Function at 0x140005d00
Capabilities:
Copy file
Create directory
Create process on windows
Read file on windows
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1198
call fcn.140020360
sub rsp, rax
mov rax, qword [0x140038010]
xor rax, rsp
mov qword [rsp + 0x1190], rax
cmp ecx, 2
jg 0x140005d68
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000680d
lea rcx, [0x140039fa8]
lea rdx, str.Not_enough_command_line_arguments_to_execute_a_service_command
jmp 0x140005eea
mov rsi, rdx
mov edi, ecx
lea rbx, [rsp + 0xb40]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.1400101d0
mov rcx, rbx
call fcn.14000e3d0
mov ebx, eax
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000684e
mov r8, qword [rsi + 0x10]
lea rcx, [0x140039fa8]
test ebx, ebx
je 0x140005dd9
lea rdx, str.Executing_service_command__ls__ID:__ls
lea r9, [rsp + 0xb40]
call fcn.14000ce90
jmp 0x140005de5
lea rdx, str.Executing_service_command__ls
call fcn.14000ce90
mov rcx, qword [rsi + 0x10]
lea rdx, str.software_update
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x140005e56
mov rcx, qword [rsi + 0x10]
lea rdx, str.fix_update_directory_perms
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x140005ef6
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400068d0
mov r8, qword [rsi + 0x10]
lea rcx, [0x140039fa8]
lea rdx, str.Service_command_not_recognized:__ls.
call fcn.14000cf10
xor edi, edi
jmp 0x140005fdf
cmp edi, 4
jl 0x140005eb7
mov rcx, qword [rsi + 0x20]
call fcn.14000cfc0
test al, al
je 0x140005eb7
lea rbp, [rsi + 0x20]
mov rbx, qword [rbp]
mov rcx, rbx
call fcn.140017708
cmp rax, 9
ja 0x140006055
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006beb
lea rcx, [0x140039fa8]
lea rdx, str.The_patch_directory_path_length_is_not_valid_for_this_application.
jmp 0x140005eea
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006911
lea rcx, [0x140039fa8]
lea rdx, str.The_patch_directory_path_is_not_valid_for_this_application.
call fcn.14000cf10
xor edi, edi
jmp 0x14000602f
mov qword [rsp + 0xf80], 0
cmp edi, 3
jg 0x140005f43
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006b69
lea rcx, [0x140039fa8]
lea rdx, str.Didnt_get_an_install_dir_for_fix_update_directory_perms
call fcn.14000cf10
xor ecx, ecx
jmp 0x140005f47
mov rcx, qword [rsi + 0x18]
lea rax, [rsp + 0xf80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call fcn.1400090a0
test eax, eax
js 0x140005f7c
mov edi, 1
mov rbx, qword [rsp + 0xf80]
jmp 0x140005fc6
mov edi, eax
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006baa
mov rbx, qword [rsp + 0xf80]
lea rcx, [0x140039fa8]
lea rdx, str.Unable_to_set_the_permissions_on_the_update_directory___S_:__d
mov r8, rbx
mov r9d, edi
call fcn.14000cf10
xor edi, edi
mov qword [rsp + 0xf80], 0
test rbx, rbx
je 0x140005fdf
mov rcx, rbx
call fcn.14000e5e4
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000688f
test edi, edi
lea rax, str.Failure
lea r9, str.Success
cmove r9, rax
mov r8, qword [rsi + 8]
lea rcx, [0x140039fa8]
lea rdx, str.service_command__ls_complete_with_result:__ls.
call fcn.14000ce90
mov rcx, qword [rsp + 0x1190]
xor rcx, rsp
call fcn.140019600
mov eax, edi
add rsp, 0x1198
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rbx + rax*2]
add rcx, 0xffffffffffffffec
lea rdx, str.updates0
mov r8d, 0xa
call fcn.140015ddc
test eax, eax
je 0x1400060ab
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006c75
lea rcx, [0x140039fa8]
lea rdx, str.The_patch_directory_path_subdirectory_is_not_valid_for_this_application.
