Function at 0x140005ba0
Capabilities:
Check for software breakpoints
Get system information on windows
Parse credit card information

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1c8
mov qword [rsp + 0x40], r9
mov qword [rsp + 0x48], r8
mov rsi, rdx
mov r12, rcx
mov rax, qword [0x14005c018]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
mov edi, dword [rcx + 0x18]
test dil, 4
jne 0x1400071de
test rsi, rsi
je 0x140005c39
mov rcx, rsi
mov rdi, rcx
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], rcx
mov dword [rsp + 0x130], 0
mov qword [rsp + 0x88], 0
mov al, byte [rcx]
cmp al, 0x48
jne 0x140006ce2
cmp byte [rdi + 1], 0xff
mov rcx, rdi
je 0x140006cc7
cmp rdi, rcx
jne 0x140005bea
cmp rdi, rsi
jne 0x1400075a0
mov qword [rsp + 0xd8], r12
mov qword [rsp + 0xe0], rsi
mov dword [rsp + 0xe8], 0
mov edi, dword [r12 + 0x18]
and edi, 1
shl edi, 0x1e
lea rsi, [r12 + 1]
mov eax, dword [0x14005cb6c]
mov ecx, dword [0x14005c2c8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000659b
mov r13d, dword [0x14005cb68]
mov dword [rsp + 0x20], edi
lea rdx, [rsp + 0x88]
mov rcx, rsi
mov r8d, r13d
mov r9, rdi
call fcn.140008a00
mov eax, dword [0x14005e9e4]
mov ecx, dword [0x14005c2c8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006509
lea rcx, [0x14005e9e8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [rsp + 0x98]
test al, al
jne 0x140006433
xor r15d, r15d
xor ebx, ebx
mov rsi, qword [0x14005e9d8]
test rsi, rsi
jne 0x140005d26
mov ecx, 0x18
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov qword [rax], 0x18
mov qword [0x14005e9d8], rax
mov al, byte [rsp + 0x98]
test al, al
jne 0x140006458
cmp qword [rsi + 8], 0
je 0x140006b34
mov rbp, qword [rsi]
add rbp, 0x10
mov rsi, qword [rbp]
test rsi, rsi
je 0x140006bce
test r13d, r13d
je 0x140006bce
cmp qword [rsi + 8], 0
je 0x1400062c2
lea r14, [rsi + 0x10]
cmp dword [r14], 0
je 0x140006bce
mov bpl, 1
xor edi, edi
mov rbx, r12
lea rcx, [0x14005e9e8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xc8], rsi
mov byte [rsp + 0xd0], bpl
mov eax, dword [rsp + 0x120]
mov ecx, dword [rsp + 0x123]
mov dword [rsp + 0xd1], eax
mov dword [rsp + 0xd4], ecx
test dil, dil
jne 0x140006f44
mov eax, dword [0x14005e9e4]
mov ecx, dword [0x14005c2c8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006552
lea rdi, [0x14005e9e8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rbp, [rsp + 0x88]
mov rcx, rsi
mov rdx, rbp
call fcn.140008bf0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [rbp + 0x30], 0
je 0x140006f44
mov rbx, qword [rsp + 0x88]
mov qword [rsp + 0x58], rbx
mov ebp, dword [rsp + 0x90]
mov dword [rsp + 0x60], ebp
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x68], rcx
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x70], rax
mov edx, dword [rsp + 0xa8]
mov dword [rsp + 0x78], edx
mov rdx, qword [rsp + 0xac]
mov qword [rsp + 0x7c], rdx
mov dl, byte [rsp + 0xb4]
mov byte [rsp + 0x84], dl
mov dword [rsp + 0x90], 0
mov byte [rsp + 0xb4], 0
mov rdi, qword [rsp + 0x40]
mov qword [rdi], 0
test rbx, rbx
je 0x140005eba
test ebp, ebp
je 0x1400069ed
test rcx, rcx
je 0x1400069ed
test rax, rax
je 0x1400069ed
test dl, dl
je 0x1400069ed
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsp + 0x78]
lea edx, [rcx + 8]
cmp qword [rsp + 0x58], 0
je 0x1400071fe
cmp edx, dword [rsp + 0x80]
ja 0x140007207
mov rdx, qword [rsp + 0x68]
mov qword [rdx + rcx], rax
add dword [rsp + 0x78], 8
cmp qword [rsp + 0x58], 0
je 0x140005f2b
mov al, byte [rsp + 0x84]
cmp qword [rsp + 0x68], 0
je 0x1400069ed
cmp qword [rsp + 0x70], 0
je 0x1400069ed
cmp dword [rsp + 0x60], 0
je 0x1400069ed
test al, al
je 0x1400069ed
mov ecx, dword [rsp + 0xe8]
add rcx, qword [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov edx, dword [rsp + 0x78]
lea ecx, [rdx + 8]
cmp qword [rsp + 0x58], 0
je 0x140007216
cmp ecx, dword [rsp + 0x80]
ja 0x140007262
mov rcx, qword [rsp + 0x68]
mov qword [rcx + rdx], rax
mov ecx, dword [rsp + 0x78]
add ecx, 8
mov dword [rsp + 0x78], ecx
cmp qword [rsp + 0x58], 0
je 0x140005fae
mov al, byte [rsp + 0x84]
cmp qword [rsp + 0x68], 0
je 0x1400069de
cmp qword [rsp + 0x70], 0
je 0x1400069de
cmp dword [rsp + 0x60], 0
je 0x1400069de
test al, al
je 0x1400069de
mov r9d, dword [rsp + 0xe8]
mov rax, qword [rsp + 0xe0]
cmp byte [rax + r9], 0x48
jne 0x140005fd1
cmp byte [rax + r9 + 1], 0xb8
je 0x1400073cb
mov dword [rsp + 0x7c], ecx
mov eax, dword [r12 + 0x18]
and eax, 2
mov r13d, eax
shr r13d, 1
xor ecx, ecx
test eax, eax
sete cl
lea r15d, [rcx + rcx*2]
add r15d, 0xa
cmp r9d, r15d
jae 0x1400065df
mov r12d, r15d
xor r14d, r14d
mov rdx, qword [rsp + 0xe0]
mov eax, r9d
test r14b, 1
jne 0x140006dfd
movzx ecx, byte [rdx + rax]
cmp rcx, 0xf
je 0x140006e25
mov ebx, ecx
and bl, 0xfc
cmp bl, 0x88
je 0x140006e54
lea ebp, [rcx - 0x40]
cmp bpl, 2
jb 0x140006233
cmp cl, 0x44
je 0x140006e81
cmp cl, 0x45
je 0x140006eb0
mov ebx, ecx
and bl, 0xfa
cmp bl, 0x48
jne 0x14000617c
mov ecx, dword [rsp + 0x78]
lea edi, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x140006edf
cmp edi, dword [rsp + 0x80]
ja 0x140006ee8
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov edi, dword [rsp + 0x78]
inc edi
mov dword [rsp + 0x78], edi
mov r9d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
lea eax, [r9 + 1]
mov dword [rsp + 0xe8], eax
mov bl, byte [rdx + rax]
cmp bl, 0x82
jle 0x1400060d4
cmp bl, 0x83
je 0x1400061db
cmp bl, 0x85
je 0x14000751e
cmp bl, 0x2b
jne 0x1400060dd
jmp 0x14000751e
cmp bl, 0x81
je 0x140006bea
mov ecx, ebx
and cl, 0xfd
cmp cl, 0x89
jne 0x140006ef7
lea ebx, [r9 + 2]
movzx ebp, byte [rdx + rbx]
mov ecx, ebp
shr ecx, 6
mov esi, 2
cmp ecx, 1
jne 0x14000616c
and bpl, 7
xor ecx, ecx
cmp bpl, 4
sete cl
lea ebp, [rsi + rcx]
inc ebp
lea ecx, [rdi + rbp]
cmp qword [rsp + 0x58], 0
je 0x140006f2e
cmp ecx, dword [rsp + 0x80]
ja 0x140006f37
add rdx, rax
mov r8d, ebp
mov ecx, edi
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], ebp
mov eax, dword [rsp + 0xe8]
add eax, ebp
mov dword [rsp + 0xe8], eax
mov r9d, dword [rsp + 0xe8]
cmp r9d, r15d
jb 0x140006001
jmp 0x1400065e2
