Function at 0x140001090
Capabilities:
Check if file exists
Copy file
Create a process with modified i/o handles and window
Create directory
Create process on windows
Create thread
Delete file
Get common file path
Get disk information
Get file attributes
Move file
Query or enumerate registry value
Read file on windows
Set registry value
Start service
Write and execute a file
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf68
movaps xmmword [rsp + 0xf50], xmm6
mov rdi, rdx
mov r13d, ecx
mov rax, qword [0x14004c030]
xor rax, rsp
mov qword [rsp + 0xf48], rax
lea rcx, [0x14004288e]
call fcn.140022dbc
test rax, rax
je 0x1400010dc
cmp byte [rax], 0
setne al
jmp 0x1400010de
xor eax, eax
mov byte [0x14004ea38], al
lea rcx, str.MOZ_USING_SERVICE
call fcn.14001fbd0
cmp r13d, 3
jg 0x14000111f
mov ecx, 2
call fcn.1400176b8
lea rcx, str.Usage:_updater_patch_dir_install_dir_apply_to_dir__wait_pid__callback_working_dir_callback_path_args...___n
mov edx, 0x6a
mov r8d, 1
mov r9, rax
call fcn.140022ae0
jmp 0x1400021d7
lea rsi, [rdi + 8]
mov rdx, qword [rdi + 8]
lea rbx, [0x14004e200]
mov r8d, 0x104
mov rcx, rbx
call fcn.1400243c8
mov word [0x14004e406], 0
lea r14, [rsp + 0xb20]
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call fcn.140016ea0
lea r8, str._supdate_elevated.lock
mov edx, 0x104
mov rcx, r14
mov r9, rbx
call fcn.140006260
mov al, 1
cmp byte [0x14004ea38], 0
jne 0x14000119f
lea rcx, [rsp + 0xb20]
call fcn.140020f04
test eax, eax
je 0x14000119d
call fcn.14001c700
cmp dword [rax], 2
setne al
jmp 0x14000119f
xor eax, eax
mov byte [0x14004ec48], al
lea rcx, [rsp + 0xb20]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
setne byte [0x14004ec49]
mov rcx, qword [rsi]
call fcn.140013bc0
test al, al
je 0x140001661
mov rcx, qword [rdi + 0x10]
call fcn.140013bc0
test al, al
je 0x14000167a
mov rdx, qword [rdi + 0x10]
lea rbx, [0x14004ea40]
mov r8d, 0x104
mov rcx, rbx
call fcn.1400243c8
mov word [0x14004ec46], 0
mov rcx, rbx
mov dx, 0x5c
call fcn.140017258
test rax, rax
je 0x14000121d
cmp word [rax + 2], 0
jne 0x14000121d
mov word [rax], 0
lea r8, str._s_update.status
lea r9, [0x14004e200]
lea rbx, [rsp + 0x290]
mov edx, 0x104
mov rcx, rbx
call fcn.140006260
lea rdx, [0x140043fee]
mov rcx, rbx
call fcn.140020cdc
test rax, rax
mov qword [rsp + 0x60], rsi
je 0x1400012d6
mov r15, rax
xorps xmm0, xmm0
lea rcx, [rsp + 0xd30]
movaps xmmword [rcx + 0x10], xmm0
movaps xmmword [rcx], xmm0
mov edx, 1
mov r8d, 0x1f
mov r9, rax
call fcn.14002284c
mov r14, rax
mov rcx, r15
call fcn.140022244
test eax, eax
je 0x140001422
xor r12d, r12d
mov rcx, r15
call fcn.14002215c
test eax, eax
je 0x1400012d9
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004a3e
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013970
jmp 0x1400012d9
xor r12d, r12d
xor esi, esi
mov qword [rsp + 0x290], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rsi
mov ebp, 2
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 0
lea rdx, str.SoftwareClassesApplications
mov r14, qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call r14
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 1
lea rdx, str.SoftwareClassesApplicationsupdater.exe
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call r14
test eax, eax
jne 0x1400013da
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea rdx, str.IsHostApp
mov rbx, qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea rdx, str.NoOpenWith
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea rdx, str.NoStartPage
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp r13d, 5
jl 0x14000141b
mov rcx, qword [rdi + 0x20]
call fcn.140020ffc
cmp rax, 0xffffffffffffffff
je 0x14000151f
mov rbx, rax
mov rcx, qword [rdi + 0x20]
lea rdx, str._replace
call fcn.140017308
test rax, rax
je 0x140001530
lea rax, [0x14004ec4a]
jmp 0x14000152d
xor ebx, ebx
jmp 0x140001530
mov byte [rsp + r14 + 0xd30], 0
lea r14, [rsp + 0xd30]
mov rcx, r14
mov edx, 0x3a
call fcn.140017030
mov r12, rax
test rax, rax
jne 0x140001475
lea rcx, [rsp + 0xd30]
mov edx, 0xa
call fcn.140017030
test rax, rax
jne 0x140001475
lea rcx, [rsp + 0xd30]
call fcn.1400236b0
add rax, rsp
add rax, 0xd30
sub rax, r14
cmp rax, 0xf
jne 0x1400014ab
movabs rax, 0x2d676e69646e6570
xor rax, qword [rsp + 0xd30]
movabs rcx, 0x656369767265732d
xor rcx, qword [rsp + 0xd37]
or rcx, rax
je 0x1400020f3
test r12, r12
jne 0x1400014e2
lea rcx, [rsp + 0xd30]
mov edx, 0xa
call fcn.140017030
mov r12, rax
test rax, rax
jne 0x1400014e2
lea rcx, [rsp + 0xd30]
call fcn.1400236b0
lea r12, [rsp + rax]
add r12, 0xd30
sub r12, r14
cmp r12, 0xf
jne 0x140001294
movabs rax, 0x2d6465696c707061
xor rax, qword [rsp + 0xd30]
movabs rcx, 0x656369767265732d
xor rcx, qword [rsp + 0xd37]
or rcx, rax
sete r12b
jmp 0x140001297
mov rbx, 0xffffffffffffffff
lea rax, [0x14004e408]
mov byte [rax], 1
mov rcx, qword [rdi + 0x18]
call fcn.140013bc0
test al, al
je 0x140001ff2
mov rdx, qword [rdi + 0x18]
lea r14, [0x14004e410]
mov r8d, 0x104
mov rcx, r14
call fcn.1400243c8
mov word [0x14004e616], 0
mov rcx, r14
mov dx, 0x5c
call fcn.140017258
test rax, rax
je 0x140001580
cmp word [rax + 2], 0
jne 0x140001580
mov word [rax], 0
cmp r13d, 7
jl 0x1400016c6
mov rcx, qword [rdi + 0x30]
call fcn.140013bc0
test al, al
je 0x14000214c
mov esi, r12d
lea r14, [0x14004ea40]
mov rcx, r14
call fcn.140023f00
mov r15, rax
lea r12, [rsp + 0x290]
mov r8d, 0x208
mov rcx, r12
xor edx, edx
call fcn.140016ea0
mov rdx, qword [rdi + 0x30]
mov rcx, r12
mov r8, r15
call fcn.1400243c8
mov rcx, r14
mov rdx, r12
call fcn.140023eac
test eax, eax
jne 0x14000218d
cmp r13d, 8
mov r12d, esi
jl 0x140001644
lea esi, [r13 - 6]
dec rsi
xor r15d, r15d
lea r14, str.backgroundtask
mov rcx, qword [rdi + r15*8 + 0x38]
test rcx, rcx
je 0x14000163c
movzx eax, word [rcx]
cmp eax, 0x2f
je 0x140001622
cmp eax, 0x2d
jne 0x14000163c
cmp word [rcx + 2], 0x2d
je 0x140001628
add rcx, 2
jmp 0x14000162c
add rcx, 4
mov rdx, r14
call fcn.140023eac
test eax, eax
