Function at 0x14000b300
Capabilities:
Check for time delay via gettickcount
Check for time delay via queryperformancecounter
Create process on windows
Parse pe header
Query environment variable
Query or enumerate registry value
Resume thread
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xad8
mov rbx, r9
mov r14, r8
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x60], rcx
mov rax, qword [0x14005c018]
xor rax, rsp
mov qword [rsp + 0xad0], rax
movdqa xmm0, xmmword [0x14004e2c0]
movdqa xmmword [rsp + 0x220], xmm0
lea r12, [r8 + 8]
mov rax, qword [r8 + 8]
test rax, rax
je 0x14000b445
lea rdi, [r14 + 0x10]
mov r15, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x14000b39b
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x14000b39b
call r15
cmp ax, 0x6f
je 0x14000c3de
mov rax, qword [rdi]
add rdi, 8
test rax, rax
jne 0x14000b362
mov rax, qword [r12]
mov qword [0x14005cae0], rbx
test rax, rax
je 0x14000b44c
lea rdi, [r14 + 0x10]
lea r13, str.log_launcher_error
mov rbp, r12
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
je 0x14000b3e8
mov rax, qword [rbp + 8]
add rbp, 8
add rdi, 8
test rax, rax
jne 0x14000b3c9
jmp 0x14000b44c
lea rsi, [rax + 2]
cmp word [rax + 2], 0x2d
lea rax, [rax + 4]
cmove rsi, rax
xor ebx, ebx
movzx ecx, word [rsi + rbx]
test cx, cx
je 0x14000b3d5
call r15
cmp ax, word [rbx + r13]
jne 0x14000b3d5
lea rax, [rbx + 2]
cmp word [rbx + r13 + 2], 0
mov rbx, rax
jne 0x14000b3fb
cmp word [rsi + rax], 0
jne 0x14000b3d5
mov rax, qword [rdi]
mov qword [rdi - 8], rax
add rdi, 8
test rax, rax
jne 0x14000b425
mov rax, qword [rsp + 0x68]
dec dword [rax]
mov byte [0x14005cadc], 1
jmp 0x14000b44c
mov qword [0x14005cae0], rbx
lea rcx, [rsp + 0x158]
call fcn.14000d560
mov rax, qword [r12]
test rax, rax
je 0x14000b59b
lea rsi, [r14 + 0x10]
mov rbx, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
movzx ecx, word [rax]
cmp cx, 0x2d
jne 0x14000b581
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x14000b58b
call rbx
cmp ax, 0x63
jne 0x14000b58b
movzx ecx, word [rbp + 2]
test cx, cx
je 0x14000b58b
call rbx
cmp ax, 0x6f
jne 0x14000b58b
movzx ecx, word [rbp + 4]
test cx, cx
je 0x14000b58b
call rbx
cmp ax, 0x6e
jne 0x14000b58b
movzx ecx, word [rbp + 6]
test cx, cx
je 0x14000b58b
call rbx
cmp ax, 0x74
jne 0x14000b58b
movzx ecx, word [rbp + 8]
test cx, cx
je 0x14000b58b
call rbx
cmp ax, 0x65
jne 0x14000b58b
movzx ecx, word [rbp + 0xa]
test cx, cx
je 0x14000b58b
call rbx
cmp ax, 0x6e
jne 0x14000b58b
movzx ecx, word [rbp + 0xc]
test cx, cx
je 0x14000b58b
call rbx
cmp ax, 0x74
jne 0x14000b58b
movzx ecx, word [rbp + 0xe]
test cx, cx
je 0x14000b58b
call rbx
cmp ax, 0x70
jne 0x14000b58b
movzx ecx, word [rbp + 0x10]
test cx, cx
je 0x14000b58b
call rbx
cmp ax, 0x72
jne 0x14000b58b
movzx ecx, word [rbp + 0x12]
test cx, cx
je 0x14000b58b
call rbx
cmp ax, 0x6f
jne 0x14000b58b
movzx ecx, word [rbp + 0x14]
test cx, cx
je 0x14000b58b
call rbx
cmp ax, 0x63
jne 0x14000b58b
cmp word [rbp + 0x16], 0
je 0x14000c200
jmp 0x14000b58b
cmp cx, 0x2f
je 0x14000b47e
mov rax, qword [rsi]
add rsi, 8
test rax, rax
jne 0x14000b471
pxor xmm0, xmm0
lea r8, [rsp + 0x690]
movdqa xmmword [r8 + 0x20], xmm0
movdqa xmmword [r8 + 0x10], xmm0
movdqa xmmword [r8], xmm0
lea rax, [rsp + 0x258]
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffffffffffff
xor edx, edx
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
test eax, eax
js 0x14000c725
mov r8, qword [rsp + 0x6b8]
mov ecx, 0x1000
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbp, rax
test rax, rax
je 0x14000c75a
lea rsi, [rsp + 0x6b0]
mov dword [rsi - 0x20], 0
mov byte [rsi - 8], 0
lea r9, [rsp + 0x258]
mov dword [r9], 0x209
mov rcx, rbp
mov edx, 1
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_QueryFullProcessImageNameW]
test eax, eax
je 0x14000c78f
cmp byte [rsp + 0x6a8], 1
je 0x14000c7c8
mov r8d, dword [rsp + 0x690]
lea rbx, [rsp + 0xe0]
mov rcx, rbx
mov rdx, rsi
call fcn.14000e270
cmp byte [rbx + 0x18], 1
je 0x14000c7e7
lea rsi, [rsp + 0x278]
mov dword [rsi - 0x20], 1
mov byte [rsi - 8], 0
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x209
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp eax, 0x209
je 0x14000b6a3
test eax, eax
jne 0x14000c262
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov r13d, 0x29
mov dil, 1
lea rbx, str._builds_worker_checkouts_gecko_browser_app_winlauncher_SameBinary.h
mov rax, rbp
inc rax
cmp rax, 2
jb 0x14000b6dc
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test dil, dil
jne 0x14000c73a
test bl, bl
sete sil
lea rcx, [0x140051af5]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x14000c847
