Function at 0x14000e730
Capabilities:
Check for software breakpoints
Encode data using base64
Get system information on windows
Parse credit card information

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1c8
mov qword [rsp + 0x38], r9
mov rax, qword [0x14005f018]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
cmp byte [rcx + 0x1c], 0
je 0x14000fc77
mov rbx, r8
mov rsi, rdx
mov r13, rcx
mov edi, dword [rcx + 0x18]
test dil, 4
jne 0x14000ff6b
test rsi, rsi
je 0x14000e7c5
mov rcx, rsi
mov rdi, rcx
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x128], rcx
mov dword [rsp + 0x130], 0
mov al, byte [rcx]
cmp al, 0x48
jne 0x14000fa64
cmp byte [rdi + 1], 0xff
mov rcx, rdi
je 0x14000fa40
cmp rdi, rcx
jne 0x14000e782
cmp rdi, rsi
jne 0x14001035c
mov qword [rsp + 0xd8], r13
mov qword [rsp + 0xe0], rsi
mov dword [rsp + 0xe8], 0
cmp byte [r13 + 0x1c], 0
je 0x14000fc77
mov edi, dword [r13 + 0x18]
and edi, 1
shl edi, 0x1e
lea rsi, [r13 + 1]
mov eax, dword [0x14005fd34]
mov ecx, dword [0x14005f488]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000f88c
mov r12d, dword [0x14005fd30]
mov dword [rsp + 0x20], edi
lea rdx, [rsp + 0x88]
mov rcx, rsi
mov r8d, r12d
mov r9, rdi
call fcn.1400115f0
mov eax, dword [0x140061ba4]
mov ecx, dword [0x14005f488]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000f32d
lea rcx, [0x140061ba8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [rsp + 0x98]
test al, al
mov qword [rsp + 0x48], rbx
jne 0x14000ef4b
xor r15d, r15d
xor ebx, ebx
mov rsi, qword [0x140061b98]
test rsi, rsi
jne 0x14000e8c0
mov ecx, 0x18
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov qword [rax], 0x18
mov qword [0x140061b98], rax
mov al, byte [rsp + 0x98]
test al, al
jne 0x14000ef70
cmp qword [rsi + 8], 0
jne 0x14000e935
mov ecx, 0x20
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov dword [rax + 0x18], 0
mov rax, qword [rsi + 8]
cmp rax, qword [rsi + 0x10]
jne 0x14000e901
mov rcx, rsi
call fcn.1400117f0
mov rax, qword [rsi + 8]
mov rcx, qword [rsi]
lea rax, [rax + rax*2]
mov qword [rcx + rax*8], r15
mov qword [rcx + rax*8 + 8], rbx
mov qword [rcx + rax*8 + 0x10], rdi
inc qword [rsi + 8]
mov rsi, qword [0x140061b98]
test rsi, rsi
je 0x14000ff8b
cmp qword [rsi + 8], 0
je 0x14000ff8b
mov rbp, qword [rsi]
add rbp, 0x10
mov rsi, qword [rbp]
test rsi, rsi
je 0x14001037d
test r12d, r12d
je 0x14001037d
cmp qword [rsi + 8], 0
jne 0x14000f914
mov eax, dword [0x14005fd34]
mov ecx, dword [0x14005f488]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000f8d0
mov ebx, dword [0x14005fd30]
mov eax, r12d
xor edx, edx
div ebx
sub ebx, edx
test edx, edx
cmove ebx, edx
add ebx, r12d
lea r14, [rsi + 0x10]
mov dword [rsi + 0x10], ebx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp byte [rsp + 0x98], 0
jne 0x14000f054
mov edx, ebx
xor ecx, ecx
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x14001036f
mov qword [rsi + 8], rax
cmp dword [r14], 0
je 0x14001037d
mov bpl, 1
xor edi, edi
mov rbx, r13
lea rcx, [0x140061ba8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xc8], rsi
mov byte [rsp + 0xd0], bpl
mov eax, dword [rsp + 0x120]
mov ecx, dword [rsp + 0x123]
mov dword [rsp + 0xd1], eax
mov dword [rsp + 0xd4], ecx
test dil, dil
jne 0x14000fcd0
mov eax, dword [0x140061ba4]
mov ecx, dword [0x14005f488]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000f376
lea rdi, [0x140061ba8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rbp, [rsp + 0x88]
mov rcx, rsi
mov rdx, rbp
call fcn.1400119e0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [rbp + 0x30], 0
je 0x14000fcd0
mov rbx, qword [rsp + 0x88]
mov qword [rsp + 0x58], rbx
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x60], eax
mov rbp, qword [rsp + 0x98]
mov qword [rsp + 0x68], rbp
mov rdx, qword [rsp + 0xa0]
mov qword [rsp + 0x70], rdx
mov ecx, dword [rsp + 0xa8]
mov dword [rsp + 0x78], ecx
mov rcx, qword [rsp + 0xac]
mov qword [rsp + 0x7c], rcx
mov cl, byte [rsp + 0xb4]
mov byte [rsp + 0x84], cl
mov dword [rsp + 0x90], 0
mov byte [rsp + 0xb4], 0
mov rdi, qword [rsp + 0x38]
mov qword [rdi], 0
test rbx, rbx
je 0x14000eb2c
test rbp, rbp
je 0x14000f7cd
test rdx, rdx
je 0x14000f7cd
test eax, eax
je 0x14000f7cd
test cl, cl
je 0x14000f7cd
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsp + 0x78]
lea edx, [rcx + 8]
cmp qword [rsp + 0x58], 0
je 0x14000ffad
cmp edx, dword [rsp + 0x80]
ja 0x14000ffb6
mov rdx, qword [rsp + 0x68]
mov qword [rdx + rcx], rax
add dword [rsp + 0x78], 8
cmp qword [rsp + 0x58], 0
je 0x14000eb9d
mov al, byte [rsp + 0x84]
cmp qword [rsp + 0x68], 0
je 0x14000f7cd
cmp qword [rsp + 0x70], 0
je 0x14000f7cd
cmp dword [rsp + 0x60], 0
je 0x14000f7cd
test al, al
je 0x14000f7cd
mov ecx, dword [rsp + 0xe8]
add rcx, qword [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov edx, dword [rsp + 0x78]
lea ecx, [rdx + 8]
cmp qword [rsp + 0x58], 0
je 0x14000ffc5
cmp ecx, dword [rsp + 0x80]
ja 0x14000ffce
mov rcx, qword [rsp + 0x68]
mov qword [rcx + rdx], rax
mov ecx, dword [rsp + 0x78]
add ecx, 8
mov dword [rsp + 0x78], ecx
cmp qword [rsp + 0x58], 0
je 0x14000ec20
mov al, byte [rsp + 0x84]
cmp qword [rsp + 0x68], 0
je 0x14000f7be
cmp qword [rsp + 0x70], 0
je 0x14000f7be
cmp dword [rsp + 0x60], 0
je 0x14000f7be
test al, al
je 0x14000f7be
mov eax, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
cmp byte [rdx + rax], 0x48
jne 0x14000ec40
cmp byte [rdx + rax + 1], 0xb8
je 0x14001017a
mov dword [rsp + 0x7c], ecx
cmp byte [r13 + 0x1c], 0
je 0x14000fc77
mov eax, dword [r13 + 0x18]
and eax, 2
mov r12d, eax
shr r12d, 1
xor ecx, ecx
test eax, eax
sete cl
lea r15d, [rcx + rcx*2]
add r15d, 0xa
mov r10d, dword [rsp + 0xe8]
cmp r10d, r15d
jae 0x14000f3bf
mov r13d, r15d
xor r14d, r14d
mov rdx, qword [rsp + 0xe0]
mov eax, r10d
test r14b, 1
jne 0x14000fb7b
movzx ecx, byte [rdx + rax]
cmp rcx, 0xf
je 0x14000fba3
mov ebx, ecx
and bl, 0xfc
cmp bl, 0x88
je 0x14000fbd2
lea ebp, [rcx - 0x40]
cmp bpl, 2
jb 0x14000eebc
cmp cl, 0x44
je 0x14000fbff
cmp cl, 0x45
je 0x14000fc2e
mov ebx, ecx
and bl, 0xfa
cmp bl, 0x48