je 0x1400016be
inc r15
cmp rsi, r15
jne 0x140001604
lea rcx, str.MOZ_APP_SILENT_START
call fcn.140022dbc
test rax, rax
je 0x14000165d
cmp byte [rax], 0
setne al
jmp 0x1400016c0
xor eax, eax
jmp 0x1400016c0
mov rsi, qword [rsi]
mov ecx, 2
call fcn.1400176b8
lea rdx, str.The_patch_directory_path_is_not_valid_for_this_application___S__n
jmp 0x1400021cc
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4b
call fcn.140001010
mov rcx, rsi
call fcn.14000c990
mov rsi, qword [rdi + 0x10]
mov ecx, 2
call fcn.1400176b8
lea rdx, str.The_install_directory_path_is_not_valid_for_this_application___S__n
jmp 0x1400021cc
mov al, 1
mov byte [0x14004ec4b], al
lea rcx, [rsp + 0x910]
mov r8d, 0x20a
xor edx, edx
call fcn.140016ea0
cmp byte [0x14004ec48], 0
je 0x140001812
lea r14, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.140016ea0
mov rcx, r14
call fcn.140013590
test eax, eax
je 0x14000173b
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.140016ea0
lea rcx, [0x140043f94]
mov rdx, r14
call fcn.140013690
test eax, eax
jne 0x140002460
lea rcx, [rsp + 0xd30]
call fcn.140013590
test eax, eax
je 0x14000177b
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.140016ea0
lea rcx, [0x1400437c8]
mov rdx, r14
call fcn.140013690
test eax, eax
jne 0x14000248f
lea rcx, [rsp + 0xd30]
call fcn.140013590
test eax, eax
je 0x1400017bb
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.140016ea0
lea rcx, [0x140043d68]
mov rdx, r14
call fcn.140013690
test eax, eax
jne 0x1400024be
lea rcx, [rsp + 0x910]
call fcn.140013590
test eax, eax
je 0x140001850
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.140016ea0
lea rcx, [0x140043d68]
mov rdx, r14
call fcn.140013690
test eax, eax
je 0x140001850
lea rcx, [rsp + 0x910]
lea rdx, [rsp + 0x290]
call fcn.140037410
jmp 0x140001850
cmp byte [0x14004ec49], 0
lea rax, str.update.log
lea rcx, [0x140043d4a]
cmove rcx, rax
mov qword [rsp + 0x20], rcx
lea r8, str._s_s
lea r9, [0x14004e200]
lea rcx, [rsp + 0x910]
mov edx, 0x105
call fcn.140006260
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400047b4
cmp qword [0x14004fc78], 0
jne 0x1400018c8
lea rcx, [rsp + 0x910]
call fcn.140023f00
dec eax
cmp eax, 0x101
ja 0x1400018c8
lea r14, [0x14004fc80]
lea rdx, [rsp + 0x910]
mov r8d, 0x104
mov rcx, r14
call fcn.1400243c8
lea rdx, [0x140043722]
mov rcx, r14
call fcn.140020cdc
mov qword [0x14004fc78], rax
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400047f5
cmp byte [0x14004ea38], 0
lea rsi, [0x140041271]
lea r15, str.true
mov r8, r15
cmove r8, rsi
lea rdx, str.sUsingService_s
call fcn.140013970
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004836
cmp byte [0x14004ec4b], 0
mov r8, r15
cmove r8, rsi
lea rdx, str.sUpdateSilently_s
call fcn.140013970
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004877
cmp byte [0x14004ec48], 0
mov r8, r15
cmove r8, rsi
lea rdx, str.gUseSecureOutputPath_s
call fcn.140013970
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400048b8
test r12b, r12b
mov r8, r15
cmove r8, rsi
lea rdx, [0x140040cb1]
call fcn.140013970
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400048f9
cmp byte [0x14004ec49], 0
mov r8, r15
cmove r8, rsi
lea rdx, str.gIsElevated_s
call fcn.140013970
lea rcx, str.applying
call fcn.14000c990
test al, al
je 0x140001a54
cmp byte [0x14004e408], 1
jne 0x140001a8f
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004ae0
lea r14, str.Performing_a_staged_update
jmp 0x140001ac4
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000493a
lea rdx, str.failed_setting_status_to_applying
call fcn.140013970
call fcn.14000c5f0
jmp 0x1400021d7
cmp byte [0x14004ec4a], 1
jne 0x140001acc
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004b36
lea r14, str.Performing_a_replace_request
mov rdx, r14
call fcn.140013970
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000497b
lea rdx, str.PATCH_DIRECTORY__S
lea r8, [0x14004e200]
call fcn.140013970
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400049bc
lea rdx, str.INSTALLATION_DIRECTORY__S
lea r8, [0x14004ea40]
call fcn.140013970
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400049fd
lea rdx, str.WORKING_DIRECTORY__S
lea r14, [0x14004e410]
mov r8, r14
call fcn.140013970
lea rsi, [0x14004ea40]
mov r8d, 0x104
mov rcx, r14
mov rdx, rsi
call fcn.140020af8
test eax, eax
je 0x140001c5a
cmp byte [0x14004e408], 0
jne 0x140001bad
cmp byte [0x14004ec4a], 0
je 0x140001f97
lea r8, [0x140043852]
lea r9, [0x14004e410]
lea r14, [rsp + 0x290]
mov edx, 0x104
mov rcx, r14
call fcn.140006260
mov rcx, r14
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x140001f2e
lea rdx, [0x14004ea40]
lea rcx, [rsp + 0x290]
mov r8d, 0x104
call fcn.140020af8
test eax, eax
je 0x140001c5a
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x48
call fcn.140001010
mov rcx, rsi
call fcn.14000c990
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004b7e
lea rdx, str.The_apply_to_directory_must_be_the_same_as_or_a_child_of_the_installation_directory__Exiting.
jmp 0x140001a80
test rbx, rbx
jle 0x140001cc5
mov ecx, 0x100000
xor edx, edx
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x140001cc5
mov rbx, rax
mov rcx, rax
mov edx, 0x7530
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebp, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebp, ebp
je 0x140001cc5
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004d04
lea rdx, str.The_parent_process_didnt_exit__Continuing_with_update.
call fcn.140013970
cmp byte [0x14004ec4a], 0
jne 0x140001cd7
cmp byte [0x14004e408], 1
jne 0x140001d0e
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140016ea0
mov rcx, rbx
mov edx, 0x105
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x140001d0e
lea rcx, [rsp + 0x290]
call fcn.1400203e4
mov dword [rsp + 0x68], r12d
mov r12, 0xffffffffffffffff
cmp byte [0x14004ea38], 0
je 0x140001ec1
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004af5
lea rdx, str.Going_to_update_via_this_updater_instance.
