Function at 0x140007e20
Capabilities:
Check if file exists
Copy file
Create a process with modified i/o handles and window
Create directory
Create process on windows
Create thread
Delete file
Get common file path
Get disk information
Get file attributes
Move file
Query or enumerate registry value
Read file on windows
Set registry value
Start service
Write and execute a file
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf68
movaps xmmword [rsp + 0xf50], xmm6
mov rdi, rdx
mov r13d, ecx
mov rax, qword [0x14004c030]
xor rax, rsp
mov qword [rsp + 0xf48], rax
lea rcx, [0x14004288e]
call fcn.140022f04
test rax, rax
je 0x140007e6c
cmp byte [rax], 0
setne al
jmp 0x140007e6e
xor eax, eax
mov byte [0x14004ea38], al
lea rcx, str.MOZ_USING_SERVICE
call fcn.14001fd80
cmp r13d, 3
jg 0x140007eaf
mov ecx, 2
call fcn.140017878
lea rcx, str.Usage:_updater_patch_dir_install_dir_apply_to_dir__wait_pid__callback_working_dir_callback_path_args...___n
mov edx, 0x6a
mov r8d, 1
mov r9, rax
call fcn.140022c28
jmp 0x140008f67
lea rsi, [rdi + 8]
mov rdx, qword [rdi + 8]
lea rbx, [0x14004e200]
mov r8d, 0x104
mov rcx, rbx
call fcn.14001549c
mov word [0x14004e406], 0
lea r14, [rsp + 0xb20]
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call fcn.1400170d0
lea r8, str._supdate_elevated.lock
mov edx, 0x104
mov rcx, r14
mov r9, rbx
call fcn.140004090
mov al, 1
cmp byte [0x14004ea38], 0
jne 0x140007f2f
lea rcx, [rsp + 0xb20]
call fcn.14002104c
test eax, eax
je 0x140007f2d
call fcn.14001c8b0
cmp dword [rax], 2
setne al
jmp 0x140007f2f
xor eax, eax
mov byte [0x14004ec48], al
lea rcx, [rsp + 0xb20]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
setne byte [0x14004ec49]
mov rcx, qword [rsi]
call fcn.140013a30
test al, al
je 0x1400083f1
mov rcx, qword [rdi + 0x10]
call fcn.140013a30
test al, al
je 0x14000840a
mov rdx, qword [rdi + 0x10]
lea rbx, [0x14004ea40]
mov r8d, 0x104
mov rcx, rbx
call fcn.14001549c
mov word [0x14004ec46], 0
mov rcx, rbx
mov dx, 0x5c
call fcn.14001740c
test rax, rax
je 0x140007fad
cmp word [rax + 2], 0
jne 0x140007fad
mov word [rax], 0
lea r8, str._s_update.status
lea r9, [0x14004e200]
lea rbx, [rsp + 0x290]
mov edx, 0x104
mov rcx, rbx
call fcn.140004090
lea rdx, [0x140043fee]
mov rcx, rbx
call fcn.140020e24
test rax, rax
mov qword [rsp + 0x60], rsi
je 0x140008066
mov r15, rax
xorps xmm0, xmm0
lea rcx, [rsp + 0xd30]
movaps xmmword [rcx + 0x10], xmm0
movaps xmmword [rcx], xmm0
mov edx, 1
mov r8d, 0x1f
mov r9, rax
call fcn.140022994
mov r14, rax
mov rcx, r15
call fcn.14002238c
test eax, eax
je 0x1400081b2
xor r12d, r12d
mov rcx, r15
call fcn.1400222a4
test eax, eax
je 0x140008069
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b7ce
lea rdx, str.File_close_did_not_execute_successfully
call fcn.1400137e0
jmp 0x140008069
xor r12d, r12d
xor esi, esi
mov qword [rsp + 0x290], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rsi
mov ebp, 2
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 0
lea rdx, str.SoftwareClassesApplications
mov r14, qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call r14
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 1
lea rdx, str.SoftwareClassesApplicationsupdater.exe
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call r14
test eax, eax
jne 0x14000816a
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea rdx, str.IsHostApp
mov rbx, qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea rdx, str.NoOpenWith
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea rdx, str.NoStartPage
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp r13d, 5
jl 0x1400081ab
mov rcx, qword [rdi + 0x20]
call fcn.140021144
cmp rax, 0xffffffffffffffff
je 0x1400082af
mov rbx, rax
mov rcx, qword [rdi + 0x20]
lea rdx, str._replace
call fcn.1400174bc
test rax, rax
je 0x1400082c0
lea rax, [0x14004ec4a]
jmp 0x1400082bd
xor ebx, ebx
jmp 0x1400082c0
mov byte [rsp + r14 + 0xd30], 0
lea r14, [rsp + 0xd30]
mov rcx, r14
mov edx, 0x3a
call fcn.140017260
mov r12, rax
test rax, rax
jne 0x140008205
lea rcx, [rsp + 0xd30]
mov edx, 0xa
call fcn.140017260
test rax, rax
jne 0x140008205
lea rcx, [rsp + 0xd30]
call fcn.1400237f0
add rax, rsp
add rax, 0xd30
sub rax, r14
cmp rax, 0xf
jne 0x14000823b
movabs rax, 0x2d676e69646e6570
xor rax, qword [rsp + 0xd30]
movabs rcx, 0x656369767265732d
xor rcx, qword [rsp + 0xd37]
or rcx, rax
je 0x140008e83
test r12, r12
jne 0x140008272
lea rcx, [rsp + 0xd30]
mov edx, 0xa
call fcn.140017260
mov r12, rax
test rax, rax
jne 0x140008272
lea rcx, [rsp + 0xd30]
call fcn.1400237f0
lea r12, [rsp + rax]
add r12, 0xd30
sub r12, r14
cmp r12, 0xf
jne 0x140008024
movabs rax, 0x2d6465696c707061
xor rax, qword [rsp + 0xd30]
movabs rcx, 0x656369767265732d
xor rcx, qword [rsp + 0xd37]
or rcx, rax
sete r12b
jmp 0x140008027
mov rbx, 0xffffffffffffffff
lea rax, [0x14004e408]
mov byte [rax], 1
mov rcx, qword [rdi + 0x18]
call fcn.140013a30
test al, al
je 0x140008d82
mov rdx, qword [rdi + 0x18]
lea r14, [0x14004e410]
mov r8d, 0x104
mov rcx, r14
call fcn.14001549c
mov word [0x14004e616], 0
mov rcx, r14
mov dx, 0x5c
call fcn.14001740c
test rax, rax
je 0x140008310
cmp word [rax + 2], 0
jne 0x140008310
mov word [rax], 0
cmp r13d, 7
jl 0x140008456
mov rcx, qword [rdi + 0x30]
call fcn.140013a30
test al, al
je 0x140008edc
mov esi, r12d
lea r14, [0x14004ea40]
mov rcx, r14
call fcn.140015368
mov r15, rax
lea r12, [rsp + 0x290]
mov r8d, 0x208
mov rcx, r12
xor edx, edx
call fcn.1400170d0
mov rdx, qword [rdi + 0x30]
mov rcx, r12
mov r8, r15
call fcn.14001549c
mov rcx, r14
mov rdx, r12
call fcn.140023fec
test eax, eax
jne 0x140008f1d
cmp r13d, 8
mov r12d, esi
jl 0x1400083d4
lea esi, [r13 - 6]
dec rsi
xor r15d, r15d
lea r14, str.backgroundtask
mov rcx, qword [rdi + r15*8 + 0x38]
test rcx, rcx
je 0x1400083cc
movzx eax, word [rcx]
cmp eax, 0x2f
je 0x1400083b2
cmp eax, 0x2d
jne 0x1400083cc
cmp word [rcx + 2], 0x2d
je 0x1400083b8
add rcx, 2
jmp 0x1400083bc
add rcx, 4
