rax]
mov byte [rdx + rcx], al
inc dword [rsi + 0x20]
jmp 0x14000fa37
cmp byte [r15 + rax + 1], 0x3d
jne 0x140010f70
add eax, 2
mov dword [rbx + 0x10], eax
cmp qword [rsi], 0
mov eax, dword [rsi + 0x20]
je 0x140010181
mov ecx, dword [rsi + 0x30]
cmp eax, ecx
jae 0x1400102da
mov rcx, qword [rsi + 0x10]
mov byte [rcx + rax], 0x49
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
je 0x140010183
mov ecx, dword [rsi + 0x30]
jmp 0x1400102de
cmp byte [r15 + rax + 1], 0x48
jne 0x140010f70
mov cl, byte [r15 + rax + 2]
and cl, 0xfc
cmp cl, 0x88
jne 0x140010f70
mov ecx, dword [r14]
lea edx, [rcx + 3]
cmp ecx, dword [r10]
jne 0x14000fb45
mov r8, qword [rsp + 0x30]
mov dword [r8], edx
cmp qword [rsi], 0
je 0x14001025b
cmp edx, dword [rsi + 0x30]
jbe 0x14001035b
mov byte [rsi + 0x34], 0
jmp 0x140010262
mov ecx, dword [r14]
lea edx, [rcx + 5]
cmp ecx, dword [r10]
jne 0x14000fb74
mov r8, qword [rsp + 0x30]
mov dword [r8], edx
cmp qword [rsi], 0
je 0x14001001c
cmp edx, dword [rsi + 0x30]
jbe 0x140010285
mov byte [rsi + 0x34], 0
jmp 0x14001029e
add cl, ch
invalid
mov r8, qword [rsi + 0x10]
movzx eax, word [rcx + rax]
mov word [r8 + rdx], ax
mov dword [rax + rdx], eax
add dword [rsi + 0x20], 2
add dword [rbx + 0x10], 2
jmp 0x14000ee70
cmp dl, 0x1f
ja case.default.0x14000f1b9
shr dl, 4
add dl, 2
mov ecx, edx
jmp case.0x14000f1b9.5
cmp byte [r15 + r12 + 1], 0xc0
jb 0x140010f70
mov eax, dword [r14]
lea ecx, [rax + 2]
cmp eax, dword [r10]
jne 0x14000fbde
mov rdx, qword [rsp + 0x30]
mov dword [rdx], ecx
cmp qword [rsi], 0
je 0x1400102c2
cmp ecx, dword [rsi + 0x30]
ja 0x14000fa7e
mov rcx, qword [rsi + 0x10]
movzx edx, word [r15 + r12]
mov word [rcx + rax], dx
jmp 0x14000fb9d
mov edx, eax
and dl, 0xf8
cmp dl, 0xb8
jne 0x14001009d
mov rax, qword [rsp + 0x28]
mov eax, dword [rax]
lea ecx, [rax + 9]
mov rdx, qword [rsp + 0x30]
cmp eax, dword [rdx]
jne 0x14000fc28
mov rdx, qword [rsp + 0x30]
mov dword [rdx], ecx
cmp qword [rsi], 0
je 0x14001073b
cmp ecx, dword [rsi + 0x30]
jbe 0x14001076e
xor byte [rdi], cl
xchg byte [rbx], dh
or eax, dword [rax]
add dh, al
xor al, 0
mov byte [rsi + 0x34], 0
jmp 0x140010742
mov ecx, 5
jmp 0x14000f020
mov dword [r14], edx
jmp 0x14000edd6
mov dword [r14], edx
jmp 0x14000eb63
mov byte [rsi + 0x34], 0
xor eax, eax
jmp 0x14000eb3b
mov dword [r14], ecx
jmp 0x14000ebd0
mov byte [rsi + 0x34], 0
xor eax, eax
mov ecx, edx
add byte [rcx], dh
ror byte [rcx - 0x10d5162f], 0xff
jmp 0x14000eba8
int3
mov ecx, 0x2f1
jmp 0x14000eba8
int3
call fcn.14003742d
mov dl, byte [r12]
and dl, 7
mov cl, 2
jmp 0x14000fc9b
mov dl, byte [r12]
and dl, 7
cmp dl, 2
je case.0x14000f1b9.5
mov rcx, qword [rsp + 0x30]
mov r9d, dword [rcx]
lea rcx, [r12 + 1]
xor edx, edx
mov r8b, byte [r12 + 1]
cmp r9d, r14d
jae case.default.0x14000f226
movzx r10d, r8b
cmp r9d, r10d
jb 0x14000f3ca
cmp dl, al
jb 0x14000f3ca
xor edx, edx
xor eax, eax
jmp 0x14000f246
lea ecx, [rdi + 4]
movzx r13d, al
add r13, r13
add r13d, ecx
mov rax, qword [rsp + 0x28]
mov dword [rax], r13d
jmp 0x14000f313
int3
lea r8, [rsp + 0x80]
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
mov r9, qword [rsp + 0x190]
call fcn.140037530
test al, al
jne 0x140010e4e
jmp 0x140010ed2
mov edx, 1
mov rcx, rdi
call fcn.1400379b0
test al, al
je 0x140010de5
mov rax, qword [rsp + 0xa8]
jmp 0x14000f467
mov edx, 1
mov rcx, rdi
call fcn.1400379b0
test al, al
je 0x140010dfa
mov rax, qword [rsp + 0xa8]
jmp 0x14000f49b
mov edx, 8
mov rcx, rdi
call fcn.1400379b0
test al, al
je 0x140010e0f
mov rax, qword [rsp + 0xa8]
jmp 0x14000f4d3
mov edx, 1
mov rcx, rdi
call fcn.1400379b0
test al, al
je 0x140010e24
mov rax, qword [rsp + 0xa8]
jmp 0x14000f511
mov edx, 1
mov rcx, rdi
call fcn.1400379b0
test al, al
je 0x140010e39
mov rax, qword [rsp + 0xa8]
jmp 0x14000f545
mov edx, 1
mov rcx, rdi
call fcn.1400379b0
test al, al
je 0x140011080
mov rax, qword [rsp + 0xa8]
jmp 0x14000f579
mov rdx, qword [rsp + 0x28]
mov edx, dword [rdx]
lea r8d, [rdx + 1]
mov r9, qword [rsp + 0x30]
cmp edx, dword [r9]
jne 0x14000fe15
