Function at 0x140005ab0
Capabilities:
Copy file
Create directory
Create process on windows
Read file on windows
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1198
call fcn.140020120
sub rsp, rax
mov rax, qword [0x140038010]
xor rax, rsp
mov qword [rsp + 0x1190], rax
cmp ecx, 2
jg 0x140005b18
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400065bd
lea rcx, [0x140039fa8]
lea rdx, str.Not_enough_command_line_arguments_to_execute_a_service_command
jmp 0x140005c9a
mov rsi, rdx
mov edi, ecx
lea rbx, [rsp + 0xb40]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14000ff90
mov rcx, rbx
call fcn.14000e190
mov ebx, eax
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400065fe
mov r8, qword [rsi + 0x10]
lea rcx, [0x140039fa8]
test ebx, ebx
je 0x140005b89
lea rdx, str.Executing_service_command__ls__ID:__ls
lea r9, [rsp + 0xb40]
call fcn.14000cc50
jmp 0x140005b95
lea rdx, str.Executing_service_command__ls
call fcn.14000cc50
mov rcx, qword [rsi + 0x10]
lea rdx, str.software_update
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x140005c06
mov rcx, qword [rsi + 0x10]
lea rdx, str.fix_update_directory_perms
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x140005ca6
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006680
mov r8, qword [rsi + 0x10]
lea rcx, [0x140039fa8]
lea rdx, str.Service_command_not_recognized:__ls.
call fcn.14000ccd0
xor edi, edi
jmp 0x140005d8f
cmp edi, 4
jl 0x140005c67
mov rcx, qword [rsi + 0x20]
call fcn.14000cd80
test al, al
je 0x140005c67
lea rbp, [rsi + 0x20]
mov rbx, qword [rbp]
mov rcx, rbx
call fcn.1400174c8
cmp rax, 9
ja 0x140005e05
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000699b
lea rcx, [0x140039fa8]
lea rdx, str.The_patch_directory_path_length_is_not_valid_for_this_application.
jmp 0x140005c9a
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400066c1
lea rcx, [0x140039fa8]
lea rdx, str.The_patch_directory_path_is_not_valid_for_this_application.
call fcn.14000ccd0
xor edi, edi
jmp 0x140005ddf
mov qword [rsp + 0xf80], 0
cmp edi, 3
jg 0x140005cf3
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006919
lea rcx, [0x140039fa8]
lea rdx, str.Didnt_get_an_install_dir_for_fix_update_directory_perms
call fcn.14000ccd0
xor ecx, ecx
jmp 0x140005cf7
mov rcx, qword [rsi + 0x18]
lea rax, [rsp + 0xf80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call fcn.140008e60
test eax, eax
js 0x140005d2c
mov edi, 1
mov rbx, qword [rsp + 0xf80]
jmp 0x140005d76
mov edi, eax
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000695a
mov rbx, qword [rsp + 0xf80]
lea rcx, [0x140039fa8]
lea rdx, str.Unable_to_set_the_permissions_on_the_update_directory___S_:__d
mov r8, rbx
mov r9d, edi
call fcn.14000ccd0
xor edi, edi
mov qword [rsp + 0xf80], 0
test rbx, rbx
je 0x140005d8f
mov rcx, rbx
call fcn.14000e3a4
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000663f
test edi, edi
lea rax, str.Failure
lea r9, str.Success
cmove r9, rax
mov r8, qword [rsi + 8]
lea rcx, [0x140039fa8]
lea rdx, str.service_command__ls_complete_with_result:__ls.
call fcn.14000cc50
mov rcx, qword [rsp + 0x1190]
xor rcx, rsp
call fcn.1400193c0
mov eax, edi
add rsp, 0x1198
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rbx + rax*2]
add rcx, 0xffffffffffffffec
lea rdx, str.updates0
mov r8d, 0xa
call fcn.140015b9c
test eax, eax
je 0x140005e5b
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006a25
lea rcx, [0x140039fa8]
lea rdx, str.The_patch_directory_path_subdirectory_is_not_valid_for_this_application.
