Function at 0x1400a9560
Capabilities:
Access the windows event log

Disassembly:
push rbp
push rsi
push r13
push r14
push r15
lea rbp, [rsp - 0xa60]
sub rsp, 0xb60
mov rax, qword [0x140277eb8]
xor rax, rsp
mov qword [rbp + 0xa50], rax
xor r13d, r13d
mov qword [rbp - 0x80], rcx
mov dword [rsp + 0x54], r13d
lea rsi, [rcx + 0x30]
mov rdx, qword [rsi + 0x10]
lea rcx, [rbp + 0x9b0]
movdqa xmm0, xmmword [0x14020b430]
add rdx, 0xb
mov r14d, r13d
mov word [rbp + 0x9b0], r13w
xor r15b, r15b
movdqu xmmword [rbp + 0x9c0], xmm0
call fcn.14004c1f0
cmp qword [rsi + 0x18], 8
mov r9, rsi
jb 0x1400a95d8
mov r9, qword [rsi]
mov r8, qword [rbp + 0x9c8]
mov rcx, qword [rbp + 0x9c0]
mov rax, r8
mov rdx, qword [rsi + 0x10]
sub rax, rcx
mov qword [rsp + 0xb98], rbx
mov qword [rsp + 0xba0], rdi
cmp rdx, rax
ja 0x1400a963a
lea rdi, [rcx + rdx]
cmp r8, 8
lea r8, [rdx + rdx]
mov qword [rbp + 0x9c0], rdi
lea rbx, [rbp + 0x9b0]
mov rdx, r9
cmovae rbx, qword [rbp + 0x9b0]
lea rcx, [rbx + rcx*2]
call fcn.140186ec0
mov word [rbx + rdi*2], r13w
jmp 0x1400a9651
lfence
xor r8d, r8d
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x9b0]
call fcn.140037d80
mov rdx, qword [rbp + 0x9c8]
mov rcx, qword [rbp + 0x9c0]
mov rax, rdx
sub rax, rcx
cmp rax, 0xb
jb 0x1400a96a6
cmp rdx, 8
lea rdi, [rcx + 0xb]
lea rbx, [rbp + 0x9b0]
mov qword [rbp + 0x9c0], rdi
cmovae rbx, qword [rbp + 0x9b0]
lea rdx, str._SelfUpdate
mov r8d, SafeArrayPutElement
lea rcx, [rbx + rcx*2]
call fcn.140186ec0
mov word [rbx + rdi*2], r13w
jmp 0x1400a96cc
lfence
xor r8d, r8d
mov qword [rsp + 0x20], reloc.WS2_32.dll_inet_addr
lea r9, str._SelfUpdate
lea rcx, [rbp + 0x9b0]
lea edx, [r8 + 0xb]
call fcn.140037d80
mov rdx, qword [rbp + 0x9c8]
mov rcx, qword [rbp + 0x9c0]
mov rax, rdx
sub rax, rcx
cmp rax, 0x27
jb 0x1400a9728
cmp rdx, 8
lea rdi, [rcx + 0x27]
lea rbx, [rbp + 0x9b0]
mov qword [rbp + 0x9c0], rdi
cmovae rbx, qword [rbp + 0x9b0]
lea rdx, str._B2FE1952_0186_46C3_BAEC_A80AA35AC5B8
mov r8d, 0x4e
lea rcx, [rbx + rcx*2]
call fcn.140186ec0
lea rax, [rbp + 0x9b0]
mov word [rbx + rdi*2], r13w
jmp 0x1400a974e
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 0x27
lea r9, str._B2FE1952_0186_46C3_BAEC_A80AA35AC5B8
lea rcx, [rbp + 0x9b0]
lea edx, [r8 + 0x27]
call fcn.140037d80
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov rdx, qword [rbp + 0x9c8]
movups xmmword [rbp + 0xa30], xmm0
movups xmmword [rbp + 0xa40], xmm1
cmp rdx, 8
jb 0x1400a97b9
mov rcx, qword [rbp + 0x9b0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a97b4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400aa3c9
call fcn.140156f20
mov rdx, qword [rsi + 0x10]
lea rcx, [rbp + 0x9f0]
movdqa xmm0, xmmword [0x14020b430]
add rdx, 0x12
movdqu xmmword [rbp + 0x9c0], xmm0
mov word [rbp + 0x9b0], r13w
mov qword [rbp + 0xa00], r13
mov qword [rbp + 0xa08], 7
mov word [rbp + 0x9f0], r13w