mov r9, qword [rsp + 0x30]
mov dword [r9], r8d
cmp qword [rsi], 0
je 0x1400103d4
cmp r8d, dword [rsi + 0x30]
ja 0x14000f654
mov r8, qword [rsi + 0x10]
mov al, byte [rcx + rax]
mov byte [r8 + rdx], al
jmp 0x14001027a
lea eax, [r8 + 0x7d]
cmp al, 2
mov r14, qword [rsp + 0x28]
ja 0x140010f70
lea rax, [0x14003a048]
mov r8d, dword [rax + r8*4 - 0x20c]
add edx, 2
mov dword [rbx + 0x10], edx
dec dword [rsi + 0x20]
mov eax, dword [rbx + 0x10]
mov rcx, qword [rbx + 8]
lea rdx, [rcx + rax]
movsxd rcx, dword [rcx + rax]
add rdx, rcx
add rdx, 4
add eax, 4
jmp 0x14000ed29
movzx r8d, byte [rdx + rax + 0xa]
cmp r8d, 0x50
je 0x140010438
cmp r8d, 0xff
jne 0x1400104f4
cmp byte [rdx + rax + 0xb], 0xe0
jmp 0x14001043d
mov rax, qword [rsp + 0x28]
mov dword [rax], edx
mov ecx, dword [rbx + 0x10]
inc ecx
mov dword [rbx + 0x10], ecx
mov rax, qword [rbx + 8]
mov dl, byte [rax + rcx]
mov r8d, edx
and r8b, 0xfc
cmp r8b, 0x88
jne 0x14000ff68
movzx edx, byte [rax + rcx + 1]
mov r8d, edx
and r8d, 0xffffffc0
mov r9d, 0xc0
cmp r8d, r9d
je 0x14000ffc9
cmp r8d, 0x40
mov r9, qword [rsp + 0x28]
mov r10, qword [rsp + 0x30]
je 0x14000ff27
test r8d, r8d
jne 0x140010f70
mov r9d, edx
and r9d, 6
cmp r9d, 4
jne 0x14000ffc9
cmp r8d, 0x40
mov r9, qword [rsp + 0x28]
mov r10, qword [rsp + 0x30]
jne 0x140010f70
and edx, 7
add rax, rcx
mov ecx, dword [r9]
mov r8d, dword [r10]
cmp edx, 4
jne 0x1400105a1
lea edx, [rcx + 4]
cmp ecx, r8d
jne 0x14000ff4c
mov r8, qword [rsp + 0x30]
mov dword [r8], edx
cmp qword [rsi], 0
je 0x140010949
cmp edx, dword [rsi + 0x30]
jbe 0x140010a05
mov byte [rsi + 0x34], 0
jmp 0x140010950
cmp dl, 0x44
jne 0x14000ee70
cmp byte [rax + rcx + 1], 0x89
jne 0x14000ee70
mov rdx, qword [rsp + 0x28]
mov edx, dword [rdx]
lea r8d, [rdx + 2]
mov r9, qword [rsp + 0x30]
cmp edx, dword [r9]
jne 0x14000ff99
mov r9, qword [rsp + 0x30]
mov dword [r9], r8d
cmp qword [rsi], 0
je 0x140010934
cmp r8d, dword [rsi + 0x30]
jbe 0x1400109e3
mov byte [rsi + 0x34], 0
jmp 0x14001093c
mov rdx, qword [rsi + 0x10]
mov al, byte [r15 + rax]
mov byte [rdx + rcx], al
inc dword [rsi + 0x20]
jmp 0x14000feae
mov rdx, qword [rsp + 0x28]
mov edx, dword [rdx]
lea r8d, [rdx + 2]
mov r9, qword [rsp + 0x30]
cmp edx, dword [r9]
jne 0x14000ffe6
mov r9, qword [rsp + 0x30]
mov dword [r9], r8d
cmp qword [rsi], 0
je 0x140010003
cmp r8d, dword [rsi + 0x30]
ja 0x14000fa7e
mov r8, qword [rsi + 0x10]
movzx eax, word [rax + rcx]
jmp 0x14000fb98
mov rax, qword [rsp + 0x28]
mov dword [rax], r8d
jmp 0x14000fba1
mov rax, qword [rsp + 0x28]
mov dword [rax], edx
jmp 0x14001027d
mov rax, qword [rsp + 0x28]
mov dword [rax], edx
jmp 0x14001029e
mov dword [r14], edx
jmp 0x14000ef1a
mov byte [rsi + 0x34], 0
jmp 0x14000ef1a
mov r8d, edx
and r8b, 0xf8
cmp r8b, 0xb8
jne 0x14001060a
mov rdx, qword [rsp + 0x28]
mov edx, dword [rdx]
lea r8d, [rdx + 5]
mov r9, qword [rsp + 0x30]
cmp edx, dword [r9]
jne 0x140010067
mov r9, qword [rsp + 0x30]
mov dword [r9], r8d
cmp qword [rsi], 0
je 0x140010959
cmp r8d, dword [rsi + 0x30]
ja 0x14000fb87
add rax, rcx
mov rcx, qword [rsi + 0x10]
mov r8b, byte [rax + 4]
mov byte [rcx + rdx + 4], r8b
mov eax, dword [rax]
mov dword [rcx + rdx], eax
jmp 0x14001029a
mov dword [r14], r8d
jmp 0x14000edd6
cmp eax, 0xc6
jg 0x140010642
cmp eax, 0x63
je 0x140010848
cmp eax, 0x8d
jne 0x140010f70
mov r9b, byte [r15 + r12 + 1]
mov eax, r9d
and al, 0xc7
cmp al, 5
jne 0x140010a69
lea edx, [rcx + 3]
mov dword [rbx + 0x10], edx
movsxd r8, dword [r15 + rdx]
add ecx, 7
mov dword [rbx + 0x10], ecx
cmp qword [rsi], 0
mov eax, dword [rsi + 0x20]
je 0x140010ac9
mov ecx, dword [rsi + 0x30]
cmp eax, ecx
jae 0x140010c6c
shr r9b, 3
or r9b, 0xb8
mov rcx, qword [rsi + 0x10]
mov byte [rcx + rax], r9b
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
je 0x140010acb
mov ecx, dword [rsi + 0x30]
jmp 0x140010c70
cmp eax, 0x60
jne 0x1400106be
mov rax, qword [rsp + 0x28]
mov eax, dword [rax]
lea ecx, [rax + 5]
mov rdx, qword [rsp + 0x30]
cmp eax, dword [rdx]
jne 0x140010143
mov rdx, qword [rsp + 0x30]
mov dword [rdx], ecx