mov rax, qword [r12]
test rax, rax
je 0x14000b759
lea rbx, [r14 + 0x10]
mov rbp, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x14000b74d
lea rdi, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rdi, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x14000b74d
call rbp
cmp ax, 0x6c
je 0x14000c633
mov rax, qword [rbx]
add rbx, 8
test rax, rax
jne 0x14000b715
mov r15b, 1
mov dil, 1
test sil, sil
je 0x14000b7c2
mov rax, qword [r12]
mov dil, 1
test rax, rax
je 0x14000b7bf
lea rsi, [r14 + 0x10]
mov rbx, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x14000b7b3
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x14000b7b3
call rbx
cmp ax, 0x66
je 0x14000c864
mov rax, qword [rsi]
add rsi, 8
test rax, rax
jne 0x14000b77b
xor r15d, r15d
cmp qword [rsp + 0x178], 0
jne 0x14000b857
lea rax, [rsp + 0x258]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x690]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
lea rdx, str.SOFTWAREMozillaFirefoxLauncher
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x14000ca69
mov rsi, qword [rsp + 0x690]
mov rcx, qword [rsp + 0x178]
test rcx, rcx
jne 0x14000caa6
mov qword [rsp + 0x178], rsi
mov eax, dword [rsp + 0x258]
cmp eax, 2
jne 0x14000c3cd
mov r13d, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
and rax, 0xfffffffffffffffc
je 0x14000c5cc
movzx ecx, word [rax]
cmp ecx, 0x5a4d
jne 0x14000c5cc
movsxd rcx, dword [rax + 0x3c]
cmp dword [rax + rcx], 0x4550
jne 0x14000c5cc
movzx edx, word [rax + rcx + 0x18]
cmp edx, 0x20b
jne 0x14000c5cc
cmp dword [rax + rcx + 0x50], 0x148
jb 0x14000c5cc
mov esi, dword [rax + rcx + 8]
lea rbp, [rsp + 0x1a0]
cmp qword [rbp + 0x10], 0
jne 0x14000b95f
mov rbx, qword [rsp + 0x190]
cmp qword [rsp + 0x198], 7
jbe 0x14000b8e2
mov r9, qword [rsp + 0x180]
jmp 0x14000b8ea
lea r9, [rsp + 0x180]
mov rax, qword [rsp + 0x1b8]
mov rcx, rbp
cmp rax, rbx
jae 0x14000ca09
mov rdx, rbx
call fcn.140003130
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1b8]
mov rdx, rcx
sub rdx, rax
cmp rdx, 6
jb 0x14000c3ab
lea rdx, [rax + 6]
mov qword [rsp + 0x1b0], rdx
mov rdx, rbp
cmp rcx, 7
jbe 0x14000b943
mov rdx, qword [rsp + 0x1a0]
mov ecx, dword [0x14004e35a]
mov dword [rdx + rax*2 + 8], ecx
mov rcx, qword [str.Image]
mov qword [rdx + rax*2], rcx
mov word [rdx + rax*2 + 0xc], 0
mov dword [rsp + 0x258], 4
mov rcx, qword [rsp + 0x178]
cmp qword [rsp + 0x1b8], 7
jbe 0x14000b985
mov rbp, qword [rsp + 0x1a0]
lea rax, [rsp + 0x258]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x690]
mov qword [rsp + 0x20], rax
xor ebx, ebx
lea r9, [rsp + 0x238]
mov rdx, rbp
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14000c2e4
cmp dword [rsp + 0x238], 4
jne 0x14000cab1
mov cl, 1
mov ebx, dword [rsp + 0x690]
test cl, cl
je 0x14000c356
cmp ebx, esi
jne 0x14000c356
test r15b, r15b
je 0x14000c0fd
lea rsi, [rsp + 0x690]
mov qword [rsi], 0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsi]
mov qword [rsp + 0x168], rax
mov byte [rsp + 0x170], 1
mov byte [rsp + 0xf0], 0
mov dword [rsp + 0xe0], 1
cmp dword [rsp + 0xe0], 0
jne 0x14000c1d4
call fcn.14000df20
test al, al
jne 0x14000cafd
call int.14000e030
test r14, r14
je 0x14000ca40
lea rsi, [rsp + 0x690]
mov rcx, rsi
call fcn.14000d670
mov rax, qword [rsi]
test rax, rax
je 0x14000ca40
mov qword [r14], rax
mov rax, qword [r14 + 8]
test rax, rax
je 0x14000bc2a
lea rbx, [r14 + 0x10]
mov rsi, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x14000bc0d
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x77
jne 0x14000bc0d
movzx ecx, word [rbp + 2]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x61
jne 0x14000bc0d
movzx ecx, word [rbp + 4]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x69
jne 0x14000bc0d
movzx ecx, word [rbp + 6]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x74
jne 0x14000bc0d
movzx ecx, word [rbp + 8]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x2d
jne 0x14000bc0d
movzx ecx, word [rbp + 0xa]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x66
jne 0x14000bc0d
movzx ecx, word [rbp + 0xc]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x6f
jne 0x14000bc0d
movzx ecx, word [rbp + 0xe]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x72
jne 0x14000bc0d
movzx ecx, word [rbp + 0x10]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x2d
jne 0x14000bc0d
movzx ecx, word [rbp + 0x12]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x62
jne 0x14000bc0d
movzx ecx, word [rbp + 0x14]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x72
jne 0x14000bc0d
movzx ecx, word [rbp + 0x16]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x6f
