Function at 0x1400043e0
Capabilities:
Create process on windows
Query environment variable
Resume thread
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa88
mov rsi, r9
mov r12, r8
mov qword [rsp + 0x60], rcx
mov rax, qword [0x14005b018]
xor rax, rsp
mov qword [rsp + 0xa80], rax
movdqa xmm0, xmmword [0x14004e320]
movdqa xmmword [rsp + 0x1b0], xmm0
lea r8, [rsp + 0x1b0]
mov qword [rsp + 0x58], rdx
mov rcx, rdx
mov rdx, r12
call fcn.140005c30
mov qword [0x14005bad8], rsi
lea r13, [r12 + 8]
mov rax, qword [r12 + 8]
test rax, rax
je 0x1400044fe
lea rsi, [r12 + 0x10]
mov r14, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
lea rbp, str.log_launcher_error
mov rdi, r13
jmp 0x140004481
mov rax, qword [rdi + 8]
add rdi, 8
add rsi, 8
test rax, rax
je 0x1400044fe
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x140004470
lea rbx, [rax + 2]
xor ecx, ecx
cmp word [rax + 2], 0x2d
lea rdx, [rax + 4]
sete cl
cmove rbx, rdx
movzx ecx, word [rax + rcx*2 + 2]
test cx, cx
setne al
mov r15d, 2
test al, 1
je 0x140004470
call r14
cmp ax, word [r15 + rbp - 2]
jne 0x140004470
movzx ecx, word [rbx + r15]
test cx, cx
setne al
cmp word [r15 + rbp], 0
lea r15, [r15 + 2]
jne 0x1400044b4
test cx, cx
jne 0x140004470
mov rax, qword [rsi]
mov qword [rsi - 8], rax
add rsi, 8
test rax, rax
jne 0x1400044df
mov rax, qword [rsp + 0x58]
add dword [rax], 0xffffffff
mov byte [0x14005bad4], 1
lea rcx, [rsp + 0xe8]
call fcn.140003070
mov rax, qword [r13]
test rax, rax
je 0x14000465a
lea rsi, [r12 + 0x10]
mov rbx, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
movzx ecx, word [rax]
cmp cx, 0x2d
jne 0x140004640
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x14000464a
call rbx
cmp ax, 0x63
jne 0x14000464a
movzx ecx, word [rbp + 2]
test cx, cx
je 0x14000464a
call rbx
cmp ax, 0x6f
jne 0x14000464a
movzx ecx, word [rbp + 4]
test cx, cx
je 0x14000464a
call rbx
cmp ax, 0x6e
jne 0x14000464a
movzx ecx, word [rbp + 6]
test cx, cx
je 0x14000464a
call rbx
cmp ax, 0x74
jne 0x14000464a
movzx ecx, word [rbp + 8]
test cx, cx
je 0x14000464a
call rbx
cmp ax, 0x65
jne 0x14000464a
movzx ecx, word [rbp + 0xa]
test cx, cx
je 0x14000464a
call rbx
cmp ax, 0x6e
jne 0x14000464a
movzx ecx, word [rbp + 0xc]
test cx, cx
je 0x14000464a
call rbx
cmp ax, 0x74
jne 0x14000464a
movzx ecx, word [rbp + 0xe]
test cx, cx
je 0x14000464a
call rbx
cmp ax, 0x70
jne 0x14000464a
movzx ecx, word [rbp + 0x10]
test cx, cx
je 0x14000464a
call rbx
cmp ax, 0x72
jne 0x14000464a
movzx ecx, word [rbp + 0x12]
test cx, cx
je 0x14000464a
call rbx
cmp ax, 0x6f
jne 0x14000464a
movzx ecx, word [rbp + 0x14]
test cx, cx
je 0x14000464a
call rbx
cmp ax, 0x63
jne 0x14000464a
cmp word [rbp + 0x16], 0
je 0x140004e57
jmp 0x14000464a
cmp cx, 0x2f
je 0x140004531
mov rax, qword [rsi]
add rsi, 8
test rax, rax
jne 0x140004524
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x660], xmm0
movdqa xmmword [rsp + 0x650], xmm0
movdqa xmmword [rsp + 0x640], xmm0
lea rax, [rsp + 0x1e8]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x640]
mov rcx, 0xffffffffffffffff
xor edx, edx
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
test eax, eax
js 0x140004808
mov r8, qword [rsp + 0x668]