mov rdx, r14
call fcn.140023fec
test eax, eax
je 0x14000844e
inc r15
cmp rsi, r15
jne 0x140008394
lea rcx, str.MOZ_APP_SILENT_START
call fcn.140022f04
test rax, rax
je 0x1400083ed
cmp byte [rax], 0
setne al
jmp 0x140008450
xor eax, eax
jmp 0x140008450
mov rsi, qword [rsi]
mov ecx, 2
call fcn.140017878
lea rdx, str.The_patch_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140008f5c
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4b
call fcn.140001000
mov rcx, rsi
call fcn.14000c880
mov rsi, qword [rdi + 0x10]
mov ecx, 2
call fcn.140017878
lea rdx, str.The_install_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140008f5c
mov al, 1
mov byte [0x14004ec4b], al
lea rcx, [rsp + 0x910]
mov r8d, 0x20a
xor edx, edx
call fcn.1400170d0
cmp byte [0x14004ec48], 0
je 0x1400085a2
lea r14, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.1400170d0
mov rcx, r14
call fcn.140013400
test eax, eax
je 0x1400084cb
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.1400170d0
lea rcx, [0x140043f94]
mov rdx, r14
call fcn.140013500
test eax, eax
jne 0x1400091f0
lea rcx, [rsp + 0xd30]
call fcn.140013400
test eax, eax
je 0x14000850b
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.1400170d0
lea rcx, [0x1400437c8]
mov rdx, r14
call fcn.140013500
test eax, eax
jne 0x14000921f
lea rcx, [rsp + 0xd30]
call fcn.140013400
test eax, eax
je 0x14000854b
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.1400170d0
lea rcx, [0x140043d68]
mov rdx, r14
call fcn.140013500
test eax, eax
jne 0x14000924e
lea rcx, [rsp + 0x910]
call fcn.140013400
test eax, eax
je 0x1400085e0
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.1400170d0
lea rcx, [0x140043d68]
mov rdx, r14
call fcn.140013500
test eax, eax
je 0x1400085e0
lea rcx, [rsp + 0x910]
lea rdx, [rsp + 0x290]
call fcn.140037390
jmp 0x1400085e0
cmp byte [0x14004ec49], 0
lea rax, str.update.log
lea rcx, [0x140043d4a]
cmove rcx, rax
mov qword [rsp + 0x20], rcx
lea r8, str._s_s
lea r9, [0x14004e200]
lea rcx, [rsp + 0x910]
mov edx, 0x105
call fcn.140004090
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b544
cmp qword [0x14004fc78], 0
jne 0x140008658
lea rcx, [rsp + 0x910]
call fcn.140015368
dec eax
cmp eax, 0x101
ja 0x140008658
lea r14, [0x14004fc80]
lea rdx, [rsp + 0x910]
mov r8d, 0x104
mov rcx, r14
call fcn.14001549c
lea rdx, [0x140043722]
mov rcx, r14
call fcn.140020e24
mov qword [0x14004fc78], rax
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b585
cmp byte [0x14004ea38], 0
lea rsi, [0x140041271]
lea r15, str.true
mov r8, r15
cmove r8, rsi
lea rdx, str.sUsingService_s
call fcn.1400137e0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b5c6
cmp byte [0x14004ec4b], 0
mov r8, r15
cmove r8, rsi
lea rdx, str.sUpdateSilently_s
call fcn.1400137e0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b607
cmp byte [0x14004ec48], 0
mov r8, r15
cmove r8, rsi
lea rdx, str.gUseSecureOutputPath_s
call fcn.1400137e0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b648
test r12b, r12b
mov r8, r15
cmove r8, rsi
lea rdx, [0x140040cb1]
call fcn.1400137e0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b689
cmp byte [0x14004ec49], 0
mov r8, r15
cmove r8, rsi
lea rdx, str.gIsElevated_s
call fcn.1400137e0
lea rcx, str.applying
call fcn.14000c880
test al, al
je 0x1400087e4
cmp byte [0x14004e408], 1
jne 0x14000881f
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b870
lea r14, str.Performing_a_staged_update
jmp 0x140008854
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b6ca
lea rdx, str.failed_setting_status_to_applying
call fcn.1400137e0
call fcn.140007a80
jmp 0x140008f67
cmp byte [0x14004ec4a], 1
jne 0x14000885c
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b8c6
lea r14, str.Performing_a_replace_request
mov rdx, r14
call fcn.1400137e0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b70b
lea rdx, str.PATCH_DIRECTORY__S
lea r8, [0x14004e200]
call fcn.1400137e0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b74c
lea rdx, str.INSTALLATION_DIRECTORY__S
lea r8, [0x14004ea40]
call fcn.1400137e0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b78d
lea rdx, str.WORKING_DIRECTORY__S
lea r14, [0x14004e410]
mov r8, r14
call fcn.1400137e0
lea rsi, [0x14004ea40]
mov r8d, 0x104
mov rcx, r14
mov rdx, rsi
call fcn.140020c40
test eax, eax
je 0x1400089ea
cmp byte [0x14004e408], 0
jne 0x14000893d
cmp byte [0x14004ec4a], 0
je 0x140008d27
lea r8, [0x140043852]
lea r9, [0x14004e410]
lea r14, [rsp + 0x290]
mov edx, 0x104
mov rcx, r14
call fcn.140004090
mov rcx, r14
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x140008cbe
lea rdx, [0x14004ea40]
lea rcx, [rsp + 0x290]
mov r8d, 0x104
call fcn.140020c40
test eax, eax
je 0x1400089ea
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x48
call fcn.140001000
mov rcx, rsi
call fcn.14000c880
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b90e
lea rdx, str.The_apply_to_directory_must_be_the_same_as_or_a_child_of_the_installation_directory__Exiting.
jmp 0x140008810
test rbx, rbx
jle 0x140008a55
mov ecx, 0x100000
xor edx, edx
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x140008a55
mov rbx, rax
mov rcx, rax
mov edx, 0x7530
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebp, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebp, ebp
je 0x140008a55
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000ba94
lea rdx, str.The_parent_process_didnt_exit__Continuing_with_update.
call fcn.1400137e0
cmp byte [0x14004ec4a], 0
jne 0x140008a67
cmp byte [0x14004e408], 1
jne 0x140008a9e
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.1400170d0
mov rcx, rbx
mov edx, 0x105
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x140008a9e
lea rcx, [rsp + 0x290]
call fcn.140020594
mov dword [rsp + 0x68], r12d
mov r12, 0xffffffffffffffff
cmp byte [0x14004ea38], 0
je 0x140008c51
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b885
lea rdx, str.Going_to_update_via_this_updater_instance.
