Function at 0x140001000
Capabilities:
Check if file exists
Copy file
Create a process with modified i/o handles and window
Create directory
Create process on windows
Delete file
Get common file path
Get disk information
Get file attributes
Move file
Query or enumerate registry value
Read file on windows
Set registry value
Start service

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf68
movaps xmmword [rsp + 0xf50], xmm6
mov rdi, rdx
mov r13d, ecx
mov rax, qword [0x140052040]
xor rax, rsp
mov qword [rsp + 0xf48], rax
lea rcx, [0x140048796]
call fcn.1400275e4
test rax, rax
je 0x14000104c
cmp byte [rax], 0
setne al
jmp 0x14000104e
xor eax, eax
mov byte [0x140054a48], al
lea rcx, str.MOZ_USING_SERVICE
call fcn.140023ed0
cmp r13d, 3
jg 0x14000108f
mov ecx, 2
call fcn.1400176e0
lea rcx, str.Usage:_updater_patch_dir_install_dir_apply_to_dir__wait_pid__callback_working_dir_callback_path_args...___n
mov edx, 0x6a
mov r8d, 1
mov r9, rax
call fcn.1400271c8
jmp 0x140002147
lea rsi, [rdi + 8]
mov rdx, qword [rdi + 8]
lea rbx, [0x140054210]
mov r8d, 0x104
mov rcx, rbx
call fcn.140028e84
mov word [0x140054416], 0
lea r14, [rsp + 0xb20]
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call fcn.14003cd40
lea r8, str._supdate_elevated.lock
mov edx, 0x104
mov rcx, r14
mov r9, rbx
call fcn.140005e90
mov al, 1
cmp byte [0x140054a48], 0
jne 0x14000110f
lea rcx, [rsp + 0xb20]
call fcn.1400251f8
test eax, eax
je 0x14000110d
call fcn.140020464
cmp dword [rax], 2
setne al
jmp 0x14000110f
xor eax, eax
mov byte [0x140054c58], al
lea rcx, [rsp + 0xb20]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
setne byte [0x140054c59]
mov rcx, qword [rsi]
call fcn.140013c40
test al, al
je 0x1400015d1
mov rcx, qword [rdi + 0x10]
call fcn.140013c40
test al, al
je 0x1400015ea
mov rdx, qword [rdi + 0x10]
lea rbx, [0x140054a50]
mov r8d, 0x104
mov rcx, rbx
call fcn.140028e84
mov word [0x140054c56], 0
mov rcx, rbx
mov dx, 0x5c
call fcn.140017240
test rax, rax
je 0x14000118d
cmp word [rax + 2], 0
jne 0x14000118d
mov word [rax], 0
lea r8, str._s_update.status
lea r9, [0x140054210]
lea rbx, [rsp + 0x290]
mov edx, 0x104
mov rcx, rbx
call fcn.140005e90
lea rdx, [0x140049ef6]
mov rcx, rbx
call fcn.140024fd0
test rax, rax
mov qword [rsp + 0x60], rsi
je 0x140001246
mov r15, rax
xorps xmm0, xmm0
lea rcx, [rsp + 0xd30]
movaps xmmword [rcx + 0x10], xmm0
movaps xmmword [rcx], xmm0
mov edx, 1
mov r8d, 0x1f
mov r9, rax
call fcn.140026f34
mov r14, rax
mov rcx, r15
call fcn.1400267a8
test eax, eax
je 0x140001392
xor r12d, r12d
mov rcx, r15
call fcn.1400265ec
test eax, eax
je 0x140001249
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400049ae
lea rdx, str.File_close_did_not_execute_successfully
call fcn.1400139f0
jmp 0x140001249
xor r12d, r12d
xor esi, esi
mov qword [rsp + 0x290], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rsi
mov ebp, 2
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 0
lea rdx, str.SoftwareClassesApplications
mov r14, qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call r14
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 1
lea rdx, str.SoftwareClassesApplicationsupdater.exe
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call r14
test eax, eax
jne 0x14000134a
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea rdx, str.IsHostApp
mov rbx, qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea rdx, str.NoOpenWith
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea rdx, str.NoStartPage
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp r13d, 5
jl 0x14000138b
mov rcx, qword [rdi + 0x20]
call fcn.1400252f0
cmp rax, 0xffffffffffffffff
je 0x14000148f
mov rbx, rax
mov rcx, qword [rdi + 0x20]
lea rdx, str._replace
call fcn.1400172f0
test rax, rax
je 0x1400014a0
lea rax, [0x140054c5a]
jmp 0x14000149d
xor ebx, ebx
jmp 0x1400014a0
mov byte [rsp + r14 + 0xd30], 0
lea r14, [rsp + 0xd30]
mov rcx, r14
mov edx, 0x3a
call fcn.140017010
mov r12, rax
test rax, rax
jne 0x1400013e5
lea rcx, [rsp + 0xd30]
mov edx, 0xa
call fcn.140017010
test rax, rax
