Function at 0x140001000
Capabilities:
Check if file exists
Copy file
Create a process with modified i/o handles and window
Create directory
Create process on windows
Delete file
Get common file path
Get disk information
Get file attributes
Move file
Query or enumerate registry value
Read file on windows
Set registry value
Start service

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf68
movaps xmmword [rsp + 0xf50], xmm6
mov rdi, rdx
mov esi, ecx
mov rax, qword [0x140052040]
xor rax, rsp
mov qword [rsp + 0xf48], rax
lea rcx, [0x140048796]
call fcn.140027674
test rax, rax
je 0x14000104b
cmp byte [rax], 0
setne al
jmp 0x14000104d
xor eax, eax
mov byte [0x140054a48], al
lea rcx, str.MOZ_USING_SERVICE
call fcn.140023f60
cmp esi, 2
jne 0x1400010eb
mov rcx, qword [rdi + 8]
lea rdx, str.__channels_allowed
call fcn.1400289f8
test eax, eax
jne 0x1400010f0
lea r8, str._s_update_settings.ini
lea r9, [0x140054a50]
lea rsi, [rsp + 0x290]
mov edx, 0x104
mov rcx, rsi
call fcn.140006290
lea rax, str.Settings
mov qword [rsp + 0x20], rax
lea rdx, str.ACCEPTED_MAR_CHANNEL_IDS
lea r9, [0x140054208]
mov ebx, 1
mov rcx, rsi
mov r8d, 1
call fcn.140015190
test eax, eax
jne 0x140001686
mov rdx, qword [0x140054208]
lea rcx, str.Channels_Allowed:__s_n
call fcn.14003da60
xor ebx, ebx
jmp 0x140001119
cmp esi, 3
jg 0x140001147
mov ecx, 2
call fcn.140017770
lea rcx, str.Usage:_updater_patch_dir_install_dir_apply_to_dir__wait_pid__callback_working_dir_callback_path_args...___n
mov edx, 0x6a
mov r8d, 1
mov r9, rax
call fcn.140027258
mov ebx, 1
mov rcx, qword [rsp + 0xf48]
xor rcx, rsp
call fcn.14002cd90
mov eax, ebx
movaps xmm6, xmmword [rsp + 0xf50]
add rsp, 0xf68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r13, [rdi + 8]
mov rdx, qword [rdi + 8]
lea rbx, [0x140054210]
mov r8d, 0x104
mov rcx, rbx
call fcn.140028f14
mov word [0x140054416], 0
lea r14, [rsp + 0xb20]
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call fcn.14003cdd0
lea r8, str._supdate_elevated.lock
mov edx, 0x104
mov rcx, r14
mov r9, rbx
call fcn.140006290
mov al, 1
cmp byte [0x140054a48], 0
jne 0x1400011c7
lea rcx, [rsp + 0xb20]
call fcn.140025288
test eax, eax
je 0x1400011c5
call fcn.1400204f4
cmp dword [rax], 2
setne al
jmp 0x1400011c7
xor eax, eax
mov byte [0x140054c58], al
lea rcx, [rsp + 0xb20]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
setne byte [0x140054c59]
mov rcx, qword [r13]
call fcn.140013cd0
test al, al
je 0x14000169c
mov rcx, qword [rdi + 0x10]
call fcn.140013cd0
test al, al
je 0x1400016b6
mov rdx, qword [rdi + 0x10]
lea rbx, [0x140054a50]
mov r8d, 0x104
mov rcx, rbx
call fcn.140028f14
mov word [0x140054c56], 0
mov rcx, rbx
mov dx, 0x5c
call fcn.1400172d0
test rax, rax
je 0x140001246
cmp word [rax + 2], 0
jne 0x140001246
mov word [rax], 0
lea r8, str._s_update.status
lea r9, [0x140054210]
lea rbx, [rsp + 0x290]
mov edx, 0x104
mov rcx, rbx
call fcn.140006290
lea rdx, [0x140049f3c]
mov rcx, rbx
call fcn.140025060
test rax, rax
je 0x1400012fa
mov r15, rax
xorps xmm0, xmm0
lea rcx, [rsp + 0xd30]
movaps xmmword [rcx + 0x10], xmm0
movaps xmmword [rcx], xmm0
mov edx, 1
mov r8d, 0x1f
mov r9, rax
call fcn.140026fc4
mov r14, rax
mov rcx, r15
call fcn.140026838
test eax, eax
je 0x140001449
xor r12d, r12d
mov rcx, r15
call fcn.14002667c
test eax, eax
je 0x1400012fd
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400049ed
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013a80
jmp 0x1400012fd
xor r12d, r12d
xor r14d, r14d
mov qword [rsp + 0x290], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r14
mov ebp, 2
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 0
lea rdx, str.SoftwareClassesApplications
mov r15, qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call r15
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 1
lea rdx, str.SoftwareClassesApplicationsupdater.exe
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call r15
test eax, eax
jne 0x140001402
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea rdx, str.IsHostApp
mov rbx, qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea rdx, str.NoOpenWith
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea rdx, str.NoStartPage
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, 5
jl 0x140001442
mov rcx, qword [rdi + 0x20]
call fcn.140025380
cmp rax, 0xffffffffffffffff
je 0x140001546
mov rbx, rax
mov rcx, qword [rdi + 0x20]
lea rdx, str._replace
call fcn.140017380
test rax, rax
je 0x140001557
lea rax, [0x140054c5a]
jmp 0x140001554
xor ebx, ebx
jmp 0x140001557
mov byte [rsp + r14 + 0xd30], 0
lea r14, [rsp + 0xd30]
mov rcx, r14
mov edx, 0x3a
call fcn.1400170a0
mov r12, rax
test rax, rax
jne 0x14000149c
lea rcx, [rsp + 0xd30]
mov edx, 0xa
call fcn.1400170a0
test rax, rax
jne 0x14000149c
lea rcx, [rsp + 0xd30]
call fcn.1400280e0
add rax, rsp
add rax, 0xd30
sub rax, r14
cmp rax, 0xf
jne 0x1400014d2
movabs rax, 0x2d676e69646e6570
xor rax, qword [rsp + 0xd30]
movabs rcx, 0x656369767265732d
xor rcx, qword [rsp + 0xd37]
or rcx, rax
je 0x14000238f
test r12, r12
jne 0x140001509
lea rcx, [rsp + 0xd30]
mov edx, 0xa
call fcn.1400170a0
mov r12, rax
test rax, rax
jne 0x140001509
lea rcx, [rsp + 0xd30]
call fcn.1400280e0
lea r12, [rsp + rax]
add r12, 0xd30
sub r12, r14
cmp r12, 0xf
jne 0x1400012b8
movabs rax, 0x2d6465696c707061
xor rax, qword [rsp + 0xd30]
movabs rcx, 0x656369767265732d
xor rcx, qword [rsp + 0xd37]
or rcx, rax
sete r12b
jmp 0x1400012bb
mov rbx, 0xffffffffffffffff
lea rax, [0x140054418]
mov byte [rax], 1
mov rcx, qword [rdi + 0x18]
call fcn.140013cd0
test al, al
je 0x140002291
mov rdx, qword [rdi + 0x18]
lea r14, [0x140054420]
mov r8d, 0x104
mov rcx, r14
call fcn.140028f14
mov word [0x140054626], 0
mov rcx, r14
mov dx, 0x5c
call fcn.1400172d0
test rax, rax
je 0x1400015a7
cmp word [rax + 2], 0
jne 0x1400015a7
mov word [rax], 0
cmp esi, 7
jl 0x140001705
mov rcx, qword [rdi + 0x30]
call fcn.140013cd0
test al, al
je 0x1400023e8
mov ebp, r12d
lea r14, [0x140054a50]
mov rcx, r14
call fcn.140028a4c
mov r15, rax
lea r12, [rsp + 0x290]
mov r8d, 0x208
mov rcx, r12
xor edx, edx
call fcn.14003cdd0
mov rdx, qword [rdi + 0x30]
mov rcx, r12
mov r8, r15
call fcn.140028f14
mov rcx, r14
mov rdx, r12
call fcn.1400289f8
test eax, eax
jne 0x140002429
cmp esi, 8
jl 0x140001666
lea r15d, [rsi - 6]
dec r15
xor r12d, r12d
lea r14, str.backgroundtask
