Function at 0x140017e30
Capabilities:
Check for software breakpoints
Get system information on windows
Parse credit card information

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1c8
mov qword [rsp + 0x38], r9
mov rax, qword [0x14005e018]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
cmp byte [rcx + 0x1c], 0
je 0x14001932a
mov r14, r8
mov rsi, rdx
mov r13, rcx
mov edi, dword [rcx + 0x18]
test dil, 4
jne 0x1400196a7
mov rcx, rsi
mov rdi, rcx
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x128], rcx
mov dword [rsp + 0x130], 0
movzx eax, byte [rcx]
cmp eax, 0x48
jne 0x140019009
cmp byte [rdi + 1], 0xff
mov rcx, rdi
je 0x140018fe5
cmp rdi, rcx
jne 0x140017e7d
cmp rdi, rsi
jne 0x1400196d2
mov qword [rsp + 0xd8], r13
mov qword [rsp + 0xe0], rsi
mov dword [rsp + 0xe8], 0
cmp byte [r13 + 0x1c], 0
je 0x14001932a
mov edi, dword [r13 + 0x18]
and edi, 1
shl edi, 0x1e
lea rsi, [r13 + 1]
mov eax, dword [0x14005ed44]
mov ecx, dword [0x14005e488]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140018f54
mov r12d, dword [0x14005ed40]
mov dword [rsp + 0x20], edi
lea rdx, [rsp + 0x88]
mov rcx, rsi
mov r8d, r12d
mov r9, rdi
call fcn.14001acf0
mov eax, dword [0x140060b04]
mov ecx, dword [0x14005e488]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140018a14
lea rcx, [0x140060b08]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [rsp + 0x98]
test al, al
jne 0x14001862b
xor r15d, r15d
xor ebx, ebx
mov rsi, qword [0x140060af8]
test rsi, rsi
jne 0x140017fb8
mov ecx, 0x18
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov qword [rax], 0x18
mov qword [0x140060af8], rax
mov al, byte [rsp + 0x98]
test al, al
mov qword [rsp + 0x48], r14
jne 0x140018650
cmp qword [rsi + 8], 0
jne 0x140018032
mov ecx, 0x20
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov dword [rax + 0x18], 0
mov rax, qword [rsi + 8]
cmp rax, qword [rsi + 0x10]
jne 0x140017ffe
mov rcx, rsi
call fcn.14001b050
mov rax, qword [rsi + 8]
mov rcx, qword [rsi]
lea rax, [rax + rax*2]
mov qword [rcx + rax*8], r15
mov qword [rcx + rax*8 + 8], rbx
mov qword [rcx + rax*8 + 0x10], rdi
inc qword [rsi + 8]
mov rsi, qword [0x140060af8]
test rsi, rsi
je 0x1400196c7
cmp qword [rsi + 8], 0
je 0x1400196c7
mov rbp, qword [rsi]
add rbp, 0x10
mov rdi, qword [rbp]
test rdi, rdi
je 0x140019acc
test r12d, r12d
je 0x140019acc
cmp qword [rdi + 8], 0
jne 0x140018fdc
mov eax, dword [0x14005ed44]
mov ecx, dword [0x14005e488]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140018f98
mov ebx, dword [0x14005ed40]
mov eax, r12d
xor edx, edx
div ebx
sub ebx, edx
test edx, edx
cmove ebx, edx
add ebx, r12d
lea r14, [rdi + 0x10]
mov dword [rdi + 0x10], ebx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp byte [rsp + 0x98], 0
jne 0x14001873b
mov edx, ebx
xor ecx, ecx
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
je 0x140019abe
mov qword [rdi + 8], rax
cmp dword [r14], 0
je 0x140019acc
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xc8], rdi
mov byte [rsp + 0xd0], 1
lea rcx, [0x140060b08]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x140060b04]
mov ecx, dword [0x14005e488]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140018a5d
lea rsi, [0x140060b08]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rbp, [rsp + 0x88]
mov rcx, rdi
mov rdx, rbp
call fcn.14001b230
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [rbp + 0x30], 0
je 0x140019ad9
mov rbx, qword [rsp + 0x88]
mov qword [rsp + 0x58], rbx
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x60], eax
mov rbp, qword [rsp + 0x98]
mov qword [rsp + 0x68], rbp
mov rdx, qword [rsp + 0xa0]
mov qword [rsp + 0x70], rdx
mov ecx, dword [rsp + 0xa8]
mov dword [rsp + 0x78], ecx
mov rcx, qword [rsp + 0xac]
mov qword [rsp + 0x7c], rcx
mov cl, byte [rsp + 0xb4]
mov byte [rsp + 0x84], cl
mov dword [rsp + 0x90], 0
mov byte [rsp + 0xb4], 0
mov rdi, qword [rsp + 0x38]
mov qword [rdi], 0
test rbx, rbx
je 0x1400181fc
test rbp, rbp
je 0x140018ed6
test rdx, rdx
je 0x140018ed6
test eax, eax
je 0x140018ed6
test cl, cl
je 0x140018ed6
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsp + 0x78]
lea edx, [rcx + 8]
cmp qword [rsp + 0x58], 0
je 0x1400196e5
cmp edx, dword [rsp + 0x80]
ja 0x140019705
mov rdx, qword [rsp + 0x68]
mov qword [rdx + rcx], rax
add dword [rsp + 0x78], 8
cmp qword [rsp + 0x58], 0
je 0x14001826d
mov al, byte [rsp + 0x84]
cmp qword [rsp + 0x68], 0
je 0x140018ed6
cmp qword [rsp + 0x70], 0
je 0x140018ed6
cmp dword [rsp + 0x60], 0
je 0x140018ed6
test al, al
je 0x140018ed6
mov ecx, dword [rsp + 0xe8]
add rcx, qword [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov edx, dword [rsp + 0x78]
lea ecx, [rdx + 8]
cmp qword [rsp + 0x58], 0
je 0x140019714
cmp ecx, dword [rsp + 0x80]
ja 0x14001971d
mov rcx, qword [rsp + 0x68]
mov qword [rcx + rdx], rax
mov ecx, dword [rsp + 0x78]
add ecx, 8
mov dword [rsp + 0x78], ecx
cmp qword [rsp + 0x58], 0
je 0x1400182f0
mov al, byte [rsp + 0x84]
cmp qword [rsp + 0x68], 0
je 0x140018ec7
cmp qword [rsp + 0x70], 0
je 0x140018ec7
cmp dword [rsp + 0x60], 0
je 0x140018ec7
test al, al
je 0x140018ec7
mov eax, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
cmp byte [rdx + rax], 0x48
jne 0x140018310
cmp byte [rdx + rax + 1], 0xb8
je 0x1400198d4
mov dword [rsp + 0x7c], ecx
cmp byte [r13 + 0x1c], 0
je 0x14001932a
mov eax, dword [r13 + 0x18]
and eax, 2
mov r12d, eax
shr r12d, 1
xor ecx, ecx
test eax, eax
sete cl
lea r15d, [rcx + rcx*2]
add r15d, 0xa
mov r10d, dword [rsp + 0xe8]
cmp r10d, r15d
jae 0x140018aa6
mov r13d, r15d
xor r14d, r14d
mov rdx, qword [rsp + 0xe0]
mov eax, r10d
test r14b, 1
jne 0x140019227
movzx ecx, byte [rdx + rax]
cmp rcx, 0xf
je 0x140019256
mov ebx, ecx
and bl, 0xfc
cmp bl, 0x88
je 0x140019285
lea ebp, [rcx - 0x40]
cmp ebp, 2
jb 0x14001859c
cmp ecx, 0x44
je 0x1400192b2
cmp ecx, 0x45
je 0x1400192e1
mov ebx, ecx
and bl, 0xfa
cmp bl, 0x48
jne 0x1400184df
mov ecx, dword [rsp + 0x78]
lea r9d, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x140019310
cmp r9d, dword [rsp + 0x80]
ja 0x14001931a
