Function at 0x140006bf0
Capabilities:
Check if file exists
Copy file
Create directory
Delete directory
Delete file
Get common file path
Get file attributes
Query environment variable
Set registry value
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xec8
mov rsi, rdx
mov edi, ecx
mov r15, qword [0x14003da78]
mov rax, qword [r15]
xor rax, rsp
mov qword [rsp + 0xec0], rax
mov dword [rsp + 0x5c], ecx
mov qword [rsp + 0x50], rdx
xor ecx, ecx
call sub.nss3.dll_NSS_NoDB_Init
test eax, eax
jne 0x140007e84
cmp edi, 3
jg 0x140006c64
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.Usage:_updater_patch_dir_install_dir_apply_to_dir__wait_pid__callback_working_dir_callback_path_args...___n
mov edx, 0x6a
mov r8d, 1
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
jmp 0x140007099
mov rdx, qword [rsi + 8]
lea rsi, [0x14005b840]
mov r8d, 0x104
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcsncpy
mov word [0x14005ba46], 0
xor ebx, ebx
lea rdi, [rsp + 0xcb0]
mov r8d, 0x208
mov rcx, rdi
xor edx, edx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
lea r8, str._supdate_elevated.lock
mov edx, 0x104
mov rcx, rdi
mov r9, rsi
call fcn.140004fe0
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
test eax, eax
je 0x140006cd0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [rax], 2
setne bl
mov byte [0x14005c498], bl
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + 8]
call fcn.140016bb0
test al, al
je 0x140006e42
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + 0x10]
call fcn.140016bb0
test al, al
je 0x140006e62
mov rax, qword [rsp + 0x50]
mov rdx, qword [rax + 0x10]
lea rsi, [0x14005bc60]
mov r8d, 0x104
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcsncpy
mov word [0x14005be66], 0
mov rcx, rsi
mov dx, 0x5c
call sub.api_ms_win_crt_private_l1_1_0.dll_wcsrchr
test rax, rax
je 0x140006d46
cmp word [rax + 2], 0
jne 0x140006d46
mov word [rax], 0
mov qword [rsp + 0x270], 0
lea rsi, [rsp + 0x270]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
lea rdx, str.SoftwareClassesApplications
mov rdi, qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call rdi
mov rcx, qword [rsp + 0x270]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 1
lea rdx, str.SoftwareClassesApplicationsupdater.exe
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call rdi
test eax, eax
je 0x140006eac
cmp dword [rsp + 0x5c], 5
jl 0x140006f44
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi64]
cmp rax, 0xffffffffffffffff
je 0x140006f48
mov rsi, rax
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + 0x20]
lea rdx, str._replace
call sub.api_ms_win_crt_private_l1_1_0.dll_wcsstr
test rax, rax
je 0x140006f59
lea rax, [0x14005c078]
jmp 0x140006f56
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, qword [rsp + 0x50]
mov r8, qword [rcx + 8]
lea rdx, str.The_patch_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140007091
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x270]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4b
call fcn.140018bd0
mov rcx, rsi
call fcn.140007f90
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, qword [rsp + 0x50]
mov r8, qword [rcx + 0x10]
lea rdx, str.The_install_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140007091
mov rcx, qword [rsp + 0x270]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, str.IsHostApp
mov rsi, qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, qword [rsp + 0x270]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, str.NoOpenWith
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, qword [rsp + 0x270]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, str.NoStartPage
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, qword [rsp + 0x270]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [rsp + 0x5c], 5
jge 0x140006dfc
xor esi, esi
jmp 0x140006f59
mov rsi, 0xffffffffffffffff
lea rax, [0x14005ba48]
mov byte [rax], 1
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + 0x18]
call fcn.140016bb0
test al, al
je 0x14000704c