jne 0x14000ee03
mov ecx, dword [rsp + 0x78]
lea r9d, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x14000fc5d
cmp r9d, dword [rsp + 0x80]
ja 0x14000fc67
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov r9d, dword [rsp + 0x78]
inc r9d
mov dword [rsp + 0x78], r9d
mov r10d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
lea eax, [r10 + 1]
mov dword [rsp + 0xe8], eax
mov bl, byte [rdx + rax]
cmp bl, 0x82
jle 0x14000ed5a
cmp bl, 0x83
je 0x14000ee62
cmp bl, 0x85
je 0x1400102c3
cmp bl, 0x2b
jne 0x14000ed63
jmp 0x1400102c3
cmp bl, 0x81
je 0x14000f961
mov ecx, ebx
and cl, 0xfd
cmp cl, 0x89
jne 0x14000fc82
lea esi, [r10 + 2]
movzx ebx, byte [rdx + rsi]
mov ecx, ebx
shr ecx, 6
mov ebp, 2
cmp ecx, 1
jne 0x14000edf4
and bl, 7
xor edi, edi
cmp bl, 4
sete dil
add edi, ebp
lea ebx, [rdi + 1]
cmp qword [rsp + 0x58], 0
lea ecx, [r9 + rdi + 1]
je 0x14000fcba
cmp ecx, dword [rsp + 0x80]
ja 0x14000fcc3
add rdx, rax
mov r8d, ebx
mov ecx, r9d
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], ebx
mov eax, dword [rsp + 0xe8]
add eax, ebx
mov dword [rsp + 0xe8], eax
mov r10d, dword [rsp + 0xe8]
cmp r10d, r15d
jb 0x14000ec82
jmp 0x14000f3c2
mov edi, 1
cmp ecx, 3
je 0x14000ed96
jmp 0x1400101a0
cmp cl, 0x66
je 0x140010282
mov ebx, ecx
and bl, 0xf0
cmp bl, 0x50
jne 0x14000f9bb
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x140010317
cmp ebp, dword [rsp + 0x80]
ja 0x140010275
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
inc dword [rsp + 0x78]
mov r10d, dword [rsp + 0xe8]
inc r10d
mov dword [rsp + 0xe8], r10d
jmp 0x14000edde
mov cl, byte [rdx + rax + 1]
and cl, 0xf8
cmp cl, 0xe8
jne 0x1400103a2
lea ecx, [r9 + 3]
cmp qword [rsp + 0x58], 0
je 0x140010399
cmp ecx, dword [rsp + 0x80]
ja 0x140010759
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, r9d
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 3
mov eax, dword [rsp + 0xe8]
add eax, 3
jmp 0x14000edd7
mov ebp, dword [rsp + 0x78]
lea ecx, [rbp + 1]
cmp qword [rsp + 0x58], 0
je 0x1400108c0
cmp ecx, dword [rsp + 0x80]
ja 0x1400108c9
mov rcx, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
mov r10d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
inc r10d
mov dword [rsp + 0xe8], r10d
mov bl, byte [rdx + r10]
mov eax, ebx
and al, 0xf0
cmp al, 0x50
jne 0x1400108e1
lea eax, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x1400108d8
cmp eax, dword [rsp + 0x80]
ja 0x140010275
mov rax, qword [rsp + 0x68]
mov ecx, ecx
mov dl, byte [rdx + r10]
mov byte [rax + rcx], dl
jmp 0x14000ee46
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x14001026a
mov r15, qword [rsp + 0x90]
lea rbx, [rcx + r15]
dec rbx
jmp 0x14000e88a
mov qword [rsp + 0x40], rbx
mov r8, qword [rsi]
mov rbx, qword [rsi + 8]
mov rbp, r8
test rbx, rbx
jle 0x14000efbb
mov rbp, r8
mov rcx, rbx
mov rdx, rbx
mov rax, qword [rsp + 0x40]
shr rdx, 1
lea rdi, [rdx + rdx*2]
cmp qword [rbp + rdi*8], r15
jae 0x140010412
lea rbp, [rbp + rdi*8]
add rbp, 0x18
not rdx
add rdx, rcx
mov rcx, rdx
test rdx, rdx
jg 0x14000ef92
lea rcx, [rbx + rbx*2]
lea rax, [r8 + rcx*8]
cmp rbp, rax
jne 0x140010428
mov ecx, 0x20
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov dword [rax + 0x18], 0
mov rax, qword [rsi]
mov r14, qword [rsi + 8]
sub rbp, rax
sar rbp, 3
movabs rbx, 0xaaaaaaaaaaaaaaab
imul rbx, rbp
cmp rbx, r14
jne 0x140010446
mov rcx, rbx
cmp rbx, qword [rsi + 0x10]
jne 0x14000f025
mov rcx, rsi
call fcn.1400117f0
mov rax, qword [rsi]
mov rcx, qword [rsi + 8]
lea rcx, [rcx + rcx*2]
mov qword [rax + rcx*8], r15
mov rdx, qword [rsp + 0x40]
mov qword [rax + rcx*8 + 8], rdx
mov qword [rax + rcx*8 + 0x10], rdi
inc qword [rsi + 8]
mov rax, qword [rsi]
lea rcx, [rbx + rbx*2]
lea rbp, [rax + rcx*8]
add rbp, 0x10
jmp 0x14000e93c
mov r15, qword [rsp + 0x88]
test r15, r15
je 0x14001026a
mov r12, rax
mov rdi, qword [rsp + 0x90]
mov eax, dword [0x140061be0]
mov ecx, dword [0x14005f488]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x14000f10a
lea rcx, [0x140061be0]
call fcn.14002687c
cmp dword [0x140061be0], 0xffffffff
jne 0x14000f10a
lea rcx, str.kernelbase.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x140061bd0], rax
mov qword [0x140061bd8], 0
test rax, rax
je 0x14000f0fe
lea rdx, str.VirtualAlloc2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140061bd8], rax
test rax, rax
jne 0x14000f0fe
mov rcx, qword [0x140061bd0]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140061bd0], 0
lea rcx, [0x140061be0]
call fcn.14002681c
mov rax, qword [0x140061bd8]
mov ebp, ebx
test rax, rax
jne 0x14001051e
lea rbx, [rsi + 1]
add r15, rdi
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rdi
call fcn.140012140
test rax, rax
je 0x140010375
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000e9d3
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rdi
call fcn.140012140
test rax, rax
je 0x140010375
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000e9d3
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rdi
call fcn.140012140
test rax, rax
je 0x140010375
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000e9d3
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rdi
call fcn.140012140
test rax, rax
je 0x140010375
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000e9d3
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rdi
call fcn.140012140
test rax, rax
je 0x140010375
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000e9d3
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rdi
call fcn.140012140
test rax, rax
je 0x140010375
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000e9d3
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rdi
call fcn.140012140
test rax, rax
je 0x140010375
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000e9d3
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rdi
call fcn.140012140
test rax, rax
je 0x140010375
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14000e9d3
xor ecx, ecx
mov rdx, rbp
jmp 0x14000e9b8
lea rcx, [0x140061ba4]
call fcn.14002687c
cmp dword [0x140061ba4], 0xffffffff
jne 0x14000e864