jmp 0x140005c9a
mov rcx, qword [rbp]
call fcn.14000d4e0
mov rcx, qword [rbp]
call fcn.14000d360
test eax, eax
je 0x140005f3f
cmp edi, 5
jl 0x140005eb2
mov rcx, qword [rsi + 0x28]
call fcn.14000cd80
test al, al
je 0x140005eb2
lea r12d, [rdi - 3]
cmp r12d, 4
jne 0x140005f77
mov rcx, qword [rsi + 0x30]
lea rdx, [0x140031414]
call fcn.140017474
test eax, eax
jne 0x140005f79
jmp 0x140006124
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006be7
lea rcx, [0x140039fa8]
lea rdx, str.The_install_directory_path_is_not_valid_for_this_application.
call fcn.14000ccd0
mov rcx, qword [rbp]
mov edx, 0x37
call fcn.14000dbf0
xor edi, edi
test eax, eax
jne 0x140005ddf
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006c69
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_for_previous_failure.
call fcn.14000ccd0
jmp 0x140005ddf
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006c28
lea rcx, [0x140039fa8]
lea rdx, str.Unable_to_write_to_secure_ID_file.
jmp 0x140005c9a
jl 0x140005faf
mov rcx, qword [rsi + 0x30]
lea rdx, str._replace
call fcn.140010268
test rax, rax
jne 0x140006124
mov rbx, qword [rsi + 0x30]
movzx ecx, word [rbx]
test cx, cx
je 0x140006124
add rbx, 2
call fcn.140017140
test eax, eax
jne 0x140005f96
cmp edi, 6
jl 0x14000602b
mov rcx, qword [rsi + 0x30]
call fcn.14000cd80
test al, al
je 0x14000602b
mov rdx, qword [rsi + 0x28]
mov rcx, qword [rsi + 0x30]
mov r8d, 0x104
call fcn.140015b9c
test eax, eax
je 0x140006124
cmp edi, 7
jge 0x140006071
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007184
lea rcx, [0x140039fa8]
lea rdx, str.Installation_directory_and_working_directory_must_be_the_same_for_non_staged_updates._Exiting.
call fcn.14000ccd0
mov rcx, qword [rbp]
mov edx, 0x36
jmp 0x140005ef3
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006d7e
lea rcx, [0x140039fa8]
lea rdx, str.The_working_directory_path_is_not_valid_for_this_application.
call fcn.14000ccd0
mov rcx, qword [rbp]
mov edx, 0x38
jmp 0x140005ef3
mov rcx, qword [rsi + 0x38]
lea rdx, [0x140031414]
call fcn.140017474
test eax, eax
je 0x14000609e
mov rcx, qword [rsi + 0x38]
lea rdx, str._replace
call fcn.140010268
test rax, rax
je 0x140005fe5
mov r9, qword [rsi + 0x30]
lea r14, [rsp + 0xf80]
mov rcx, r14
call fcn.140007da0
mov rcx, r14
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x140006405
mov rdx, qword [rsi + 0x28]
lea rcx, [rsp + 0xf80]
mov r8d, 0x104
call fcn.140015b9c
test eax, eax
je 0x140006124
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007288
lea rcx, [0x140039fa8]
lea rdx, str.The_apply_to_directory_must_be_the_same_as_or_a_child_of_the_installation_directory__Exiting.
call fcn.14000ccd0
mov rcx, qword [rbp]
mov edx, 0x34
jmp 0x14000628c
lea r14, [rsi + 0x18]
lea rbx, [rsp + 0x930]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14000ff90
mov ecx, r12d
mov rdx, r14
mov r8, rbx
call fcn.140004f10
test eax, eax
je 0x140006240
call fcn.14000def0
test eax, eax
jne 0x1400062e2
lea rcx, [rsp + 0x930]
lea rdx, [rsp + 0xf80]
call fcn.14000bb50
test eax, eax
je 0x140006283
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006e00
lea rcx, [0x140039fa8]
lea rdx, str.Checking_for_Maintenance_Service_registry._key:__ls
lea rbx, [rsp + 0xf80]
mov r8, rbx
call fcn.14000cc50
mov qword [rsp + 0xd50], 0
lea rax, [rsp + 0xd50]
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
mov rdx, rbx
xor r8d, r8d
mov r9d, 0x20119
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x1400062d4
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006e82
lea rcx, [0x140039fa8]
lea rdx, str.The_maintenance_service_registry_key_does_not_exist.