call fcn.14004c1f0
cmp qword [rsi + 0x18], 8
mov r9, rsi
jb 0x1400a980c
mov r9, qword [rsi]
mov r8, qword [rbp + 0xa08]
mov rcx, qword [rbp + 0xa00]
mov rax, r8
mov rdx, qword [rsi + 0x10]
sub rax, rcx
cmp rdx, rax
ja 0x1400a985e
lea rdi, [rcx + rdx]
cmp r8, 8
lea r8, [rdx + rdx]
mov qword [rbp + 0xa00], rdi
lea rbx, [rbp + 0x9f0]
mov rdx, r9
cmovae rbx, qword [rbp + 0x9f0]
lea rcx, [rbx + rcx*2]
call fcn.140186ec0
mov word [rbx + rdi*2], r13w
jmp 0x1400a9875
lfence
xor r8d, r8d
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x9f0]
call fcn.140037d80
mov rdx, qword [rbp + 0xa08]
mov rcx, qword [rbp + 0xa00]
mov rax, rdx
sub rax, rcx
cmp rax, 0x12
jb 0x1400a98ca
cmp rdx, 8
lea rdi, [rcx + 0x12]
lea rbx, [rbp + 0x9f0]
mov qword [rbp + 0xa00], rdi
cmovae rbx, qword [rbp + 0x9f0]
lea rdx, str._SelfUpdate_Source
mov r8d, 0x24
lea rcx, [rbx + rcx*2]
call fcn.140186ec0
mov word [rbx + rdi*2], r13w
jmp 0x1400a98f0
lfence
xor r8d, r8d
mov qword [rsp + 0x20], SafeArrayPutElement
lea r9, str._SelfUpdate_Source
lea rcx, [rbp + 0x9f0]
lea edx, [r8 + 0x12]
call fcn.140037d80
mov rdx, qword [rsi + 0x10]
lea rbx, [rsi + 0x10]
add rdx, 0x14
mov qword [rbp + 0x9e0], r13
lea rcx, [rbp + 0x9d0]
mov qword [rbp + 0x9e8], 7
mov word [rbp + 0x9d0], r13w
call fcn.14004c1f0
cmp qword [rsi + 0x18], 8
jb 0x1400a992c
mov rsi, qword [rsi]
mov r8, qword [rbp + 0x9e8]
mov rcx, qword [rbp + 0x9e0]
mov rax, r8
mov rdx, qword [rbx]
sub rax, rcx
cmp rdx, rax
ja 0x1400a997d
lea rdi, [rcx + rdx]
cmp r8, 8
lea r8, [rdx + rdx]
mov qword [rbp + 0x9e0], rdi
lea rbx, [rbp + 0x9d0]
mov rdx, rsi
cmovae rbx, qword [rbp + 0x9d0]
lea rcx, [rbx + rcx*2]
call fcn.140186ec0
mov word [rbx + rdi*2], r13w
jmp 0x1400a9997
lfence
mov r9, rsi
mov qword [rsp + 0x20], rdx
xor r8d, r8d
lea rcx, [rbp + 0x9d0]
call fcn.140037d80
mov rdx, qword [rbp + 0x9e8]
mov rcx, qword [rbp + 0x9e0]
mov rax, rdx
sub rax, rcx
cmp rax, 0x14
jb 0x1400a99ec
cmp rdx, 8
lea rdi, [rcx + 0x14]
lea rbx, [rbp + 0x9d0]
mov qword [rbp + 0x9e0], rdi
cmovae rbx, qword [rbp + 0x9d0]
lea rdx, str._SelfUpdate_Launched
mov r8d, 0x28
lea rcx, [rbx + rcx*2]
call fcn.140186ec0
mov word [rbx + rdi*2], r13w
jmp 0x1400a9a12
lfence
xor r8d, r8d
mov qword [rsp + 0x20], SafeArrayPutElement
lea r9, str._SelfUpdate_Launched
lea rcx, [rbp + 0x9d0]
lea edx, [r8 + 0x14]
call fcn.140037d80
xor edx, edx
mov qword [rsp + 0xba8], r12
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov ebx, eax
test eax, eax
jns 0x1400a9a90
call sub.libcef.dll_cef_get_min_log_level
cmp eax, 1
jg 0x1400a9a75
lfence
mov esi, 1
lea rdx, str.D:uworkspace03_27cefwinauto_src_selfupdate_helper_win.cc
mov r9d, esi
lea rcx, [rbp + 0xb0]
mov r8d, reloc.OLEAUT32.dll_SetErrorInfo
call fcn.1400c64e0
lea rdx, str.CoInitializeEx_failed:
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov edx, ebx
call fcn.1400503b0