call fcn.1400137e0
cmp byte [0x14004e408], 1
jne 0x140008aff
lea rcx, [0x14004e410]
xor edx, edx
call fcn.14000d200
cmp byte [0x14004ec4a], 0
jne 0x140008b26
lea rcx, [0x14004e410]
call fcn.140020f54
test eax, eax
je 0x140008b26
call fcn.14001c8b0
cmp dword [rax], 0x11
jne 0x140008815
lea rcx, [0x14004e410]
lea rdx, [rsp + 0xd30]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x140008dc6
mov r15, 0xffffffffffffffff
cmp r13d, 7
jl 0x140008fd5
mov qword [rsp + 0x50], r13
lea rcx, [rsp + 0x700]
mov ebx, 0x208
mov r8d, 0x208
xor edx, edx
call fcn.1400170d0
lea r14, [rdi + 0x30]
mov r15, qword [rdi + 0x30]
lea r13, [rsp + 0x290]
mov r8d, 0x410
mov rcx, r13
xor edx, edx
call fcn.1400170d0
cmp byte [0x14004ec4a], 1
jne 0x140008f9a
mov rcx, r15
mov rdx, rsi
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
movsxd r15, eax
mov rdx, qword [r14]
mov rcx, r13
mov r8, r15
call fcn.14001549c
mov qword [rsp + 0x58], r12
lea r12, [rsp + r15*2]
add r12, 0x290
sub rbx, r15
lea rbp, [rsi + r15*2]
mov rcx, r12
mov rdx, rbp
mov r8, rbx
call fcn.14001549c
mov rcx, rbp
call fcn.140015368
lea r12, [r12 + rax*2]
add r12, 2
mov dword [r12 - 2], 0x5c
not rax
add rbx, rax
lea rbp, [rsp + 0x80]
mov rcx, rbp
mov rdx, rsi
call fcn.1400152d0
mov rcx, qword [r14]
mov rdx, rbp
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
cmp eax, r15d
cmova r15d, eax
movsxd rdx, r15d
add rdx, rdx
add rdx, qword [r14]
mov rcx, r12
mov r12, qword [rsp + 0x58]
mov r8, rbx
call fcn.14001549c
jmp 0x140008f9d
cmp r13d, 6
jg 0x140008c6d
cmp byte [0x14004e408], 0
jne 0x140008c6d
cmp byte [0x14004ec4a], 1
jne 0x140008ab7
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b990
lea rdx, str.Checking_whether_elevation_is_needed
call fcn.1400137e0
cmp byte [0x14004e408], 1
jne 0x140008e8b
lea r8, str._s_updated.update_in_progress.lock
lea r9, [0x14004ea40]
jmp 0x140009288
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x47
call fcn.140001000
mov rcx, rsi
call fcn.14000c880
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b94f
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Error_calling_PathRemoveFileSpecW:__lu
mov r8d, eax
call fcn.1400137e0
jmp 0x140008815
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4a
call fcn.140001000
mov rcx, rsi
call fcn.14000c880
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b9d1
lea rdx, str.Installation_directory_and_working_directory_must_be_the_same_for_non_staged_updates._Exiting.
jmp 0x140008810
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4c
call fcn.140001000
mov rcx, rsi
call fcn.14000c880
mov rsi, qword [rdi + 0x18]
mov ecx, 2
call fcn.140017878
lea rdx, str.The_working_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140008f5c
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x41
call fcn.140001000
mov rcx, rbx
call fcn.14000c880
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000ba53
lea rdx, str.NS_main:_unable_to_find_apply_to_dir:__S
lea r8, [0x14004e410]
call fcn.1400137e0
call fcn.140007a80
cmp r12, 0xffffffffffffffff
je 0x140008e3c
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.14002104c
test eax, eax
je 0x140008e5b
call fcn.14001c8b0
cmp dword [rax], 2
jne 0x140008f67
cmp r13d, 7
jl 0x140008f67
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
jmp 0x140009600
mov r12b, 1
jmp 0x140008027
cmp byte [0x14004ec4a], 1
jne 0x14000927d
lea rdx, [0x14004ea40]
lea rbx, [rsp + 0x290]
mov rcx, rbx
call fcn.1400152d0
mov rcx, rbx
mov dx, 0x5c
call fcn.14001740c
mov word [rax], 0
lea r8, str._smoz_update_in_progress.lock
lea rcx, [rsp + 0x700]
mov edx, 0x104
mov r9, rbx
jmp 0x140009295
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4d
call fcn.140001000
mov rcx, rsi
call fcn.14000c880
mov rsi, qword [rdi + 0x30]
mov ecx, 2
call fcn.140017878
lea rdx, str.The_callback_file_path_is_not_valid_for_this_application___S__n
jmp 0x140008f5c
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4e
call fcn.140001000
mov rcx, rsi
call fcn.14000c880
mov rsi, qword [rdi + 0x30]
mov ecx, 2
call fcn.140017878
lea rdx, str.The_callback_file_must_be_located_in_the_installation_directory___S__n
mov rcx, rax
mov r8, rsi
call fcn.1400371a0
mov ebx, 1
mov rcx, qword [rsp + 0xf48]
xor rcx, rsp
call fcn.140027f60
mov eax, ebx
movaps xmm6, xmmword [rsp + 0xf50]
add rsp, 0xf68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r13, r15
lea rdx, [rsp + 0x700]
mov rcx, r13
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x140009557
mov r15, 0xffffffffffffffff
cmp byte [0x14004ec4a], 0
je 0x14000960a
mov r13, qword [rsp + 0x50]
cmp byte [0x14004e408], 0
jne 0x14000902f
cmp byte [0x14004ec4a], 0
jne 0x14000902f
lea rax, str.tobedeleted
mov qword [rsp + 0x20], rax
lea rbx, [0x14004ec50]
lea r8, str._s__s
lea r9, [0x14004e410]
mov edx, 0x104
mov rcx, rbx
call fcn.140004090
mov rcx, rbx
xor edx, edx
call fcn.1400204d4
test eax, eax
je 0x14000902f
lea rcx, [0x14004ec50]
call fcn.140020f54
lea rax, [0x14000d450]
lea rbx, [rsp + 0x290]
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], 0
lea rsi, [rsp + 0x700]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0
lea r8, [0x14000cd80]
xor ecx, ecx
xor edx, edx
mov r9, rbx
call fcn.14001baa4
mov qword [rbx], rax
test rax, rax
je 0x1400090a6
cmp byte [0x14004e408], 0
jne 0x1400090a6
cmp byte [0x14004ec4a], 0
jne 0x1400090a6
cmp byte [0x14004ec4b], 0
jne 0x1400090a6
xor ecx, ecx
mov dl, 1
call fcn.140002f60
mov rax, qword [rsp + 0x290]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r13d, 7
jl 0x140009132
cmp byte [0x14004ec4a], 0
jne 0x140009132
cmp r15, 0xffffffffffffffff
je 0x1400090e0
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x14004e830]
call fcn.14002104c
test eax, eax
je 0x140009132
call fcn.14001c8b0
cmp dword [rax], 2
je 0x140009132
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000be7b
lea rdx, str.NS_main:_non_fatal_error_removing_backup_of_callback_app_file__path:__S
lea r8, [0x14004e830]
call fcn.1400137e0
cmp byte [0x14004e408], 0
jne 0x140009b18
cmp byte [0x14004ec4a], 0
jne 0x140009b18
lea rcx, [0x14004ec50]
call fcn.1400210a4
test eax, eax
je 0x140009b18
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bd5f
call fcn.14001c8b0
mov r9d, dword [rax]
lea rdx, str.NS_main:_unable_to_remove_directory:__S__err:__d
lea r8, str.tobedeleted
call fcn.1400137e0
lea rcx, [0x14004ec50]
xor edx, edx
mov r8d, 4
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov ecx, dword [0x14004fe88]
mov edx, dword [0x14004cde8]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
test eax, eax
je 0x140009afa
cmp ecx, edx
jg 0x14000be22
lea rbx, str.NS_main:_directory_will_be_removed_on_OS_reboot:__S
jmp 0x140009b09
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.140037390
test eax, eax
je 0x1400084cb
lea rcx, [rsp + 0xd30]
call fcn.14002104c
jmp 0x1400084cb
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.140037390
test eax, eax
je 0x14000850b
lea rcx, [rsp + 0xd30]
call fcn.14002104c
jmp 0x14000850b
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.140037390
test eax, eax
je 0x14000854b
lea rcx, [rsp + 0xd30]
call fcn.14002104c
jmp 0x14000854b
mov r9, qword [rdi + 0x30]
lea r8, str._s.update_in_progress.lock
lea rcx, [rsp + 0x700]
mov edx, 0x104
call fcn.140004090
lea rcx, [rsp + 0x700]
call fcn.14002104c
test eax, eax
je 0x1400092b5
call fcn.14001c8b0
cmp dword [rax], 2
jne 0x140009325
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0x700]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
cmp r12, 0xffffffffffffffff
je 0x14000933e
cmp eax, ecx
jg 0x14000bb16
lea rdx, str.Successfully_opened_lock_file
call fcn.1400137e0
jmp 0x14000935b
cmp byte [0x14004ec4a], 1
jne 0x140009967
lea rcx, str.pending
jmp 0x140009995
cmp eax, ecx
jg 0x14000bb98
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Failed_to_open_update_lock_file:__lu
mov r8d, eax
call fcn.1400137e0
cmp byte [0x14004ec49], 0
je 0x14000975e
lea rbx, [rsp + 0x80]
mov qword [rbx], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0xf00ff
mov r8, rbx
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140009724
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r13
mov r13, qword [rsp + 0x80]
xor r12d, r12d
lea rbp, [rsp + 0xd30]
mov rbx, qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
xorps xmm6, xmm6
lea rax, str.SeAssignPrimaryTokenPrivilege
mov r14, qword [r12 + rax]
xor ecx, ecx
mov rdx, r14
mov r8, rbp
call rbx
test eax, eax
je 0x140009433
mov dword [rsp + 0x290], 1
mov rax, qword [rsp + 0xd30]
mov qword [rsp + 0x294], rax
mov dword [rsp + 0x29c], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
movups xmmword [rsp + 0x20], xmm6
mov rcx, r13
xor edx, edx
lea r8, [rsp + 0x290]
mov r9d, 0x10
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
test eax, eax
je 0x140009433
call rsi
test eax, eax
je 0x14000947e
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400094b0
call rsi
lea rdx, str.Could_not_disable_token_privilege_value:__s.___lu_
mov r8, r14
mov r9d, eax
call fcn.1400137e0
add r12, 8
cmp r12, 0x110
jne 0x1400093c4
jmp 0x14000952a
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400094ed
lea rdx, str.Disabled_unneeded_token_privilege:__s.