mov rax, qword [rsp + 0x50]
mov rdx, qword [rax + 0x18]
lea rdi, [0x14005be70]
mov r8d, 0x104
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcsncpy
mov word [0x14005c076], 0
mov rcx, rdi
mov dx, 0x5c
call sub.api_ms_win_crt_private_l1_1_0.dll_wcsrchr
test rax, rax
je 0x140006fb3
cmp word [rax + 2], 0
jne 0x140006fb3
mov word [rax], 0
cmp dword [rsp + 0x5c], 7
jl 0x1400070cb
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + 0x30]
call fcn.140016bb0
test al, al
je 0x14000712b
lea rdi, [0x14005bc60]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rbx, rax
lea r14, [rsp + 0x270]
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rax, qword [rsp + 0x50]
mov rdx, qword [rax + 0x30]
mov rcx, r14
mov r8, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_wcsncpy
mov rcx, rdi
mov rdx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscmp
test eax, eax
je 0x1400073b6
mov ecx, 0x4e
call fcn.140007f10
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, qword [rsp + 0x50]
mov r8, qword [rcx + 0x30]
lea rdx, str.The_callback_file_must_be_located_in_the_installation_directory___S__n
jmp 0x140007091
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x270]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4c
call fcn.140018bd0
mov rcx, rsi
call fcn.140007f90
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, qword [rsp + 0x50]
mov r8, qword [rcx + 0x18]
lea rdx, str.The_working_directory_path_is_not_valid_for_this_application___S__n
mov rcx, rax
call fcn.140018b90
mov esi, 1
mov rax, qword [rsp + 0xec0]
xor rax, rsp
mov rcx, qword [r15]
cmp rcx, rax
jne 0x140007ec1
mov eax, esi
add rsp, 0xec8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movzx eax, byte [0x14005c079]
test al, al
jne 0x1400070e5
lea rcx, [rsp + 0x5c]
lea rdx, [rsp + 0x50]
call fcn.140002190
lea rcx, [rsp + 0xaa0]
mov r8d, 0x20a
xor edx, edx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
cmp byte [0x14005c498], 0
je 0x140007155
lea rdi, [0x14005b840]
mov rcx, rdi
call fcn.140016e70
lea rdx, str..log
lea r8, [rsp + 0xaa0]
mov rcx, rdi
call fcn.140016e00
jmp 0x140007175
mov ecx, 0x4d
call fcn.140007f10
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, qword [rsp + 0x50]
mov r8, qword [rcx + 0x30]
lea rdx, str.The_callback_file_path_is_not_valid_for_this_application___S__n
jmp 0x140007091
lea r8, str._supdate.log
lea r9, [0x14005b840]
lea rcx, [rsp + 0xaa0]
mov edx, 0x105
call fcn.140004fe0
movzx eax, byte [0x14005b818]
test al, al
je 0x140007ec6
lea rcx, [0x14005c900]
lea rdx, [rsp + 0xaa0]
call fcn.140016360
lea rcx, str.applying
call fcn.140007f90
test al, al
je 0x1400071ba
cmp byte [0x14005ba48], 0
je 0x1400071d8
lea rdi, str.Performing_a_staged_update
jmp 0x1400071e8
call fcn.140003270
lea rdx, str.failed_setting_status_to_applying
mov rcx, rax
call fcn.140016400
call fcn.1400080b0
jmp 0x140007099
cmp byte [0x14005c078], 1
jne 0x1400071f8
lea rdi, str.Performing_a_replace_request
call fcn.140003270
mov rcx, rax
mov rdx, rdi
call fcn.140016400
call fcn.140003270
lea rdx, str.PATCH_DIRECTORY__S
lea r8, [0x14005b840]
mov rcx, rax
call fcn.140016400
call fcn.140003270
lea rdx, str.INSTALLATION_DIRECTORY__S
lea rdi, [0x14005bc60]
mov rcx, rax
mov r8, rdi
call fcn.140016400
call fcn.140003270
lea rdx, str.WORKING_DIRECTORY__S
lea rbx, [0x14005be70]
mov rcx, rax
mov r8, rbx
call fcn.140016400
mov r8d, 0x104
mov rcx, rbx
mov rdx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
je 0x1400072ed
cmp byte [0x14005ba48], 0
jne 0x14000727f
cmp byte [0x14005c078], 0
je 0x14000742f
lea r8, [0x14003e664]
lea r9, [0x14005be70]
lea rbx, [rsp + 0x270]
mov edx, 0x104
mov rcx, rbx
call fcn.140004fe0
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x140007400
lea rdx, [0x14005bc60]
lea rcx, [rsp + 0x270]
mov r8d, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
je 0x1400072ed
mov ecx, 0x48
call fcn.140007f10
call fcn.140003270
lea rdx, str.The_apply_to_directory_must_be_the_same_as_or_a_child_of_the_installation_directory__Exiting.