mov ecx, 0x1000
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbp, rax
mov qword [rsp + 0xd0], rax
test rax, rax
je 0x140004843
lea rcx, [rsp + 0x640]
lea rdx, [rsp + 0xd0]
call fcn.140011c80
cmp byte [rsp + 0x658], 1
je 0x140004875
mov r8d, dword [rsp + 0x640]
lea rdx, [rsp + 0x660]
lea rcx, [rsp + 0x620]
call fcn.140011e10
cmp byte [rsp + 0x638], 1
je 0x140004893
lea rcx, [rsp + 0x1e8]
call fcn.140011d10
cmp byte [rsp + 0x200], 1
je 0x1400048b9
mov r8d, dword [rsp + 0x1e8]
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x1c8]
call fcn.140011e10
mov al, byte [rsp + 0x1e0]
cmp al, 1
je 0x1400048d7
or al, byte [rsp + 0x638]
jne 0x1400048f5
movdqu xmm0, xmmword [rsp + 0x620]
movdqu xmm1, xmmword [rsp + 0x1c8]
pcmpeqb xmm1, xmm0
movq xmm0, qword [rsp + 0x630]
movq xmm2, qword [rsp + 0x1d8]
pcmpeqb xmm2, xmm0
pand xmm2, xmm1
pmovmskb eax, xmm2
xor ebx, ebx
cmp eax, 0xffff
sete bl
xor r14d, r14d
lea rax, [rbp + 1]
cmp rax, 2
jb 0x1400047c9
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r14b, r14b
jne 0x14000481c
test bl, bl
sete sil
lea rcx, [0x1400518aa]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x1400048fc
mov rax, qword [r13]
test rax, rax
je 0x140004aa8
lea rbx, [r12 + 0x10]
mov r14, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
jmp 0x1400049b0
mov esi, eax
or esi, 0x10000000
lea rbx, str._builds_worker_workspace_obj_build_dist_include_mozilla_NativeNt.h
mov edi, 0x492
mov qword [rsp + 0x640], rbx
mov dword [rsp + 0x648], edi
mov dword [rsp + 0x64c], esi
lea rcx, [rsp + 0x640]
call fcn.140002f20
xor esi, esi
jmp 0x1400047d4
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
xor ebx, ebx
cmp eax, 0x57
setne r14b
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_SameBinary.h
cmovne rbx, rax
mov edi, 0x58
jmp 0x1400047b6
mov rbx, qword [rsp + 0x648]
mov edi, dword [rsp + 0x650]
mov r14b, 1
mov esi, dword [rsp + 0x654]
jmp 0x1400047b6
mov esi, dword [rsp + 0x62c]
cmp esi, 0xd000003a
je 0x140004919
mov rbx, qword [rsp + 0x620]
mov edi, dword [rsp + 0x628]
mov r14b, 1
jmp 0x1400047b6
mov rbx, qword [rsp + 0x1f0]
mov edi, dword [rsp + 0x1f8]
mov r14b, 1
mov esi, dword [rsp + 0x1fc]
jmp 0x1400047b6
mov rbx, qword [rsp + 0x1c8]
mov edi, dword [rsp + 0x1d0]
mov r14b, 1
mov esi, dword [rsp + 0x1d4]
jmp 0x1400047b6
xor ebx, ebx
jmp 0x1400047b3
cmp byte [rax], 0
je 0x1400047ea
lea rcx, str.MOZ_LAUNCHER_PROCESS
call sub.api_ms_win_crt_environment_l1_1_0.dll__putenv
mov sil, 1
jmp 0x1400047ea
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r15, rax
mov qword [rsp + 0x620], rax
lea rcx, [rsp + 0x1e8]
lea rdx, [rsp + 0x620]
call fcn.140011c80
cmp byte [rsp + 0x200], 1
jne 0x140004964
mov rbx, qword [rsp + 0x1f0]
mov edi, dword [rsp + 0x1f8]
mov r14b, 1
mov esi, dword [rsp + 0x1fc]
jmp 0x140004984
lea rcx, [rsp + 0x640]
lea rdx, [rsp + 0x1e8]
call fcn.140011d80
movzx ebx, al
mov esi, 0xd000003a
xor r14d, r14d
lea rax, [r15 + 1]
cmp rax, 2
jb 0x1400047b6
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400047b6
mov rax, qword [rbx]
add rbx, 8
test rax, rax
je 0x140004aa8
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x1400049a0
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x1400049a0