jmp 0x140005eea
mov rcx, qword [rbp]
call fcn.14000d720
mov rcx, qword [rbp]
call fcn.14000d5a0
test eax, eax
je 0x14000618f
cmp edi, 5
jl 0x140006102
mov rcx, qword [rsi + 0x28]
call fcn.14000cfc0
test al, al
je 0x140006102
lea r12d, [rdi - 3]
cmp r12d, 4
jne 0x1400061c7
mov rcx, qword [rsi + 0x30]
lea rdx, [0x140031414]
call fcn.1400176b4
test eax, eax
jne 0x1400061c9
jmp 0x140006374
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006e80
lea rcx, [0x140039fa8]
lea rdx, str.The_install_directory_path_is_not_valid_for_this_application.
call fcn.14000cf10
mov rcx, qword [rbp]
mov edx, 0x37
call fcn.14000de30
xor edi, edi
test eax, eax
jne 0x14000602f
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400070fe
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_for_previous_failure.
call fcn.14000cf10
jmp 0x14000602f
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006f43
lea rcx, [0x140039fa8]
lea rdx, str.Unable_to_write_to_secure_ID_file.
jmp 0x140005eea
jl 0x1400061ff
mov rcx, qword [rsi + 0x30]
lea rdx, str._replace
call fcn.1400104a8
test rax, rax
jne 0x140006374
mov rbx, qword [rsi + 0x30]
movzx ecx, word [rbx]
test cx, cx
je 0x140006374
add rbx, 2
call fcn.140017380
test eax, eax
jne 0x1400061e6
cmp edi, 6
jl 0x14000627b
mov rcx, qword [rsi + 0x30]
call fcn.14000cfc0
test al, al
je 0x14000627b
mov rdx, qword [rsi + 0x28]
mov rcx, qword [rsi + 0x30]
mov r8d, 0x104
call fcn.140015ddc
test eax, eax
je 0x140006374
cmp edi, 7
jge 0x1400062c1
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400073d3
lea rcx, [0x140039fa8]
lea rdx, str.Installation_directory_and_working_directory_must_be_the_same_for_non_staged_updates._Exiting.
call fcn.14000cf10
mov rcx, qword [rbp]
mov edx, 0x36
jmp 0x140006143
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000720c
lea rcx, [0x140039fa8]
lea rdx, str.The_working_directory_path_is_not_valid_for_this_application.
call fcn.14000cf10
mov rcx, qword [rbp]
mov edx, 0x38
jmp 0x140006143
mov rcx, qword [rsi + 0x38]
lea rdx, [0x140031414]
call fcn.1400176b4
test eax, eax
je 0x1400062ee
mov rcx, qword [rsi + 0x38]
lea rdx, str._replace
call fcn.1400104a8
test rax, rax
je 0x140006235
mov r9, qword [rsi + 0x30]
lea r14, [rsp + 0xf80]
mov rcx, r14
call fcn.140008000
mov rcx, r14
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x140006655
mov rdx, qword [rsi + 0x28]
lea rcx, [rsp + 0xf80]
mov r8d, 0x104
call fcn.140015ddc
test eax, eax
je 0x140006374
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400074d7
lea rcx, [0x140039fa8]
lea rdx, str.The_apply_to_directory_must_be_the_same_as_or_a_child_of_the_installation_directory__Exiting.
call fcn.14000cf10
mov rcx, qword [rbp]
mov edx, 0x34
jmp 0x1400064dc
lea r14, [rsi + 0x18]
lea rbx, [rsp + 0x930]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.1400101d0
mov ecx, r12d
mov rdx, r14
mov r8, rbx
call fcn.140005160
test eax, eax
je 0x140006490
call fcn.14000e130
test eax, eax
jne 0x140006532
lea rcx, [rsp + 0x930]
lea rdx, [rsp + 0xf80]
call fcn.14000bd90
test eax, eax
je 0x1400064d3
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000728e
lea rcx, [0x140039fa8]
lea rdx, str.Checking_for_Maintenance_Service_registry._key:__ls
lea rbx, [rsp + 0xf80]
mov r8, rbx
call fcn.14000ce90
mov qword [rsp + 0xd50], 0
lea rax, [rsp + 0xd50]
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
mov rdx, rbx
xor r8d, r8d
mov r9d, 0x20119
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x140006524
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007310
lea rcx, [0x140039fa8]
lea rdx, str.The_maintenance_service_registry_key_does_not_exist.