call fcn.14000ccd0
mov rcx, qword [rbp]
mov edx, 0x39
jmp 0x14000628c
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006dbf
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_get_the_installation_directory
call fcn.14000ccd0
mov rcx, qword [rbp]
mov edx, 0x21
jmp 0x14000628c
mov rcx, qword [rbp]
mov edx, 0x35
call fcn.14000dbf0
test eax, eax
jne 0x1400062cd
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006e41
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_for_previous_failure.
call fcn.14000ccd0
xor edi, edi
jmp 0x140005ddf
mov rcx, qword [rsp + 0xd50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rbx, [rsp + 0x720]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14000ff90
lea rdx, [rsp + 0x930]
mov r8d, 0x104
mov rcx, rbx
call fcn.140017990
lea rdx, str.updater.exe
mov rcx, rbx
call fcn.14000e140
test eax, eax
jne 0x14000635b
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400071c5
lea rcx, [0x140039fa8]
lea rdx, str.Install_directory_updater_could_not_be_determined.
call fcn.14000ccd0
mov r8, qword [rbp]
lea rcx, [rsp + 0x720]
lea rdx, [rsp + 0x930]
call fcn.140005050
mov ebx, eax
lea rcx, [rsp + 0x510]
mov r8d, 0x20a
xor edx, edx
call fcn.14000ff90
test bl, bl
je 0x140006495
lea rdx, [rsp + 0x510]
xor ecx, ecx
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x140006454
lea rcx, [rsp + 0x510]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
jne 0x140006563
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007247
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Couldnt_remove_file_spec_when_attempting_to_use_a_secure_updater_path.____d_
jmp 0x14000648d
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400072c9
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Couldnt_remove_file_spec_when_attempting_to_verify_the_working_directory_path.____d_
mov r8d, eax
call fcn.14000ccd0
mov rcx, qword [rbp]
mov edx, 0x47
jmp 0x14000628c
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000730a
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_obtain_module_filename_when_attempting_to_use_a_secure_updater_path.____d_
mov r8d, eax
call fcn.14000ccd0
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007143
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_copy_path_to_secure_location.____d_
mov r8d, eax
call fcn.14000ccd0
mov rcx, qword [rbp]
mov edx, 0x31
call fcn.14000dbf0
xor edi, edi
test eax, eax
jne 0x140006522
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007206
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_could_not_copy_updater_error
call fcn.14000ccd0
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007102
mov r8, qword [rsi + 0x10]
lea rcx, [0x140039fa8]
lea rdx, str.Service_command__ls_complete.
call fcn.14000cc50
jmp 0x140005d8f
lea rdx, [0x140031192]
lea rcx, [rsp + 0x510]
call fcn.14000e140
test eax, eax
jne 0x140006702
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400069e4
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Couldnt_append_file_spec_when_attempting_to_use_a_secure_updater_path.____d_
jmp 0x14000648d
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005b05
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140005b05
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005b64
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140005b64
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005db4
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140005db4
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005be8
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140005be8
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005c8c
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140005c8c
lea r15, [rsp + 0x510]
mov rcx, r15
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rdx, str.updater.exe
mov rcx, r15
call fcn.14000e140
mov ecx, dword [0x14003a1b8]
mov edx, dword [0x140038cbc]
mov rbx, qword gs:[0x58]
mov rdx, qword [rbx + rdx*8]
mov edx, dword [rdx + 4]
test eax, eax
je 0x1400069dc
cmp ecx, edx
jg 0x14000734b
mov r8, qword [r14]
mov qword [rsp + 0x20], r15
lea rcx, [0x140039fa8]
lea rdx, str.Passed_in_path:__ls__ignored___Install_dir_has:__ls__Using_this_path_for_updating:__ls.