mov r8, r14
call fcn.1400137e0
jmp 0x140009468
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009454
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009454
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000949f
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000949f
mov rcx, qword [rsp + 0x80]
test rcx, rcx
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
lea rsi, [0x14004ea40]
je 0x14000975e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000975e
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x42
call fcn.140001000
mov rcx, rbx
call fcn.14000c880
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bc1a
lea rdx, str.NS_main:_unable_to_find_callback_file:__S
mov r8, r13
call fcn.1400137e0
call fcn.140007a80
cmp r12, 0xffffffffffffffff
je 0x1400095c9
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.14002104c
test eax, eax
mov rsi, qword [rsp + 0x50]
je 0x1400095ed
call fcn.14001c8b0
cmp dword [rax], 2
jne 0x140008f67
mov r9b, byte [0x14004ea38]
add esi, 0xfffffffa
mov rcx, qword [rdi + 0x28]
mov edx, esi
mov r8, r14
call fcn.140007cb0
jmp 0x140008f67
lea rcx, [rsp + 0xd30]
call fcn.140015368
movsxd rcx, eax
lea rax, [rsp + rcx*2]
add rax, 0x700
xor edx, edx
cmp word [rax], 0x5c
sete dl
movzx eax, word [rax + rdx*2]
add rdx, rdx
lea rcx, [rdx + rcx*2]
lea rdx, [rsp + rcx]
add rdx, 0x702
lea rcx, [0x14004e620]
mov r8d, 0x2f
cmp ax, 0x5c
cmove eax, r8d
mov word [rcx], ax
add rcx, 2
movzx eax, word [rdx]
add rdx, 2
test ax, ax
jne 0x140009650
mov word [rcx], 0
mov r9, qword [r14]
lea rcx, [0x14004e830]
lea r8, str._s.moz_callback
mov edx, 0x104
call fcn.140004090
cmp eax, 0x104
jb 0x1400099fc
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x80]
mov edx, 0x20
mov rcx, rsi
mov r9d, 3
call fcn.140001000
mov rcx, rsi
call fcn.14000c880
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bde1
lea rdx, str.NS_main:_callback_backup_path_truncated
call fcn.1400137e0
call fcn.140007a80
cmp r12, 0xffffffffffffffff
je 0x140009705
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.14002104c
test eax, eax
je 0x140008f67
call fcn.14001c8b0
jmp 0x140008f67
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bcdd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Could_not_obtain_token_for_current_process__no_privileges_changed.___lu_
mov r8d, eax
call fcn.140013900
cmp r12, 0xffffffffffffffff
jne 0x140008ab7
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bbd9
lea rdx, str.Cant_open_lock_file___seems_like_we_need_elevation
call fcn.1400137e0
lea rcx, [rsp + 0xb20]
call fcn.14002104c
test eax, eax
mov ebx, dword [rsp + 0x68]
je 0x1400097bc
call fcn.14001c8b0
cmp dword [rax], 2
jne 0x1400099cb
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0xb20]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400099cb
mov rsi, rax
lea edx, [r13 - 1]
lea r14, [rsp + 0x78]
mov rcx, r14
mov r8, qword [rsp + 0x60]
call fcn.140001090
mov rax, qword [r14]
test rax, rax
je 0x140009dd9
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rsi
test bl, bl
je 0x14000ab53
lea rcx, [0x14004ea40]
xor esi, esi
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x14000a0ea
mov ebp, eax
mov r12d, eax
add r12, r12
mov rcx, r12
call fcn.140015294
mov r14, rax
xor esi, esi
mov rcx, rax
xor edx, edx
mov r8, r12
call fcn.1400170d0
lea rcx, [0x14004ea40]
mov rdx, r14
mov r8d, ebp
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x14000a0e2
mov qword [rsp + 0x50], r13
lea rsi, [rsp + 0x290]
mov qword [rsi], 0
lea rcx, [0x140039010]
xor edx, edx
xor r8d, r8d
mov r9, rsi
call sub.SHELL32.dll_SHGetKnownFolderPath
test eax, eax
js 0x14000a0db
mov r13, qword [rsp + 0x290]
mov rcx, r13
call fcn.140015368
test rax, rax
je 0x14000a0cd
mov rbp, rax
cmp word [r13 + rax*2 - 2], 0x5c
jne 0x14000a2cd
mov rcx, r14
mov rdx, r13
mov r8, rbp
call fcn.140020c40
test eax, eax
je 0x14000a335
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [rsp + 0x290], 0
mov r13, rsi
mov qword [rsp + 0x30], rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion
lea r8, str.ProgramFilesDir
mov rcx, 0xffffffff80000002
mov r9d, 0x10002
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov esi, 1
test eax, eax
jne 0x140009956
mov ebp, dword [rsp + 0x290]
cmp rbp, 4
jae 0x14000a346
xor r12d, r12d
test esi, esi
setne sil
and sil, r12b
jmp 0x14000a0dd
cmp byte [0x14004e408], 1
jne 0x14000999a
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x2c
call fcn.140001000
mov rcx, rsi
call fcn.14000c880
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bb57
lea rdx, str.Update_already_in_progress__Exiting
jmp 0x140008810
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bd1e
lea rdx, str.Unable_to_create_elevated_lock_file__Exiting
jmp 0x140008810
mov rcx, qword [r14]
lea rdx, [0x14004e830]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x140009e22
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x58], r12
mov ebp, 1
mov rsi, qword [sym.imp.KERNEL32.dll_CreateFileW]
lea r12, str.NS_main:_callback_app_file_open_attempt__d_failed._File:__S._Last_error:__lu
mov r14, qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
mov rcx, r13
mov edx, 0x40010000
mov r8d, 6
xor r9d, r9d
call rsi
cmp rax, 0xffffffffffffffff
jne 0x140009e53
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140009ac0
mov dword [rsp + 0x20], ebx
mov rdx, r12
mov r8d, ebp
mov r9, r13
call fcn.1400137e0
mov ecx, 0x64
call r14
inc ebp
cmp ebp, 0xb
jne 0x140009a3b
jmp 0x140009e65
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009a9a
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009a9a
cmp ecx, edx
jg 0x14000bebc
lea rbx, str.NS_main:_failed_to_schedule_OS_reboot_removal_of_directory:__S
lea r8, str.tobedeleted
mov rdx, rbx
call fcn.1400137e0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000ba12
lea rdx, str.Running_LaunchCallbackAndPostProcessApps
call fcn.1400137e0
cmp r13d, 7
jge 0x140009b85
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bad5
lea rdx, str.No_callback_arg._Skipping_LaunchWinPostProcess_and_LaunchCallbackApp
call fcn.1400137e0
jmp 0x140009dc5
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
cmp byte [0x14004ea3a], 1
jne 0x140009d62
cmp eax, ecx
jg 0x14000bc5b
lea rdx, str.Launching_Windows_post_update_process
call fcn.1400137e0
call fcn.140006f30
test al, al
jne 0x140009bff
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bda0
lea rdx, str.The_post_update_process_was_not_launched_successfully
call fcn.1400137e0
cmp byte [0x14004ea38], 0
jne 0x140009d76
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000be3a
lea rdx, str.Starting_Service_Update_before_launching_callback_app