call fcn.14000cf10
mov rcx, qword [rbp]
mov edx, 0x39
jmp 0x1400064dc
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000724d
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_get_the_installation_directory
call fcn.14000cf10
mov rcx, qword [rbp]
mov edx, 0x21
jmp 0x1400064dc
mov rcx, qword [rbp]
mov edx, 0x35
call fcn.14000de30
test eax, eax
jne 0x14000651d
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400072cf
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_for_previous_failure.
call fcn.14000cf10
xor edi, edi
jmp 0x14000602f
mov rcx, qword [rsp + 0xd50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rbx, [rsp + 0x720]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.1400101d0
lea rdx, [rsp + 0x930]
mov r8d, 0x104
mov rcx, rbx
call fcn.140017bd0
lea rdx, str.updater.exe
mov rcx, rbx
call int.14000e380
test eax, eax
jne 0x1400065ab
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007414
lea rcx, [0x140039fa8]
lea rdx, str.Install_directory_updater_could_not_be_determined.
call fcn.14000cf10
mov r8, qword [rbp]
lea rcx, [rsp + 0x720]
lea rdx, [rsp + 0x930]
call fcn.1400052a0
mov ebx, eax
lea rcx, [rsp + 0x510]
mov r8d, 0x20a
xor edx, edx
call fcn.1400101d0
test bl, bl
je 0x1400066e5
lea rdx, [rsp + 0x510]
xor ecx, ecx
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x1400066a4
lea rcx, [rsp + 0x510]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
jne 0x1400067b3
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007496
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Couldnt_remove_file_spec_when_attempting_to_use_a_secure_updater_path.____d_
jmp 0x1400066dd
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007518
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Couldnt_remove_file_spec_when_attempting_to_verify_the_working_directory_path.____d_
mov r8d, eax
call fcn.14000cf10
mov rcx, qword [rbp]
mov edx, 0x47
jmp 0x1400064dc
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007559
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_obtain_module_filename_when_attempting_to_use_a_secure_updater_path.____d_
mov r8d, eax
call fcn.14000cf10
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007392
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_copy_path_to_secure_location.____d_
mov r8d, eax
call fcn.14000cf10
mov rcx, qword [rbp]
mov edx, 0x31
call fcn.14000de30
xor edi, edi
test eax, eax
jne 0x140006772
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007455
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_could_not_copy_updater_error
call fcn.14000cf10
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007351
mov r8, qword [rsi + 0x10]
lea rcx, [0x140039fa8]
lea rdx, str.Service_command__ls_complete.
call fcn.14000ce90
jmp 0x140005fdf
lea rdx, [0x140031192]
lea rcx, [rsp + 0x510]
call int.14000e380
test eax, eax
jne 0x140006952
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006c34
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Couldnt_append_file_spec_when_attempting_to_use_a_secure_updater_path.____d_
jmp 0x1400066dd
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005d55
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140005d55
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005db4
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140005db4
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006004
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006004
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005e38
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140005e38
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005edc
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140005edc
lea r15, [rsp + 0x510]
mov rcx, r15
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rdx, str.updater.exe
mov rcx, r15
call int.14000e380
mov ecx, dword [0x14003a1b8]
mov edx, dword [0x140038cbc]
mov rbx, qword gs:[0x58]
mov rdx, qword [rbx + rdx*8]
mov edx, dword [rdx + 4]
test eax, eax
je 0x140006c2c
cmp ecx, edx
jg 0x14000759a
mov r8, qword [r14]
mov qword [rsp + 0x20], r15
lea rcx, [0x140039fa8]
lea rdx, str.Passed_in_path:__ls__ignored___Install_dir_has:__ls__Using_this_path_for_updating:__ls.