jmp 0x1400071c6
test rsi, rsi
jle 0x14000733b
mov ecx, 0x100000
xor edx, edx
mov r8d, esi
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x14000733b
mov rsi, rax
mov rcx, rax
mov edx, 0x7530
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebx, eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x14000733b
call fcn.140003270
lea rdx, str.The_parent_process_didnt_exit__Continuing_with_update.
mov rcx, rax
call fcn.140016400
cmp byte [0x14005c078], 0
jne 0x14000734d
cmp byte [0x14005ba48], 1
jne 0x140007385
lea rsi, [rsp + 0x270]
mov r8d, 0x20a
mov rcx, rsi
xor edx, edx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov rcx, rsi
mov edx, 0x105
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x140007385
lea rcx, [rsp + 0x270]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wchdir]
cmp dword [rsp + 0x5c], 6
movzx eax, byte [0x14005ba48]
jle 0x1400073dc
test al, 1
jne 0x1400073e0
cmp byte [0x14005c078], 1
je 0x14000745e
mov rax, qword [rsp + 0x50]
mov r9, qword [rax + 0x30]
lea r8, str._s.update_in_progress.lock
jmp 0x1400073ee
lea rcx, str.MOZ_APP_SILENT_START
call sub.api_ms_win_crt_environment_l1_1_0.dll_getenv
test rax, rax
je 0x140007868
cmp byte [rax], 0
setne al
mov byte [0x14005c079], al
jmp 0x1400070d2
test al, 1
je 0x14000744a
lea r8, str._s_updated.update_in_progress.lock
lea r9, [0x14005bc60]
lea rcx, [rsp + 0x270]
mov edx, 0x104
jmp 0x14000749d
mov ecx, 0x47
call fcn.140007f10
call fcn.140003270
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Error_calling_PathRemoveFileSpecW:__lu
mov rcx, rsi
mov r8d, eax
call fcn.140016400
jmp 0x1400071ce
mov ecx, 0x4a
call fcn.140007f10
call fcn.140003270
lea rdx, str.Installation_directory_and_working_directory_must_be_the_same_for_non_staged_updates._Exiting.
jmp 0x1400071c6
mov rsi, 0xffffffffffffffff
cmp byte [0x14005c078], 1
jne 0x14000753c
lea rdx, [0x14005bc60]
lea rsi, [rsp + 0x890]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscpy
mov rcx, rsi
mov dx, 0x5c
call sub.api_ms_win_crt_private_l1_1_0.dll_wcsrchr
mov word [rax], 0
lea r8, str._smoz_update_in_progress.lock
lea rcx, [rsp + 0x270]
mov edx, 0x104
mov r9, rsi
call fcn.140004fe0
lea rcx, [rsp + 0x270]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
test eax, eax
je 0x1400074c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [rax], 2
jne 0x14000784a
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0x270]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140007512
xor ecx, ecx
call fcn.140016290
cmp rsi, 0xffffffffffffffff
je 0x140007875
cmp byte [0x14005ba48], 1
jne 0x140007533
lea rcx, [0x14005be70]
xor edx, edx
call fcn.140008280
cmp byte [0x14005c078], 0
jne 0x14000755c
lea rcx, [0x14005be70]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
test eax, eax
je 0x14000755c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [rax], 0x11
jne 0x1400071ce
lea rcx, [0x14005be70]
lea rdx, [rsp + 0x890]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x140007943
mov rbx, 0xffffffffffffffff
cmp dword [rsp + 0x5c], 7
jl 0x1400076bc
lea rcx, [rsp + 0x680]
mov ebx, 0x208
mov r8d, 0x208
xor edx, edx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r12, qword [rsp + 0x50]
mov r14, qword [r12 + 0x30]
lea rbp, [rsp + 0x270]
mov r8d, 0x410
mov rcx, rbp
xor edx, edx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
cmp byte [0x14005c078], 1
jne 0x140007689
mov rcx, qword [r12 + 0x30]
mov rdx, rdi
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
movsxd r14, eax
mov rax, qword [rsp + 0x50]
mov rdx, qword [rax + 0x30]
mov rcx, rbp
