Function at 0x140020730
Capabilities:
Check for time delay via gettickcount
Check for time delay via queryperformancecounter
Create process on windows
Parse pe header
Query environment variable
Query or enumerate registry value
Resolve function by parsing pe exports
Resume thread
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xad8
movaps xmmword [rsp + 0xac0], xmm6
mov rsi, r9
mov r14, r8
mov r12, rdx
mov r15, rcx
mov rax, qword [0x14005e018]
xor rax, rsp
mov qword [rsp + 0xab8], rax
mov ecx, dword [rdx]
mov rdx, r8
call fcn.1400227d0
test al, al
je 0x140021e77
mov qword [0x14005ecb0], rsi
lea r13, [r14 + 8]
mov r8, qword [r14 + 8]
test r8, r8
je 0x140020909
lea rcx, [r14 + 0x10]
mov r9d, 0xff
mov rax, r8
mov rbp, r13
movzx ebx, word [rax]
cmp ebx, 0x2d
je 0x1400207ca
cmp ebx, 0x2f
je 0x140021e6b
mov rax, qword [rbp + 8]
add rbp, 8
add rcx, 8
test rax, rax
jne 0x1400207a3
jmp 0x14002085f
lea rbx, [rax + 2]
lea rdi, [rax + 4]
cmp word [rax + 2], 0x2d
cmove rbx, rdi
mov sil, 0x6c
xor r10d, r10d
movzx edi, word [rbx + r10*2]
test di, di
je 0x1400207b4
cmp sil, 0x2d
je 0x140020801
lea edx, [rsi - 0x30]
cmp dl, 0xa
jb 0x140020801
lea edx, [rsi - 0x61]
cmp dl, 0x19
ja 0x1400207b4
movzx edx, di
cmp edx, r9d
cmovae edi, r9d
lea edx, [rdi - 0x41]
mov eax, edi
or al, 0x20
cmp dl, 0x1a
movzx eax, al
cmovae eax, edi
cmp al, sil
jne 0x1400207b4
lea rax, str.log_launcher_error
mov sil, byte [r10 + rax + 1]
inc r10
cmp r10, 0x12
jne 0x1400207e1
cmp word [rbx + 0x24], 0
jne 0x1400207b4
mov rax, qword [rcx]
mov qword [rcx - 8], rax
add rcx, 8
test rax, rax
jne 0x140020840
dec dword [r12]
mov byte [0x14005ecb8], 1
mov r8, qword [r13]
test r8, r8
je 0x140020909
mov ebp, 0xff
lea r9, str.contentproc
mov r10, r13
movzx eax, word [r8]
cmp eax, 0x2d
jne 0x1400208ef
lea rax, [r8 + 2]
lea rbx, [r8 + 4]
cmp word [r8 + 2], 0x2d
cmove rax, rbx
mov dil, 0x63
xor ebx, ebx
movzx esi, word [rax + rbx*2]
test si, si
je 0x1400208f8
cmp dil, 0x2d
je 0x1400208b6
lea edx, [rdi - 0x30]
cmp dl, 0xa
jb 0x1400208b6
lea edx, [rdi - 0x61]
cmp dl, 0x19
ja 0x1400208f8
movzx edx, si
cmp edx, ebp
cmovae esi, ebp
lea edx, [rsi - 0x41]
mov ecx, esi
or cl, 0x20
cmp dl, 0x1a
movzx ecx, cl
cmovae ecx, esi
cmp cl, dil
jne 0x1400208f8
mov dil, byte [rbx + r9 + 1]
inc rbx
cmp rbx, 0xb
jne 0x140020897
cmp word [rax + 0x16], 0
je 0x140020c8a
jmp 0x1400208f8
cmp eax, 0x2f
je 0x140021ec4
mov r8, qword [r10 + 8]
add r10, 8
test r8, r8
jne 0x140020877
lea rcx, [rsp + 0x158]
call fcn.140022e70
pxor xmm0, xmm0
lea r8, [rsp + 0x680]
movdqa xmmword [r8 + 0x20], xmm0
movdqa xmmword [r8 + 0x10], xmm0
movdqa xmmword [r8], xmm0
lea rax, [rsp + 0x240]
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffffffffffff
xor edx, edx
mov r9d, 0x30
call sub.ntdll.dll_NtQueryInformationProcess
test eax, eax
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r12
js 0x140021edc
mov r8, qword [rsp + 0x6a8]
mov ecx, 0x1000
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbp, rax
test rax, rax
je 0x140021f12
lea rsi, [rsp + 0x6a0]
mov dword [rsi - 0x20], 0
mov byte [rsi - 8], 0
lea r9, [rsp + 0x240]
mov dword [r9], 0x209
mov rcx, rbp
mov edx, 1
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_QueryFullProcessImageNameW]
test eax, eax
je 0x140021f47
cmp byte [rsp + 0x698], 1
je 0x140021f6e
mov r8d, dword [rsp + 0x680]
lea rdi, [rsp + 0xe0]
mov rcx, rdi
mov rdx, rsi
call fcn.140023760
cmp byte [rdi + 0x18], 1
je 0x140021f8d
lea rsi, [rsp + 0x260]
mov dword [rsi - 0x20], 1
mov byte [rsi - 8], 0
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x209
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp eax, 0x209
je 0x140020a28
test eax, eax
jne 0x140021d10
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
mov r12d, 0x29
mov sil, 1
lea rdi, str._builds_worker_checkouts_gecko_browser_app_winlauncher_SameBinary.h
mov rax, rbp
inc rax
cmp rax, 2
jb 0x140020a61
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test sil, sil
jne 0x140021ef1
test dil, dil
sete r12b
lea rcx, [0x140053e41]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x140021fed
mov rbx, qword [r13]
test rbx, rbx
je 0x140020cc0
lea rcx, [r14 + 0x10]
mov esi, 0xff
mov rax, rbx
movzx ebp, word [rax]
cmp ebp, 0x2d
je 0x140020ac2
cmp ebp, 0x2f
je 0x140021ed0
mov rax, qword [rcx]
add rcx, 8
test rax, rax
jne 0x140020aa0
jmp 0x140020cc0