call fcn.1400137e0
xor ecx, ecx
xor edx, edx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
test rax, rax
je 0x140009d76
mov r14, rax
lea rdx, str.MozillaMaintenance
mov rcx, rax
mov r8d, 0xf01ff
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rbx, rax
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test rbx, rbx
je 0x140009d76
lea r9, [rsp + 0x6d0]
mov rcx, rbx
xor edx, edx
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
test eax, eax
jne 0x140009cad
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14000a0a3
lea r15, [rsp + 0x6d0]
mov qword [rsp + 0x58], r12
mov r12d, dword [r15]
mov rcx, r12
call fcn.140015294
mov r14, rax
mov rcx, rax
xor edx, edx
mov r8, r12
call fcn.1400170d0
mov rcx, rbx
mov rdx, r14
mov r8d, r12d
mov r12, qword [rsp + 0x58]
mov r9, r15
call qword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
mov ebp, eax
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test ebp, ebp
je 0x140009d58
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea rcx, [rsp + 0x290]
mov r8d, 0x20a
xor edx, edx
call fcn.1400170d0
mov rbx, qword [r14 + 0x10]
mov rcx, rbx
call fcn.140015368
cmp rax, 0x104
ja 0x140009d58
lea r15, [rsp + 0x290]
mov r8d, 0x105
mov rcx, r15
mov rdx, rbx
call fcn.14001549c
mov rcx, r15
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
jne 0x14000a3bc
mov rcx, r14
call fcn.140015494
jmp 0x140009d76
cmp eax, ecx
jg 0x14000bc9c
lea rdx, str.Not_launching_Windows_post_update_process_because__gSucceeded
call fcn.1400137e0
cmp r12, 0xffffffffffffffff
je 0x140009d85
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.14002104c
test eax, eax
je 0x140009da0
call fcn.14001c8b0
cmp dword [rax], 2
jne 0x140009dc5
call fcn.140007a80
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
call fcn.140007cb0
jmp 0x140009dca
call fcn.140007a80
movzx ebx, byte [0x14004ea3a]
xor ebx, 1
jmp 0x140008f6c
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bf04
lea rdx, str.Failed_to_make_command_line__Exiting
call fcn.1400137e0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140007a80
mov ebx, 1
jmp 0x14000ac4e
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.failed:__d_n
lea rdi, [rsp + 0x80]
mov edx, 0x20
mov rcx, rdi
cmp eax, 5
jne 0x140009ee2
mov r9d, 0x23
jmp 0x140009ee8
mov r15, rax
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
jmp 0x140008fd5
cmp ebx, 0x20
jne 0x140009f7a
cmp byte [0x14004ec4b], 0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
je 0x14000a0b1
cmp eax, ecx
jg 0x14000c14d
mov r8, qword [rsi]
lea rdx, str.NS_main:_callback_app_file_in_use__failed_to_exclusively_open_executable_file_from_background_task:__S
call fcn.1400137e0
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x6a
jmp 0x140009ff7
mov r9d, 0x25
call fcn.140001000
mov rcx, rdi
call fcn.14000c880
mov rsi, qword [rsp + 0x50]
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bf45
mov r8, qword [r14]
lea rdx, str.NS_main:_failed_to_copy_callback_file__S_into_place_at__S
lea r9, [0x14004e830]
call fcn.1400137e0
call fcn.140007a80
cmp r12, 0xffffffffffffffff
je 0x140009f49
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.14002104c
test eax, eax
je 0x140009f68
call fcn.14001c8b0
cmp dword [rax], 2
jne 0x140008f67
mov r9b, byte [0x14004ea38]
add esi, 0xfffffffa
mov rcx, qword [r14]
jmp 0x1400095fb
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
jg 0x14000c08a
mov r8, qword [rsi]
lea rdx, str.NS_main:_callback_app_file_in_use__failed_to_exclusively_open_executable_file:__S
call fcn.1400137e0
lea r8, str.failed:__d_n
cmp ebx, 5
jne 0x140009fe1
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x23
jmp 0x140009ff7
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x25
call fcn.140001000
mov rcx, rbx
call fcn.14000c880
lea rcx, [0x14004e830]
call fcn.14002104c
test eax, eax
je 0x14000a056
call fcn.14001c8b0
cmp dword [rax], 2
je 0x14000a056
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c210
lea rdx, str.NS_main:_unable_to_remove_backup_of_callback_app_file__path:__S
lea r8, [0x14004e830]
call fcn.1400137e0
call fcn.140007a80
cmp r12, 0xffffffffffffffff
je 0x14000a06a
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.14002104c
test eax, eax
je 0x14000a089
call fcn.14001c8b0
cmp dword [rax], 2
jne 0x140008f67
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
mov edx, r13d
mov r8, rsi
jmp 0x140009600
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x140009d76
cmp eax, ecx
jg 0x14000c251
mov r8, qword [rsi]
lea rdx, str.NS_main:_callback_app_file_in_use__continuing_without_exclusive_access_for_executable_file:__S
call fcn.1400137e0
jmp 0x140008fd5
test r13, r13
je 0x14000a0db
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor esi, esi
mov r13, qword [rsp + 0x50]
mov rcx, r14
call fcn.140015494
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bf86
test sil, sil
mov r8, r15
lea rax, [0x140041271]
cmove r8, rax
lea rdx, str.After_checking_IsProgramFilesPath__useService_s
call fcn.1400137e0
test sil, sil
je 0x14000ab53
mov r14, qword [rdi]
xor esi, esi
lea rcx, [rsp + 0x290]
mov r8d, 0x20a
xor edx, edx
call fcn.1400170d0
mov rcx, r14
call fcn.140015368
cmp rax, 0x104
ja 0x14000a191
lea rbx, [rsp + 0x290]
mov r8d, 0x104
mov rcx, rbx
mov rdx, r14
call fcn.14001549c
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathStripToRootW]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
sete sil
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c049
test sil, sil
mov r8, r15
lea rax, [0x140041271]
cmove r8, rax
lea rdx, str.After_checking_IsLocalFile__useService_s
call fcn.1400137e0
test sil, sil
je 0x14000ab53
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r12, [rsp + 0x290]
mov rcx, rax
mov edx, 8
mov r8, r12
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14000a60b
mov rcx, qword [rsp + 0x290]
lea rsi, [rsp + 0x80]
mov qword [rsp + 0x20], rsi
lea r14, [rsp + 0xd30]
mov edx, 0x12
mov r8, r14
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov ebx, eax
mov ebp, dword [r14]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x14000a60b
cmp ebp, 3
jne 0x14000a60b
mov qword [rsp + 0x20], r12
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem
mov rcx, 0xffffffff80000002
xor r8d, r8d
mov r9d, 0x20019
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000a60b
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0xd30], 4
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
lea rdx, str.ConsentPromptBehaviorAdmin
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x290]
test eax, eax
je 0x14000a56d
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14000a60b
lea rax, [rbp + 1]