lea rbx, [rsp + 0x720]
mov r9, rbx
call fcn.14000ce90
mov rcx, r15
call fcn.140005b50
mov rcx, rbx
mov rdx, r15
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x1400066e5
mov qword [r14], r15
lea rcx, [rsp + 0x300]
mov r8d, 0x20a
xor edx, edx
call fcn.1400101d0
lea rbx, [rsp + 0xf0]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.1400101d0
lea r8, str.updater.ini
mov rcx, rbx
mov rdx, r15
call fcn.14000d2f0
test eax, eax
je 0x140006ac1
lea r8, str.updater.ini
lea rcx, [rsp + 0x300]
lea rdx, [rsp + 0x720]
call fcn.14000d2f0
test eax, eax
je 0x140006ac1
lea rcx, [rsp + 0x300]
lea rdx, [rsp + 0xf0]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x140006ac1
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007761
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_copy_updater.ini_from:__ls_to__ls.____d_
lea r8, [rsp + 0x300]
lea r9, [rsp + 0xf0]
call fcn.14000cf10
cmp r12d, 2
ja 0x140006cb6
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400075db
lea rcx, [0x140039fa8]
lea rdx, str.Not_enough_command_line_parameters_specified._Updating_update.status.
call fcn.14000cf10
cmp r12d, 2
jne 0x140006b21
mov rcx, qword [rbp]
mov edx, 0x19
call fcn.14000de30
xor edi, edi
test eax, eax
jne 0x140007d5f
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000761c
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_service_update_failure.____d_
mov r8d, eax
call fcn.14000cf10
xor edi, edi
jmp 0x140007d5f
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005f2c
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140005f2c
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005fa3
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140005fa3
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005ea7
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140005ea7
cmp ecx, edx
jle 0x1400067f4
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400067f4
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x1400067f4
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006098
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006098
lea rbx, [rsp + 0xd50]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.1400101d0
mov ecx, r12d
mov rdx, r14
mov r8, rbx
call fcn.140005160
test eax, eax
je 0x140006df3
mov r8, qword [rbp]
mov rcx, qword [r14]
lea rdx, [rsp + 0xd50]
call fcn.1400052a0
mov ecx, dword [0x14003a1b8]
mov edx, dword [0x140038cbc]
mov rbx, qword gs:[0x58]
mov rdx, qword [rbx + rdx*8]
mov edx, dword [rdx + 4]
test al, al
je 0x140006ec1
cmp ecx, edx
jg 0x14000769e
lea rcx, [0x140039fa8]
lea rdx, str.Starting_update_process_as_the_service_in_session_0.
call fcn.14000ce90
xorps xmm0, xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], 0
movaps xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x80], 0x68
lea rax, str.winsta0Default
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x20], 0
lea rcx, [rsp + 0x58]
mov edx, r12d
mov r8, r14
xor r9d, r9d
call fcn.1400020d0
cmp r12d, 4
jne 0x140006f84
mov rcx, qword [rsi + 0x30]
lea rdx, [0x140031414]
call fcn.1400176b4
test eax, eax
jne 0x140006f8c
mov r15d, 2
cmp r15d, r12d
jle 0x140006fcb
jmp 0x140006fec
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000765d
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_get_the_installation_directory
call fcn.14000cf10
mov rcx, qword [rbp]
mov edx, 0x21
call fcn.14000de30
xor edi, edi
test eax, eax
jne 0x140007d5f
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400077e3
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_for_GetInstallationDir_failure.