lea rcx, [0x140061ba8]
mov edx, 0xfa0
mov r8d, 0x1000000
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
mov byte [0x140061ba0], 1
lea rcx, [0x140061ba4]
call fcn.14002681c
jmp 0x14000e864
lea rcx, [0x140061ba4]
call fcn.14002687c
cmp dword [0x140061ba4], 0xffffffff
jne 0x14000ea58
lea rcx, [0x140061ba8]
mov edx, 0xfa0
mov r8d, 0x1000000
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
mov byte [0x140061ba0], 1
lea rcx, [0x140061ba4]
call fcn.14002681c
jmp 0x14000ea58
xor r14d, r14d
cmp r10d, 0x64
ja 0x14000f7be
test r14b, 1
jne 0x14000f4e2
mov eax, dword [rsp + 0x78]
cmp qword [rsp + 0x58], 0
je 0x140010022
mov ecx, r10d
add rcx, qword [rsp + 0xe0]
mov edx, dword [rsp + 0x80]
cmp eax, edx
jae 0x140010035
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rax], 0xff
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x140010024
mov edx, dword [rsp + 0x80]
cmp eax, edx
jae 0x140010042
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov byte [rdx + rax], 0x25
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x140010026
mov edx, dword [rsp + 0x80]
lea ebp, [rax + 4]
cmp ebp, edx
ja 0x14001004f
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov dword [rdx + rax], 0
mov eax, dword [rsp + 0x78]
add eax, 4
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x140010029
mov edx, dword [rsp + 0x80]
lea ebp, [rax + 8]
cmp ebp, edx
ja 0x14001005c
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov qword [rdx + rax], rcx
add dword [rsp + 0x78], 8
cmp qword [rsp + 0x58], 0
je 0x14000f4e2
mov al, byte [rsp + 0x84]
cmp qword [rsp + 0x68], 0
je 0x14000f7be
cmp qword [rsp + 0x70], 0
je 0x14000f7be
cmp dword [rsp + 0x60], 0
je 0x14000f7be
test al, al
je 0x14000f7be
cmp byte [rsp + 0x84], 0
je 0x14000f7be
cmp qword [rsp + 0x58], 0
je 0x14000f7be
mov r15d, dword [rsp + 0x7c]
add r15, qword [rsp + 0x70]
je 0x14000f7be
lea rcx, [rsp + 0xd8]
lea rdi, [rsp + 0x120]
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call fcn.140011c30
cmp qword [rdi + 0x70], 0
je 0x14000f752
cmp byte [rsp + 0x178], 0
je 0x14000f752
test r12b, r12b
jne 0x140010084
lea r14, [rsp + 0x140]
mov rax, qword [r14 + 8]
cmp rax, qword [r14 + 0x10]
je 0x1400100ae
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0x49
mov rax, qword [rsp + 0x148]
inc rax
mov qword [rsp + 0x148], rax
inc dword [rsp + 0x138]
cmp rax, qword [rsp + 0x150]
je 0x1400100d0
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0xbb
mov rax, qword [rsp + 0x148]
inc rax
mov qword [rsp + 0x148], rax
inc dword [rsp + 0x138]
lea rcx, [rax + 8]
cmp rcx, qword [rsp + 0x150]
ja 0x1400100f2
mov rbp, qword [rsp + 0x48]
mov r8, rbp
shr r8, 8
mov r9, rbp
shr r9, 0x10
mov r10, rbp
shr r10, 0x18
mov rbx, rbp
shr rbx, 0x20
mov rdi, rbp
shr rdi, 0x28
mov rsi, rbp
shr rsi, 0x30
mov rcx, rbp
shr rcx, 0x38
mov rdx, qword [rsp + 0x140]
mov byte [rdx + rax], bpl
mov byte [rdx + rax + 1], r8b
mov byte [rdx + rax + 2], r9b
mov byte [rdx + rax + 3], r10b
mov byte [rdx + rax + 4], bl
mov byte [rdx + rax + 5], dil
mov byte [rdx + rax + 6], sil
mov byte [rdx + rax + 7], cl
mov rax, qword [rsp + 0x148]
add rax, 8
mov qword [rsp + 0x148], rax
add dword [rsp + 0x138], 8
cmp rax, qword [rsp + 0x150]
je 0x140010114
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0x41
mov rax, qword [rsp + 0x148]
inc rax
mov qword [rsp + 0x148], rax
inc dword [rsp + 0x138]
cmp rax, qword [rsp + 0x150]
je 0x140010136
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0xff
mov rax, qword [rsp + 0x148]
inc rax
mov qword [rsp + 0x148], rax
inc dword [rsp + 0x138]
cmp rax, qword [rsp + 0x150]
je 0x140010158
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0xe3
inc qword [rsp + 0x148]
inc dword [rsp + 0x138]
cmp qword [rsp + 0x190], 0
je 0x14000f752
cmp byte [rsp + 0x178], 0
je 0x14000f752
mov r8, qword [rsp + 0x148]
test r8, r8
je 0x14000f74a
mov rdx, qword [rsp + 0x140]
mov ecx, dword [rsp + 0x13c]
add rcx, qword [rsp + 0x128]
call sub.ntdll.dll_memcpy
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov eax, dword [rsp + 0x148]
add dword [rsp + 0x13c], eax
mov qword [rsp + 0x148], 0
mov rax, qword [rsp + 0x38]
mov qword [rax], r15
mov eax, dword [0x14005fd2c]
mov ecx, dword [0x14005f488]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000f91d
mov rsi, qword [rsp + 0x188]
mov rbp, qword [rsp + 0x190]
test rbp, rbp
jne 0x14000f84b
lea rax, [rsp + 0x1a0]
mov qword [rax - 0x10], 0
cmp rsi, rax
jne 0x14001006b
lea rax, [rsp + 0x158]
mov rcx, qword [rax - 0x18]
cmp rcx, rax
jne 0x140010079
mov rax, qword [rsp + 0x38]
cmp qword [rax], 0
je 0x14000ffdf
mov rax, qword [rsp + 0x38]
cmp qword [rax], 0
setne sil
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x14000f7fd
mov r8d, dword [rsp + 0x60]
test r8d, r8d
je 0x14000f7fd
lea r9, [rsp + 0x60]
mov edx, dword [r9 + 0x20]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp byte [rsp + 0xb8], 0
je 0x14000f825
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x14000f825
mov r8d, dword [rsp + 0x90]
test r8d, r8d
jne 0x14000ff96
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.140027a90
mov eax, esi
add rsp, 0x1c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
shl rbp, 4
add rbp, rsi
mov edi, dword [0x14005fd28]
lea r14, [rsp + 0xf0]
mov rbx, qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r8d, dword [rsi]
mov rcx, qword [rsi + 8]
mov rdx, rdi
mov r9, r14
call rbx
add rsi, 0x10
cmp rsi, rbp
jne 0x14000f867
mov rsi, qword [rsp + 0x188]
jmp 0x14000f790
lea rcx, [0x14005fd34]
call fcn.14002687c
cmp dword [0x14005fd34], 0xffffffff
jne 0x14000e81e
lea rbp, [rsp + 0x120]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbp + 0x28]
mov dword [0x14005fd30], eax
lea rcx, [0x14005fd34]
call fcn.14002681c
jmp 0x14000e81e
lea rcx, [0x14005fd34]
call fcn.14002687c
cmp dword [0x14005fd34], 0xffffffff
jne 0x14000e982
lea rdi, [rsp + 0x120]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rdi + 0x28]
mov dword [0x14005fd30], eax
lea rcx, [0x14005fd34]
call fcn.14002681c
jmp 0x14000e982
lea r14, [rsi + 0x10]
