Function at 0x140004300
Capabilities:
Create process on windows
Query environment variable
Resume thread
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa88
mov rsi, r9
mov r12, r8
mov qword [rsp + 0x60], rcx
mov rax, qword [0x140054018]
xor rax, rsp
mov qword [rsp + 0xa80], rax
movdqa xmm0, xmmword [0x1400482f0]
movdqa xmmword [rsp + 0x1b0], xmm0
lea r8, [rsp + 0x1b0]
mov qword [rsp + 0x68], rdx
mov rcx, rdx
mov rdx, r12
call fcn.140005bb0
mov qword [0x140054ac8], rsi
lea r13, [r12 + 8]
mov rax, qword [r12 + 8]
test rax, rax
je 0x14000441e
lea rsi, [r12 + 0x10]
mov r15, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
lea rbx, str.log_launcher_error
mov rbp, r13
jmp 0x1400043a1
mov rax, qword [rbp + 8]
add rbp, 8
add rsi, 8
test rax, rax
je 0x14000441e
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x140004390
lea rdi, [rax + 2]
xor ecx, ecx
cmp word [rax + 2], 0x2d
lea rdx, [rax + 4]
sete cl
cmove rdi, rdx
movzx ecx, word [rax + rcx*2 + 2]
test cx, cx
setne al
mov r14d, 2
test al, 1
je 0x140004390
call r15
cmp ax, word [r14 + rbx - 2]
jne 0x140004390
movzx ecx, word [rdi + r14]
test cx, cx
setne al
cmp word [r14 + rbx], 0
lea r14, [r14 + 2]
jne 0x1400043d4
test cx, cx
jne 0x140004390
mov rax, qword [rsi]
mov qword [rsi - 8], rax
add rsi, 8
test rax, rax
jne 0x1400043ff
mov rax, qword [rsp + 0x68]
add dword [rax], 0xffffffff
mov byte [0x140054ac4], 1
lea rcx, [rsp + 0xe8]
call fcn.1400031b0
mov rax, qword [r13]
test rax, rax
je 0x1400045dd
lea rsi, [r12 + 0x10]
mov rbx, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
jmp 0x140004460
mov rax, qword [rsi]
add rsi, 8
test rax, rax
je 0x1400045dd
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x140004450
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x140004450
call rbx
cmp ax, 0x63
jne 0x140004450
movzx ecx, word [rbp + 2]
test cx, cx
je 0x140004450
call rbx
cmp ax, 0x6f
jne 0x140004450
movzx ecx, word [rbp + 4]
test cx, cx
je 0x140004450
call rbx
cmp ax, 0x6e
jne 0x140004450
movzx ecx, word [rbp + 6]
test cx, cx
je 0x140004450
call rbx
cmp ax, 0x74
jne 0x140004450
movzx ecx, word [rbp + 8]
test cx, cx
je 0x140004450
call rbx
cmp ax, 0x65
jne 0x140004450
movzx ecx, word [rbp + 0xa]
test cx, cx
je 0x140004450
call rbx
cmp ax, 0x6e
jne 0x140004450
movzx ecx, word [rbp + 0xc]
test cx, cx
je 0x140004450
call rbx
cmp ax, 0x74
jne 0x140004450
movzx ecx, word [rbp + 0xe]
test cx, cx
je 0x140004450
call rbx
cmp ax, 0x70
jne 0x140004450
movzx ecx, word [rbp + 0x10]
test cx, cx
je 0x140004450
call rbx
cmp ax, 0x72
jne 0x140004450
movzx ecx, word [rbp + 0x12]
test cx, cx
je 0x140004450
call rbx
cmp ax, 0x6f
jne 0x140004450
movzx ecx, word [rbp + 0x14]
test cx, cx
je 0x140004450
call rbx
cmp ax, 0x63
jne 0x140004450
cmp word [rbp + 0x16], 0
jne 0x140004450
lea rcx, [rsp + 0xe8]
lea rdx, [rsp + 0x640]
call fcn.140005e10
cmp byte [rsp + 0x650], 1
je 0x140004e4d
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], 0
lea rcx, [rsp + 0xe8]
call fcn.1400033c0
mov rcx, qword [rsp + 0xa80]
xor rcx, rsp
call fcn.140045f60
mov rax, rdi
add rsp, 0xa88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x660], xmm0
movdqa xmmword [rsp + 0x650], xmm0
movdqa xmmword [rsp + 0x640], xmm0
lea rax, [rsp + 0x1e8]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x640]