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov r9d, dword [rsp + 0x78]
inc r9d
mov dword [rsp + 0x78], r9d
mov r10d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
lea eax, [r10 + 1]
mov dword [rsp + 0xe8], eax
movzx ecx, byte [rdx + rax]
cmp ecx, 0x82
jle 0x14001842a
cmp ecx, 0x83
je 0x14001853e
cmp ecx, 0x85
jne 0x14001843f
jmp 0x14001953d
cmp ecx, 0x81
je 0x14001906c
cmp ecx, 0x2b
je 0x14001953d
mov ebx, ecx
and bl, 0xfd
cmp bl, 0x89
jne 0x140019335
lea esi, [r10 + 2]
movzx ebx, byte [rdx + rsi]
mov ecx, ebx
shr ecx, 6
mov ebp, 2
cmp ecx, 1
jne 0x1400184d0
and bl, 7
xor edi, edi
cmp bl, 4
sete dil
add edi, ebp
lea ebx, [rdi + 1]
cmp qword [rsp + 0x58], 0
lea ecx, [r9 + rdi + 1]
je 0x14001936d
cmp ecx, dword [rsp + 0x80]
ja 0x140019376
add rdx, rax
mov r8d, ebx
mov ecx, r9d
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], ebx
mov eax, dword [rsp + 0xe8]
add eax, ebx
mov dword [rsp + 0xe8], eax
mov r10d, dword [rsp + 0xe8]
cmp r10d, r15d
jb 0x140018352
jmp 0x140018aa9
mov edi, 1
cmp ecx, 3
je 0x140018472
jmp 0x14001991f
cmp cl, 0x66
je 0x140019a4a
mov ebx, ecx
and bl, 0xf0
cmp bl, 0x50
jne 0x1400190c6
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x140019a79
cmp ebp, dword [rsp + 0x80]
ja 0x1400199f0
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
inc dword [rsp + 0x78]
mov r10d, dword [rsp + 0xe8]
inc r10d
mov dword [rsp + 0xe8], r10d
jmp 0x1400184ba
movzx ecx, byte [rdx + rax + 1]
and ecx, 0xfffffff8
cmp ecx, 0xe8
jne 0x140019ae9
lea ecx, [r9 + 3]
cmp qword [rsp + 0x58], 0
je 0x140019ae0
cmp ecx, dword [rsp + 0x80]
ja 0x140019e0f
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, r9d
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 3
mov eax, dword [rsp + 0xe8]
add eax, 3
jmp 0x1400184b3
mov ebp, dword [rsp + 0x78]
lea ecx, [rbp + 1]
cmp qword [rsp + 0x58], 0
je 0x140019f88
cmp ecx, dword [rsp + 0x80]
ja 0x140019f91
mov rcx, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
mov r10d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
inc r10d
mov dword [rsp + 0xe8], r10d
mov bl, byte [rdx + r10]
mov eax, ebx
and al, 0xf0
cmp al, 0x50
jne 0x140019fa9
lea eax, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x140019fa0
cmp eax, dword [rsp + 0x80]
ja 0x1400199f0
mov rax, qword [rsp + 0x68]
mov ecx, ecx
mov dl, byte [rdx + r10]
mov byte [rax + rcx], dl
jmp 0x140018522
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x14001995f
mov r15, qword [rsp + 0x90]
lea rbx, [rcx + r15]
dec rbx
jmp 0x140017f82
mov qword [rsp + 0x40], rbx
mov r8, qword [rsi]
mov rbx, qword [rsi + 8]
mov rbp, r8
test rbx, rbx
jle 0x1400186a2
mov rbp, r8
mov rcx, rbx
mov rdx, rbx
mov rax, qword [rsp + 0x40]
shr rdx, 1
lea rdi, [rdx + rdx*2]
lea rdi, [rdi*8]
add rdi, rbp
cmp qword [rdi], r15
jae 0x140019b50
add rdi, 0x18
not rdx
add rdx, rcx
mov rbp, rdi
mov rcx, rdx
test rdx, rdx
jg 0x140018672
lea rcx, [rbx + rbx*2]
lea rax, [r8 + rcx*8]
cmp rbp, rax
jne 0x140019b65
mov ecx, 0x20
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov dword [rax + 0x18], 0
mov rax, qword [rsi]
mov r14, qword [rsi + 8]
sub rbp, rax
sar rbp, 3
movabs rbx, 0xaaaaaaaaaaaaaaab
imul rbx, rbp
cmp rbx, r14
jne 0x140019b83
mov rcx, rbx
cmp rbx, qword [rsi + 0x10]
jne 0x14001870c
mov rcx, rsi
call fcn.14001b050
mov rax, qword [rsi]
mov rcx, qword [rsi + 8]
lea rcx, [rcx + rcx*2]
mov qword [rax + rcx*8], r15
mov rdx, qword [rsp + 0x40]
mov qword [rax + rcx*8 + 8], rdx
mov qword [rax + rcx*8 + 0x10], rdi
inc qword [rsi + 8]
mov rax, qword [rsi]
lea rcx, [rbx + rbx*2]
lea rbp, [rax + rcx*8]
add rbp, 0x10
jmp 0x140018039
mov r15, qword [rsp + 0x88]
test r15, r15
je 0x14001995f
mov r12, rax
mov rsi, qword [rsp + 0x90]
mov eax, dword [0x140060b40]
mov ecx, dword [0x14005e488]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jle 0x1400187f1
lea rcx, [0x140060b40]
call fcn.14002b51c
cmp dword [0x140060b40], 0xffffffff
jne 0x1400187f1
lea rcx, str.kernelbase.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x140060b30], rax
mov qword [0x140060b38], 0
test rax, rax
je 0x1400187e5
lea rdx, str.VirtualAlloc2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140060b38], rax
test rax, rax
jne 0x1400187e5
mov rcx, qword [0x140060b30]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140060b30], 0
lea rcx, [0x140060b40]
call fcn.14002b4bc
mov rax, qword [0x140060b38]
mov ebp, ebx
test rax, rax
jne 0x140019c5b
lea rbx, [rdi + 1]
add r15, rsi
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001b480
test rax, rax
je 0x140019ac4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400180d0
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001b480
test rax, rax
je 0x140019ac4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400180d0
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001b480
test rax, rax
je 0x140019ac4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400180d0
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001b480
test rax, rax
je 0x140019ac4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400180d0
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001b480
test rax, rax
je 0x140019ac4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400180d0
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001b480
test rax, rax
je 0x140019ac4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400180d0
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001b480
test rax, rax
je 0x140019ac4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400180d0
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov rdx, r12
mov r8, rbp
mov r9, rsi
call fcn.14001b480
test rax, rax
je 0x140019ac4
mov rcx, rax
mov rdx, rbp
mov r8d, 0x2000
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400180d0
xor ecx, ecx
mov rdx, rbp
jmp 0x1400180b5
lea rcx, [0x140060b04]
call fcn.14002b51c
cmp dword [0x140060b04], 0xffffffff
jne 0x140017f61
lea rcx, [0x140060b08]
mov edx, 0xfa0
mov r8d, 0x1000000
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
mov byte [0x140060b00], 1
lea rcx, [0x140060b04]