jmp 0x14000e9d7
lea rcx, [0x14005fd2c]
call fcn.14002687c
cmp dword [0x14005fd2c], 0xffffffff
jne 0x14000f777
lea rsi, [rsp + 0xf0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsi + 4]
mov dword [0x14005fd28], eax
lea rcx, [0x14005fd2c]
call fcn.14002681c
jmp 0x14000f777
mov cl, byte [rdx + rax + 1]
and cl, 0xf8
cmp cl, 0xe8
jne 0x14000f7be
lea ecx, [r9 + 6]
cmp qword [rsp + 0x58], 0
je 0x140010b8e
cmp ecx, dword [rsp + 0x80]
ja 0x140010b97
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, r9d
movzx ebp, word [rdx + 4]
mov word [rax + rcx + 4], bp
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 6
mov eax, dword [rsp + 0xe8]
add eax, 6
jmp 0x14000edd7
cmp cl, 0x80
je 0x140010ba4
cmp cl, 0x90
je 0x14000ee1a
cmp cl, 0x65
je 0x140010c09
mov ebx, ecx
and bl, 0xf8
cmp bl, 0xb8
je 0x140010f89
cmp cl, 0xd0
jg 0x14000fa80
cmp cl, 0xc2
jg 0x14000fadf
cmp cl, 0x83
je 0x140011275
cmp cl, 0x85
jne 0x14000fb00
mov rbp, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.14004f280
test eax, eax
jns 0x140010942
jmp 0x14000f7be
mov eax, 3
cmp byte [rdi + 2], 0x25
mov rcx, rdi
jne 0x14000e7b7
lea rcx, [rdi + rax]
movsxd rax, dword [rdi + rax]
mov rcx, qword [rax + rcx + 4]
jmp 0x14000e7b7
cmp al, 0xff
jne 0x140010d5f
cmp byte [rdi + 1], 0x25
mov rcx, rdi
jne 0x14000e7b7
mov eax, 2
jmp 0x14000fa52
cmp cl, 0xf5
jg 0x14000faf2
cmp cl, 0xd1
je 0x1400112af
lea ebp, [rcx + 0x18]
cmp bpl, 2
jae 0x14000fb00
xor r14d, r14d
cmp cl, 0xe9
sete r14b
lea rcx, [rax + 1]
mov dword [rsp + 0xe8], ecx
mov r8d, 4
sub r8d, r14d
lea rcx, [rdx + rax]
inc rcx
movsxd rax, dword [rdx + rax + 1]
lea rdx, [rax + rcx]
add rdx, 4
add r10d, 5
mov dword [rsp + 0xe8], r10d
lea rcx, [rsp + 0x58]
jmp 0x140010258
cmp cl, 0xc3
je 0x14000ee1a
cmp cl, 0xcc
jne 0x14000fb00
jmp 0x14000ee1a
cmp cl, 0xf6
je 0x1400112bf
cmp cl, 0x33
je 0x14000fb37
lea ebp, [rcx - 0x73]
cmp bpl, 2
jbe 0x140010c51
cmp cl, 0xff
jne 0x140010c8d
mov r8b, byte [rdx + rax + 1]
mov ecx, r8d
shr cl, 3
and cl, 7
cmp r8b, 0xc0
jb 0x140010cf2
cmp cl, 6
jne 0x140010d48
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 2]
cmp qword [rsp + 0x58], 0
je 0x140010c84
cmp ebp, dword [rsp + 0x80]
ja 0x14000fddc
mov rbp, qword [rsp + 0x68]
movzx eax, word [rdx + rax]
mov word [rbp + rcx], ax
add dword [rsp + 0x78], 2
mov r10d, dword [rsp + 0xe8]
add r10d, 2
jmp 0x14000ee55
mov cl, byte [rdx + rax]
cmp cl, 0xcc
je 0x14000fb8c
cmp cl, 0x90
jne 0x14001108c
inc rax
mov dword [rsp + 0xe8], eax
cmp rax, r13
jb 0x14000fb7b
mov r10d, eax
jmp 0x14000f3c2
mov ecx, dword [rsp + 0x78]
lea edi, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x14000fcd7
cmp edi, dword [rsp + 0x80]
jbe 0x14000fe42
mov byte [rsp + 0x84], 0
mov edi, ecx
jmp 0x14000fcdb
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x14000fd58
cmp ebp, dword [rsp + 0x80]
jbe 0x14000fe6d
mov byte [rsp + 0x84], 0
jmp 0x14000fe85
mov ebp, dword [rsp + 0x78]
lea ecx, [rbp + 1]
cmp qword [rsp + 0x58], 0
je 0x14000fd61
cmp ecx, dword [rsp + 0x80]
jbe 0x14000ff02
mov byte [rsp + 0x84], 0
mov ecx, ebp
jmp 0x14000fd65
mov ebp, dword [rsp + 0x78]
lea ecx, [rbp + 1]
cmp qword [rsp + 0x58], 0
je 0x14000fda6
cmp ecx, dword [rsp + 0x80]
jbe 0x14000ff2c
mov byte [rsp + 0x84], 0
mov ecx, ebp
jmp 0x14000fdaa
mov dword [rsp + 0x78], r9d
jmp 0x14000ed2b
mov byte [rsp + 0x84], 0
mov r9d, ecx
jmp 0x14000ed2b
int3
mov ecx, ebx
and cl, 0xf8
cmp cl, 0xb8
jne 0x14000fdf2
lea ecx, [r9 + 9]
cmp qword [rsp + 0x58], 0
je 0x140010350
cmp ecx, dword [rsp + 0x80]
jbe 0x1400103e8
mov byte [rsp + 0x84], 0
jmp 0x140010354
mov dword [rsp + 0x78], ecx
jmp 0x14000edd5
mov byte [rsp + 0x84], 0
jmp 0x14000edd5
xor esi, esi
jmp 0x14000f825
mov dword [rsp + 0x78], edi
lea eax, [r10 + 1]
mov dword [rsp + 0xe8], eax
mov cl, byte [rdx + rax]
lea ebp, [rcx - 0x10]
cmp bpl, 2
jb 0x14000fd2f
cmp cl, 5
je 0x1400101e0
cmp cl, 0x1f
jne 0x140010209
lea ecx, [rdi + 1]
cmp qword [rsp + 0x58], 0
je 0x140010725
cmp ecx, dword [rsp + 0x80]
jbe 0x14001077a
mov byte [rsp + 0x84], 0
mov ecx, edi
jmp 0x140010729
lea ecx, [rdi + 1]
cmp qword [rsp + 0x58], 0
je 0x140010320
cmp ecx, dword [rsp + 0x80]
jbe 0x140010336
mov byte [rsp + 0x84], 0
jmp 0x140010324
mov dword [rsp + 0x78], ebp
jmp 0x14000fe85
mov dword [rsp + 0x78], ecx
inc r10d
mov dword [rsp + 0xe8], r10d
cmp byte [rdx + r10], 0x89
jne 0x14000f7be
lea eax, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x14000fde9
cmp eax, dword [rsp + 0x80]
ja 0x14000fbf2
mov rax, qword [rsp + 0x68]
mov ecx, ecx
mov dl, byte [rdx + r10]
mov byte [rax + rcx], dl
jmp 0x14000fe79
mov dword [rsp + 0x78], ecx
inc r10d
mov dword [rsp + 0xe8], r10d
cmp byte [rdx + r10], 0x33
jne 0x14000f7be
lea eax, [rcx + 2]
cmp qword [rsp + 0x58], 0
je 0x14001099e
cmp eax, dword [rsp + 0x80]
jbe 0x14000ff56
mov byte [rsp + 0x84], 0
jmp 0x14000fb72
mov dword [rsp + 0x78], eax
jmp 0x14000fe85
cmp bl, 0xfe
jg 0x1400102b1
cmp bl, 0x8d
je 0x140010587
cmp bl, 0xc7
jne 0x14000f7be
cmp byte [rdx + rax + 1], 0x44
jne 0x14000f7be
lea ecx, [r9 + 8]
cmp qword [rsp + 0x58], 0
je 0x140010a2a
cmp ecx, dword [rsp + 0x80]
jbe 0x140010a36
mov byte [rsp + 0x84], 0
jmp 0x140010a2e
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov edi, dword [rsp + 0x78]
inc edi
mov dword [rsp + 0x78], edi
mov r10d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x14000fcdb
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
inc dword [rsp + 0x78]
mov r10d, dword [rsp + 0xe8]
inc r10d
lea rcx, [rsp + 0xd8]
mov dword [rcx + 0x10], r10d
xor edx, edx
call fcn.14004f280
test eax, eax
js 0x14000f7be
mov edi, eax
mov edx, dword [rsp + 0xe8]
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rdi]
cmp qword [rsp + 0x58], 0
je 0x14000fece
cmp eax, dword [rsp + 0x80]
jbe 0x14000fee0
mov byte [rsp + 0x84], 0
jmp 0x14000fed2
mov dword [rsp + 0x78], eax
add edx, edi
mov dword [rsp + 0xe8], edx
jmp 0x14000edde
add rdx, qword [rsp + 0xe0]
mov r8d, edi
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], edi
mov edx, dword [rsp + 0xe8]
jmp 0x14000fed2
