Function at 0x140003ea0
Capabilities:
Create process on windows
Query environment variable
Resume thread
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa88
mov rsi, r9
mov r13, r8
mov qword [rsp + 0x60], rcx
mov rax, qword [0x140055018]
xor rax, rsp
mov qword [rsp + 0xa80], rax
movdqa xmm0, xmmword [0x1400492f0]
movdqa xmmword [rsp + 0x1b0], xmm0
lea r8, [rsp + 0x1b0]
mov qword [rsp + 0x68], rdx
mov rcx, rdx
mov rdx, r13
call fcn.140005760
mov qword [0x140055ac8], rsi
lea r12, [r13 + 8]
mov rax, qword [r13 + 8]
test rax, rax
je 0x140003fbe
lea rsi, [r13 + 0x10]
mov r15, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
lea rbx, str.log_launcher_error
mov rbp, r12
jmp 0x140003f41
mov rax, qword [rbp + 8]
add rbp, 8
add rsi, 8
test rax, rax
je 0x140003fbe
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x140003f30
lea rdi, [rax + 2]
xor ecx, ecx
cmp word [rax + 2], 0x2d
lea rdx, [rax + 4]
sete cl
cmove rdi, rdx
movzx ecx, word [rax + rcx*2 + 2]
test cx, cx
setne al
mov r14d, 2
test al, 1
je 0x140003f30
call r15
cmp ax, word [r14 + rbx - 2]
jne 0x140003f30
movzx ecx, word [rdi + r14]
test cx, cx
setne al
cmp word [r14 + rbx], 0
lea r14, [r14 + 2]
jne 0x140003f74
test cx, cx
jne 0x140003f30
mov rax, qword [rsi]
mov qword [rsi - 8], rax
add rsi, 8
test rax, rax
jne 0x140003f9f
mov rax, qword [rsp + 0x68]
add dword [rax], 0xffffffff
mov byte [0x140055ac4], 1
lea rcx, [rsp + 0xe8]
call fcn.140002d10
mov rax, qword [r12]
test rax, rax
je 0x14000417d
lea rsi, [r13 + 0x10]
mov rbx, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
jmp 0x140004000
mov rax, qword [rsi]
add rsi, 8
test rax, rax
je 0x14000417d
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x140003ff0
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x140003ff0
call rbx
cmp ax, 0x63
jne 0x140003ff0
movzx ecx, word [rbp + 2]
test cx, cx
je 0x140003ff0
call rbx
cmp ax, 0x6f
jne 0x140003ff0
movzx ecx, word [rbp + 4]
test cx, cx
je 0x140003ff0
call rbx
cmp ax, 0x6e
jne 0x140003ff0
movzx ecx, word [rbp + 6]
test cx, cx
je 0x140003ff0
call rbx
cmp ax, 0x74
jne 0x140003ff0
movzx ecx, word [rbp + 8]
test cx, cx
je 0x140003ff0
call rbx
cmp ax, 0x65
jne 0x140003ff0
movzx ecx, word [rbp + 0xa]
test cx, cx
je 0x140003ff0
call rbx
cmp ax, 0x6e
jne 0x140003ff0
movzx ecx, word [rbp + 0xc]
test cx, cx
je 0x140003ff0
call rbx
cmp ax, 0x74
jne 0x140003ff0
movzx ecx, word [rbp + 0xe]
test cx, cx
je 0x140003ff0
call rbx
cmp ax, 0x70
jne 0x140003ff0
movzx ecx, word [rbp + 0x10]
test cx, cx
je 0x140003ff0
call rbx
cmp ax, 0x72
jne 0x140003ff0
movzx ecx, word [rbp + 0x12]
test cx, cx
je 0x140003ff0
call rbx
cmp ax, 0x6f
jne 0x140003ff0
movzx ecx, word [rbp + 0x14]
test cx, cx
je 0x140003ff0
call rbx
cmp ax, 0x63
jne 0x140003ff0
cmp word [rbp + 0x16], 0
jne 0x140003ff0
lea rcx, [rsp + 0xe8]
lea rdx, [rsp + 0x640]
call fcn.1400059c0
cmp byte [rsp + 0x650], 1
je 0x1400049eb
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], 0
lea rcx, [rsp + 0xe8]
call fcn.140002f40
mov rcx, qword [rsp + 0xa80]
xor rcx, rsp
call fcn.1400477a0
mov rax, rdi
add rsp, 0xa88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x660], xmm0
movdqa xmmword [rsp + 0x650], xmm0
movdqa xmmword [rsp + 0x640], xmm0
lea rax, [rsp + 0x1e8]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x640]