mov rcx, qword [rdi + r12*8 + 0x38]
test rcx, rcx
je 0x14000165e
movzx eax, word [rcx]
cmp eax, 0x2f
je 0x140001644
cmp eax, 0x2d
jne 0x14000165e
cmp word [rcx + 2], 0x2d
je 0x14000164a
add rcx, 2
jmp 0x14000164e
add rcx, 4
mov rdx, r14
call fcn.1400289f8
test eax, eax
je 0x1400016fa
inc r12
cmp r15, r12
jne 0x140001626
lea rcx, str.MOZ_APP_SILENT_START
call fcn.140027674
test rax, rax
mov r12d, ebp
je 0x140001682
cmp byte [rax], 0
setne al
jmp 0x1400016ff
xor eax, eax
jmp 0x1400016ff
lea rcx, str.Error:__d_n
mov edx, 0x26
call fcn.14003da60
jmp 0x140001119
mov rsi, qword [r13]
mov ecx, 2
call fcn.140017770
lea rdx, str.The_patch_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140002468
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4b
call fcn.140005aa0
mov rcx, rsi
call fcn.14000ca90
mov rsi, qword [rdi + 0x10]
mov ecx, 2
call fcn.140017770
lea rdx, str.The_install_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140002468
mov al, 1
mov r12d, ebp
mov byte [0x140054c5b], al
lea rcx, [rsp + 0x910]
mov r8d, 0x20a
xor edx, edx
call fcn.14003cdd0
cmp byte [0x140054c58], 0
je 0x140001851
lea r14, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.14003cdd0
mov rcx, r14
call fcn.1400136a0
test eax, eax
je 0x14000177a
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.14003cdd0
lea rcx, [0x140049ebc]
mov rdx, r14
call fcn.1400137a0
test eax, eax
jne 0x140002478
lea rcx, [rsp + 0xd30]
call fcn.1400136a0
test eax, eax
je 0x1400017ba
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.14003cdd0
lea rcx, [0x1400496f0]
mov rdx, r14
call fcn.1400137a0
test eax, eax
jne 0x1400024a7
lea rcx, [rsp + 0xd30]
call fcn.1400136a0
test eax, eax
je 0x1400017fa
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.14003cdd0
lea rcx, [0x140049c90]
mov rdx, r14
call fcn.1400137a0
test eax, eax
jne 0x1400024d6
lea rcx, [rsp + 0x910]
call fcn.1400136a0
test eax, eax
je 0x14000188f
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.14003cdd0
lea rcx, [0x140049c90]
mov rdx, r14
call fcn.1400137a0
test eax, eax
je 0x14000188f
lea rcx, [rsp + 0x910]
lea rdx, [rsp + 0x290]
call fcn.14003dcc0
jmp 0x14000188f
cmp byte [0x140054c59], 0
lea rax, str.update.log
lea rcx, [0x140049c72]
cmove rcx, rax
mov qword [rsp + 0x20], rcx
lea r8, str._s_s
lea r9, [0x140054210]
lea rcx, [rsp + 0x910]
mov edx, 0x105
call fcn.140006290
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004763
cmp qword [0x140055c88], 0
jne 0x140001907
lea rcx, [rsp + 0x910]
call fcn.140028a4c
dec eax
cmp eax, 0x101
ja 0x140001907
lea r14, [0x140055c90]
lea rdx, [rsp + 0x910]
mov r8d, 0x104
mov rcx, r14
call fcn.140028f14
lea rdx, [0x14004964a]
mov rcx, r14
call fcn.140025060
mov qword [0x140055c88], rax
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400047a4
cmp byte [0x140054a48], 0
lea rbp, [0x140047179]
lea r15, str.true
mov r8, r15
cmove r8, rbp
lea rdx, str.sUsingService_s
call fcn.140013a80
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400047e5
cmp byte [0x140054c5b], 0
mov r8, r15
cmove r8, rbp
lea rdx, str.sUpdateSilently_s
call fcn.140013a80
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004826
cmp byte [0x140054c58], 0
mov r8, r15
cmove r8, rbp
lea rdx, str.gUseSecureOutputPath_s
call fcn.140013a80
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004867
test r12b, r12b
mov r8, r15
cmove r8, rbp
lea rdx, [0x140046bb9]
call fcn.140013a80
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400048a8
cmp byte [0x140054c59], 0
mov r8, r15
cmove r8, rbp
lea rdx, str.gIsElevated_s
call fcn.140013a80
lea rcx, str.applying
call fcn.14000ca90
test al, al
je 0x140001a93
cmp byte [0x140054418], 1
jne 0x140001ace
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004a8c
lea r14, str.Performing_a_staged_update
jmp 0x140001b03
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400048e9
lea rdx, str.failed_setting_status_to_applying
call fcn.140013a80
call fcn.14000c6f0
jmp 0x140001114
cmp byte [0x140054c5a], 1
jne 0x140001b0b
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004ae2
lea r14, str.Performing_a_replace_request
mov rdx, r14
call fcn.140013a80
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000492a
lea rdx, str.PATCH_DIRECTORY__S
lea r8, [0x140054210]
call fcn.140013a80
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000496b
lea rdx, str.INSTALLATION_DIRECTORY__S
lea r8, [0x140054a50]
call fcn.140013a80
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400049ac
lea rdx, str.WORKING_DIRECTORY__S
lea r14, [0x140054420]
mov r8, r14
call fcn.140013a80
lea rdx, [0x140054a50]
mov r8d, 0x104
mov rcx, r14
call fcn.140024e78
test eax, eax
je 0x140001c96
cmp byte [0x140054418], 0
jne 0x140001be9
cmp byte [0x140054c5a], 0
je 0x140002236
lea r8, [0x14004977a]
lea r9, [0x140054420]
lea r14, [rsp + 0x290]
mov edx, 0x104
mov rcx, r14
call fcn.140006290
mov rcx, r14
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x1400021cd
lea rdx, [0x140054a50]
lea rcx, [rsp + 0x290]
mov r8d, 0x104
call fcn.140024e78
test eax, eax
je 0x140001c96
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x48
call fcn.140005aa0
mov rcx, rsi
call fcn.14000ca90
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004b2a
lea rdx, str.The_apply_to_directory_must_be_the_same_as_or_a_child_of_the_installation_directory__Exiting.
jmp 0x140001abf
test rbx, rbx
jle 0x140001d07
mov ecx, 0x100000
xor edx, edx
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x140001d07
mov rbx, rax
mov rcx, rax
mov edx, 0x7530
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r14, rbp
mov ebp, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebp, ebp
mov rbp, r14
je 0x140001d07
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004cb0
lea rdx, str.The_parent_process_didnt_exit__Continuing_with_update.
call fcn.140013a80
cmp byte [0x140054c5a], 0
jne 0x140001d19
cmp byte [0x140054418], 1
jne 0x140001d50
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cdd0
mov rcx, rbx
mov edx, 0x105
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x140001d50
lea rcx, [rsp + 0x290]
call fcn.140024754
mov dword [rsp + 0x58], r12d
mov r12, 0xffffffffffffffff
cmp byte [0x140054a48], 0
je 0x140002161
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004aa1
lea rdx, str.Going_to_update_via_this_updater_instance.