cmp qword [rsi], 0
je 0x1400109f9
cmp ecx, dword [rsi + 0x30]
ja 0x14000fb87
add r15, r12
mov rcx, qword [rsi + 0x10]
mov dl, byte [r15 + 4]
mov byte [rcx + rax + 4], dl
mov edx, dword [r15]
mov dword [rcx + rax], edx
jmp 0x14001029a
mov dword [r14], ecx
jmp 0x14000efbe
mov byte [rsi + 0x34], 0
jmp 0x14000efbe
inc eax
inc eax
mov rcx, qword [rsp + 0x28]
mov dword [rcx], eax
mov edx, dword [rbx + 0x10]
mov r8, qword [rbx + 8]
movsxd r9, dword [r8 + rdx]
lea eax, [rdx + 4]
mov dword [rbx + 0x10], eax
cmp qword [rsi], 0
mov eax, dword [rsi + 0x20]
je 0x1400101cf
mov ecx, dword [rsi + 0x30]
cmp eax, ecx
jae 0x1400102f8
mov rcx, qword [rsi + 0x10]
mov byte [rcx + rax], 0x49
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
je 0x1400101d1
mov ecx, dword [rsi + 0x30]
jmp 0x1400102fc
inc eax
inc eax
add eax, 8
inc eax
inc eax
inc eax
mov rcx, qword [rsp + 0x28]
mov dword [rcx], eax
mov rcx, qword [rbx + 8]
mov edx, dword [rbx + 0x10]
lea r8d, [rax + 1]
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
jne 0x140010200
mov r9, qword [rsp + 0x30]
mov dword [r9], r8d
cmp qword [rsi], 0
je 0x140010216
cmp r8d, dword [rsi + 0x30]
jbe 0x140010328
mov byte [rsi + 0x34], 0
jmp 0x14001021e
mov rax, qword [rsp + 0x28]
mov dword [rax], r8d
inc dword [rbx + 0x10]
cmp qword [rsi], 0
mov eax, dword [rsi + 0x20]
je 0x140010d12
mov ecx, dword [rsi + 0x30]
cmp eax, ecx
jae 0x14001033d
mov rcx, qword [rsi + 0x10]
mov byte [rcx + rax], 0x49
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
je 0x140010d14
mov ecx, dword [rsi + 0x30]
jmp 0x140010341
mov rax, qword [rsp + 0x28]
mov dword [rax], edx
mov r12d, dword [rbx + 0x10]
add r12d, 3
jmp 0x14000f9bb
mov rdx, qword [rsi + 0x10]
mov al, byte [r15 + rax]
mov byte [rdx + rcx], al
inc dword [rsi + 0x20]
inc dword [rbx + 0x10]
jmp 0x14000ee70
add r15, rax
mov rax, qword [rsi + 0x10]
mov dl, byte [r15 + 4]
mov byte [rax + rcx + 4], dl
mov edx, dword [r15]
mov dword [rax + rcx], edx
add dword [rsi + 0x20], 5
add dword [rbx + 0x10], 5
jmp 0x14000ee70
mov edx, 5
jmp 0x14000f03c
mov dword [r14], ecx
jmp 0x14000f012
mov byte [rsi + 0x34], 0
jmp 0x14000f012
mov rax, qword [rsp + 0x28]
mov dword [rax], ecx
jmp 0x14000fba1
mov rax, qword [rsp + 0x28]
mov dword [rax], edx
jmp 0x14000ee6c
mov byte [rsi + 0x34], 0
cmp eax, ecx
jae 0x1400103ee
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov byte [rcx + rax], 0x53
inc dword [rsi + 0x20]
jmp 0x14001018c
mov byte [rsi + 0x34], 0
cmp eax, ecx
jae 0x1400103f7
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov byte [rcx + rax], 0xbb
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
je 0x1400101d3
mov ecx, dword [rsi + 0x30]
jmp 0x1400103fb
mov r8, qword [rsi + 0x10]
mov eax, eax
mov cl, byte [rcx + rdx]
mov byte [r8 + rax], cl
inc dword [rsi + 0x20]
jmp 0x14001021e
mov byte [rsi + 0x34], 0
cmp eax, ecx
jae 0x140010c79
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov byte [rcx + rax], 0x5b
inc dword [rsi + 0x20]
jmp 0x14000ee70
add r15, rax
mov rax, qword [rsi + 0x10]
mov dl, byte [r15 + 2]
mov byte [rax + rcx + 2], dl
movzx edx, word [r15]
mov word [rax + rcx], dx
add dword [rsi + 0x20], 3
jmp 0x140010262
mov rax, qword [rsp + 0x28]
mov dword [rax], r8d
mov ecx, dword [rbx + 0x10]
inc ecx
mov dword [rbx + 0x10], ecx
mov rax, qword [rbx + 8]
mov dl, byte [rax + rcx]
and dl, 0xc7
cmp dl, 0x44
mov rdx, qword [rsp + 0x28]
mov r9, qword [rsp + 0x30]
jne 0x140010f70
mov edx, dword [rdx]
lea r8d, [rdx + 3]
cmp edx, dword [r9]
jne 0x1400103bb
mov r9, qword [rsp + 0x30]
mov dword [r9], r8d
cmp qword [rsi], 0
je 0x1400103e1
cmp r8d, dword [rsi + 0x30]
jbe 0x140010564
mov byte [rsi + 0x34], 0
jmp 0x14001057f
mov rax, qword [rsp + 0x28]
mov dword [rax], r8d
jmp 0x14001027d
mov rax, qword [rsp + 0x28]
mov dword [rax], r8d
jmp 0x14001057f
mov byte [rsi + 0x34], 0
jmp 0x14001018c
mov byte [rsi + 0x34], 0
lea r10d, [rax + 8]
cmp r10d, ecx
jbe 0x1400105da
mov byte [rsi + 0x34], 0
cmp eax, ecx
jae 0x140010712
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov byte [rcx + rax], 0x41