call fcn.14002b4bc
jmp 0x140017f61
lea rcx, [0x140060b04]
call fcn.14002b51c
cmp dword [0x140060b04], 0xffffffff
jne 0x140018128
lea rcx, [0x140060b08]
mov edx, 0xfa0
mov r8d, 0x1000000
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
mov byte [0x140060b00], 1
lea rcx, [0x140060b04]
call fcn.14002b4bc
jmp 0x140018128
xor r14d, r14d
cmp r10d, 0x64
ja 0x140018ec7
test r14b, 1
jne 0x140018bc9
mov eax, dword [rsp + 0x78]
cmp qword [rsp + 0x58], 0
je 0x140019771
mov ecx, r10d
add rcx, qword [rsp + 0xe0]
mov edx, dword [rsp + 0x80]
cmp eax, edx
jae 0x140019784
mov rdx, qword [rsp + 0x68]
mov byte [rdx + rax], 0xff
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x140019773
mov edx, dword [rsp + 0x80]
cmp eax, edx
jae 0x140019791
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov byte [rdx + rax], 0x25
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x140019775
mov edx, dword [rsp + 0x80]
lea ebp, [rax + 4]
cmp ebp, edx
ja 0x14001979e
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov dword [rdx + rax], 0
mov eax, dword [rsp + 0x78]
add eax, 4
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x140019778
mov edx, dword [rsp + 0x80]
lea ebp, [rax + 8]
cmp ebp, edx
ja 0x1400197ab
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov qword [rdx + rax], rcx
add dword [rsp + 0x78], 8
cmp qword [rsp + 0x58], 0
je 0x140018bc9
mov al, byte [rsp + 0x84]
cmp qword [rsp + 0x68], 0
je 0x140018ec7
cmp qword [rsp + 0x70], 0
je 0x140018ec7
cmp dword [rsp + 0x60], 0
je 0x140018ec7
test al, al
je 0x140018ec7
cmp byte [rsp + 0x84], 0
je 0x140018ec7
cmp qword [rsp + 0x58], 0
je 0x140018ec7
mov edi, dword [rsp + 0x7c]
add rdi, qword [rsp + 0x70]
je 0x140018ec7
mov r9d, dword [rsp + 0xe8]
test r9, r9
je 0x1400197ba
mov rdx, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xe0]
lea r14, [rsp + 0x158]
mov qword [r14 - 0x38], rdx
mov qword [r14 - 0x30], r8
mov qword [r14 - 0x28], r9
xor ebx, ebx
mov qword [r14 - 0x20], rbx
mov qword [r14 - 0x10], rbx
mov qword [r14 - 8], 0x20
mov qword [r14 - 0x18], r14
mov byte [r14 + 0x20], 1
lea rsi, [rsp + 0x180]
mov rcx, rsi
call fcn.14001aec0
cmp qword [rsi + 0x10], rbx
je 0x140018e27
cmp byte [rsp + 0x178], 0
je 0x140018e27
test r12b, r12b
jne 0x1400197de
lea rsi, [rsp + 0x140]
mov rax, qword [rsi + 8]
cmp rax, qword [rsi + 0x10]
je 0x140019808
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0x49
mov rax, qword [rsp + 0x148]
inc rax
mov qword [rsp + 0x148], rax
inc dword [rsp + 0x138]
cmp rax, qword [rsp + 0x150]
je 0x14001982a
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0xbb
mov rax, qword [rsp + 0x148]
inc rax
mov qword [rsp + 0x148], rax
inc dword [rsp + 0x138]
lea rcx, [rax + 8]
cmp rcx, qword [rsp + 0x150]
ja 0x14001984c
mov rcx, qword [rsp + 0x140]
mov rdx, qword [rsp + 0x48]
mov qword [rcx + rax], rdx
mov rax, qword [rsp + 0x148]
add rax, 8
mov qword [rsp + 0x148], rax
add dword [rsp + 0x138], 8
cmp rax, qword [rsp + 0x150]
je 0x14001986e
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0x41
mov rax, qword [rsp + 0x148]
inc rax
mov qword [rsp + 0x148], rax
inc dword [rsp + 0x138]
cmp rax, qword [rsp + 0x150]
je 0x140019890
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0xff
mov rax, qword [rsp + 0x148]
inc rax
mov qword [rsp + 0x148], rax
inc dword [rsp + 0x138]
cmp rax, qword [rsp + 0x150]
je 0x1400198b2
mov rcx, qword [rsp + 0x140]
mov byte [rcx + rax], 0xe3
inc qword [rsp + 0x148]
inc dword [rsp + 0x138]
cmp qword [rsp + 0x190], 0
je 0x140018e27
cmp byte [rsp + 0x178], 0
je 0x140018e27
mov r8, qword [rsp + 0x148]
test r8, r8
je 0x140018e1f
mov rdx, qword [rsp + 0x140]
mov ecx, dword [rsp + 0x13c]
add rcx, qword [rsp + 0x128]
call sub.ntdll.dll_memcpy
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov eax, dword [rsp + 0x148]
add dword [rsp + 0x13c], eax
mov qword [rsp + 0x148], 0
mov rax, qword [rsp + 0x38]
mov qword [rax], rdi
mov eax, dword [0x14005ed3c]
mov ecx, dword [0x14005e488]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140019028
mov rsi, qword [rsp + 0x188]
mov rbp, qword [rsp + 0x190]
test rbp, rbp
je 0x140018e9d
shl rbp, 4
add rbp, rsi
mov edi, dword [0x14005ed38]
lea r15, [rsp + 0xf0]
mov rbx, qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r8d, dword [rsi]
mov rcx, qword [rsi + 8]
mov rdx, rdi
mov r9, r15
call rbx
add rsi, 0x10
cmp rsi, rbp
jne 0x140018e7d
mov rsi, qword [rsp + 0x188]
lea rax, [rsp + 0x1a0]
mov qword [rax - 0x10], 0
cmp rsi, rax
jne 0x1400197c5
mov rcx, qword [rsp + 0x140]
cmp rcx, r14
jne 0x1400197d3
mov rax, qword [rsp + 0x38]
cmp qword [rax], 0
je 0x14001972e
mov rax, qword [rsp + 0x38]
cmp qword [rax], 0
setne sil
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140018f06
mov r8d, dword [rsp + 0x60]
test r8d, r8d
je 0x140018f06
lea r9, [rsp + 0x60]
mov edx, dword [r9 + 0x20]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp byte [rsp + 0xb8], 0
je 0x140018f2e
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x140018f2e
mov r8d, dword [rsp + 0x90]
test r8d, r8d
jne 0x1400196ee
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.14002c730
mov eax, esi
add rsp, 0x1c8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [0x14005ed44]
call fcn.14002b51c
cmp dword [0x14005ed44], 0xffffffff
jne 0x140017f1b
lea rbp, [rsp + 0x120]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbp + 0x28]
mov dword [0x14005ed40], eax
lea rcx, [0x14005ed44]
call fcn.14002b4bc
jmp 0x140017f1b
lea rcx, [0x14005ed44]
call fcn.14002b51c
cmp dword [0x14005ed44], 0xffffffff
jne 0x14001807f
lea rsi, [rsp + 0x120]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsi + 0x28]
mov dword [0x14005ed40], eax
lea rcx, [0x14005ed44]
call fcn.14002b4bc
jmp 0x14001807f
lea r14, [rdi + 0x10]
jmp 0x1400180d4
mov eax, 3
cmp byte [rdi + 2], 0x25
mov rcx, rdi
jne 0x140017eb4
lea rcx, [rdi + rax]
movsxd rax, dword [rdi + rax]
mov rcx, qword [rax + rcx + 4]
jmp 0x140017eb4
cmp eax, 0xff
jne 0x14001a128
cmp byte [rdi + 1], 0x25
mov rcx, rdi
jne 0x140017eb4
mov eax, 2
jmp 0x140018ff7