mov rcx, 0xffffffffffffffff
xor edx, edx
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
test eax, eax
js 0x14000478b
mov r8, qword [rsp + 0x668]
mov ecx, 0x1000
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbp, rax
mov qword [rsp + 0xd0], rax
test rax, rax
je 0x1400047c6
lea rcx, [rsp + 0x640]
lea rdx, [rsp + 0xd0]
call fcn.14000ba70
cmp byte [rsp + 0x658], 1
je 0x1400047dc
mov r8d, dword [rsp + 0x640]
lea rdx, [rsp + 0x660]
lea rcx, [rsp + 0x620]
call fcn.14000bc00
cmp byte [rsp + 0x638], 1
je 0x1400047fa
lea rcx, [rsp + 0x1e8]
call fcn.14000bb00
cmp byte [rsp + 0x200], 1
je 0x140004841
mov r8d, dword [rsp + 0x1e8]
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x1c8]
call fcn.14000bc00
mov al, byte [rsp + 0x1e0]
cmp al, 1
je 0x14000485f
or al, byte [rsp + 0x638]
jne 0x1400047d5
movdqu xmm0, xmmword [rsp + 0x620]
movdqu xmm1, xmmword [rsp + 0x1c8]
pcmpeqb xmm1, xmm0
movq xmm0, qword [rsp + 0x630]
movq xmm2, qword [rsp + 0x1d8]
pcmpeqb xmm2, xmm0
pand xmm2, xmm1
pmovmskb eax, xmm2
xor ebx, ebx
cmp eax, 0xffff
sete bl
xor r15d, r15d
lea rax, [rbp + 1]
cmp rax, 2
jb 0x14000474c
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r15b, r15b
jne 0x14000479f
test bl, bl
sete sil
lea rcx, [0x14004b39d]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x140004824
mov rax, qword [r13]
test rax, rax
je 0x140004a2c
lea rbx, [r12 + 0x10]
mov rbp, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
jmp 0x140004940
mov esi, eax
or esi, 0x10000000
lea rbx, str.z:_task_1579288126_build_src_obj_firefox_dist_include_mozilla_NativeNt.h
mov edi, 0x360
mov qword [rsp + 0x640], rbx
mov dword [rsp + 0x648], edi
mov dword [rsp + 0x64c], esi
lea rcx, [rsp + 0x640]
call fcn.140003060
xor esi, esi
jmp 0x140004757
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x57
jne 0x14000487d
xor ebx, ebx
jmp 0x140004736
mov rbx, qword [rsp + 0x648]
mov edi, dword [rsp + 0x650]
mov r15b, 1
mov esi, dword [rsp + 0x654]
jmp 0x140004739
mov esi, dword [rsp + 0x62c]
cmp esi, 0xd000003a
je 0x14000489f
mov rbx, qword [rsp + 0x620]
mov edi, dword [rsp + 0x628]
mov r15b, 1
jmp 0x140004739
cmp byte [rax], 0
je 0x14000476d
lea rcx, str.MOZ_LAUNCHER_PROCESS
call sub.api_ms_win_crt_environment_l1_1_0.dll__putenv
mov sil, 1
jmp 0x14000476d
mov rbx, qword [rsp + 0x1f0]
mov edi, dword [rsp + 0x1f8]
mov r15b, 1
mov esi, dword [rsp + 0x1fc]
jmp 0x140004739
mov rbx, qword [rsp + 0x1c8]
mov edi, dword [rsp + 0x1d0]
mov r15b, 1
mov esi, dword [rsp + 0x1d4]
jmp 0x140004739
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov edi, 0x58
mov r15b, 1
lea rbx, str.z:_task_1579288126_build_src_browser_app_winlauncher_SameBinary.h
jmp 0x140004739
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r14, rax
mov qword [rsp + 0x620], rax
lea rcx, [rsp + 0x1e8]
lea rdx, [rsp + 0x620]
call fcn.14000ba70
cmp byte [rsp + 0x200], 1
jne 0x1400048ea
mov rbx, qword [rsp + 0x1f0]
mov edi, dword [rsp + 0x1f8]
mov r15b, 1
mov esi, dword [rsp + 0x1fc]
jmp 0x14000490a
lea rcx, [rsp + 0x640]
lea rdx, [rsp + 0x1e8]
call fcn.14000bb70
movzx ebx, al
mov esi, 0xd000003a
xor r15d, r15d
lea rax, [r14 + 1]
cmp rax, 2
jb 0x140004739
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140004739
mov rax, qword [rbx]
add rbx, 8
test rax, rax
je 0x140004a2c