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
je 0x1400101d8
mov ecx, dword [rsi + 0x30]
jmp 0x140010716
cmp byte [rdx + rax + 0xb], 0xc3
mov r14, qword [rsp + 0x28]
jne 0x14000ebed
add eax, 2
mov rdi, qword [rdx + rax]
lea r12, [rsp + 0x80]
mov rcx, rbx
mov rdx, r12
call fcn.140037e60
xor ebp, ebp
cmp qword [r12 + 0x70], 0
je 0x140010a19
cmp byte [rsp + 0xd8], 0
je 0x140010a19
lea r12, [rsp + 0x80]
mov rcx, r12
mov rdx, qword [rsp + 0x190]
call fcn.140037f50
mov rcx, r12
call fcn.140037fa0
test al, al
je 0x140010a17
mov eax, dword [rsi + 0x20]
lea ecx, [rax + 8]
cmp qword [rsi], 0
je 0x140010bf5
cmp ecx, dword [rsi + 0x30]
jbe 0x140010c0f
mov byte [rsi + 0x34], 0
xor eax, eax
xor ebp, ebp
cmp qword [rsi + 0x10], 0
je 0x140010a19
cmp qword [rsi + 0x18], 0
je 0x140010a19
cmp dword [rsi + 8], 0
je 0x140010a19
test al, al
jne 0x140010bfc
jmp 0x140010a19
mov r14, qword [rsp + 0x28]
jmp 0x14000ebed
mov r8, qword [rsi + 0x10]
mov al, byte [rcx + rax]
mov byte [r8 + rdx], al
inc dword [rsi + 0x20]
jmp 0x140010383
cmp rcx, 0xff
je 0x140010966
cmp ecx, 0xc6
je 0x1400109a3
cmp ecx, 0x83
jne 0x140010f70
mov cl, byte [r15 + rax + 1]
and cl, 0xf8
loope 0x140010536
cmp cl, 0x60
mov rcx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
jne 0x140010f70
test dword [rdi], ebx
or al, byte [rax]
invalid
test dword [rdi], ebx
or al, byte [rax]
add byte [rbx + 0x5518d09], cl
mov ecx, dword [rcx]
lea edx, [rcx + 5]
cmp ecx, dword [r8]
je 0x14000fb6c
jmp 0x14000fb74
add rax, rcx
mov rcx, qword [rsi + 0x10]
mov r8b, byte [rax + 2]
mov byte [rcx + rdx + 2], r8b
movzx eax, word [rax]
mov word [rcx + rdx], ax
add dword [rsi + 0x20], 3
add dword [rbx + 0x10], 3
jmp 0x14000ee70
cmp bpl, 0x1f
ja case.default.0x14000f226
shr bpl, 4
add bpl, 2
mov edi, ebp
jmp case.0x14000f226.5
lea edx, [rcx + 3]
cmp ecx, r8d
jne 0x1400105b1
mov r8, qword [rsp + 0x30]
mov dword [r8], edx
cmp qword [rsi], 0
je 0x140010928
cmp edx, dword [rsi + 0x30]
ja 0x1400103cb
mov rdx, qword [rsi + 0x10]
mov r8b, byte [rax + 2]
mov byte [rdx + rcx + 2], r8b
movzx eax, word [rax]
mov word [rdx + rcx], ax
jmp 0x14001057b
add r8, rdx
lea rcx, [r9 + r8]
add rcx, 4
mov rdx, qword [rsi + 0x10]
mov eax, eax
mov qword [rdx + rax], rcx
mov eax, dword [rsi + 0x20]
add eax, 8
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
je 0x1400101d6
mov ecx, dword [rsi + 0x30]
jmp 0x14001040c
cmp edx, 0xf7
je 0x1400108de
cmp edx, 0x8b
mov rdx, qword [rsp + 0x28]
mov r9, qword [rsp + 0x30]
jne 0x140010f70
cmp byte [rax + rcx + 1], 0xc0
jb 0x140010f70
mov edx, dword [rdx]
lea r8d, [rdx + 2]
jmp 0x14000ffd9
cmp eax, 0xff
je 0x140010870
cmp eax, 0xc7
mov rax, qword [rsp + 0x28]
mov dword [rax], 0x8b480000
and al, 0x28
mov rdx, qword [rsp + 0x30]
jne 0x140010f70
invalid
or dword [rax], eax
invalid
xor byte [rdi], cl
test dword [rsi], ecx
invalid
or dword [rax], eax
add byte [rbx - 0x80], al
jl 0x14001068d
invalid
cmp byte [r15 + r12 + 1], 0x44
jne 0x140010f70
or dword [rax], eax
invalid
add dword [rdi + rcx - 0x7b], eax
add cl, byte [rcx]
or dword [rax], eax
invalid
or dword [rax], eax
add byte [rbx + 0x8488d00], cl
mov eax, dword [rax]
lea ecx, [rax + 8]
cmp eax, dword [rdx]
jne 0x14001067e
mov rdx, qword [rsp + 0x30]
mov dword [rdx], ecx
cmp qword [rsi], 0
je 0x140010b21
cmp ecx, dword [rsi + 0x30]
jbe 0x140010b4e
mov ebp, 0xc6000004
xor al, 0
mov byte [rsi + 0x34], 0
jmp 0x140010b28
mov bpl, byte [r12]
and bpl, 7
mov dil, 2
jmp 0x1400106af
mov bpl, byte [r12]
and bpl, 7
cmp bpl, 2
je case.0x14000f226.5
jmp case.default.0x14000f226
cmp eax, 0xc0
mov rax, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
jne 0x140010f70
mov eax, dword [rax]
lea ecx, [rax + 3]
cmp eax, dword [rdx]
jne 0x1400106e3
mov rdx, qword [rsp + 0x30]
mov dword [rdx], ecx
cmp qword [rsi], 0
je 0x140010b42
cmp ecx, dword [rsi + 0x30]
ja 0x1400103cb
add r15, r12
mov rcx, qword [rsi + 0x10]
mov dl, byte [r15 + 2]
mov byte [rcx + rax + 2], dl
movzx edx, word [r15]
mov word [rcx + rax], dx