lea rbp, [rax + 2]
lea rdi, [rax + 4]
cmp word [rax + 2], 0x2d
cmove rbp, rdi
movzx eax, word [rbp]
test ax, ax
je 0x140020ab1
movzx edi, ax
cmp edi, esi
cmovae eax, esi
lea edi, [rax - 0x41]
mov edx, eax
or dl, 0x20
cmp dil, 0x1a
movzx edx, dl
cmovae edx, eax
cmp dl, 0x6c
jne 0x140020ab1
movzx eax, word [rbp + 2]
test ax, ax
je 0x140020ab1
movzx edx, ax
mov edi, 0xff
cmp edx, edi
cmovae eax, edi
lea edi, [rax - 0x41]
mov edx, eax
or dl, 0x20
cmp dil, 0x1a
movzx edx, dl
cmovae edx, eax
cmp dl, 0x61
jne 0x140020ab1
movzx eax, word [rbp + 4]
test ax, ax
je 0x140020ab1
movzx edx, ax
mov edi, 0xff
cmp edx, edi
cmovae eax, edi
lea edi, [rax - 0x41]
mov edx, eax
or dl, 0x20
cmp dil, 0x1a
movzx edx, dl
cmovae edx, eax
cmp dl, 0x75
jne 0x140020ab1
movzx eax, word [rbp + 6]
test ax, ax
je 0x140020ab1
movzx edx, ax
mov edi, 0xff
cmp edx, edi
cmovae eax, edi
lea edi, [rax - 0x41]
mov edx, eax
or dl, 0x20
cmp dil, 0x1a
movzx edx, dl
cmovae edx, eax
cmp dl, 0x6e
jne 0x140020ab1
movzx eax, word [rbp + 8]
test ax, ax
je 0x140020ab1
movzx edx, ax
mov edi, 0xff
cmp edx, edi
cmovae eax, edi
lea edi, [rax - 0x41]
mov edx, eax
or dl, 0x20
cmp dil, 0x1a
movzx edx, dl
cmovae edx, eax
cmp dl, 0x63
jne 0x140020ab1
movzx eax, word [rbp + 0xa]
test ax, ax
je 0x140020ab1
movzx edx, ax
mov edi, 0xff
cmp edx, edi
cmovae eax, edi
lea edi, [rax - 0x41]
mov edx, eax
or dl, 0x20
cmp dil, 0x1a
movzx edx, dl
cmovae edx, eax
cmp dl, 0x68
jne 0x140020ab1
movzx eax, word [rbp + 0xc]
test ax, ax
je 0x140020ab1
movzx edx, ax
mov edi, 0xff
cmp edx, edi
cmovae eax, edi
lea edi, [rax - 0x41]
mov edx, eax
or dl, 0x20
cmp dil, 0x1a
movzx edx, dl
cmovae edx, eax
cmp dl, 0x65
jne 0x140020ab1
movzx eax, word [rbp + 0xe]
test ax, ax
je 0x140020ab1
movzx edx, ax
mov edi, 0xff
cmp edx, edi
cmovae eax, edi
lea edi, [rax - 0x41]
mov edx, eax
or dl, 0x20
cmp dil, 0x1a
movzx edx, dl
cmovae edx, eax
cmp dl, 0x72
jne 0x140020ab1
cmp word [rbp + 0x10], 0
jne 0x140020ab1
mov rax, qword [rcx]
mov qword [rcx - 8], rax
add rcx, 8
test rax, rax
jne 0x140020c6d
mov rax, qword [rsp + 0x68]
dec dword [rax]
mov rbx, qword [r13]
jmp 0x140020ccf
mov qword [r15], 0
mov rcx, qword [rsp + 0xab8]
xor rcx, rsp
call fcn.14002c730
mov rax, r15
movaps xmm6, xmmword [rsp + 0xac0]
add rsp, 0xad8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r15b, 1
mov r10b, 1
test r12b, r12b
je 0x140020d68
mov r10b, 1
test rbx, rbx
je 0x140020d65
lea rcx, [r14 + 0x10]
mov r8d, 0xff
mov rbp, r13
movzx eax, word [rbx]
cmp eax, 0x2d
jne 0x140020d4b
lea rdx, [rbx + 2]
lea rax, [rbx + 4]
cmp word [rbx + 2], 0x2d
cmove rdx, rax
mov dil, 0x66
xor r9d, r9d
movzx esi, word [rdx + r9*2]
test si, si
je 0x140020d54
cmp dil, 0x2d
je 0x140020d27
lea ebx, [rdi - 0x30]
cmp bl, 0xa
jb 0x140020d27
lea ebx, [rdi - 0x61]
cmp bl, 0x19
ja 0x140020d54
movzx ebx, si
cmp ebx, r8d
cmovae esi, r8d
lea ebx, [rsi - 0x41]
mov eax, esi
or al, 0x20
cmp bl, 0x1a
movzx eax, al
cmovae eax, esi
cmp al, dil
jne 0x140020d54
jmp 0x14002200a
cmp eax, 0x2f
je 0x140022050
mov rbx, qword [rbp + 8]
add rbp, 8
add rcx, 8
test rbx, rbx
jne 0x140020ce8
xor r15d, r15d
mov dword [rsp + 0x78], r10d
mov r12d, 1
cmp qword [rsp + 0x178], 0
je 0x140021717
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
and rax, 0xfffffffffffffffc
je 0x140021e82
movzx ecx, word [rax]
cmp ecx, 0x5a4d
jne 0x140021e82
movsxd rcx, dword [rax + 0x3c]
cmp dword [rax + rcx], 0x4550
jne 0x140021e82
movzx edx, word [rax + rcx + 0x18]
cmp edx, 0x20b
jne 0x140021e82
cmp dword [rax + rcx + 0x50], 0x148
jb 0x140021e82
mov esi, dword [rax + rcx + 8]
lea rdi, [rsp + 0x1a0]
cmp qword [rdi + 0x10], 0
jne 0x140020eaa
mov rbp, qword [rsp + 0x190]
cmp qword [rsp + 0x198], 8
jb 0x140020e07
mov r9, qword [rsp + 0x180]
jmp 0x140020e0f
lea r9, [rsp + 0x180]
mov rax, qword [rsp + 0x1b8]
cmp rax, rbp
jb 0x140021d93
mov rbx, rdi
cmp rax, 8
jb 0x140020e31
mov rbx, qword [rsp + 0x1a0]
mov qword [rsp + 0x1b0], rbp
mov r8, rbp
add r8, rbp
mov rcx, rbx
mov rdx, r9
call sub.ntdll.dll_memmove
mov word [rbx + rbp*2], 0
mov rax, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1b8]
mov rdx, rcx
sub rdx, rax
cmp rdx, 6
jb 0x140021e38
lea rdx, [rax + 6]
mov qword [rsp + 0x1b0], rdx
mov rdx, rdi
cmp rcx, 8
jb 0x140020e8d
mov rdx, qword [rsp + 0x1a0]
movabs rcx, 0x61006d0049007c
mov qword [rdx + rax*2], rcx
mov dword [rdx + rax*2 + 8], 0x650067