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x140004930
lea rdi, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rdi, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x140004930
call rbp
cmp ax, 0x6c
jne 0x140004930
movzx ecx, word [rdi + 2]
test cx, cx
je 0x140004930
call rbp
cmp ax, 0x61
jne 0x140004930
movzx ecx, word [rdi + 4]
test cx, cx
je 0x140004930
call rbp
cmp ax, 0x75
jne 0x140004930
movzx ecx, word [rdi + 6]
test cx, cx
je 0x140004930
call rbp
cmp ax, 0x6e
jne 0x140004930
movzx ecx, word [rdi + 8]
test cx, cx
je 0x140004930
call rbp
cmp ax, 0x63
jne 0x140004930
movzx ecx, word [rdi + 0xa]
test cx, cx
je 0x140004930
call rbp
cmp ax, 0x68
jne 0x140004930
movzx ecx, word [rdi + 0xc]
test cx, cx
je 0x140004930
call rbp
cmp ax, 0x65
jne 0x140004930
movzx ecx, word [rdi + 0xe]
test cx, cx
je 0x140004930
call rbp
cmp ax, 0x72
jne 0x140004930
cmp word [rdi + 0x10], 0
jne 0x140004930
mov rax, qword [rbx]
mov qword [rbx - 8], rax
add rbx, 8
test rax, rax
jne 0x140004a12
mov rax, qword [rsp + 0x68]
add dword [rax], 0xffffffff
jmp 0x140004a3e
test sil, sil
jne 0x140004a3e
xor r9d, r9d
mov ebp, 1
jmp 0x140004c0d
mov rax, qword [r13]
xor ebp, ebp
test rax, rax
je 0x140004c0a
lea rsi, [r12 + 0x10]
mov r15, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
jmp 0x140004a70
mov rax, qword [rsi]
add rsi, 8
test rax, rax
je 0x140004c0a
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x140004a60
lea rbx, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbx, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x140004a60
call r15
cmp ax, 0x66
jne 0x140004a60
movzx ecx, word [rbx + 2]
test cx, cx
je 0x140004a60
call r15
cmp ax, 0x6f
jne 0x140004a60
movzx ecx, word [rbx + 4]
test cx, cx
je 0x140004a60
call r15
cmp ax, 0x72
jne 0x140004a60
movzx ecx, word [rbx + 6]
test cx, cx
je 0x140004a60
call r15
cmp ax, 0x63
jne 0x140004a60
movzx ecx, word [rbx + 8]
test cx, cx
je 0x140004a60
call r15
cmp ax, 0x65
jne 0x140004a60
movzx ecx, word [rbx + 0xa]
test cx, cx
je 0x140004a60
call r15
cmp ax, 0x2d
jne 0x140004a60
movzx ecx, word [rbx + 0xc]
test cx, cx
je 0x140004a60
call r15
cmp ax, 0x6c
jne 0x140004a60
movzx ecx, word [rbx + 0xe]
test cx, cx
je 0x140004a60
call r15
cmp ax, 0x61
jne 0x140004a60
movzx ecx, word [rbx + 0x10]
test cx, cx
je 0x140004a60
call r15
cmp ax, 0x75
jne 0x140004a60
movzx ecx, word [rbx + 0x12]
test cx, cx
je 0x140004a60
call r15
cmp ax, 0x6e
jne 0x140004a60
movzx ecx, word [rbx + 0x14]
test cx, cx
je 0x140004a60
call r15
cmp ax, 0x63
jne 0x140004a60
movzx ecx, word [rbx + 0x16]
test cx, cx
je 0x140004a60
call r15
cmp ax, 0x68
jne 0x140004a60
movzx ecx, word [rbx + 0x18]
test cx, cx
je 0x140004a60
call r15
cmp ax, 0x65
jne 0x140004a60
movzx ecx, word [rbx + 0x1a]
test cx, cx
je 0x140004a60
call r15
cmp ax, 0x72
jne 0x140004a60
cmp word [rbx + 0x1c], 0
jne 0x140004a60
mov rax, qword [rsi]
mov qword [rsi - 8], rax
add rsi, 8
test rax, rax
jne 0x140004bea
mov rax, qword [rsp + 0x68]
add dword [rax], 0xffffffff
mov r9d, 1
jmp 0x140004c0d
xor r9d, r9d
lea rcx, [rsp + 0xe8]
lea rdx, [rsp + 0x640]
mov r8d, ebp
call fcn.140007150
cmp byte [rsp + 0x650], 1
je 0x140004e12
cmp dword [rsp + 0x640], 0
jne 0x140004dab
mov eax, dword [0x140054ae8]
cmp eax, 0x3839
jae 0x140004e6a