call fcn.140013a80
cmp byte [0x140054418], 1
jne 0x140001db1
lea rcx, [0x140054420]
xor edx, edx
call fcn.14000d410
cmp byte [0x140054c5a], 0
jne 0x140001dd8
lea rcx, [0x140054420]
call fcn.140025190
test eax, eax
je 0x140001dd8
call fcn.1400204f4
cmp dword [rax], 0x11
jne 0x140001ac4
lea rcx, [0x140054420]
lea rdx, [rsp + 0xd30]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x1400022d5
mov r15, 0xffffffffffffffff
cmp esi, 7
jl 0x140001f47
lea rcx, [rsp + 0x700]
mov ebx, 0x208
mov r8d, 0x208
xor edx, edx
call fcn.14003cdd0
lea r14, [rdi + 0x30]
mov r13, qword [rdi + 0x30]
lea rcx, [rsp + 0x290]
mov r8d, 0x410
xor edx, edx
call fcn.14003cdd0
cmp byte [0x140054c5a], 1
jne 0x140001f14
mov rcx, r13
mov r13, r14
lea rdx, [0x140054a50]
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
movsxd r15, eax
mov rdx, qword [r14]
lea rcx, [rsp + 0x290]
mov r8, r15
call fcn.140028f14
mov qword [rsp + 0x50], r12
lea r12, [rsp + r15*2]
add r12, 0x290
sub rbx, r15
lea r13, [rsp + 0x290]
lea rax, [0x140054a50]
lea rbp, [rax + r15*2]
mov rcx, r12
mov rdx, rbp
mov r8, rbx
call fcn.140028f14
mov rcx, rbp
call fcn.140028a4c
lea r12, [r12 + rax*2]
add r12, 2
mov dword [r12 - 2], 0x5c
not rax
add rbx, rax
lea rbp, [rsp + 0x80]
mov rcx, rbp
lea rdx, [0x140054a50]
call fcn.140028a30
mov rcx, qword [r14]
mov rdx, rbp
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
cmp eax, r15d
cmova r15d, eax
movsxd rdx, r15d
add rdx, rdx
add rdx, qword [r14]
mov rcx, r12
mov r12, qword [rsp + 0x50]
mov r8, rbx
call fcn.140028f14
lea rdx, [rsp + 0x700]
mov rcx, r13
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x1400027dc
mov r15, 0xffffffffffffffff
cmp byte [0x140054c5a], 0
je 0x14000288a
cmp byte [0x140054418], 0
jne 0x140001fa1
cmp byte [0x140054c5a], 0
jne 0x140001fa1
lea rax, str.tobedeleted
mov qword [rsp + 0x20], rax
lea rbx, [0x140054c60]
lea r8, str._s__s
lea r9, [0x140054420]
mov edx, 0x104
mov rcx, rbx
call fcn.140006290
mov rcx, rbx
xor edx, edx
call fcn.140024694
test eax, eax
je 0x140001fa1
lea rcx, [0x140054c60]
call fcn.140025190
lea rax, [0x14000d660]
lea rbx, [rsp + 0x290]
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], 0
lea r13, [rsp + 0x700]
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], 0
lea r8, [0x14000cf90]
xor ecx, ecx
xor edx, edx
mov r9, rbx
call fcn.14001f688
mov qword [rbx], rax
test rax, rax
je 0x140002018
cmp byte [0x140054418], 0
jne 0x140002018
cmp byte [0x140054c5a], 0
jne 0x140002018
cmp byte [0x140054c5b], 0
jne 0x140002018
xor ecx, ecx
mov dl, 1
call fcn.140007c10
mov rax, qword [rsp + 0x290]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, 7
jl 0x1400020a3
cmp byte [0x140054c5a], 0
jne 0x1400020a3
cmp r15, 0xffffffffffffffff
je 0x140002051
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x140054840]
call fcn.140025288
test eax, eax
je 0x1400020a3
call fcn.1400204f4
cmp dword [rax], 2
je 0x1400020a3
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005097
lea rdx, str.NS_main:_non_fatal_error_removing_backup_of_callback_app_file__path:__S
lea r8, [0x140054840]
call fcn.140013a80
cmp byte [0x140054418], 0
jne 0x140002da2
cmp byte [0x140054c5a], 0
jne 0x140002da2
lea rcx, [0x140054c60]
call fcn.1400252e0
test eax, eax
je 0x140002da2
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004f7b
call fcn.1400204f4
mov r9d, dword [rax]
lea rdx, str.NS_main:_unable_to_remove_directory:__S__err:__d
lea r8, str.tobedeleted
call fcn.140013a80
lea rcx, [0x140054c60]
xor edx, edx
mov r8d, 4
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov ecx, dword [0x140055e98]
mov edx, dword [0x140052e00]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
test eax, eax
je 0x140002d84
cmp ecx, edx
jg 0x14000503e
lea rbx, str.NS_main:_directory_will_be_removed_on_OS_reboot:__S
jmp 0x140002d93
cmp esi, 6
jg 0x14000217c
cmp byte [0x140054418], 0
jne 0x14000217c
cmp byte [0x140054c5a], 1
jne 0x140001d69
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004bac
lea rdx, str.Checking_whether_elevation_is_needed
call fcn.140013a80
cmp byte [0x140054418], 1
jne 0x140002397
lea r8, str._s_updated.update_in_progress.lock
lea r9, [0x140054a50]
jmp 0x140002510
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x47
call fcn.140005aa0
mov rcx, rsi
call fcn.14000ca90
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004b6b
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Error_calling_PathRemoveFileSpecW:__lu
mov r8d, eax
call fcn.140013a80
jmp 0x140001ac4
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4a
call fcn.140005aa0
mov rcx, rsi
call fcn.14000ca90
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004bed
lea rdx, str.Installation_directory_and_working_directory_must_be_the_same_for_non_staged_updates._Exiting.