mov word [rdx + rax*2 + 0xc], 0
mov dword [rsp + 0x240], 4
mov rcx, qword [rsp + 0x178]
cmp qword [rsp + 0x1b8], 8
jb 0x140020ed0
mov rdi, qword [rsp + 0x1a0]
lea rax, [rsp + 0x240]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x680]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x220]
mov rdx, rdi
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x140021da3
cmp dword [rsp + 0x220], 4
jne 0x140022074
cmp dword [rsp + 0x680], esi
jne 0x140021dac
test r15b, r15b
je 0x1400215ec
lea rsi, [rsp + 0x680]
mov qword [rsi], 0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsi]
lea rcx, [rsp + 0x170]
mov qword [rcx - 8], rax
mov eax, 1
mov r15, qword [rsp + 0x60]
mov r12, qword [rsp + 0x68]
mov byte [rcx], 1
mov byte [rsp + 0xf0], 0
mov dword [rsp + 0xe0], eax
test eax, eax
jne 0x1400216bd
call fcn.140022d60
test al, al
jne 0x1400220c0
call fcn.14002ee10
call fcn.140023070
test r14, r14
je 0x14002211e
lea rsi, [rsp + 0x680]
mov rcx, rsi
call fcn.140022f80
mov rax, qword [rsi]
test rax, rax
je 0x140022119
mov qword [r14], rax
mov r15, qword [r14 + 8]
test r15, r15
je 0x1400214c0
lea rax, [r14 + 0x10]
mov r10d, 0xff
lea r9, str.wait_for_browser
mov rbp, r15
mov r8, r13
movzx ebx, word [rbp]
cmp ebx, 0x2d
jne 0x140021056
lea rbx, [rbp + 2]
lea rdi, [rbp + 4]
cmp word [rbp + 2], 0x2d
cmove rbx, rdi
mov dil, 0x77
xor esi, esi
movzx ebp, word [rbx + rsi*2]
test bp, bp
je 0x14002105f
cmp dil, 0x2d
je 0x14002101b
lea edx, [rdi - 0x30]
cmp dl, 0xa
jb 0x14002101b
lea edx, [rdi - 0x61]
cmp dl, 0x19
ja 0x14002105f
movzx edx, bp
cmp edx, r10d
cmovae ebp, r10d
lea edx, [rbp - 0x41]
mov ecx, ebp
or cl, 0x20
cmp dl, 0x1a
movzx ecx, cl
cmovae ecx, ebp
cmp cl, dil
jne 0x14002105f
mov dil, byte [rsi + r9 + 1]
inc rsi
cmp rsi, 0x10
jne 0x140020ffc
cmp word [rbx + 0x20], 0
je 0x1400214f1
jmp 0x14002105f
cmp ebx, 0x2f
je 0x14002214e
mov rbp, qword [r8 + 8]
add r8, 8
add rax, 8
test rbp, rbp
jne 0x140020fdd
mov r10, r12
lea rax, [r14 + 0x10]
mov edi, 0xff
mov rdx, r15
movzx ebp, word [rdx]
cmp ebp, 0x2f
je 0x1400210a7
cmp ebp, 0x2d
jne 0x1400211df
lea rbp, [rdx + 2]
lea rbx, [rdx + 4]
cmp word [rdx + 2], 0x2d
cmove rbp, rbx
jmp 0x1400210ae
add rdx, 2
mov rbp, rdx
movzx edx, word [rbp]
test dx, dx
je 0x1400211df
movzx ebx, dx
cmp ebx, edi
cmovae edx, edi
lea ebx, [rdx - 0x41]
mov ecx, edx
or cl, 0x20
cmp bl, 0x1a
movzx ecx, cl
cmovae ecx, edx
cmp cl, 0x6d
jne 0x1400211df
movzx edx, word [rbp + 2]
test dx, dx
je 0x1400211df
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x61
jne 0x1400211df
movzx edx, word [rbp + 4]
test dx, dx
je 0x1400211df
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x72
jne 0x1400211df
movzx edx, word [rbp + 6]
test dx, dx
je 0x1400211df
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x69
jne 0x1400211df
movzx edx, word [rbp + 8]
test dx, dx
je 0x1400211df
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x6f
jne 0x1400211df
movzx edx, word [rbp + 0xa]
test dx, dx
je 0x1400211df
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x6e
jne 0x1400211df
movzx edx, word [rbp + 0xc]
test dx, dx
je 0x1400211df
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x65
je 0x14002269b
mov rdx, qword [rax]
add rax, 8
test rdx, rdx
jne 0x140021083
mov r9d, 0xff
lea r8, str.backgroundtask
mov rbp, r15
mov rdx, r13
movzx ecx, word [rbp]
cmp ecx, 0x2f
je 0x140021223
cmp ecx, 0x2d
jne 0x140021289
lea rcx, [rbp + 2]
lea rbx, [rbp + 4]
cmp word [rbp + 2], 0x2d
cmove rcx, rbx
jmp 0x14002122a
add rbp, 2
mov rcx, rbp
mov dil, 0x62
xor ebx, ebx
movzx esi, word [rcx + rbx*2]
test si, si
je 0x140021289
cmp dil, 0x2d
je 0x140021250
lea ebp, [rdi - 0x30]
cmp bpl, 0xa
jb 0x140021250
lea ebp, [rdi - 0x61]
cmp bpl, 0x19
ja 0x140021289
movzx ebp, si
cmp ebp, r9d
cmovae esi, r9d
lea ebp, [rsi - 0x41]
mov eax, esi
or al, 0x20
cmp bpl, 0x1a
movzx eax, al
cmovae eax, esi
cmp al, dil
jne 0x140021289
mov dil, byte [rbx + r8 + 1]
inc rbx
cmp rbx, 0xe
jne 0x14002122f
cmp word [rcx + 0x1c], 0
je 0x140022774
mov rbp, qword [rdx + 8]
add rdx, 8
test rbp, rbp
jne 0x140021202
lea rax, [r14 + 0x10]
mov edi, 0xff
mov rdx, r15
movzx ebp, word [rdx]
cmp ebp, 0x2f
je 0x1400212ca
cmp ebp, 0x2d
jne 0x140021402
lea rbp, [rdx + 2]
lea rbx, [rdx + 4]
cmp word [rdx + 2], 0x2d
cmove rbp, rbx
jmp 0x1400212d1
add rdx, 2
mov rbp, rdx
movzx edx, word [rbp]
test dx, dx