call r14
cmp ax, 0x6c
jne 0x1400049a0
movzx ecx, word [rbp + 2]
test cx, cx
je 0x1400049a0
call r14
cmp ax, 0x61
jne 0x1400049a0
movzx ecx, word [rbp + 4]
test cx, cx
je 0x1400049a0
call r14
cmp ax, 0x75
jne 0x1400049a0
movzx ecx, word [rbp + 6]
test cx, cx
je 0x1400049a0
call r14
cmp ax, 0x6e
jne 0x1400049a0
movzx ecx, word [rbp + 8]
test cx, cx
je 0x1400049a0
call r14
cmp ax, 0x63
jne 0x1400049a0
movzx ecx, word [rbp + 0xa]
test cx, cx
je 0x1400049a0
call r14
cmp ax, 0x68
jne 0x1400049a0
movzx ecx, word [rbp + 0xc]
test cx, cx
je 0x1400049a0
call r14
cmp ax, 0x65
jne 0x1400049a0
movzx ecx, word [rbp + 0xe]
test cx, cx
je 0x1400049a0
call r14
cmp ax, 0x72
jne 0x1400049a0
cmp word [rbp + 0x10], 0
jne 0x1400049a0
mov rax, qword [rbx]
mov qword [rbx - 8], rax
add rbx, 8
test rax, rax
jne 0x140004a8e
mov rax, qword [rsp + 0x58]
add dword [rax], 0xffffffff
jmp 0x140004aad
test sil, sil
je 0x140004aca
mov rax, qword [r13]
xor ebp, ebp
test rax, rax
je 0x140004c8a
lea rsi, [r12 + 0x10]
mov r14, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
jmp 0x140004af0
xor r9d, r9d
mov ebp, 1
jmp 0x140004c8d
mov rax, qword [rsi]
add rsi, 8
test rax, rax
je 0x140004c8a
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x140004ae0
lea rbx, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbx, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x140004ae0
call r14
cmp ax, 0x66
jne 0x140004ae0
movzx ecx, word [rbx + 2]
test cx, cx
je 0x140004ae0
call r14
cmp ax, 0x6f
jne 0x140004ae0
movzx ecx, word [rbx + 4]
test cx, cx
je 0x140004ae0
call r14
cmp ax, 0x72
jne 0x140004ae0
movzx ecx, word [rbx + 6]
test cx, cx
je 0x140004ae0
call r14
cmp ax, 0x63
jne 0x140004ae0
movzx ecx, word [rbx + 8]
test cx, cx
je 0x140004ae0
call r14
cmp ax, 0x65
jne 0x140004ae0
movzx ecx, word [rbx + 0xa]
test cx, cx
je 0x140004ae0
call r14
cmp ax, 0x2d
jne 0x140004ae0
movzx ecx, word [rbx + 0xc]
test cx, cx
je 0x140004ae0
call r14
cmp ax, 0x6c
jne 0x140004ae0
movzx ecx, word [rbx + 0xe]
test cx, cx
je 0x140004ae0
call r14
cmp ax, 0x61
jne 0x140004ae0
movzx ecx, word [rbx + 0x10]
test cx, cx
je 0x140004ae0
call r14
cmp ax, 0x75
jne 0x140004ae0
movzx ecx, word [rbx + 0x12]
test cx, cx
je 0x140004ae0
call r14
cmp ax, 0x6e
jne 0x140004ae0
movzx ecx, word [rbx + 0x14]
test cx, cx
je 0x140004ae0
call r14
cmp ax, 0x63
jne 0x140004ae0
movzx ecx, word [rbx + 0x16]
test cx, cx
je 0x140004ae0
call r14
cmp ax, 0x68
jne 0x140004ae0
movzx ecx, word [rbx + 0x18]
test cx, cx
je 0x140004ae0
call r14
cmp ax, 0x65
jne 0x140004ae0
movzx ecx, word [rbx + 0x1a]
test cx, cx
je 0x140004ae0
call r14
cmp ax, 0x72
jne 0x140004ae0
cmp word [rbx + 0x1c], 0
jne 0x140004ae0
mov rax, qword [rsi]
mov qword [rsi - 8], rax
add rsi, 8
test rax, rax
jne 0x140004c6a
mov rax, qword [rsp + 0x58]
add dword [rax], 0xffffffff
mov r9d, 1
jmp 0x140004c8d
xor r9d, r9d
lea rcx, [rsp + 0xe8]
lea rdx, [rsp + 0x640]
mov r8d, ebp
call fcn.140007240
cmp byte [rsp + 0x650], 1
je 0x140004eb6
cmp dword [rsp + 0x640], 0
jne 0x140004e2b
mov eax, dword [0x14005bb2c]
cmp eax, 0x3839
jae 0x140004f0b
mov eax, dword [0x14005b040]
cmp eax, 0x383a