mov r8, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_wcsncpy
lea r12, [rsp + r14*2]
add r12, 0x270
sub rbx, r14
lea r13, [rdi + r14*2]
mov rcx, r12
mov rdx, r13
mov r8, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_wcsncpy
mov rcx, r13
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov dword [r12 + rax*2], 0x5c
lea r12, [r12 + rax*2]
add r12, 2
not rax
add rbx, rax
lea r13, [rsp + 0x60]
mov rcx, r13
mov rdx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscpy
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + 0x30]
mov rdx, r13
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
mov rcx, qword [rsp + 0x50]
cmp eax, r14d
cmova r14d, eax
movsxd rdx, r14d
add rdx, rdx
add rdx, qword [rcx + 0x30]
mov rcx, r12
mov r8, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_wcsncpy
mov r14, rbp
lea rdx, [rsp + 0x680]
mov rcx, r14
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x14000799a
mov rbx, 0xffffffffffffffff
cmp byte [0x14005c078], 0
je 0x140007a17
cmp byte [0x14005ba48], 0
jne 0x140007718
cmp byte [0x14005c078], 0
jne 0x140007718
lea rax, str.tobedeleted
mov qword [rsp + 0x20], rax
lea rsi, [0x14005ba50]
lea r8, str._s__s
lea r9, [0x14005be70]
mov edx, 0x104
mov rcx, rsi
call fcn.140004fe0
mov rcx, rsi
xor edx, edx
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__waccess]
test eax, eax
je 0x140007718
lea rcx, [0x14005ba50]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
lea rdx, [0x140008590]
lea rcx, [rsp + 0x270]
xor r8d, r8d
call fcn.140008510
test eax, eax
jne 0x140007757
cmp byte [0x14005ba48], 0
jne 0x140007757
cmp byte [0x14005c078], 0
jne 0x140007757
cmp byte [0x14005c079], 0
jne 0x140007757
xor ecx, ecx
mov dl, 1
call fcn.140002270
mov rcx, qword [rsp + 0x270]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x270]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x5c], 7
jl 0x1400077ce
cmp byte [0x14005c078], 0
jne 0x1400077ce
cmp rbx, 0xffffffffffffffff
je 0x140007797
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x14005c290]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
test eax, eax
je 0x1400077ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [rax], 2
je 0x1400077ce
call fcn.140003270
lea rdx, str.NS_main:_non_fatal_error_removing_backup_of_callback_app_file__path:__S
lea r8, [0x14005c290]
mov rcx, rax
call fcn.140016400
cmp byte [0x14005ba48], 0
jne 0x140007818
cmp byte [0x14005c078], 0
jne 0x140007818
lea rcx, [0x14005ba50]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wrmdir]
test eax, eax
je 0x140007818
call fcn.140003270
mov rsi, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov r9d, dword [rax]
lea rdx, str.NS_main:_unable_to_remove_directory:__S__err:__d
lea r8, str.tobedeleted
mov rcx, rsi
call fcn.140016400
call fcn.1400080b0
mov edx, dword [rsp + 0x5c]
cmp edx, 7
jl 0x14000783b
mov r8, qword [rsp + 0x50]
mov rcx, qword [r8 + 0x28]
add edx, 0xfffffffa
add r8, 0x30
call fcn.140006a30
movzx esi, byte [0x14005b828]
xor esi, 1
jmp 0x14000709e
cmp byte [0x14005c078], 1
jne 0x140007965
lea rcx, str.pending
call fcn.140007f90
jmp 0x140007978
xor eax, eax
mov byte [0x14005c079], al
jmp 0x1400070d2
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
test eax, eax
je 0x140007896
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [rax], 2
jne 0x140007989
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0xcb0]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140007989
mov rsi, rax
mov edx, dword [rsp + 0x5c]
dec edx
mov r8, qword [rsp + 0x50]
add r8, 8
mov qword [rsp + 0x20], 0
lea rcx, [rsp + 0x890]
xor r9d, r9d
call fcn.1400060c0