mov rcx, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
mov r10d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x14000fd65
mov rcx, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
mov r10d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x14000fdaa
mov rax, qword [rsp + 0x68]
mov ecx, ecx
movzx edx, word [rdx + r10]
mov word [rax + rcx], dx
jmp 0x14000fb65
mov qword [rsp + 0xd8], r13
mov qword [rsp + 0xe0], rsi
mov dword [rsp + 0xe8], 0
jmp 0x14000e7ef
int3
lea r9, [rsp + 0x90]
mov edx, dword [r9 + 0x20]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x14000f825
mov dword [rsp + 0x78], edx
jmp 0x14000eb9d
mov byte [rsp + 0x84], 0
xor eax, eax
jmp 0x14000eb72
mov dword [rsp + 0x78], ecx
jmp 0x14000ec20
mov byte [rsp + 0x84], 0
xor eax, eax
mov ecx, edx
jmp 0x14000ebf5
mov dword [rsp + 0x78], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsp + 0x78]
lea edx, [rcx + 8]
cmp qword [rsp + 0x58], 0
je 0x1400115d5
cmp edx, dword [rsp + 0x80]
ja 0x1400115de
mov rdx, qword [rsp + 0x68]
mov qword [rdx + rcx], rax
add dword [rsp + 0x78], 8
jmp 0x14000f7cd
inc eax
inc eax
add eax, 4
add eax, 8
mov dword [rsp + 0x78], eax
jmp 0x14000f4e2
mov byte [rsp + 0x84], 0
jmp 0x14000f426
mov byte [rsp + 0x84], 0
jmp 0x14000f456
mov byte [rsp + 0x84], 0
jmp 0x14000f48d
mov byte [rsp + 0x84], 0
xor eax, eax
jmp 0x14000f4b7
mov rcx, rsi
call qword [sym.imp.mozglue.dll_free]
jmp 0x14000f7a9
call qword [sym.imp.mozglue.dll_free]
jmp 0x14000f7be
lea rcx, [rsp + 0xc0]
lea r8, [rsp + 0x120]
mov rdx, r15
mov r9, qword [rsp + 0x48]
call fcn.14004f620
test al, al
jne 0x14000f6de
jmp 0x14000f752
mov edx, 1
mov rcx, r14
call fcn.140015630
test al, al
je 0x14001155f
mov rax, qword [rsp + 0x148]
jmp 0x14000f562
mov edx, 1
mov rcx, r14
call fcn.140015630
test al, al
je 0x140011574
mov rax, qword [rsp + 0x148]
jmp 0x14000f596
mov edx, 8
mov rcx, r14
call fcn.140015630
test al, al
je 0x140011589
mov rax, qword [rsp + 0x148]
jmp 0x14000f5ce
mov edx, 1
mov rcx, r14
call fcn.140015630
test al, al
je 0x14001159e
mov rax, qword [rsp + 0x148]
jmp 0x14000f65b
mov edx, 1
mov rcx, r14
call fcn.140015630
test al, al
je 0x1400115b3
mov rax, qword [rsp + 0x148]
jmp 0x14000f68f
mov edx, 1
mov rcx, r14
call fcn.140015630
test al, al
je 0x1400115c8
mov rax, qword [rsp + 0x148]
jmp 0x14000f6c3
mov bl, byte [rdx + rax + 0xa]
cmp bl, 0x50
je 0x140010656
cmp bl, 0xff
jne 0x14000ec40
cmp byte [rdx + rax + 0xb], 0xe0
jne 0x14000ec40
jmp 0x140010661
test ecx, ecx
jne 0x1400103de
mov ecx, ebx
and cl, 7
cmp cl, 5
je 0x1400109a7
mov ebp, 1
cmp cl, 4
jne 0x14000ed88
mov cl, byte [rdx + rsi + 1]
and cl, 7
xor ebp, ebp
cmp cl, 5
sete bpl
lea ebp, [rbp*4 + 1]
jmp 0x14000ed88
lea ecx, [rdi + 1]
cmp qword [rsp + 0x58], 0
je 0x140010766
cmp ecx, dword [rsp + 0x80]
jbe 0x1400107a2
mov byte [rsp + 0x84], 0
jmp 0x14001076a
movzx eax, cl
lea ecx, [rax + 0x7d]
cmp cl, 2
ja 0x14000f7be
lea rcx, [0x1400513c0]
mov r8d, dword [rcx + rax*4 - 0x20c]
lea eax, [r10 + 2]
mov dword [rsp + 0xe8], eax
dec edi
lea rcx, [rsp + 0x58]
mov dword [rcx + 0x20], edi
lea rbp, [rdx + rax]
movsxd rax, dword [rdx + rax]
lea rdx, [rax + rbp]
add rdx, 4
add r10d, 6
mov dword [rsp + 0xe8], r10d
call fcn.14004f310
test al, al
jne 0x14000edde
jmp 0x14000f7be
int3
mov byte [rsp + 0x84], 0
jmp 0x14000ee52
mov ecx, dword [rsp + 0x78]
lea edi, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x1400107bc
cmp edi, dword [rsp + 0x80]
jbe 0x140010895
mov byte [rsp + 0x84], 0
mov edi, ecx
jmp 0x1400107c0
cmp bl, 0xff
je 0x140010605
cmp bl, 0x63
jne 0x14000f7be
cmp byte [rdx + rax + 1], 0xc0
jb 0x14000f7be
lea ecx, [r9 + 2]
cmp qword [rsp + 0x58], 0
je 0x1400102ed
cmp ecx, dword [rsp + 0x80]
jbe 0x1400102f9
mov byte [rsp + 0x84], 0
jmp 0x1400102f1
mov dword [rsp + 0x78], ecx
add eax, 2
jmp 0x14000edd7
mov rcx, qword [rsp + 0x68]
mov ebp, r9d
movzx eax, word [rdx + rax]
mov word [rcx + rbp], ax
add dword [rsp + 0x78], 2
mov eax, dword [rsp + 0xe8]
jmp 0x1400102f1
mov dword [rsp + 0x78], ebp
jmp 0x14000ee52
mov dword [rsp + 0x78], ecx
inc eax
lea rcx, [rsp + 0xd8]
mov dword [rcx + 0x10], eax
jmp 0x14000fe94
mov rcx, qword [rsp + 0x68]
mov ebp, edi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
inc dword [rsp + 0x78]
mov eax, dword [rsp + 0xe8]
jmp 0x140010324
mov dword [rsp + 0x78], ecx
add eax, 9
jmp 0x14000edd7
mov rcx, rdi
call fcn.14004f0d0
test al, al
cmovne rsi, rdi
jmp 0x14000e7c5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsi + 8], 0
xor ebx, ebx
mov dword [rsp + 0x123], ebx
mov dword [rsp + 0x120], ebx
mov dil, 1
xor esi, esi
xor ebp, ebp
jmp 0x14000e9e9
mov dword [rsp + 0x78], ecx
jmp 0x14000eeb4
cmp cl, 0xc0
je 0x14000ee72
cmp cl, 0x60
jne 0x14000f7be
lea ecx, [r9 + 5]
cmp qword [rsp + 0x58], 0
je 0x140010b82
cmp ecx, dword [rsp + 0x80]
jbe 0x140010d9f
mov byte [rsp + 0x84], 0
jmp 0x140010b86
mov ebp, 5
jmp 0x14000ed88
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, r9d
mov bl, byte [rdx + 8]
mov byte [rax + rcx + 8], bl
mov rdx, qword [rdx]
mov qword [rax + rcx], rdx
add dword [rsp + 0x78], 9
mov eax, dword [rsp + 0xe8]
jmp 0x140010354
jne 0x14000efb3
cmp qword [rbp + rdi*8 + 8], rax
jb 0x14000efa4
jmp 0x14000efb3
cmp qword [rbp], r15
ja 0x14000efcc
mov rax, qword [rsp + 0x40]
cmp qword [rbp + 8], rax
jae 0x14000e938
jmp 0x14000efcc
lea rbp, [r14 + r14*2]
movups xmm0, xmmword [rax + rbp*8 - 0x18]
movaps xmmword [rsp + 0x120], xmm0
mov rcx, qword [rax + rbp*8 - 8]
mov qword [rsp + 0x50], rcx
mov qword [rax + rbp*8 - 8], 0
mov rax, qword [rsi + 8]
cmp rax, qword [rsi + 0x10]
jne 0x140010480
mov rcx, rsi
call fcn.1400117f0
mov rax, qword [rsi + 8]
mov rcx, qword [rsi]
lea rax, [rax + rax*2]
movaps xmm0, xmmword [rsp + 0x120]
movups xmmword [rcx + rax*8], xmm0
mov rdx, qword [rsp + 0x50]
mov qword [rcx + rax*8 + 0x10], rdx
inc qword [rsi + 8]
dec r14
cmp r14, rbx
jbe 0x1400104eb
lea rbp, [rbp*8 - 8]
mov rax, qword [rsi]
movups xmm0, xmmword [rax + rbp - 0x28]
movups xmmword [rax + rbp - 0x10], xmm0
mov rdx, qword [rax + rbp - 0x18]
mov qword [rax + rbp - 0x18], 0