jne 0x14000bc0d
movzx ecx, word [rbp + 0x18]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x77
jne 0x14000bc0d
movzx ecx, word [rbp + 0x1a]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x73
jne 0x14000bc0d
movzx ecx, word [rbp + 0x1c]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x65
jne 0x14000bc0d
movzx ecx, word [rbp + 0x1e]
test cx, cx
je 0x14000bc0d
call rsi
cmp ax, 0x72
jne 0x14000bc0d
cmp word [rbp + 0x20], 0
je 0x14000bc5b
mov rax, qword [rbx]
add rbx, 8
test rax, rax
jne 0x14000ba8b
mov rax, qword [r12]
test rax, rax
jne 0x14000d0af
lea rcx, str.MOZ_AUTOMATION
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x14000bc41
cmp byte [rax], 0
jne 0x14000bc72
lea rcx, str.MOZ_HEADLESS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x14000d000
xor edi, edi
jmp 0x14000bc77
mov rax, qword [rbx]
mov qword [rbx - 8], rax
add rbx, 8
test rax, rax
jne 0x14000bc5b
mov rax, qword [rsp + 0x68]
dec dword [rax]
mov edi, 1
mov rax, qword [r12]
test rax, rax
je 0x14000bccf
lea rsi, [r14 + 0x10]
mov rbx, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x14000bcc3
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x14000bcc3
call rbx
cmp ax, 0x6e
je 0x14000cb56
mov rax, qword [rsi]
add rsi, 8
test rax, rax
jne 0x14000bc8b
lea r9, [rsp + 0xa8]
mov qword [r9], 0
mov rdx, qword [r14]
lea rsi, [rsp + 0x140]
mov rcx, rsi
mov r8d, edi
call fcn.14001e6e0
cmp byte [rsi + 0x10], 1
je 0x14000ccbf
mov rbx, qword [rsp + 0xa8]
test edi, edi
jne 0x14000bd1d
cmp dword [rsp + 0x140], 1
jne 0x14000bd1d
test rbx, rbx
je 0x14000d2f0
lea rcx, [rsp + 0x158]
lea rsi, [rsp + 0x128]
mov rdx, rsi
call fcn.14000d760
cmp byte [rsi + 0x10], 1
je 0x14000cce7
mov rax, qword [rsp + 0x68]
mov edx, dword [rax]
lea rsi, [rsp + 0xa0]
mov rcx, rsi
mov r8, r14
call fcn.14000e5d0
mov r15, qword [rsi]
test r15, r15
je 0x14000ccf1
lea rsi, [rsp + 0x98]
mov rcx, rsi
mov rdx, r14
call fcn.14000e7b0
cmp byte [rsi + 1], 0
je 0x14000cd2d
mov dword [rsp + 0x70], edi
mov qword [rsp + 0x68], rbx
xor eax, eax
lea rbp, [rsp + 0x100]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], 3
mov qword [rbp - 0x18], rbp
mov qword [rbp + 0x18], rax
call fcn.14000df20
test al, al
jne 0x14000cd69
lea r12, [rsp + 0xe8]
mov rdi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rdi
mov rsi, rax
mov ecx, 0xfffffff5
call rdi
mov r13, rax
mov ecx, 0xfffffff4
call rdi
mov rbx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x14000be3a
mov rcx, rsi
mov edx, 1
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
je 0x14000be3a
mov rax, qword [rsp + 0xf0]
cmp rax, qword [rsp + 0xf8]
je 0x14000d013
mov rcx, qword [rsp + 0xe8]
mov qword [rcx + rax*8], rsi
inc qword [rsp + 0xf0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x14000be8d
mov rcx, r13
mov edx, 1
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
je 0x14000be8d
mov rax, qword [rsp + 0xf0]
cmp rax, qword [rsp + 0xf8]
je 0x14000d030
mov rcx, qword [rsp + 0xe8]
mov qword [rcx + rax*8], r13
inc qword [rsp + 0xf0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x14000bee0
mov rcx, rbx
mov edx, 1
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
je 0x14000bee0
mov rax, qword [rsp + 0xf0]
cmp rax, qword [rsp + 0xf8]
je 0x14000d04d
mov rcx, qword [rsp + 0xe8]
mov qword [rcx + rax*8], rbx
inc qword [rsp + 0xf0]
mov qword [rsp + 0x78], r15
lea rcx, [rsp + 0xe0]
lea r12, [rsp + 0xc8]
lea r15, [rsp + 0x690]
mov rdx, r12
mov r8, r15
call fcn.14001e480
cmp byte [r12 + 0x10], 1
je 0x14000cd76
mov r12, rbp
xor edi, edi
cmp byte [rsp + 0xc8], 0
je 0x14000cda0
mov ebp, 0x80404
cmp qword [rsp + 0xf0], 0
je 0x14000bf5c
or byte [rsp + 0x6cd], 1
mov qword [rsp + 0x6e0], rsi
mov qword [rsp + 0x6e8], r13
mov qword [rsp + 0x6f0], rbx
mov edi, 1
lea rsi, [rsp + 0x258]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
test byte [rsi + 0x3d], 8
mov rbx, qword [rsp + 0x68]
jne 0x14000cdaa
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], 0
mov rdx, qword [r14]
lea rax, [rsp + 0x80]
test rbx, rbx
jne 0x14000cdd0
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r15
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], edi
mov rcx, rdx
mov r15, qword [rsp + 0x78]
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14000ce0a
mov rsi, qword [rsp + 0x80]
mov rbp, qword [rsp + 0x88]
mov rdx, qword [r14]
lea rdi, [rsp + 0xb0]
mov rcx, rdi
mov r8, rsi
call fcn.14001df10
cmp byte [rdi + 0x10], 1
je 0x14000ce56
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
mov rdi, qword [rsp + 0x60]
je 0x14000ce7a
test byte [rsp + 0x70], 1
je 0x14000cecf
mov rcx, rsi