je 0x140021402
movzx ebx, dx
cmp ebx, edi
cmovae edx, edi
lea ebx, [rdx - 0x41]
mov ecx, edx
or cl, 0x20
cmp bl, 0x1a
movzx ecx, cl
cmovae ecx, edx
cmp cl, 0x68
jne 0x140021402
movzx edx, word [rbp + 2]
test dx, dx
je 0x140021402
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x65
jne 0x140021402
movzx edx, word [rbp + 4]
test dx, dx
je 0x140021402
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x61
jne 0x140021402
movzx edx, word [rbp + 6]
test dx, dx
je 0x140021402
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x64
jne 0x140021402
movzx edx, word [rbp + 8]
test dx, dx
je 0x140021402
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x6c
jne 0x140021402
movzx edx, word [rbp + 0xa]
test dx, dx
je 0x140021402
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x65
jne 0x140021402
movzx edx, word [rbp + 0xc]
test dx, dx
je 0x140021402
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x73
je 0x14002273a
mov rdx, qword [rax]
add rax, 8
test rdx, rdx
jne 0x1400212a6
mov r9d, 0xff
lea r8, str.remote_debugging_port
mov rbp, r15
mov rdx, r13
movzx ecx, word [rbp]
cmp ecx, 0x2f
je 0x140021446
cmp ecx, 0x2d
jne 0x1400214ac
lea rcx, [rbp + 2]
lea rbx, [rbp + 4]
cmp word [rbp + 2], 0x2d
cmove rcx, rbx
jmp 0x14002144d
add rbp, 2
mov rcx, rbp
mov dil, 0x72
xor ebx, ebx
movzx esi, word [rcx + rbx*2]
test si, si
je 0x1400214ac
cmp dil, 0x2d
je 0x140021473
lea ebp, [rdi - 0x30]
cmp bpl, 0xa
jb 0x140021473
lea ebp, [rdi - 0x61]
cmp bpl, 0x19
ja 0x1400214ac
movzx ebp, si
cmp ebp, r9d
cmovae esi, r9d
lea ebp, [rsi - 0x41]
mov eax, esi
or al, 0x20
cmp bpl, 0x1a
movzx eax, al
cmovae eax, esi
cmp al, dil
jne 0x1400214ac
mov dil, byte [rbx + r8 + 1]
inc rbx
cmp rbx, 0x15
jne 0x140021452
cmp word [rcx + 0x2a], 0
je 0x140022774
mov rbp, qword [rdx + 8]
add rdx, 8
test rbp, rbp
mov r12, r10
jne 0x140021425
lea rcx, str.MOZ_AUTOMATION
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x1400214d7
cmp byte [rax], 0
jne 0x140021509
lea rcx, str.MOZ_HEADLESS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x1400225db
xor edi, edi
jmp 0x14002150e
mov rcx, qword [rax]
mov qword [rax - 8], rcx
add rax, 8
test rcx, rcx
jne 0x1400214f1
dec dword [r12]
mov r15, qword [r13]
mov edi, 1
test r15, r15
je 0x140021886
mov r10, rdi
lea rax, [r14 + 0x10]
mov r8d, 0xff
mov rbp, r15
mov rdx, r13
movzx ecx, word [rbp]
cmp ecx, 0x2d
je 0x140021552
cmp ecx, 0x2f
je 0x14002205c
mov rbp, qword [rdx + 8]
add rdx, 8
add rax, 8
test rbp, rbp
jne 0x14002152a
jmp 0x1400217a8
lea rcx, [rbp + 2]
lea rbx, [rbp + 4]
cmp word [rbp + 2], 0x2d
cmove rcx, rbx
mov dil, 0x6e
xor r9d, r9d
movzx esi, word [rcx + r9*2]
test si, si
je 0x14002153c
cmp dil, 0x2d
je 0x14002158b
lea ebp, [rdi - 0x30]
cmp bpl, 0xa
jb 0x14002158b
lea ebp, [rdi - 0x61]
cmp bpl, 0x19
ja 0x14002153c
movzx ebp, si
cmp ebp, r8d
cmovae esi, r8d
lea ebp, [rsi - 0x41]
mov ebx, esi
or bl, 0x20
cmp bpl, 0x1a
movzx ebp, bl
cmovae ebp, esi
cmp bpl, dil
jne 0x14002153c
lea rbp, str.no_deelevate
mov dil, byte [r9 + rbp + 1]
inc r9
cmp r9, 0xc
jne 0x140021569
cmp word [rcx + 0x18], 0
jne 0x14002153c
mov rcx, qword [rax]
mov qword [rax - 8], rcx
add rax, 8
test rcx, rcx
jne 0x1400215cc
dec dword [r12]
mov r15, qword [r13]
xor r8d, r8d
jmp 0x1400217ab
cmp r12d, 1
mov r15, qword [rsp + 0x60]
jne 0x140021e01
lea rcx, [rsp + 0x158]
lea rsi, [rsp + 0x680]
mov rdx, rsi
call fcn.14002eed0
cmp byte [rsi + 0x10], 0
jne 0x1400224c0
lea rcx, [rsp + 0x158]
lea rsi, [rsp + 0x240]
mov rdx, rsi
call fcn.14002ee70
cmp byte [rsi + 0x10], 0
mov r12, qword [rsp + 0x68]
jne 0x140021df3
mov dl, byte [rsp + 0x688]
test dl, dl
setne bl
mov cl, byte [rsp + 0x248]
test cl, cl
setne al
xor al, bl
test dl, dl
mov edx, dword [rsp + 0x78]
je 0x14002167d
test cl, cl
je 0x14002167d
mov rax, qword [rsp + 0x680]
cmp rax, qword [rsp + 0x240]
setae al
and dl, al
mov edi, edx
cmp dl, 1
je 0x1400225ee
lea rsi, [rsp + 0x220]
mov qword [rsi], 0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsi]
lea rcx, [rsp + 0x160]
mov qword [rcx - 8], rax
movzx eax, dil
mov byte [rcx], 1
jmp 0x140020f72
lea rcx, str.MOZ_DEBUG_BROWSER_PROCESS
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x14002215a
lea rcx, str.MOZ_DEBUG_BROWSER_PAUSE
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__wgetenv]
test rax, rax
jne 0x14002216e
lea rcx, [rsp + 0x158]