jmp 0x140001abf
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4c
call fcn.140005aa0
mov rcx, rsi
call fcn.14000ca90
mov rsi, qword [rdi + 0x18]
mov ecx, 2
call fcn.140017770
lea rdx, str.The_working_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140002468
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x41
call fcn.140005aa0
mov rcx, rbx
call fcn.14000ca90
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004c6f
lea rdx, str.NS_main:_unable_to_find_apply_to_dir:__S
lea r8, [0x140054420]
call fcn.140013a80
call fcn.14000c6f0
cmp r12, 0xffffffffffffffff
je 0x14000234b
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140025288
test eax, eax
je 0x14000236a
call fcn.1400204f4
cmp dword [rax], 2
jne 0x140001114
cmp esi, 7
jl 0x140001114
mov r9b, byte [0x140054a48]
add esi, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, esi
mov r8, rdi
jmp 0x140002880
mov r12b, 1
jmp 0x1400012bb
cmp byte [0x140054c5a], 1
jne 0x140002505
lea rdx, [0x140054a50]
lea rbx, [rsp + 0x290]
mov rcx, rbx
call fcn.140028a30
mov rcx, rbx
mov dx, 0x5c
call fcn.1400172d0
mov word [rax], 0
lea r8, str._smoz_update_in_progress.lock
lea rcx, [rsp + 0x700]
mov edx, 0x104
mov r9, rbx
jmp 0x14000251d
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4d
call fcn.140005aa0
mov rcx, rsi
call fcn.14000ca90
mov rsi, qword [rdi + 0x30]
mov ecx, 2
call fcn.140017770
lea rdx, str.The_callback_file_path_is_not_valid_for_this_application___S__n
jmp 0x140002468
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4e
call fcn.140005aa0
mov rcx, rsi
call fcn.14000ca90
mov rsi, qword [rdi + 0x30]
mov ecx, 2
call fcn.140017770
lea rdx, str.The_callback_file_must_be_located_in_the_installation_directory___S__n
mov rcx, rax
mov r8, rsi
call fcn.14003dad0
jmp 0x140001114
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.14003dcc0
test eax, eax
je 0x14000177a
lea rcx, [rsp + 0xd30]
call fcn.140025288
jmp 0x14000177a
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.14003dcc0
test eax, eax
je 0x1400017ba
lea rcx, [rsp + 0xd30]
call fcn.140025288
jmp 0x1400017ba
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.14003dcc0
test eax, eax
je 0x1400017fa
lea rcx, [rsp + 0xd30]
call fcn.140025288
jmp 0x1400017fa
mov r9, qword [rdi + 0x30]
lea r8, str._s.update_in_progress.lock
lea rcx, [rsp + 0x700]
mov edx, 0x104
call fcn.140006290
lea rcx, [rsp + 0x700]
call fcn.140025288
test eax, eax
je 0x14000253d
call fcn.1400204f4
cmp dword [rax], 2
jne 0x1400025ad
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0x700]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
cmp r12, 0xffffffffffffffff
je 0x1400025c6
cmp eax, ecx
jg 0x140004d32
lea rdx, str.Successfully_opened_lock_file
call fcn.140013a80
jmp 0x1400025e3
cmp byte [0x140054c5a], 1
jne 0x140002bf0
lea rcx, str.pending
jmp 0x140002c1e
cmp eax, ecx
jg 0x140004db4
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Failed_to_open_update_lock_file:__lu
mov r8d, eax
call fcn.140013a80
cmp byte [0x140054c59], 0
je 0x1400029de
lea rbx, [rsp + 0x80]
mov qword [rbx], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0xf00ff
mov r8, rbx
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1400029a4
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x68], r13
mov r13, qword [rsp + 0x80]
xor r12d, r12d
lea rbp, [rsp + 0xd30]
mov rbx, qword [sym.imp.KERNEL32.dll_GetLastError]
xorps xmm6, xmm6
lea rax, str.SeAssignPrimaryTokenPrivilege
mov r14, qword [r12 + rax]
xor ecx, ecx
mov rdx, r14
mov r8, rbp
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
test eax, eax
je 0x1400026b8
mov dword [rsp + 0x290], 1
mov rax, qword [rsp + 0xd30]
mov qword [rsp + 0x294], rax
mov dword [rsp + 0x29c], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
movups xmmword [rsp + 0x20], xmm6
mov rcx, r13
xor edx, edx
lea r8, [rsp + 0x290]
mov r9d, 0x10
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
test eax, eax
je 0x1400026b8
call rbx
test eax, eax
je 0x140002703
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140002735
call rbx
lea rdx, str.Could_not_disable_token_privilege_value:__s.___lu_
mov r8, r14
mov r9d, eax
call fcn.140013a80
add r12, 8
cmp r12, 0x110
jne 0x140002645
jmp 0x1400027af
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140002772
lea rdx, str.Disabled_unneeded_token_privilege:__s.
mov r8, r14
call fcn.140013a80
jmp 0x1400026ed
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400026d9
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400026d9
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002724
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002724
mov rcx, qword [rsp + 0x80]
test rcx, rcx
mov r13, qword [rsp + 0x68]
mov r12, qword [rsp + 0x50]
lea rbp, [0x140047179]
je 0x1400029de
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400029de
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x42
call fcn.140005aa0
mov rcx, rbx
call fcn.14000ca90
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004e36
lea rdx, str.NS_main:_unable_to_find_callback_file:__S
mov r8, r13
call fcn.140013a80
call fcn.14000c6f0
cmp r12, 0xffffffffffffffff
je 0x14000284e
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140025288
test eax, eax
je 0x14000286d
call fcn.1400204f4
cmp dword [rax], 2
jne 0x140001114
mov r9b, byte [0x140054a48]
add esi, 0xfffffffa
mov rcx, qword [rdi + 0x28]
mov edx, esi
mov r8, r14
call fcn.14000c920
jmp 0x140001114
lea rcx, [rsp + 0xd30]
call fcn.140028a4c
movsxd rcx, eax
lea rax, [rsp + rcx*2]
add rax, 0x700
xor edx, edx
cmp word [rax], 0x5c
sete dl
movzx eax, word [rax + rdx*2]
add rdx, rdx
lea rcx, [rdx + rcx*2]
lea rdx, [rsp + rcx]
add rdx, 0x702
lea rcx, [0x140054630]
mov r8d, 0x2f
cmp ax, 0x5c
cmove eax, r8d
mov word [rcx], ax
add rcx, 2
movzx eax, word [rdx]
add rdx, 2
test ax, ax
jne 0x1400028d0
mov word [rcx], 0
mov r9, qword [r14]
lea rcx, [0x140054840]
lea r8, str._s.moz_callback
mov edx, 0x104
call fcn.140006290
cmp eax, 0x104
jb 0x140002c85
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x80]
mov edx, 0x20
mov rcx, rsi
mov r9d, 3
call fcn.140005aa0
mov rcx, rsi
call fcn.14000ca90
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004ffd
lea rdx, str.NS_main:_callback_backup_path_truncated
call fcn.140013a80
call fcn.14000c6f0
cmp r12, 0xffffffffffffffff
je 0x140002985
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140025288
test eax, eax
je 0x140001114
call fcn.1400204f4
jmp 0x140001114
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004ef9
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Could_not_obtain_token_for_current_process__no_privileges_changed.___lu_
mov r8d, eax
call fcn.140013ba0
cmp r12, 0xffffffffffffffff
jne 0x140001d69
mov r12, rbp
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004df5
lea rdx, str.Cant_open_lock_file___seems_like_we_need_elevation
call fcn.140013a80
lea rcx, [rsp + 0xb20]
call fcn.140025288
test eax, eax
mov ebp, dword [rsp + 0x58]
je 0x140002a3f
call fcn.1400204f4
cmp dword [rax], 2
jne 0x140002c54
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0xb20]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140002c54
mov rbx, rax
lea edx, [rsi - 1]
lea r14, [rsp + 0x78]
mov rcx, r14
mov r8, r13
call fcn.140005b20
mov rax, qword [r14]
test rax, rax
je 0x140003060
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x50], rbx
test bpl, bpl
je 0x140003d73
lea rcx, [0x140054a50]
xor r14d, r14d
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x140003254
mov ebp, eax
mov ebx, eax
add rbx, rbx
mov rcx, rbx
call fcn.140015780
mov r13, rax
xor r14d, r14d
mov rcx, rax
xor edx, edx
mov r8, rbx
call fcn.14003cdd0
lea rcx, [0x140054a50]
mov rdx, r13
mov r8d, ebp
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
mov rbx, r12
je 0x140003397
mov qword [rsp + 0x58], r13
lea r9, [rsp + 0x290]
mov qword [r9], 0
lea rcx, [0x14003f010]
xor edx, edx
xor r8d, r8d
call sub.SHELL32.dll_SHGetKnownFolderPath
test eax, eax
js 0x140003314
mov r13, qword [rsp + 0x290]
mov rcx, r13
call fcn.140028a4c