mov rcx, qword [rax + rbp]
mov qword [rax + rbp], rdx
test rcx, rcx
je 0x1400104df
call qword [sym.imp.mozglue.dll_free]
dec r14
add rbp, 0xffffffffffffffe8
cmp r14, rbx
ja 0x1400104b1
mov rax, qword [rsi]
lea rdx, [rbx + rbx*2]
mov qword [rax + rdx*8], r15
mov rcx, qword [rsp + 0x40]
mov qword [rax + rdx*8 + 8], rcx
mov rcx, qword [rax + rdx*8 + 0x10]
mov qword [rax + rdx*8 + 0x10], rdi
test rcx, rcx
je 0x14000f040
call qword [sym.imp.mozglue.dll_free]
jmp 0x14000f040
lea rcx, [rdi + r15]
dec rcx
lea rdx, [rsp + 0x120]
mov qword [rdx], rdi
mov qword [rdx + 8], rcx
mov qword [rdx + 0x10], 0
lea rcx, [rsp + 0xf0]
mov qword [rcx], 1
mov qword [rcx + 8], rdx
mov edx, 1
mov dword [rsp + 0x30], edx
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edx
mov rcx, r12
xor edx, edx
mov r8, rbp
mov r9d, 0x2000
call qword [case.0x14002713e.0]
mov qword [rsi + 8], rax
test rax, rax
jne 0x14000e9d7
jmp 0x14001037d
mov cl, byte [rdx + rax + 1]
mov eax, ecx
and al, 0xc7
cmp al, 5
jne 0x140010916
lea eax, [r10 + 3]
mov dword [rsp + 0xe8], eax
movsxd rsi, dword [rdx + rax]
add r10d, 7
mov dword [rsp + 0xe8], r10d
cmp qword [rsp + 0x58], 0
je 0x140010b50
mov ebp, dword [rsp + 0x80]
cmp r9d, ebp
jae 0x140010b61
shr cl, 3
or cl, 0xb8
mov rbp, qword [rsp + 0x68]
mov ebx, r9d
mov byte [rbp + rbx], cl
mov r9d, dword [rsp + 0x78]
inc r9d
mov dword [rsp + 0x78], r9d
cmp qword [rsp + 0x58], 0
je 0x140010b53
mov ebp, dword [rsp + 0x80]
jmp 0x140010b69
mov al, byte [rdx + rax + 1]
and al, 0xc7
cmp al, 5
jne 0x14000f7be
lea eax, [r10 + 3]
mov dword [rsp + 0xe8], eax
dec r9d
lea rcx, [rsp + 0x58]
mov dword [rcx + 0x20], r9d
lea rbp, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r10d, 7
mov dword [rsp + 0xe8], r10d
mov rdx, qword [rax + rbp + 4]
mov r8d, 3
call fcn.14004f310
mov r14b, 1
jmp 0x14001025d
cmp byte [rdx + rax + 0xb], 0xc3
jne 0x14000ec40
add eax, 2
mov rdi, qword [rdx + rax]
lea rcx, [rsp + 0xd8]
lea rsi, [rsp + 0x120]
mov rdx, rsi
mov r8d, 8
mov r9b, 2
call fcn.140011c30
xor ebx, ebx
cmp qword [rsi + 0x70], 0
je 0x140010a7c
cmp byte [rsp + 0x178], 0
je 0x140010a7c
lea rsi, [rsp + 0x120]
mov rcx, rsi
mov rdx, qword [rsp + 0x48]
call fcn.140030d10
mov rcx, rsi
call fcn.14004f9e0
test al, al
je 0x140010a7a
mov eax, dword [rsp + 0x78]
lea ecx, [rax + 8]
cmp qword [rsp + 0x58], 0
je 0x140010e03
cmp ecx, dword [rsp + 0x80]
jbe 0x140010ed3
mov byte [rsp + 0x84], 0
xor eax, eax
xor ebx, ebx
cmp qword [rsp + 0x68], 0
je 0x140010a7c
cmp qword [rsp + 0x70], 0
je 0x140010a7c
cmp dword [rsp + 0x60], 0
je 0x140010a7c
test al, al
jne 0x140010e07
jmp 0x140010a7c
mov dword [rsp + 0x78], ecx
inc eax
mov dword [rsp + 0xe8], eax
mov bl, byte [rdx + rax]
and bl, 0xc7
cmp bl, 0x44
jne 0x14000f7be
lea ebp, [rcx + 3]
cmp qword [rsp + 0x58], 0
je 0x140010771
cmp ebp, dword [rsp + 0x80]
jbe 0x140010886
mov byte [rsp + 0x84], 0
jmp 0x14000eeb4
mov dword [rsp + 0x78], ecx
inc eax
jmp 0x14000edd7
mov dword [rsp + 0x78], ebp
jmp 0x14000eeb4
mov rcx, qword [rsp + 0x68]
mov ebp, edi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
mov eax, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x140010729
mov rcx, qword [rsp + 0x68]
mov ebp, edi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
inc dword [rsp + 0x78]
mov eax, dword [rsp + 0xe8]
jmp 0x14001076a
mov dword [rsp + 0x78], edi
inc r10d
mov dword [rsp + 0xe8], r10d
mov al, byte [rdx + r10]
mov ecx, eax
and cl, 0xfc
cmp cl, 0x88
jne 0x140010849
movzx ebp, byte [rdx + r10 + 1]
mov eax, ebp
and eax, 0xffffffc0
cmp al, 0xc0
je 0x14001097a
cmp al, 0x40
je 0x14001080f
test al, al
jne 0x14000f7be
mov ecx, ebp
and ecx, 6
cmp ecx, 4
jne 0x14001097a
cmp eax, 0x40
jne 0x14000f7be
and ebp, 7
add rdx, r10
mov rax, qword [rsp + 0x58]
cmp ebp, 4
jne 0x140010a54
lea ecx, [rdi + 4]
test rax, rax
je 0x140010de9
cmp ecx, dword [rsp + 0x80]
jbe 0x140010e8e
mov byte [rsp + 0x84], 0
jmp 0x140010ded
cmp al, 0x44
jne 0x14000edde
cmp byte [rdx + r10 + 1], 0x89
jne 0x14000edde
lea eax, [rdi + 2]
cmp qword [rsp + 0x58], 0
je 0x140010ddc
cmp eax, dword [rsp + 0x80]
jbe 0x140010e6c
mov byte [rsp + 0x84], 0
jmp 0x140010de0
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, ecx
jmp 0x14000ee9a
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov edi, dword [rsp + 0x78]
inc edi
mov dword [rsp + 0x78], edi
mov r10d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x1400107c0
mov dword [rsp + 0x78], ecx
jmp 0x14000ef01
mov byte [rsp + 0x84], 0
mov ecx, ebp
jmp 0x14000ef01
mov dword [rsp + 0x78], eax
jmp 0x14000ee52
and bl, 0xf8
cmp bl, 0xb8
jne 0x14000f7be
lea eax, [rcx + 5]
cmp qword [rsp + 0x58], 0
je 0x140010ad9
cmp eax, dword [rsp + 0x80]
jbe 0x140010adf
mov byte [rsp + 0x84], 0
jmp 0x140010b02
add r10d, 2
mov rax, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rax
add rdx, r10
mov qword [rcx + 8], rdx
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.14004f280
lea edi, [rax + 1]
mov edx, dword [rsp + 0xe8]
cmp qword [rsp + 0x58], 0
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rax + 1]
je 0x140010ce7
cmp eax, dword [rsp + 0x80]
jbe 0x140010ab4
mov byte [rsp + 0x84], 0
jmp 0x140010ceb
lea eax, [rdi + 2]
cmp qword [rsp + 0x58], 0
je 0x14001099e
cmp eax, dword [rsp + 0x80]
ja 0x14000fddc
mov rax, qword [rsp + 0x68]
mov ecx, edi
jmp 0x14000ff5d
mov dword [rsp + 0x78], eax
jmp 0x14000fb72
shr bl, 3
lea ecx, [r10 + 3]
lea rbp, [rdx + rcx]
add r10d, 7
mov eax, ebx
mov dword [rsp + 0xe8], ecx
movsxd rcx, dword [rdx + rcx]
lea rdx, [rcx + rbp]
add rdx, 4
mov dword [rsp + 0xe8], r10d
and al, 7
je 0x140010b0b
cmp qword [rsp + 0x58], 0
je 0x140010dc7
mov ecx, dword [rsp + 0x80]
cmp r9d, ecx
jae 0x140010e16
or bl, 0xb8
mov rcx, qword [rsp + 0x68]
mov ebp, r9d
mov byte [rcx + rbp], bl
mov r9d, dword [rsp + 0x78]
inc r9d
mov dword [rsp + 0x78], r9d
cmp qword [rsp + 0x58], 0
je 0x140010dca
mov ecx, dword [rsp + 0x80]
jmp 0x140010e1e
mov dword [rsp + 0x78], ecx
add eax, 8
jmp 0x14000edd7
mov rcx, qword [rsp + 0x68]
mov ebp, r9d
mov rax, qword [rdx + rax]
mov qword [rcx + rbp], rax