lea rbx, [rsp + 0x720]
mov r9, rbx
call fcn.14000cc50
mov rcx, r15
call fcn.140005900
mov rcx, rbx
mov rdx, r15
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x140006495
mov qword [r14], r15
lea rcx, [rsp + 0x300]
mov r8d, 0x20a
xor edx, edx
call fcn.14000ff90
lea rbx, [rsp + 0xf0]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14000ff90
lea r8, str.updater.ini
mov rcx, rbx
mov rdx, r15
call fcn.14000d0b0
test eax, eax
je 0x140006871
lea r8, str.updater.ini
lea rcx, [rsp + 0x300]
lea rdx, [rsp + 0x720]
call fcn.14000d0b0
test eax, eax
je 0x140006871
lea rcx, [rsp + 0x300]
lea rdx, [rsp + 0xf0]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x140006871
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007490
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_copy_updater.ini_from:__ls_to__ls.____d_
lea r8, [rsp + 0x300]
lea r9, [rsp + 0xf0]
call fcn.14000ccd0
cmp r12d, 2
ja 0x140006a66
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000738c
lea rcx, [0x140039fa8]
lea rdx, str.Not_enough_command_line_parameters_specified._Updating_update.status.
call fcn.14000ccd0
cmp r12d, 2
jne 0x1400068d1
mov rcx, qword [rbp]
mov edx, 0x19
call fcn.14000dbf0
xor edi, edi
test eax, eax
jne 0x140006bd5
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400073cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_service_update_failure.____d_
mov r8d, eax
call fcn.14000ccd0
xor edi, edi
jmp 0x140006bd5
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005cdc
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140005cdc
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005d53
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140005d53
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005c57
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140005c57
cmp ecx, edx
jle 0x1400065a4
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400065a4
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x1400065a4
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005e48
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140005e48
lea rbx, [rsp + 0xd50]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14000ff90
mov ecx, r12d
mov rdx, r14
mov r8, rbx
call fcn.140004f10
test eax, eax
je 0x140006b51
mov r8, qword [rbp]
mov rcx, qword [r14]
lea rdx, [rsp + 0xd50]
call fcn.140005050
mov ecx, dword [0x14003a1b8]
mov edx, dword [0x140038cbc]
mov rbx, qword gs:[0x58]
mov rdx, qword [rbx + rdx*8]
mov edx, dword [rdx + 4]
test al, al
jne 0x140006caa
cmp ecx, edx
jg 0x14000740e
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_start_process_due_to_certificate_check_error_on_updater.exe._Updating_update.status.____d_
mov r8d, eax
call fcn.14000ccd0
mov rcx, qword [rbp]
mov edx, 0x1a
call fcn.14000dbf0
xor edi, edi
test eax, eax
jne 0x140006bd5
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400074d1
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_pending_state_to_update.status.____d_
mov r8d, eax
call fcn.14000ccd0
jmp 0x140006bd5
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000744f
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_get_the_installation_directory
call fcn.14000ccd0
mov rcx, qword [rbp]
mov edx, 0x21
call fcn.14000dbf0
xor edi, edi
test eax, eax
jne 0x140006bd5
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007512
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_for_GetInstallationDir_failure.
call fcn.14000ccd0
lea rcx, [rsp + 0x510]
call fcn.140005900
jmp 0x140006522
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005ed7
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140005ed7
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005f64
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140005f64
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005f27
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140005f27
cmp ecx, edx
jg 0x140007553
lea rcx, [0x140039fa8]
lea rdx, str.Starting_update_process_as_the_service_in_session_0.