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x14000cf54
lea rdx, [rsp + 0x238]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x14000cf54
mov eax, dword [rsp + 0x238]
mov dword [rdi], eax
mov byte [rdi + 4], 1
lea rax, [rbp + 1]
cmp rax, 2
jb 0x14000c081
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rsi + 1]
cmp rax, 2
jb 0x14000c094
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbp, r12
mov rsi, qword [rsp + 0x118]
mov qword [rsp + 0x118], 0
test rsi, rsi
je 0x14000c0c2
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_DeleteProcThreadAttributeList]
mov rcx, rsi
call qword [sym.imp.mozglue.dll_free]
mov rcx, qword [rsp + 0xe8]
cmp rcx, rbp
jne 0x14000cf72
test r15, r15
je 0x14000c0e1
mov rcx, r15
call qword [sym.imp.mozglue.dll_free]
lea rax, [rbx + 1]
cmp rax, 2
jb 0x14000c22e
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000c22e
cmp r13d, 1
jne 0x14000c30a
lea rcx, [rsp + 0x158]
lea rsi, [rsp + 0x690]
mov rdx, rsi
call fcn.14001dd80
cmp byte [rsi + 0x10], 0
jne 0x14000cfcc
lea rcx, [rsp + 0x158]
lea rsi, [rsp + 0x258]
mov rdx, rsi
call fcn.14001dd20
cmp byte [rsi + 0x10], 0
jne 0x14000c39d
mov al, byte [rsp + 0x698]
test al, al
setne cl
cmp byte [rsp + 0x260], 0
setne dl
xor dl, cl
mov rcx, qword [rsp + 0x690]
xor ebp, ebp
cmp rcx, qword [rsp + 0x258]
setae bpl
test al, al
movzx eax, dl
cmove ebp, eax
or al, bpl
and dil, al
movzx edi, dil
cmp dil, 1
je 0x14000d333
lea rsi, [rsp + 0x238]
mov qword [rsi], 0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rsi]
lea rax, [rsp + 0x160]
mov qword [rax - 8], rcx
mov byte [rax], 1
mov byte [rsp + 0xf0], 0
mov dword [rsp + 0xe0], edi
jmp 0x14000ba2b
lea rcx, str.MOZ_DEBUG_BROWSER_PROCESS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x14000cf7d
lea rcx, str.MOZ_DEBUG_BROWSER_PAUSE
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__wgetenv]
test rax, rax
jne 0x14000cf91
lea rcx, [rsp + 0x158]
lea rsi, [rsp + 0x690]
mov rdx, rsi
call fcn.14000d760
cmp byte [rsi + 0x10], 1
je 0x14000c61f
mov rdi, qword [rsp + 0x60]
mov qword [rdi], 0
lea rcx, [rsp + 0x158]
call fcn.14000d900
mov rcx, qword [rsp + 0xad0]
xor rcx, rsp
call fcn.14001bc70
mov rax, rdi
add rsp, 0xad8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp byte [rsp + 0x270], 1
je 0x14000d06a
mov r8d, dword [rsp + 0x258]
lea rbx, [rsp + 0x238]
mov rcx, rbx
mov rdx, rsi
call fcn.14000e270
cmp byte [rbx + 0x18], 1
je 0x14000d089
cmp byte [rsp + 0xf8], 0
jne 0x14000d0a8
movdqu xmm0, xmmword [rsp + 0x238]
movq xmm1, qword [rsp + 0xf0]
movq xmm2, qword [rsp + 0x248]
pcmpeqb xmm2, xmm1
pcmpeqb xmm0, xmmword [rsp + 0xe0]
pand xmm0, xmm2
pmovmskb eax, xmm0
xor ebx, ebx
cmp eax, 0xffff
sete bl
xor edi, edi
jmp 0x14000b6c7
mov ecx, 0
cmp eax, 2
je 0x14000b9d4
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov eax, 0x3b
jmp 0x14000cabb
test r13d, r13d
jne 0x14000d348
lea rsi, [rsp + 0x690]
mov qword [rsi], 0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsi]
mov qword [rsp + 0x158], rax
mov byte [rsp + 0x160], 1
mov byte [rsp + 0xf0], 0
mov dword [rsp + 0xe0], 0
jmp 0x14000ba2b
lea rcx, [rsp + 0x158]
lea rbx, [rsp + 0x690]
mov rdx, rbx
call fcn.14001e0b0
cmp byte [rbx + 0x10], 0
jne 0x14000cfcc
lea rcx, [rsp + 0x158]
lea rbx, [rsp + 0x258]
mov rdx, rbx
mov r8d, esi
call fcn.14001deb0
cmp byte [rbx + 0x10], 0
je 0x14000b9e4
movdqu xmm0, xmmword [rsp + 0x258]
jmp 0x14000cfd5
mov qword [rsp + 0x20], 6
lea r9, str.Image
mov edx, 6
mov rcx, rbp
call fcn.14000dba0
jmp 0x14000b95f
cmp eax, 1
jne 0x14000d3c2
xor r13d, r13d
jmp 0x14000b85d
movzx ecx, word [rbp + 2]
test cx, cx
je 0x14000b39b
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x73
jne 0x14000b39b
movzx ecx, word [rbp + 4]
test cx, cx
je 0x14000b39b
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x69
jne 0x14000b39b
movzx ecx, word [rbp + 6]
test cx, cx
je 0x14000b39b
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x6e
jne 0x14000b39b
movzx ecx, word [rbp + 8]
test cx, cx
je 0x14000b39b
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x74
jne 0x14000b39b
cmp word [rbp + 0xa], 0
jne 0x14000b39b
mov rax, qword [rsp + 0x68]
cmp dword [rax], 4
jne 0x14000c5c1
mov rax, qword [r12]
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x14000c5c1
lea rdi, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rdi, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x14000c5c1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x6f
jne 0x14000c5c1
movzx ecx, word [rdi + 2]
test cx, cx
je 0x14000c5c1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x73
jne 0x14000c5c1
movzx ecx, word [rdi + 4]
test cx, cx