mov rcx, 0xffffffffffffffff
xor edx, edx
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
test eax, eax
js 0x14000432a
mov r8, qword [rsp + 0x668]
mov ecx, 0x1000
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbp, rax
mov qword [rsp + 0xd0], rax
test rax, rax
je 0x140004365
lea rcx, [rsp + 0x640]
lea rdx, [rsp + 0xd0]
call fcn.140011630
cmp byte [rsp + 0x658], 1
je 0x14000437b
mov r8d, dword [rsp + 0x640]
lea rdx, [rsp + 0x660]
lea rcx, [rsp + 0x620]
call fcn.1400117c0
cmp byte [rsp + 0x638], 1
je 0x140004399
lea rcx, [rsp + 0x1e8]
call fcn.1400116c0
cmp byte [rsp + 0x200], 1
je 0x1400043c3
mov r8d, dword [rsp + 0x1e8]
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x1c8]
call fcn.1400117c0
mov al, byte [rsp + 0x1e0]
cmp al, 1
je 0x1400043e1
or al, byte [rsp + 0x638]
jne 0x140004374
movdqu xmm0, xmmword [rsp + 0x620]
movdqu xmm1, xmmword [rsp + 0x1c8]
pcmpeqb xmm1, xmm0
movq xmm0, qword [rsp + 0x630]
movq xmm2, qword [rsp + 0x1d8]
pcmpeqb xmm2, xmm0
pand xmm2, xmm1
pmovmskb eax, xmm2
xor ebx, ebx
cmp eax, 0xffff
sete bl
xor r15d, r15d
lea rax, [rbp + 1]
cmp rax, 2
jb 0x1400042ec
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r15b, r15b
jne 0x14000433e
test bl, bl
sete sil
lea rcx, [0x14004c3bd]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x1400043ff
mov rax, qword [r12]
test rax, rax
je 0x1400045cc
lea rbx, [r13 + 0x10]
mov rbp, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
jmp 0x1400044e0
mov esi, eax
or esi, 0x10000000
lea rbx, str.z:_task_1581954009_build_src_obj_firefox_dist_include_mozilla_NativeNt.h
mov edi, 0x449
mov qword [rsp + 0x640], rbx
mov dword [rsp + 0x648], edi
mov dword [rsp + 0x64c], esi
lea rcx, [rsp + 0x640]
call fcn.140002bc0
xor esi, esi
jmp 0x1400042f7
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x57
jne 0x14000441c
xor ebx, ebx
jmp 0x1400042d6
mov rbx, qword [rsp + 0x648]
mov edi, dword [rsp + 0x650]
mov r15b, 1
mov esi, dword [rsp + 0x654]
jmp 0x1400042d9
mov esi, dword [rsp + 0x62c]
cmp esi, 0xd000003a
je 0x14000443e
mov rbx, qword [rsp + 0x620]
mov edi, dword [rsp + 0x628]
mov r15b, 1
jmp 0x1400042d9
mov rbx, qword [rsp + 0x1f0]
mov edi, dword [rsp + 0x1f8]
mov r15b, 1
mov esi, dword [rsp + 0x1fc]
jmp 0x1400042d9
mov rbx, qword [rsp + 0x1c8]
mov edi, dword [rsp + 0x1d0]
mov r15b, 1
mov esi, dword [rsp + 0x1d4]
jmp 0x1400042d9
cmp byte [rax], 0
je 0x14000430d
lea rcx, str.MOZ_LAUNCHER_PROCESS
call sub.api_ms_win_crt_environment_l1_1_0.dll__putenv
mov sil, 1
jmp 0x14000430d
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov edi, 0x58
mov r15b, 1
lea rbx, str.z:_task_1581954009_build_src_browser_app_winlauncher_SameBinary.h
jmp 0x1400042d9
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r14, rax
mov qword [rsp + 0x620], rax
lea rcx, [rsp + 0x1e8]
lea rdx, [rsp + 0x620]
call fcn.140011630
cmp byte [rsp + 0x200], 1
jne 0x140004489
mov rbx, qword [rsp + 0x1f0]
mov edi, dword [rsp + 0x1f8]
mov r15b, 1
mov esi, dword [rsp + 0x1fc]
jmp 0x1400044a9
lea rcx, [rsp + 0x640]
lea rdx, [rsp + 0x1e8]
call fcn.140011730
movzx ebx, al
mov esi, 0xd000003a
xor r15d, r15d
lea rax, [r14 + 1]
cmp rax, 2
jb 0x1400042d9
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400042d9
mov rax, qword [rbx]
add rbx, 8
test rax, rax
je 0x1400045cc