call fcn.140013970
cmp byte [0x14004e408], 1
jne 0x140001d6f
lea rcx, [0x14004e410]
xor edx, edx
call fcn.14000d310
cmp byte [0x14004ec4a], 0
jne 0x140001d96
lea rcx, [0x14004e410]
call fcn.140020e0c
test eax, eax
je 0x140001d96
call fcn.14001c700
cmp dword [rax], 0x11
jne 0x140001a85
lea rcx, [0x14004e410]
lea rdx, [rsp + 0xd30]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x140002036
mov r15, 0xffffffffffffffff
cmp r13d, 7
jl 0x140002245
mov qword [rsp + 0x50], r13
lea rcx, [rsp + 0x700]
mov ebx, 0x208
mov r8d, 0x208
xor edx, edx
call fcn.140016ea0
lea r14, [rdi + 0x30]
mov r15, qword [rdi + 0x30]
lea r13, [rsp + 0x290]
mov r8d, 0x410
mov rcx, r13
xor edx, edx
call fcn.140016ea0
cmp byte [0x14004ec4a], 1
jne 0x14000220a
mov rcx, r15
mov rdx, rsi
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
movsxd r15, eax
mov rdx, qword [r14]
mov rcx, r13
mov r8, r15
call fcn.1400243c8
mov qword [rsp + 0x58], r12
lea r12, [rsp + r15*2]
add r12, 0x290
sub rbx, r15
lea rbp, [rsi + r15*2]
mov rcx, r12
mov rdx, rbp
mov r8, rbx
call fcn.1400243c8
mov rcx, rbp
call fcn.140023f00
lea r12, [r12 + rax*2]
add r12, 2
mov dword [r12 - 2], 0x5c
not rax
add rbx, rax
lea rbp, [rsp + 0x80]
mov rcx, rbp
mov rdx, rsi
call fcn.140023ee4
mov rcx, qword [r14]
mov rdx, rbp
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
cmp eax, r15d
cmova r15d, eax
movsxd rdx, r15d
add rdx, rdx
add rdx, qword [r14]
mov rcx, r12
mov r12, qword [rsp + 0x58]
mov r8, rbx
call fcn.1400243c8
jmp 0x14000220d
cmp r13d, 6
jg 0x140001edd
cmp byte [0x14004e408], 0
jne 0x140001edd
cmp byte [0x14004ec4a], 1
jne 0x140001d27
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004c00
lea rdx, str.Checking_whether_elevation_is_needed
call fcn.140013970
cmp byte [0x14004e408], 1
jne 0x1400020fb
lea r8, str._s_updated.update_in_progress.lock
lea r9, [0x14004ea40]
jmp 0x1400024f8
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x47
call fcn.140001010
mov rcx, rsi
call fcn.14000c990
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004bbf
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Error_calling_PathRemoveFileSpecW:__lu
mov r8d, eax
call fcn.140013970
jmp 0x140001a85
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4a
call fcn.140001010
mov rcx, rsi
call fcn.14000c990
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004c41
lea rdx, str.Installation_directory_and_working_directory_must_be_the_same_for_non_staged_updates._Exiting.
jmp 0x140001a80
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4c
call fcn.140001010
mov rcx, rsi
call fcn.14000c990
mov rsi, qword [rdi + 0x18]
mov ecx, 2
call fcn.1400176b8
lea rdx, str.The_working_directory_path_is_not_valid_for_this_application___S__n
jmp 0x1400021cc
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x41
call fcn.140001010
mov rcx, rbx
call fcn.14000c990
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004cc3
lea rdx, str.NS_main:_unable_to_find_apply_to_dir:__S
lea r8, [0x14004e410]
call fcn.140013970
call fcn.14000c5f0
cmp r12, 0xffffffffffffffff
je 0x1400020ac
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140020f04
test eax, eax
je 0x1400020cb
call fcn.14001c700
cmp dword [rax], 2
jne 0x1400021d7
cmp r13d, 7
jl 0x1400021d7
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
jmp 0x140002870
mov r12b, 1
jmp 0x140001297
cmp byte [0x14004ec4a], 1
jne 0x1400024ed
lea rdx, [0x14004ea40]
lea rbx, [rsp + 0x290]
mov rcx, rbx
call fcn.140023ee4
mov rcx, rbx
mov dx, 0x5c
call fcn.140017258
mov word [rax], 0
lea r8, str._smoz_update_in_progress.lock
lea rcx, [rsp + 0x700]
mov edx, 0x104
mov r9, rbx
jmp 0x140002505
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4d
call fcn.140001010
mov rcx, rsi
call fcn.14000c990
mov rsi, qword [rdi + 0x30]
mov ecx, 2
call fcn.1400176b8
lea rdx, str.The_callback_file_path_is_not_valid_for_this_application___S__n
jmp 0x1400021cc
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4e
call fcn.140001010
mov rcx, rsi
call fcn.14000c990
mov rsi, qword [rdi + 0x30]
mov ecx, 2
call fcn.1400176b8
lea rdx, str.The_callback_file_must_be_located_in_the_installation_directory___S__n
mov rcx, rax
mov r8, rsi
call fcn.140037220
mov ebx, 1
mov rcx, qword [rsp + 0xf48]
xor rcx, rsp
call fcn.140027fe0
mov eax, ebx
movaps xmm6, xmmword [rsp + 0xf50]
add rsp, 0xf68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r13, r15
lea rdx, [rsp + 0x700]
mov rcx, r13
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x1400027c7
mov r15, 0xffffffffffffffff
cmp byte [0x14004ec4a], 0
je 0x14000287a
mov r13, qword [rsp + 0x50]
cmp byte [0x14004e408], 0
jne 0x14000229f
cmp byte [0x14004ec4a], 0
jne 0x14000229f
lea rax, str.tobedeleted
mov qword [rsp + 0x20], rax
lea rbx, [0x14004ec50]
lea r8, str._s__s
lea r9, [0x14004e410]
mov edx, 0x104
mov rcx, rbx
call fcn.140006260
mov rcx, rbx
xor edx, edx
call fcn.140020324
test eax, eax
je 0x14000229f
lea rcx, [0x14004ec50]
call fcn.140020e0c
lea rax, [0x14000d560]
lea rbx, [rsp + 0x290]
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], 0
lea rsi, [rsp + 0x700]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0
lea r8, [0x14000ce90]
xor ecx, ecx
xor edx, edx
mov r9, rbx
call fcn.14001b8f4
mov qword [rbx], rax
test rax, rax
je 0x140002316
cmp byte [0x14004e408], 0
jne 0x140002316
cmp byte [0x14004ec4a], 0
jne 0x140002316
cmp byte [0x14004ec4b], 0
jne 0x140002316
xor ecx, ecx
mov dl, 1
call fcn.140007b60
mov rax, qword [rsp + 0x290]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r13d, 7
jl 0x1400023a2
cmp byte [0x14004ec4a], 0
jne 0x1400023a2
cmp r15, 0xffffffffffffffff
je 0x140002350
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x14004e830]
call fcn.140020f04
test eax, eax
je 0x1400023a2
call fcn.14001c700
cmp dword [rax], 2
je 0x1400023a2
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400050eb
lea rdx, str.NS_main:_non_fatal_error_removing_backup_of_callback_app_file__path:__S
lea r8, [0x14004e830]
call fcn.140013970
cmp byte [0x14004e408], 0
jne 0x140002d88
cmp byte [0x14004ec4a], 0
jne 0x140002d88
lea rcx, [0x14004ec50]
call fcn.140020f5c
test eax, eax
je 0x140002d88
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004fcf
call fcn.14001c700
mov r9d, dword [rax]
lea rdx, str.NS_main:_unable_to_remove_directory:__S__err:__d
lea r8, str.tobedeleted
call fcn.140013970
lea rcx, [0x14004ec50]
xor edx, edx
mov r8d, 4
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov ecx, dword [0x14004fe88]
mov edx, dword [0x14004cde8]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
test eax, eax
je 0x140002d6a
cmp ecx, edx
jg 0x140005092
lea rbx, str.NS_main:_directory_will_be_removed_on_OS_reboot:__S
jmp 0x140002d79
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.140037410
test eax, eax
je 0x14000173b
lea rcx, [rsp + 0xd30]
call fcn.140020f04
jmp 0x14000173b
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.140037410
test eax, eax
je 0x14000177b
lea rcx, [rsp + 0xd30]
call fcn.140020f04
jmp 0x14000177b
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.140037410
test eax, eax
je 0x1400017bb
lea rcx, [rsp + 0xd30]
call fcn.140020f04
jmp 0x1400017bb
mov r9, qword [rdi + 0x30]
lea r8, str._s.update_in_progress.lock
lea rcx, [rsp + 0x700]
mov edx, 0x104
call fcn.140006260
lea rcx, [rsp + 0x700]
call fcn.140020f04
test eax, eax
je 0x140002525
call fcn.14001c700
cmp dword [rax], 2
jne 0x140002595
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0x700]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
cmp r12, 0xffffffffffffffff
je 0x1400025ae
cmp eax, ecx
jg 0x140004d86
lea rdx, str.Successfully_opened_lock_file
call fcn.140013970
jmp 0x1400025cb
cmp byte [0x14004ec4a], 1
jne 0x140002bd7
lea rcx, str.pending
jmp 0x140002c05
cmp eax, ecx
jg 0x140004e08
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Failed_to_open_update_lock_file:__lu
mov r8d, eax
call fcn.140013970
cmp byte [0x14004ec49], 0
je 0x1400029ce
lea rbx, [rsp + 0x80]
mov qword [rbx], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0xf00ff
mov r8, rbx
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140002994
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r13
mov r13, qword [rsp + 0x80]
xor r12d, r12d
lea rbp, [rsp + 0xd30]
mov rbx, qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
xorps xmm6, xmm6
lea rax, str.SeAssignPrimaryTokenPrivilege
mov r14, qword [r12 + rax]
xor ecx, ecx
mov rdx, r14
mov r8, rbp
call rbx
test eax, eax
je 0x1400026a3
mov dword [rsp + 0x290], 1
mov rax, qword [rsp + 0xd30]
mov qword [rsp + 0x294], rax
mov dword [rsp + 0x29c], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
movups xmmword [rsp + 0x20], xmm6
mov rcx, r13
xor edx, edx
lea r8, [rsp + 0x290]
mov r9d, 0x10
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
test eax, eax
je 0x1400026a3
call rsi
test eax, eax
je 0x1400026ee
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140002720
call rsi
lea rdx, str.Could_not_disable_token_privilege_value:__s.___lu_
mov r8, r14
mov r9d, eax
call fcn.140013970
add r12, 8
cmp r12, 0x110
jne 0x140002634
jmp 0x14000279a
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000275d
lea rdx, str.Disabled_unneeded_token_privilege:__s.