cmp ecx, 3
jne 0x140007495
mov ebp, 2
jmp 0x140006114
cmp cl, 0x66
je 0x1400074d4
mov ebx, ecx
and bl, 0xf0
cmp bl, 0x50
jne 0x140006c42
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x140007503
cmp ebp, dword [rsp + 0x80]
ja 0x1400073f3
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
inc dword [rsp + 0x78]
mov r9d, dword [rsp + 0xe8]
inc r9d
mov dword [rsp + 0xe8], r9d
jmp 0x140006156
mov cl, byte [rdx + rax + 1]
and cl, 0xf8
cmp cl, 0xe8
jne 0x1400075df
lea ecx, [rdi + 3]
cmp qword [rsp + 0x58], 0
je 0x1400075d6
cmp ecx, dword [rsp + 0x80]
ja 0x140007ac5
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, edi
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 3
mov eax, dword [rsp + 0xe8]
add eax, 3
jmp 0x14000614f
mov ebx, dword [rsp + 0x78]
lea ecx, [rbx + 1]
cmp qword [rsp + 0x58], 0
je 0x140007c81
cmp ecx, dword [rsp + 0x80]
ja 0x140007c8a
mov rcx, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rcx + rbx], al
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
mov r9d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
inc r9d
mov dword [rsp + 0xe8], r9d
mov bl, byte [rdx + r9]
mov eax, ebx
and al, 0xf0
cmp al, 0x50
jne 0x140007c99
lea eax, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x140007cce
cmp eax, dword [rsp + 0x80]
ja 0x1400073f3
mov rax, qword [rsp + 0x68]
mov ecx, ecx
mov dl, byte [rdx + r9]
mov byte [rax + rcx], dl
jmp 0x1400061bf
mov eax, dword [0x14005cb6c]
mov ecx, dword [0x14005c2c8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006aac
mov ebx, dword [0x14005cb68]
mov eax, r13d
xor edx, edx
div ebx
sub ebx, edx
test edx, edx
cmove ebx, edx
add ebx, r13d
lea r14, [rsi + 0x10]
mov dword [rsi + 0x10], ebx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp byte [rsp + 0x98], 0
je 0x140006ba1
mov r15, qword [rsp + 0x88]
test r15, r15
je 0x14000748a
mov r13, rax
mov rdi, qword [rsp + 0x90]
mov eax, dword [0x14005ea20]
mov ecx, dword [0x14005c2c8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x1400063cf
lea rcx, [0x14005ea20]
call fcn.14001aa20
cmp dword [0x14005ea20], 0xffffffff
jne 0x1400063cf
lea rcx, str.kernelbase.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x14005ea10], rax
mov qword [0x14005ea18], 0
test rax, rax
je 0x1400063c3
lea rdx, str.VirtualAlloc2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14005ea18], rax
test rax, rax
jne 0x1400063c3
mov rcx, qword [0x14005ea10]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x14005ea10], 0
lea rcx, [0x14005ea20]
call fcn.14001a9c0
mov rax, qword [0x14005ea18]
test rax, rax
jne 0x14000777a
lea rcx, [rsi + 1]
add r15, rdi
mov ebp, ebx
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x38], rcx
mov rdx, r13
mov r8, rbp
mov r9, rdi
call fcn.140009530
test rax, rax
je 0x140006bc6
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x1400077e3
mov qword [rsi + 8], rax
jmp 0x140005d65
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x14000748a
mov r15, qword [rsp + 0x90]
lea rbx, [rcx + r15]
dec rbx
jmp 0x140005cf0
mov qword [rsp + 0x38], rbx
mov rax, qword [rsi]
mov rcx, qword [rsi + 8]
mov rbp, rax
test rcx, rcx
jg 0x140007640
lea rcx, [rcx + rcx*2]
lea rax, [rax + rcx*8]
cmp rbp, rax
jne 0x140007684
mov ecx, 0x20
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov dword [rax + 0x18], 0
mov rax, qword [rsi]
mov r14, qword [rsi + 8]
sub rbp, rax
sar rbp, 3
movabs rbx, 0xaaaaaaaaaaaaaaab
imul rbx, rbp
cmp rbx, r14
jne 0x1400076a2
mov rcx, rbx
cmp rbx, qword [rsi + 0x10]
jne 0x1400064da
mov rcx, rsi
call fcn.140008e40
mov rax, qword [rsi]
mov rcx, qword [rsi + 8]
lea rcx, [rcx + rcx*2]
mov qword [rax + rcx*8], r15
mov rdx, qword [rsp + 0x38]
mov qword [rax + rcx*8 + 8], rdx
mov qword [rax + rcx*8 + 0x10], rdi
inc qword [rsi + 8]
mov rax, qword [rsi]
lea rcx, [rbx + rbx*2]
lea rbp, [rax + rcx*8]
add rbp, 0x10
jmp 0x140005d40
lea rcx, [0x14005e9e4]
call fcn.14001aa20
cmp dword [0x14005e9e4], 0xffffffff
jne 0x140005ccf
lea rcx, [0x14005e9e8]
mov edx, 0xfa0
mov r8d, 0x1000000
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
mov byte [0x14005e9e0], 1
lea rcx, [0x14005e9e4]
call fcn.14001a9c0
jmp 0x140005ccf
lea rcx, [0x14005e9e4]
call fcn.14001aa20
cmp dword [0x14005e9e4], 0xffffffff
jne 0x140005de6
lea rcx, [0x14005e9e8]
mov edx, 0xfa0
mov r8d, 0x1000000
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
mov byte [0x14005e9e0], 1
lea rcx, [0x14005e9e4]
call fcn.14001a9c0
jmp 0x140005de6
lea rcx, [0x14005cb6c]
call fcn.14001aa20
cmp dword [0x14005cb6c], 0xffffffff
jne 0x140005c89
lea rbp, [rsp + 0x120]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbp + 0x28]
mov dword [0x14005cb68], eax
lea rcx, [0x14005cb6c]
call fcn.14001a9c0
jmp 0x140005c89
xor r14d, r14d
cmp r9d, 0x64
ja 0x1400069de
test r14b, 1
jne 0x140006702
cmp qword [rsp + 0x58], 0
mov eax, dword [rsp + 0x78]
je 0x140007273
mov ecx, r9d
add rcx, qword [rsp + 0xe0]
mov edx, dword [rsp + 0x80]
cmp eax, edx
jae 0x140007286
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rax], 0xff
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x140007275
mov edx, dword [rsp + 0x80]
cmp eax, edx
jae 0x140007293
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov byte [rdx + rax], 0x25
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x140007277
mov edx, dword [rsp + 0x80]
lea ebp, [rax + 4]
cmp ebp, edx
ja 0x1400072a0
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov dword [rdx + rax], 0
mov eax, dword [rsp + 0x78]
add eax, 4
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14000727a
mov edx, dword [rsp + 0x80]
lea ebp, [rax + 8]
cmp ebp, edx
ja 0x1400072ad
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov qword [rdx + rax], rcx
add dword [rsp + 0x78], 8
cmp qword [rsp + 0x58], 0
je 0x140006702
mov al, byte [rsp + 0x84]
cmp qword [rsp + 0x68], 0
je 0x1400069de
cmp qword [rsp + 0x70], 0
je 0x1400069de
cmp dword [rsp + 0x60], 0
je 0x1400069de
test al, al
je 0x1400069de
cmp byte [rsp + 0x84], 0
je 0x1400069de
cmp qword [rsp + 0x58], 0
je 0x1400069de
mov r15d, dword [rsp + 0x7c]
add r15, qword [rsp + 0x70]