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x1400044d0
lea rdi, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rdi, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x1400044d0
call rbp
cmp ax, 0x6c
jne 0x1400044d0
movzx ecx, word [rdi + 2]
test cx, cx
je 0x1400044d0
call rbp
cmp ax, 0x61
jne 0x1400044d0
movzx ecx, word [rdi + 4]
test cx, cx
je 0x1400044d0
call rbp
cmp ax, 0x75
jne 0x1400044d0
movzx ecx, word [rdi + 6]
test cx, cx
je 0x1400044d0
call rbp
cmp ax, 0x6e
jne 0x1400044d0
movzx ecx, word [rdi + 8]
test cx, cx
je 0x1400044d0
call rbp
cmp ax, 0x63
jne 0x1400044d0
movzx ecx, word [rdi + 0xa]
test cx, cx
je 0x1400044d0
call rbp
cmp ax, 0x68
jne 0x1400044d0
movzx ecx, word [rdi + 0xc]
test cx, cx
je 0x1400044d0
call rbp
cmp ax, 0x65
jne 0x1400044d0
movzx ecx, word [rdi + 0xe]
test cx, cx
je 0x1400044d0
call rbp
cmp ax, 0x72
jne 0x1400044d0
cmp word [rdi + 0x10], 0
jne 0x1400044d0
mov rax, qword [rbx]
mov qword [rbx - 8], rax
add rbx, 8
test rax, rax
jne 0x1400045b2
mov rax, qword [rsp + 0x68]
add dword [rax], 0xffffffff
jmp 0x1400045de
test sil, sil
jne 0x1400045de
xor r9d, r9d
mov ebp, 1
jmp 0x1400047ad
mov rax, qword [r12]
xor ebp, ebp
test rax, rax
je 0x1400047aa
lea rsi, [r13 + 0x10]
mov r15, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
jmp 0x140004610
mov rax, qword [rsi]
add rsi, 8
test rax, rax
je 0x1400047aa
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x140004600
lea rbx, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbx, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x140004600
call r15
cmp ax, 0x66
jne 0x140004600
movzx ecx, word [rbx + 2]
test cx, cx
je 0x140004600
call r15
cmp ax, 0x6f
jne 0x140004600
movzx ecx, word [rbx + 4]
test cx, cx
je 0x140004600
call r15
cmp ax, 0x72
jne 0x140004600
movzx ecx, word [rbx + 6]
test cx, cx
je 0x140004600
call r15
cmp ax, 0x63
jne 0x140004600
movzx ecx, word [rbx + 8]
test cx, cx
je 0x140004600
call r15
cmp ax, 0x65
jne 0x140004600
movzx ecx, word [rbx + 0xa]
test cx, cx
je 0x140004600
call r15
cmp ax, 0x2d
jne 0x140004600
movzx ecx, word [rbx + 0xc]
test cx, cx
je 0x140004600
call r15
cmp ax, 0x6c
jne 0x140004600
movzx ecx, word [rbx + 0xe]
test cx, cx
je 0x140004600
call r15
cmp ax, 0x61
jne 0x140004600
movzx ecx, word [rbx + 0x10]
test cx, cx
je 0x140004600
call r15
cmp ax, 0x75
jne 0x140004600
movzx ecx, word [rbx + 0x12]
test cx, cx
je 0x140004600
call r15
cmp ax, 0x6e
jne 0x140004600
movzx ecx, word [rbx + 0x14]
test cx, cx
je 0x140004600
call r15
cmp ax, 0x63
jne 0x140004600
movzx ecx, word [rbx + 0x16]
test cx, cx
je 0x140004600
call r15
cmp ax, 0x68
jne 0x140004600
movzx ecx, word [rbx + 0x18]
test cx, cx
je 0x140004600
call r15
cmp ax, 0x65
jne 0x140004600
movzx ecx, word [rbx + 0x1a]
test cx, cx
je 0x140004600
call r15
cmp ax, 0x72
jne 0x140004600
cmp word [rbx + 0x1c], 0
jne 0x140004600
mov rax, qword [rsi]
mov qword [rsi - 8], rax
add rsi, 8
test rax, rax
jne 0x14000478a
mov rax, qword [rsp + 0x68]
add dword [rax], 0xffffffff
mov r9d, 1
jmp 0x1400047ad
xor r9d, r9d
lea rcx, [rsp + 0xe8]
lea rdx, [rsp + 0x640]
mov r8d, ebp
call fcn.140006d00
cmp byte [rsp + 0x650], 1
je 0x1400049b0
cmp dword [rsp + 0x640], 0
jne 0x140004949
mov eax, dword [0x140055b1c]
cmp eax, 0x3839
jae 0x140004a08
mov eax, dword [0x140055040]