mov qword [rsp + 0x68], rax
lea rax, [rbp*2 + 4]
add rbp, 2
mov r12, 0xffffffffffffffff
cmovns r12, rax
mov rcx, r12
call fcn.140015294
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, r12
call fcn.1400170d0
mov rcx, rbx
mov rdx, rbp
mov r9, r13
call fcn.1400139b0
mov rcx, r14
mov rdx, rbx
mov r8, qword [rsp + 0x68]
call fcn.140020c40
mov ebp, eax
mov rcx, rbx
call fcn.140015494
test ebp, ebp
jne 0x1400098f7
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov sil, 1
jmp 0x14000a0dd
shr ebp, 1
lea rbx, [rbp*2]
mov rcx, rbx
call fcn.140015294
mov rsi, rax
xor r12d, r12d
mov rcx, rax
xor edx, edx
mov r8, rbx
call fcn.1400170d0
mov qword [rsp + 0x30], r13
mov r13, rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], 0
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion
lea r8, str.ProgramFilesDir
mov rcx, 0xffffffff80000002
mov r9d, 0x10002
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov esi, 1
test eax, eax
je 0x14000b28b
mov rcx, r13
call fcn.140015494
jmp 0x140009959
lea rdx, str.maintenanceservice_tmp.exe
lea rcx, [rsp + 0x290]
call fcn.140037390
test eax, eax
je 0x140009d58
lea rcx, [0x14004ea40]
call fcn.140015368
cmp rax, 0x104
ja 0x140009d58
mov rbp, r13
lea r15, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, r15
xor edx, edx
call fcn.1400170d0
lea rbx, [0x14004ea40]
mov r8d, 0x104
mov rcx, r15
mov rdx, rbx
call fcn.14001549c
lea rdx, str.maintenanceservice.exe
mov rcx, r15
call fcn.140037390
lea rdx, [rsp + 0x290]
mov rcx, r15
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x14000b81d
lea rcx, [rsp + 0x290]
call fcn.140013d40
test eax, eax
je 0x14000b80f
xorps xmm0, xmm0
movaps xmmword [rsp + 0x700], xmm0
movaps xmmword [rsp + 0x710], xmm0
movaps xmmword [rsp + 0x750], xmm0
movaps xmmword [rsp + 0x740], xmm0
movaps xmmword [rsp + 0x730], xmm0
movaps xmmword [rsp + 0x720], xmm0
xor r12d, r12d
mov qword [rsp + 0x760], r12
mov dword [rsp + 0x700], 0x68
lea rax, [0x140044194]
mov qword [rsp + 0x710], rax
lea r13, [rsp + 0x80]
mov qword [r13 + 0x10], r12
movaps xmmword [r13], xmm0
lea r15, [rsp + 0x910]
movaps xmmword [r15 + 0x70], xmm0
movaps xmmword [r15 + 0x60], xmm0
movaps xmmword [r15 + 0x50], xmm0
movaps xmmword [r15 + 0x40], xmm0
movaps xmmword [r15 + 0x30], xmm0
movaps xmmword [r15 + 0x20], xmm0
movaps xmmword [r15 + 0x10], xmm0
movaps xmmword [r15], xmm0
lea rdx, str.dummyparam.exe_upgrade
mov r8d, 0x3f
mov rcx, r15
call fcn.14001549c
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
lea rcx, [rsp + 0x290]
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14000b81d
mov rcx, qword [rsp + 0x80]
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rsi
mov rcx, qword [rsp + 0x88]
call rsi
jmp 0x14000b81d
mov dword [rsp + 0xd30], 4
mov qword [rsp + 0x28], r14
lea rax, [rsp + 0x6d0]
mov qword [rsp + 0x20], rax
lea rdx, str.PromptOnSecureDesktop
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
jne 0x14000a60b
mov eax, dword [rsp + 0x80]
or eax, dword [rsp + 0x6d0]
setne bl
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c5f3
test bl, bl
lea rax, [0x140041271]
cmove r15, rax
lea rdx, str.After_checking_IsUnpromptedElevation__useService_s
mov r8, r15
call fcn.1400137e0
test bl, bl
je 0x14000ab53
lea rcx, [rsp + 0x290]
call fcn.1400012f0
test eax, eax
je 0x14000a7dc
lea rax, [rsp + 0xd30]
mov qword [rax], 0
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x290]
mov rcx, 0xffffffff80000002
xor r8d, r8d
mov r9d, 0x20119
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000a664
mov rcx, qword [rsp + 0xd30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x9d], 0
xor esi, esi
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.1400170d0
mov rcx, rbx
call fcn.140013400
test eax, eax
je 0x14000a6da
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.1400170d0
lea rcx, [0x140043f94]
mov rdx, rbx
call fcn.140013500
test eax, eax
jne 0x14000b2cd
xor esi, esi
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x3a
call fcn.140001000
mov rcx, rbx
call fcn.14000c880
lea r12d, [r13 + 2]
lea rcx, [r12*8]
call fcn.140015294
mov r15, rax
lea rax, str.MozillaMaintenance
mov qword [r15], rax
lea rax, str.software_update
mov qword [r15 + 8], rax
lea rcx, [r15 + 0x10]
mov r8d, r13d
shl r8, 3
mov rdx, rdi
call fcn.140027fb0
mov ecx, 5
call fcn.1400135d0
cmp eax, 1
mov qword [rsp + 0x50], r13
mov dword [rsp + 0x68], esi
jne 0x14000a80d
xor ecx, ecx
xor edx, edx
mov r8d, 5
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov ebp, 0x4269
test rax, rax
je 0x14000a839
lea rdx, str.MozillaMaintenance
mov qword [rsp + 0x70], rax
mov rcx, rax
mov r8d, 0x10
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
test rax, rax
je 0x14000a817
mov r14, rax
mov ebx, 0xffffff9c
mov rsi, qword [sym.imp.ADVAPI32.dll_StartServiceW]
mov r13, qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r14
mov edx, r12d
mov r8, r15
call rsi
test eax, eax
jne 0x14000a824
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov ecx, 0x64
call r13
add ebx, 0x64
cmp ebx, 0x1324
jb 0x14000a7b0
jmp 0x14000a826
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c351
lea rdx, str.Cant_get_registry_certificate_location._useServicefalse
jmp 0x14000ab4e
mov ebp, eax
add ebp, 0x4e20
jmp 0x14000a839
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x14000a839
xor ebp, ebp
mov rsi, qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, r14
call rsi
mov rcx, qword [rsp + 0x70]
call rsi
mov rcx, r15
call fcn.140015494
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
test ebp, ebp
je 0x14000a878
cmp eax, ecx
jg 0x14000c339
lea r14, str.Launching_service_failed._useServicefalse
jmp 0x14000ab46
cmp eax, ecx
jg 0x14000c392
lea rdx, str.Launched_service_successfully
call fcn.1400137e0
xor ebp, ebp
cmp byte [0x14004e408], 0
jne 0x14000a8ab
cmp byte [0x14004ec4b], 0
jne 0x14000a8ab
call fcn.140002ea0
test eax, eax
sete bpl
mov ecx, 5
call fcn.1400135d0
cmp eax, 1
je 0x14000a940
lea rax, [0x14000cd60]
lea rbx, [rsp + 0x290]
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], 0
lea rax, [rsp + 0xd30]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
lea r8, [0x14000cd80]
xor ecx, ecx
xor edx, edx
mov r9, rbx
call fcn.14001baa4
mov qword [rbx], rax
test rax, rax
sete cl
xor bpl, 1
or bpl, cl
jne 0x14000a924
mov cl, 1
xor edx, edx
call fcn.140002f60
mov rax, qword [rsp + 0x290]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 1
call fcn.1400135d0
mov ecx, dword [0x14004fe88]
mov edx, dword [0x14004cde8]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
cmp eax, 1
jne 0x14000ab37
cmp ecx, edx
jg 0x14000c420
lea rdx, str.Service_stop_detected.