mov r14d, esi
test r14b, 1
je 0x1400aa27b
lea rcx, [rbp + 0xb0]
call fcn.1400c6840
jmp 0x1400aa27b
mov qword [rsp + 0x40], r13
mov eax, 3
mov dword [rsp + 0x38], r13d
xor r9d, r9d
mov qword [rsp + 0x30], r13
xor r8d, r8d
mov dword [rsp + 0x28], eax
xor ecx, ecx
lea edx, [rax - 4]
mov dword [rsp + 0x20], 6
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
mov ebx, eax
test eax, eax
jns 0x1400a9b30
call sub.libcef.dll_cef_get_min_log_level
cmp eax, 1
jg 0x1400a9b13
lfence
mov r9d, 1
lea rdx, str.D:uworkspace03_27cefwinauto_src_selfupdate_helper_win.cc
mov r8d, QISearch
lea rcx, [rbp + 0x1b0]
call fcn.1400c64e0
lea rdx, str.CoInitializeSecurity_failed:
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov edx, ebx
call fcn.1400503b0
mov r14d, 2
test r14b, 2
je 0x1400a9b25
lea rcx, [rbp + 0x1b0]
call fcn.1400c6840
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1400aa27b
lea rax, [rsp + 0x60]
mov qword [rsp + 0x60], r13
mov esi, 1
mov qword [rsp + 0x20], rax
mov r8d, esi
lea r9, [0x140218600]
xor edx, edx
lea rcx, [0x1402187a0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
test eax, eax
jns 0x1400a9bc8
call sub.libcef.dll_cef_get_min_log_level
cmp eax, esi
jg 0x1400a9bab
lfence
mov r9d, esi
lea rdx, str.D:uworkspace03_27cefwinauto_src_selfupdate_helper_win.cc
mov r8d, 0xe7
lea rcx, [rbp + 0x2b0]
call fcn.1400c64e0
lea rdx, str.Failed_to_CoCreate_an_instance_of_the_TaskService_class:
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov edx, ebx
call fcn.1400503b0
mov r14d, 4
test r14b, 4
je 0x1400a9bbd
lea rcx, [rbp + 0x2b0]
call fcn.1400c6840
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1400aa27b
lea rcx, [rbp - 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
movups xmm0, xmmword [rbp - 0x58]
lea rcx, [rbp - 0x10]
movsd xmm1, qword [rbp - 0x48]
movaps xmmword [rbp + 0x10], xmm0
movsd qword [rbp + 0x20], xmm1
call qword [sym.imp.OLEAUT32.dll_VariantClear]
movups xmm0, xmmword [rbp - 0x10]
lea rcx, [rbp - 0x28]
movsd xmm1, qword [rbp]
movaps xmmword [rbp + 0x30], xmm0
movsd qword [rbp + 0x40], xmm1
call qword [sym.imp.OLEAUT32.dll_VariantClear]
movups xmm0, xmmword [rbp - 0x28]
lea rcx, [rbp - 0x40]
movsd xmm1, qword [rbp - 0x18]
movaps xmmword [rbp + 0x50], xmm0
movsd qword [rbp + 0x60], xmm1
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x60]
lea rdx, [rbp + 0x10]
movups xmm0, xmmword [rbp - 0x40]
lea r9, [rbp + 0x30]
mov qword [rsp + 0x20], rdx
movsd xmm1, qword [rbp - 0x30]
lea r8, [rbp + 0x50]
mov rax, qword [rcx]
lea rdx, [rbp + 0x70]
movaps xmmword [rbp + 0x70], xmm0
movsd qword [rbp + 0x80], xmm1
call qword [rax + 0x50]
lea rcx, [rbp - 0x40]
mov ebx, eax
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
lea rcx, [rbp - 0x28]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
lea rcx, [rbp - 0x10]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