cmp eax, 0x383a
jb 0x1400048f0
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x648], xmm0
movdqu xmmword [rsp + 0x6c8], xmm0
movdqu xmmword [rsp + 0x6b8], xmm0
movdqu xmmword [rsp + 0x6a8], xmm0
movdqu xmmword [rsp + 0x698], xmm0
movdqu xmmword [rsp + 0x688], xmm0
movdqu xmmword [rsp + 0x678], xmm0
movdqu xmmword [rsp + 0x668], xmm0
movdqu xmmword [rsp + 0x658], xmm0
mov dword [rsp + 0x6d8], 0
movabs rax, 0xa0000009c
mov qword [rsp + 0x640], rax
mov dword [rsp + 0x64c], 0x3839
mov rsi, qword [sym.imp.ntdll.dll_VerSetConditionMask]
xor ecx, ecx
mov edx, 2
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 1
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 4
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 0x20
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 0x10
mov r8b, 3
call rsi
lea rcx, [rsp + 0x640]
mov edx, 0x37
mov r8, rax
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoA]
test eax, eax
jne 0x1400049fd
mov eax, 0x3839
xchg dword [0x140055040], eax
call fcn.140005aa0
test r13, r13
je 0x1400049c2
lea rcx, [rsp + 0x640]
call fcn.14000da90
mov rax, qword [rsp + 0x640]
mov qword [rsp + 0x640], 0
test rax, rax
je 0x1400049c2
mov qword [r13], rax
mov rbx, qword [r13 + 8]
test rbx, rbx
je 0x14000571c
lea rbp, [r13 + 0x20]
mov rsi, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
jmp 0x140004aab
lea rcx, str.MOZ_DEBUG_BROWSER_PROCESS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x140004a5e
lea rcx, str.MOZ_DEBUG_BROWSER_PAUSE
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__wgetenv]
test rax, rax
je 0x14000411d
cmp word [rax], 0
je 0x14000411d
mov rcx, rax
xor edx, edx
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
imul esi, eax, 0x3e8
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
call fcn.140011bc0
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000411d
lea rcx, [rsp + 0x640]
call fcn.140002bc0
jmp 0x14000411d
mov byte [rsp + 0x650], 1
lea rax, str.z:_task_1581954009_build_src_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x640], rax
movabs rax, 0x8007050700000109
mov qword [rsp + 0x648], rax
lea rcx, [rsp + 0x640]
call fcn.140002bc0
jmp 0x140004140
mov eax, 0x3839
xchg dword [0x140055b1c], eax
mov eax, dword [0x140055ae0]
mov ecx, dword [0x140055298]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004a72
mov rax, qword [0x140055ad8]
test rax, rax
je 0x1400048f0
mov dword [rsp + 0x640], 4
lea rdx, [rsp + 0x640]
mov r8d, 4
mov ecx, 0xa
call rax
jmp 0x1400048f0
cmp byte [rax], 0
je 0x14000495f
call qword [sym.imp.KERNEL32.dll_DebugBreak]
jmp 0x14000411d
lea rcx, [0x140055ae0]
call fcn.140046d00
cmp dword [0x140055ae0], 0xffffffff
jne 0x140004a29
call fcn.140011cd0
lea rcx, [0x140055ae0]
call fcn.140046d68
jmp 0x140004a29
mov rbx, qword [rbp - 0x10]
add rbp, 8
test rbx, rbx
je 0x14000511d
movzx eax, word [rbx]
or eax, 2
cmp ax, 0x2f
jne 0x140004a9a
cmp word [rbx + 2], 0x2d
jne 0x140005114
add rbx, 4
movzx ecx, word [rbx]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x77
jne 0x140004a9a
movzx ecx, word [rbx + 2]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x61
jne 0x140004a9a
movzx ecx, word [rbx + 4]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x69
jne 0x140004a9a
movzx ecx, word [rbx + 6]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x74