test rax, rax
je 0x140003303
mov rbp, rax
cmp word [r13 + rax*2 - 2], 0x5c
jne 0x140003319
mov rcx, qword [rsp + 0x58]
mov rdx, r13
mov r8, rbp
call fcn.140024e78
test eax, eax
je 0x140003383
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [rsp + 0x290], 0
lea rax, [rsp + 0x290]
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion
lea r8, str.ProgramFilesDir
mov rcx, 0xffffffff80000002
mov r9d, 0x10002
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov ebx, 1
test eax, eax
jne 0x140002bdf
mov ebp, dword [rsp + 0x290]
cmp rbp, 4
jae 0x14000357c
xor r13d, r13d
test ebx, ebx
setne r14b
and r14b, r13b
jmp 0x14000338f
cmp byte [0x140054418], 1
jne 0x140002c23
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x2c
call fcn.140005aa0
mov rcx, rsi
call fcn.14000ca90
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004d73
lea rdx, str.Update_already_in_progress__Exiting
jmp 0x140001abf
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004f3a
lea rdx, str.Unable_to_create_elevated_lock_file__Exiting
jmp 0x140001abf
mov rcx, qword [r14]
lea rdx, [0x140054840]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x1400030a9
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x50], r12
mov ebp, 1
lea r12, str.NS_main:_callback_app_file_open_attempt__d_failed._File:__S._Last_error:__lu
mov r14, qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
mov rcx, r13
mov edx, 0x40010000
mov r8d, 6
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400030da
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140002d4a
mov dword [rsp + 0x20], ebx
mov rdx, r12
mov r8d, ebp
mov r9, r13
call fcn.140013a80
mov ecx, 0x64
call r14
inc ebp
cmp ebp, 0xb
jne 0x140002cbd
jmp 0x1400030e7
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002d20
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002d20
cmp ecx, edx
jg 0x1400050d8
lea rbx, str.NS_main:_failed_to_schedule_OS_reboot_removal_of_directory:__S
lea r8, str.tobedeleted
mov rdx, rbx
call fcn.140013a80
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004c2e
lea rdx, str.Running_LaunchCallbackAndPostProcessApps
call fcn.140013a80
cmp esi, 7
jge 0x140002e0e
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004cf1
lea rdx, str.No_callback_arg._Skipping_LaunchWinPostProcess_and_LaunchCallbackApp
call fcn.140013a80
jmp 0x14000304c
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
cmp byte [0x140054a4a], 1
jne 0x140002feb
cmp eax, ecx
jg 0x140004e77
lea rdx, str.Launching_Windows_post_update_process
call fcn.140013a80
call fcn.14000bba0
test al, al
jne 0x140002e88
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004fbc
lea rdx, str.The_post_update_process_was_not_launched_successfully
call fcn.140013a80
cmp byte [0x140054a48], 0
jne 0x140002fff
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005056
lea rdx, str.Starting_Service_Update_before_launching_callback_app
call fcn.140013a80
xor ecx, ecx
xor edx, edx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
test rax, rax
je 0x140002fff
mov r14, rax
lea rdx, str.MozillaMaintenance
mov rcx, rax
mov r8d, 0xf01ff
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rbx, rax
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test rbx, rbx
je 0x140002fff
lea r9, [rsp + 0x6d0]
mov rcx, rbx
xor edx, edx
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
test eax, eax
jne 0x140002f36
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400032d9
lea r15, [rsp + 0x6d0]
mov qword [rsp + 0x50], r12
mov r12d, dword [r15]
mov rcx, r12
call fcn.140015780
mov r14, rax
mov rcx, rax
xor edx, edx
mov r8, r12
call fcn.14003cdd0
mov rcx, rbx
mov rdx, r14
mov r8d, r12d
mov r12, qword [rsp + 0x50]
mov r9, r15
call qword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
mov ebp, eax
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test ebp, ebp
je 0x140002fe1
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea rcx, [rsp + 0x290]
mov r8d, 0x20a
xor edx, edx
call fcn.14003cdd0
mov rbx, qword [r14 + 0x10]
mov rcx, rbx
call fcn.140028a4c
cmp rax, 0x104
ja 0x140002fe1
lea r15, [rsp + 0x290]
mov r8d, 0x105
mov rcx, r15
mov rdx, rbx
call fcn.140028f14
mov rcx, r15
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
jne 0x1400035f7
mov rcx, r14
call fcn.140015790
jmp 0x140002fff
cmp eax, ecx
jg 0x140004eb8
lea rdx, str.Not_launching_Windows_post_update_process_because__gSucceeded
call fcn.140013a80
cmp r12, 0xffffffffffffffff
je 0x14000300e
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140025288
test eax, eax
je 0x140003029
call fcn.1400204f4
cmp dword [rax], 2
jne 0x14000304c
call fcn.14000c6f0
mov r9b, byte [0x140054a48]
add esi, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, esi
mov r8, rdi
call fcn.14000c920
jmp 0x140003051
call fcn.14000c6f0
movzx ebx, byte [0x140054a4a]
xor ebx, 1
jmp 0x140001119
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005120
lea rdx, str.Failed_to_make_command_line__Exiting
call fcn.140013a80
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.14000c6f0
mov ebx, 1
jmp 0x140003e6c
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.failed:__d_n
lea rdi, [rsp + 0x80]
mov edx, 0x20
mov rcx, rdi
cmp eax, 5
jne 0x14000315f
mov r9d, 0x23
jmp 0x140003165
mov r15, rax
mov r12, qword [rsp + 0x50]
jmp 0x140001f47
cmp ebx, 0x20
jne 0x1400031f2
cmp byte [0x140054c5b], 0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
mov r12, qword [rsp + 0x50]
mov r14, qword [rsp + 0x58]
je 0x1400032e7
cmp eax, ecx
jg 0x140005369
mov r8, qword [r14]
lea rdx, str.NS_main:_callback_app_file_in_use__failed_to_exclusively_open_executable_file_from_background_task:__S
call fcn.140013a80
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x6a
jmp 0x140003272
mov r9d, 0x25
call fcn.140005aa0
mov rcx, rdi
call fcn.14000ca90
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005161
mov r8, qword [r14]
lea rdx, str.NS_main:_failed_to_copy_callback_file__S_into_place_at__S
lea r9, [0x140054840]
call fcn.140013a80
call fcn.14000c6f0
cmp r12, 0xffffffffffffffff
je 0x1400031c1
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140025288
test eax, eax
je 0x1400031e0
call fcn.1400204f4
cmp dword [rax], 2
jne 0x140001114
mov r9b, byte [0x140054a48]
add esi, 0xfffffffa
mov rcx, qword [r14]
jmp 0x14000287b
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
mov r12, qword [rsp + 0x50]
mov r14, qword [rsp + 0x58]
jg 0x1400052a6
mov r8, qword [r14]
lea rdx, str.NS_main:_callback_app_file_in_use__failed_to_exclusively_open_executable_file:__S
call fcn.140013a80
lea r8, str.failed:__d_n
cmp ebx, 5
jne 0x14000325c
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x23
jmp 0x140003272
mov rbx, r12
jmp 0x14000339f
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x25
call fcn.140005aa0
mov rcx, rbx
call fcn.14000ca90
lea rcx, [0x140054840]
call fcn.140025288
test eax, eax
je 0x14000283a
call fcn.1400204f4
cmp dword [rax], 2
je 0x14000283a
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000542c
lea rdx, str.NS_main:_unable_to_remove_backup_of_callback_app_file__path:__S
lea r8, [0x140054840]
jmp 0x140002835
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x140002fff
cmp eax, ecx
jg 0x14000546d
mov r8, qword [r14]
lea rdx, str.NS_main:_callback_app_file_in_use__continuing_without_exclusive_access_for_executable_file:__S
call fcn.140013a80
jmp 0x140001f47
test r13, r13
mov rbx, r12
je 0x140003314
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor r14d, r14d
jmp 0x140003392
lea rax, [rbp + 1]
mov qword [rsp + 0x60], rax
lea rax, [rbp*2 + 4]
add rbp, 2
mov r14, 0xffffffffffffffff
cmovns r14, rax
mov rcx, r14
call fcn.140015780
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, r14
call fcn.14003cdd0
mov rcx, rbx
mov rdx, rbp
mov r9, r13
call fcn.140013c50
mov rcx, qword [rsp + 0x58]
mov rdx, rbx
mov r8, qword [rsp + 0x60]
call fcn.140024e78
mov ebp, eax
mov rcx, rbx
call fcn.140015790
test ebp, ebp
jne 0x140002b7b
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov r14b, 1