je 0x1400069de
lea rcx, [rsp + 0xd8]
lea rdi, [rsp + 0x120]
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call fcn.140009030
cmp qword [rdi + 0x70], 0
je 0x140006972
cmp byte [rsp + 0x178], 0
je 0x140006972
test r13b, r13b
jne 0x1400072d5
lea r14, [rsp + 0x140]
mov rax, qword [r14 + 8]
cmp rax, qword [r14 + 0x10]
je 0x1400072ff
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0x49
mov rax, qword [rsp + 0x148]
inc rax
mov qword [rsp + 0x148], rax
inc dword [rsp + 0x138]
cmp rax, qword [rsp + 0x150]
je 0x140007321
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0xbb
mov rax, qword [rsp + 0x148]
inc rax
mov qword [rsp + 0x148], rax
inc dword [rsp + 0x138]
lea rcx, [rax + 8]
cmp rcx, qword [rsp + 0x150]
ja 0x140007343
mov rbp, qword [rsp + 0x48]
mov r8, rbp
shr r8, 8
mov r9, rbp
shr r9, 0x10
mov r10, rbp
shr r10, 0x18
mov rbx, rbp
shr rbx, 0x20
mov rdi, rbp
shr rdi, 0x28
mov rsi, rbp
shr rsi, 0x30
mov rcx, rbp
shr rcx, 0x38
mov rdx, qword [rsp + 0x140]
mov byte [rdx + rax], bpl
mov byte [rdx + rax + 1], r8b
mov byte [rdx + rax + 2], r9b
mov byte [rdx + rax + 3], r10b
mov byte [rdx + rax + 4], bl
mov byte [rdx + rax + 5], dil
mov byte [rdx + rax + 6], sil
mov byte [rdx + rax + 7], cl
mov rax, qword [rsp + 0x148]
add rax, 8
mov qword [rsp + 0x148], rax
add dword [rsp + 0x138], 8
cmp rax, qword [rsp + 0x150]
je 0x140007365
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0x41
mov rax, qword [rsp + 0x148]
inc rax
mov qword [rsp + 0x148], rax
inc dword [rsp + 0x138]
cmp rax, qword [rsp + 0x150]
je 0x140007387
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0xff
mov rax, qword [rsp + 0x148]
inc rax
mov qword [rsp + 0x148], rax
inc dword [rsp + 0x138]
cmp rax, qword [rsp + 0x150]
je 0x1400073a9
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0xe3
inc qword [rsp + 0x148]
inc dword [rsp + 0x138]
cmp qword [rsp + 0x190], 0
je 0x140006972
cmp byte [rsp + 0x178], 0
je 0x140006972
mov r8, qword [rsp + 0x148]
test r8, r8
je 0x14000696a
mov rdx, qword [rsp + 0x140]
mov ecx, dword [rsp + 0x13c]
add rcx, qword [rsp + 0x128]
call sub.ntdll.dll_memcpy
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov eax, dword [rsp + 0x148]
add dword [rsp + 0x13c], eax
mov qword [rsp + 0x148], 0
mov rax, qword [rsp + 0x40]
mov qword [rax], r15
mov eax, dword [0x14005cb64]
mov ecx, dword [0x14005c2c8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006af0
mov rsi, qword [rsp + 0x188]
mov rbp, qword [rsp + 0x190]
test rbp, rbp
jne 0x140006a6b
lea rax, [rsp + 0x1a0]
mov qword [rax - 0x10], 0
cmp rsi, rax
jne 0x1400072bc
lea rax, [rsp + 0x158]
mov rcx, qword [rax - 0x18]
cmp rcx, rax
jne 0x1400072ca
mov rax, qword [rsp + 0x40]
cmp qword [rax], 0
je 0x14000721f
mov rax, qword [rsp + 0x40]
cmp qword [rax], 0
setne sil
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140006a1d
mov r8d, dword [rsp + 0x60]
test r8d, r8d
je 0x140006a1d
lea r9, [rsp + 0x60]
mov edx, dword [r9 + 0x20]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp byte [rsp + 0xb8], 0
je 0x140006a45
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x140006a45
mov r8d, dword [rsp + 0x90]
test r8d, r8d
jne 0x1400075b3
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.14001bc70
mov eax, esi
add rsp, 0x1c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
shl rbp, 4
add rbp, rsi
mov edi, dword [0x14005cb60]
lea r14, [rsp + 0xf0]
mov rbx, qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r8d, dword [rsi]
mov rcx, qword [rsi + 8]
mov rdx, rdi
mov r9, r14
call rbx
add rsi, 0x10
cmp rsi, rbp
jne 0x140006a87
mov rsi, qword [rsp + 0x188]
jmp 0x1400069b0
lea rcx, [0x14005cb6c]
call fcn.14001aa20
cmp dword [0x14005cb6c], 0xffffffff
jne 0x1400062e7
lea rdi, [rsp + 0x120]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rdi + 0x28]
mov dword [0x14005cb68], eax
lea rcx, [0x14005cb6c]
call fcn.14001a9c0
jmp 0x1400062e7
lea rcx, [0x14005cb64]
call fcn.14001aa20
cmp dword [0x14005cb64], 0xffffffff
jne 0x140006997
lea rsi, [rsp + 0xf0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsi + 4]
mov dword [0x14005cb60], eax
lea rcx, [0x14005cb64]
call fcn.14001a9c0
jmp 0x140006997
mov ecx, 0x20
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov dword [rax + 0x18], 0
mov rax, qword [rsi + 8]
cmp rax, qword [rsi + 0x10]
jne 0x140006b66
mov rcx, rsi
call fcn.140008e40
mov rax, qword [rsi + 8]
mov rcx, qword [rsi]
lea rax, [rax + rax*2]
mov qword [rcx + rax*8], r15
mov qword [rcx + rax*8 + 8], rbx
mov qword [rcx + rax*8 + 0x10], rdi
inc qword [rsi + 8]
mov rsi, qword [0x14005e9d8]
test rsi, rsi
je 0x140006b96
cmp qword [rsi + 8], 0
jne 0x140005d39
int3
mov edx, ebx
xor ecx, ecx
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000642a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsi + 8], 0
xor ebx, ebx
mov dword [rsp + 0x123], ebx
mov dword [rsp + 0x120], ebx
mov dil, 1
xor esi, esi
xor ebp, ebp
jmp 0x140005d77
mov cl, byte [rdx + rax + 1]
and cl, 0xf8
cmp cl, 0xe8
jne 0x1400069de
lea ecx, [rdi + 6]
cmp qword [rsp + 0x58], 0
je 0x140007f53
cmp ecx, dword [rsp + 0x80]
ja 0x140007f5c
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, edi
movzx ebp, word [rdx + 4]
mov word [rax + rcx + 4], bp
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 6
mov eax, dword [rsp + 0xe8]
add eax, 6
jmp 0x14000614f
cmp cl, 0x80
je 0x140007f69
cmp cl, 0x90
je 0x140006193
cmp cl, 0x65
je 0x140007fce
mov ebx, ecx
and bl, 0xf8
cmp bl, 0xb8
je 0x14000825f
cmp cl, 0xd0
jg 0x140006d05
cmp cl, 0xc2
jg 0x140006d64
cmp cl, 0x83
je 0x140008628
cmp cl, 0x85
jne 0x140006d85
mov rbp, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.14004b690
test eax, eax
jns 0x140007db2
jmp 0x1400069de
cmp byte [rdi + 2], 0x25
mov rcx, rdi
jne 0x140005c2b
movsxd rax, dword [rdi + 3]
mov rcx, qword [rdi + rax + 7]
jmp 0x140005c2b
cmp al, 0xff
jne 0x14000814c
cmp byte [rdi + 1], 0x25
mov rcx, rdi
jne 0x140005c2b
movsxd rax, dword [rdi + 2]
mov rcx, qword [rdi + rax + 6]
jmp 0x140005c2b
cmp cl, 0xf5
jg 0x140006d77
cmp cl, 0xd1
je 0x140008662
lea ebp, [rcx + 0x18]
cmp bpl, 2