mov r8, r14
call fcn.140013970
jmp 0x1400026d8
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400026c4
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x1400026c4
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000270f
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x14000270f
mov rcx, qword [rsp + 0x80]
test rcx, rcx
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
lea rsi, [0x14004ea40]
je 0x1400029ce
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400029ce
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x42
call fcn.140001010
mov rcx, rbx
call fcn.14000c990
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004e8a
lea rdx, str.NS_main:_unable_to_find_callback_file:__S
mov r8, r13
call fcn.140013970
call fcn.14000c5f0
cmp r12, 0xffffffffffffffff
je 0x140002839
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140020f04
test eax, eax
mov rsi, qword [rsp + 0x50]
je 0x14000285d
call fcn.14001c700
cmp dword [rax], 2
jne 0x1400021d7
mov r9b, byte [0x14004ea38]
add esi, 0xfffffffa
mov rcx, qword [rdi + 0x28]
mov edx, esi
mov r8, r14
call fcn.14000c820
jmp 0x1400021d7
lea rcx, [rsp + 0xd30]
call fcn.140023f00
movsxd rcx, eax
lea rax, [rsp + rcx*2]
add rax, 0x700
xor edx, edx
cmp word [rax], 0x5c
sete dl
movzx eax, word [rax + rdx*2]
add rdx, rdx
lea rcx, [rdx + rcx*2]
lea rdx, [rsp + rcx]
add rdx, 0x702
lea rcx, [0x14004e620]
mov r8d, 0x2f
cmp ax, 0x5c
cmove eax, r8d
mov word [rcx], ax
add rcx, 2
movzx eax, word [rdx]
add rdx, 2
test ax, ax
jne 0x1400028c0
mov word [rcx], 0
mov r9, qword [r14]
lea rcx, [0x14004e830]
lea r8, str._s.moz_callback
mov edx, 0x104
call fcn.140006260
cmp eax, 0x104
jb 0x140002c6c
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x80]
mov edx, 0x20
mov rcx, rsi
mov r9d, 3
call fcn.140001010
mov rcx, rsi
call fcn.14000c990
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005051
lea rdx, str.NS_main:_callback_backup_path_truncated
call fcn.140013970
call fcn.14000c5f0
cmp r12, 0xffffffffffffffff
je 0x140002975
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140020f04
test eax, eax
je 0x1400021d7
call fcn.14001c700
jmp 0x1400021d7
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004f4d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Could_not_obtain_token_for_current_process__no_privileges_changed.___lu_
mov r8d, eax
call fcn.140013a90
cmp r12, 0xffffffffffffffff
jne 0x140001d27
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004e49
lea rdx, str.Cant_open_lock_file___seems_like_we_need_elevation
call fcn.140013970
lea rcx, [rsp + 0xb20]
call fcn.140020f04
test eax, eax
mov ebx, dword [rsp + 0x68]
je 0x140002a2c
call fcn.14001c700
cmp dword [rax], 2
jne 0x140002c3b
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0xb20]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140002c3b
mov rsi, rax
lea edx, [r13 - 1]
lea r14, [rsp + 0x78]
mov rcx, r14
mov r8, qword [rsp + 0x60]
call fcn.140005e90
mov rax, qword [r14]
test rax, rax
je 0x140003049
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rsi
test bl, bl
je 0x140003dc3
lea rcx, [0x14004ea40]
xor esi, esi
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x14000335a
mov ebp, eax
mov r12d, eax
add r12, r12
mov rcx, r12
call fcn.1400152f8
mov r14, rax
xor esi, esi
mov rcx, rax
xor edx, edx
mov r8, r12
call fcn.140016ea0
lea rcx, [0x14004ea40]
mov rdx, r14
mov r8d, ebp
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x140003352
mov qword [rsp + 0x50], r13
lea rsi, [rsp + 0x290]
mov qword [rsi], 0
lea rcx, [0x140039010]
xor edx, edx
xor r8d, r8d
mov r9, rsi
call sub.SHELL32.dll_SHGetKnownFolderPath
test eax, eax
js 0x14000334b
mov r13, qword [rsp + 0x290]
mov rcx, r13
call fcn.140023f00
test rax, rax
je 0x14000333d
mov rbp, rax
cmp word [r13 + rax*2 - 2], 0x5c
jne 0x14000353d
mov rcx, r14
mov rdx, r13
mov r8, rbp
call fcn.140020af8
test eax, eax
je 0x1400035a5
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [rsp + 0x290], 0
mov r13, rsi
mov qword [rsp + 0x30], rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion
lea r8, str.ProgramFilesDir
mov rcx, 0xffffffff80000002
mov r9d, 0x10002
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov esi, 1
test eax, eax
jne 0x140002bc6
mov ebp, dword [rsp + 0x290]
cmp rbp, 4
jae 0x1400035b6
xor r12d, r12d
test esi, esi
setne sil
and sil, r12b
jmp 0x14000334d
cmp byte [0x14004e408], 1
jne 0x140002c0a
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x2c
call fcn.140001010
mov rcx, rsi
call fcn.14000c990
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004dc7
lea rdx, str.Update_already_in_progress__Exiting
jmp 0x140001a80
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004f8e
lea rdx, str.Unable_to_create_elevated_lock_file__Exiting
jmp 0x140001a80
mov rcx, qword [r14]
lea rdx, [0x14004e830]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x140003092
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x58], r12
mov ebp, 1
mov rsi, qword [sym.imp.KERNEL32.dll_CreateFileW]
lea r12, str.NS_main:_callback_app_file_open_attempt__d_failed._File:__S._Last_error:__lu
mov r14, qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
mov rcx, r13
mov edx, 0x40010000
mov r8d, 6
xor r9d, r9d
call rsi
cmp rax, 0xffffffffffffffff
jne 0x1400030c3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140002d30
mov dword [rsp + 0x20], ebx
mov rdx, r12
mov r8d, ebp
mov r9, r13
call fcn.140013970
mov ecx, 0x64
call r14
inc ebp
cmp ebp, 0xb
jne 0x140002cab
jmp 0x1400030d5
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140002d0a
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140002d0a
cmp ecx, edx
jg 0x14000512c
lea rbx, str.NS_main:_failed_to_schedule_OS_reboot_removal_of_directory:__S
lea r8, str.tobedeleted
mov rdx, rbx
call fcn.140013970
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004c82
lea rdx, str.Running_LaunchCallbackAndPostProcessApps
call fcn.140013970
cmp r13d, 7
jge 0x140002df5
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004d45
lea rdx, str.No_callback_arg._Skipping_LaunchWinPostProcess_and_LaunchCallbackApp
call fcn.140013970
jmp 0x140003035
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
cmp byte [0x14004ea3a], 1
jne 0x140002fd2
cmp eax, ecx
jg 0x140004ecb
lea rdx, str.Launching_Windows_post_update_process
call fcn.140013970
call fcn.14000baa0
test al, al
jne 0x140002e6f
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005010
lea rdx, str.The_post_update_process_was_not_launched_successfully
call fcn.140013970
cmp byte [0x14004ea38], 0
jne 0x140002fe6
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400050aa
lea rdx, str.Starting_Service_Update_before_launching_callback_app