jb 0x140004dd0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x648], xmm0
movdqu xmmword [rsp + 0x6c8], xmm0
movdqu xmmword [rsp + 0x6b8], xmm0
movdqu xmmword [rsp + 0x6a8], xmm0
movdqu xmmword [rsp + 0x698], xmm0
movdqu xmmword [rsp + 0x688], xmm0
movdqu xmmword [rsp + 0x678], xmm0
movdqu xmmword [rsp + 0x668], xmm0
movdqu xmmword [rsp + 0x658], xmm0
mov dword [rsp + 0x6d8], 0
movabs rax, 0xa0000009c
mov qword [rsp + 0x640], rax
mov dword [rsp + 0x64c], 0x3839
mov rsi, qword [sym.imp.ntdll.dll_VerSetConditionMask]
xor ecx, ecx
mov edx, 2
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 1
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 4
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 0x20
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 0x10
mov r8b, 3
call rsi
lea rcx, [rsp + 0x640]
mov edx, 0x37
mov r8, rax
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoA]
test eax, eax
jne 0x140004f00
mov eax, 0x3839
xchg dword [0x14005b040], eax
call fcn.140005f70
test r12, r12
je 0x140004ec5
lea rcx, [rsp + 0x640]
call fcn.14000df60
mov rax, qword [rsp + 0x640]
mov qword [rsp + 0x640], 0
test rax, rax
je 0x140004ec5
mov qword [r12], rax
mov rbx, qword [r12 + 8]
test rbx, rbx
je 0x140005be4
lea rbp, [r12 + 0x20]
mov rsi, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
jmp 0x140004ff4
lea rcx, str.MOZ_DEBUG_BROWSER_PROCESS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x140004f65
lea rcx, str.MOZ_DEBUG_BROWSER_PAUSE
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__wgetenv]
test rax, rax
jne 0x140004f79
lea rcx, [rsp + 0xe8]
lea rdx, [rsp + 0x640]
call fcn.140005e90
cmp byte [rsp + 0x650], 1
je 0x140004eee
mov rdi, qword [rsp + 0x60]
mov qword [rdi], 0
lea rcx, [rsp + 0xe8]
call fcn.140003290
mov rcx, qword [rsp + 0xa80]
xor rcx, rsp
call fcn.14004ce20
mov rax, rdi
add rsp, 0xa88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0x640]
call fcn.140002f20
jmp 0x140004e57
mov byte [rsp + 0x650], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x640], rax
movabs rax, 0x8007050700000109
mov qword [rsp + 0x648], rax
lea rcx, [rsp + 0x640]
call fcn.140002f20
jmp 0x140004e76
mov eax, 0x3839
xchg dword [0x14005bb2c], eax
mov eax, dword [0x14005baf0]
mov ecx, dword [0x14005b2c8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004fb4
mov rax, qword [0x14005bae8]
test rax, rax
je 0x140004dd0
mov dword [rsp + 0x640], 4
lea rdx, [rsp + 0x640]
mov r8d, 4
mov ecx, 0xa
call rax
jmp 0x140004dd0
cmp byte [rax], 0
je 0x140004e41
call qword [sym.imp.KERNEL32.dll_DebugBreak]
jmp 0x140004e57
cmp word [rax], 0
je 0x140004e57
mov rcx, rax
xor edx, edx
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
imul esi, eax, 0x3e8
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
call fcn.140012210
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140004e57
lea rcx, [0x14005baf0]
call fcn.14004c320
cmp dword [0x14005baf0], 0xffffffff
jne 0x140004f30
call fcn.140012320
lea rcx, [0x14005baf0]
call fcn.14004c388
jmp 0x140004f30
mov rbx, qword [rbp - 0x10]
add rbp, 8
test rbx, rbx
je 0x140005671
movzx eax, word [rbx]
or eax, 2
cmp ax, 0x2f
jne 0x140004fe3
cmp word [rbx + 2], 0x2d
jne 0x140005668
add rbx, 4