call fcn.14000cf10
jmp 0x140007d5f
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006127
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006127
cmp ecx, edx
jg 0x1400076df
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_start_process_due_to_certificate_check_error_on_updater.exe._Updating_update.status.____d_
mov r8d, eax
call fcn.14000cf10
mov rcx, qword [rbp]
mov edx, 0x1a
call fcn.14000de30
xor edi, edi
test eax, eax
jne 0x140007d5f
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007824
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_pending_state_to_update.status.____d_
mov r8d, eax
call fcn.14000cf10
jmp 0x140007d5f
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400061b4
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x1400061b4
mov r15d, 3
jl 0x140006fc6
mov rcx, qword [rsi + 0x30]
lea rdx, str._replace
call fcn.1400104a8
mov r15d, 2
test rax, rax
jne 0x140006fc6
mov rbx, qword [rsi + 0x30]
movzx ecx, word [rbx]
test cx, cx
je 0x140006fc6
add rbx, 2
call fcn.140017380
test eax, eax
jne 0x140006fab
mov r15d, 3
cmp r15d, r12d
jg 0x140006fec
lea rax, [0x140031470]
mov qword [rsp + 0x90], rax
or byte [rsp + 0xbc], 1
mov word [rsp + 0xc0], 0
lea rcx, str.MOZ_USING_SERVICE1
call fcn.140015338
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007720
mov r8, qword [rsp + 0x58]
lea rcx, [0x140039fa8]
lea rdx, str.Starting_service_with_cmdline:__ls
call fcn.14000ce90
mov rdx, qword [rsp + 0x58]
mov rcx, qword [r14]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 0
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov r15d, eax
test eax, eax
je 0x14000713f
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400077a2
lea rcx, [0x140039fa8]
lea rdx, str.Process_was_started..._waiting_on_result.
call fcn.14000ce90
mov rcx, qword [rsp + 0x60]
mov edx, 0xdbba0
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x140007193
mov rcx, qword [rsp + 0x60]
mov dword [rsp + 0x54], 1
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [rsp + 0x50], 0
xor r12d, r12d
jmp 0x140007910
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006177
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006177
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007865
mov r9, qword [rsp + 0x58]
mov r8, qword [r14]
mov dword [rsp + 0x20], ebx
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_create_process_as_current_user__updaterPath:__ls__cmdLine:__ls.____d_
call fcn.14000cf10
xor r12d, r12d
jmp 0x140007ba1
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0xf80]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov ebx, eax
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400078a6
test ebx, ebx
je 0x1400078ea
mov r8d, dword [rsp + 0xf80]
lea rcx, [0x140039fa8]
lea rdx, str.Process_finished_with_return_code__d.
call fcn.14000ce90
xor r12d, r12d
cmp dword [rsp + 0xf80], 0
sete r12b
mov dword [rsp + 0x50], 0
jmp 0x140007908
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400062a0
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x1400062a0
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400064b5
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x1400064b5
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400063f5
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x1400063f5
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000650a
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x14000650a
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006472
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006472
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006797
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006797
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000670a
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x14000670a
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000625a
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x14000625a
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006598
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006598
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000675f
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x14000675f
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000663c
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x14000663c
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006353
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006353
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000667a
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x14000667a
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400066c9
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x1400066c9
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400069a3
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x1400069a3
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006af0
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006af0
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006b46
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006b46
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006e18
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006e18
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006d27
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006d27
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006ec9
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006ec9
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000701d
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x14000701d
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006a94
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006a94
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400070a8
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x1400070a8
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006e68
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006e68
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006f22
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140006f22
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000716c
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x14000716c
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400071cd
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
test ebx, ebx
jne 0x1400071d5
lea rcx, [0x140039fa8]
lea rdx, str.Process_finished_but_could_not_obtain_return_code.