lea rcx, [rbp - 0x58]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, ebx
jns 0x1400a9cf9
call sub.libcef.dll_cef_get_min_log_level
cmp eax, esi
jg 0x1400a9cd1
lfence
mov r9d, esi
lea rdx, str.D:uworkspace03_27cefwinauto_src_selfupdate_helper_win.cc
mov r8d, 0xf1
lea rcx, [rbp + 0x3b0]
call fcn.1400c64e0
lea rdx, str.ITaskService::Connect_failed:
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov edx, ebx
call fcn.1400503b0
mov r14d, 8
test r14b, 8
je 0x1400a9ce3
lea rcx, [rbp + 0x3b0]
call fcn.1400c6840
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1400aa27b
mov ecx, SafeArrayPutElement
mov qword [rsp + 0x70], r13
call fcn.140156ee4
mov rbx, rax
test rax, rax
je 0x1400a9d32
lea rcx, [0x14020bc44]
mov qword [rax + 8], r13
mov dword [rax + 0x10], esi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x1400aa3be
jmp 0x1400a9d35
mov rbx, r13
mov qword [rbp + 8], rbx
test rbx, rbx
je 0x1400aa3be
mov rcx, qword [rsp + 0x60]
lea r8, [rsp + 0x70]
mov rdx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + 0x38]
mov edi, eax
mov ecx, 0xffffffff
lock xadd dword [rbx + 0x10], ecx
cmp ecx, esi
jne 0x1400a9d95
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400a9d76
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400a9d88
call fcn.140156f28
mov qword [rbx + 8], r13
mov edx, SafeArrayPutElement
mov rcx, rbx
call fcn.140156f20
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + 0x10]
test edi, edi
jns 0x1400a9e09
call sub.libcef.dll_cef_get_min_log_level
cmp eax, esi
jg 0x1400a9dec
lfence
mov r9d, esi
lea rdx, str.D:uworkspace03_27cefwinauto_src_selfupdate_helper_win.cc
mov r8d, 0xfe
lea rcx, [rbp + 0x4b0]
call fcn.1400c64e0
lea rdx, str.Cannot_get_Root_Folder_pointer:
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov edx, edi
call fcn.1400503b0
mov r14d, 0x10
test r14b, 0x10
je 0x1400a9dfe
lea rcx, [rbp + 0x4b0]
call fcn.1400c6840
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1400aa27b
mov rcx, qword [rsp + 0x70]
lea r8, [rsp + 0x68]
mov qword [rsp + 0x68], r13
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x70]
mov rcx, qword [rsp + 0x70]
mov ebx, eax
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test ebx, ebx
jns 0x1400a9e96
call sub.libcef.dll_cef_get_min_log_level
cmp eax, esi
jg 0x1400a9e79
lfence
mov r9d, esi
lea rdx, str.D:uworkspace03_27cefwinauto_src_selfupdate_helper_win.cc
mov r8d, 0x10a
lea rcx, [rbp + 0x5b0]
call fcn.1400c64e0
lea rdx, str.Cannot_get_the_registered_tasks.:
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov edx, ebx
call fcn.1400503b0
mov r14d, 0x20
test r14b, 0x20
je 0x1400a9e8b
lea rcx, [rbp + 0x5b0]
call fcn.1400c6840
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1400aa27b
mov rcx, qword [rsp + 0x68]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x50], r13d
mov rax, qword [rcx]