movzx ecx, word [rbx]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x77
jne 0x140004fe3
movzx ecx, word [rbx + 2]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x61
jne 0x140004fe3
movzx ecx, word [rbx + 4]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x69
jne 0x140004fe3
movzx ecx, word [rbx + 6]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x74
jne 0x140004fe3
movzx ecx, word [rbx + 8]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x2d
jne 0x140004fe3
movzx ecx, word [rbx + 0xa]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x66
jne 0x140004fe3
movzx ecx, word [rbx + 0xc]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x6f
jne 0x140004fe3
movzx ecx, word [rbx + 0xe]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x72
jne 0x140004fe3
movzx ecx, word [rbx + 0x10]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x2d
jne 0x140004fe3
movzx ecx, word [rbx + 0x12]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x62
jne 0x140004fe3
movzx ecx, word [rbx + 0x14]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x72
jne 0x140004fe3
movzx ecx, word [rbx + 0x16]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x6f
jne 0x140004fe3
movzx ecx, word [rbx + 0x18]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x77
jne 0x140004fe3
movzx ecx, word [rbx + 0x1a]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x73
jne 0x140004fe3
movzx ecx, word [rbx + 0x1c]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x65
jne 0x140004fe3
movzx ecx, word [rbx + 0x1e]
test cx, cx
je 0x140004fe3
call rsi
cmp ax, 0x72
jne 0x140004fe3
cmp word [rbx + 0x20], 0
jne 0x140004fe3
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x18], rax
test rax, rax
je 0x14000519f
mov rax, qword [rbp - 8]
mov qword [rbp - 0x10], rax
test rax, rax
jne 0x140005688
mov rax, qword [rsp + 0x58]
add dword [rax], 0xffffffff
mov edi, 1
mov rbx, qword [r13]
test rbx, rbx
je 0x140005316
lea rsi, [r12 + 0x10]
mov rbp, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
movzx eax, word [rbx]
or eax, 2
cmp ax, 0x2f
je 0x1400051e2
mov rbx, qword [rsi]
add rsi, 8
test rbx, rbx
jne 0x1400051c5
jmp 0x140005316
cmp word [rbx + 2], 0x2d
je 0x14000569f
add rbx, 2
movzx ecx, word [rbx]
test cx, cx
je 0x1400051d1
call rbp
cmp ax, 0x6e
jne 0x1400051d1
movzx ecx, word [rbx + 2]
test cx, cx
je 0x1400051d1
call rbp
cmp ax, 0x6f
jne 0x1400051d1
movzx ecx, word [rbx + 4]
test cx, cx
je 0x1400051d1
call rbp
cmp ax, 0x2d
jne 0x1400051d1
movzx ecx, word [rbx + 6]
test cx, cx
je 0x1400051d1
call rbp
cmp ax, 0x64
jne 0x1400051d1
movzx ecx, word [rbx + 8]
test cx, cx
je 0x1400051d1
call rbp
cmp ax, 0x65
jne 0x1400051d1
movzx ecx, word [rbx + 0xa]
test cx, cx
je 0x1400051d1
call rbp
cmp ax, 0x65
jne 0x1400051d1
movzx ecx, word [rbx + 0xc]
test cx, cx
je 0x1400051d1
call rbp
cmp ax, 0x6c
jne 0x1400051d1
movzx ecx, word [rbx + 0xe]
test cx, cx
je 0x1400051d1
call rbp
cmp ax, 0x65
jne 0x1400051d1
movzx ecx, word [rbx + 0x10]
test cx, cx
je 0x1400051d1
call rbp
cmp ax, 0x76
jne 0x1400051d1
movzx ecx, word [rbx + 0x12]
test cx, cx
je 0x1400051d1
call rbp
cmp ax, 0x61
jne 0x1400051d1
movzx ecx, word [rbx + 0x14]
test cx, cx