lea rcx, [0x14005ed3c]
call fcn.14002b51c
cmp dword [0x14005ed3c], 0xffffffff
jne 0x140018e4c
lea rsi, [rsp + 0xf0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsi + 4]
mov dword [0x14005ed38], eax
lea rcx, [0x14005ed3c]
call fcn.14002b4bc
jmp 0x140018e4c
mov cl, byte [rdx + rax + 1]
and cl, 0xf8
cmp cl, 0xe8
jne 0x140018ec7
lea ecx, [r9 + 6]
cmp qword [rsp + 0x58], 0
je 0x14001a2a3
cmp ecx, dword [rsp + 0x80]
ja 0x14001a2ac
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, r9d
movzx ebp, word [rdx + 4]
mov word [rax + rcx + 4], bp
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 6
mov eax, dword [rsp + 0xe8]
add eax, 6
jmp 0x1400184b3
cmp cl, 0x90
je 0x1400184f6
cmp ecx, 0x80
je 0x14001a2b9
cmp ecx, 0x65
je 0x14001a31e
mov ebx, ecx
and bl, 0xf8
cmp bl, 0xb8
je 0x14001a6d1
cmp ecx, 0xcb
jg 0x140019151
cmp ecx, 0x84
jg 0x140019179
cmp ecx, 0x33
je 0x1400191e3
cmp ecx, 0x83
jne 0x1400191ad
mov cl, byte [rdx + rax + 1]
cmp cl, 0xc0
jb 0x14001a6c5
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 3]
cmp qword [rsp + 0x58], 0
je 0x14001ac58
cmp ebp, dword [rsp + 0x80]
ja 0x14001a163
add rdx, rax
mov rax, qword [rsp + 0x68]
jmp 0x14001a639
cmp ecx, 0xe7
jg 0x140019192
cmp ecx, 0xcc
je 0x1400184f6
cmp ecx, 0xd1
jne 0x1400191ad
cmp byte [rdx + rax + 1], 0xc0
jae 0x1400191e3
jmp 0x140018ec7
cmp ecx, 0x85
je 0x14001a950
cmp ecx, 0xc3
jne 0x1400191ad
jmp 0x1400184f6
lea ebp, [rcx - 0xe8]
cmp ebp, 2
jb 0x14001a988
cmp ecx, 0xf6
je 0x14001a9d0
lea ebp, [rcx - 0x73]
cmp bpl, 2
jbe 0x14001a366
cmp cl, 0xff
jne 0x14001a3a2
movzx ebp, byte [rdx + rax + 1]
mov ecx, ebp
shr ecx, 3
and ecx, 7
cmp bpl, 0xc0
jb 0x14001a40a
cmp ecx, 6
jne 0x14001a455
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 2]
cmp qword [rsp + 0x58], 0
je 0x14001a399
cmp ebp, dword [rsp + 0x80]
ja 0x140019488
mov rbp, qword [rsp + 0x68]
movzx eax, word [rdx + rax]
mov word [rbp + rcx], ax
add dword [rsp + 0x78], 2
mov r10d, dword [rsp + 0xe8]
add r10d, 2
jmp 0x140018531
movzx ecx, byte [rdx + rax]
cmp ecx, 0xcc
je 0x14001923f
cmp ecx, 0x90
jne 0x14001a752
inc rax
mov dword [rsp + 0xe8], eax
cmp rax, r13
jb 0x140019227
mov r10d, eax
jmp 0x140018aa9
mov ecx, dword [rsp + 0x78]
lea edi, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x140019383
cmp edi, dword [rsp + 0x80]
jbe 0x140019572
mov byte [rsp + 0x84], 0
mov edi, ecx
jmp 0x140019387
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x140019404
cmp ebp, dword [rsp + 0x80]
jbe 0x14001959d
mov byte [rsp + 0x84], 0
jmp 0x1400195b5
mov ebp, dword [rsp + 0x78]
lea ecx, [rbp + 1]
cmp qword [rsp + 0x58], 0
je 0x14001940d
cmp ecx, dword [rsp + 0x80]
jbe 0x140019632
mov byte [rsp + 0x84], 0
mov ecx, ebp
jmp 0x140019411
mov ebp, dword [rsp + 0x78]
lea ecx, [rbp + 1]
cmp qword [rsp + 0x58], 0
je 0x140019452
cmp ecx, dword [rsp + 0x80]
jbe 0x14001965c
mov byte [rsp + 0x84], 0
mov ecx, ebp
jmp 0x140019456
mov dword [rsp + 0x78], r9d
jmp 0x1400183fa
mov byte [rsp + 0x84], 0
mov r9d, ecx
jmp 0x1400183fa
int3
mov ebx, ecx
and bl, 0xf8
cmp bl, 0xb8
jne 0x14001949e
lea ecx, [r9 + 9]
cmp qword [rsp + 0x58], 0
je 0x140019ab2
cmp ecx, dword [rsp + 0x80]
jbe 0x140019b26
mov byte [rsp + 0x84], 0
jmp 0x140019ab6
mov dword [rsp + 0x78], ecx
jmp 0x1400184b1
mov byte [rsp + 0x84], 0
jmp 0x1400184b1
mov dword [rsp + 0x78], edi
lea eax, [r10 + 1]
mov dword [rsp + 0xe8], eax
movzx ecx, byte [rdx + rax]
lea ebp, [rcx - 0x10]
cmp ebp, 2
jb 0x1400193db
cmp ecx, 5
je 0x14001996a
cmp ecx, 0x1f
jne 0x140019993
lea ecx, [rdi + 1]
cmp qword [rsp + 0x58], 0
je 0x140019ddb
cmp ecx, dword [rsp + 0x80]
jbe 0x140019e30
mov byte [rsp + 0x84], 0
mov ecx, edi
jmp 0x140019ddf
lea ecx, [rdi + 1]
cmp qword [rsp + 0x58], 0
je 0x140019a82
cmp ecx, dword [rsp + 0x80]
jbe 0x140019a98
mov byte [rsp + 0x84], 0
jmp 0x140019a86
mov dword [rsp + 0x78], ebp
jmp 0x1400195b5
mov dword [rsp + 0x78], ecx
inc r10d
mov dword [rsp + 0xe8], r10d
cmp byte [rdx + r10], 0x89
jne 0x140018ec7
lea eax, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x140019495
cmp eax, dword [rsp + 0x80]
ja 0x1400192a5
mov rax, qword [rsp + 0x68]
mov ecx, ecx
mov dl, byte [rdx + r10]
mov byte [rax + rcx], dl
jmp 0x1400195a9
mov dword [rsp + 0x78], ecx
inc r10d
mov dword [rsp + 0xe8], r10d
cmp byte [rdx + r10], 0x33
jne 0x140018ec7
lea eax, [rcx + 2]
cmp qword [rsp + 0x58], 0
je 0x14001a066
cmp eax, dword [rsp + 0x80]
jbe 0x140019686
mov byte [rsp + 0x84], 0
jmp 0x14001921e
mov dword [rsp + 0x78], eax
jmp 0x1400195b5
cmp ecx, 0xc6
jg 0x1400199fd
cmp ecx, 0x63
je 0x14001953d
cmp ecx, 0x8d
jne 0x140018ec7
mov cl, byte [rdx + rax + 1]
mov eax, ecx
and al, 0xc7
cmp al, 5
jne 0x140019fde
lea eax, [r10 + 3]
mov dword [rsp + 0xe8], eax
movsxd rsi, dword [rdx + rax]
add r10d, 7
mov dword [rsp + 0xe8], r10d
cmp qword [rsp + 0x58], 0
je 0x14001a245
mov ebp, dword [rsp + 0x80]
cmp r9d, ebp
jae 0x14001a256
shr cl, 3
or cl, 0xb8
mov rbp, qword [rsp + 0x68]
mov ebx, r9d
mov byte [rbp + rbx], cl
mov r9d, dword [rsp + 0x78]
inc r9d
mov dword [rsp + 0x78], r9d
cmp qword [rsp + 0x58], 0
je 0x14001a248
mov ebp, dword [rsp + 0x80]
jmp 0x14001a25e
cmp byte [rdx + rax + 1], 0xc0
jb 0x140018ec7
lea ecx, [r9 + 2]
cmp qword [rsp + 0x58], 0
je 0x14001969b
cmp ecx, dword [rsp + 0x80]
jbe 0x1400198fe
mov byte [rsp + 0x84], 0
jmp 0x14001969f
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov edi, dword [rsp + 0x78]
inc edi
mov dword [rsp + 0x78], edi
mov r10d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x140019387
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
inc dword [rsp + 0x78]
mov r10d, dword [rsp + 0xe8]
inc r10d
lea rcx, [rsp + 0xd8]
mov dword [rcx + 0x10], r10d
xor edx, edx
call fcn.14004e1f0
test eax, eax
js 0x140018ec7
mov edi, eax
mov edx, dword [rsp + 0xe8]
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rdi]
cmp qword [rsp + 0x58], 0
je 0x1400195fe
cmp eax, dword [rsp + 0x80]
jbe 0x140019610
mov byte [rsp + 0x84], 0
jmp 0x140019602
mov dword [rsp + 0x78], eax
add edx, edi
mov dword [rsp + 0xe8], edx
jmp 0x1400184ba