jne 0x140004a9a
movzx ecx, word [rbx + 8]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x2d
jne 0x140004a9a
movzx ecx, word [rbx + 0xa]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x66
jne 0x140004a9a
movzx ecx, word [rbx + 0xc]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x6f
jne 0x140004a9a
movzx ecx, word [rbx + 0xe]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x72
jne 0x140004a9a
movzx ecx, word [rbx + 0x10]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x2d
jne 0x140004a9a
movzx ecx, word [rbx + 0x12]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x62
jne 0x140004a9a
movzx ecx, word [rbx + 0x14]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x72
jne 0x140004a9a
movzx ecx, word [rbx + 0x16]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x6f
jne 0x140004a9a
movzx ecx, word [rbx + 0x18]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x77
jne 0x140004a9a
movzx ecx, word [rbx + 0x1a]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x73
jne 0x140004a9a
movzx ecx, word [rbx + 0x1c]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x65
jne 0x140004a9a
movzx ecx, word [rbx + 0x1e]
test cx, cx
je 0x140004a9a
call rsi
cmp ax, 0x72
jne 0x140004a9a
cmp word [rbx + 0x20], 0
jne 0x140004a9a
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x18], rax
test rax, rax
je 0x140004c56
mov rax, qword [rbp - 8]
mov qword [rbp - 0x10], rax
test rax, rax
jne 0x140005133
mov rax, qword [rsp + 0x68]
add dword [rax], 0xffffffff
mov r15d, 1
mov rdi, qword [r12]
test rdi, rdi
je 0x140004dce
lea rsi, [r13 + 0x10]
mov rbx, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
movzx eax, word [rdi]
or eax, 2
cmp ax, 0x2f
je 0x140004c99
mov rdi, qword [rsi]
add rsi, 8
test rdi, rdi
jne 0x140004c7c
jmp 0x140004dce
cmp word [rdi + 2], 0x2d
je 0x14000514a
add rdi, 2
movzx ecx, word [rdi]
test cx, cx
je 0x140004c88
call rbx
cmp ax, 0x6e
jne 0x140004c88
movzx ecx, word [rdi + 2]
test cx, cx
je 0x140004c88
call rbx
cmp ax, 0x6f
jne 0x140004c88
movzx ecx, word [rdi + 4]
test cx, cx
je 0x140004c88
call rbx
cmp ax, 0x2d
jne 0x140004c88
movzx ecx, word [rdi + 6]
test cx, cx
je 0x140004c88
call rbx
cmp ax, 0x64
jne 0x140004c88
movzx ecx, word [rdi + 8]
test cx, cx
je 0x140004c88
call rbx
cmp ax, 0x65
jne 0x140004c88
movzx ecx, word [rdi + 0xa]
test cx, cx
je 0x140004c88
call rbx
cmp ax, 0x65
jne 0x140004c88
movzx ecx, word [rdi + 0xc]
test cx, cx
je 0x140004c88
call rbx
cmp ax, 0x6c
jne 0x140004c88
movzx ecx, word [rdi + 0xe]
test cx, cx
je 0x140004c88
call rbx
cmp ax, 0x65
jne 0x140004c88
movzx ecx, word [rdi + 0x10]
test cx, cx
je 0x140004c88
call rbx
cmp ax, 0x76
jne 0x140004c88
movzx ecx, word [rdi + 0x12]
test cx, cx
je 0x140004c88
call rbx
cmp ax, 0x61
jne 0x140004c88
movzx ecx, word [rdi + 0x14]
test cx, cx
je 0x140004c88
call rbx
cmp ax, 0x74
jne 0x140004c88
movzx ecx, word [rdi + 0x16]
test cx, cx
je 0x140004c88
call rbx
cmp ax, 0x65
jne 0x140004c88
cmp word [rdi + 0x18], 0
jne 0x140004c88
mov rax, qword [rsi]
mov qword [rsi - 8], rax
add rsi, 8
test rax, rax
jne 0x140004db2
mov rax, qword [rsp + 0x68]
add dword [rax], 0xffffffff
or r15d, 2
mov qword [rsp + 0x90], 0
lea rcx, [rsp + 0x1c8]
lea r8, [rsp + 0x90]
mov edx, r15d
call fcn.1400039e0