je 0x1400051d1
call rbp
cmp ax, 0x74
jne 0x1400051d1
movzx ecx, word [rbx + 0x16]
test cx, cx
je 0x1400051d1
call rbp
cmp ax, 0x65
jne 0x1400051d1
cmp word [rbx + 0x18], 0
jne 0x1400051d1
mov rax, qword [rsi]
mov qword [rsi - 8], rax
add rsi, 8
test rax, rax
jne 0x1400052fb
mov rax, qword [rsp + 0x58]
add dword [rax], 0xffffffff
or edi, 2
mov qword [rsp + 0x98], 0
mov rdx, qword [r12]
lea rcx, [rsp + 0x1c8]
lea r9, [rsp + 0x98]
mov r8d, edi
call fcn.140003cf0
cmp byte [rsp + 0x1d8], 1
je 0x1400056a8
mov rbx, qword [rsp + 0x98]
test edi, edi
jne 0x14000536b
cmp dword [rsp + 0x1c8], 1
jne 0x14000536b
test rbx, rbx
je 0x140005976
lea rcx, [rsp + 0xe8]
lea rdx, [rsp + 0xd0]
call fcn.140005e90
cmp byte [rsp + 0xe0], 1
je 0x1400056cb
mov rax, qword [rsp + 0x58]
mov edx, dword [rax]
lea rcx, [rsp + 0x90]
mov r8, r12
call fcn.140003590
mov r13, qword [rsp + 0x90]
test r13, r13
je 0x1400056e9
mov qword [rsp + 0x58], rbx
lea rcx, [rsp + 0x88]
mov rdx, r12
call fcn.140006000
cmp byte [rsp + 0x89], 0
je 0x14000573c
mov qword [rsp + 0x1e8], 0
movdqa xmm0, xmmword [0x14004e2d0]
movdqu xmmword [rsp + 0x1f8], xmm0
lea rax, [rsp + 0x208]
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x220], 0
lea r15, [rsp + 0x1e8]
mov rcx, r15
call fcn.140006230
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov rbp, rax
mov ecx, 0xfffffff5
call rsi
mov rbx, rax
mov ecx, 0xfffffff4
call rsi
mov r14, rax
mov rcx, r15
mov rdx, rbp
call fcn.140012390
mov rcx, r15
mov rdx, rbx
call fcn.140012390
mov rcx, r15
mov rdx, r14
call fcn.140012390
lea rdx, [rsp + 0xb8]
lea rsi, [rsp + 0x640]
mov rcx, r15
mov r8, rsi
call fcn.140006370
cmp byte [rsp + 0xc8], 1
je 0x140005794
xor ecx, ecx
cmp byte [rsp + 0xb8], 0
je 0x1400057b7
mov eax, 0x80404
cmp qword [rsp + 0x1f8], 0
je 0x1400057c4
mov r15d, edi
or byte [rsp + 0x67d], 1
mov qword [rsp + 0x690], rbp
mov qword [rsp + 0x698], rbx
mov qword [rsp + 0x6a0], r14
mov ecx, 1
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], 0
mov rdx, qword [r12]
mov rbx, qword [rsp + 0x58]
test rbx, rbx
mov rdi, qword [rsp + 0x60]
lea rbp, [rsp + 0x70]
jne 0x1400057cc
mov qword [rsp + 0x48], rbp
mov qword [rsp + 0x40], rsi
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
mov rcx, rdx
mov rdx, r13
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140005804
mov rbp, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
mov rdx, qword [r12]
lea rcx, [rsp + 0xa0]
mov r8, rbp
xor r9d, r9d
call fcn.140002ab0
cmp byte [rsp + 0xb0], 1
je 0x14000585a
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
je 0x140005864
test r15b, 1
je 0x1400058c8
mov rcx, rbp
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x140005952
lea rdx, [rsp + 0x620]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x140005952
mov eax, dword [rsp + 0x620]
mov dword [rdi], eax
mov byte [rdi + 4], 1
lea rax, [rsi + 1]
cmp rax, 2
jb 0x1400055db
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rbp + 1]
cmp rax, 2
jb 0x1400055ee
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rsi, qword [rsp + 0x220]
mov qword [rsp + 0x220], 0
test rsi, rsi
je 0x140005619
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_DeleteProcThreadAttributeList]