call fcn.14000cc50
xorps xmm0, xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], 0
movaps xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x80], 0x68
lea rax, str.winsta0Default
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x20], 0
lea rcx, [rsp + 0x58]
mov edx, r12d
mov r8, r14
xor r9d, r9d
call fcn.1400020d0
cmp r12d, 4
jne 0x140006ec3
mov rcx, qword [rsi + 0x30]
lea rdx, [0x140031414]
call fcn.140017474
test eax, eax
jne 0x140006ecb
mov r15d, 2
cmp r15d, r12d
jle 0x140006f0a
jmp 0x140006f2b
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006050
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006050
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006265
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006265
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400061a5
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x1400061a5
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400062ba
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x1400062ba
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006222
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006222
mov r15d, 3
jl 0x140006f05
mov rcx, qword [rsi + 0x30]
lea rdx, str._replace
call fcn.140010268
mov r15d, 2
test rax, rax
jne 0x140006f05
mov rbx, qword [rsi + 0x30]
movzx ecx, word [rbx]
test cx, cx
je 0x140006f05
add rbx, 2
call fcn.140017140
test eax, eax
jne 0x140006eea
mov r15d, 3
cmp r15d, r12d
jg 0x140006f2b
lea rax, [0x140031470]
mov qword [rsp + 0x90], rax
or byte [rsp + 0xbc], 1
mov word [rsp + 0xc0], 0
lea rcx, str.MOZ_USING_SERVICE1
call fcn.1400150f8
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007594
mov r8, qword [rsp + 0x58]
lea rcx, [0x140039fa8]
lea rdx, str.Starting_service_with_cmdline:__ls
call fcn.14000cc50
mov rdx, qword [rsp + 0x58]
mov rcx, qword [r14]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 0
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov r15d, eax
test eax, eax
je 0x140007035
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400075d5
lea rcx, [0x140039fa8]
lea rdx, str.Process_was_started..._waiting_on_result.
call fcn.14000cc50
mov rcx, qword [rsp + 0x60]
mov edx, 0xdbba0
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140007089
mov rcx, qword [rsp + 0x60]
mov dword [rsp + 0x54], 1
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [rsp + 0x50], 0
xor r12d, r12d
jmp 0x1400076c1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007616
mov r9, qword [rsp + 0x58]
mov r8, qword [r14]
mov dword [rsp + 0x20], ebx
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_create_process_as_current_user__updaterPath:__ls__cmdLine:__ls.____d_
call fcn.14000ccd0
xor r12d, r12d
jmp 0x140007952
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0xf80]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov ebx, eax
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007657
test ebx, ebx
je 0x14000769b
mov r8d, dword [rsp + 0xf80]
lea rcx, [0x140039fa8]
lea rdx, str.Process_finished_with_return_code__d.
call fcn.14000cc50
xor r12d, r12d
cmp dword [rsp + 0xf80], 0
sete r12b
mov dword [rsp + 0x50], 0
jmp 0x1400076b9
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006547
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006547
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400064ba
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x1400064ba
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000600a
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x14000600a
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006348
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006348
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000650f
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x14000650f
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400063ec
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x1400063ec
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006103
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006103
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000642a
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x14000642a
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006479
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006479
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006753
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006753
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400068a0
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x1400068a0
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400068f6
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x1400068f6
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006ad7
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006ad7
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006b76
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006b76
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006844
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006844
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006b30
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006b30
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006bc2
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006bc2
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006cb2
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006cb2
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006f5c
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006f5c
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006fe3
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140006fe3
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007062
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140007062
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400070c3
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
test ebx, ebx
jne 0x1400070cb
lea rcx, [0x140039fa8]
lea rdx, str.Process_finished_but_could_not_obtain_return_code.