mov rbx, r12
mov r13, qword [rsp + 0x58]
mov rcx, r13
call fcn.140015790
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400051a2
test r14b, r14b
mov r8, r15
cmove r8, rbx
lea rdx, str.After_checking_IsProgramFilesPath__useService_s
call fcn.140013a80
test r14b, r14b
je 0x140003d73
mov r14, qword [rdi]
xor ebx, ebx
lea rcx, [rsp + 0x290]
mov r8d, 0x20a
xor edx, edx
call fcn.14003cdd0
mov rcx, r14
call fcn.140028a4c
cmp rax, 0x104
ja 0x14000343e
lea rbx, [rsp + 0x290]
mov r8d, 0x104
mov rcx, rbx
mov rdx, r14
call fcn.140028f14
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathStripToRootW]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
sete bl
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
mov r14, r12
jg 0x140005265
test bl, bl
mov r8, r15
cmove r8, r14
lea rdx, str.After_checking_IsLocalFile__useService_s
call fcn.140013a80
test bl, bl
je 0x140003d73
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r13, [rsp + 0x290]
mov rcx, rax
mov edx, 8
mov r8, r13
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14000383b
mov rcx, qword [rsp + 0x290]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
lea r14, [rsp + 0xd30]
mov edx, 0x12
mov r8, r14
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov ebx, eax
mov ebp, dword [r14]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x14000383b
cmp ebp, 3
jne 0x14000383b
mov qword [rsp + 0x20], r13
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem
mov rcx, 0xffffffff80000002
xor r8d, r8d
mov r9d, 0x20019
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000383b
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0xd30], 4
mov qword [rsp + 0x28], r14
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
lea rdx, str.ConsentPromptBehaviorAdmin
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x290]
test eax, eax
je 0x1400037a4
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14000383b
shr ebp, 1
lea rbx, [rbp*2]
mov rcx, rbx
call fcn.140015780
mov r14, rax
xor r13d, r13d
mov rcx, rax
xor edx, edx
mov r8, rbx
call fcn.14003cdd0
lea rax, [rsp + 0x290]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], 0
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion
lea r8, str.ProgramFilesDir
mov rcx, 0xffffffff80000002
mov r9d, 0x10002
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov ebx, 1
test eax, eax
je 0x1400044a2
mov rcx, r14
call fcn.140015790
jmp 0x140002be2
lea rdx, str.maintenanceservice_tmp.exe
lea rcx, [rsp + 0x290]
call fcn.14003dcc0
test eax, eax
je 0x140002fe1
lea rcx, [0x140054a50]
call fcn.140028a4c
cmp rax, 0x104
ja 0x140002fe1
lea r15, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, r15
xor edx, edx
call fcn.14003cdd0
lea rbx, [0x140054a50]
mov r8d, 0x104
mov rcx, r15
mov rdx, rbx
call fcn.140028f14
lea rdx, str.maintenanceservice.exe
mov rcx, r15
call fcn.14003dcc0
lea rdx, [rsp + 0x290]
mov rcx, r15
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x140004a3c
lea rcx, [rsp + 0x290]
call fcn.140013fe0
test eax, eax
je 0x140004a2e
xorps xmm0, xmm0
movaps xmmword [rsp + 0x700], xmm0
movaps xmmword [rsp + 0x710], xmm0
movaps xmmword [rsp + 0x750], xmm0
movaps xmmword [rsp + 0x740], xmm0
movaps xmmword [rsp + 0x730], xmm0
movaps xmmword [rsp + 0x720], xmm0
xor r12d, r12d
mov qword [rsp + 0x760], r12
mov dword [rsp + 0x700], 0x68
lea rax, [0x14004a0e2]
mov qword [rsp + 0x710], rax
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x10], r12
movaps xmmword [rbp], xmm0
lea r15, [rsp + 0x910]
movaps xmmword [r15 + 0x70], xmm0
movaps xmmword [r15 + 0x60], xmm0
movaps xmmword [r15 + 0x50], xmm0
movaps xmmword [r15 + 0x40], xmm0
movaps xmmword [r15 + 0x30], xmm0
movaps xmmword [r15 + 0x20], xmm0
movaps xmmword [r15 + 0x10], xmm0
movaps xmmword [r15], xmm0
lea rdx, str.dummyparam.exe_upgrade
mov r8d, 0x3f
mov rcx, r15
call fcn.140028f14
mov qword [rsp + 0x48], rbp
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
lea rcx, [rsp + 0x290]
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140004a3c
mov rcx, qword [rsp + 0x80]
mov rbx, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rbx
mov rcx, qword [rsp + 0x88]
call rbx
jmp 0x140004a3c
mov dword [rsp + 0xd30], 4
mov qword [rsp + 0x28], r14
lea rax, [rsp + 0x6d0]
mov qword [rsp + 0x20], rax
lea rdx, str.PromptOnSecureDesktop
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
jne 0x14000383b
mov eax, dword [rsp + 0x80]
or eax, dword [rsp + 0x6d0]
setne bl
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400057f8
test bl, bl
cmove r15, r12
lea rdx, str.After_checking_IsUnpromptedElevation__useService_s
mov r8, r15
call fcn.140013a80
test bl, bl
je 0x140003d73
lea rcx, [rsp + 0x290]
call fcn.140015500
test eax, eax
je 0x140003a06
lea rax, [rsp + 0xd30]
mov qword [rax], 0
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x290]
mov rcx, 0xffffffff80000002
xor r8d, r8d
mov r9d, 0x20119
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140003894
mov rcx, qword [rsp + 0xd30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x9d], 0
xor ebx, ebx
lea r14, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.14003cdd0
mov rcx, r14
call fcn.1400136a0
test eax, eax
je 0x14000390a
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cdd0
lea rcx, [0x140049ebc]
mov rdx, rbx
call fcn.1400137a0
test eax, eax
jne 0x1400044e6
xor ebx, ebx
mov dword [rsp + 0x58], ebx
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x3a
call fcn.140005aa0
mov rcx, rbx
call fcn.14000ca90
lea r12d, [rsi + 2]
lea rcx, [r12*8]
call fcn.140015780
mov r15, rax
lea rax, str.MozillaMaintenance
mov qword [r15], rax
lea rax, str.software_update
mov qword [r15 + 8], rax
lea rcx, [r15 + 0x10]
mov r8d, esi
shl r8, 3
mov rdx, rdi
call fcn.14003d190
mov ecx, 5
call fcn.140013870
cmp eax, 1
jne 0x140003a37
xor ecx, ecx
xor edx, edx
mov r8d, 5
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov ebp, 0x4269
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140003a63
lea rdx, str.MozillaMaintenance
mov rcx, qword [rsp + 0x60]
mov r8d, 0x10
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
test rax, rax
je 0x140003a41
mov r14, rax
mov ebx, 0xffffff9c
mov r13, qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r14
mov edx, r12d
mov r8, r15
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
jne 0x140003a4e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov ecx, 0x64
call r13
add ebx, 0x64
cmp ebx, 0x1324
jb 0x1400039d6
jmp 0x140003a50
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005560
lea rdx, str.Cant_get_registry_certificate_location._useServicefalse
jmp 0x140003d6e
mov ebp, eax
add ebp, 0x4e20
jmp 0x140003a63
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x140003a63
xor ebp, ebp
mov rbx, qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, r14
call rbx
mov rcx, qword [rsp + 0x60]
call rbx
mov rcx, r15
call fcn.140015790
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
test ebp, ebp
je 0x140003aa2
cmp eax, ecx
jg 0x140005548
lea r14, str.Launching_service_failed._useServicefalse
jmp 0x140003d6b
cmp eax, ecx
jg 0x1400055a1
lea rdx, str.Launched_service_successfully
call fcn.140013a80
xor ebp, ebp
cmp byte [0x140054418], 0
jne 0x140003ad5
cmp byte [0x140054c5b], 0
jne 0x140003ad5
call fcn.140007ad0
test eax, eax
sete bpl
mov ecx, 5
call fcn.140013870
cmp eax, 1
je 0x140003b6a
lea rax, [0x14000cf70]
lea rbx, [rsp + 0x290]
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], 0
lea rax, [rsp + 0xd30]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
lea r8, [0x14000cf90]
xor ecx, ecx
xor edx, edx
mov r9, rbx
call fcn.14001f688
mov qword [rbx], rax
test rax, rax
sete cl
xor bpl, 1
or bpl, cl
jne 0x140003b4e
mov cl, 1
xor edx, edx
call fcn.140007c10
mov rax, qword [rsp + 0x290]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 1
call fcn.140013870
mov ecx, dword [0x140055e98]
mov edx, dword [0x140052e00]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
cmp eax, 1
jne 0x140003d5c
cmp ecx, edx
jg 0x14000562a
lea rdx, str.Service_stop_detected.