cmp qword [rsp + 0x890], 0
je 0x140007b04
cmp byte [0x14005ba48], 1
jne 0x140007b1c
mov ecx, 0x2b
call fcn.140007f10
call fcn.140003270
lea rdx, str.Non_critical_update_staging_error__Falling_back_to_non_staged_updates_and_exiting
mov rcx, rax
call fcn.140016400
call fcn.1400080b0
xor esi, esi
jmp 0x140007c92
mov ecx, 0x41
call fcn.140007f10
call fcn.140003270
lea rdx, str.NS_main:_unable_to_find_apply_to_dir:__S
lea r8, [0x14005be70]
mov rcx, rax
jmp 0x1400079b6
cmp byte [0x14005ba48], 1
jne 0x140007978
mov ecx, 0x2c
call fcn.140007f10
call fcn.140003270
lea rdx, str.Update_already_in_progress__Exiting
jmp 0x1400071c6
call fcn.140003270
lea rdx, str.Unable_to_create_elevated_lock_file__Exiting
jmp 0x1400071c6
mov ecx, 0x42
call fcn.140007f10
call fcn.140003270
lea rdx, str.NS_main:_unable_to_find_callback_file:__S
mov rcx, rax
mov r8, r14
call fcn.140016400
call fcn.1400080b0
cmp rsi, 0xffffffffffffffff
je 0x1400079cf
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
test eax, eax
je 0x1400079f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [rax], 2
jne 0x140007099
mov edx, dword [rsp + 0x5c]
cmp edx, 7
jl 0x140007099
mov r8, qword [rsp + 0x50]
mov rcx, qword [r8 + 0x28]
add edx, 0xfffffffa
add r8, 0x30
call fcn.140006a30
jmp 0x140007099
lea rcx, [rsp + 0x890]
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
movsxd rcx, eax
lea rax, [rsp + rcx*2]
add rax, 0x680
xor edx, edx
cmp word [rsp + rcx*2 + 0x680], 0x5c
sete dl
movzx eax, word [rax + rdx*2]
add rdx, rdx
lea rcx, [rdx + rcx*2]
lea rdx, [rsp + rcx]
add rdx, 0x682
xor ecx, ecx
lea r8, [0x14005c080]
mov r9d, 0x2f
cmp ax, 0x5c
cmove eax, r9d
mov word [rcx + r8], ax
movzx eax, word [rdx + rcx]
add rcx, 2
test ax, ax
jne 0x140007a64
mov word [rcx + r8], 0
mov rax, qword [rsp + 0x50]
mov r9, qword [rax + 0x30]
lea rcx, [0x14005c290]
lea r8, str._s.moz_callback
mov edx, 0x104
call fcn.140004fe0
cmp eax, 0x104
jb 0x140007b6c
mov ecx, 3
call fcn.140007f10
call fcn.140003270
lea rdx, str.NS_main:_callback_backup_path_truncated
mov rcx, rax
call fcn.140016400
call fcn.1400080b0
cmp rsi, 0xffffffffffffffff
je 0x140007ae3
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
test eax, eax
je 0x140007099
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
jmp 0x140007099
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1400080b0
mov esi, 1
jmp 0x140007c92
cmp byte [0x14005c079], 0
je 0x140007c4d
mov ecx, 0x69
call fcn.140007f10
call fcn.140003270
lea rdx, str.Skipping_update_to_avoid_UAC_prompt_from_background_task.
mov rcx, rax
call fcn.140016400
call fcn.1400080b0
mov r8, qword [rsp + 0x50]
mov rcx, qword [r8 + 0x28]
mov edx, dword [rsp + 0x5c]
add edx, 0xfffffffa
add r8, 0x30
call fcn.140006a30
xor esi, esi
jmp 0x140007c92
mov rax, qword [rsp + 0x50]
mov rcx, qword [rax + 0x30]
lea rdx, [0x14005c290]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x140007cb9
mov edi, 1
mov r13, qword [sym.imp.KERNEL32.dll_CreateFileW]
lea r12, str.NS_main:_callback_app_file_open_attempt__d_failed._File:__S._Last_error:__lu
mov rbx, qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
mov rcx, r14
mov edx, 0x40010000
mov r8d, 6
xor r9d, r9d
call r13
cmp rax, 0xffffffffffffffff
jne 0x140007d43
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
call fcn.140003270
mov dword [rsp + 0x20], ebp
mov rcx, rax
mov rdx, r12
mov r8d, edi
mov r9, r14
call fcn.140016400
mov ecx, 0x64
call rbx
inc edi
cmp edi, 0xb
jne 0x140007ba7
cmp ebp, 0x20
jne 0x140007dbb
movzx ebx, byte [0x14005c079]
call fcn.140003270
mov rcx, qword [rsp + 0x50]
mov r8, qword [rcx + 0x30]
test bl, bl