je 0x14000c5c1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x69
jne 0x14000c5c1
movzx ecx, word [rdi + 6]
test cx, cx
je 0x14000c5c1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x6e
jne 0x14000c5c1
movzx ecx, word [rdi + 8]
test cx, cx
je 0x14000c5c1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x74
jne 0x14000c5c1
cmp word [rdi + 0xa], 0
jne 0x14000c5c1
lea rax, [r14 + 0x10]
mov rcx, qword [rax]
mov qword [rax - 8], rcx
add rax, 8
test rcx, rcx
jne 0x14000c536
mov rax, qword [rsp + 0x68]
dec dword [rax]
mov rax, qword [r12]
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x14000c5c1
lea r13, [rsp + 0x220]
lea rsi, [rax + 2]
cmp word [rax + 2], 0x2d
lea rax, [rax + 4]
cmove rsi, rax
lea rbp, [0x1400528a2]
cmp word [rbp], 0
mov rdi, rsi
je 0x14000c5ae
add rbp, 2
mov rdi, rsi
movzx ecx, word [rdi]
test cx, cx
je 0x14000c5b4
call r15
cmp ax, word [rbp - 2]
jne 0x14000c5b4
add rdi, 2
cmp word [rbp], 0
lea rbp, [rbp + 2]
jne 0x14000c58e
cmp word [rdi], 0
je 0x14000c609
mov rbp, qword [r13 + 8]
add r13, 8
test rbp, rbp
jne 0x14000c57d
mov ecx, 0x7f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov byte [rsp + 0xf0], 1
lea rax, str._builds_worker_checkouts_gecko_toolkit_xre_LauncherRegistryInfo.cpp
mov qword [rsp + 0xe0], rax
movabs rax, 0x800700c100000021
mov qword [rsp + 0xe8], rax
lea rcx, [rsp + 0xe0]
xor edx, edx
call fcn.14001fb60
jmp 0x14000c200
mov rax, qword [r14 + 0x10]
movzx eax, word [rax]
or eax, 2
cmp ax, 0x2f
jne 0x14000b3a7
jmp 0x14000c5c1
lea rcx, [rsp + 0x690]
xor edx, edx
call fcn.14001fb60
jmp 0x14000c222
movzx ecx, word [rdi + 2]
test cx, cx
je 0x14000b74d
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x61
jne 0x14000b74d
movzx ecx, word [rdi + 4]
test cx, cx
je 0x14000b74d
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x75
jne 0x14000b74d
movzx ecx, word [rdi + 6]
test cx, cx
je 0x14000b74d
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x6e
jne 0x14000b74d
movzx ecx, word [rdi + 8]
test cx, cx
je 0x14000b74d
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x63
jne 0x14000b74d
movzx ecx, word [rdi + 0xa]
test cx, cx
je 0x14000b74d
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x68
jne 0x14000b74d
movzx ecx, word [rdi + 0xc]
test cx, cx
je 0x14000b74d
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x65
jne 0x14000b74d
movzx ecx, word [rdi + 0xe]
test cx, cx
je 0x14000b74d
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x72
jne 0x14000b74d
cmp word [rdi + 0x10], 0
jne 0x14000b74d
mov rax, qword [rbx]
mov qword [rbx - 8], rax
add rbx, 8
test rax, rax
jne 0x14000c709
mov rax, qword [rsp + 0x68]
dec dword [rax]
jmp 0x14000b764
mov esi, eax
or esi, 0x10000000
lea rbx, str._builds_worker_workspace_obj_build_dist_include_mozilla_NativeNt.h
mov r13d, 0x502
lea rcx, [rsp + 0x690]
mov qword [rcx], rbx
mov dword [rcx + 8], r13d
mov dword [rcx + 0xc], esi
xor esi, esi
xor edx, edx
call fcn.14001fb60
jmp 0x14000b6eb
xor ebx, ebx
xor edi, edi
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
je 0x14000b6c7
cmp eax, 0x57
je 0x14000b6c7
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov r13d, 0x5c
jmp 0x14000b6bd
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov byte [rsp + 0x6a8], 1
lea rbx, str._builds_worker_checkouts_gecko_browser_app_winlauncher_SameBinary.h
mov qword [rsp + 0x698], rbx
mov r13d, 0x1e
mov dil, 1
jmp 0x14000b6c7
mov rbx, qword [rsp + 0x698]
mov r13d, dword [rsp + 0x6a0]
mov dil, 1
mov esi, dword [rsp + 0x6a4]
jmp 0x14000b6c7
mov esi, dword [rsp + 0xec]
cmp esi, 0xd000003a
jne 0x14000cfeb
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r15, rax
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
lea rsi, [rsp + 0x258]
mov rcx, rsi
call fcn.140020ac0
cmp byte [rsi + 0x18], 1
jne 0x14000d36e
mov rbx, qword [rsp + 0x260]
mov r13d, dword [rsp + 0x268]
mov dil, 1
mov esi, dword [rsp + 0x26c]
jmp 0x14000d388
cmp byte [rax], 0
je 0x14000b701
lea rcx, str.MOZ_LAUNCHER_PROCESS
call sub.api_ms_win_crt_environment_l1_1_0.dll__putenv
mov sil, 1
jmp 0x14000b701
movzx ecx, word [rbp + 2]
test cx, cx
je 0x14000b7b3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x6f
jne 0x14000b7b3
movzx ecx, word [rbp + 4]
test cx, cx
je 0x14000b7b3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x72
jne 0x14000b7b3
movzx ecx, word [rbp + 6]
test cx, cx
je 0x14000b7b3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x63
jne 0x14000b7b3
movzx ecx, word [rbp + 8]
test cx, cx
je 0x14000b7b3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x65
jne 0x14000b7b3
movzx ecx, word [rbp + 0xa]
test cx, cx