mov rcx, rsi
call qword [sym.imp.mozglue.dll_free]
mov rcx, qword [rsp + 0x1f0]
lea rax, [rsp + 0x208]
cmp rcx, rax
jne 0x14000596b
mov qword [rsp + 0x90], 0
test r13, r13
je 0x14000564c
mov rcx, r13
call qword [sym.imp.mozglue.dll_free]
lea rax, [rbx + 1]
cmp rax, 2
jb 0x140004e82
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140004e82
add rbx, 2
jmp 0x14000500f
mov rax, qword [r13]
test rax, rax
je 0x140005be4
lea rbx, [r12 + 0x10]
jmp 0x1400059e0
mov rax, qword [rbp]
mov qword [rbp - 8], rax
add rbp, 8
test rax, rax
je 0x14000519f
jmp 0x140005688
add rbx, 4
jmp 0x1400051f1
lea rcx, [rsp + 0x1c8]
call fcn.140002f20
mov rdi, qword [rsp + 0x60]
mov qword [rdi], 0
mov rbx, qword [rsp + 0x98]
jmp 0x14000564c
lea rcx, [rsp + 0xd0]
call fcn.140002f20
mov rdi, qword [rsp + 0x60]
mov qword [rdi], 0
jmp 0x14000564c
mov byte [rsp + 0x650], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x640], rax
movabs rax, 0x8007050700000134
mov qword [rsp + 0x648], rax
lea rcx, [rsp + 0x640]
call fcn.140002f20
mov rdi, qword [rsp + 0x60]
mov qword [rdi], 0
mov qword [rsp + 0x90], 0
jmp 0x14000564c
mov byte [rsp + 0x650], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x640], rax
movabs rax, 0x800700570000013b
mov qword [rsp + 0x648], rax
lea rcx, [rsp + 0x640]
call fcn.140002f20
mov rdi, qword [rsp + 0x60]
mov qword [rdi], 0
mov qword [rsp + 0x90], 0
mov rbx, qword [rsp + 0x58]
jmp 0x140005643
lea rcx, [rsp + 0xb8]
call fcn.140002f20
mov rdi, qword [rsp + 0x60]
mov qword [rdi], 0
mov rbx, qword [rsp + 0x58]
jmp 0x1400055ee
mov r15d, edi
mov eax, 0x404
jmp 0x1400054dd
mov r15d, edi
jmp 0x1400054dd
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x48], rsi
movdqu xmmword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], 0
mov rcx, rbx
mov r8, r13
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
test eax, eax
jne 0x140005541
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov byte [rsp + 0x630], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x620], rax
mov dword [rsp + 0x628], 0x171
mov dword [rsp + 0x62c], ecx
lea rcx, [rsp + 0x620]
call fcn.140002f20
mov qword [rdi], 0
jmp 0x1400055ee
lea rcx, [rsp + 0xa0]
jmp 0x1400058a9
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov byte [rsp + 0x630], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x620], rax
mov dword [rsp + 0x628], 0x181
mov dword [rsp + 0x62c], ecx
lea rcx, [rsp + 0x620]
call fcn.140002f20
mov rcx, rbp
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov qword [rdi], 0
jmp 0x1400055c8
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov r15d, eax
xor edi, edi
cmp eax, 1
mov r14d, 0
sbb r14d, r14d
not r14d
mov dword [rsp + 0x6c], 0
test eax, eax
jne 0x1400058f8
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x6c], eax
or r14d, 0x2710
mov r12, qword [sym.imp.USER32.dll_WaitForInputIdle]
test r15d, r15d
jne 0x140005917
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
sub edi, dword [rsp + 0x6c]
mov ebx, r14d
sub ebx, edi
jbe 0x140005952
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, rbp
mov edx, ebx
call r12
cmp eax, 0xffffffff
jne 0x140005952
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5bf