jmp 0x14001057b
mov byte [rsi + 0x34], 0
cmp eax, ecx
jae 0x14001074b
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov byte [rcx + rax], 0x80
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
je 0x1400101da
mov ecx, dword [rsi + 0x30]
jmp 0x14001074f
mov rax, qword [rsp + 0x28]
mov dword [rax], ecx
add dword [rbx + 0x10], 9
jmp 0x14000ee70
mov byte [rsi + 0x34], 0
cmp eax, ecx
jae 0x14001083f
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov byte [rcx + rax], 0x3b
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
jmp 0x1400101e3
add r15, r12
mov rcx, qword [rsi + 0x10]
mov dl, byte [r15 + 8]
mov byte [rcx + rax + 8], dl
mov rdx, qword [r15]
mov qword [rcx + rax], rdx
add dword [rsi + 0x20], 9
jmp 0x140010742
cmp byte [r15 + rax + 1], 0xc0
jb 0x140010f70
mov ecx, dword [r14]
lea edx, [rcx + 2]
cmp ecx, dword [r10]
jne 0x1400107a9
mov r8, qword [rsp + 0x30]
mov dword [r8], edx
cmp qword [rsi], 0
je 0x1400109d7
cmp edx, dword [rsi + 0x30]
ja 0x14000fa7e
mov rdx, qword [rsi + 0x10]
movzx eax, word [r15 + rax]
mov word [rdx + rcx], ax
jmp 0x14000fb9d
lea r8, [rsp + 0x80]
mov byte [r8], 0
lea rcx, [rax + r15]
inc rcx
xor edx, edx
call fcn.1400374a0
test eax, eax
js 0x140010f70
cmp byte [rsp + 0x80], 0
jne 0x140010f70
mov r14d, eax
mov rax, qword [rsp + 0x28]
mov ecx, dword [rax]
lea eax, [rcx + r14]
add eax, 2
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jne 0x14001081f
mov rdx, qword [rsp + 0x30]
mov dword [rdx], eax
add r14d, 2
cmp qword [rsi], 0
je 0x140010abd
cmp eax, dword [rsi + 0x30]
jbe 0x140010a57
mov byte [rsi + 0x34], 0
jmp 0x14000ee6c
mov byte [rsi + 0x34], 0
jmp 0x1400101e3
cmp byte [r15 + r12 + 1], 0xc0
mov rax, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
jb 0x140010f70
mov eax, dword [rax]
lea ecx, [rax + 2]
cmp eax, dword [rdx]
je 0x14000fbd7
jmp 0x14000fbde
movzx eax, byte [r15 + r12 + 1]
mov edx, eax
and dl, 0xc7
cmp dl, 5
mov r14, qword [rsp + 0x28]
jne 0x140010f70
and eax, 0x38
cmp eax, 0x20
je 0x14001089a
cmp eax, 0x10
jne 0x140010f70
add ecx, 3
mov dword [rbx + 0x10], ecx
dec dword [rsi + 0x20]
mov eax, dword [rbx + 0x10]
mov rcx, qword [rbx + 8]
lea rdx, [rcx + rax]
mov r8b, byte [rcx + rax + 1]
and r8b, 0x38
xor ebp, ebp
cmp r8b, 0x20
sete bpl
mov r8d, 4
sub r8d, ebp
movsxd rcx, dword [rcx + rax]
add eax, 4
mov dword [rbx + 0x10], eax
mov rdx, qword [rcx + rdx + 4]
jmp 0x14000ed2c
mov dl, byte [rax + rcx + 1]
and dl, 0xf8
cmp dl, 0xc0
mov rdx, qword [rsp + 0x28]
mov r9, qword [rsp + 0x30]
jne 0x140010f70
mov edx, dword [rdx]
lea r8d, [rdx + 6]
cmp edx, dword [r9]
jne 0x14001090b
mov r9, qword [rsp + 0x30]
mov dword [r9], r8d
cmp qword [rsi], 0
je 0x140010b31
cmp r8d, dword [rsi + 0x30]
jbe 0x140010b60
mov byte [rsi + 0x34], 0
jmp 0x140010b39
mov rax, qword [rsp + 0x28]
mov dword [rax], edx
jmp 0x14001057f
mov rax, qword [rsp + 0x28]
mov dword [rax], r8d
mov r12d, dword [rbx + 0x10]
add r12d, 2
jmp 0x14000f9bb
mov rax, qword [rsp + 0x28]
mov dword [rax], edx
add dword [rbx + 0x10], 4
jmp 0x14000ee70
mov rax, qword [rsp + 0x28]
mov dword [rax], r8d
jmp 0x14001029e
movzx edx, byte [r15 + rax + 1]
mov ecx, edx
shr ecx, 3
and ecx, 7
cmp dl, 0xc0
jb 0x140010ad3
cmp ecx, 3
mov rdx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
jae 0x140010c82
mov ecx, dword [rdx]
lea edx, [rcx + 2]
cmp ecx, dword [r8]
je 0x1400107a1
jmp 0x1400107a9
lea rcx, [rax + r15]
inc rcx
xor edx, edx
xor r8d, r8d
call fcn.1400374a0
mov r14d, eax
test eax, eax
mov rax, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
js 0x140010f70
mov ecx, dword [rax]
lea eax, [rcx + r14]
add eax, 2
jmp 0x140010814
mov rax, qword [rsp + 0x28]
mov dword [rax], edx
jmp 0x14000fba1
mov r8, qword [rsi + 0x10]
movzx eax, word [rax + rcx]
mov word [r8 + rdx], ax
add dword [rsi + 0x20], 2
jmp 0x14001093c
mov rax, qword [rsp + 0x28]
mov dword [rax], ecx
jmp 0x14001029e
mov rdx, qword [rsi + 0x10]
mov eax, dword [rax]
mov dword [rdx + rcx], eax
add dword [rsi + 0x20], 4
jmp 0x140010950
xor ebp, ebp