add rdx, qword [rsp + 0xe0]
mov r8d, edi
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], edi
mov edx, dword [rsp + 0xe8]
jmp 0x140019602
mov rcx, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
mov r10d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x140019411
mov rcx, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
mov r10d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x140019456
mov rax, qword [rsp + 0x68]
mov ecx, ecx
movzx edx, word [rdx + r10]
mov word [rax + rcx], dx
jmp 0x140019211
mov dword [rsp + 0x78], ecx
add eax, 2
jmp 0x1400184b3
mov qword [rsp + 0xd8], r13
mov qword [rsp + 0xe0], rsi
mov dword [rsp + 0xe8], 0
jmp 0x140017eec
int3
mov rcx, rdi
call fcn.14004e040
test al, al
cmovne rsi, rdi
jmp 0x140017ec2
mov dword [rsp + 0x78], edx
jmp 0x14001826d
lea r9, [rsp + 0x90]
mov edx, dword [r9 + 0x20]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x140018f2e
mov byte [rsp + 0x84], 0
xor eax, eax
jmp 0x140018242
mov dword [rsp + 0x78], ecx
jmp 0x1400182f0
mov byte [rsp + 0x84], 0
xor eax, eax
mov ecx, edx
jmp 0x1400182c5
mov dword [rsp + 0x78], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsp + 0x78]
lea edx, [rcx + 8]
cmp qword [rsp + 0x58], 0
je 0x14001acd7
cmp edx, dword [rsp + 0x80]
ja 0x14001ace0
mov rdx, qword [rsp + 0x68]
mov qword [rdx + rcx], rax
add dword [rsp + 0x78], 8
jmp 0x140018ed6
inc eax
inc eax
add eax, 4
add eax, 8
mov dword [rsp + 0x78], eax
jmp 0x140018bc9
mov byte [rsp + 0x84], 0
jmp 0x140018b0d
mov byte [rsp + 0x84], 0
jmp 0x140018b3d
mov byte [rsp + 0x84], 0
jmp 0x140018b74
mov byte [rsp + 0x84], 0
xor eax, eax
jmp 0x140018b9e
int3
mov rcx, rsi
call qword [sym.imp.mozglue.dll_free]
jmp 0x140018eb6
call qword [sym.imp.mozglue.dll_free]
jmp 0x140018ec7
lea rcx, [rsp + 0xc0]
lea r8, [rsp + 0x120]
mov rdx, rdi
mov r9, qword [rsp + 0x48]
call fcn.14004e680
test al, al
jne 0x140018db3
jmp 0x140018e27
mov edx, 1
mov rcx, rsi
call fcn.140013f20
test al, al
je 0x14001ac61
mov rax, qword [rsp + 0x148]
jmp 0x140018c89
mov edx, 1
mov rcx, rsi
call fcn.140013f20
test al, al
je 0x14001ac76
mov rax, qword [rsp + 0x148]
jmp 0x140018cbd
mov edx, 8
mov rcx, rsi
call fcn.140013f20
test al, al
je 0x14001ac8b
mov rax, qword [rsp + 0x148]
jmp 0x140018cf5
mov edx, 1
mov rcx, rsi
call fcn.140013f20
test al, al
je 0x14001aca0
mov rax, qword [rsp + 0x148]
jmp 0x140018d30
mov edx, 1
mov rcx, rsi
call fcn.140013f20
test al, al
je 0x14001acb5
mov rax, qword [rsp + 0x148]
jmp 0x140018d64
mov edx, 1
mov rcx, rsi
call fcn.140013f20
test al, al
je 0x14001acca
mov rax, qword [rsp + 0x148]
jmp 0x140018d98
movzx ebp, byte [rdx + rax + 0xa]
cmp ebp, 0x50
je 0x140019d15
cmp ebp, 0xff
jne 0x140018310
cmp byte [rdx + rax + 0xb], 0xe0
jne 0x140018310
jmp 0x140019d20
mov rcx, qword [rsp + 0x68]
mov ebp, r9d
movzx eax, word [rdx + rax]
mov word [rcx + rbp], ax
add dword [rsp + 0x78], 2
mov eax, dword [rsp + 0xe8]
jmp 0x14001969f
test ecx, ecx
jne 0x140019b1c
mov ecx, ebx
and ecx, 7
cmp ecx, 5
je 0x14001a06f
mov ebp, 1
cmp ecx, 4
jne 0x140018464
mov cl, byte [rdx + rsi + 1]
and cl, 7
xor ebp, ebp
cmp cl, 5
sete bpl
lea ebp, [rbp*4 + 1]
jmp 0x140018464
int3
lea ecx, [rdi + 1]
cmp qword [rsp + 0x58], 0
je 0x140019e1c
cmp ecx, dword [rsp + 0x80]
jbe 0x140019e58
mov byte [rsp + 0x84], 0
jmp 0x140019e20
lea eax, [rcx + 0x7d]
cmp al, 2
ja 0x140018ec7
lea rax, [0x140050390]
mov r8d, dword [rax + rcx*4 - 0x20c]
lea eax, [r10 + 2]
mov dword [rsp + 0xe8], eax
dec edi
lea rcx, [rsp + 0x58]
mov dword [rcx + 0x20], edi
lea rbp, [rdx + rax]
movsxd rax, dword [rdx + rax]
lea rdx, [rax + rbp]
add rdx, 4
add r10d, 6
mov dword [rsp + 0xe8], r10d
call fcn.14004e280
test al, al
jne 0x1400184ba
jmp 0x140018ec7
mov byte [rsp + 0x84], 0
jmp 0x14001852e
cmp ecx, 0xff
je 0x140019cc4
cmp ecx, 0xc7
jne 0x140018ec7
cmp byte [rdx + rax + 1], 0x44
jne 0x140018ec7
lea ecx, [r9 + 8]
cmp qword [rsp + 0x58], 0
je 0x14001a0f2
cmp ecx, dword [rsp + 0x80]
jbe 0x14001a0fe
mov byte [rsp + 0x84], 0
jmp 0x14001a0f6
mov ecx, dword [rsp + 0x78]
lea edi, [rcx + 1]
cmp qword [rsp + 0x58], 0
je 0x140019e72
cmp edi, dword [rsp + 0x80]
jbe 0x140019f5d
mov byte [rsp + 0x84], 0
mov edi, ecx
jmp 0x140019e76
mov dword [rsp + 0x78], ebp
jmp 0x14001852e
mov dword [rsp + 0x78], ecx
inc eax
lea rcx, [rsp + 0xd8]
mov dword [rcx + 0x10], eax
jmp 0x1400195c4
mov rcx, qword [rsp + 0x68]
mov ebp, edi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
inc dword [rsp + 0x78]
mov eax, dword [rsp + 0xe8]
jmp 0x140019a86
mov dword [rsp + 0x78], ecx
add eax, 9
jmp 0x1400184b3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rdi + 8], 0
lea rcx, [0x140060b08]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor esi, esi
jmp 0x140018f2e
mov dword [rsp + 0x78], ecx
jmp 0x140018594
cmp ecx, 0x60
jne 0x140019f4c
lea ecx, [r9 + 5]
cmp qword [rsp + 0x58], 0
je 0x14001a11c
cmp ecx, dword [rsp + 0x80]
jbe 0x14001a1aa
mov byte [rsp + 0x84], 0
jmp 0x14001a120
mov ebp, 5
jmp 0x140018464
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, r9d
mov bl, byte [rdx + 8]
mov byte [rax + rcx + 8], bl
mov rdx, qword [rdx]
mov qword [rax + rcx], rdx
add dword [rsp + 0x78], 9
mov eax, dword [rsp + 0xe8]
jmp 0x140019ab6
jne 0x14001869a
cmp qword [rdi + 8], rax
jb 0x14001868d
jmp 0x14001869a
cmp qword [rbp], r15
ja 0x1400186b3
mov rax, qword [rsp + 0x40]
cmp qword [rbp + 8], rax
jae 0x140018035
jmp 0x1400186b3
lea rbp, [r14 + r14*2]
movups xmm0, xmmword [rax + rbp*8 - 0x18]
movaps xmmword [rsp + 0x120], xmm0
mov rcx, qword [rax + rbp*8 - 8]
mov qword [rsp + 0x50], rcx
mov qword [rax + rbp*8 - 8], 0
mov rax, qword [rsi + 8]
cmp rax, qword [rsi + 0x10]
jne 0x140019bbd
mov rcx, rsi
call fcn.14001b050
mov rax, qword [rsi + 8]
mov rcx, qword [rsi]
lea rax, [rax + rax*2]
movaps xmm0, xmmword [rsp + 0x120]
movups xmmword [rcx + rax*8], xmm0
mov rdx, qword [rsp + 0x50]
mov qword [rcx + rax*8 + 0x10], rdx
inc qword [rsi + 8]
dec r14
cmp r14, rbx
jbe 0x140019c28
lea rbp, [rbp*8 - 8]
mov rax, qword [rsi]
movups xmm0, xmmword [rax + rbp - 0x28]