call fcn.14000ccd0
xor r12d, r12d
mov dword [rsp + 0x50], 1
mov dword [rsp + 0x54], 0
mov rcx, qword [rsp + 0x60]
mov rbx, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rbx
mov rcx, qword [rsp + 0x68]
call rbx
mov rbx, qword [rbp]
lea r14, [rsp + 0xf80]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.14000ff90
lea rdx, str..status
mov rcx, rbx
mov r8, r14
call fcn.14000d2d0
test eax, eax
je 0x1400077b3
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
lea rcx, [rsp + 0xf80]
mov edx, 0x80000000
mov r8d, 7
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x1400077f0
xorps xmm0, xmm0
movaps xmmword [rsp + 0xf70], xmm0
movaps xmmword [rsp + 0xf60], xmm0
mov qword [rsp + 0x20], 0
lea rdx, [rsp + 0xf60]
lea r9, [rsp + 0xec]
mov rcx, r14
mov r8d, 0x20
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140007825
movabs rax, 0x676e69796c707061
xor ebx, ebx
cmp qword [rsp + 0xf60], rax
sete bl
mov r13d, 1
jmp 0x140007862
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007bd8
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_get_path_for_the_secure_update_status_file
call fcn.14000ccd0
jmp 0x140007952
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007c5a
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_open_update.status_file
jmp 0x140007858
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007c9b
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_read_from_update.status_file
call fcn.14000ccd0
xor ebx, ebx
xor r13d, r13d
mov rax, r14
add rax, 1
cmp rax, 2
jb 0x140007878
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x140007952
test r13d, r13d
je 0x140007952
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007c19
lea rcx, [0x140039fa8]
test r12d, r12d
je 0x140007913
lea rdx, str.update.status_is_still_applying_even_though_update_was_successful.
call fcn.14000cc50
mov rcx, qword [rbp]
mov edx, 0x1d
call fcn.14000dbf0
xor r12d, r12d
test eax, eax
jne 0x140007952
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007d1d
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_still_applying_on_success_error.
jmp 0x1400077e6
lea rdx, str.update.status_is_still_applying_and_update_was_not_successful.
call fcn.14000ccd0
cmp dword [rsp + 0x54], 0
mov eax, 0x1e
mov ecx, 0x32
cmove ecx, eax
cmp dword [rsp + 0x50], 0
mov edx, 0x33
cmove edx, ecx
mov rcx, qword [rbp]
call fcn.14000dbf0
xor r12d, r12d
test eax, eax
je 0x140007a28
lea rcx, str.MOZ_USING_SERVICE
call fcn.1400150f8
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x58], 0
test rcx, rcx
je 0x140007976
call fcn.14000e3a4
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007a60
test r12d, r12d
je 0x140007aa5
lea rcx, [0x140039fa8]
lea rdx, str.updater.exe_was_launched_and_run_successfully_
call fcn.14000cc50
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007b56
mov rcx, qword [0x140039fa8]
test rcx, rcx
je 0x1400079ed
call fcn.140015f54
cmp edi, 8
je 0x1400079fd
cmp edi, 7
jne 0x140007a11
mov rcx, qword [rsi + 0x30]
jmp 0x140007a01
mov rcx, qword [rsi + 0x38]
lea rdx, [0x140031414]
call fcn.140017474
test eax, eax
je 0x140007a1e
lea rcx, [rsp + 0xd50]
call fcn.14000d670
mov edi, 1
jmp 0x140006bd5
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007d5e
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_still_applying_on_failure_error.
jmp 0x1400077e6
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000799b
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
test r12d, r12d
jne 0x1400079a4
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Error_running_update_process._Updating_update.status____d_
mov r8d, eax
call fcn.14000ccd0
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007b97
mov rcx, qword [0x140039fa8]
test rcx, rcx
je 0x140007af7
call fcn.140015f54
xor edi, edi
test r15d, r15d
jne 0x140006bd5
mov rcx, qword [rbp]
mov edx, 0x18
call fcn.14000dbf0
test eax, eax
jne 0x140006bd5
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007cdc
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_service_update_failure.____d_
jmp 0x140006b44
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400079dc
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x1400079dc
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007ae6
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140007ae6
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400077d8
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x1400077d8
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400078ae
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x1400078ae
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007815
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140007815
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000784a
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x14000784a
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007b3d
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140007b3d
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007900
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140007900
lea rcx, [0x14003a1b8]
call fcn.14000e510
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007a4d
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e6c8
lea rcx, [0x14003a1b8]
call fcn.14000e578
jmp 0x140007a4d