call fcn.140013970
xor ecx, ecx
xor edx, edx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
test rax, rax
je 0x140002fe6
mov r14, rax
lea rdx, str.MozillaMaintenance
mov rcx, rax
mov r8d, 0xf01ff
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rbx, rax
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test rbx, rbx
je 0x140002fe6
lea r9, [rsp + 0x6d0]
mov rcx, rbx
xor edx, edx
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
test eax, eax
jne 0x140002f1d
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140003313
lea r15, [rsp + 0x6d0]
mov qword [rsp + 0x58], r12
mov r12d, dword [r15]
mov rcx, r12
call fcn.1400152f8
mov r14, rax
mov rcx, rax
xor edx, edx
mov r8, r12
call fcn.140016ea0
mov rcx, rbx
mov rdx, r14
mov r8d, r12d
mov r12, qword [rsp + 0x58]
mov r9, r15
call qword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
mov ebp, eax
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test ebp, ebp
je 0x140002fc8
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea rcx, [rsp + 0x290]
mov r8d, 0x20a
xor edx, edx
call fcn.140016ea0
mov rbx, qword [r14 + 0x10]
mov rcx, rbx
call fcn.140023f00
cmp rax, 0x104
ja 0x140002fc8
lea r15, [rsp + 0x290]
mov r8d, 0x105
mov rcx, r15
mov rdx, rbx
call fcn.1400243c8
mov rcx, r15
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
jne 0x14000362c
mov rcx, r14
call fcn.14001534c
jmp 0x140002fe6
cmp eax, ecx
jg 0x140004f0c
lea rdx, str.Not_launching_Windows_post_update_process_because__gSucceeded
call fcn.140013970
cmp r12, 0xffffffffffffffff
je 0x140002ff5
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140020f04
test eax, eax
je 0x140003010
call fcn.14001c700
cmp dword [rax], 2
jne 0x140003035
call fcn.14000c5f0
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
call fcn.14000c820
jmp 0x14000303a
call fcn.14000c5f0
movzx ebx, byte [0x14004ea3a]
xor ebx, 1
jmp 0x1400021dc
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005174
lea rdx, str.Failed_to_make_command_line__Exiting
call fcn.140013970
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.14000c5f0
mov ebx, 1
jmp 0x140003ebe
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.failed:__d_n
lea rdi, [rsp + 0x80]
mov edx, 0x20
mov rcx, rdi
cmp eax, 5
jne 0x140003152
mov r9d, 0x23
jmp 0x140003158
mov r15, rax
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
jmp 0x140002245
cmp ebx, 0x20
jne 0x1400031ea
cmp byte [0x14004ec4b], 0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
je 0x140003321
cmp eax, ecx
jg 0x1400053bd
mov r8, qword [rsi]
lea rdx, str.NS_main:_callback_app_file_in_use__failed_to_exclusively_open_executable_file_from_background_task:__S
call fcn.140013970
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x6a
jmp 0x140003267
mov r9d, 0x25
call fcn.140001010
mov rcx, rdi
call fcn.14000c990
mov rsi, qword [rsp + 0x50]
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400051b5
mov r8, qword [r14]
lea rdx, str.NS_main:_failed_to_copy_callback_file__S_into_place_at__S
lea r9, [0x14004e830]
call fcn.140013970
call fcn.14000c5f0
cmp r12, 0xffffffffffffffff
je 0x1400031b9
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140020f04
test eax, eax
je 0x1400031d8
call fcn.14001c700
cmp dword [rax], 2
jne 0x1400021d7
mov r9b, byte [0x14004ea38]
add esi, 0xfffffffa
mov rcx, qword [r14]
jmp 0x14000286b
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
jg 0x1400052fa
mov r8, qword [rsi]
lea rdx, str.NS_main:_callback_app_file_in_use__failed_to_exclusively_open_executable_file:__S
call fcn.140013970
lea r8, str.failed:__d_n
cmp ebx, 5
jne 0x140003251
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x23
jmp 0x140003267
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x25
call fcn.140001010
mov rcx, rbx
call fcn.14000c990
lea rcx, [0x14004e830]
call fcn.140020f04
test eax, eax
je 0x1400032c6
call fcn.14001c700
cmp dword [rax], 2
je 0x1400032c6
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005480
lea rdx, str.NS_main:_unable_to_remove_backup_of_callback_app_file__path:__S
lea r8, [0x14004e830]
call fcn.140013970
call fcn.14000c5f0
cmp r12, 0xffffffffffffffff
je 0x1400032da
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140020f04
test eax, eax
je 0x1400032f9
call fcn.14001c700
cmp dword [rax], 2
jne 0x1400021d7
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
mov edx, r13d
mov r8, rsi
jmp 0x140002870
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x140002fe6
cmp eax, ecx
jg 0x1400054c1
mov r8, qword [rsi]
lea rdx, str.NS_main:_callback_app_file_in_use__continuing_without_exclusive_access_for_executable_file:__S
call fcn.140013970
jmp 0x140002245
test r13, r13
je 0x14000334b
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor esi, esi
mov r13, qword [rsp + 0x50]
mov rcx, r14
call fcn.14001534c
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400051f6
test sil, sil
mov r8, r15
lea rax, [0x140041271]
cmove r8, rax
lea rdx, str.After_checking_IsProgramFilesPath__useService_s
call fcn.140013970
test sil, sil
je 0x140003dc3
mov r14, qword [rdi]
xor esi, esi
lea rcx, [rsp + 0x290]
mov r8d, 0x20a
xor edx, edx
call fcn.140016ea0
mov rcx, r14
call fcn.140023f00
cmp rax, 0x104
ja 0x140003401
lea rbx, [rsp + 0x290]
mov r8d, 0x104
mov rcx, rbx
mov rdx, r14
call fcn.1400243c8
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathStripToRootW]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
sete sil
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400052b9
test sil, sil
mov r8, r15
lea rax, [0x140041271]
cmove r8, rax
lea rdx, str.After_checking_IsLocalFile__useService_s
call fcn.140013970
test sil, sil
je 0x140003dc3
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r12, [rsp + 0x290]
mov rcx, rax
mov edx, 8
mov r8, r12
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14000387b
mov rcx, qword [rsp + 0x290]
lea rsi, [rsp + 0x80]
mov qword [rsp + 0x20], rsi
lea r14, [rsp + 0xd30]
mov edx, 0x12
mov r8, r14
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov ebx, eax
mov ebp, dword [r14]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x14000387b
cmp ebp, 3
jne 0x14000387b
mov qword [rsp + 0x20], r12
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem
mov rcx, 0xffffffff80000002
xor r8d, r8d
mov r9d, 0x20019
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000387b
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0xd30], 4
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
lea rdx, str.ConsentPromptBehaviorAdmin
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x290]
test eax, eax
je 0x1400037dd
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14000387b