movups xmmword [rax + rbp - 0x10], xmm0
mov rdx, qword [rax + rbp - 0x18]
mov qword [rax + rbp - 0x18], 0
mov rcx, qword [rax + rbp]
mov qword [rax + rbp], rdx
test rcx, rcx
je 0x140019c1c
call qword [sym.imp.mozglue.dll_free]
dec r14
add rbp, 0xffffffffffffffe8
cmp r14, rbx
ja 0x140019bee
mov rax, qword [rsi]
lea rdx, [rbx + rbx*2]
mov qword [rax + rdx*8], r15
mov rcx, qword [rsp + 0x40]
mov qword [rax + rdx*8 + 8], rcx
mov rcx, qword [rax + rdx*8 + 0x10]
mov qword [rax + rdx*8 + 0x10], rdi
test rcx, rcx
je 0x140018727
call qword [sym.imp.mozglue.dll_free]
jmp 0x140018727
lea rcx, [rsi + r15]
dec rcx
lea rdx, [rsp + 0x120]
mov qword [rdx], rsi
mov qword [rdx + 8], rcx
mov qword [rdx + 0x10], 0
lea rcx, [rsp + 0xf0]
mov qword [rcx], 1
mov qword [rcx + 8], rdx
mov edx, 1
mov dword [rsp + 0x30], edx
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edx
mov rcx, r12
xor edx, edx
mov r8, rbp
mov r9d, 0x2000
call qword [case.0x14002bdde.0]
mov qword [rdi + 8], rax
test rax, rax
jne 0x1400180d4
jmp 0x140019acc
mov al, byte [rdx + rax + 1]
and al, 0xc7
cmp al, 5
jne 0x140018ec7
lea eax, [r10 + 3]
mov dword [rsp + 0xe8], eax
dec r9d
lea rcx, [rsp + 0x58]
mov dword [rcx + 0x20], r9d
lea rbp, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r10d, 7
mov dword [rsp + 0xe8], r10d
mov rdx, qword [rax + rbp + 4]
mov r8d, 3
call fcn.14004e280
mov r14b, 1
jmp 0x1400199e3
cmp byte [rdx + rax + 0xb], 0xc3
jne 0x140018310
add eax, 2
mov rdi, qword [rdx + rax]
lea rcx, [rsp + 0xd8]
lea rsi, [rsp + 0x120]
mov rdx, rsi
call fcn.14004e590
xor ebx, ebx
cmp qword [rsi + 0x70], 0
je 0x14001a172
cmp byte [rsp + 0x178], 0
je 0x14001a172
lea rsi, [rsp + 0x120]
mov rcx, rsi
mov rdx, qword [rsp + 0x48]
call fcn.140032b40
mov rcx, rsi
call fcn.14004ea40
test al, al
je 0x14001a170
mov eax, dword [rsp + 0x78]
lea ecx, [rax + 8]
cmp qword [rsp + 0x58], 0
je 0x14001a589
cmp ecx, dword [rsp + 0x80]
jbe 0x14001a659
mov byte [rsp + 0x84], 0
xor eax, eax
xor ebx, ebx
cmp qword [rsp + 0x68], 0
je 0x14001a172
cmp qword [rsp + 0x70], 0
je 0x14001a172
cmp dword [rsp + 0x60], 0
je 0x14001a172
test al, al
jne 0x14001a58d
jmp 0x14001a172
mov dword [rsp + 0x78], ecx
inc eax
mov dword [rsp + 0xe8], eax
mov bl, byte [rdx + rax]
and bl, 0xc7
cmp bl, 0x44
jne 0x140018ec7
lea ebp, [rcx + 3]
cmp qword [rsp + 0x58], 0
je 0x140019e27
cmp ebp, dword [rsp + 0x80]
jbe 0x140019f3d
mov byte [rsp + 0x84], 0
jmp 0x140018594
mov dword [rsp + 0x78], ecx
inc eax
jmp 0x1400184b3
mov dword [rsp + 0x78], ebp
jmp 0x140018594
mov rcx, qword [rsp + 0x68]
mov ebp, edi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
mov ecx, dword [rsp + 0x78]
inc ecx
mov dword [rsp + 0x78], ecx
mov eax, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x140019ddf
mov rcx, qword [rsp + 0x68]
mov ebp, edi
mov al, byte [rdx + rax]
mov byte [rcx + rbp], al
inc dword [rsp + 0x78]
mov eax, dword [rsp + 0xe8]
jmp 0x140019e20
mov dword [rsp + 0x78], edi
inc r10d
mov dword [rsp + 0xe8], r10d
mov al, byte [rdx + r10]
mov ecx, eax
and cl, 0xfc
cmp cl, 0x88
jne 0x140019f00
movzx ebp, byte [rdx + r10 + 1]
mov eax, ebp
and eax, 0xffffffc0
cmp al, 0xc0
je 0x14001a042
cmp eax, 0x40
je 0x140019ec6
test eax, eax
jne 0x140018ec7
mov ecx, ebp
and ecx, 6
cmp ecx, 4
jne 0x14001a042
cmp eax, 0x40
jne 0x140018ec7
and ebp, 7
add rdx, r10
mov rax, qword [rsp + 0x58]
cmp ebp, 4
jne 0x14001a14a
lea ecx, [rdi + 4]
test rax, rax
je 0x14001a56f
cmp ecx, dword [rsp + 0x80]
jbe 0x14001a614
mov byte [rsp + 0x84], 0
jmp 0x14001a573
cmp al, 0x44
jne 0x1400184ba
cmp byte [rdx + r10 + 1], 0x89
jne 0x1400184ba
lea eax, [rdi + 2]
cmp qword [rsp + 0x58], 0
je 0x14001a562
cmp eax, dword [rsp + 0x80]
jbe 0x14001a5f2
mov byte [rsp + 0x84], 0
jmp 0x14001a566
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, ecx
jmp 0x14001857a
cmp ecx, 0xc0
jne 0x140018ec7
jmp 0x140018552
mov rbp, qword [rsp + 0x68]
mov al, byte [rdx + rax]
mov byte [rbp + rcx], al
mov edi, dword [rsp + 0x78]
inc edi
mov dword [rsp + 0x78], edi
mov r10d, dword [rsp + 0xe8]
mov rdx, qword [rsp + 0xe0]
jmp 0x140019e76
mov dword [rsp + 0x78], ecx
jmp 0x1400185e1
mov byte [rsp + 0x84], 0
mov ecx, ebp
jmp 0x1400185e1
mov dword [rsp + 0x78], eax
jmp 0x14001852e
and bl, 0xf8
cmp bl, 0xb8
jne 0x140018ec7
lea eax, [rcx + 5]
cmp qword [rsp + 0x58], 0
je 0x14001a1f7
cmp eax, dword [rsp + 0x80]
jbe 0x14001a277
mov byte [rsp + 0x84], 0
jmp 0x14001a29a
add r10d, 2
mov rax, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rax
add rdx, r10
mov qword [rcx + 8], rdx
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.14004e1f0
lea edi, [rax + 1]
mov edx, dword [rsp + 0xe8]
cmp qword [rsp + 0x58], 0
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rax + 1]
je 0x14001a3ff
cmp eax, dword [rsp + 0x80]
jbe 0x14001a1d2
mov byte [rsp + 0x84], 0
jmp 0x14001a403
lea eax, [rdi + 2]
cmp qword [rsp + 0x58], 0
je 0x14001a066
cmp eax, dword [rsp + 0x80]
ja 0x140019488
mov rax, qword [rsp + 0x68]
mov ecx, edi
jmp 0x14001968d
mov dword [rsp + 0x78], eax
jmp 0x14001921e
shr bl, 3
lea ecx, [r10 + 3]
lea rbp, [rdx + rcx]
add r10d, 7
mov eax, ebx
mov dword [rsp + 0xe8], ecx
movsxd rcx, dword [rdx + rcx]
lea rdx, [rcx + rbp]
add rdx, 4
mov dword [rsp + 0xe8], r10d
and al, 7
je 0x14001a200
cmp qword [rsp + 0x58], 0
je 0x14001a54d
mov ecx, dword [rsp + 0x80]
cmp r9d, ecx
jae 0x14001a59c
or bl, 0xb8
mov rcx, qword [rsp + 0x68]
mov ebp, r9d
mov byte [rcx + rbp], bl
mov r9d, dword [rsp + 0x78]
inc r9d
mov dword [rsp + 0x78], r9d
cmp qword [rsp + 0x58], 0
je 0x14001a550
mov ecx, dword [rsp + 0x80]
jmp 0x14001a5a4
mov dword [rsp + 0x78], ecx
add eax, 8
jmp 0x1400184b3
mov rcx, qword [rsp + 0x68]
mov ebp, r9d
mov rax, qword [rdx + rax]
mov qword [rcx + rbp], rax
add dword [rsp + 0x78], 8
mov eax, dword [rsp + 0xe8]
jmp 0x14001a0f6
mov dword [rsp + 0x78], ecx
add eax, 5
jmp 0x1400184b3
mov rbp, r14
cmp eax, 0xe9
jne 0x14001a4ea
movsxd rax, dword [rdi + 1]
lea rcx, [rdi + rax]
add rcx, 5
mov r14, rbp
jmp 0x140017eb4
lea ecx, [rdi + 3]
test rax, rax