jae 0x140006d85
xor r14d, r14d
cmp cl, 0xe9
sete r14b
lea rcx, [rax + 1]
mov dword [rsp + 0xe8], ecx
mov r8d, 4
sub r8d, r14d
lea rcx, [rdx + rax]
inc rcx
movsxd rax, dword [rdx + rax + 1]
lea rdx, [rax + rcx]
add rdx, 4
add r9d, 5
mov dword [rsp + 0xe8], r9d
lea rcx, [rsp + 0x58]
jmp 0x140007478
cmp cl, 0xc3
je 0x140006193
cmp cl, 0xcc
jne 0x140006d85
jmp 0x140006193
cmp cl, 0xf6
je 0x140008672
cmp cl, 0x33
je 0x140006db9
lea ebp, [rcx - 0x73]
cmp bpl, 2
jbe 0x140008016
cmp cl, 0xff
jne 0x140008049
mov bl, byte [rdx + rax + 1]
mov ecx, ebx
shr cl, 3
and cl, 7
cmp bl, 0xc0
jb 0x1400080ae
cmp cl, 6
jne 0x1400080fb
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 2]
cmp qword [rsp + 0x58], 0
je 0x1400080f2
cmp ebp, dword [rsp + 0x80]
ja 0x140007050
mov rbp, qword [rsp + 0x68]
movzx eax, word [rdx + rax]
mov word [rbp + rcx], ax
add dword [rsp + 0x78], 2
mov r9d, dword [rsp + 0xe8]
add r9d, 2
jmp 0x1400061ce
mov cl, byte [rdx + rax]
cmp cl, 0xcc
je 0x140006e0e
cmp cl, 0x90
jne 0x140008528
inc rax
mov dword [rsp + 0xe8], eax
cmp rax, r12
jb 0x140006dfd
mov r9d, eax
jmp 0x1400065e2
mov ecx, dword [rsp + 0x78]
lea edi, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x140006f4b
cmp edi, dword [rsp + 0x80]
jbe 0x1400070b5
mov byte [rsp + 0x84], 0
mov edi, ecx
jmp 0x140006f4f
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x140006fcc
cmp ebp, dword [rsp + 0x80]
jbe 0x1400070e0
mov byte [rsp + 0x84], 0
jmp 0x1400070f8
mov ebx, dword [rsp + 0x78]
lea ecx, [rbx + 1]
cmp qword [rsp + 0x58], 0
je 0x140006fd5
cmp ecx, dword [rsp + 0x80]
jbe 0x140007175
mov byte [rsp + 0x84], 0
mov ecx, ebx
jmp 0x140006fd9
mov ebx, dword [rsp + 0x78]
lea ecx, [rbx + 1]
cmp qword [rsp + 0x58], 0
je 0x14000701a
cmp ecx, dword [rsp + 0x80]
jbe 0x14000719f
mov byte [rsp + 0x84], 0
mov ecx, ebx
jmp 0x14000701e
mov dword [rsp + 0x78], edi
jmp 0x1400060a5
mov byte [rsp + 0x84], 0
mov edi, ecx
jmp 0x1400060a5
mov ecx, ebx
and cl, 0xf8
cmp cl, 0xb8
jne 0x140007066
lea ecx, [rdi + 9]
cmp qword [rsp + 0x58], 0
je 0x1400075ca
cmp ecx, dword [rsp + 0x80]
jbe 0x14000761a
mov byte [rsp + 0x84], 0
jmp 0x1400075ce
mov dword [rsp + 0x78], ecx
jmp 0x14000614d
mov byte [rsp + 0x84], 0
jmp 0x14000614d
xor esi, esi
jmp 0x140006a45
mov dword [rsp + 0x78], edi
lea eax, [r9 + 1]
mov dword [rsp + 0xe8], eax
mov cl, byte [rdx + rax]
lea ebp, [rcx - 0x10]
cmp bpl, 2
jb 0x140006fa3
cmp cl, 5
je 0x140007400
cmp cl, 0x1f
jne 0x140007429
lea ecx, [rdi + 1]
cmp qword [rsp + 0x58], 0
je 0x140007a8d
cmp ecx, dword [rsp + 0x80]
jbe 0x140007cd7
mov byte [rsp + 0x84], 0
mov ecx, edi
jmp 0x140007a91
lea ecx, [rdi + 1]
cmp qword [rsp + 0x58], 0
je 0x140007570
cmp ecx, dword [rsp + 0x80]
jbe 0x140007586
mov byte [rsp + 0x84], 0
jmp 0x140007574
mov dword [rsp + 0x78], ebp
jmp 0x1400070f8
mov dword [rsp + 0x78], ecx
inc r9d
mov dword [rsp + 0xe8], r9d
cmp byte [rdx + r9], 0x89
jne 0x1400069de
lea eax, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x14000705d
cmp eax, dword [rsp + 0x80]
ja 0x140006e74
mov rax, qword [rsp + 0x68]
mov ecx, ecx
mov dl, byte [rdx + r9]
mov byte [rax + rcx], dl
jmp 0x1400070ec
mov dword [rsp + 0x78], ecx
inc r9d
mov dword [rsp + 0xe8], r9d
cmp byte [rdx + r9], 0x33
jne 0x1400069de
lea eax, [rcx + 2]
cmp qword [rsp + 0x58], 0
je 0x140007d7d
cmp eax, dword [rsp + 0x80]
jbe 0x1400071c9
mov byte [rsp + 0x84], 0
jmp 0x140006df4
mov dword [rsp + 0x78], eax
jmp 0x1400070f8
cmp bl, 0xfe
jg 0x14000750c
cmp bl, 0x8d
je 0x1400079c5
cmp bl, 0xc7
jne 0x1400069de
cmp byte [rdx + rax + 1], 0x44
jne 0x1400069de
lea ecx, [rdi + 8]
cmp qword [rsp + 0x58], 0
je 0x140007e6b
cmp ecx, dword [rsp + 0x80]
jbe 0x140007e77
mov byte [rsp + 0x84], 0
jmp 0x140007e6f
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov edi, dword [rsp + 0x78]
inc edi
mov dword [rsp + 0x78], edi
mov r9d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x140006f4f
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
inc dword [rsp + 0x78]
mov r9d, dword [rsp + 0xe8]
inc r9d
lea rcx, [rsp + 0xd8]
mov dword [rcx + 0x10], r9d
xor edx, edx
call fcn.14004b690
test eax, eax
js 0x1400069de
mov edi, eax
mov edx, dword [rsp + 0xe8]
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rdi]
cmp qword [rsp + 0x58], 0
je 0x140007141
cmp eax, dword [rsp + 0x80]
jbe 0x140007153
mov byte [rsp + 0x84], 0
jmp 0x140007145
mov dword [rsp + 0x78], eax
add edx, edi
mov dword [rsp + 0xe8], edx
jmp 0x140006156
add rdx, qword [rsp + 0xe0]
mov r8d, edi
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], edi
mov edx, dword [rsp + 0xe8]
jmp 0x140007145
mov rcx, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rcx + rbx], al
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
mov r9d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x140006fd9
mov rcx, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rcx + rbx], al
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
mov r9d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x14000701e
mov rax, qword [rsp + 0x68]
mov ecx, ecx
movzx edx, word [rdx + r9]
mov word [rax + rcx], dx
jmp 0x140006de7
mov qword [rsp + 0xd8], r12
mov qword [rsp + 0xe0], rsi
mov dword [rsp + 0xe8], 0
jmp 0x140005c59
mov dword [rsp + 0x78], edx
jmp 0x140005f2b
mov byte [rsp + 0x84], 0
xor eax, eax
jmp 0x140005f00
mov dword [rsp + 0x78], ecx
jmp 0x140005fae
mov dword [rsp + 0x78], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsp + 0x78]
lea edx, [rcx + 8]
cmp qword [rsp + 0x58], 0
je 0x1400089e3
cmp edx, dword [rsp + 0x80]
ja 0x1400089ec
mov rdx, qword [rsp + 0x68]
mov qword [rdx + rcx], rax
add dword [rsp + 0x78], 8
jmp 0x1400069ed
mov byte [rsp + 0x84], 0
xor eax, eax
mov ecx, edx
jmp 0x140005f83
inc eax
inc eax
add eax, 4
add eax, 8
mov dword [rsp + 0x78], eax
jmp 0x140006702
mov byte [rsp + 0x84], 0
jmp 0x140006646
mov byte [rsp + 0x84], 0
jmp 0x140006676
mov byte [rsp + 0x84], 0
jmp 0x1400066ad
mov byte [rsp + 0x84], 0
xor eax, eax
jmp 0x1400066d7
mov rcx, rsi
call qword [sym.imp.mozglue.dll_free]
jmp 0x1400069c9
call qword [sym.imp.mozglue.dll_free]