lea rsi, [rsp + 0x680]
mov rdx, rsi
call fcn.140023180
cmp byte [rsi + 0x10], 1
je 0x1400221a9
mov qword [r15], 0
jmp 0x140021cfe
lea rax, [rsp + 0x240]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x680]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], 0
lea rdx, str.SOFTWAREMozillaFirefoxLauncher
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1400224f7
mov rsi, qword [rsp + 0x680]
mov rcx, qword [rsp + 0x178]
test rcx, rcx
jne 0x140022534
mov qword [rsp + 0x178], rsi
mov eax, dword [rsp + 0x240]
cmp eax, 2
jne 0x140021e5a
mov r12d, 1
jmp 0x140020d82
mov r8b, 1
test r15, r15
je 0x14002187b
lea rcx, [r14 + 0x10]
mov r9d, 0xff
movzx ebp, word [r15]
cmp ebp, 0x2d
je 0x1400217e6
cmp ebp, 0x2f
je 0x140022068
mov r15, qword [r13 + 8]
add r13, 8
add rcx, 8
test r15, r15
jne 0x1400217be
jmp 0x14002187b
lea rsi, [r15 + 2]
lea rbp, [r15 + 4]
cmp word [r15 + 2], 0x2d
cmove rsi, rbp
mov bl, 0x61
xor ebp, ebp
movzx edi, word [rsi + rbp*2]
test di, di
je 0x1400217d0
cmp bl, 0x2d
je 0x140021818
lea eax, [rbx - 0x30]
cmp al, 0xa
jb 0x140021818
lea eax, [rbx - 0x61]
cmp al, 0x19
ja 0x1400217d0
movzx eax, di
cmp eax, r9d
cmovae edi, r9d
lea eax, [rdi - 0x41]
mov edx, edi
or dl, 0x20
cmp al, 0x1a
movzx eax, dl
cmovae eax, edi
cmp al, bl
jne 0x1400217d0
lea rax, str.attempting_deelevation
mov bl, byte [rbp + rax + 1]
inc rbp
cmp rbp, 0x16
jne 0x1400217fc
cmp word [rsi + 0x2c], 0
jne 0x1400217d0
mov rax, qword [rcx]
mov qword [rcx - 8], rax
add rcx, 8
test rax, rax
jne 0x140021855
dec dword [r12]
lea eax, [r10 + 2]
test r8b, r8b
cmovne eax, r10d
or eax, 4
mov edi, eax
jmp 0x140021886
test r8b, r8b
mov rdi, r10
jne 0x140021886
or edi, 2
lea r9, [rsp + 0xa8]
mov qword [r9], 0
mov rdx, qword [r14]
lea rsi, [rsp + 0x140]
mov rcx, rsi
mov r8d, edi
call fcn.14002fbe0
cmp byte [rsi + 0x10], 1
je 0x1400221b3
mov rbx, qword [rsp + 0xa8]
test rbx, rbx
jne 0x1400221db
mov eax, dword [rsp + 0x140]
test eax, eax
jne 0x1400221e6
xor eax, eax
cmp edi, 4
setae al
lea r13d, [rax + rax]
inc r13d
lea rcx, [rsp + 0x158]
lea rsi, [rsp + 0x128]
mov rdx, rsi
call fcn.140023180
cmp byte [rsi + 0x10], 1
je 0x140022254
mov edx, dword [r12]
mov qword [rsp + 0x20], 0
lea rsi, [rsp + 0xa0]
mov rcx, rsi
mov r8, r14
xor r9d, r9d
call fcn.140023db0
mov rax, qword [rsi]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14002225e
lea rsi, [rsp + 0x98]
mov rcx, rsi
mov rdx, r14
call fcn.140023ab0
cmp byte [rsi + 1], 0
je 0x14002229a
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x78], rdi
xor eax, eax
lea rcx, [rsp + 0x100]
mov qword [rcx - 0x20], rax
mov qword [rcx - 0x10], rax
mov qword [rcx - 8], 3
mov qword [rcx - 0x18], rcx
mov qword [rcx + 0x18], rax
call fcn.140022d60
test al, al
jne 0x1400222d3
lea r12, [rsp + 0xe8]
mov rsi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff6
call rsi
mov rbx, rax
mov ecx, 0xfffffff5
call rsi
mov rbp, rax
mov ecx, 0xfffffff4
call rsi
mov rsi, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x140021a10
mov rcx, rbx
mov edx, 1
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
je 0x140021a10
mov rax, qword [rsp + 0xf0]
cmp rax, qword [rsp + 0xf8]
je 0x14002253f
mov rcx, qword [rsp + 0xe8]
mov qword [rcx + rax*8], rbx
inc qword [rsp + 0xf0]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x140021a63
mov rcx, rbp
mov edx, 1
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
je 0x140021a63
mov rax, qword [rsp + 0xf0]
cmp rax, qword [rsp + 0xf8]
je 0x14002255c
mov rcx, qword [rsp + 0xe8]
mov qword [rcx + rax*8], rbp
inc qword [rsp + 0xf0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileType]
and eax, 0xfffffffd
cmp eax, 1
jne 0x140021ab6
mov rcx, rsi
mov edx, 1
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
je 0x140021ab6
mov rax, qword [rsp + 0xf0]
cmp rax, qword [rsp + 0xf8]
je 0x140022579
mov rcx, qword [rsp + 0xe8]
mov qword [rcx + rax*8], rsi
inc qword [rsp + 0xf0]
lea rcx, [rsp + 0xe0]
lea rdi, [rsp + 0xc8]
lea r12, [rsp + 0x680]
mov rdx, rdi
mov r8, r12
call fcn.14002f980
cmp byte [rdi + 0x10], 1
je 0x1400222e0
xor edi, edi
cmp byte [rsp + 0xc8], 0
je 0x140022317
mov r15d, 0x80404
cmp qword [rsp + 0xf0], 0
je 0x140021b29
or byte [rsp + 0x6bd], 1
mov qword [rsp + 0x6d0], rbx
mov qword [rsp + 0x6d8], rbp
mov qword [rsp + 0x6e0], rsi
mov edi, 1
xorps xmm6, xmm6
lea rsi, [rsp + 0x240]
movaps xmmword [rsi], xmm6