lea rax, [rbp + 1]
mov qword [rsp + 0x68], rax
lea rax, [rbp*2 + 4]
add rbp, 2
mov r12, 0xffffffffffffffff
cmovns r12, rax
mov rcx, r12
call fcn.1400152f8
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, r12
call fcn.140016ea0
mov rcx, rbx
mov rdx, rbp
mov r9, r13
call fcn.140013b40
mov rcx, r14
mov rdx, rbx
mov r8, qword [rsp + 0x68]
call fcn.140020af8
mov ebp, eax
mov rcx, rbx
call fcn.14001534c
test ebp, ebp
jne 0x140002b67
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov sil, 1
jmp 0x14000334d
shr ebp, 1
lea rbx, [rbp*2]
mov rcx, rbx
call fcn.1400152f8
mov rsi, rax
xor r12d, r12d
mov rcx, rax
xor edx, edx
mov r8, rbx
call fcn.140016ea0
mov qword [rsp + 0x30], r13
mov r13, rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], 0
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion
lea r8, str.ProgramFilesDir
mov rcx, 0xffffffff80000002
mov r9d, 0x10002
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov esi, 1
test eax, eax
je 0x1400044fb
mov rcx, r13
call fcn.14001534c
jmp 0x140002bc9
lea rdx, str.maintenanceservice_tmp.exe
lea rcx, [rsp + 0x290]
call fcn.140037410
test eax, eax
je 0x140002fc8
lea rcx, [0x14004ea40]
call fcn.140023f00
cmp rax, 0x104
ja 0x140002fc8
mov rbp, r13
lea r15, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, r15
xor edx, edx
call fcn.140016ea0
lea rbx, [0x14004ea40]
mov r8d, 0x104
mov rcx, r15
mov rdx, rbx
call fcn.1400243c8
lea rdx, str.maintenanceservice.exe
mov rcx, r15
call fcn.140037410
lea rdx, [rsp + 0x290]
mov rcx, r15
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x140004a8d
lea rcx, [rsp + 0x290]
call fcn.140013ed0
test eax, eax
je 0x140004a7f
xorps xmm0, xmm0
movaps xmmword [rsp + 0x700], xmm0
movaps xmmword [rsp + 0x710], xmm0
movaps xmmword [rsp + 0x750], xmm0
movaps xmmword [rsp + 0x740], xmm0
movaps xmmword [rsp + 0x730], xmm0
movaps xmmword [rsp + 0x720], xmm0
xor r12d, r12d
mov qword [rsp + 0x760], r12
mov dword [rsp + 0x700], 0x68
lea rax, [0x140044194]
mov qword [rsp + 0x710], rax
lea r13, [rsp + 0x80]
mov qword [r13 + 0x10], r12
movaps xmmword [r13], xmm0
lea r15, [rsp + 0x910]
movaps xmmword [r15 + 0x70], xmm0
movaps xmmword [r15 + 0x60], xmm0
movaps xmmword [r15 + 0x50], xmm0
movaps xmmword [r15 + 0x40], xmm0
movaps xmmword [r15 + 0x30], xmm0
movaps xmmword [r15 + 0x20], xmm0
movaps xmmword [r15 + 0x10], xmm0
movaps xmmword [r15], xmm0
lea rdx, str.dummyparam.exe_upgrade
mov r8d, 0x3f
mov rcx, r15
call fcn.1400243c8
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
lea rcx, [rsp + 0x290]
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140004a8d
mov rcx, qword [rsp + 0x80]
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rsi
mov rcx, qword [rsp + 0x88]
call rsi
jmp 0x140004a8d
mov dword [rsp + 0xd30], 4
mov qword [rsp + 0x28], r14
lea rax, [rsp + 0x6d0]
mov qword [rsp + 0x20], rax
lea rdx, str.PromptOnSecureDesktop
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
jne 0x14000387b
mov eax, dword [rsp + 0x80]
or eax, dword [rsp + 0x6d0]
setne bl
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005863
test bl, bl
lea rax, [0x140041271]
cmove r15, rax
lea rdx, str.After_checking_IsUnpromptedElevation__useService_s
mov r8, r15
call fcn.140013970
test bl, bl
je 0x140003dc3
lea rcx, [rsp + 0x290]
call fcn.140015080
test eax, eax
je 0x140003a4c
lea rax, [rsp + 0xd30]
mov qword [rax], 0
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x290]
mov rcx, 0xffffffff80000002
xor r8d, r8d
mov r9d, 0x20119
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400038d4
mov rcx, qword [rsp + 0xd30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x9d], 0
xor esi, esi
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140016ea0
mov rcx, rbx
call fcn.140013590
test eax, eax
je 0x14000394a
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140016ea0
lea rcx, [0x140043f94]
mov rdx, rbx
call fcn.140013690
test eax, eax
jne 0x14000453d
xor esi, esi
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x3a
call fcn.140001010
mov rcx, rbx
call fcn.14000c990
lea r12d, [r13 + 2]
lea rcx, [r12*8]
call fcn.1400152f8
mov r15, rax
lea rax, str.MozillaMaintenance
mov qword [r15], rax
lea rax, str.software_update
mov qword [r15 + 8], rax
lea rcx, [r15 + 0x10]
mov r8d, r13d
shl r8, 3
mov rdx, rdi
call fcn.140028030
mov ecx, 5
call fcn.140013760
cmp eax, 1
mov qword [rsp + 0x50], r13
mov dword [rsp + 0x68], esi
jne 0x140003a7d
xor ecx, ecx
xor edx, edx
mov r8d, 5
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov ebp, 0x4269
test rax, rax
je 0x140003aa9
lea rdx, str.MozillaMaintenance
mov qword [rsp + 0x70], rax
mov rcx, rax
mov r8d, 0x10
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
test rax, rax
je 0x140003a87
mov r14, rax
mov ebx, 0xffffff9c
mov rsi, qword [sym.imp.ADVAPI32.dll_StartServiceW]
mov r13, qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r14
mov edx, r12d
mov r8, r15
call rsi
test eax, eax
jne 0x140003a94
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov ecx, 0x64
call r13
add ebx, 0x64
cmp ebx, 0x1324
jb 0x140003a20
jmp 0x140003a96
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400055c1
lea rdx, str.Cant_get_registry_certificate_location._useServicefalse
jmp 0x140003dbe
mov ebp, eax
add ebp, 0x4e20
jmp 0x140003aa9
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x140003aa9
xor ebp, ebp
mov rsi, qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, r14
call rsi
mov rcx, qword [rsp + 0x70]
call rsi
mov rcx, r15
call fcn.14001534c
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
test ebp, ebp
je 0x140003ae8
cmp eax, ecx
jg 0x1400055a9
lea r14, str.Launching_service_failed._useServicefalse
jmp 0x140003db6
cmp eax, ecx
jg 0x140005602
lea rdx, str.Launched_service_successfully
call fcn.140013970
xor ebp, ebp
cmp byte [0x14004e408], 0
jne 0x140003b1b
cmp byte [0x14004ec4b], 0
jne 0x140003b1b
call fcn.140007aa0
test eax, eax
sete bpl
mov ecx, 5
call fcn.140013760
cmp eax, 1
je 0x140003bb0
lea rax, [0x14000ce70]
lea rbx, [rsp + 0x290]
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], 0
lea rax, [rsp + 0xd30]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
lea r8, [0x14000ce90]
xor ecx, ecx
xor edx, edx
mov r9, rbx
call fcn.14001b8f4
mov qword [rbx], rax
test rax, rax
sete cl
xor bpl, 1
or bpl, cl
jne 0x140003b94
mov cl, 1
xor edx, edx
call fcn.140007b60
mov rax, qword [rsp + 0x290]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 1
call fcn.140013760
mov ecx, dword [0x14004fe88]
mov edx, dword [0x14004cde8]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
cmp eax, 1
jne 0x140003da7
cmp ecx, edx
jg 0x140005690
lea rdx, str.Service_stop_detected.