jmp 0x1400069de
lea rcx, [rsp + 0xc0]
lea r8, [rsp + 0x120]
mov rdx, r15
mov r9, qword [rsp + 0x48]
call fcn.14004ba00
test al, al
jne 0x1400068fe
jmp 0x140006972
mov edx, 1
mov rcx, r14
call fcn.140010910
test al, al
je 0x14000896d
mov rax, qword [rsp + 0x148]
jmp 0x140006782
mov edx, 1
mov rcx, r14
call fcn.140010910
test al, al
je 0x140008982
mov rax, qword [rsp + 0x148]
jmp 0x1400067b6
mov edx, 8
mov rcx, r14
call fcn.140010910
test al, al
je 0x140008997
mov rax, qword [rsp + 0x148]
jmp 0x1400067ee
mov edx, 1
mov rcx, r14
call fcn.140010910
test al, al
je 0x1400089ac
mov rax, qword [rsp + 0x148]
jmp 0x14000687b
mov edx, 1
mov rcx, r14
call fcn.140010910
test al, al
je 0x1400089c1
mov rax, qword [rsp + 0x148]
jmp 0x1400068af
mov edx, 1
mov rcx, r14
call fcn.140010910
test al, al
je 0x1400089d6
mov rax, qword [rsp + 0x148]
jmp 0x1400068e3
mov dl, byte [rax + r9 + 0xa]
cmp dl, 0x50
je 0x140007add
cmp dl, 0xff
jne 0x140005fd1
cmp byte [rax + r9 + 0xb], 0xe0
jne 0x140005fd1
jmp 0x140007ae9
mov byte [rsp + 0x84], 0
jmp 0x1400061cb
lea ecx, [rdi + 1]
cmp qword [rsp + 0x58], 0
je 0x140007ad2
cmp ecx, dword [rsp + 0x80]
jbe 0x140007d02
mov byte [rsp + 0x84], 0
jmp 0x140007ad6
movzx eax, cl
lea ecx, [rax + 0x7d]
cmp cl, 2
ja 0x1400069de
lea rcx, [0x140050410]
mov r8d, dword [rcx + rax*4 - 0x20c]
lea eax, [r9 + 2]
mov dword [rsp + 0xe8], eax
dec edi
lea rcx, [rsp + 0x58]
mov dword [rcx + 0x20], edi
lea rbp, [rdx + rax]
movsxd rax, dword [rdx + rax]
lea rdx, [rax + rbp]
add rdx, 4
add r9d, 6
mov dword [rsp + 0xe8], r9d
call fcn.14004b720
test al, al
jne 0x140006156
jmp 0x1400069de
int3
test ecx, ecx
jne 0x1400079bb
mov ecx, ebp
and cl, 7
cmp cl, 5
je 0x140007dea
mov esi, 1
cmp cl, 4
jne 0x140006102
mov cl, byte [rdx + rbx + 1]
and cl, 7
xor ebx, ebx
cmp cl, 5
sete bl
lea esi, [rbx*4 + 1]
jmp 0x140006102
mov ecx, dword [rsp + 0x78]
lea edi, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x140007bb7
cmp edi, dword [rsp + 0x80]
jbe 0x140007d2e
mov byte [rsp + 0x84], 0
mov edi, ecx
jmp 0x140007bbb
mov dword [rsp + 0x78], ebp
jmp 0x1400061cb
cmp bl, 0xff
je 0x140007a3e
cmp bl, 0x63
jne 0x1400069de
cmp byte [rdx + rax + 1], 0xc0
jb 0x1400069de
lea ecx, [rdi + 2]
cmp qword [rsp + 0x58], 0
je 0x140007547
cmp ecx, dword [rsp + 0x80]
jbe 0x140007553
mov byte [rsp + 0x84], 0
jmp 0x14000754b
mov dword [rsp + 0x78], ecx
add eax, 2
jmp 0x14000614f
mov rcx, qword [rsp + 0x68]
mov ebp, edi
movzx eax, word [rdx + rax]
mov word [rcx + rbp], ax
add dword [rsp + 0x78], 2
mov eax, dword [rsp + 0xe8]
jmp 0x14000754b
mov dword [rsp + 0x78], ecx
inc eax
lea rcx, [rsp + 0xd8]
mov dword [rcx + 0x10], eax
jmp 0x140007107
mov rcx, qword [rsp + 0x68]
mov ebp, edi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
inc dword [rsp + 0x78]
mov eax, dword [rsp + 0xe8]
jmp 0x140007574
mov rcx, rdi
call fcn.14004b510
test al, al
cmovne rsi, rdi
jmp 0x140005c39
lea r9, [rsp + 0x90]
mov edx, dword [r9 + 0x20]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x140006a45
mov dword [rsp + 0x78], ecx
add eax, 9
jmp 0x14000614f
mov dword [rsp + 0x78], ecx
jmp 0x14000622b
cmp cl, 0xc0
je 0x1400061eb
cmp cl, 0x60
jne 0x1400069de
lea ecx, [rdi + 5]
cmp qword [rsp + 0x58], 0
je 0x1400081cf
cmp ecx, dword [rsp + 0x80]
jbe 0x1400081fb
mov byte [rsp + 0x84], 0
jmp 0x1400081d3
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, edi
mov bl, byte [rdx + 8]
mov byte [rax + rcx + 8], bl
mov rdx, qword [rdx]
mov qword [rax + rcx], rdx
add dword [rsp + 0x78], 9
mov eax, dword [rsp + 0xe8]
jmp 0x1400075ce
mov rbp, rax
mov rbx, rcx
mov rdx, rcx
mov rdi, qword [rsp + 0x38]
shr rdx, 1
lea r8, [rdx + rdx*2]
cmp qword [rbp + r8*8], r15
jae 0x140007679
lea rbp, [rbp + r8*8]
add rbp, 0x18
not rdx
add rdx, rbx
mov rbx, rdx
test rdx, rdx
jle 0x140006470
jmp 0x14000764e
jne 0x14000766b
cmp qword [rbp + r8*8 + 8], rdi
jb 0x14000765c
jmp 0x14000766b
cmp qword [rbp], r15
ja 0x140006481
mov rax, qword [rsp + 0x38]
cmp qword [rbp + 8], rax
jae 0x140005d3c
jmp 0x140006481
lea rbp, [r14 + r14*2]
movups xmm0, xmmword [rax + rbp*8 - 0x18]
movaps xmmword [rsp + 0x120], xmm0
mov rcx, qword [rax + rbp*8 - 8]
mov qword [rsp + 0x50], rcx
mov qword [rax + rbp*8 - 8], 0
mov rax, qword [rsi + 8]
cmp rax, qword [rsi + 0x10]
jne 0x1400076dc
mov rcx, rsi
call fcn.140008e40
mov rax, qword [rsi + 8]
mov rcx, qword [rsi]
lea rax, [rax + rax*2]
movaps xmm0, xmmword [rsp + 0x120]
movups xmmword [rcx + rax*8], xmm0
mov rdx, qword [rsp + 0x50]
mov qword [rcx + rax*8 + 0x10], rdx
inc qword [rsi + 8]
dec r14
cmp r14, rbx
jbe 0x140007747
lea rbp, [rbp*8 - 8]
mov rax, qword [rsi]
movups xmm0, xmmword [rax + rbp - 0x28]
movups xmmword [rax + rbp - 0x10], xmm0
mov rdx, qword [rax + rbp - 0x18]
mov qword [rax + rbp - 0x18], 0
mov rcx, qword [rax + rbp]
mov qword [rax + rbp], rdx
test rcx, rcx
je 0x14000773b
call qword [sym.imp.mozglue.dll_free]
dec r14
add rbp, 0xffffffffffffffe8
cmp r14, rbx
ja 0x14000770d
mov rax, qword [rsi]
lea rdx, [rbx + rbx*2]
mov qword [rax + rdx*8], r15
mov rcx, qword [rsp + 0x38]
mov qword [rax + rdx*8 + 8], rcx
mov rcx, qword [rax + rdx*8 + 0x10]
mov qword [rax + rdx*8 + 0x10], rdi
test rcx, rcx
je 0x1400064f5
call qword [sym.imp.mozglue.dll_free]
jmp 0x1400064f5
lea rcx, [rdi + r15]
dec rcx
lea rdx, [rsp + 0x120]
mov qword [rdx], rdi
mov qword [rdx + 8], rcx
mov qword [rdx + 0x10], 0
lea rcx, [rsp + 0xf0]
mov qword [rcx], 1
mov qword [rcx + 8], rdx
mov r8d, ebx
mov edx, 1
mov dword [rsp + 0x30], edx
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edx
mov rcx, r13
xor edx, edx
mov r9d, 0x2000
call qword [case.0x14001b2ee.0]
mov qword [rsi + 8], rax
test rax, rax
jne 0x140005d65
jmp 0x140006bce
mov qword [rsp + 0x20], r15
mov rcx, qword [rsp + 0x38]
mov rdx, r13
mov r8, rbp
mov r9, rdi
call fcn.140009530
test rax, rax
je 0x140006bc6
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000642a
mov qword [rsp + 0x20], r15
mov rcx, qword [rsp + 0x38]
mov rdx, r13
mov r8, rbp
mov r9, rdi
call fcn.140009530
test rax, rax
je 0x140006bc6
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000642a