movaps xmmword [rsi + 0x50], xmm6
movaps xmmword [rsi + 0x40], xmm6
movaps xmmword [rsi + 0x30], xmm6
movaps xmmword [rsi + 0x20], xmm6
movaps xmmword [rsi + 0x10], xmm6
mov qword [rsi + 0x60], 0
mov dword [rsi], 0x68
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
test byte [rsi + 0x3d], 8
mov rcx, qword [rsp + 0x68]
je 0x140021b7e
mov rax, qword [rsp + 0x258]
test rax, rax
jne 0x140022603
movaps xmmword [rsp + 0x80], xmm6
mov qword [rsp + 0x90], 0
mov rdx, qword [r14]
lea rax, [rsp + 0x80]
test rcx, rcx
jne 0x140022322
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r12
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], edi
mov rcx, rdx
mov rdi, qword [rsp + 0x70]
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
mov r15, qword [rsp + 0x60]
je 0x14002235e
mov rbp, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x88]
test byte [rsp + 0x78], 1
je 0x1400223b7
lea rsi, [rsp + 0x220]
mov rcx, rsi
mov rdx, rbp
call fcn.14002ef90
mov r12, qword [rsi]
mov rdx, qword [r14]
lea rsi, [rsp + 0xb0]
mov rcx, rsi
mov r8, rbp
mov r9d, r13d
call fcn.14002f130
cmp byte [rsi + 0x10], 1
je 0x1400223bf
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
je 0x1400223c9
test byte [rsp + 0x78], 1
je 0x14002241e
mov rcx, rbp
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x140022497
lea rdx, [rsp + 0x220]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x140022497
mov eax, dword [rsp + 0x220]
mov dword [r15], eax
mov byte [r15 + 4], 1
lea rax, [r12 + 1]
cmp rax, 2
jb 0x140021caa
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rbx + 1]
cmp rax, 2
jb 0x140021cbd
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rbp + 1]
cmp rax, 2
jb 0x140021cd0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xe0]
call fcn.14002ee20
test rdi, rdi
mov rbx, qword [rsp + 0x68]
je 0x140021cf0
mov rcx, rdi
call qword [sym.imp.mozglue.dll_free]
lea rax, [rbx + 1]
cmp rax, 2
jae 0x1400224b2
lea rcx, [rsp + 0x158]
call fcn.140023530
jmp 0x140020c91
cmp byte [rsp + 0x258], 1
je 0x140022596
mov r8d, dword [rsp + 0x240]
lea rdi, [rsp + 0x220]
mov rcx, rdi
mov rdx, rsi
call fcn.140023760
cmp byte [rdi + 0x18], 1
je 0x1400225b5
cmp byte [rsp + 0xf8], 0
jne 0x1400225d4
movdqu xmm0, xmmword [rsp + 0x220]
movq xmm1, qword [rsp + 0xf0]
movq xmm2, qword [rsp + 0x230]
pcmpeqb xmm2, xmm1
pcmpeqb xmm0, xmmword [rsp + 0xe0]
pand xmm0, xmm2
pmovmskb eax, xmm0
xor edi, edi
cmp eax, 0xffff
sete dil
xor esi, esi
jmp 0x140020a4c
mov rcx, rdi
mov rdx, rbp
call fcn.14000c9b0
jmp 0x140020e50
cmp eax, 2
jne 0x140022618
lea rcx, [rsp + 0x158]
lea rdi, [rsp + 0x680]
mov rdx, rdi
call fcn.14002f5a0
cmp byte [rdi + 0x10], 0
jne 0x1400224c0
lea rcx, [rsp + 0x158]
lea rdi, [rsp + 0x240]
mov rdx, rdi
mov r8d, esi
call fcn.14002ef30
cmp byte [rdi + 0x10], 0
je 0x140020f21
movdqu xmm0, xmmword [rsp + 0x240]
jmp 0x1400224c9
test r12d, r12d
jne 0x140022630
lea rsi, [rsp + 0x680]
mov qword [rsi], 0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsi]
lea rcx, [rsp + 0x160]
mov qword [rcx - 8], rax
xor eax, eax
jmp 0x140020f5b
mov qword [rsp + 0x20], 6
lea r9, str.Image
mov edx, 6
mov rcx, rdi
call fcn.14000a0f0
jmp 0x140020eaa
cmp eax, 1
jne 0x14002268c
xor r12d, r12d
jmp 0x140020d82
add rax, 2
mov rbx, rax
jmp 0x1400207db
mov ecx, 0x7f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov byte [rsp + 0xf0], 1
lea rax, str._builds_worker_checkouts_gecko_toolkit_xre_LauncherRegistryInfo.cpp
mov qword [rsp + 0xe0], rax
movabs rax, 0x800700c100000021
mov qword [rsp + 0xe8], rax
lea rcx, [rsp + 0xe0]
xor edx, edx
call fcn.140030b00
mov r15, qword [rsp + 0x60]
jmp 0x1400216e9
add r8, 2
mov rax, r8
jmp 0x140020892
add rax, 2
mov rbp, rax
jmp 0x140020ad3
mov ebx, eax
or ebx, 0x10000000
lea rdi, str._builds_worker_workspace_obj_build_dist_include_mozilla_NativeNt.h
mov r12d, 0x502
lea rcx, [rsp + 0x680]
mov qword [rcx], rdi
mov dword [rcx + 8], r12d
mov dword [rcx + 0xc], ebx
xor r12d, r12d
xor edx, edx
call fcn.140030b00
jmp 0x140020a71
xor edi, edi
xor esi, esi
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
je 0x140020a4c
cmp eax, 0x57
je 0x140020a4c
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
mov r12d, 0x5c
jmp 0x140020a42
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
mov byte [rsp + 0x698], 1
mov r12d, 0x1e
jmp 0x140020a42
mov rdi, qword [rsp + 0x688]