je 0x14000b7b3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x2d
jne 0x14000b7b3
movzx ecx, word [rbp + 0xc]
test cx, cx
je 0x14000b7b3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x6c
jne 0x14000b7b3
movzx ecx, word [rbp + 0xe]
test cx, cx
je 0x14000b7b3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x61
jne 0x14000b7b3
movzx ecx, word [rbp + 0x10]
test cx, cx
je 0x14000b7b3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x75
jne 0x14000b7b3
movzx ecx, word [rbp + 0x12]
test cx, cx
je 0x14000b7b3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x6e
jne 0x14000b7b3
movzx ecx, word [rbp + 0x14]
test cx, cx
je 0x14000b7b3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x63
jne 0x14000b7b3
movzx ecx, word [rbp + 0x16]
test cx, cx
je 0x14000b7b3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x68
jne 0x14000b7b3
movzx ecx, word [rbp + 0x18]
test cx, cx
je 0x14000b7b3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x65
jne 0x14000b7b3
movzx ecx, word [rbp + 0x1a]
test cx, cx
je 0x14000b7b3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x72
jne 0x14000b7b3
cmp word [rbp + 0x1c], 0
jne 0x14000b7b3
mov rax, qword [rsi]
mov qword [rsi - 8], rax
add rsi, 8
test rax, rax
jne 0x14000c9e8
mov rax, qword [rsp + 0x68]
dec dword [rax]
xor r15d, r15d
xor edi, edi
jmp 0x14000b7c2
cmp rax, 7
jbe 0x14000ca17
mov rcx, qword [rsp + 0x1a0]
mov qword [rsp + 0x1b0], rbx
lea r8, [rbx + rbx]
mov qword [rsp + 0x70], rcx
mov rdx, r9
call sub.ntdll.dll_memmove
mov rax, qword [rsp + 0x70]
mov word [rax + rbx*2], 0
jmp 0x14000b906
lea rcx, [rsp + 0x690]
mov byte [rcx + 0x10], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rcx], rax
movabs rax, 0x800705070000010e
mov qword [rcx + 8], rax
jmp 0x14000c627
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov eax, 0x79
mov byte [rsp + 0xf0], 1
lea rdx, str._builds_worker_checkouts_gecko_toolkit_xre_LauncherRegistryInfo.cpp
mov qword [rsp + 0xe0], rdx
mov dword [rsp + 0xe8], eax
mov dword [rsp + 0xec], ecx
jmp 0x14000c5f5
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14000b83f
mov eax, 0x3f
mov ecx, 0x8007065d
lea rdx, str._builds_worker_checkouts_gecko_toolkit_xre_LauncherRegistryInfo.cpp
movabs rbp, 0xffffff0000000000
and rbp, rdx
mov ebx, edx
shr rdx, 0x20
movzx edx, dl
shl rdx, 0x20
or rdx, rbp
or rbx, rdx
mov qword [rsp + 0xe0], rbx
mov dword [rsp + 0xe8], eax
mov dword [rsp + 0xec], ecx
jmp 0x14000cfde
mov eax, dword [0x14005caf8]
mov ecx, dword [0x14005c2c8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000d52c
mov rax, qword [0x14005caf0]
test rax, rax
je 0x14000ba46
lea rdx, [rsp + 0x690]
mov dword [rdx], 4
mov r8d, 4
mov ecx, 0xa
call qword [case.0x14001b2ee.0]
jmp 0x14000ba46
movzx ecx, word [rbp + 2]
test cx, cx
je 0x14000bcc3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x6f
jne 0x14000bcc3
movzx ecx, word [rbp + 4]
test cx, cx
je 0x14000bcc3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x2d
jne 0x14000bcc3
movzx ecx, word [rbp + 6]
test cx, cx
je 0x14000bcc3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x64
jne 0x14000bcc3
movzx ecx, word [rbp + 8]
test cx, cx
je 0x14000bcc3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x65
jne 0x14000bcc3
movzx ecx, word [rbp + 0xa]
test cx, cx
je 0x14000bcc3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x65
jne 0x14000bcc3
movzx ecx, word [rbp + 0xc]
test cx, cx
je 0x14000bcc3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x6c
jne 0x14000bcc3
movzx ecx, word [rbp + 0xe]
test cx, cx
je 0x14000bcc3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x65
jne 0x14000bcc3
movzx ecx, word [rbp + 0x10]
test cx, cx
je 0x14000bcc3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x76
jne 0x14000bcc3
movzx ecx, word [rbp + 0x12]
test cx, cx
je 0x14000bcc3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x61
jne 0x14000bcc3
movzx ecx, word [rbp + 0x14]
test cx, cx
je 0x14000bcc3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x74
jne 0x14000bcc3
movzx ecx, word [rbp + 0x16]
test cx, cx
je 0x14000bcc3
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x65
jne 0x14000bcc3
cmp word [rbp + 0x18], 0
jne 0x14000bcc3
mov rax, qword [rsi]
mov qword [rsi - 8], rax
add rsi, 8
test rax, rax
jne 0x14000cca0
mov rax, qword [rsp + 0x68]
dec dword [rax]
or edi, 2
jmp 0x14000bccf
lea rcx, [rsp + 0x140]
xor edx, edx
call fcn.14001fb60
mov rdi, qword [rsp + 0x60]
mov qword [rdi], 0
mov rbx, qword [rsp + 0xa8]
jmp 0x14000c0e1
lea rcx, [rsp + 0x128]
jmp 0x14000cd15
lea rcx, [rsp + 0x690]
mov byte [rcx + 0x10], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rcx], rax