cmp byte [rsp + 0x1d8], 1
je 0x140005153
test r15d, r15d
jne 0x140004e1e
cmp dword [rsp + 0x1c8], 1
jne 0x140004e1e
cmp qword [rsp + 0x90], 0
je 0x14000549f
lea rcx, [rsp + 0xe8]
lea rdx, [rsp + 0xd0]
call fcn.1400059c0
cmp byte [rsp + 0xe0], 1
je 0x14000515d
mov rax, qword [rsp + 0x68]
mov edx, dword [rax]
lea rcx, [rsp + 0x88]
mov r8, r13
call fcn.140003270
cmp qword [rsp + 0x88], 0
je 0x140005178
lea rcx, [rsp + 0x98]
mov rdx, r13
call fcn.140005b30
cmp byte [rsp + 0x99], 0
je 0x1400051c8
mov qword [rsp + 0x1e8], 0
movdqa xmm0, xmmword [0x1400492a0]
movdqu xmmword [rsp + 0x1f8], xmm0
lea rax, [rsp + 0x208]
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x220], 0
mov eax, dword [0x140055b1c]
cmp eax, 0x3838
ja 0x1400054e7
mov eax, dword [0x140055040]
cmp eax, 0x383a
jae 0x14000520c
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov rbx, rax
mov ecx, 0xfffffff5
call rsi
mov rbp, rax
mov ecx, 0xfffffff4
call rsi
mov rsi, rax
lea rdi, [rsp + 0x1e8]
mov rcx, rdi
mov rdx, rbx
call fcn.140011d40
mov rcx, rdi
mov rdx, rbp
call fcn.140011d40
mov rcx, rdi
mov rdx, rsi
call fcn.140011d40
lea rdx, [rsp + 0xb8]
lea r12, [rsp + 0x640]
mov rcx, rdi
mov r8, r12
call fcn.140005d60
cmp byte [rsp + 0xc8], 1
je 0x1400052fe
xor edi, edi
cmp byte [rsp + 0xb8], 0
je 0x14000530b
mov eax, 0x80404
cmp qword [rsp + 0x1f8], 0
je 0x140004f9c
or byte [rsp + 0x67d], 1
mov qword [rsp + 0x690], rbx
mov qword [rsp + 0x698], rbp
mov qword [rsp + 0x6a0], rsi
mov edi, 1
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], 0
mov rcx, qword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov rdx, qword [r13]
test rcx, rcx
jne 0x140005315
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], r12
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], edi
mov rcx, rdx
mov rdx, r8
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14000534c
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
mov rdx, qword [r13]
lea rcx, [rsp + 0xa0]
mov r8, rbx
call fcn.1400027d0
cmp byte [rsp + 0xb0], 1
je 0x1400053a4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
je 0x1400053ae
test r15b, 1
je 0x140005414
mov rcx, rbx
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
mov rdi, qword [rsp + 0x60]
jne 0x14000548f
lea rdx, [rsp + 0x620]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x14000548f
mov eax, dword [rsp + 0x620]
mov dword [rdi], eax
mov byte [rdi + 4], 1
lea rax, [rsi + 1]
cmp rax, 2
jb 0x1400050a2
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rbx + 1]
cmp rax, 2
jb 0x1400050b5
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x1e8]
call fcn.140005ff0
cmp byte [rsp + 0x99], 0
je 0x1400050d4
mov byte [rsp + 0x99], 0
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0x88], 0
test rcx, rcx
je 0x1400050f3
call qword [sym.imp.mozglue.dll_free]
mov rcx, qword [rsp + 0x90]
lea rax, [rcx + 1]
cmp rax, 2
jb 0x140004149
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140004149
add rbx, 2
jmp 0x140004ac6
mov rax, qword [r12]
test rax, rax
je 0x14000571c
lea rbx, [r13 + 0x10]
jmp 0x140005519
mov rax, qword [rbp]
mov qword [rbp - 8], rax
add rbp, 8
test rax, rax
je 0x140004c56
jmp 0x140005133
add rdi, 4
jmp 0x140004ca8
lea rcx, [rsp + 0x1c8]
jmp 0x140005165
lea rcx, [rsp + 0xd0]
call fcn.140002bc0