lea r12, [rsp + 0xe0]
mov rcx, r12
call fcn.140038010
mov rcx, qword [r12 - 0x40]
lea rax, [rsp + 0xb8]
cmp rcx, rax
je 0x140010a41
call qword [sym.imp.mozglue.dll_free]
test bpl, bpl
mov r14, qword [rsp + 0x28]
jne 0x140010f70
mov ecx, dword [r14]
jmp 0x14000ebed
mov edx, r12d
add rdx, r15
mov r8d, r14d
add rcx, qword [rsi + 0x10]
jmp 0x14000ee63
add ecx, 2
add rcx, r15
xor edx, edx
xor r8d, r8d
call fcn.1400374a0
mov r14d, eax
mov rax, qword [rsp + 0x28]
mov ecx, dword [rax]
lea eax, [rcx + r14]
inc eax
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jne 0x140010a99
mov rdx, qword [rsp + 0x30]
mov dword [rdx], eax
inc r14d
cmp qword [rsi], 0
je 0x140010abd
cmp eax, dword [rsi + 0x30]
ja 0x140010836
add r12, r15
mov r8d, r14d
add rcx, qword [rsi + 0x10]
mov rdx, r12
jmp 0x14000ee63
mov rcx, qword [rsp + 0x28]
mov dword [rcx], eax
jmp 0x14000ee6c
inc eax
add eax, 8
jmp 0x140010d16
and dl, 0xc7
cmp dl, 5
jne 0x140010c29
cmp cl, 2
jne 0x140010c29
lea rcx, [rax + 2]
mov dword [rbx + 0x10], ecx
lea rcx, [r15 + rax]
add rcx, 2
movsxd rdx, dword [r15 + rax + 2]
add eax, 6
mov dword [rbx + 0x10], eax
mov rdx, qword [rdx + rcx + 4]
mov rcx, rsi
mov r8d, 4
call fcn.140011220
test al, al
mov r14, qword [rsp + 0x28]
jmp 0x14000f0a5
mov rax, qword [rsp + 0x28]
mov dword [rax], ecx
add dword [rbx + 0x10], 8
jmp 0x14000ee70
mov rax, qword [rsp + 0x28]
mov dword [rax], r8d
add dword [rbx + 0x10], 6
jmp 0x14000ee70
mov rax, qword [rsp + 0x28]
mov dword [rax], ecx
jmp 0x14001057f
mov rcx, qword [rsi + 0x10]
mov rdx, qword [r15 + r12]
mov qword [rcx + rax], rdx
add dword [rsi + 0x20], 8
jmp 0x140010b28
add rax, rcx
mov rcx, qword [rsi + 0x10]
movzx r8d, word [rax + 4]
mov word [rcx + rdx + 4], r8w
mov eax, dword [rax]
mov dword [rcx + rdx], eax
add dword [rsi + 0x20], 6
jmp 0x140010b39
mov ecx, 1
cmp edx, 4
jne 0x14000f020
mov al, byte [r15 + rax + 1]
and al, 7
xor ecx, ecx
cmp al, 5
sete cl
lea ecx, [rcx*4 + 1]
jmp 0x14000f020
cmp qword [rsi], 0
mov eax, dword [rsi + 0x20]
je 0x140010d0b
mov ecx, dword [rsi + 0x30]
cmp eax, ecx
jae 0x140010d23
or r9b, 0xb8
mov rcx, qword [rsi + 0x10]
mov byte [rcx + rax], r9b
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
je 0x140010d0d
mov ecx, dword [rsi + 0x30]
jmp 0x140010d27
mov byte [rsi + 0x34], 0
jmp 0x14000f6d1
mov byte [rsi + 0x34], 0
jmp 0x14000edd9
mov rax, qword [rsp + 0x28]
mov dword [rax], ecx
mov rax, qword [rsp + 0x198]
mov qword [rax], rdi
mov bpl, 1
jmp 0x140010a19
mov rcx, qword [rsi + 0x10]
mov qword [rcx + rax], rdi
add dword [rsi + 0x20], 8
cmp qword [rsi], 0
je 0x140010bfc
mov al, byte [rsi + 0x34]
jmp 0x1400104c5
cmp cl, 4
jne 0x140010f70
cmp dl, 5
jne 0x140010c9f
lea rcx, [rax + 2]
mov dword [rbx + 0x10], ecx
lea rcx, [r15 + rax]
add rcx, 2
movsxd rdx, dword [r15 + rax + 2]
add eax, 6
mov dword [rbx + 0x10], eax
mov rdx, qword [rdx + rcx + 4]
mov rcx, rsi
mov r8d, 3
call fcn.140011220
mov bpl, 1
jmp 0x140010b15
mov byte [rsi + 0x34], 0
lea r9d, [rax + 8]
cmp r9d, ecx
jbe 0x140010ced
mov byte [rsi + 0x34], 0
jmp 0x14000ee70
cmp ecx, 4
je 0x140010c9f
cmp ecx, 6
mov rdx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
je 0x140010990
jmp 0x140010f70
lea rcx, [rax + r15]
inc rcx
xor edx, edx
xor r8d, r8d
call fcn.1400374a0
mov ebp, eax
test eax, eax
mov rax, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
js 0x140010f70
mov ecx, dword [rax]
lea eax, [rcx + rbp]
inc eax
cmp ecx, dword [rdx]
jne 0x140010cd6
mov rdx, qword [rsp + 0x30]
mov dword [rdx], eax
inc ebp
cmp qword [rsi], 0
je 0x140010d55
cmp eax, dword [rsi + 0x30]
jbe 0x140010d85
mov byte [rsi + 0x34], 0
jmp 0x140010d5c
add r15, rdx
lea rcx, [r8 + r15]
add rcx, 4
mov rdx, qword [rsi + 0x10]
mov eax, eax
mov qword [rdx + rax], rcx
add dword [rsi + 0x20], 8
jmp 0x14000ee70
inc eax
add eax, 8
inc eax
inc eax
inc eax
mov r14, qword [rsp + 0x28]
mov dword [r14], eax
jmp 0x14000ee75
mov byte [rsi + 0x34], 0
lea r9d, [rax + 8]
cmp r9d, ecx
jbe 0x140010d67
mov byte [rsi + 0x34], 0
cmp eax, ecx
jae 0x140010d9c