call fcn.1400137e0
mov byte [0x14004ea39], 1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x6e0], xmm0
movaps xmmword [rsp + 0x6d0], xmm0
mov qword [rsp + 0x6ed], 0
cmp byte [rsp + 0x68], 0
je 0x14000aa0f
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.1400170d0
mov rcx, rbx
call fcn.140013400
test eax, eax
je 0x14000aa06
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.1400170d0
lea rcx, [0x140043f94]
mov rdx, rbx
call fcn.140013500
test eax, eax
jne 0x14000b43d
cmp byte [0x14004ea39], 1
jne 0x14000aa1c
cmp byte [0x14004e408], 0
je 0x14000b1ec
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c4ae
lea rdx, str.Not_showing_a_UAC_prompt.
call fcn.1400137e0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c4ef
lea rdx, [0x140040cb1]
lea r8, str.true
call fcn.1400137e0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c530
lea rdx, str.noServiceFallback_s
lea r8, [0x140041271]
call fcn.1400137e0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c571
lea rdx, str.updateLockFileHandle_sINVALID_HANDLE_VALUE
lea r8, [0x1400428ca]
call fcn.1400137e0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c5b2
lea rdx, str.forceServiceFallback_s
lea r8, [0x140041271]
call fcn.1400137e0
mov r13, qword [rsp + 0x50]
jmp 0x14000b00e
cmp ecx, edx
jg 0x14000c461
lea r14, str.Service_didnt_stop_after_10_minutes._useServicefalse
mov r13, qword [rsp + 0x50]
mov rdx, r14
call fcn.1400137e0
cmp byte [0x14004e408], 1
jne 0x14000abc1
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x2b
call fcn.140001000
mov rcx, rsi
call fcn.14000c880
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bfc7
lea rdx, str.Non_critical_update_staging_error__Falling_back_to_non_staged_updates_and_exiting
call fcn.1400137e0
call fcn.140007a80
jmp 0x14000ac4c
cmp byte [0x14004ec4b], 0
je 0x14000ac66
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x69
call fcn.140001000
mov rcx, rbx
call fcn.14000c880
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c008
lea rdx, str.Skipping_update_to_avoid_UAC_prompt_from_background_task.
call fcn.1400137e0
call fcn.140007a80
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
call fcn.140007cb0
xor ebx, ebx
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x140008f6c
call fcn.140015494
jmp 0x140008f6c
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c10c
lea rdx, str.Elevating_via_a_UAC_prompt
call fcn.1400137e0
xorps xmm6, xmm6
movaps xmmword [rsp + 0x6e0], xmm6
movaps xmmword [rsp + 0x6d0], xmm6
mov qword [rsp + 0x6ed], 0
xor esi, esi
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.1400170d0
mov rcx, rbx
call fcn.140013400
test eax, eax
je 0x14000ad0d
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.1400170d0
lea rcx, [0x140043f94]
mov rdx, rbx
call fcn.140013500
test eax, eax
jne 0x14000b13c
xor esi, esi
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x4f
call fcn.140001000
mov rcx, rbx
call fcn.14000c880
xor eax, eax
lea rcx, [rsp + 0x80]
mov qword [rcx + 0x68], rax
movups xmmword [rcx + 0x58], xmm6
movups xmmword [rcx + 0x48], xmm6
movups xmmword [rcx + 0x38], xmm6
movups xmmword [rcx + 0x28], xmm6
movabs rdx, 0x54000000070
mov qword [rcx], rdx
mov qword [rcx + 8], rax
mov rax, qword [rdi]
mov qword [rcx + 0x18], rax
mov rax, qword [rsp + 0x58]
mov qword [rcx + 0x20], rax
lea rax, str.runas
mov qword [rcx + 0x10], rax
mov dword [rcx + 0x30], 1
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x14000afac
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c18e
lea rdx, str.Elevation_successful._Waiting_for_elevated_updater_to_run.
call fcn.1400137e0
mov rcx, qword [rsp + 0xe8]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c1cf
lea rdx, str.Elevated_updater_has_finished_running.
call fcn.1400137e0
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x14004ea39], 1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x6b0], xmm0
movaps xmmword [rsp + 0x6a0], xmm0
mov qword [rsp + 0x6bd], 0
test sil, sil
je 0x14000b00e
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.1400170d0
mov rcx, rbx
call fcn.140013400
test eax, eax
je 0x14000b00e
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.1400170d0
lea rcx, [0x140043f94]
mov rdx, rbx
call fcn.140013500
test eax, eax
je 0x14000b00e
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.140037390
test eax, eax
je 0x14000b00e
mov rsi, r13
lea rdx, [0x140043fee]
lea rcx, [rsp + 0xd30]
call fcn.140020e24
test rax, rax
je 0x14000b435
mov r14, rax
lea rcx, [rsp + 0x6a0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140022994
cmp rax, 1
jne 0x14000b3f8
mov byte [rsp + 0x6c4], 0
mov rcx, r14
call fcn.1400222a4
test eax, eax
je 0x14000af49
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c6f7
lea rdx, str.File_close_did_not_execute_successfully
call fcn.1400137e0
lea rcx, [rsp + 0x6d0]
lea rdx, [rsp + 0x6a0]
mov r8d, 0x25
call fcn.1400238b0
test eax, eax
mov r13, rsi
jne 0x14000b00e
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c779
lea rdx, str.The_secure_ID_hasnt_changed_after_launching_the_updater_using_runas
call fcn.1400137e0
mov byte [0x14004ea39], 0
jmp 0x14000b435
mov byte [0x14004ea39], 0
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 9
call fcn.140001000
mov rcx, rbx
call fcn.14000c880
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c292
lea rdx, str.Elevation_canceled.
call fcn.1400137e0
mov rsi, qword [rsp + 0x60]
cmp byte [0x14004e408], 0
jne 0x14000b0ce
lea rdx, [rsp + 0x290]
mov byte [rdx], 0
lea rcx, str.succeeded
xor r8d, r8d
call fcn.14000cda0
mov ecx, dword [0x14004fe88]
mov edx, dword [0x14004cde8]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
test al, al
je 0x14000b0b7
cmp byte [rsp + 0x290], 0
je 0x14000b0b7
cmp ecx, edx
jg 0x14000c2d3
lea rdx, str.Running_LaunchWinPostProcess
call fcn.1400137e0
call fcn.140006f30
test al, al
jne 0x14000b0ce
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c3d3
lea r14, str.Failed_to_run_LaunchWinPostProcess
mov rsi, qword [rsp + 0x60]
jmp 0x14000b0c6
cmp ecx, edx
jg 0x14000c314
lea r14, str.Not_running_LaunchWinPostProcess_because_update_status_is_notsucceeded.