mov eax, dword [0x140054040]
cmp eax, 0x383a
jb 0x140004d50
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x648], xmm0
movdqu xmmword [rsp + 0x6c8], xmm0
movdqu xmmword [rsp + 0x6b8], xmm0
movdqu xmmword [rsp + 0x6a8], xmm0
movdqu xmmword [rsp + 0x698], xmm0
movdqu xmmword [rsp + 0x688], xmm0
movdqu xmmword [rsp + 0x678], xmm0
movdqu xmmword [rsp + 0x668], xmm0
movdqu xmmword [rsp + 0x658], xmm0
mov dword [rsp + 0x6d8], 0
movabs rax, 0xa0000009c
mov qword [rsp + 0x640], rax
mov dword [rsp + 0x64c], 0x3839
mov rsi, qword [sym.imp.ntdll.dll_VerSetConditionMask]
xor ecx, ecx
mov edx, 2
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 1
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 4
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 0x20
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 0x10
mov r8b, 3
call rsi
lea rcx, [rsp + 0x640]
mov edx, 0x37
mov r8, rax
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoA]
test eax, eax
jne 0x140004e5f
mov eax, 0x3839
xchg dword [0x140054040], eax
call fcn.140005ef0
test r12, r12
je 0x140004e24
lea rcx, [rsp + 0x640]
call fcn.140007eb0
mov rax, qword [rsp + 0x640]
mov qword [rsp + 0x640], 0
test rax, rax
je 0x140004e24
mov qword [r12], rax
mov rbx, qword [r12 + 8]
test rbx, rbx
je 0x140005b6c
lea rbp, [r12 + 0x20]
mov rsi, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
jmp 0x140004f0d
lea rcx, str.MOZ_DEBUG_BROWSER_PROCESS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x140004ec0
lea rcx, str.MOZ_DEBUG_BROWSER_PAUSE
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__wgetenv]
test rax, rax
je 0x14000457d
cmp word [rax], 0
je 0x14000457d
mov rcx, rax
xor edx, edx
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
imul esi, eax, 0x3e8
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
call fcn.14000bff0
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000457d
lea rcx, [rsp + 0x640]
call fcn.140003060
jmp 0x14000457d
mov byte [rsp + 0x650], 1
lea rax, str.z:_task_1579288126_build_src_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x640], rax
movabs rax, 0x800705070000010f
mov qword [rsp + 0x648], rax
lea rcx, [rsp + 0x640]
call fcn.140003060
jmp 0x1400045a0
mov eax, 0x3839
xchg dword [0x140054ae8], eax
mov eax, dword [0x140054ae0]
mov ecx, dword [0x140054298]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004ed4
mov rax, qword [0x140054ad8]
test rax, rax
je 0x140004d50
mov dword [rsp + 0x640], 4
lea rdx, [rsp + 0x640]
mov r8d, 4
mov ecx, 0xa
call rax
jmp 0x140004d50
cmp byte [rax], 0
je 0x140004dc1
call qword [sym.imp.KERNEL32.dll_DebugBreak]
jmp 0x14000457d
lea rcx, [0x140054ae0]
call fcn.1400454c0
cmp dword [0x140054ae0], 0xffffffff
jne 0x140004e8b
call fcn.140010c00
lea rcx, [0x140054ae0]
call fcn.140045528
jmp 0x140004e8b
mov rbx, qword [rbp - 0x10]
add rbp, 8
test rbx, rbx
je 0x14000556e
movzx eax, word [rbx]
or eax, 2
cmp ax, 0x2f
jne 0x140004efc
cmp word [rbx + 2], 0x2d
jne 0x140005565
add rbx, 4
movzx ecx, word [rbx]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x77
jne 0x140004efc
movzx ecx, word [rbx + 2]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x61
jne 0x140004efc
movzx ecx, word [rbx + 4]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x69
jne 0x140004efc