jne 0x140005952
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
test r15d, r15d
jne 0x140005917
jmp 0x14000590b
mov rdi, qword [rsp + 0x60]
mov dword [rdi], 0
mov byte [rdi + 4], 1
mov rbx, qword [rsp + 0x58]
jmp 0x1400055c8
call qword [sym.imp.mozglue.dll_free]
jmp 0x140005632
mov rax, qword [rsp + 0x58]
mov edx, dword [rax]
lea rcx, [rsp + 0x640]
mov r8, r12
call fcn.140003300
cmp byte [rsp + 0x650], 1
jne 0x1400059b4
lea rcx, [rsp + 0x640]
call fcn.140002f20
mov rax, qword [rsp + 0x60]
mov qword [rax], 0
xor eax, eax
jmp 0x1400059c1
mov rax, qword [rsp + 0x60]
mov dword [rax], 0
mov al, 1
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], al
xor ebx, ebx
jmp 0x14000564c
mov rax, qword [rbx]
add rbx, 8
test rax, rax
je 0x140005ae9
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x1400059d0
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x1400059d0
call rsi
cmp ax, 0x6d
jne 0x1400059d0
movzx ecx, word [rbp + 2]
test cx, cx
je 0x1400059d0
call rsi
cmp ax, 0x61
jne 0x1400059d0
movzx ecx, word [rbp + 4]
test cx, cx
je 0x1400059d0
call rsi
cmp ax, 0x72
jne 0x1400059d0
movzx ecx, word [rbp + 6]
test cx, cx
je 0x1400059d0
call rsi
cmp ax, 0x69
jne 0x1400059d0
movzx ecx, word [rbp + 8]
test cx, cx
je 0x1400059d0
call rsi
cmp ax, 0x6f
jne 0x1400059d0
movzx ecx, word [rbp + 0xa]
test cx, cx
je 0x1400059d0
call rsi
cmp ax, 0x6e
jne 0x1400059d0
movzx ecx, word [rbp + 0xc]
test cx, cx
je 0x1400059d0
call rsi
cmp ax, 0x65
jne 0x1400059d0
movzx ecx, word [rbp + 0xe]
test cx, cx
je 0x1400059d0
call rsi
cmp ax, 0x74
jne 0x1400059d0
movzx ecx, word [rbp + 0x10]
test cx, cx
je 0x1400059d0
call rsi
cmp ax, 0x74
jne 0x1400059d0
movzx ecx, word [rbp + 0x12]
test cx, cx
je 0x1400059d0
call rsi
cmp ax, 0x65
jne 0x1400059d0
cmp word [rbp + 0x14], 0
jne 0x1400059d0
jmp 0x1400051a7
mov rax, qword [r13]
test rax, rax
je 0x140005be4
lea rbx, [r12 + 0x10]
jmp 0x140005b0d
mov rax, qword [rbx]
add rbx, 8
test rax, rax
je 0x140005be4
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x140005afd
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x140005afd
call rsi
cmp ax, 0x68
jne 0x140005afd
movzx ecx, word [rbp + 2]
test cx, cx
je 0x140005afd
call rsi
cmp ax, 0x65
jne 0x140005afd
movzx ecx, word [rbp + 4]
test cx, cx
je 0x140005afd
call rsi
cmp ax, 0x61
jne 0x140005afd
movzx ecx, word [rbp + 6]
test cx, cx
je 0x140005afd
call rsi
cmp ax, 0x64
jne 0x140005afd
movzx ecx, word [rbp + 8]
test cx, cx
je 0x140005afd
call rsi
cmp ax, 0x6c
jne 0x140005afd
movzx ecx, word [rbp + 0xa]
test cx, cx
je 0x140005afd
call rsi
cmp ax, 0x65
jne 0x140005afd
movzx ecx, word [rbp + 0xc]
test cx, cx
je 0x140005afd
call rsi
cmp ax, 0x73
jne 0x140005afd
movzx ecx, word [rbp + 0xe]
test cx, cx
je 0x140005afd
call rsi
cmp ax, 0x73
jne 0x140005afd
cmp word [rbp + 0x10], 0
jne 0x140005afd
jmp 0x1400051a7
lea rcx, str.MOZ_AUTOMATION
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x140005bff
cmp byte [rax], 0
jne 0x1400051a7
lea rcx, str.MOZ_HEADLESS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x140005c24
cmp byte [rax], 0
mov edi, 0
jne 0x1400051a7
jmp 0x1400051ac
xor edi, edi
jmp 0x1400051ac