add dword [rsp + 0x78], 8
mov eax, dword [rsp + 0xe8]
jmp 0x140010a2e
lea ecx, [rdi + 3]
test rax, rax
je 0x140010df6
cmp ecx, dword [rsp + 0x80]
jbe 0x140010eac
mov byte [rsp + 0x84], 0
jmp 0x140010dfa
xor ebx, ebx
lea rsi, [rsp + 0x180]
mov rcx, rsi
call fcn.14004fb30
mov rcx, qword [rsi - 0x40]
lea rax, [rsp + 0x158]
cmp rcx, rax
je 0x140010aa3
call qword [sym.imp.mozglue.dll_free]
test bl, bl
jne 0x14000f7be
mov ecx, dword [rsp + 0x78]
jmp 0x14000ec40
add rdx, qword [rsp + 0xe0]
mov r8d, edi
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], edi
mov edx, dword [rsp + 0xe8]
jmp 0x140010ceb
mov dword [rsp + 0x78], eax
jmp 0x140010b02
add rdx, r10
mov rax, qword [rsp + 0x68]
mov ecx, ecx
mov bl, byte [rdx + 4]
mov byte [rax + rcx + 4], bl
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 5
mov r10d, dword [rsp + 0xe8]
add r10d, 5
jmp 0x14000ee55
cmp qword [rsp + 0x58], 0
je 0x140010b50
mov eax, dword [rsp + 0x80]
cmp r9d, eax
jae 0x1400110fd
mov rax, qword [rsp + 0x68]
mov ecx, r9d
mov byte [rax + rcx], 0xa1
mov r9d, dword [rsp + 0x78]
inc r9d
mov dword [rsp + 0x78], r9d
cmp qword [rsp + 0x58], 0
je 0x140010b53
mov eax, dword [rsp + 0x80]
jmp 0x140011105
inc r9d
add r9d, 8
mov dword [rsp + 0x78], r9d
jmp 0x14000edde
mov byte [rsp + 0x84], 0
lea ecx, [r9 + 8]
cmp ecx, ebp
jbe 0x140010d7e
mov byte [rsp + 0x84], 0
jmp 0x14000edde
mov dword [rsp + 0x78], ecx
add eax, 5
jmp 0x14000edd7
mov dword [rsp + 0x78], ecx
jmp 0x14000f9b3
mov byte [rsp + 0x84], 0
jmp 0x14000f9b3
cmp byte [rdx + rax + 1], 0x3d
jne 0x14000f7be
add r10d, 2
mov dword [rsp + 0xe8], r10d
mov rcx, qword [rsp + 0x58]
mov eax, dword [rsp + 0x78]
test rcx, rcx
je 0x140011122
mov edx, dword [rsp + 0x80]
cmp eax, edx
jae 0x1400111e1
mov rcx, qword [rsp + 0x68]
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140011124
mov edx, dword [rsp + 0x80]
jmp 0x1400111e9
cmp byte [rdx + rax + 1], 0x48
jne 0x14000f7be
mov cl, byte [rdx + rax + 2]
and cl, 0xfc
cmp cl, 0x88
jne 0x14000f7be
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 3]
cmp qword [rsp + 0x58], 0
je 0x1400111a9
cmp ebp, dword [rsp + 0x80]
jbe 0x14001124d
mov byte [rsp + 0x84], 0
jmp 0x1400111ad
lea rbp, [0x1400513c0]
mov r8d, dword [rbp + rcx*4 - 0x1cc]
movzx eax, byte [rdx + rax + 1]
add r10d, 2
mov dword [rsp + 0xe8], r10d
add r10, rdx
add r10, rax
lea rcx, [rsp + 0x58]
mov rdx, r10
jmp 0x140010258
mov dword [rsp + 0x78], ebp
jmp 0x14000fb72
cmp cl, 0xc6
jne 0x140010f70
mov rbp, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.14004f280
test eax, eax
js 0x14000f7be
lea edi, [rax + 2]
mov edx, dword [rsp + 0xe8]
cmp qword [rsp + 0x58], 0
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rax + 2]
jne 0x140010960
mov dword [rsp + 0x78], eax
add edx, edi
jmp 0x14000fed4
mov ebx, r8d
and bl, 7
cmp bl, 5
jne 0x140010f2f
cmp r8b, 0x3f
ja 0x140010f2f
cmp cl, 2
jne 0x140010f2f
lea eax, [r10 + 2]
mov dword [rsp + 0xe8], eax
lea rcx, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r10d, 6
mov dword [rsp + 0xe8], r10d
mov rdx, qword [rax + rcx + 4]
lea rcx, [rsp + 0x58]
mov r8d, 4
jmp 0x140010258
cmp cl, 4
je 0x140010f38
cmp cl, 2
ja 0x14000f7be
jmp 0x14000fb37
mov rbp, rbx
cmp al, 0xe9
jne 0x140011026
movsxd rax, dword [rdi + 1]
lea rcx, [rdi + rax]
add rcx, 5
mov rbx, rbp
jmp 0x14000e7b7
add rdx, rax
lea rax, [rsi + rdx]
add rax, 4
mov rcx, qword [rsp + 0x68]
mov edx, r9d
mov qword [rcx + rdx], rax
add dword [rsp + 0x78], 8
jmp 0x14000edde
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, r9d
mov bl, byte [rdx + 4]
mov byte [rax + rcx + 4], bl
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 5
mov eax, dword [rsp + 0xe8]
jmp 0x140010b86
inc r9d
add r9d, 8
inc r9d
inc r9d
inc r9d
jmp 0x140010b57
mov dword [rsp + 0x78], eax
add r10d, 2
jmp 0x14000fe88
mov dword [rsp + 0x78], ecx
add r10d, 4
jmp 0x14000ee55
mov dword [rsp + 0x78], ecx
add r10d, 3
jmp 0x14000ee55
mov dword [rsp + 0x78], ecx
mov rax, qword [rsp + 0x38]
mov qword [rax], rdi
mov bl, 1
jmp 0x140010a7c
mov byte [rsp + 0x84], 0
lea ebp, [r9 + 8]
cmp ebp, ecx
jbe 0x140010efd
mov byte [rsp + 0x84], 0
cmp r9d, ecx
jae 0x1400110bb
mov rcx, qword [rsp + 0x68]
mov edx, r9d
mov byte [rcx + rdx], 0x48
mov r9d, dword [rsp + 0x78]
inc r9d
mov dword [rsp + 0x78], r9d
cmp qword [rsp + 0x58], 0
je 0x140010dd1
mov ecx, dword [rsp + 0x80]
jmp 0x1400110c3
mov rax, qword [rsp + 0x68]
mov ecx, edi
movzx edx, word [rdx + r10]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 2
mov r10d, dword [rsp + 0xe8]
jmp 0x140010de0
mov rax, qword [rsp + 0x68]
mov ecx, edi
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 4
mov r10d, dword [rsp + 0xe8]
jmp 0x140010ded
mov rax, qword [rsp + 0x68]
mov ecx, edi
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 3
mov r10d, dword [rsp + 0xe8]
jmp 0x140010dfa
mov rcx, qword [rsp + 0x68]
mov qword [rcx + rax], rdi
add dword [rsp + 0x78], 8
cmp qword [rsp + 0x58], 0
je 0x140010e07
cmp byte [rsp + 0x84], 0
setne al
jmp 0x1400106f3
mov rcx, qword [rsp + 0x68]
mov ebp, r9d
mov qword [rcx + rbp], rdx
mov r9d, dword [rsp + 0x78]
add r9d, 8
mov dword [rsp + 0x78], r9d
cmp qword [rsp + 0x58], 0
je 0x140010dce
mov ecx, dword [rsp + 0x80]
jmp 0x140010e32
cmp cl, 4
jne 0x14000f7be
and r8b, 0xc7
cmp r8b, 5
jne 0x140010fbb
lea eax, [r10 + 2]
mov dword [rsp + 0xe8], eax
lea rcx, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r10d, 6
mov dword [rsp + 0xe8], r10d
mov rdx, qword [rax + rcx + 4]
lea rcx, [rsp + 0x58]
jmp 0x140010643
cmp cl, 0x83
jne 0x14000f7be
mov cl, byte [rdx + rax + 1]
and cl, 0xf8
cmp cl, 0x60
jne 0x14000f7be
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 5]
cmp qword [rsp + 0x58], 0
je 0x140010fb2
cmp ebp, dword [rsp + 0x80]
ja 0x140010909
add rdx, rax
mov rax, qword [rsp + 0x68]
jmp 0x140010ae9
mov dword [rsp + 0x78], ebp
jmp 0x140010b02
mov rbp, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.14004f280
test eax, eax
js 0x14000f7be
lea esi, [rax + 1]
mov edx, dword [rsp + 0xe8]
cmp qword [rsp + 0x58], 0
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rax + 1]