movzx ecx, word [rbx + 6]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x74
jne 0x140004efc
movzx ecx, word [rbx + 8]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x2d
jne 0x140004efc
movzx ecx, word [rbx + 0xa]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x66
jne 0x140004efc
movzx ecx, word [rbx + 0xc]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x6f
jne 0x140004efc
movzx ecx, word [rbx + 0xe]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x72
jne 0x140004efc
movzx ecx, word [rbx + 0x10]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x2d
jne 0x140004efc
movzx ecx, word [rbx + 0x12]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x62
jne 0x140004efc
movzx ecx, word [rbx + 0x14]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x72
jne 0x140004efc
movzx ecx, word [rbx + 0x16]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x6f
jne 0x140004efc
movzx ecx, word [rbx + 0x18]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x77
jne 0x140004efc
movzx ecx, word [rbx + 0x1a]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x73
jne 0x140004efc
movzx ecx, word [rbx + 0x1c]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x65
jne 0x140004efc
movzx ecx, word [rbx + 0x1e]
test cx, cx
je 0x140004efc
call rsi
cmp ax, 0x72
jne 0x140004efc
cmp word [rbx + 0x20], 0
jne 0x140004efc
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x18], rax
test rax, rax
je 0x1400050b8
mov rax, qword [rbp - 8]
mov qword [rbp - 0x10], rax
test rax, rax
jne 0x140005585
mov rax, qword [rsp + 0x68]
add dword [rax], 0xffffffff
mov r15d, 1
mov rdi, qword [r13]
test rdi, rdi
je 0x140005231
lea rsi, [r12 + 0x10]
mov rbx, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
movzx eax, word [rdi]
or eax, 2
cmp ax, 0x2f
je 0x1400050fc
mov rdi, qword [rsi]
add rsi, 8
test rdi, rdi
jne 0x1400050df
jmp 0x140005231
cmp word [rdi + 2], 0x2d
je 0x14000559c
add rdi, 2
movzx ecx, word [rdi]
test cx, cx
je 0x1400050eb
call rbx
cmp ax, 0x6e
jne 0x1400050eb
movzx ecx, word [rdi + 2]
test cx, cx
je 0x1400050eb
call rbx
cmp ax, 0x6f
jne 0x1400050eb
movzx ecx, word [rdi + 4]
test cx, cx
je 0x1400050eb
call rbx
cmp ax, 0x2d
jne 0x1400050eb
movzx ecx, word [rdi + 6]
test cx, cx
je 0x1400050eb
call rbx
cmp ax, 0x64
jne 0x1400050eb
movzx ecx, word [rdi + 8]
test cx, cx
je 0x1400050eb
call rbx
cmp ax, 0x65
jne 0x1400050eb
movzx ecx, word [rdi + 0xa]
test cx, cx
je 0x1400050eb
call rbx
cmp ax, 0x65
jne 0x1400050eb
movzx ecx, word [rdi + 0xc]
test cx, cx
je 0x1400050eb
call rbx
cmp ax, 0x6c
jne 0x1400050eb
movzx ecx, word [rdi + 0xe]
test cx, cx
je 0x1400050eb
call rbx
cmp ax, 0x65
jne 0x1400050eb
movzx ecx, word [rdi + 0x10]
test cx, cx
je 0x1400050eb
call rbx
cmp ax, 0x76
jne 0x1400050eb
movzx ecx, word [rdi + 0x12]
test cx, cx
je 0x1400050eb
call rbx
cmp ax, 0x61
jne 0x1400050eb
movzx ecx, word [rdi + 0x14]
test cx, cx
je 0x1400050eb
call rbx
cmp ax, 0x74
jne 0x1400050eb
movzx ecx, word [rdi + 0x16]
test cx, cx
je 0x1400050eb
call rbx
cmp ax, 0x65
jne 0x1400050eb
cmp word [rdi + 0x18], 0
jne 0x1400050eb
mov rax, qword [rsi]
mov qword [rsi - 8], rax
add rsi, 8
test rax, rax
jne 0x140005215
mov rax, qword [rsp + 0x68]
add dword [rax], 0xffffffff
or r15d, 2
mov qword [rsp + 0x78], 0
lea rcx, [rsp + 0x1c8]
lea r8, [rsp + 0x78]
mov edx, r15d