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], 0
jmp 0x1400050f3
mov byte [rsp + 0x650], 1
lea rax, str.z:_task_1581954009_build_src_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x640], rax
movabs rax, 0x8007050700000134
mov qword [rsp + 0x648], rax
lea rcx, [rsp + 0x640]
call fcn.140002bc0
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], 0
mov qword [rsp + 0x88], 0
jmp 0x1400050f3
mov byte [rsp + 0x650], 1
lea rax, str.z:_task_1581954009_build_src_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x640], rax
movabs rax, 0x800700570000013b
mov qword [rsp + 0x648], rax
lea rcx, [rsp + 0x640]
call fcn.140002bc0
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], 0
jmp 0x1400050d4
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x648], xmm0
movdqu xmmword [rsp + 0x6c8], xmm0
movdqu xmmword [rsp + 0x6b8], xmm0
movdqu xmmword [rsp + 0x6a8], xmm0
movdqu xmmword [rsp + 0x698], xmm0
movdqu xmmword [rsp + 0x688], xmm0
movdqu xmmword [rsp + 0x678], xmm0
movdqu xmmword [rsp + 0x668], xmm0
movdqu xmmword [rsp + 0x658], xmm0
mov dword [rsp + 0x6d8], 0
movabs rax, 0xa0000009c
mov qword [rsp + 0x640], rax
mov dword [rsp + 0x64c], 0x3839
mov rsi, qword [sym.imp.ntdll.dll_VerSetConditionMask]
xor ecx, ecx
mov edx, 2
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 1
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 4
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 0x20
mov r8b, 3
call rsi
mov rcx, rax
mov edx, 0x10
mov r8b, 3
call rsi
lea rcx, [rsp + 0x640]
mov edx, 0x37
mov r8, rax
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoA]
test eax, eax
jne 0x1400054dc
mov eax, 0x3839
xchg dword [0x140055040], eax
jmp 0x140004ee0
lea rcx, [rsp + 0xb8]
jmp 0x140005391
mov eax, 0x404
jmp 0x140004f9c
lea rbp, [rsp + 0x70]
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x48], r12
movdqu xmmword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], 0
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
test eax, eax
jne 0x140005006
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov byte [rsp + 0x630], 1
lea rax, str.z:_task_1581954009_build_src_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x620], rax
mov dword [rsp + 0x628], 0x171
mov dword [rsp + 0x62c], ecx
lea rcx, [rsp + 0x620]
call fcn.140002bc0
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], 0
jmp 0x1400050b5
lea rcx, [rsp + 0xa0]
jmp 0x1400053f3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov byte [rsp + 0x630], 1
lea rax, str.z:_task_1581954009_build_src_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rsp + 0x620], rax
mov dword [rsp + 0x628], 0x181
mov dword [rsp + 0x62c], ecx
lea rcx, [rsp + 0x620]
call fcn.140002bc0
mov rcx, rbx
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], 0
jmp 0x14000508f
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov r12d, eax
xor ebp, ebp
cmp eax, 1
mov edi, 0
sbb edi, edi
not edi
mov r14d, 0
test eax, eax
jne 0x14000543e
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
or edi, 0x2710
mov r13, qword [sym.imp.USER32.dll_WaitForInputIdle]
mov r15, qword [sym.imp.KERNEL32.dll_GetLastError]
test r12d, r12d
jne 0x140005462
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebp, eax
sub ebp, r14d
mov edx, edi
sub edx, ebp
jbe 0x14000548f
mov rcx, rbx
call r13
cmp eax, 0xffffffff