call fcn.14000cf10
xor r12d, r12d
mov dword [rsp + 0x50], 1
mov dword [rsp + 0x54], 0
mov rcx, qword [rsp + 0x60]
mov rbx, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rbx
mov rcx, qword [rsp + 0x68]
call rbx
mov rbx, qword [rbp]
lea r14, [rsp + 0xf80]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.1400101d0
lea rdx, str..status
mov rcx, rbx
mov r8, r14
call fcn.14000d510
test eax, eax
je 0x140007a02
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
lea rcx, [rsp + 0xf80]
mov edx, 0x80000000
mov r8d, 7
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140007a3f
xorps xmm0, xmm0
movaps xmmword [rsp + 0xf70], xmm0
movaps xmmword [rsp + 0xf60], xmm0
mov qword [rsp + 0x20], 0
lea rdx, [rsp + 0xf60]
lea r9, [rsp + 0xec]
mov rcx, r14
mov r8d, 0x20
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140007a74
movabs rax, 0x676e69796c707061
xor ebx, ebx
cmp qword [rsp + 0xf60], rax
sete bl
mov r13d, 1
jmp 0x140007ab1
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007e31
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_get_path_for_the_secure_update_status_file
call fcn.14000cf10
jmp 0x140007ba1
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007eb3
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_open_update.status_file
jmp 0x140007aa7
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007ef4
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_read_from_update.status_file
call fcn.14000cf10
xor ebx, ebx
xor r13d, r13d
mov rax, r14
add rax, 1
cmp rax, 2
jb 0x140007ac7
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x140007ba1
test r13d, r13d
je 0x140007ba1
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007e72
lea rcx, [0x140039fa8]
test r12d, r12d
je 0x140007b62
lea rdx, str.update.status_is_still_applying_even_though_update_was_successful.
call fcn.14000ce90
mov rcx, qword [rbp]
mov edx, 0x1d
call fcn.14000de30
xor r12d, r12d
test eax, eax
jne 0x140007ba1
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007f76
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_still_applying_on_success_error.
jmp 0x140007a35
lea rdx, str.update.status_is_still_applying_and_update_was_not_successful.
call fcn.14000cf10
cmp dword [rsp + 0x54], 0
mov eax, 0x1e
mov ecx, 0x32
cmove ecx, eax
cmp dword [rsp + 0x50], 0
mov edx, 0x33
cmove edx, ecx
mov rcx, qword [rbp]
call fcn.14000de30
xor r12d, r12d
test eax, eax
je 0x140007c77
lea rcx, str.MOZ_USING_SERVICE
call fcn.140015338
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x58], 0
test rcx, rcx
je 0x140007bc5
call fcn.14000e5e4
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007caf
test r12d, r12d
je 0x140007cf4
lea rcx, [0x140039fa8]
lea rdx, str.updater.exe_was_launched_and_run_successfully_
call fcn.14000ce90
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007daf
mov rcx, qword [0x140039fa8]
test rcx, rcx
je 0x140007c3c
call fcn.140016194
cmp edi, 8
je 0x140007c4c
cmp edi, 7
jne 0x140007c60
mov rcx, qword [rsi + 0x30]
jmp 0x140007c50
mov rcx, qword [rsi + 0x38]
lea rdx, [0x140031414]
call fcn.1400176b4
test eax, eax
je 0x140007c6d
lea rcx, [rsp + 0xd50]
call fcn.14000d8b0
mov edi, 1
jmp 0x140007d5f
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007fb7
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_still_applying_on_failure_error.
jmp 0x140007a35
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007bea
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
test r12d, r12d
jne 0x140007bf3
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Error_running_update_process._Updating_update.status____d_
mov r8d, eax
call fcn.14000cf10
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007df0
mov rcx, qword [0x140039fa8]
test rcx, rcx
je 0x140007d46
call fcn.140016194
xor edi, edi
test r15d, r15d
jne 0x140007d5f
mov rcx, qword [rbp]
mov edx, 0x18
call fcn.14000de30
test eax, eax
je 0x140007d71
lea rcx, [rsp + 0x510]
call fcn.140005b50
jmp 0x140006772
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007f35
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_service_update_failure.____d_
jmp 0x140006f36
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007c2b
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140007c2b
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007d35
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140007d35
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007a27
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140007a27
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007afd
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140007afd
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007a64
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140007a64
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007a99
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140007a99
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007d96
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140007d96
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007b4f
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140007b4f
lea rcx, [0x14003a1b8]
call fcn.14000e750
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007c9c
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000e908
lea rcx, [0x14003a1b8]
call fcn.14000e7b8
jmp 0x140007c9c