call fcn.140003e40
cmp byte [rsp + 0x1d8], 1
je 0x1400055a5
test r15d, r15d
jne 0x140005278
cmp dword [rsp + 0x1c8], 1
jne 0x140005278
cmp qword [rsp + 0x78], 0
je 0x1400058ee
lea rcx, [rsp + 0xe8]
lea rdx, [rsp + 0xd0]
call fcn.140005e10
cmp byte [rsp + 0xe0], 1
je 0x1400055af
mov rax, qword [rsp + 0x68]
mov edx, dword [rax]
lea rcx, [rsp + 0x70]
mov r8, r12
call fcn.1400036d0
cmp qword [rsp + 0x70], 0
je 0x1400055c7
lea rcx, [rsp + 0x98]
mov rdx, r12
call fcn.140005f80
cmp byte [rsp + 0x99], 0
je 0x140005614
mov qword [rsp + 0x1e8], 0
movdqa xmm0, xmmword [0x1400482a0]
movdqu xmmword [rsp + 0x1f8], xmm0
lea rax, [rsp + 0x208]
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x220], 0
mov eax, dword [0x140054ae8]
cmp eax, 0x3838
ja 0x140005936
mov eax, dword [0x140054040]
cmp eax, 0x383a
jae 0x140005658
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov rbx, rax
mov ecx, 0xfffffff5
call rsi
mov rbp, rax
mov ecx, 0xfffffff4
call rsi
mov rdi, rax
lea rsi, [rsp + 0x1e8]
mov rcx, rsi
mov rdx, rbx
call fcn.140010c70
mov rcx, rsi
mov rdx, rbp
call fcn.140010c70
mov rcx, rsi
mov rdx, rdi
call fcn.140010c70
lea rdx, [rsp + 0xb8]
lea r13, [rsp + 0x640]
mov rcx, rsi
mov r8, r13
call fcn.1400061b0
cmp byte [rsp + 0xc8], 1
je 0x14000574a
xor esi, esi
cmp byte [rsp + 0xb8], 0
je 0x140005757
mov eax, 0x80404
cmp qword [rsp + 0x1f8], 0
je 0x1400053f0
or byte [rsp + 0x67d], 1
mov qword [rsp + 0x690], rbx
mov qword [rsp + 0x698], rbp
mov qword [rsp + 0x6a0], rdi
mov esi, 1
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], 0
mov rcx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x70]
mov rdx, qword [r12]
test rcx, rcx
jne 0x140005761
lea rcx, [rsp + 0x80]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], r13
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], esi
mov rcx, rdx
mov rdx, r8
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14000579b
mov rbx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
mov rdx, qword [r12]
lea rcx, [rsp + 0xa0]
mov r8, rbx
call fcn.140002770
cmp byte [rsp + 0xb0], 1
je 0x1400057f3
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
je 0x1400057fd
test r15b, 1
je 0x140005863
mov rcx, rbx
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
mov rdi, qword [rsp + 0x60]
jne 0x1400058de
lea rdx, [rsp + 0x620]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x1400058de
mov eax, dword [rsp + 0x620]
mov dword [rdi], eax
mov byte [rdi + 4], 1
lea rax, [rsi + 1]
cmp rax, 2
jb 0x1400054fc
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rbx + 1]
cmp rax, 2
jb 0x14000550f
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x1e8]
call fcn.140006440
cmp byte [rsp + 0x99], 0
je 0x14000552e
mov byte [rsp + 0x99], 0
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x70], 0
test rcx, rcx
je 0x140005547
call qword [sym.imp.mozglue.dll_free]
mov rcx, qword [rsp + 0x78]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x1400045a9
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400045a9
add rbx, 2
jmp 0x140004f28
mov rax, qword [r13]
test rax, rax
je 0x140005b6c
lea rbx, [r12 + 0x10]
jmp 0x140005968
mov rax, qword [rbp]
mov qword [rbp - 8], rax
add rbp, 8
test rax, rax
je 0x1400050b8
jmp 0x140005585
add rdi, 4
jmp 0x14000510b
lea rcx, [rsp + 0x1c8]
jmp 0x1400055b7