je 0x140011398
cmp eax, dword [rsp + 0x80]
jbe 0x1400113e3
mov byte [rsp + 0x84], 0
jmp 0x14001139c
mov rcx, rdi
cmp al, 0xeb
mov rbx, rbp
jne 0x14000e7b7
movsx rax, byte [rdi + 1]
lea r14, [rdi + rax]
add r14, 2
mov eax, r14d
sub eax, edi
shl eax, 0x18
add eax, 0xfe000000
mov edx, eax
sar edx, 0x18
test eax, eax
js 0x1400114b7
mov rcx, rdi
mov rbx, rbp
je 0x14000e7b7
xor eax, eax
lea ecx, [rax + 2]
mov cl, byte [rdi + rcx]
cmp cl, 0x90
jne 0x14001107d
inc al
movsx eax, al
cmp edx, eax
jg 0x140011069
cmp cl, 0x90
cmovne r14, rdi
mov rcx, r14
jmp 0x140010d76
lea rcx, [rsp + 0xc0]
call fcn.14004f230
test al, al
je 0x14000f7be
mov r10d, dword [rsp + 0xe8]
mov r12b, 1
cmp r10d, 9
ja 0x14000f3c2
jmp 0x14000f7be
mov byte [rsp + 0x84], 0
cmp r9d, ecx
jae 0x1400111b6
mov rcx, qword [rsp + 0x68]
mov edx, r9d
mov byte [rcx + rdx], 0x8b
mov r9d, dword [rsp + 0x78]
inc r9d
mov dword [rsp + 0x78], r9d
cmp qword [rsp + 0x58], 0
je 0x140010dd4
mov ecx, dword [rsp + 0x80]
jmp 0x1400111be
mov byte [rsp + 0x84], 0
lea ecx, [r9 + 8]
cmp ecx, eax
ja 0x140010b75
mov rax, qword [rsp + 0x68]
mov ecx, r9d
mov qword [rax + rcx], rdx
jmp 0x140010d95
inc eax
inc eax
mov dword [rsp + 0x78], eax
xor ecx, ecx
mov edx, dword [rsp + 0xe8]
mov rbx, qword [rsp + 0xe0]
movsxd rdi, dword [rbx + rdx]
lea ebp, [rdx + 4]
mov dword [rsp + 0xe8], ebp
test rcx, rcx
je 0x140011186
mov ecx, dword [rsp + 0x80]
cmp eax, ecx
jae 0x140011210
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x140011188
mov ecx, dword [rsp + 0x80]
jmp 0x140011218
inc eax
inc eax
add eax, 8
inc eax
inc eax
inc eax
inc eax
inc dword [rsp + 0xe8]
inc eax
inc eax
mov dword [rsp + 0x78], eax
jmp 0x14000edde
mov dword [rsp + 0x78], ebp
add r10d, 3
jmp 0x14000fe88
mov byte [rsp + 0x84], 0
cmp r9d, ecx
jae 0x140010b75
movzx eax, al
lea eax, [rax + rax*8]
mov rcx, qword [rsp + 0x68]
mov edx, r9d
mov byte [rcx + rdx], al
inc dword [rsp + 0x78]
jmp 0x14000edde
mov byte [rsp + 0x84], 0
cmp eax, edx
jae 0x140011310
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x53
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
mov rcx, qword [rsp + 0x58]
jmp 0x14001112c
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x14001131d
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0xbb
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001118a
mov ecx, dword [rsp + 0x80]
jmp 0x140011325
add rdx, rax
mov rax, qword [rsp + 0x68]
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 3
mov r10d, dword [rsp + 0xe8]
jmp 0x1400111ad
mov cl, byte [rdx + rax + 1]
cmp cl, 0xc0
jb 0x140010f7d
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 3]
cmp qword [rsp + 0x58], 0
je 0x140011556
cmp ebp, dword [rsp + 0x80]
ja 0x140010a6d
add rdx, rax
mov rax, qword [rsp + 0x68]
jmp 0x140010eb3
cmp byte [rdx + rax + 1], 0xc0
jae 0x14000fb37
jmp 0x14000f7be
lea rbx, [rsp + 0xf0]
mov byte [rbx], 0
mov rbp, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rbp
lea rax, [rax + rdx + 1]
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
mov rdx, rbx
call fcn.14004f280
test eax, eax
js 0x14000f7be
cmp byte [rsp + 0xf0], 0
je 0x140010cc9
jmp 0x14000f7be
mov byte [rsp + 0x84], 0
jmp 0x14001112c
mov byte [rsp + 0x84], 0
lea ebp, [rax + 8]
cmp ebp, ecx
jbe 0x140011362
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x1400113ad
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x41
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001118f
mov ecx, dword [rsp + 0x80]
jmp 0x1400113b5
add rbx, rdx
lea rcx, [rdi + rbx]
add rcx, 4
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov qword [rdx + rax], rcx
mov eax, dword [rsp + 0x78]
add eax, 8
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001118d
mov ecx, dword [rsp + 0x80]
jmp 0x140011334
mov dword [rsp + 0x78], eax
add edx, esi
mov dword [rsp + 0xe8], edx
mov r14b, 1
jmp 0x14000edde
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x140011405
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x80
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x140011191
mov ecx, dword [rsp + 0x80]
jmp 0x14001140d
add rdx, qword [rsp + 0xe0]
mov r8d, esi
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], esi
mov edx, dword [rsp + 0xe8]
jmp 0x14001139c
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x14001144a
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x3b
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x140011193
mov edx, dword [rsp + 0xe8]
add rdx, qword [rsp + 0xe0]
mov ecx, dword [rsp + 0x80]
jmp 0x140011461
mov byte [rsp + 0x84], 0
mov edx, dword [rsp + 0xe8]
add rdx, qword [rsp + 0xe0]
lea ebp, [rax + 1]
cmp ebp, ecx
jbe 0x140011508
mov byte [rsp + 0x84], 0
inc dword [rsp + 0xe8]
mov ecx, dword [rsp + 0x80]
cmp eax, ecx
jae 0x140011536
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001119e
mov ecx, dword [rsp + 0x80]
jmp 0x14001153e
add dl, 2
lea rcx, [rsp + 0x120]
call fcn.14004f160
mov rcx, rdi
test al, al
mov rbx, rbp
je 0x14000e7b7
lea rcx, [rsp + 0xd8]
mov qword [rcx], r13
mov qword [rcx + 8], r14
mov dword [rcx + 0x10], 0
lea rdx, [rsp + 0x88]
call fcn.140026730
mov rcx, rdi
test al, al
je 0x14000e7b7
jmp 0x14000e7e0
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov dl, byte [rdx]
mov byte [rcx + rax], dl
mov eax, dword [rsp + 0x78]
inc dword [rsp + 0xe8]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
jne 0x14001147b
jmp 0x14001119c
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x140010b75
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x5b
jmp 0x1400111d8
mov dword [rsp + 0x78], ebp
jmp 0x140010dfa
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x14000f588
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x14000f5bc
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x14000f64d
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x14000f681
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x14000f6b5
mov byte [rsp + 0x178], 0
jmp 0x14000f6de
mov dword [rsp + 0x78], edx
jmp 0x14000f7cd
mov byte [rsp + 0x84], 0
jmp 0x14000f7cd