jne 0x14000548f
call r15
cmp eax, 0x5bf
jne 0x14000548f
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
test r12d, r12d
jne 0x140005462
jmp 0x140005457
mov rdi, qword [rsp + 0x60]
mov dword [rdi], 0
jmp 0x14000508b
mov rax, qword [rsp + 0x68]
mov edx, dword [rax]
lea rcx, [rsp + 0x640]
mov r8, r13
call fcn.140002fd0
cmp byte [rsp + 0x650], 1
jne 0x1400054f4
lea rcx, [rsp + 0x640]
call fcn.140002bc0
xor eax, eax
mov rdi, qword [rsp + 0x60]
mov byte [rdi + 4], al
jmp 0x1400050f3
mov eax, 0x3839
xchg dword [0x140055b1c], eax
or byte [rsp + 0x1ef], 0x10
jmp 0x140004ee0
mov rdi, qword [rsp + 0x60]
mov dword [rdi], 0
mov al, 1
mov byte [rdi + 4], al
jmp 0x1400050f3
mov rax, qword [rbx]
add rbx, 8
test rax, rax
je 0x140005622
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x140005509
lea rbp, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rbp, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x140005509
call rsi
cmp ax, 0x6d
jne 0x140005509
movzx ecx, word [rbp + 2]
test cx, cx
je 0x140005509
call rsi
cmp ax, 0x61
jne 0x140005509
movzx ecx, word [rbp + 4]
test cx, cx
je 0x140005509
call rsi
cmp ax, 0x72
jne 0x140005509
movzx ecx, word [rbp + 6]
test cx, cx
je 0x140005509
call rsi
cmp ax, 0x69
jne 0x140005509
movzx ecx, word [rbp + 8]
test cx, cx
je 0x140005509
call rsi
cmp ax, 0x6f
jne 0x140005509
movzx ecx, word [rbp + 0xa]
test cx, cx
je 0x140005509
call rsi
cmp ax, 0x6e
jne 0x140005509
movzx ecx, word [rbp + 0xc]
test cx, cx
je 0x140005509
call rsi
cmp ax, 0x65
jne 0x140005509
movzx ecx, word [rbp + 0xe]
test cx, cx
je 0x140005509
call rsi
cmp ax, 0x74
jne 0x140005509
movzx ecx, word [rbp + 0x10]
test cx, cx
je 0x140005509
call rsi
cmp ax, 0x74
jne 0x140005509
movzx ecx, word [rbp + 0x12]
test cx, cx
je 0x140005509
call rsi
cmp ax, 0x65
jne 0x140005509
cmp word [rbp + 0x14], 0
jne 0x140005509
jmp 0x140004c5e
mov rax, qword [r12]
test rax, rax
je 0x14000571c
lea rbx, [r13 + 0x10]
jmp 0x140005645
mov rax, qword [rbx]
add rbx, 8
test rax, rax
je 0x14000571c
movzx ecx, word [rax]
or ecx, 2
cmp cx, 0x2f
jne 0x140005635
lea rdi, [rax + 2]
lea rcx, [rax + 4]
xor edx, edx
cmp word [rax + 2], 0x2d
sete dl
cmove rdi, rcx
movzx ecx, word [rax + rdx*2 + 2]
test cx, cx
je 0x140005635
call rsi
cmp ax, 0x68
jne 0x140005635
movzx ecx, word [rdi + 2]
test cx, cx
je 0x140005635
call rsi
cmp ax, 0x65
jne 0x140005635
movzx ecx, word [rdi + 4]
test cx, cx
je 0x140005635
call rsi
cmp ax, 0x61
jne 0x140005635
movzx ecx, word [rdi + 6]
test cx, cx
je 0x140005635
call rsi
cmp ax, 0x64
jne 0x140005635
movzx ecx, word [rdi + 8]
test cx, cx
je 0x140005635
call rsi
cmp ax, 0x6c
jne 0x140005635
movzx ecx, word [rdi + 0xa]
test cx, cx
je 0x140005635
call rsi
cmp ax, 0x65
jne 0x140005635
movzx ecx, word [rdi + 0xc]
test cx, cx
je 0x140005635
call rsi
cmp ax, 0x73
jne 0x140005635
movzx ecx, word [rdi + 0xe]
test cx, cx
je 0x140005635
call rsi
cmp ax, 0x73
jne 0x140005635
cmp word [rdi + 0x10], 0
jne 0x140005635
jmp 0x140004c5e
lea rcx, str.MOZ_AUTOMATION
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x140005737
cmp byte [rax], 0
jne 0x140004c5e
lea rcx, str.MOZ_HEADLESS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xor r15d, r15d
test rax, rax
je 0x140004c64
cmp byte [rax], 0
jne 0x140004c5e
jmp 0x140004c64