je 0x14001a57c
cmp ecx, dword [rsp + 0x80]
jbe 0x14001a632
mov byte [rsp + 0x84], 0
jmp 0x14001a580
xor ebx, ebx
lea rsi, [rsp + 0x180]
mov rcx, rsi
call fcn.14004ebf0
mov rcx, qword [rsi - 0x40]
lea rax, [rsp + 0x158]
cmp rcx, rax
je 0x14001a199
call qword [sym.imp.mozglue.dll_free]
test bl, bl
jne 0x140018ec7
mov ecx, dword [rsp + 0x78]
jmp 0x140018310
add rdx, rax
mov rax, qword [rsp + 0x68]
mov ecx, r9d
mov bl, byte [rdx + 4]
mov byte [rax + rcx + 4], bl
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 5
mov eax, dword [rsp + 0xe8]
jmp 0x14001a120
add rdx, qword [rsp + 0xe0]
mov r8d, edi
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], edi
mov edx, dword [rsp + 0xe8]
jmp 0x14001a403
mov dword [rsp + 0x78], eax
jmp 0x14001a29a
cmp qword [rsp + 0x58], 0
je 0x14001a245
mov eax, dword [rsp + 0x80]
cmp r9d, eax
jae 0x14001a7c3
mov rax, qword [rsp + 0x68]
mov ecx, r9d
mov byte [rax + rcx], 0xa1
mov r9d, dword [rsp + 0x78]
inc r9d
mov dword [rsp + 0x78], r9d
cmp qword [rsp + 0x58], 0
je 0x14001a248
mov eax, dword [rsp + 0x80]
jmp 0x14001a7cb
inc r9d
add r9d, 8
mov dword [rsp + 0x78], r9d
jmp 0x1400184ba
mov byte [rsp + 0x84], 0
lea ecx, [r9 + 8]
cmp ecx, ebp
jbe 0x14001a4c9
mov byte [rsp + 0x84], 0
jmp 0x1400184ba
add rdx, r10
mov rax, qword [rsp + 0x68]
mov ecx, ecx
mov bl, byte [rdx + 4]
mov byte [rax + rcx + 4], bl
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 5
mov r10d, dword [rsp + 0xe8]
add r10d, 5
jmp 0x140018531
mov dword [rsp + 0x78], ecx
jmp 0x1400190be
mov byte [rsp + 0x84], 0
jmp 0x1400190be
cmp byte [rdx + rax + 1], 0x3d
jne 0x140018ec7
add r10d, 2
mov dword [rsp + 0xe8], r10d
mov rcx, qword [rsp + 0x58]
mov eax, dword [rsp + 0x78]
test rcx, rcx
je 0x14001a7e8
mov edx, dword [rsp + 0x80]
cmp eax, edx
jae 0x14001a8a7
mov rcx, qword [rsp + 0x68]
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14001a7ea
mov edx, dword [rsp + 0x80]
jmp 0x14001a8af
cmp byte [rdx + rax + 1], 0x48
jne 0x140018ec7
mov cl, byte [rdx + rax + 2]
and cl, 0xfc
cmp cl, 0x88
jne 0x140018ec7
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 3]
cmp qword [rsp + 0x58], 0
je 0x14001a86f
cmp ebp, dword [rsp + 0x80]
jbe 0x14001a913
mov byte [rsp + 0x84], 0
jmp 0x14001a873
lea rbp, [0x140050390]
mov r8d, dword [rbp + rcx*4 - 0x1cc]
movzx eax, byte [rdx + rax + 1]
add r10d, 2
mov dword [rsp + 0xe8], r10d
add r10, rdx
add r10, rax
lea rcx, [rsp + 0x58]
mov rdx, r10
jmp 0x1400199de
mov dword [rsp + 0x78], ebp
jmp 0x14001921e
cmp ecx, 0xc6
jne 0x14001a6b5
mov rbp, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.14004e1f0
test eax, eax
js 0x140018ec7
lea edi, [rax + 2]
mov edx, dword [rsp + 0xe8]
cmp qword [rsp + 0x58], 0
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rax + 2]
jne 0x14001a028
mov dword [rsp + 0x78], eax
add edx, edi
jmp 0x140019604
and bpl, 0xc7
cmp bpl, 5
jne 0x14001a703
cmp cl, 2
jne 0x14001a703
lea eax, [r10 + 2]
mov dword [rsp + 0xe8], eax
lea rcx, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r10d, 6
mov dword [rsp + 0xe8], r10d
mov rdx, qword [rax + rcx + 4]
lea rcx, [rsp + 0x58]
mov r8d, 4
jmp 0x1400199de
cmp ecx, 4
jne 0x14001a744
mov rbp, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.14004e1f0
test eax, eax
js 0x140018ec7
lea esi, [rax + 1]
mov edx, dword [rsp + 0xe8]
cmp qword [rsp + 0x58], 0
mov ecx, dword [rsp + 0x78]
lea eax, [rcx + rax + 1]
je 0x14001a93b
cmp eax, dword [rsp + 0x80]
jbe 0x14001aa7a
mov byte [rsp + 0x84], 0
jmp 0x14001a93f
add rdx, rax
lea rax, [rsi + rdx]
add rax, 4
mov rcx, qword [rsp + 0x68]
mov edx, r9d
mov qword [rcx + rdx], rax
add dword [rsp + 0x78], 8
jmp 0x1400184ba
mov rcx, rdi
cmp eax, 0xeb
mov r14, rbp
jne 0x140017eb4
movsx rax, byte [rdi + 1]
lea rbx, [rdi + rax]
add rbx, 2
mov eax, ebx
sub eax, edi
shl eax, 0x18
add eax, 0xfe000000
mov edx, eax
sar edx, 0x18
test eax, eax
js 0x14001aad8
mov rcx, rdi
mov r14, rbp
je 0x140017eb4
xor eax, eax
lea ecx, [rax + 2]
cmp byte [rdi + rcx], 0x90
jne 0x14001ac06
inc al
movsx eax, al
cmp edx, eax
jg 0x14001a52f
mov rcx, rbx
jmp 0x14001a142
inc r9d
add r9d, 8
inc r9d
inc r9d
inc r9d
jmp 0x14001a24c
mov dword [rsp + 0x78], eax
add r10d, 2
jmp 0x1400195b8
mov dword [rsp + 0x78], ecx
add r10d, 4
jmp 0x140018531
mov dword [rsp + 0x78], ecx
add r10d, 3
jmp 0x140018531
mov dword [rsp + 0x78], ecx
mov rax, qword [rsp + 0x38]
mov qword [rax], rdi
mov bl, 1
jmp 0x14001a172
mov byte [rsp + 0x84], 0
lea ebp, [r9 + 8]
cmp ebp, ecx
jbe 0x14001a683
mov byte [rsp + 0x84], 0
cmp r9d, ecx
jae 0x14001a781
mov rcx, qword [rsp + 0x68]
mov edx, r9d
mov byte [rcx + rdx], 0x48
mov r9d, dword [rsp + 0x78]
inc r9d
mov dword [rsp + 0x78], r9d
cmp qword [rsp + 0x58], 0
je 0x14001a557
mov ecx, dword [rsp + 0x80]
jmp 0x14001a789
mov rax, qword [rsp + 0x68]
mov ecx, edi
movzx edx, word [rdx + r10]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 2
mov r10d, dword [rsp + 0xe8]
jmp 0x14001a566
mov rax, qword [rsp + 0x68]
mov ecx, edi
mov edx, dword [rdx]
mov dword [rax + rcx], edx
add dword [rsp + 0x78], 4
mov r10d, dword [rsp + 0xe8]
jmp 0x14001a573
mov rax, qword [rsp + 0x68]
mov ecx, edi
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 3
mov r10d, dword [rsp + 0xe8]
jmp 0x14001a580
mov rcx, qword [rsp + 0x68]
mov qword [rcx + rax], rdi
add dword [rsp + 0x78], 8
cmp qword [rsp + 0x58], 0
je 0x14001a58d
cmp byte [rsp + 0x84], 0
setne al
jmp 0x140019da9
mov rcx, qword [rsp + 0x68]
mov ebp, r9d
mov qword [rcx + rbp], rdx
mov r9d, dword [rsp + 0x78]
add r9d, 8
mov dword [rsp + 0x78], r9d
cmp qword [rsp + 0x58], 0
je 0x14001a554
mov ecx, dword [rsp + 0x80]
jmp 0x14001a5b8
cmp ecx, 0x83
jne 0x140018ec7
mov cl, byte [rdx + rax + 1]
and cl, 0xf8
cmp cl, 0x60
jne 0x140018ec7
mov ecx, dword [rsp + 0x78]
lea ebp, [rcx + 5]
cmp qword [rsp + 0x58], 0
je 0x14001a6fa
cmp ebp, dword [rsp + 0x80]
ja 0x140019fd1
add rdx, rax
mov rax, qword [rsp + 0x68]
jmp 0x14001a281
mov dword [rsp + 0x78], ebp
jmp 0x14001a29a
cmp cl, 4
jne 0x140018ec7
cmp bpl, 5
jne 0x14001a45e
lea eax, [r10 + 2]
mov dword [rsp + 0xe8], eax