call qword [rax + 0x38]
mov eax, dword [rsp + 0x50]
test eax, eax
jne 0x1400a9f16
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x1400a9eee
xor r9d, r9d
lea rdx, str.D:uworkspace03_27cefwinauto_src_selfupdate_helper_win.cc
mov r8d, 0x113
lea rcx, [rbp + 0x6b0]
call fcn.1400c64e0
lea rdx, str.No_Tasks_are_currently_running
lea rcx, [rax + 8]
call fcn.1400025c0
mov r14d, 0x40
test r14b, 0x40
je 0x1400a9f00
lea rcx, [rbp + 0x6b0]
call fcn.1400c6840
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1400aa27b
xor r12b, r12b
nop dword [rax]
cmp r13d, eax
jge 0x1400aa1f3
mov rcx, qword [rsp + 0x68]
lea r8, [rsp + 0x58]
movsd xmm1, qword [rbp - 0x60]
lea rdx, [rbp + 0x90]
xor edi, edi
movsd qword [rbp + 0xa0], xmm1
mov eax, 3
mov qword [rsp + 0x58], rdi
mov word [rbp - 0x70], ax
inc r13d
mov dword [rbp - 0x68], r13d
movups xmm0, xmmword [rbp - 0x70]
mov rax, qword [rcx]
movaps xmmword [rbp + 0x90], xmm0
call qword [rax + 0x40]
lea rcx, [rbp - 0x70]
mov ebx, eax
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
test ebx, ebx
js 0x1400aa1e5
mov rcx, qword [rsp + 0x58]
lea rdx, [rsp + 0x78]
mov qword [rsp + 0x78], rdi
mov rax, qword [rcx]
call qword [rax + 0x38]
test eax, eax
js 0x1400aa1da
mov rdx, qword [rsp + 0x78]
mov r8, 0xffffffffffffffff
mov qword [rbp + 0xa20], rdi
mov qword [rbp + 0xa28], 7
mov word [rbp + 0xa10], di
inc r8
cmp word [rdx + r8*2], di
jne 0x1400a9fc5
lea rcx, [rbp + 0xa10]
call fcn.1400258a0
cmp qword [rbp + 0xa48], 8
lea rcx, [rbp + 0xa30]
mov r10, qword [rbp + 0xa28]
lea r8, [rbp + 0xa10]
cmovae rcx, qword [rbp + 0xa30]
cmp r10, 8
mov r9, qword [rbp + 0xa10]
mov rdx, qword [rbp + 0xa20]
cmovae r8, r9
cmp rdx, qword [rbp + 0xa40]
jne 0x1400aa049
test rdx, rdx
je 0x1400aa043
sub r8, rcx
nop word [rax + rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x1400aa049
add rcx, 2
sub rdx, rsi
jne 0x1400aa030
movzx ebx, sil
jmp 0x1400aa04b
xor bl, bl
cmp r10, 8
jb 0x1400aa086
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x1400aa07e
mov r9, qword [r9 - 8]
add rdx, 0x27
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400aa3cf
mov rcx, r9
call fcn.140156f20
test bl, bl
je 0x1400aa1cf
mov rcx, qword [rsp + 0x58]
lea rdx, [rsp + 0x54]
movzx r12d, sil
mov rax, qword [rcx]
call qword [rax + 0x48]
test eax, eax
js 0x1400aa1cf
mov eax, dword [rsp + 0x54]
cmp eax, 3
jne 0x1400aa1c4
mov rcx, qword [rbp - 0x80]
call fcn.1400a8f50
mov rbx, rax
test rax, rax
je 0x1400aa1cf
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ResetEvent]
cmp qword [rbp + 0xa08], 8
lea rdx, [rbp + 0x9f0]
cmovae rdx, qword [rbp + 0x9f0]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceW]
cmp qword [rbp + 0x9e8], 8
lea rcx, [rbp + 0x9d0]
mov rdi, rax
lea rax, [rbp - 0x78]
cmovae rcx, qword [rbp + 0x9d0]
xor r8d, r8d
mov qword [rbp - 0x78], rcx
xor edx, edx
xor ecx, ecx
xor r9d, r9d