call fcn.140013a80
mov byte [0x140054a49], 1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x6e0], xmm0
movaps xmmword [rsp + 0x6d0], xmm0
mov qword [rsp + 0x6ed], 0
cmp byte [rsp + 0x58], 0
je 0x140003c39
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cdd0
mov rcx, rbx
call fcn.1400136a0
test eax, eax
je 0x140003c30
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cdd0
lea rcx, [0x140049ebc]
mov rdx, rbx
call fcn.1400137a0
test eax, eax
jne 0x14000465c
cmp byte [0x140054a49], 1
jne 0x140003c46
cmp byte [0x140054418], 0
je 0x14000440d
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400056b3
lea rdx, str.Not_showing_a_UAC_prompt.
call fcn.140013a80
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400056f4
lea rdx, [0x140046bb9]
lea r8, str.true
call fcn.140013a80
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005735
lea rdx, str.noServiceFallback_s
lea r8, [0x140047179]
call fcn.140013a80
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005776
lea rdx, str.updateLockFileHandle_sINVALID_HANDLE_VALUE
lea r8, [0x1400487d2]
call fcn.140013a80
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400057b7
lea rdx, str.forceServiceFallback_s
lea r8, [0x140047179]
call fcn.140013a80
jmp 0x140004232
cmp ecx, edx
jg 0x14000566b
lea r14, str.Service_didnt_stop_after_10_minutes._useServicefalse
mov rdx, r14
call fcn.140013a80
cmp byte [0x140054418], 1
jne 0x140003de1
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x2b
call fcn.140005aa0
mov rcx, rsi
call fcn.14000ca90
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400051e3
lea rdx, str.Non_critical_update_staging_error__Falling_back_to_non_staged_updates_and_exiting
call fcn.140013a80
call fcn.14000c6f0
jmp 0x140003e6a
cmp byte [0x140054c5b], 0
je 0x140003e84
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x69
call fcn.140005aa0
mov rcx, rbx
call fcn.14000ca90
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005224
lea rdx, str.Skipping_update_to_avoid_UAC_prompt_from_background_task.
call fcn.140013a80
call fcn.14000c6f0
mov r9b, byte [0x140054a48]
add esi, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, esi
mov r8, rdi
call fcn.14000c920
xor ebx, ebx
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x140001119
call fcn.140015790
jmp 0x140001119
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005328
lea rdx, str.Elevating_via_a_UAC_prompt
call fcn.140013a80
xorps xmm6, xmm6
movaps xmmword [rsp + 0x6e0], xmm6
movaps xmmword [rsp + 0x6d0], xmm6
mov qword [rsp + 0x6ed], 0
xor ebp, ebp
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cdd0
mov rcx, rbx
call fcn.1400136a0
test eax, eax
je 0x140003f2b
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cdd0
lea rcx, [0x140049ebc]
mov rdx, rbx
call fcn.1400137a0
test eax, eax
jne 0x14000435d
xor ebp, ebp
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x4f
call fcn.140005aa0
mov rcx, rbx
call fcn.14000ca90
xor eax, eax
lea rcx, [rsp + 0x80]
mov qword [rcx + 0x68], rax
movups xmmword [rcx + 0x58], xmm6
movups xmmword [rcx + 0x48], xmm6
movups xmmword [rcx + 0x38], xmm6
movups xmmword [rcx + 0x28], xmm6
movabs rdx, 0x54000000070
mov qword [rcx], rdx
mov qword [rcx + 8], rax
mov rax, qword [rdi]
mov qword [rcx + 0x18], rax
mov rax, qword [rsp + 0x68]
mov qword [rcx + 0x20], rax
lea rax, str.runas
mov qword [rcx + 0x10], rax
mov dword [rcx + 0x30], 1
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x1400041d0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400053aa
lea rdx, str.Elevation_successful._Waiting_for_elevated_updater_to_run.
call fcn.140013a80
mov rcx, qword [rsp + 0xe8]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400053eb
lea rdx, str.Elevated_updater_has_finished_running.
call fcn.140013a80
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x140054a49], 1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x6b0], xmm0
movaps xmmword [rsp + 0x6a0], xmm0
mov qword [rsp + 0x6bd], 0
test bpl, bpl
mov r14, qword [rsp + 0x50]
je 0x140004237
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cdd0
mov rcx, rbx
call fcn.1400136a0
test eax, eax
je 0x140004237
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cdd0
lea rcx, [0x140049ebc]
mov rdx, rbx
call fcn.1400137a0
test eax, eax
je 0x140004232
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.14003dcc0
test eax, eax
mov r14, qword [rsp + 0x50]
je 0x140004237
lea rdx, [0x140049f3c]
lea rcx, [rsp + 0xd30]
call fcn.140025060
test rax, rax
je 0x140004232
mov r14, rax
lea rcx, [rsp + 0x6a0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140026fc4
cmp rax, 1
jne 0x14000461b
mov byte [rsp + 0x6c4], 0
mov rcx, r14
call fcn.14002667c
test eax, eax
je 0x14000416e
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400058fc
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013a80
lea rcx, [rsp + 0x6d0]
lea rdx, [rsp + 0x6a0]
mov r8d, 0x25
call fcn.1400281a0
test eax, eax
mov r14, qword [rsp + 0x50]
jne 0x140004237
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000597e
lea rdx, str.The_secure_ID_hasnt_changed_after_launching_the_updater_using_runas
call fcn.140013a80
mov byte [0x140054a49], 0
jmp 0x140004232
mov byte [0x140054a49], 0
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 9
call fcn.140005aa0
mov rcx, rbx
call fcn.14000ca90
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400054ae
lea rdx, str.Elevation_canceled.
call fcn.140013a80
mov r14, qword [rsp + 0x50]
cmp byte [0x140054418], 0
jne 0x1400042f2
lea rdx, [rsp + 0x290]
mov byte [rdx], 0
lea rcx, str.succeeded
xor r8d, r8d
call fcn.14000cfb0
mov ecx, dword [0x140055e98]
mov edx, dword [0x140052e00]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
test al, al
je 0x1400042d6
cmp byte [rsp + 0x290], 0
je 0x1400042d6
cmp ecx, edx
jg 0x1400054ef
lea rdx, str.Running_LaunchWinPostProcess
call fcn.140013a80
call fcn.14000bba0
test al, al
jne 0x1400042ed
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400055e2
lea r14, str.Failed_to_run_LaunchWinPostProcess
jmp 0x1400042e5
cmp ecx, edx
jg 0x140005530
lea r14, str.Not_running_LaunchWinPostProcess_because_update_status_is_notsucceeded.