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov byte [rcx + rax], 0x48
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
je 0x140010d12
mov ecx, dword [rsi + 0x30]
jmp 0x140010da0
mov rcx, qword [rsp + 0x28]
mov dword [rcx], eax
add dword [rbx + 0x10], ebp
mov bpl, 1
jmp 0x14000ee70
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov qword [rcx + rax], r8
mov eax, dword [rsi + 0x20]
add eax, 8
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
je 0x140010d10
mov ecx, dword [rsi + 0x30]
jmp 0x140010d34
mov edx, r12d
add rdx, r15
mov r8d, ebp
add rcx, qword [rsi + 0x10]
call sub.VCRUNTIME140.dll_memcpy
add dword [rsi + 0x20], ebp
jmp 0x140010d5c
mov byte [rsi + 0x34], 0
cmp eax, ecx
jae 0x140010dc5
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov byte [rcx + rax], 0x8b
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
je 0x140010d14
mov ecx, dword [rsi + 0x30]
jmp 0x140010dc9
mov byte [rsi + 0x34], 0
cmp eax, ecx
jae 0x140010c79
movzx ecx, dl
lea ecx, [rcx + rcx*8]
mov rdx, qword [rsi + 0x10]
mov eax, eax
mov byte [rdx + rax], cl
jmp 0x140010353
mov byte [rsp + 0xd8], 0
mov rax, qword [rsp + 0xa8]
jmp 0x14000f48d
mov byte [rsp + 0xd8], 0
mov rax, qword [rsp + 0xa8]
jmp 0x14000f4c1
mov byte [rsp + 0xd8], 0
mov rax, qword [rsp + 0xa8]
jmp 0x14000f503
mov byte [rsp + 0xd8], 0
mov rax, qword [rsp + 0xa8]
jmp 0x14000f537
mov byte [rsp + 0xd8], 0
mov rax, qword [rsp + 0xa8]
jmp 0x14000f56b
mov rax, qword [rsp + 0x198]
mov rcx, qword [rsp + 0x48]
mov qword [rax], rcx
cmp qword [rsp + 0xf0], 0
je 0x140010fe4
cmp byte [rsp + 0xd8], 0
je 0x140010fe4
mov r8, qword [rsp + 0xa8]
test r8, r8
je 0x140010ed2
mov rdx, qword [rsp + 0xa0]
mov ecx, dword [rsp + 0x9c]
add rcx, qword [rsp + 0x88]
call sub.VCRUNTIME140.dll_memcpy
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov eax, dword [rsp + 0xa8]
add dword [rsp + 0x9c], eax
mov qword [rsp + 0xa8], 0
mov eax, dword [0x140043f34]
mov ecx, dword [0x1400421a8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140010fa3
mov rdi, qword [rsp + 0xe8]
mov r15, qword [rsp + 0xf0]
test r15, r15
je 0x140010f46
shl r15, 4
add r15, rdi
mov ebx, dword [0x140043f30]
lea r14, [rsp + 0x50]
mov r13, qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r8d, dword [rdi]
mov rcx, qword [rdi + 8]
mov rdx, rbx
mov r9, r14
call r13
add rdi, 0x10
cmp rdi, r15
jne 0x140010f25
mov rdi, qword [rsp + 0xe8]
lea rax, [rsp + 0x100]
mov qword [rax - 0x10], 0
cmp rdi, rax
jne 0x140011004
mov rcx, qword [rsp + 0xa0]
cmp rcx, r12
jne 0x140011012
mov rax, qword [rsp + 0x198]
cmp qword [rax], 0
je 0x140010ff0
mov rcx, qword [rsp + 0x120]
xor rcx, rsp
call fcn.14001bce0
nop
add rsp, 0x128
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [0x140043f34]
call fcn.14001aa38
cmp dword [0x140043f34], 0xffffffff
jne 0x140010ef7
lea rdi, [rsp + 0x50]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rdi + 4]
mov dword [0x140043f30], eax
lea rcx, [0x140043f34]
call fcn.14001a9d8
jmp 0x140010ef7
mov qword [rax], 0
jmp 0x140010ed2
mov dword [rsi + 0x20], 0
mov rcx, rsi
call fcn.140037970
jmp 0x140010f7e
mov rcx, rdi
call qword [sym.imp.mozglue.dll_free]
jmp 0x140010f5f
call qword [sym.imp.mozglue.dll_free]
jmp 0x140010f70
inc qword [rsp + 0xa8]
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
mov eax, eax
cmp qword [rsp + 0x90], rax
jbe 0x140010e4e
mov rax, qword [rsp + 0xa8]
cmp rax, qword [rsp + 0xb0]
je 0x140011065
mov rcx, qword [rsp + 0xa0]
mov byte [rcx + rax], 0x90
jmp 0x14001101d
mov edx, 1
mov rcx, rdi
call fcn.1400379b0
test al, al
je 0x140011080
mov rax, qword [rsp + 0xa8]
jmp 0x140011057
mov byte [rsp + 0xd8], 0
mov eax, dword [rsp + 0x98]
jmp 0x140011035
mov edi, dword [0x140043f30]
lea rax, [r14 + rbx]
dec rax
xor edx, edx
div rdi
mov rbx, rax
mov rax, r14
xor edx, edx
div rdi
inc rbx
sub rbx, rax
je 0x140011194
mov r14, rax
lea r15, [rsi + 8]
imul r14, rdi
cmp rbx, 1
adc rbx, 0
lea r12, [rsp + 0x20]
mov r13, qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rcx, r14