mov r12d, dword [rsp + 0x690]
mov sil, 1
mov ebx, dword [rsp + 0x694]
jmp 0x140020a4c
mov ebx, dword [rsp + 0xec]
cmp ebx, 0xd000003a
jne 0x1400224df
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r15, rax
lea rdx, [rsp + 0xe0]
mov qword [rdx], rax
lea rdi, [rsp + 0x240]
mov rcx, rdi
call fcn.140035900
cmp byte [rdi + 0x18], 1
jne 0x140022656
mov rdi, qword [rsp + 0x248]
mov r12d, dword [rsp + 0x250]
mov sil, 1
mov ebx, dword [rsp + 0x254]
jmp 0x140022670
cmp byte [rax], 0
je 0x140020a87
lea rcx, str.MOZ_LAUNCHER_PROCESS
call sub.api_ms_win_crt_environment_l1_1_0.dll__putenv
mov r12b, 1
jmp 0x140020a87
lea rax, str.force_launcher
mov dil, byte [r9 + rax + 1]
inc r9
cmp r9, 0xe
jne 0x140020d07
cmp word [rdx + 0x1c], 0
jne 0x140020d54
mov rax, qword [rcx]
mov qword [rcx - 8], rax
add rcx, 8
test rax, rax
jne 0x14002202e
mov rax, qword [rsp + 0x68]
dec dword [rax]
xor r15d, r15d
xor r10d, r10d
jmp 0x140020d68
add rbx, 2
mov rdx, rbx
jmp 0x140020d01
add rbp, 2
mov rcx, rbp
jmp 0x140021563
add r15, 2
mov rsi, r15
jmp 0x1400217f8
mov eax, 0x3f
mov ecx, 0x8007065d
lea rdx, str._builds_worker_checkouts_gecko_toolkit_xre_LauncherRegistryInfo.cpp
movabs rbp, 0xffffff0000000000
and rbp, rdx
mov ebx, edx
shr rdx, 0x20
movzx edx, dl
shl rdx, 0x20
or rdx, rbp
or rbx, rdx
mov qword [rsp + 0xe0], rbx
mov dword [rsp + 0xe8], eax
mov dword [rsp + 0xec], ecx
jmp 0x1400224d2
mov eax, dword [0x14005ecd0]
mov ecx, dword [0x14005e488]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14002279a
mov rax, qword [0x14005ecc8]
test rax, rax
je 0x140020f87
lea rdx, [rsp + 0x680]
mov dword [rdx], 4
mov r8d, 4
mov ecx, 0xa
call qword [case.0x14002bdde.0]
jmp 0x140020f87
mov r15, qword [rsp + 0x60]
lea rcx, [rsp + 0x680]
mov byte [rcx + 0x10], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rcx], rax
movabs rax, 0x800705070000014f
mov qword [rcx + 8], rax
xor edx, edx
call fcn.140030b00
jmp 0x14002170b
add rbp, 2
mov rbx, rbp
jmp 0x140020ff7
cmp byte [rax], 0
je 0x1400216d3
call qword [sym.imp.KERNEL32.dll_DebugBreak]
jmp 0x1400216e9
cmp word [rax], 0
je 0x1400216e9
mov rcx, rax
xor edx, edx
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
imul esi, eax, 0x3e8
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
call fcn.140035a20
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400216e9
lea rcx, [rsp + 0x680]
jmp 0x140022142
lea rcx, [rsp + 0x140]
xor edx, edx
call fcn.140030b00
mov r15, qword [rsp + 0x60]
mov qword [r15], 0
mov rbx, qword [rsp + 0xa8]
jmp 0x140021cf0
mov r13d, 4
jmp 0x1400218e4
xor r13d, r13d
cmp eax, 1
jne 0x1400218e4
mov r13d, 2
test dil, 3
jne 0x1400218e4
mov r13d, 5
cmp edi, 3
ja 0x1400218e4
mov edx, dword [r12]
lea rsi, [rsp + 0x680]
mov rcx, rsi
mov r8, r14
call fcn.140030dc0
cmp byte [rsi + 0x10], 1
jne 0x14002277c
xor esi, esi
lea rcx, [rsp + 0x680]
xor edx, edx
call fcn.140030b00
mov rax, qword [rsp + 0x60]
mov qword [rax], 0
jmp 0x14002278a
lea rcx, [rsp + 0x128]
jmp 0x140022282
lea rcx, [rsp + 0x680]
mov byte [rcx + 0x10], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rcx], rax
movabs rax, 0x8007050700000197
mov qword [rcx + 8], rax
xor edx, edx
call fcn.140030b00
mov r15, qword [rsp + 0x60]
mov qword [r15], 0
jmp 0x140021cf0
lea rcx, [rsp + 0x680]
mov byte [rcx + 0x10], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rcx], rax
movabs rax, 0x800700570000019e
mov qword [rcx + 8], rax
xor edx, edx
call fcn.140030b00
mov r15, qword [rsp + 0x60]
mov qword [r15], 0
jmp 0x14002230d
or byte [rsp + 0xe7], 0x10
jmp 0x140021990
lea rcx, [rsp + 0xc8]
xor edx, edx
call fcn.140030b00
mov r15, qword [rsp + 0x60]
mov qword [r15], 0
lea rcx, [rsp + 0xe0]
call fcn.14002ee20
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x70]
jmp 0x140021ce7
mov r15d, 0x404
jmp 0x140021b29
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r12
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], 0
mov rdi, qword [rsp + 0x70]
mov r8, rdi
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
jmp 0x140021bda
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
or edx, 0x80070000
test eax, eax
cmovle edx, eax
lea rcx, [rsp + 0x220]
mov byte [rcx + 0x10], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rcx], rax
mov dword [rcx + 8], 0x1dd
mov dword [rcx + 0xc], edx
xor edx, edx
call fcn.140030b00
mov qword [r15], 0
lea rcx, [rsp + 0xe0]