lea rcx, [rsp + 0xd0]
call fcn.140003060
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], 0
jmp 0x140005547
mov byte [rsp + 0x650], 1
lea rax, str.z:_task_1579288126_build_src_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x640], rax
movabs rax, 0x800705070000013a
mov qword [rsp + 0x648], rax
lea rcx, [rsp + 0x640]
call fcn.140003060
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], 0
mov qword [rsp + 0x70], 0
jmp 0x140005547
mov byte [rsp + 0x650], 1
lea rax, str.z:_task_1579288126_build_src_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x640], rax
movabs rax, 0x8007005700000141
mov qword [rsp + 0x648], rax
lea rcx, [rsp + 0x640]
call fcn.140003060
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], 0
jmp 0x14000552e
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x648], xmm0
movdqu xmmword [rsp + 0x6c8], xmm0
movdqu xmmword [rsp + 0x6b8], xmm0
movdqu xmmword [rsp + 0x6a8], xmm0
movdqu xmmword [rsp + 0x698], xmm0
movdqu xmmword [rsp + 0x688], xmm0
movdqu xmmword [rsp + 0x678], xmm0
movdqu xmmword [rsp + 0x668], xmm0
movdqu xmmword [rsp + 0x658], xmm0
mov dword [rsp + 0x6d8], 0
movabs rax, 0xa0000009c
mov qword [rsp + 0x640], rax
mov dword [rsp + 0x64c], 0x3839
mov rsi, qword [sym.imp.ntdll.dll_VerSetConditionMask]
xor ecx, ecx
mov edx, 2
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 1
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 4
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 0x20
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 0x10
mov r8b, 3
call rsi
lea rcx, [rsp + 0x640]
mov edx, 0x37
mov r8, rax
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoA]
test eax, eax
jne 0x14000592b
mov eax, 0x3839
xchg dword [0x140054040], eax
jmp 0x140005334
lea rcx, [rsp + 0xb8]
jmp 0x1400057e0
mov eax, 0x404
jmp 0x1400053f0
lea rbp, [rsp + 0x80]
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x48], r13
movdqu xmmword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], 0
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
test eax, eax
jne 0x14000545a
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov byte [rsp + 0x630], 1
lea rax, str.z:_task_1579288126_build_src_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x620], rax
mov dword [rsp + 0x628], 0x177
mov dword [rsp + 0x62c], ecx
lea rcx, [rsp + 0x620]
call fcn.140003060
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], 0
jmp 0x14000550f
lea rcx, [rsp + 0xa0]
jmp 0x140005842
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov byte [rsp + 0x630], 1
lea rax, str.z:_task_1579288126_build_src_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x620], rax
mov dword [rsp + 0x628], 0x187
mov dword [rsp + 0x62c], ecx
lea rcx, [rsp + 0x620]
call fcn.140003060
mov rcx, rbx
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], 0
jmp 0x1400054e9
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov r12d, eax
xor ebp, ebp
cmp eax, 1
mov edi, 0
sbb edi, edi
not edi
mov r14d, 0
test eax, eax
jne 0x14000588d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
or edi, 0x2710
mov r13, qword [sym.imp.USER32.dll_WaitForInputIdle]
mov r15, qword [sym.imp.KERNEL32.dll_GetLastError]
test r12d, r12d
jne 0x1400058b1
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebp, eax
sub ebp, r14d