mov rdx, rdi
mov r8d, 0x40
mov r9, r12
call r13
test eax, eax
je 0x1400111f6
mov ebp, dword [rsp + 0x20]
mov rax, qword [rsi + 0x10]
cmp rax, qword [rsi + 0x18]
je 0x140011208
mov rcx, qword [rsi + 8]
shl rax, 4
mov dword [rcx + rax], ebp
mov qword [rcx + rax + 8], r14
inc qword [rsi + 0x10]
add r14, rdi
dec rbx
jne 0x14001114c
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.14001bce0
mov rax, rsi
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop rsi
pop rsi
pop r15
ret
cmp dword [0x140043f34], 0xffffffff
jne 0x140011108
lea rdi, [rsp + 0x20]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rdi + 4]
mov dword [0x140043f30], eax
lea rcx, [0x140043f34]
call fcn.14001a9d8
jmp 0x140011108
mov dword [rsp + 0x20], 0
mov rcx, rsi
call fcn.140037d80
jmp 0x140011194
mov rcx, r15
call fcn.140037c50
test al, al
je 0x1400111fe
mov rax, qword [rsi + 0x10]
jmp 0x140011178
cmp qword [rcx], 0
je 0x140011471
mov r8d, dword [rcx + 0x30]
cmp eax, r8d
jae 0x140011485
mov r8, qword [rcx + 0x10]
mov eax, eax
mov byte [r8 + rax], 0xff
mov eax, dword [rcx + 0x20]
inc eax
mov dword [rcx + 0x20], eax
cmp qword [rcx], 0
je 0x140011473
mov r8d, dword [rcx + 0x30]
cmp eax, r8d
jae 0x14001148e
mov r8, qword [rcx + 0x10]
mov eax, eax
mov byte [r8 + rax], 0x25
mov eax, dword [rcx + 0x20]
inc eax
mov dword [rcx + 0x20], eax
cmp qword [rcx], 0
je 0x140011475
mov r8d, dword [rcx + 0x30]
mov eax, dword [rcx + 0x30]
lea r9d, [rax + 4]
cmp r9d, r8d
ja 0x14001144b
mov r8, qword [rcx + 0x10]
mov eax, eax
mov dword [r8 + rax], 0
mov eax, dword [rcx + 0x20]
add eax, 4
mov dword [rcx + 0x20], eax
cmp qword [rcx], 0
je 0x140011478
mov r8d, dword [rcx + 0x30]
lea r9d, [rax + 8]
cmp r9d, r8d
ja 0x140011442
mov r8, qword [rcx + 0x10]
mov eax, eax
mov qword [r8 + rax], rdx
add dword [rcx + 0x20], 8
cmp qword [rcx], 0
je 0x14001147e
xor eax, eax
cmp qword [rcx + 0x10], 0
je 0x140011312
cmp qword [rcx + 0x18], 0
je 0x140011312
cmp dword [rcx + 8], 0
je 0x140011312
cmp byte [rcx + 0x34], 0
setne al
ret
ror byte [rcx - 0x7cb7dfbf], 0x39
add byte [rdi], cl
test byte [rcx + 1], bl
add byte [rax], al
mov r8d, dword [rcx + 0x30]
xor byte [r13 + rcx*4 + 0x48], al
add al, 0x45
cmp ecx, eax
lea r9d, [rax + 4]
cmp r9d, r8d
ja 0x1400114e6
mov r8, qword [rcx + 0x10]
mov eax, eax
mov dword [r8 + rax], 2
mov eax, dword [rcx + 0x20]
add eax, 4
mov dword [rcx + 0x20], eax
cmp qword [rcx], 0
je 0x1400114ce
mov r8d, dword [rcx + 0x30]
cmp eax, r8d
jae 0x1400114ef
mov r8, qword [rcx + 0x10]
mov eax, eax
mov byte [r8 + rax], 0xeb
mov eax, dword [rcx + 0x20]
inc eax
mov dword [rcx + 0x20], eax
cmp qword [rcx], 0
je 0x1400114d0
add byte [rax], al
add byte [rax], al
mov r8d, dword [rcx + 0x30]
cmp eax, r8d
jae 0x14001144b
mov r8, qword [rcx + 0x10]
mov eax, eax
rol byte [rcx - 0x3a], 4
add byte [rax], cl
rol byte [rcx - 0x3a], 4
add byte [rax], cl
mov eax, dword [rcx + 0x20]
inc eax
jmp 0x1400112bf
mov eax, dword [rcx + 0x20]
inc eax
mov dword [rcx + 0x20], eax
cmp qword [rcx], 0
je 0x140011438
mov r8d, dword [rcx + 0x30]
xor byte [r9 + rdi - 0x40], al
cmp eax, r8d
jae 0x1400114f8
mov r8, qword [rcx + 0x10]
mov eax, eax
mov byte [r8 + rax], 0xe
mov eax, dword [rcx + 0x20]
inc eax
mov dword [rcx + 0x20], eax
jmp 0x14001123c
mov byte [rcx + 0x34], 0
jmp 0x1400112f5
mov byte [rcx + 0x34], 0
jmp 0x1400112d0
inc eax
inc eax
add eax, 4
add eax, 8
mov dword [rcx + 0x20], eax
mov al, 1
jmp 0x140011312
mov byte [rcx + 0x34], 0
jmp 0x140011274
mov byte [rcx + 0x34], 0
jmp 0x14001129e
inc eax
inc eax
jmp 0x140011478
mov byte [rcx + 0x34], 0
jmp 0x1400113a8
mov byte [rcx + 0x34], 0
jmp 0x1400113d2
mov byte [rcx + 0x34], 0
jmp 0x14001123c
int3
int3
invalid
add byte [rax], al
lea rdi, [0x140043f60]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsi + 8]
mov ecx, dword [rax + 0x10]
add rcx, qword [rax + 8]
mov eax, 0x80000001
cmp rcx, rax
setb bl
mov rcx, rdi
mov ecx, edi
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, ebx
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
int3