call fcn.140013970
mov byte [0x14004ea39], 1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x6e0], xmm0
movaps xmmword [rsp + 0x6d0], xmm0
mov qword [rsp + 0x6ed], 0
cmp byte [rsp + 0x68], 0
je 0x140003c7f
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140016ea0
mov rcx, rbx
call fcn.140013590
test eax, eax
je 0x140003c76
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140016ea0
lea rcx, [0x140043f94]
mov rdx, rbx
call fcn.140013690
test eax, eax
jne 0x1400046ad
cmp byte [0x14004ea39], 1
jne 0x140003c8c
cmp byte [0x14004e408], 0
je 0x14000445c
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000571e
lea rdx, str.Not_showing_a_UAC_prompt.
call fcn.140013970
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000575f
lea rdx, [0x140040cb1]
lea r8, str.true
call fcn.140013970
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400057a0
lea rdx, str.noServiceFallback_s
lea r8, [0x140041271]
call fcn.140013970
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400057e1
lea rdx, str.updateLockFileHandle_sINVALID_HANDLE_VALUE
lea r8, [0x1400428ca]
call fcn.140013970
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005822
lea rdx, str.forceServiceFallback_s
lea r8, [0x140041271]
call fcn.140013970
mov r13, qword [rsp + 0x50]
jmp 0x14000427e
cmp ecx, edx
jg 0x1400056d1
lea r14, str.Service_didnt_stop_after_10_minutes._useServicefalse
mov r13, qword [rsp + 0x50]
mov rdx, r14
call fcn.140013970
cmp byte [0x14004e408], 1
jne 0x140003e31
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x2b
call fcn.140001010
mov rcx, rsi
call fcn.14000c990
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005237
lea rdx, str.Non_critical_update_staging_error__Falling_back_to_non_staged_updates_and_exiting
call fcn.140013970
call fcn.14000c5f0
jmp 0x140003ebc
cmp byte [0x14004ec4b], 0
je 0x140003ed6
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x69
call fcn.140001010
mov rcx, rbx
call fcn.14000c990
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005278
lea rdx, str.Skipping_update_to_avoid_UAC_prompt_from_background_task.
call fcn.140013970
call fcn.14000c5f0
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
call fcn.14000c820
xor ebx, ebx
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400021dc
call fcn.14001534c
jmp 0x1400021dc
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000537c
lea rdx, str.Elevating_via_a_UAC_prompt
call fcn.140013970
xorps xmm6, xmm6
movaps xmmword [rsp + 0x6e0], xmm6
movaps xmmword [rsp + 0x6d0], xmm6
mov qword [rsp + 0x6ed], 0
xor esi, esi
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140016ea0
mov rcx, rbx
call fcn.140013590
test eax, eax
je 0x140003f7d
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140016ea0
lea rcx, [0x140043f94]
mov rdx, rbx
call fcn.140013690
test eax, eax
jne 0x1400043ac
xor esi, esi
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x4f
call fcn.140001010
mov rcx, rbx
call fcn.14000c990
xor eax, eax
lea rcx, [rsp + 0x80]
mov qword [rcx + 0x68], rax
movups xmmword [rcx + 0x58], xmm6
movups xmmword [rcx + 0x48], xmm6
movups xmmword [rcx + 0x38], xmm6
movups xmmword [rcx + 0x28], xmm6
movabs rdx, 0x54000000070
mov qword [rcx], rdx
mov qword [rcx + 8], rax
mov rax, qword [rdi]
mov qword [rcx + 0x18], rax
mov rax, qword [rsp + 0x58]
mov qword [rcx + 0x20], rax
lea rax, str.runas
mov qword [rcx + 0x10], rax
mov dword [rcx + 0x30], 1
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x14000421c
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400053fe
lea rdx, str.Elevation_successful._Waiting_for_elevated_updater_to_run.
call fcn.140013970
mov rcx, qword [rsp + 0xe8]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000543f
lea rdx, str.Elevated_updater_has_finished_running.
call fcn.140013970
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x14004ea39], 1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x6b0], xmm0
movaps xmmword [rsp + 0x6a0], xmm0
mov qword [rsp + 0x6bd], 0
test sil, sil
je 0x14000427e
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140016ea0
mov rcx, rbx
call fcn.140013590
test eax, eax
je 0x14000427e
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140016ea0
lea rcx, [0x140043f94]
mov rdx, rbx
call fcn.140013690
test eax, eax
je 0x14000427e
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.140037410
test eax, eax
je 0x14000427e
mov rsi, r13
lea rdx, [0x140043fee]
lea rcx, [rsp + 0xd30]
call fcn.140020cdc
test rax, rax
je 0x1400046a5
mov r14, rax
lea rcx, [rsp + 0x6a0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.14002284c
cmp rax, 1
jne 0x140004668
mov byte [rsp + 0x6c4], 0
mov rcx, r14
call fcn.14002215c
test eax, eax
je 0x1400041b9
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005967
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013970
lea rcx, [rsp + 0x6d0]
lea rdx, [rsp + 0x6a0]
mov r8d, 0x25
call fcn.140023770
test eax, eax
mov r13, rsi
jne 0x14000427e
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400059e9
lea rdx, str.The_secure_ID_hasnt_changed_after_launching_the_updater_using_runas
call fcn.140013970
mov byte [0x14004ea39], 0
jmp 0x1400046a5
mov byte [0x14004ea39], 0
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 9
call fcn.140001010
mov rcx, rbx
call fcn.14000c990
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005502
lea rdx, str.Elevation_canceled.
call fcn.140013970
mov rsi, qword [rsp + 0x60]
cmp byte [0x14004e408], 0
jne 0x14000433e
lea rdx, [rsp + 0x290]
mov byte [rdx], 0
lea rcx, str.succeeded
xor r8d, r8d
call fcn.14000ceb0
mov ecx, dword [0x14004fe88]
mov edx, dword [0x14004cde8]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
test al, al
je 0x140004327
cmp byte [rsp + 0x290], 0
je 0x140004327
cmp ecx, edx
jg 0x140005543
lea rdx, str.Running_LaunchWinPostProcess
call fcn.140013970
call fcn.14000baa0
test al, al
jne 0x14000433e
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005643
lea r14, str.Failed_to_run_LaunchWinPostProcess
mov rsi, qword [rsp + 0x60]
jmp 0x140004336
cmp ecx, edx
jg 0x140005584
lea r14, str.Not_running_LaunchWinPostProcess_because_update_status_is_notsucceeded.