call fcn.14002ee20
mov rbx, qword [rsp + 0x68]
jmp 0x140021ce7
xor r12d, r12d
jmp 0x140021c18
lea rcx, [rsp + 0xb0]
jmp 0x1400223fd
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
or edx, 0x80070000
test eax, eax
cmovle edx, eax
lea rcx, [rsp + 0x220]
mov byte [rcx + 0x10], 1
lea rax, str._builds_worker_checkouts_gecko_browser_app_winlauncher_LauncherProcessWin.cpp
mov qword [rcx], rax
mov dword [rcx + 8], 0x1f3
mov dword [rcx + 0xc], edx
xor edx, edx
call fcn.140030b00
mov rcx, rbp
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov qword [r15], 0
jmp 0x140021c96
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov r15d, eax
xor edi, edi
neg eax
mov esi, 0
sbb esi, esi
mov r13d, 0
test r15d, r15d
jne 0x140022446
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r13d, eax
or esi, 0x2710
test r15d, r15d
jne 0x14002245c
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
sub edi, r13d
mov r14d, esi
sub r14d, edi
jbe 0x140022497
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, rbp
mov edx, r14d
call qword [sym.imp.USER32.dll_WaitForInputIdle]
cmp eax, 0xffffffff
jne 0x140022497
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x5bf
jne 0x140022497
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14002244c
mov r15, qword [rsp + 0x60]
mov dword [r15], 0
mov byte [r15 + 4], 1
mov rdi, qword [rsp + 0x70]
jmp 0x140021c96
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140021cfe
movdqu xmm0, xmmword [rsp + 0x680]
movdqa xmmword [rsp + 0xe0], xmm0
mov byte [rsp + 0xf0], 1
jmp 0x140021eab
mov rdi, qword [rsp + 0xe0]
mov sil, 1
mov r12d, dword [rsp + 0xe8]
jmp 0x140020a4c
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov eax, 0x79
mov byte [rsp + 0xf0], 1
lea rdx, str._builds_worker_checkouts_gecko_toolkit_xre_LauncherRegistryInfo.cpp
mov qword [rsp + 0xe0], rdx
mov dword [rsp + 0xe8], eax
mov dword [rsp + 0xec], ecx
jmp 0x140021eab
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140021785
mov rcx, r12
call fcn.140035bc0
test al, al
je 0x140021a10
mov rax, qword [rsp + 0xf0]
jmp 0x1400219fc
mov rcx, r12
call fcn.140035bc0
test al, al
je 0x140021a63
mov rax, qword [rsp + 0xf0]
jmp 0x140021a4f
mov rcx, r12
call fcn.140035bc0
test al, al
je 0x140021ab6
mov rax, qword [rsp + 0xf0]
jmp 0x140021aa2
mov rdi, qword [rsp + 0x248]
mov r12d, dword [rsp + 0x250]
mov sil, 1
mov ebx, dword [rsp + 0x254]
jmp 0x140020a4c
mov rdi, qword [rsp + 0x220]
mov r12d, dword [rsp + 0x228]
mov sil, 1
mov ebx, dword [rsp + 0x22c]
jmp 0x140020a4c
xor edi, edi
jmp 0x140021d8c
cmp byte [rax], 0
mov edi, 0
jne 0x140021509
jmp 0x14002150e
lea rcx, [rsp + 0x170]
mov qword [rcx - 8], 0
jmp 0x1400216b1
or byte [rsp + 0x6bd], 8
mov qword [rsp + 0x698], rax
jmp 0x140021b7e
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov eax, 0x3b
jmp 0x14002207e
mov byte [rsp + 0xf0], 1
lea rax, str._builds_worker_checkouts_gecko_toolkit_xre_LauncherRegistryInfo.cpp
mov qword [rsp + 0xe0], rax
movabs rax, 0x80070507000000ed
jmp 0x140021ea3
lea rcx, [rsp + 0x680]
lea rdx, [rsp + 0x240]
call fcn.140035990
movzx edi, al
xor esi, esi
lea rax, [r15 + 1]
cmp rax, 2
jb 0x140020a4c
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140020a4c
mov eax, 0x88
mov ecx, 0x80070507
jmp 0x14002250a
movzx edx, word [rbp + 0xe]
test dx, dx
je 0x1400211df
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x74
jne 0x1400211df
movzx edx, word [rbp + 0x10]
test dx, dx
je 0x1400211df
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x74
jne 0x1400211df
movzx edx, word [rbp + 0x12]
test dx, dx
je 0x1400211df
movzx ecx, dx
mov ebx, 0xff
cmp ecx, ebx
cmovae edx, ebx
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x65
jne 0x1400211df
cmp word [rbp + 0x14], 0
jne 0x1400211df
jmp 0x140022774
movzx edx, word [rbp + 0xe]
test dx, dx
je 0x140021402
movzx ecx, dx
cmp ecx, edi
cmovae edx, edi
lea ecx, [rdx - 0x41]
mov ebx, edx
or bl, 0x20
cmp cl, 0x1a
movzx ecx, bl
cmovae ecx, edx
cmp cl, 0x73
jne 0x140021402
cmp word [rbp + 0x10], 0
jne 0x140021402
mov r12, r10
jmp 0x140021509
mov rax, qword [rsp + 0x60]
mov dword [rax], 0
mov sil, 1
mov r15, qword [rsp + 0x60]
mov byte [r15 + 4], sil
xor ebx, ebx
jmp 0x140021cf0
lea rcx, [0x14005ecd0]
call fcn.14002b51c
cmp dword [0x14005ecd0], 0xffffffff
jne 0x1400220e5
call fcn.140035b50
lea rcx, [0x14005ecd0]
call fcn.14002b4bc
jmp 0x1400220e5