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], ecx
mov word [rsp + 0x28], si
mov qword [rsp + 0x20], rcx
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_ReportEventW]
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x1400aa186
xor r9d, r9d
lea rdx, str.D:uworkspace03_27cefwinauto_src_selfupdate_helper_win.cc
mov r8d, 0x134
lea rcx, [rbp + 0x7b0]
bts r14d, 7
call fcn.1400c64e0
lea rdx, str.Triggering_Application_Event_hEventLog_
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
mov rdx, rdi
call fcn.140008c10
test r14b, r14b
jns 0x1400aa19c
btr r14d, 7
lea rcx, [rbp + 0x7b0]
call fcn.1400c6840
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_DeregisterEventSource]
mov edx, 0x7d0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
mov rcx, rbx
sete r15b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400aa1cf
cmp eax, 4
movzx r15d, r15b
cmove r15d, esi
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12b, r12b
jne 0x1400aa1f3
mov eax, dword [rsp + 0x50]
jmp 0x1400a9f20
call sub.libcef.dll_cef_get_min_log_level
test eax, eax
jg 0x1400aa254
xor r9d, r9d
lea rdx, str.D:uworkspace03_27cefwinauto_src_selfupdate_helper_win.cc
mov r8d, 0x149
lea rcx, [rbp + 0x8b0]
bts r14d, 8
call fcn.1400c64e0
lea rdx, str.RunSelfUpdateTask:_foundTask_
lea rcx, [rax + 8]
call fcn.1400025c0
mov rcx, rax
movzx edx, r12b
call fcn.1400a74e0
mov rcx, rax
lea rdx, str._succeded_
call fcn.1400025c0
mov rcx, rax
movzx edx, r15b
call fcn.1400a74e0
bt r14d, 8
jae 0x1400aa267
lea rcx, [rbp + 0x8b0]
call fcn.1400c6840
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + 0x10]
call qword [sym.imp.ole32.dll_CoUninitialize]
xor r13d, r13d
mov rdx, qword [rbp + 0x9e8]
cmp rdx, 8
jb 0x1400aa2c1
mov rcx, qword [rbp + 0x9d0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aa2bc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400aa3b8
call fcn.140156f20
mov rdx, qword [rbp + 0xa08]
mov qword [rbp + 0x9e0], r13
mov qword [rbp + 0x9e8], 7
mov word [rbp + 0x9d0], r13w
cmp rdx, 8
jb 0x1400aa321
mov rcx, qword [rbp + 0x9f0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aa31c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400aa3b8
call fcn.140156f20
mov rdx, qword [rbp + 0xa48]
mov qword [rbp + 0xa00], r13
mov qword [rbp + 0xa08], 7
mov word [rbp + 0x9f0], r13w
cmp rdx, 8
jb 0x1400aa37d
mov rcx, qword [rbp + 0xa30]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aa378
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400aa3b8
call fcn.140156f20
mov r12, qword [rsp + 0xba8]
movzx eax, r15b
mov rdi, qword [rsp + 0xba0]
mov rbx, qword [rsp + 0xb98]
mov rcx, qword [rbp + 0xa50]
xor rcx, rsp
call fcn.140156fc0
add rsp, 0xb60
pop r15
pop r14
pop r13
pop rsi
pop rbp
ret
call fcn.1401953dc
int3
mov ecx, 0x8007000e
call fcn.140158b70
int3
call fcn.1401953dc
int3
call fcn.1401953dc
int3