mov qword [rsp + 0x20], r15
mov rcx, qword [rsp + 0x38]
mov rdx, r13
mov r8, rbp
mov r9, rdi
call fcn.140009530
test rax, rax
je 0x140006bc6
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000642a
mov qword [rsp + 0x20], r15
mov rcx, qword [rsp + 0x38]
mov rdx, r13
mov r8, rbp
mov r9, rdi
call fcn.140009530
test rax, rax
je 0x140006bc6
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000642a
mov qword [rsp + 0x20], r15
mov rcx, qword [rsp + 0x38]
mov rdx, r13
mov r8, rbp
mov r9, rdi
call fcn.140009530
test rax, rax
je 0x140006bc6
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000642a
mov qword [rsp + 0x20], r15
mov rcx, qword [rsp + 0x38]
mov rdx, r13
mov r8, rbp
mov r9, rdi
call fcn.140009530
test rax, rax
je 0x140006bc6
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000642a
mov qword [rsp + 0x20], r15
mov rcx, qword [rsp + 0x38]
mov rdx, r13
mov r8, rbp
mov r9, rdi
call fcn.140009530
test rax, rax
je 0x140006bc6
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000642a
xor ecx, ecx
mov rdx, rbp
jmp 0x140006ba5
mov esi, 5
jmp 0x140006102
mov bl, byte [rdx + rax + 1]
mov eax, ebx
and al, 0xc7
cmp al, 5
jne 0x140007d86
lea eax, [r9 + 3]
mov dword [rsp + 0xe8], eax
movsxd rcx, dword [rdx + rax]
add r9d, 7
mov dword [rsp + 0xe8], r9d
cmp qword [rsp + 0x58], 0
je 0x1400081c1
mov ebp, dword [rsp + 0x80]
cmp edi, ebp
jae 0x140008165
shr bl, 3
or bl, 0xb8
mov rbp, qword [rsp + 0x68]
mov edi, edi
mov byte [rbp + rdi], bl
mov edi, dword [rsp + 0x78]
inc edi
mov dword [rsp + 0x78], edi
cmp qword [rsp + 0x58], 0
je 0x1400081c3
mov ebp, dword [rsp + 0x80]
jmp 0x14000816d
mov al, byte [rdx + rax + 1]
and al, 0xc7
cmp al, 5
jne 0x1400069de
lea eax, [r9 + 3]
mov dword [rsp + 0xe8], eax
dec edi
lea rcx, [rsp + 0x58]
mov dword [rcx + 0x20], edi
lea rbp, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r9d, 7
mov dword [rsp + 0xe8], r9d
mov rdx, qword [rax + rbp + 4]
mov r8d, 3
call fcn.14004b720
mov r14b, 1
jmp 0x14000747d
mov dword [rsp + 0x78], ecx
inc eax
mov dword [rsp + 0xe8], eax
mov bl, byte [rdx + rax]
and bl, 0xc7
cmp bl, 0x44
jne 0x1400069de
lea ebp, [rcx + 3]
cmp qword [rsp + 0x58], 0
je 0x140007bae
cmp ebp, dword [rsp + 0x80]
jbe 0x140007d1f
mov byte [rsp + 0x84], 0
jmp 0x14000622b
mov dword [rsp + 0x78], ecx
inc eax
jmp 0x14000614f
cmp byte [rax + r9 + 0xb], 0xc3
jne 0x140005fd1
add r9d, 2
mov rdi, qword [rax + r9]
lea rcx, [rsp + 0xd8]
lea rsi, [rsp + 0x120]
mov rdx, rsi
mov r8d, 8
mov r9b, 2
call fcn.140009030
xor ebx, ebx
cmp qword [rsi + 0x70], 0
je 0x140007eee
cmp byte [rsp + 0x178], 0
je 0x140007eee
lea rsi, [rsp + 0x120]
mov rcx, rsi
mov rdx, qword [rsp + 0x48]
call fcn.140021260
mov rcx, rsi
call fcn.14004b5a0
test al, al
je 0x140007eec
mov eax, dword [rsp + 0x78]
lea ecx, [rax + 8]
cmp qword [rsp + 0x58], 0
je 0x140008375
cmp ecx, dword [rsp + 0x80]
jbe 0x14000843f
mov byte [rsp + 0x84], 0
xor eax, eax
xor ebx, ebx
cmp qword [rsp + 0x68], 0
je 0x140007eee
cmp qword [rsp + 0x70], 0
je 0x140007eee
cmp dword [rsp + 0x60], 0
je 0x140007eee
test al, al
jne 0x140008379
jmp 0x140007eee
mov dword [rsp + 0x78], ebp
jmp 0x14000622b
mov dword [rsp + 0x78], edi
inc r9d
mov dword [rsp + 0xe8], r9d
mov al, byte [rdx + r9]
mov ecx, eax
and cl, 0xfc
cmp cl, 0x88
jne 0x140007c44
movzx ebx, byte [rdx + r9 + 1]
mov eax, ebx
and eax, 0xffffffc0
cmp al, 0xc0
je 0x140007d59
cmp al, 0x40
je 0x140007c0a
test al, al
jne 0x1400069de
mov ecx, ebx
and ecx, 6
cmp ecx, 4
jne 0x140007d59
cmp eax, 0x40
jne 0x1400069de
and ebx, 7
add rdx, r9
mov rax, qword [rsp + 0x58]
cmp ebx, 4
jne 0x140007e9a
lea ecx, [rdi + 4]
test rax, rax
je 0x14000822c
cmp ecx, dword [rsp + 0x80]
jbe 0x1400083aa
mov byte [rsp + 0x84], 0
jmp 0x140008230
cmp al, 0x44
jne 0x140006156
cmp byte [rdx + r9 + 1], 0x89
jne 0x140006156
lea eax, [rdi + 2]
cmp qword [rsp + 0x58], 0
je 0x14000821f
cmp eax, dword [rsp + 0x80]
jbe 0x140008388
mov byte [rsp + 0x84], 0
jmp 0x140008223
mov dword [rsp + 0x78], ecx
jmp 0x140006278
mov byte [rsp + 0x84], 0
mov ecx, ebx
jmp 0x140006278
and bl, 0xf8
cmp bl, 0xb8
jne 0x1400069de
lea eax, [rcx + 5]
cmp qword [rsp + 0x58], 0
je 0x140007e94
cmp eax, dword [rsp + 0x80]
jbe 0x140007ec0
mov byte [rsp + 0x84], 0
jmp 0x140007ee3
mov dword [rsp + 0x78], eax
jmp 0x1400061cb
mov rcx, qword [rsp + 0x68]
mov ebp, edi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
mov eax, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x140007a91
mov rcx, qword [rsp + 0x68]
mov ebp, edi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
inc dword [rsp + 0x78]
mov eax, dword [rsp + 0xe8]
jmp 0x140007ad6
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, ecx
jmp 0x140006211
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov edi, dword [rsp + 0x78]
inc edi
mov dword [rsp + 0x78], edi
mov r9d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x140007bbb
lea eax, [rdi + 2]
cmp qword [rsp + 0x58], 0
je 0x140007d7d
cmp eax, dword [rsp + 0x80]
ja 0x140007050
mov rax, qword [rsp + 0x68]
mov ecx, edi
jmp 0x1400071d0
mov dword [rsp + 0x78], eax
jmp 0x140006df4
add r9d, 2
mov rax, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rax
add rdx, r9
mov qword [rcx + 8], rdx
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.14004b690
lea edi, [rax + 1]
mov edx, dword [rsp + 0xe8]
cmp qword [rsp + 0x58], 0
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rax + 1]
je 0x1400080a3
cmp eax, dword [rsp + 0x80]
jbe 0x140007f2e
mov byte [rsp + 0x84], 0
jmp 0x1400080a7
shr bpl, 3
lea ecx, [r9 + 3]
lea rbx, [rdx + rcx]
add r9d, 7
mov eax, ebp
mov dword [rsp + 0xe8], ecx
movsxd rcx, dword [rdx + rcx]
lea rdx, [rcx + rbx]
add rdx, 4
mov dword [rsp + 0xe8], r9d
and al, 7
je 0x140008181
cmp qword [rsp + 0x58], 0
je 0x1400082fc
mov ecx, dword [rsp + 0x80]
cmp edi, ecx
jae 0x1400083ef
or bpl, 0xb8
mov rcx, qword [rsp + 0x68]
mov ebx, edi
mov byte [rcx + rbx], bpl
mov edi, dword [rsp + 0x78]
inc edi
mov dword [rsp + 0x78], edi
cmp qword [rsp + 0x58], 0
je 0x1400082fe
mov ecx, dword [rsp + 0x80]
jmp 0x1400083f7
mov dword [rsp + 0x78], ecx