mov rdx, r14
call fcn.1400137e0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c0cb
lea rdx, str.Update_complete
call fcn.1400137e0
call fcn.140007a80
xor ebx, ebx
cmp r13d, 7
jl 0x14000ac4e
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
call fcn.140007cb0
jmp 0x14000ac4e
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.140037390
test eax, eax
je 0x14000ad0b
lea rdx, [0x140043fee]
lea rcx, [rsp + 0xd30]
call fcn.140020e24
test rax, rax
je 0x14000ad0b
mov r14, rax
lea rcx, [rsp + 0x6d0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140022994
cmp rax, 1
sete sil
jne 0x14000b1a6
mov byte [rsp + 0x6f4], 0
mov rcx, r14
call fcn.1400222a4
test eax, eax
je 0x14000ad0d
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c634
lea rdx, str.File_close_did_not_execute_successfully
call fcn.1400137e0
jmp 0x14000ad0d
xor eax, eax
lea r8, [rsp + 0x290]
mov byte [r8], al
mov byte [r8 + 4], al
lea rcx, [0x1400418d4]
lea rdx, [rsp + 0xd30]
call fcn.14000cda0
test al, al
je 0x14000aa1c
cmp byte [rsp + 0xd30], 0
je 0x14000aa1c
cmp byte [rsp + 0x294], 0
je 0x14000aa1c
mov eax, dword [rsp + 0x290]
lea ecx, [rax - 0x18]
cmp ecx, 0xa
jb 0x14000b250
add eax, 0xffffffcf
cmp eax, 9
ja 0x14000aa1c
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c675
lea rdx, str.Service_specific_failure_detected._useServicefalse
call fcn.1400137e0
mov r13, qword [rsp + 0x50]
jmp 0x14000ab53
mov rcx, r13
mov rdx, rbp
call fcn.140024024
test rax, rax
je 0x14000b37d
mov r12, rax
cmp word [r13 + rax*2 - 2], 0x5c
jne 0x14000b385
mov rcx, r14
mov rdx, r13
mov r8, r12
call fcn.140020c40
test eax, eax
jne 0x14000b3ee
mov r12b, 1
jmp 0x14000a3af
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.140037390
test eax, eax
je 0x14000a6d8
lea rdx, [0x140043fee]
lea rcx, [rsp + 0xd30]
call fcn.140020e24
test rax, rax
je 0x14000a6d8
mov r14, rax
lea rcx, [rsp + 0x80]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140022994
cmp rax, 1
sete sil
jne 0x14000b337
mov byte [rsp + 0xa4], 0
mov rcx, r14
call fcn.1400222a4
test eax, eax
je 0x14000a6da
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c6b6
lea rdx, str.File_close_did_not_execute_successfully
call fcn.1400137e0
jmp 0x14000a6da
xor r12d, r12d
jmp 0x14000a3af
lea rax, [r12 + 1]
mov qword [rsp + 0x68], rax
lea rax, [r12*2 + 4]
add r12, 2
mov rbp, 0xffffffffffffffff
cmovns rbp, rax
mov rcx, rbp
call fcn.140015294
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call fcn.1400170d0
mov rcx, rbx
mov rdx, r12
mov r9, r13
call fcn.1400139b0
mov rcx, r14
mov rdx, rbx
mov r8, qword [rsp + 0x68]
call fcn.140020c40
mov ebp, eax
mov rcx, rbx
call fcn.140015494
test ebp, ebp
je 0x14000b2c5
mov r12b, 1
xor esi, esi
jmp 0x14000a3af
mov rcx, r14
call fcn.1400222a4
test eax, eax
je 0x14000b435
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c738
lea rdx, str.File_close_did_not_execute_successfully
call fcn.1400137e0
mov r13, rsi
jmp 0x14000b00e
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.140037390
test eax, eax
je 0x14000aa06
lea rdx, [0x140043fee]
lea rcx, [rsp + 0xd30]
call fcn.140020e24
test rax, rax
je 0x14000aa06
mov r14, rax
lea rcx, [rsp + 0x6d0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140022994
cmp rax, 1
jne 0x14000b82a
mov byte [rsp + 0x6f4], 0
mov rcx, r14
call fcn.1400222a4
test eax, eax
je 0x14000b4e4
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c7ba
lea rdx, str.File_close_did_not_execute_successfully
call fcn.1400137e0
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x6d0]
mov r8d, 0x25
call fcn.1400238b0
test eax, eax
jne 0x14000aa06
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c83c
lea rdx, str.The_secure_ID_hasnt_changed_after_launching_the_updater_using_the_service
call fcn.1400137e0
mov byte [0x14004ea39], 0
jmp 0x14000aa1c
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008605
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140008605
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000867d
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000867d
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400086ca
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x1400086ca
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008709
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140008709
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008748
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140008748
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008783
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140008783
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008809
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140008809
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008881
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140008881
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400088b9
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x1400088b9
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400088f1
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x1400088f1
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008058
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140008058
lea rcx, [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r13, rbp
mov r12, qword [rsp + 0x58]
jmp 0x140009d58
mov rcx, r14
call fcn.1400222a4
test eax, eax
je 0x14000aa06
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c7fb
lea rdx, str.File_close_did_not_execute_successfully
call fcn.1400137e0
jmp 0x14000aa06
lea rcx, [0x14004fe88]
call fcn.140015660
lea r14, str.Performing_a_staged_update
jmp 0x14000b8d9
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008adc
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140008adc
lea rcx, [0x14004fe88]
call fcn.140015660
lea r14, str.Performing_a_replace_request
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008854
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140008854
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400089de
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x1400089de
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008d0d
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140008d0d
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008c92
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140008c92
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008d76
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140008d76
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009b3d
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009b3d
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008e15
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140008e15
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008a49
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140008a49
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009b74
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009b74
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009317
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009317
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400099bf
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x1400099bf
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009346
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009346
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000978d
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000978d
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400095a6
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x1400095a6
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009bb9
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009bb9
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009d6a
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009d6a
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009749
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009749
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400099f0
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x1400099f0
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009185
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009185
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009bf3
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009bf3
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400096e5
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x1400096e5
lea rcx, [0x14004fe88]
call fcn.140015660
lea rbx, str.NS_main:_directory_will_be_removed_on_OS_reboot:__S
jmp 0x14000becf
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009c31
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009c31
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000911f
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000911f
lea rcx, [0x14004fe88]
call fcn.140015660
lea rbx, str.NS_main:_failed_to_schedule_OS_reboot_removal_of_directory:__S
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009b09
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009b09
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009dfe
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009dfe
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009f1f
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009f1f
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a10f
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000a10f
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000abab
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000abab
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000ac1d
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000ac1d
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a1b6
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000a1b6
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009fae
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009fae
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b0fc
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000b0fc
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000ac8b
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000ac8b
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009eb1
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x140009eb1
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000adbb
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000adbb
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000adff
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000adff
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a043
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000a043
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a0b9
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000a0b9
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b002
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000b002
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b06f
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000b06f
lea rcx, [0x14004fe88]
call fcn.140015660
lea r14, str.Not_running_LaunchWinPostProcess_because_update_status_is_notsucceeded.
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b0c6
jmp 0x14000c3f8
lea rcx, [0x14004fe88]
call fcn.140015660
lea r14, str.Launching_service_failed._useServicefalse
jmp 0x14000c474
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a801
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000a801
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a880
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000a880
lea rcx, [0x14004fe88]
call fcn.140015660
lea r14, str.Failed_to_run_LaunchWinPostProcess
cmp dword [0x14004fe88], 0xffffffff
mov rsi, qword [rsp + 0x60]
jne 0x14000b0c6
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000b0c6
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a97a
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000a97a
lea rcx, [0x14004fe88]
call fcn.140015660
lea r14, str.Service_didnt_stop_after_10_minutes._useServicefalse
cmp dword [0x14004fe88], 0xffffffff
mov r13, qword [rsp + 0x50]
jne 0x14000ab4b
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000ab4b
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000aa41
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000aa41
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000aa72
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000aa72
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000aaaa
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000aaaa
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000aae2
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000aae2
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000ab1a
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000ab1a
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a5e7
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000a5e7
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b1db
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000b1db
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b275
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000b275
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b36c
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000b36c
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000af3d
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000af3d
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b429
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000b429
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000af94
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000af94
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b4d8
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000b4d8
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b85f
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000b85f
lea rcx, [0x14004fe88]
call fcn.140015660
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b52c
mov qword [0x14004fc78], 0
lea rcx, [0x140003af0]
call fcn.1400157f8
lea rcx, [0x14004fe88]
call fcn.1400156c8
jmp 0x14000b52c