mov edx, edi
sub edx, ebp
jbe 0x1400058de
mov rcx, rbx
call r13
cmp eax, 0xffffffff
jne 0x1400058de
call r15
cmp eax, 0x5bf
jne 0x1400058de
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
test r12d, r12d
jne 0x1400058b1
jmp 0x1400058a6
mov rdi, qword [rsp + 0x60]
mov dword [rdi], 0
jmp 0x1400054e5
mov rax, qword [rsp + 0x68]
mov edx, dword [rax]
lea rcx, [rsp + 0x640]
mov r8, r12
call fcn.140003450
cmp byte [rsp + 0x650], 1
jne 0x140005943
lea rcx, [rsp + 0x640]
call fcn.140003060
xor eax, eax
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], al
jmp 0x140005547
mov eax, 0x3839
xchg dword [0x140054ae8], eax
or byte [rsp + 0x1ef], 0x10
jmp 0x140005334
mov rdi, qword [rsp + 0x60]
mov dword [rdi], 0
mov al, 1
mov byte [rdi + 4], al
jmp 0x140005547
mov rax, qword [rbx]
add rbx, 8
test rax, rax
je 0x140005a71
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x140005958
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x140005958
call rsi
cmp ax, 0x6d
jne 0x140005958
movzx ecx, word [rbp + 2]
test cx, cx
je 0x140005958
call rsi
cmp ax, 0x61
jne 0x140005958
movzx ecx, word [rbp + 4]
test cx, cx
je 0x140005958
call rsi
cmp ax, 0x72
jne 0x140005958
movzx ecx, word [rbp + 6]
test cx, cx
je 0x140005958
call rsi
cmp ax, 0x69
jne 0x140005958
movzx ecx, word [rbp + 8]
test cx, cx
je 0x140005958
call rsi
cmp ax, 0x6f
jne 0x140005958
movzx ecx, word [rbp + 0xa]
test cx, cx
je 0x140005958
call rsi
cmp ax, 0x6e
jne 0x140005958
movzx ecx, word [rbp + 0xc]
test cx, cx
je 0x140005958
call rsi
cmp ax, 0x65
jne 0x140005958
movzx ecx, word [rbp + 0xe]
test cx, cx
je 0x140005958
call rsi
cmp ax, 0x74
jne 0x140005958
movzx ecx, word [rbp + 0x10]
test cx, cx
je 0x140005958
call rsi
cmp ax, 0x74
jne 0x140005958
movzx ecx, word [rbp + 0x12]
test cx, cx
je 0x140005958
call rsi
cmp ax, 0x65
jne 0x140005958
cmp word [rbp + 0x14], 0
jne 0x140005958
jmp 0x1400050c0
mov rax, qword [r13]
test rax, rax
je 0x140005b6c
lea rbx, [r12 + 0x10]
jmp 0x140005a95
mov rax, qword [rbx]
add rbx, 8
test rax, rax
je 0x140005b6c
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x140005a85
lea rdi, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rdi, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x140005a85
call rsi
cmp ax, 0x68
jne 0x140005a85
movzx ecx, word [rdi + 2]
test cx, cx
je 0x140005a85
call rsi
cmp ax, 0x65
jne 0x140005a85
movzx ecx, word [rdi + 4]
test cx, cx
je 0x140005a85
call rsi
cmp ax, 0x61
jne 0x140005a85
movzx ecx, word [rdi + 6]
test cx, cx
je 0x140005a85
call rsi
cmp ax, 0x64
jne 0x140005a85
movzx ecx, word [rdi + 8]
test cx, cx
je 0x140005a85
call rsi
cmp ax, 0x6c
jne 0x140005a85
movzx ecx, word [rdi + 0xa]
test cx, cx
je 0x140005a85
call rsi
cmp ax, 0x65
jne 0x140005a85
movzx ecx, word [rdi + 0xc]
test cx, cx
je 0x140005a85
call rsi
cmp ax, 0x73
jne 0x140005a85
movzx ecx, word [rdi + 0xe]
test cx, cx
je 0x140005a85
call rsi
cmp ax, 0x73
jne 0x140005a85
cmp word [rdi + 0x10], 0
jne 0x140005a85
jmp 0x1400050c0
lea rcx, str.MOZ_AUTOMATION
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x140005b87
cmp byte [rax], 0
jne 0x1400050c0
lea rcx, str.MOZ_HEADLESS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xor r15d, r15d
test rax, rax
je 0x1400050c6
cmp byte [rax], 0
jne 0x1400050c0
jmp 0x1400050c6