add eax, 8
jmp 0x14000614f
mov rcx, qword [rsp + 0x68]
mov ebp, edi
mov rax, qword [rdx + rax]
mov qword [rcx + rbp], rax
add dword [rsp + 0x78], 8
mov eax, dword [rsp + 0xe8]
jmp 0x140007e6f
mov dword [rsp + 0x78], eax
jmp 0x140007ee3
lea ecx, [rdi + 3]
test rax, rax
je 0x140008239
cmp ecx, dword [rsp + 0x80]
jbe 0x1400083c8
mov byte [rsp + 0x84], 0
jmp 0x14000823d
add rdx, r9
mov rax, qword [rsp + 0x68]
mov ecx, ecx
mov bl, byte [rdx + 4]
mov byte [rax + rcx + 4], bl
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 5
mov r9d, dword [rsp + 0xe8]
add r9d, 5
jmp 0x1400061ce
xor ebx, ebx
lea rsi, [rsp + 0x180]
mov rcx, rsi
call int.14004b610
mov rcx, qword [rsi - 0x40]
lea rax, [rsp + 0x158]
cmp rcx, rax
je 0x140007f15
call qword [sym.imp.mozglue.dll_free]
test bl, bl
jne 0x1400069de
mov ecx, dword [rsp + 0x78]
mov r9d, dword [rsp + 0xe8]
jmp 0x140005fd1
add rdx, qword [rsp + 0xe0]
mov r8d, edi
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], edi
mov edx, dword [rsp + 0xe8]
jmp 0x1400080a7
mov dword [rsp + 0x78], ecx
jmp 0x140006c3a
mov byte [rsp + 0x84], 0
jmp 0x140006c3a
cmp byte [rdx + rax + 1], 0x3d
jne 0x1400069de
add r9d, 2
mov dword [rsp + 0xe8], r9d
mov rcx, qword [rsp + 0x58]
mov eax, dword [rsp + 0x78]
test rcx, rcx
je 0x140008465
mov edx, dword [rsp + 0x80]
cmp eax, edx
jae 0x140008557
mov rcx, qword [rsp + 0x68]
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140008467
mov edx, dword [rsp + 0x80]
jmp 0x14000855f
cmp byte [rdx + rax + 1], 0x48
jne 0x1400069de
mov cl, byte [rdx + rax + 2]
and cl, 0xfc
cmp cl, 0x88
jne 0x1400069de
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 3]
cmp qword [rsp + 0x58], 0
je 0x1400084ed
cmp ebp, dword [rsp + 0x80]
jbe 0x1400085c3
mov byte [rsp + 0x84], 0
jmp 0x1400084f1
lea rbp, [0x140050410]
mov r8d, dword [rbp + rcx*4 - 0x1cc]
movzx eax, byte [rdx + rax + 1]
add r9d, 2
mov dword [rsp + 0xe8], r9d
add r9, rdx
add r9, rax
lea rcx, [rsp + 0x58]
mov rdx, r9
jmp 0x140007478
cmp cl, 0xc6
jne 0x140008246
mov rbp, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.14004b690
test eax, eax
js 0x1400069de
lea edi, [rax + 2]
mov edx, dword [rsp + 0xe8]
cmp qword [rsp + 0x58], 0
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rax + 2]
jne 0x140007dd0
mov dword [rsp + 0x78], eax
add edx, edi
jmp 0x140007147
and bl, 0xc7
cmp bl, 5
sete bl
jne 0x14000810d
cmp cl, 2
jne 0x14000810d
lea eax, [r9 + 2]
mov dword [rsp + 0xe8], eax
lea rcx, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r9d, 6
mov dword [rsp + 0xe8], r9d
mov rdx, qword [rax + rcx + 4]
lea rcx, [rsp + 0x58]
mov r8d, 4
jmp 0x140007478
mov dword [rsp + 0x78], ebp
jmp 0x140006df4
cmp cl, 3
jb 0x140006db9
and bl, 0xc7
cmp bl, 5
sete bl
cmp cl, 4
jne 0x1400069de
test bl, bl
je 0x140008291
lea eax, [r9 + 2]
mov dword [rsp + 0xe8], eax
lea rcx, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r9d, 6
mov dword [rsp + 0xe8], r9d
mov rdx, qword [rax + rcx + 4]
lea rcx, [rsp + 0x58]
jmp 0x140007a7a
cmp al, 0xe9
jne 0x14000830c
movsxd rax, dword [rdi + 1]
lea rcx, [rdi + rax]
add rcx, 5
jmp 0x140005c2b
mov byte [rsp + 0x84], 0
lea ebx, [rdi + 8]
cmp ebx, ebp
jbe 0x1400081db
mov byte [rsp + 0x84], 0
jmp 0x140006156
cmp qword [rsp + 0x58], 0
je 0x1400081c1
mov eax, dword [rsp + 0x80]
cmp edi, eax
jae 0x140008721
mov rax, qword [rsp + 0x68]
mov ecx, edi
mov byte [rax + rcx], 0xa1
mov edi, dword [rsp + 0x78]
inc edi
mov dword [rsp + 0x78], edi
cmp qword [rsp + 0x58], 0
je 0x1400081c3
mov eax, dword [rsp + 0x80]
jmp 0x140008729
inc edi
add edi, 8
mov dword [rsp + 0x78], edi
jmp 0x140006156
mov dword [rsp + 0x78], ecx
add eax, 5
jmp 0x14000614f
add rdx, rax
lea rax, [rcx + rdx]
add rax, 4
mov rcx, qword [rsp + 0x68]
mov edx, edi
mov qword [rcx + rdx], rax
add dword [rsp + 0x78], 8
jmp 0x140006156
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, edi
mov bl, byte [rdx + 4]
mov byte [rax + rcx + 4], bl
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 5
mov eax, dword [rsp + 0xe8]
jmp 0x1400081d3
mov dword [rsp + 0x78], eax
add r9d, 2
jmp 0x1400070fb
mov dword [rsp + 0x78], ecx
add r9d, 4
jmp 0x1400061ce
mov dword [rsp + 0x78], ecx
add r9d, 3
jmp 0x1400061ce
cmp cl, 0x83
jne 0x1400069de
mov cl, byte [rdx + rax + 1]
and cl, 0xf8
cmp cl, 0x60
jne 0x1400069de
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 5]
cmp qword [rsp + 0x58], 0
je 0x140008288
cmp ebp, dword [rsp + 0x80]
ja 0x140007cc1
add rdx, rax
mov rax, qword [rsp + 0x68]
jmp 0x140007eca
mov dword [rsp + 0x78], ebp
jmp 0x140007ee3
mov rbp, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.14004b690
test eax, eax
js 0x1400069de
lea edi, [rax + 1]
mov edx, dword [rsp + 0xe8]
cmp qword [rsp + 0x58], 0
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rax + 1]
je 0x1400087a9
cmp eax, dword [rsp + 0x80]
jbe 0x1400087f4
mov byte [rsp + 0x84], 0
jmp 0x1400087ad
inc edi
add edi, 8
inc edi
inc edi
inc edi
jmp 0x1400081c6
mov rcx, rdi
cmp al, 0xeb
jne 0x140005c2b
movsx rax, byte [rdi + 1]
lea rbp, [rdi + rax]
add rbp, 2
mov qword [rsp + 0x88], rbp
mov eax, ebp
sub eax, edi
shl eax, 0x18
add eax, 0xfe000000
mov edx, eax
sar edx, 0x18
test eax, eax
js 0x1400088c8
mov rcx, rdi
je 0x140005c2b
xor ecx, ecx
mov al, 1
add ecx, 2
mov bl, byte [rdi + rcx]
cmp bl, 0x90
jne 0x140008366
movsx ecx, al
inc al
cmp edx, ecx
jg 0x140008352
cmp bl, 0x90
cmovne rbp, rdi
mov rcx, rbp
jmp 0x140005c2b
mov dword [rsp + 0x78], ecx
mov rax, qword [rsp + 0x40]
mov qword [rax], rdi
mov bl, 1
jmp 0x140007eee
mov rax, qword [rsp + 0x68]
mov ecx, edi
movzx edx, word [rdx + r9]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 2
mov r9d, dword [rsp + 0xe8]
jmp 0x140008223
mov rax, qword [rsp + 0x68]
mov ecx, edi
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 4
mov r9d, dword [rsp + 0xe8]
jmp 0x140008230
mov rax, qword [rsp + 0x68]
mov ecx, edi
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 3
mov r9d, dword [rsp + 0xe8]
jmp 0x14000823d
mov byte [rsp + 0x84], 0
lea ebp, [rdi + 8]
cmp ebp, ecx
jbe 0x1400084fa
mov byte [rsp + 0x84], 0