mov rdx, r14
call fcn.140013a80
mov r14, qword [rsp + 0x50]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400052e7
lea rdx, str.Update_complete
call fcn.140013a80
call fcn.14000c6f0
xor ebx, ebx
cmp esi, 7
jl 0x140003e6c
mov r9b, byte [0x140054a48]
add esi, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, esi
mov r8, rdi
call fcn.14000c920
jmp 0x140003e6c
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.14003dcc0
test eax, eax
je 0x140003f29
lea rdx, [0x140049f3c]
lea rcx, [rsp + 0xd30]
call fcn.140025060
test rax, rax
je 0x140003f29
mov r14, rax
lea rcx, [rsp + 0x6d0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140026fc4
cmp rax, 1
sete bpl
jne 0x1400043c7
mov byte [rsp + 0x6f4], 0
mov rcx, r14
call fcn.14002667c
test eax, eax
je 0x140003f2b
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005839
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013a80
jmp 0x140003f2b
xor eax, eax
lea r8, [rsp + 0x290]
mov byte [r8], al
mov byte [r8 + 4], al
lea rcx, [0x1400477dc]
lea rdx, [rsp + 0xd30]
call fcn.14000cfb0
test al, al
je 0x140003c46
cmp byte [rsp + 0xd30], 0
je 0x140003c46
cmp byte [rsp + 0x294], 0
je 0x140003c46
mov eax, dword [rsp + 0x290]
lea ecx, [rax - 0x18]
cmp ecx, 0xa
jb 0x140004471
add eax, 0xffffffcf
cmp eax, 9
ja 0x140003c46
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000587a
lea rdx, str.Service_specific_failure_detected._useServicefalse
jmp 0x140003d6e
mov rcx, r14
mov rdx, rbp
call fcn.140028b78
test rax, rax
je 0x140004595
mov r13, rax
cmp word [r14 + rax*2 - 2], 0x5c
jne 0x14000459d
mov rcx, qword [rsp + 0x58]
mov rdx, r14
mov r8, r13
call fcn.140024e78
test eax, eax
jne 0x140004611
mov r13b, 1
jmp 0x1400035ea
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.14003dcc0
test eax, eax
je 0x140003908
lea rdx, [0x140049f3c]
lea rcx, [rsp + 0xd30]
call fcn.140025060
test rax, rax
je 0x140003908
mov r14, rax
lea rcx, [rsp + 0x80]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140026fc4
cmp rax, 1
sete bl
jne 0x14000454f
mov byte [rsp + 0xa4], 0
mov rcx, r14
call fcn.14002667c
test eax, eax
je 0x14000390a
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400058bb
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013a80
jmp 0x14000390a
xor r13d, r13d
jmp 0x1400035ea
lea rax, [r13 + 1]
mov qword [rsp + 0x60], rax
lea rax, [r13*2 + 4]
add r13, 2
mov rbp, 0xffffffffffffffff
cmovns rbp, rax
mov rcx, rbp
call fcn.140015780
mov qword [rsp + 0x70], rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call fcn.14003cdd0
mov rbp, qword [rsp + 0x70]
mov rcx, rbp
mov rdx, r13
mov r9, r14
call fcn.140013c50
mov rcx, qword [rsp + 0x58]
mov rdx, rbp
mov r13, rbp
mov r8, qword [rsp + 0x60]
call fcn.140024e78
mov ebp, eax
mov rcx, r13
call fcn.140015790
test ebp, ebp
je 0x1400044de
mov r13b, 1
xor ebx, ebx
jmp 0x1400035ea
mov rcx, r14
call fcn.14002667c
test eax, eax
je 0x140004232
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000593d
lea rdx, str.File_close_did_not_execute_successfully
jmp 0x14000422d
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.14003dcc0
test eax, eax
je 0x140003c30
lea rdx, [0x140049f3c]
lea rcx, [rsp + 0xd30]
call fcn.140025060
test rax, rax
je 0x140003c30
mov r14, rax
lea rcx, [rsp + 0x6d0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140026fc4
cmp rax, 1
jne 0x140004a46
mov byte [rsp + 0x6f4], 0
mov rcx, r14
call fcn.14002667c
test eax, eax
je 0x140004703
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400059bf
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013a80
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x6d0]
mov r8d, 0x25
call fcn.1400281a0
test eax, eax
jne 0x140003c30
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005a41
lea rdx, str.The_secure_ID_hasnt_changed_after_launching_the_updater_using_the_service
call fcn.140013a80
mov byte [0x140054a49], 0
jmp 0x140003c46
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400018b4
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400018b4
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x14000192c
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x14000192c
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140001979
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140001979
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400019b8
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400019b8
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400019f7
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400019f7
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140001a32
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140001a32
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140001ab8
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140001ab8
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140001b30
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140001b30
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140001b68
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140001b68
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140001ba0
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140001ba0
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400012ec
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400012ec
lea rcx, [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r12, qword [rsp + 0x50]
jmp 0x140002fe1
mov rcx, r14
call fcn.14002667c
test eax, eax
je 0x140003c30
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005a00
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013a80
jmp 0x140003c30
lea rcx, [0x140055e98]
call fcn.1400157d4
lea r14, str.Performing_a_staged_update
jmp 0x140004af5
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140001d8e
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140001d8e
lea rcx, [0x140055e98]
call fcn.1400157d4
lea r14, str.Performing_a_replace_request
cmp dword [0x140055e98], 0xffffffff
jne 0x140001b03
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140001b03
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140001c8a
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140001c8a
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x14000221c
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x14000221c
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400021a1
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400021a1
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002285
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002285
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002dc7
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002dc7
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002324
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002324
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140001cfb
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140001cfb
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002dfd
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002dfd
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x14000259f
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x14000259f
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002c48
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002c48
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400025ce
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400025ce
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002a10
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002a10
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x14000282b
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x14000282b
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002e42
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002e42
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002ff3
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002ff3
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400029c9
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400029c9
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002c79
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002c79
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400020f6
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400020f6
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002e7c
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002e7c
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002965
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002965
lea rcx, [0x140055e98]
call fcn.1400157d4
lea rbx, str.NS_main:_directory_will_be_removed_on_OS_reboot:__S
jmp 0x1400050eb
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002eba
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002eba
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140002090
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002090
lea rcx, [0x140055e98]
call fcn.1400157d4
lea rbx, str.NS_main:_failed_to_schedule_OS_reboot_removal_of_directory:__S
cmp dword [0x140055e98], 0xffffffff
jne 0x140002d93
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140002d93
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003085
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003085
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003197
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003197
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400033c4
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400033c4
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003dcb
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003dcb
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003e3d
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003e3d
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003466
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003466
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003221
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003221
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140004320
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140004320
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003ea9
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003ea9
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x14000312e
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x14000312e
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003fd9
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003fd9
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x14000401d
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x14000401d
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400032c6
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400032c6
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400032ef
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400032ef
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140004226
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140004226
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140004293
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140004293
lea rcx, [0x140055e98]
call fcn.1400157d4
lea r14, str.Not_running_LaunchWinPostProcess_because_update_status_is_notsucceeded.
jmp 0x1400055f5
lea rcx, [0x140055e98]
call fcn.1400157d4
lea r14, str.Launching_service_failed._useServicefalse
jmp 0x14000567e
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003a2b
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003a2b
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003aaa
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003aaa
lea rcx, [0x140055e98]
call fcn.1400157d4
lea r14, str.Failed_to_run_LaunchWinPostProcess
cmp dword [0x140055e98], 0xffffffff
jne 0x1400042e5
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400042e5
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003ba4
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003ba4
lea rcx, [0x140055e98]
call fcn.1400157d4
lea r14, str.Service_didnt_stop_after_10_minutes._useServicefalse
cmp dword [0x140055e98], 0xffffffff
jne 0x140003d6b
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003d6b
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003c6b
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003c6b
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003c9c
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003c9c
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003cd4
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003cd4
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003d0c
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003d0c
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140003d44
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140003d44
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x14000381e
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x14000381e
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400043fc
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400043fc
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140004496
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140004496
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140004584
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140004584
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140004162
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140004162
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140004650
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140004650
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400041bb
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400041bb
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x1400046f7
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x1400046f7
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x140004a7b
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x140004a7b
lea rcx, [0x140055e98]
call fcn.1400157d4
cmp dword [0x140055e98], 0xffffffff
jne 0x14000474b
mov qword [0x140055c88], 0
lea rcx, [0x1400087f0]
call fcn.1400158b8
lea rcx, [0x140055e98]
call fcn.14001584c
jmp 0x14000474b