movabs rax, 0x8007050700000139
mov qword [rcx + 8], rax
xor edx, edx
call fcn.14001fb60
mov rdi, qword [rsp + 0x60]
mov qword [rdi], 0
jmp 0x14000c0e1
lea rcx, [rsp + 0x690]
mov byte [rcx + 0x10], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rcx], rax
movabs rax, 0x8007005700000140
mov qword [rcx + 8], rax
xor edx, edx
call fcn.14001fb60
mov rdi, qword [rsp + 0x60]
mov qword [rdi], 0
jmp 0x14000c0d8
or byte [rsp + 0xe7], 0x10
jmp 0x14000bdba
lea rcx, [rsp + 0xc8]
xor edx, edx
call fcn.14001fb60
mov rdi, qword [rsp + 0x60]
mov qword [rdi], 0
mov rbx, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x14000c097
mov ebp, 0x404
jmp 0x14000bf5c
mov rax, qword [rsp + 0x270]
test rax, rax
je 0x14000bf7c
or byte [rsp + 0x6cd], 8
mov qword [rsp + 0x6a8], rax
jmp 0x14000bf7c
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r15
movdqu xmmword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], 0
mov rcx, rbx
mov r15, qword [rsp + 0x78]
mov r8, r15
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
jmp 0x14000bfd8
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
or edx, 0x80070000
test eax, eax
cmovle edx, eax
lea rcx, [rsp + 0x238]
mov byte [rcx + 0x10], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rcx], rax
mov dword [rcx + 8], 0x17f
mov dword [rcx + 0xc], edx
xor edx, edx
call fcn.14001fb60
mov rdi, qword [rsp + 0x60]
mov qword [rdi], 0
jmp 0x14000c094
lea rcx, [rsp + 0xb0]
xor edx, edx
call fcn.14001fb60
mov rcx, rsi
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rdi, qword [rsp + 0x60]
jmp 0x14000cec3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
or edx, 0x80070000
test eax, eax
cmovle edx, eax
lea rcx, [rsp + 0x238]
mov byte [rcx + 0x10], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rcx], rax
mov dword [rcx + 8], 0x18f
mov dword [rcx + 0xc], edx
xor edx, edx
call fcn.14001fb60
mov rcx, rsi
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov qword [rdi], 0
jmp 0x14000c06e
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov r14d, eax
xor ebx, ebx
cmp eax, 1
mov r13d, 0
sbb r13d, r13d
not r13d
mov dword [rsp + 0x70], 0
test eax, eax
jne 0x14000ceff
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x70], eax
or r13d, 0x2710
mov r15, qword [sym.imp.USER32.dll_WaitForInputIdle]
test r14d, r14d
jne 0x14000cf1e
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, eax
sub ebx, dword [rsp + 0x70]
mov edi, r13d
sub edi, ebx
jbe 0x14000cf54
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, rsi
mov edx, edi
call r15
cmp eax, 0xffffffff
jne 0x14000cf54
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5bf
jne 0x14000cf54
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000cf0d
mov rdi, qword [rsp + 0x60]
mov dword [rdi], 0
mov byte [rdi + 4], 1
mov rbx, qword [rsp + 0x68]
mov r15, qword [rsp + 0x78]
jmp 0x14000c06e
call qword [sym.imp.mozglue.dll_free]
jmp 0x14000c0d3
cmp byte [rax], 0
je 0x14000c1ea
call qword [sym.imp.KERNEL32.dll_DebugBreak]
jmp 0x14000c200
cmp word [rax], 0
je 0x14000c200
mov rcx, rax
xor edx, edx
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
imul esi, eax, 0x3e8
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
call fcn.140020be0
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000c200
movdqu xmm0, xmmword [rsp + 0x690]
movdqa xmmword [rsp + 0xe0], xmm0
mov byte [rsp + 0xf0], 1
jmp 0x14000c5f5
mov rbx, qword [rsp + 0xe0]
mov r13d, dword [rsp + 0xe8]
jmp 0x14000c7c0
cmp byte [rax], 0
mov edi, 0
jne 0x14000bc72
jmp 0x14000bc77
mov rcx, r12
call fcn.140020d80
test al, al
je 0x14000be3a
mov rax, qword [rsp + 0xf0]
jmp 0x14000be26
mov rcx, r12
call fcn.140020d80
test al, al
je 0x14000be8d
mov rax, qword [rsp + 0xf0]
jmp 0x14000be79
mov rcx, r12
call fcn.140020d80
test al, al
je 0x14000bee0
mov rax, qword [rsp + 0xf0]
jmp 0x14000becc
mov rbx, qword [rsp + 0x260]
mov r13d, dword [rsp + 0x268]
mov dil, 1
mov esi, dword [rsp + 0x26c]
jmp 0x14000b6c7
mov rbx, qword [rsp + 0x238]
mov r13d, dword [rsp + 0x240]
mov dil, 1
mov esi, dword [rsp + 0x244]
jmp 0x14000b6c7
xor ebx, ebx
jmp 0x14000c2dd
lea rbx, [r14 + 0x10]
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x14000d155
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x14000d155
call rsi
cmp ax, 0x6d
jne 0x14000d155
movzx ecx, word [rbp + 2]
test cx, cx
je 0x14000d155
call rsi
cmp ax, 0x61
jne 0x14000d155
movzx ecx, word [rbp + 4]
test cx, cx
je 0x14000d155
call rsi
cmp ax, 0x72
jne 0x14000d155
movzx ecx, word [rbp + 6]
test cx, cx
je 0x14000d155
call rsi
cmp ax, 0x69
jne 0x14000d155
movzx ecx, word [rbp + 8]
test cx, cx
je 0x14000d155