cmp edi, ecx
jae 0x1400085eb
mov rcx, qword [rsp + 0x68]
mov edx, edi
mov byte [rcx + rdx], 0x48
mov edi, dword [rsp + 0x78]
inc edi
mov dword [rsp + 0x78], edi
cmp qword [rsp + 0x58], 0
je 0x140008303
mov ecx, dword [rsp + 0x80]
jmp 0x1400085f3
mov rcx, qword [rsp + 0x68]
mov qword [rcx + rax], rdi
add dword [rsp + 0x78], 8
cmp qword [rsp + 0x58], 0
je 0x140008379
mov al, byte [rsp + 0x84]
jmp 0x140007b7c
inc eax
inc eax
mov dword [rsp + 0x78], eax
xor ecx, ecx
mov edx, dword [rsp + 0xe8]
mov rbp, qword [rsp + 0xe0]
movsxd rdi, dword [rbp + rdx]
lea ebx, [rdx + 4]
mov dword [rsp + 0xe8], ebx
test rcx, rcx
je 0x1400084ca
mov ecx, dword [rsp + 0x80]
cmp eax, ecx
jae 0x140008586
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x1400084cc
mov ecx, dword [rsp + 0x80]
jmp 0x14000858e
inc eax
inc eax
add eax, 8
inc eax
inc eax
inc eax
inc eax
inc dword [rsp + 0xe8]
inc eax
inc eax
mov dword [rsp + 0x78], eax
jmp 0x140006156
mov dword [rsp + 0x78], ebp
add r9d, 3
jmp 0x1400070fb
mov rcx, qword [rsp + 0x68]
mov ebp, edi
mov qword [rcx + rbp], rdx
mov edi, dword [rsp + 0x78]
add edi, 8
mov dword [rsp + 0x78], edi
cmp qword [rsp + 0x58], 0
je 0x140008301
mov ecx, dword [rsp + 0x80]
jmp 0x14000840a
lea rcx, [rsp + 0xc8]
call fcn.14004b640
test al, al
je 0x1400069de
mov r9d, dword [rsp + 0xe8]
mov r13b, 1
cmp r9d, 9
ja 0x1400065e2
jmp 0x1400069de
mov byte [rsp + 0x84], 0
cmp eax, edx
jae 0x1400086c4
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x53
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
mov rcx, qword [rsp + 0x58]
jmp 0x14000846f
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x1400086d1
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0xbb
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x1400084ce
mov ecx, dword [rsp + 0x80]
jmp 0x1400086d9
add rdx, rax
mov rax, qword [rsp + 0x68]
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 3
mov r9d, dword [rsp + 0xe8]
jmp 0x1400084f1
mov byte [rsp + 0x84], 0
cmp edi, ecx
jae 0x140008744
mov rcx, qword [rsp + 0x68]
mov edx, edi
mov byte [rcx + rdx], 0x8b
mov edi, dword [rsp + 0x78]
inc edi
mov dword [rsp + 0x78], edi
cmp qword [rsp + 0x58], 0
je 0x140008305
mov ecx, dword [rsp + 0x80]
jmp 0x14000874c
mov cl, byte [rdx + rax + 1]
cmp cl, 0xc0
jb 0x140008253
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 3]
cmp qword [rsp + 0x58], 0
je 0x140008964
cmp ebp, dword [rsp + 0x80]
ja 0x140007eb3
add rdx, rax
mov rax, qword [rsp + 0x68]
jmp 0x1400083cf
cmp byte [rdx + rax + 1], 0xc0
jae 0x140006db9
jmp 0x1400069de
lea rbp, [rsp + 0xf0]
mov byte [rbp], 0
mov rbx, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rbx
lea rax, [rax + rdx + 1]
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
mov rdx, rbp
call fcn.14004b690
test eax, eax
js 0x1400069de
cmp byte [rsp + 0xf0], 0
je 0x140008085
jmp 0x1400069de
mov byte [rsp + 0x84], 0
jmp 0x14000846f
mov byte [rsp + 0x84], 0
lea ebx, [rax + 8]
cmp ebx, ecx
jbe 0x140008770
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x1400087be
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x41
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x1400084d3
mov ecx, dword [rsp + 0x80]
jmp 0x1400087c6
mov byte [rsp + 0x84], 0
lea ecx, [rdi + 8]
cmp ecx, eax
ja 0x140008174
mov rax, qword [rsp + 0x68]
mov ecx, edi
mov qword [rax + rcx], rdx
jmp 0x1400081f1
mov byte [rsp + 0x84], 0
cmp edi, ecx
jae 0x140008174
lea ecx, [rax*8]
or cl, al
mov rax, qword [rsp + 0x68]
mov edx, edi
mov byte [rax + rdx], cl
inc dword [rsp + 0x78]
jmp 0x140006156
add rbp, rdx
lea rcx, [rdi + rbp]
add rcx, 4
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov qword [rdx + rax], rcx
mov eax, dword [rsp + 0x78]
add eax, 8
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x1400084d1
mov ecx, dword [rsp + 0x80]
jmp 0x1400086ec
mov dword [rsp + 0x78], eax
add edx, edi
mov dword [rsp + 0xe8], edx
mov r14b, 1
jmp 0x140006156
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x140008816
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x80
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x1400084d5
mov ecx, dword [rsp + 0x80]
jmp 0x14000881e
add rdx, qword [rsp + 0xe0]
mov r8d, edi
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], edi
mov edx, dword [rsp + 0xe8]
jmp 0x1400087ad
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x14000885b
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x3b
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x1400084d7
mov edx, dword [rsp + 0xe8]
add rdx, qword [rsp + 0xe0]
mov ecx, dword [rsp + 0x80]
jmp 0x140008872
mov byte [rsp + 0x84], 0
mov edx, dword [rsp + 0xe8]
add rdx, qword [rsp + 0xe0]
lea ebp, [rax + 1]
cmp ebp, ecx
jbe 0x140008916
mov byte [rsp + 0x84], 0
inc dword [rsp + 0xe8]
mov ecx, dword [rsp + 0x80]
cmp eax, ecx
jae 0x140008944
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x1400084e2
mov ecx, dword [rsp + 0x80]
jmp 0x14000894c
add dl, 2
lea rcx, [rsp + 0x120]
call fcn.14004b4b0
mov rcx, rdi
test al, al
je 0x140005c2b
lea rcx, [rsp + 0xd8]
mov qword [rcx], r12
mov qword [rcx + 8], rbp
mov dword [rcx + 0x10], 0
lea rdx, [rsp + 0x88]
call fcn.140017ab0
mov rcx, rdi
test al, al
je 0x140005c2b
jmp 0x140005c54
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov dl, byte [rdx]
mov byte [rcx + rax], dl
mov eax, dword [rsp + 0x78]
inc dword [rsp + 0xe8]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
jne 0x14000888c
jmp 0x1400084e0
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x140008174
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x5b
jmp 0x140008767
mov dword [rsp + 0x78], ebp
jmp 0x14000823d
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x1400067a8
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x1400067dc
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x14000686d
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x1400068a1
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x1400068d5
mov byte [rsp + 0x178], 0
jmp 0x1400068fe
mov dword [rsp + 0x78], edx
jmp 0x1400069ed
mov byte [rsp + 0x84], 0
jmp 0x1400069ed