je 0x140007e69
lea rdx, str.NS_main:_callback_app_file_in_use__failed_to_exclusively_open_executable_file_from_background_task:__S
mov rcx, rax
call fcn.140016400
mov ecx, 0x6a
jmp 0x140007de6
mov ecx, 0x23
call fcn.140007f10
cmp byte [0x14005ba48], 0
je 0x140007d4b
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1400080b0
mov edx, dword [rsp + 0x5c]
xor esi, esi
cmp edx, 7
jl 0x140007c92
mov r8, qword [rsp + 0x50]
mov rcx, qword [r8 + 0x28]
add edx, 0xfffffffa
add r8, 0x30
call fcn.140006a30
mov rcx, qword [rsp + 0x890]
mov qword [rsp + 0x890], 0
test rcx, rcx
je 0x14000709e
call fcn.1400177b0
jmp 0x14000709e
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor ecx, ecx
cmp eax, 5
setne cl
add ecx, ecx
add ecx, 0x23
call fcn.140007f10
call fcn.140003270
mov rcx, qword [rsp + 0x50]
mov r8, qword [rcx + 0x30]
lea rdx, str.NS_main:_failed_to_copy_callback_file__S_into_place_at__S
lea r9, [0x14005c290]
mov rcx, rax
call fcn.140016400
call fcn.1400080b0
cmp rsi, 0xffffffffffffffff
je 0x140007d09
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
test eax, eax
je 0x140007d2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [rax], 2
jne 0x140007099
mov r8, qword [rsp + 0x50]
mov rcx, qword [r8 + 0x30]
add r8, 0x30
mov edx, dword [rsp + 0x5c]
add edx, 0xfffffffa
jmp 0x140007a0d
mov rbx, rax
jmp 0x1400076bc
mov byte [rsp + 0x680], 0
lea rcx, [rsp + 0x680]
call fcn.140008120
test al, al
je 0x140007c64
cmp byte [rsp + 0x680], 0
je 0x140007c64
lea rcx, [0x14005bc60]
lea rdx, [0x14005b840]
call fcn.1400065f0
test al, al
jne 0x140007c64
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
lea rcx, str.The_post_update_process_which_runs_as_the_user_for_service_update_could_not_be_launched.
mov edx, 0x58
mov r8d, 1
mov r9, rax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
jmp 0x140007c64
call fcn.140003270
mov rcx, qword [rsp + 0x50]
mov r8, qword [rcx + 0x30]
lea rdx, str.NS_main:_callback_app_file_in_use__failed_to_exclusively_open_executable_file:__S
mov rcx, rax
call fcn.140016400
xor eax, eax
cmp ebp, 5
setne al
lea ecx, [rax + rax]
add ecx, 0x23
call fcn.140007f10
lea rcx, [0x14005c290]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
test eax, eax
je 0x140007e22
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [rax], 2
je 0x140007e22
call fcn.140003270
lea rdx, str.NS_main:_unable_to_remove_backup_of_callback_app_file__path:__S
lea r8, [0x14005c290]
mov rcx, rax
call fcn.140016400
call fcn.1400080b0
cmp rsi, 0xffffffffffffffff
je 0x140007e36
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
test eax, eax
je 0x140007e57
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [rax], 2
jne 0x140007099
mov r8, qword [rsp + 0x50]
mov rcx, qword [r8 + 0x28]
mov edx, dword [rsp + 0x5c]
jmp 0x140007a06
lea rdx, str.NS_main:_callback_app_file_in_use__continuing_without_exclusive_access_for_executable_file:__S
mov rcx, rax
call fcn.140016400
mov rbx, 0xffffffffffffffff
jmp 0x1400076bc
call qword [sym.imp.nss3.dll_PR_GetError]
mov esi, eax
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rdi, rax
mov ecx, esi
call qword [sym.imp.nss3.dll_PR_ErrorToName]
lea rdx, str.Could_not_initialize_NSS:__s___d_
mov rcx, rdi
mov r8, rax
mov r9d, esi
call fcn.140018b90
mov ecx, 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll__exit
call fcn.140018700
lea rcx, [0x14005b818]
call fcn.1400174a0
test eax, eax
je 0x140007184
lea rdi, [0x14005c900]
mov rcx, rdi
call fcn.140016350
lea rcx, [0x14000ad20]
lea r8, [0x14005b770]
mov rdx, rdi
call fcn.1400182f0
lea rcx, [0x14005b818]
call fcn.14001757b
jmp 0x140007184