call rsi
cmp ax, 0x6f
jne 0x14000d155
movzx ecx, word [rbp + 0xa]
test cx, cx
je 0x14000d155
call rsi
cmp ax, 0x6e
jne 0x14000d155
movzx ecx, word [rbp + 0xc]
test cx, cx
je 0x14000d155
call rsi
cmp ax, 0x65
je 0x14000d3d1
mov rax, qword [rbx]
add rbx, 8
test rax, rax
jne 0x14000d0b3
mov rax, qword [r12]
test rax, rax
je 0x14000bc2a
lea rbx, [r14 + 0x10]
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x14000d218
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x14000d218
call rsi
cmp ax, 0x62
jne 0x14000d218
movzx ecx, word [rbp + 2]
test cx, cx
je 0x14000d218
call rsi
cmp ax, 0x61
jne 0x14000d218
movzx ecx, word [rbp + 4]
test cx, cx
je 0x14000d218
call rsi
cmp ax, 0x63
jne 0x14000d218
movzx ecx, word [rbp + 6]
test cx, cx
je 0x14000d218
call rsi
cmp ax, 0x6b
jne 0x14000d218
movzx ecx, word [rbp + 8]
test cx, cx
je 0x14000d218
call rsi
cmp ax, 0x67
jne 0x14000d218
movzx ecx, word [rbp + 0xa]
test cx, cx
je 0x14000d218
call rsi
cmp ax, 0x72
jne 0x14000d218
movzx ecx, word [rbp + 0xc]
test cx, cx
je 0x14000d218
call rsi
cmp ax, 0x6f
je 0x14000d430
mov rax, qword [rbx]
add rbx, 8
test rax, rax
jne 0x14000d176
mov rax, qword [r12]
test rax, rax
je 0x14000bc2a
lea rbx, [r14 + 0x10]
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x14000d2db
lea rdi, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rdi, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x14000d2db
call rsi
cmp ax, 0x68
jne 0x14000d2db
movzx ecx, word [rdi + 2]
test cx, cx
je 0x14000d2db
call rsi
cmp ax, 0x65
jne 0x14000d2db
movzx ecx, word [rdi + 4]
test cx, cx
je 0x14000d2db
call rsi
cmp ax, 0x61
jne 0x14000d2db
movzx ecx, word [rdi + 6]
test cx, cx
je 0x14000d2db
call rsi
cmp ax, 0x64
jne 0x14000d2db
movzx ecx, word [rdi + 8]
test cx, cx
je 0x14000d2db
call rsi
cmp ax, 0x6c
jne 0x14000d2db
movzx ecx, word [rdi + 0xa]
test cx, cx
je 0x14000d2db
call rsi
cmp ax, 0x65
jne 0x14000d2db
movzx ecx, word [rdi + 0xc]
test cx, cx
je 0x14000d2db
call rsi
cmp ax, 0x73
je 0x14000d503
mov rax, qword [rbx]
add rbx, 8
test rax, rax
jne 0x14000d239
jmp 0x14000bc2a
mov rax, qword [rsp + 0x68]
mov edx, dword [rax]
lea rsi, [rsp + 0x690]
mov rcx, rsi
mov r8, r14
call fcn.14001ff80
cmp byte [rsi + 0x10], 1
jne 0x14000d3a4
xor esi, esi
lea rcx, [rsp + 0x690]
xor edx, edx
call fcn.14001fb60
mov rax, qword [rsp + 0x60]
mov qword [rax], 0
jmp 0x14000d3b2
lea rax, [rsp + 0x170]
mov qword [rax - 8], 0
jmp 0x14000c1bd
mov byte [rsp + 0xf0], 1
lea rax, str._builds_worker_checkouts_gecko_toolkit_xre_LauncherRegistryInfo.cpp
mov qword [rsp + 0xe0], rax
movabs rax, 0x80070507000000ed
jmp 0x14000c5ed
lea rcx, [rsp + 0x690]
lea rdx, [rsp + 0x258]
call fcn.140020b50
movzx ebx, al
xor edi, edi
lea rax, [r15 + 1]
cmp rax, 2
jb 0x14000b6c7
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000b6c7
mov rax, qword [rsp + 0x60]
mov dword [rax], 0
mov sil, 1
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], sil
xor ebx, ebx
jmp 0x14000c0e1
mov eax, 0x88
mov ecx, 0x80070507
jmp 0x14000ca7c
movzx ecx, word [rbp + 0xe]
test cx, cx
je 0x14000d155
call rsi
cmp ax, 0x74
jne 0x14000d155
movzx ecx, word [rbp + 0x10]
test cx, cx
je 0x14000d155
call rsi
cmp ax, 0x74
jne 0x14000d155
movzx ecx, word [rbp + 0x12]
test cx, cx
je 0x14000d155
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x65
jne 0x14000d155
cmp word [rbp + 0x14], 0
jne 0x14000d155
jmp 0x14000bc72
movzx ecx, word [rbp + 0xe]
test cx, cx
je 0x14000d218
call rsi
cmp ax, 0x75
jne 0x14000d218
movzx ecx, word [rbp + 0x10]
test cx, cx
je 0x14000d218
call rsi
cmp ax, 0x6e
jne 0x14000d218
movzx ecx, word [rbp + 0x12]
test cx, cx
je 0x14000d218
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x64
jne 0x14000d218
movzx ecx, word [rbp + 0x14]
test cx, cx
je 0x14000d218
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x74
jne 0x14000d218
movzx ecx, word [rbp + 0x16]
test cx, cx
je 0x14000d218
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x61
jne 0x14000d218
movzx ecx, word [rbp + 0x18]
test cx, cx
je 0x14000d218
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x73
jne 0x14000d218
movzx ecx, word [rbp + 0x1a]
test cx, cx
je 0x14000d218
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x6b
jne 0x14000d218
cmp word [rbp + 0x1c], 0
jne 0x14000d218
jmp 0x14000bc72
movzx ecx, word [rdi + 0xe]
test cx, cx
je 0x14000d2db
call rsi
cmp ax, 0x73
jne 0x14000d2db
cmp word [rdi + 0x10], 0
jne 0x14000d2db
jmp 0x14000bc72
lea rcx, [0x14005caf8]
call fcn.14001aa20
cmp dword [0x14005caf8], 0xffffffff
jne 0x14000cb22
call fcn.140020d10
lea rcx, [0x14005caf8]
call fcn.14001a9c0
jmp 0x14000cb22