lea rcx, [rdx + rax]
movsxd rax, dword [rdx + rax]
add r10d, 6
mov dword [rsp + 0xe8], r10d
mov rdx, qword [rax + rcx + 4]
lea rcx, [rsp + 0x58]
jmp 0x140019d02
cmp ecx, 2
ja 0x140018ec7
jmp 0x1400191e3
lea rcx, [rsp + 0xc0]
call fcn.14004e1a0
test al, al
je 0x140018ec7
mov r10d, dword [rsp + 0xe8]
mov r12b, 1
cmp r10d, 9
ja 0x140018aa9
jmp 0x140018ec7
mov byte [rsp + 0x84], 0
cmp r9d, ecx
jae 0x14001a87c
mov rcx, qword [rsp + 0x68]
mov edx, r9d
mov byte [rcx + rdx], 0x8b
mov r9d, dword [rsp + 0x78]
inc r9d
mov dword [rsp + 0x78], r9d
cmp qword [rsp + 0x58], 0
je 0x14001a55a
mov ecx, dword [rsp + 0x80]
jmp 0x14001a884
mov byte [rsp + 0x84], 0
lea ecx, [r9 + 8]
cmp ecx, eax
ja 0x14001a26a
mov rax, qword [rsp + 0x68]
mov ecx, r9d
mov qword [rax + rcx], rdx
jmp 0x14001a4e0
inc eax
inc eax
mov dword [rsp + 0x78], eax
xor ecx, ecx
mov edx, dword [rsp + 0xe8]
mov rbx, qword [rsp + 0xe0]
movsxd rdi, dword [rbx + rdx]
lea ebp, [rdx + 4]
mov dword [rsp + 0xe8], ebp
test rcx, rcx
je 0x14001a84c
mov ecx, dword [rsp + 0x80]
cmp eax, ecx
jae 0x14001a8d6
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001a84e
mov ecx, dword [rsp + 0x80]
jmp 0x14001a8de
inc eax
inc eax
add eax, 8
inc eax
inc eax
inc eax
inc eax
inc dword [rsp + 0xe8]
inc eax
inc eax
mov dword [rsp + 0x78], eax
jmp 0x1400184ba
mov dword [rsp + 0x78], ebp
add r10d, 3
jmp 0x1400195b8
mov byte [rsp + 0x84], 0
cmp r9d, ecx
jae 0x14001a26a
movzx eax, al
lea eax, [rax + rax*8]
mov rcx, qword [rsp + 0x68]
mov edx, r9d
mov byte [rcx + rdx], al
inc dword [rsp + 0x78]
jmp 0x1400184ba
mov byte [rsp + 0x84], 0
cmp eax, edx
jae 0x14001aa21
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x53
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
mov rcx, qword [rsp + 0x58]
jmp 0x14001a7f2
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x14001aa2e
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0xbb
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001a850
mov ecx, dword [rsp + 0x80]
jmp 0x14001aa36
add rdx, rax
mov rax, qword [rsp + 0x68]
mov bl, byte [rdx + 2]
mov byte [rax + rcx + 2], bl
movzx edx, word [rdx]
mov word [rax + rcx], dx
add dword [rsp + 0x78], 3
mov r10d, dword [rsp + 0xe8]
jmp 0x14001a873
mov dword [rsp + 0x78], eax
add edx, esi
mov dword [rsp + 0xe8], edx
mov r14b, 1
jmp 0x1400184ba
mov rbp, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rbp
add rax, rdx
inc rax
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
xor edx, edx
call fcn.14004e1f0
test eax, eax
jns 0x14001a00a
jmp 0x140018ec7
xor r14d, r14d
cmp cl, 0xe9
sete r14b
lea rcx, [rax + 1]
mov dword [rsp + 0xe8], ecx
mov r8d, 4
sub r8d, r14d
lea rcx, [rdx + rax]
inc rcx
movsxd rax, dword [rdx + rax + 1]
lea rdx, [rax + rcx]
add rdx, 4
add r10d, 5
mov dword [rsp + 0xe8], r10d
lea rcx, [rsp + 0x58]
jmp 0x1400199de
lea rbx, [rsp + 0xf0]
mov byte [rbx], 0
mov rbp, qword [rsp + 0xd8]
lea rcx, [rsp + 0x120]
mov qword [rcx], rbp
lea rax, [rax + rdx + 1]
mov qword [rcx + 8], rax
mov dword [rcx + 0x10], 0
mov rdx, rbx
call fcn.14004e1f0
test eax, eax
js 0x140018ec7
cmp byte [rsp + 0xf0], 0
je 0x14001a3e1
jmp 0x140018ec7
mov byte [rsp + 0x84], 0
jmp 0x14001a7f2
mov byte [rsp + 0x84], 0
lea ebp, [rax + 8]
cmp ebp, ecx
jbe 0x14001aa9f
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x14001ab29
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x41
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001a855
mov ecx, dword [rsp + 0x80]
jmp 0x14001ab31
add rdx, qword [rsp + 0xe0]
mov r8d, esi
add rcx, qword [rsp + 0x68]
call sub.ntdll.dll_memcpy
add dword [rsp + 0x78], esi
mov edx, dword [rsp + 0xe8]
jmp 0x14001a93f
add rbx, rdx
lea rcx, [rdi + rbx]
add rcx, 4
mov rdx, qword [rsp + 0x68]
mov eax, eax
mov qword [rdx + rax], rcx
mov eax, dword [rsp + 0x78]
add eax, 8
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001a853
mov ecx, dword [rsp + 0x80]
jmp 0x14001aa45
add dl, 2
lea rcx, [rsp + 0x120]
call fcn.14004e0d0
mov rcx, rdi
test al, al
mov r14, rbp
je 0x140017eb4
lea rcx, [rsp + 0xd8]
mov qword [rcx], r13
mov qword [rcx + 8], rbx
mov dword [rcx + 0x10], 0
lea rdx, [rsp + 0x88]
call fcn.14002b3d0
mov rcx, rdi
test al, al
je 0x140017eb4
jmp 0x140017edd
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x14001ab5f
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x80
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001a857
mov ecx, dword [rsp + 0x80]
jmp 0x14001ab67
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x14001aba4
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x3b
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001a859
mov edx, dword [rsp + 0xe8]
add rdx, qword [rsp + 0xe0]
mov ecx, dword [rsp + 0x80]
jmp 0x14001abbb
mov byte [rsp + 0x84], 0
mov edx, dword [rsp + 0xe8]
add rdx, qword [rsp + 0xe0]
lea ebp, [rax + 1]
cmp ebp, ecx
jbe 0x14001ac0e
mov byte [rsp + 0x84], 0
inc dword [rsp + 0xe8]
mov ecx, dword [rsp + 0x80]
cmp eax, ecx
jae 0x14001ac38
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x49
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
je 0x14001a864
mov ecx, dword [rsp + 0x80]
jmp 0x14001ac40
mov rcx, rdi
jmp 0x14001a142
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov dl, byte [rdx]
mov byte [rcx + rax], dl
mov eax, dword [rsp + 0x78]
inc dword [rsp + 0xe8]
inc eax
mov dword [rsp + 0x78], eax
cmp qword [rsp + 0x58], 0
jne 0x14001abd1
jmp 0x14001a862
mov byte [rsp + 0x84], 0
cmp eax, ecx
jae 0x14001a26a
mov rcx, qword [rsp + 0x68]
mov eax, eax
mov byte [rcx + rax], 0x5b
jmp 0x14001a89e
mov dword [rsp + 0x78], ebp
jmp 0x14001a580
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x140018caf
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x140018ce3
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x140018d22
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x140018d56
mov byte [rsp + 0x178], 0
mov rax, qword [rsp + 0x148]
jmp 0x140018d8a
mov byte [rsp + 0x178], 0
jmp 0x140018db3
mov dword [rsp + 0x78], edx
jmp 0x140018ed6
mov byte [rsp + 0x84], 0
jmp 0x140018ed6