mov rdx, r14
call fcn.140013970
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000533b
lea rdx, str.Update_complete
call fcn.140013970
call fcn.14000c5f0
xor ebx, ebx
cmp r13d, 7
jl 0x140003ebe
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
call fcn.14000c820
jmp 0x140003ebe
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.140037410
test eax, eax
je 0x140003f7b
lea rdx, [0x140043fee]
lea rcx, [rsp + 0xd30]
call fcn.140020cdc
test rax, rax
je 0x140003f7b
mov r14, rax
lea rcx, [rsp + 0x6d0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.14002284c
cmp rax, 1
sete sil
jne 0x140004416
mov byte [rsp + 0x6f4], 0
mov rcx, r14
call fcn.14002215c
test eax, eax
je 0x140003f7d
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400058a4
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013970
jmp 0x140003f7d
xor eax, eax
lea r8, [rsp + 0x290]
mov byte [r8], al
mov byte [r8 + 4], al
lea rcx, [0x1400418d4]
lea rdx, [rsp + 0xd30]
call fcn.14000ceb0
test al, al
je 0x140003c8c
cmp byte [rsp + 0xd30], 0
je 0x140003c8c
cmp byte [rsp + 0x294], 0
je 0x140003c8c
mov eax, dword [rsp + 0x290]
lea ecx, [rax - 0x18]
cmp ecx, 0xa
jb 0x1400044c0
add eax, 0xffffffcf
cmp eax, 9
ja 0x140003c8c
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400058e5
lea rdx, str.Service_specific_failure_detected._useServicefalse
call fcn.140013970
mov r13, qword [rsp + 0x50]
jmp 0x140003dc3
mov rcx, r13
mov rdx, rbp
call fcn.14002402c
test rax, rax
je 0x1400045ed
mov r12, rax
cmp word [r13 + rax*2 - 2], 0x5c
jne 0x1400045f5
mov rcx, r14
mov rdx, r13
mov r8, r12
call fcn.140020af8
test eax, eax
jne 0x14000465e
mov r12b, 1
jmp 0x14000361f
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.140037410
test eax, eax
je 0x140003948
lea rdx, [0x140043fee]
lea rcx, [rsp + 0xd30]
call fcn.140020cdc
test rax, rax
je 0x140003948
mov r14, rax
lea rcx, [rsp + 0x80]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.14002284c
cmp rax, 1
sete sil
jne 0x1400045a7
mov byte [rsp + 0xa4], 0
mov rcx, r14
call fcn.14002215c
test eax, eax
je 0x14000394a
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005926
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013970
jmp 0x14000394a
xor r12d, r12d
jmp 0x14000361f
lea rax, [r12 + 1]
mov qword [rsp + 0x68], rax
lea rax, [r12*2 + 4]
add r12, 2
mov rbp, 0xffffffffffffffff
cmovns rbp, rax
mov rcx, rbp
call fcn.1400152f8
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call fcn.140016ea0
mov rcx, rbx
mov rdx, r12
mov r9, r13
call fcn.140013b40
mov rcx, r14
mov rdx, rbx
mov r8, qword [rsp + 0x68]
call fcn.140020af8
mov ebp, eax
mov rcx, rbx
call fcn.14001534c
test ebp, ebp
je 0x140004535
mov r12b, 1
xor esi, esi
jmp 0x14000361f
mov rcx, r14
call fcn.14002215c
test eax, eax
je 0x1400046a5
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400059a8
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013970
mov r13, rsi
jmp 0x14000427e
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.140037410
test eax, eax
je 0x140003c76
lea rdx, [0x140043fee]
lea rcx, [rsp + 0xd30]
call fcn.140020cdc
test rax, rax
je 0x140003c76
mov r14, rax
lea rcx, [rsp + 0x6d0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.14002284c
cmp rax, 1
jne 0x140004a9a
mov byte [rsp + 0x6f4], 0
mov rcx, r14
call fcn.14002215c
test eax, eax
je 0x140004754
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005a2a
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013970
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x6d0]
mov r8d, 0x25
call fcn.140023770
test eax, eax
jne 0x140003c76
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005aac
lea rdx, str.The_secure_ID_hasnt_changed_after_launching_the_updater_using_the_service
call fcn.140013970
mov byte [0x14004ea39], 0
jmp 0x140003c8c
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140001875
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140001875
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400018ed
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x1400018ed
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000193a
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x14000193a
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140001979
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140001979
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400019b8
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x1400019b8
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400019f3
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x1400019f3
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140001a79
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140001a79
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140001af1
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140001af1
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140001b29
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140001b29
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140001b61
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140001b61
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400012c8
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x1400012c8
lea rcx, [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r13, rbp
mov r12, qword [rsp + 0x58]
jmp 0x140002fc8
mov rcx, r14
call fcn.14002215c
test eax, eax
je 0x140003c76
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005a6b
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013970
jmp 0x140003c76
lea rcx, [0x14004fe88]
call fcn.140015430
lea r14, str.Performing_a_staged_update
jmp 0x140004b49
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140001d4c
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140001d4c
lea rcx, [0x14004fe88]
call fcn.140015430
lea r14, str.Performing_a_replace_request
cmp dword [0x14004fe88], 0xffffffff
jne 0x140001ac4
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140001ac4
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140001c4e
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140001c4e
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140001f7d
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140001f7d
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140001f02
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140001f02
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140001fe6
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140001fe6
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140002dad
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140002dad
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140002085
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140002085
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140001cb9
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140001cb9
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140002de4
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140002de4
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140002587
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140002587
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140002c2f
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140002c2f
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400025b6
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x1400025b6
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400029fd
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x1400029fd
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140002816
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140002816
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140002e29
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140002e29
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140002fda
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140002fda
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400029b9
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x1400029b9
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140002c60
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140002c60
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400023f5
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x1400023f5
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140002e63
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140002e63
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140002955
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140002955
lea rcx, [0x14004fe88]
call fcn.140015430
lea rbx, str.NS_main:_directory_will_be_removed_on_OS_reboot:__S
jmp 0x14000513f
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140002ea1
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140002ea1
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000238f
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x14000238f
lea rcx, [0x14004fe88]
call fcn.140015430
lea rbx, str.NS_main:_failed_to_schedule_OS_reboot_removal_of_directory:__S
cmp dword [0x14004fe88], 0xffffffff
jne 0x140002d79
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140002d79
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000306e
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x14000306e
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000318f
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x14000318f
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000337f
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x14000337f
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003e1b
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003e1b
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003e8d
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003e8d
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003426
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003426
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000321e
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x14000321e
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000436c
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x14000436c
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003efb
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003efb
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003121
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003121
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000402b
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x14000402b
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000406f
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x14000406f
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400032b3
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x1400032b3
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003329
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003329
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140004272
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140004272
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400042df
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x1400042df
lea rcx, [0x14004fe88]
call fcn.140015430
lea r14, str.Not_running_LaunchWinPostProcess_because_update_status_is_notsucceeded.
cmp dword [0x14004fe88], 0xffffffff
jne 0x140004336
jmp 0x140005668
lea rcx, [0x14004fe88]
call fcn.140015430
lea r14, str.Launching_service_failed._useServicefalse
jmp 0x1400056e4
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003a71
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003a71
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003af0
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003af0
lea rcx, [0x14004fe88]
call fcn.140015430
lea r14, str.Failed_to_run_LaunchWinPostProcess
cmp dword [0x14004fe88], 0xffffffff
mov rsi, qword [rsp + 0x60]
jne 0x140004336
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140004336
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003bea
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003bea
lea rcx, [0x14004fe88]
call fcn.140015430
lea r14, str.Service_didnt_stop_after_10_minutes._useServicefalse
cmp dword [0x14004fe88], 0xffffffff
mov r13, qword [rsp + 0x50]
jne 0x140003dbb
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003dbb
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003cb1
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003cb1
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003ce2
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003ce2
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003d1a
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003d1a
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003d52
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003d52
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003d8a
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003d8a
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140003857
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140003857
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000444b
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x14000444b
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400044e5
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x1400044e5
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400045dc
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x1400045dc
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400041ad
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x1400041ad
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140004699
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140004699
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140004204
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140004204
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140004748
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140004748
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x140004acf
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x140004acf
lea rcx, [0x14004fe88]
call fcn.140015430
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000479c
mov qword [0x14004fc78], 0
lea rcx, [0x1400086f0]
call fcn.1400155c8
lea rcx, [0x14004fe88]
call fcn.140015498
jmp 0x14000479c