jne 0x1400013e5
lea rcx, [rsp + 0xd30]
call fcn.140028050
add rax, rsp
add rax, 0xd30
sub rax, r14
cmp rax, 0xf
jne 0x14000141b
movabs rax, 0x2d676e69646e6570
xor rax, qword [rsp + 0xd30]
movabs rcx, 0x656369767265732d
xor rcx, qword [rsp + 0xd37]
or rcx, rax
je 0x140002063
test r12, r12
jne 0x140001452
lea rcx, [rsp + 0xd30]
mov edx, 0xa
call fcn.140017010
mov r12, rax
test rax, rax
jne 0x140001452
lea rcx, [rsp + 0xd30]
call fcn.140028050
lea r12, [rsp + rax]
add r12, 0xd30
sub r12, r14
cmp r12, 0xf
jne 0x140001204
movabs rax, 0x2d6465696c707061
xor rax, qword [rsp + 0xd30]
movabs rcx, 0x656369767265732d
xor rcx, qword [rsp + 0xd37]
or rcx, rax
sete r12b
jmp 0x140001207
mov rbx, 0xffffffffffffffff
lea rax, [0x140054418]
mov byte [rax], 1
mov rcx, qword [rdi + 0x18]
call fcn.140013c40
test al, al
je 0x140001f62
mov rdx, qword [rdi + 0x18]
lea r14, [0x140054420]
mov r8d, 0x104
mov rcx, r14
call fcn.140028e84
mov word [0x140054626], 0
mov rcx, r14
mov dx, 0x5c
call fcn.140017240
test rax, rax
je 0x1400014f0
cmp word [rax + 2], 0
jne 0x1400014f0
mov word [rax], 0
cmp r13d, 7
jl 0x140001636
mov rcx, qword [rdi + 0x30]
call fcn.140013c40
test al, al
je 0x1400020bc
mov esi, r12d
lea r14, [0x140054a50]
mov rcx, r14
call fcn.1400289bc
mov r15, rax
lea r12, [rsp + 0x290]
mov r8d, 0x208
mov rcx, r12
xor edx, edx
call fcn.14003cd40
mov rdx, qword [rdi + 0x30]
mov rcx, r12
mov r8, r15
call fcn.140028e84
mov rcx, r14
mov rdx, r12
call fcn.140028968
test eax, eax
jne 0x1400020fd
cmp r13d, 8
mov r12d, esi
jl 0x1400015b4
lea esi, [r13 - 6]
dec rsi
xor r15d, r15d
lea r14, str.backgroundtask
mov rcx, qword [rdi + r15*8 + 0x38]
test rcx, rcx
je 0x1400015ac
movzx eax, word [rcx]
cmp eax, 0x2f
je 0x140001592
cmp eax, 0x2d
jne 0x1400015ac
cmp word [rcx + 2], 0x2d
je 0x140001598
add rcx, 2
jmp 0x14000159c
add rcx, 4
mov rdx, r14
call fcn.140028968
test eax, eax
je 0x14000162e
inc r15
cmp rsi, r15
jne 0x140001574
lea rcx, str.MOZ_APP_SILENT_START
call fcn.1400275e4
test rax, rax
je 0x1400015cd
cmp byte [rax], 0
setne al
jmp 0x140001630
xor eax, eax
jmp 0x140001630
mov rsi, qword [rsi]
mov ecx, 2
call fcn.1400176e0
lea rdx, str.The_patch_directory_path_is_not_valid_for_this_application___S__n
jmp 0x14000213c
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4b
call fcn.140005a70
mov rcx, rsi
call fcn.14000ca10
mov rsi, qword [rdi + 0x10]
mov ecx, 2
call fcn.1400176e0
lea rdx, str.The_install_directory_path_is_not_valid_for_this_application___S__n
jmp 0x14000213c
mov al, 1
mov byte [0x140054c5b], al
lea rcx, [rsp + 0x910]
mov r8d, 0x20a
xor edx, edx
call fcn.14003cd40
cmp byte [0x140054c58], 0
je 0x140001782
lea r14, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.14003cd40
mov rcx, r14
call fcn.140013610
test eax, eax
je 0x1400016ab
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.14003cd40
lea rcx, [0x140049e9c]
mov rdx, r14
call fcn.140013710
test eax, eax
jne 0x1400023d0
lea rcx, [rsp + 0xd30]
call fcn.140013610
test eax, eax
je 0x1400016eb
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.14003cd40
lea rcx, [0x1400496d0]
mov rdx, r14
call fcn.140013710
test eax, eax
jne 0x1400023ff
lea rcx, [rsp + 0xd30]
call fcn.140013610
test eax, eax
je 0x14000172b
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.14003cd40
lea rcx, [0x140049c70]
mov rdx, r14
call fcn.140013710
test eax, eax
jne 0x14000242e
lea rcx, [rsp + 0x910]
call fcn.140013610
test eax, eax
je 0x1400017c0
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.14003cd40
lea rcx, [0x140049c70]
mov rdx, r14
call fcn.140013710
test eax, eax
je 0x1400017c0
lea rcx, [rsp + 0x910]
lea rdx, [rsp + 0x290]
call fcn.14003dbc0
jmp 0x1400017c0
cmp byte [0x140054c59], 0
lea rax, str.update.log
lea rcx, [0x140049c52]
cmove rcx, rax
mov qword [rsp + 0x20], rcx
lea r8, str._s_s
lea r9, [0x140054210]
lea rcx, [rsp + 0x910]
mov edx, 0x105
call fcn.140005e90
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004724
cmp qword [0x140055c88], 0
jne 0x140001838
lea rcx, [rsp + 0x910]
call fcn.1400289bc
dec eax
cmp eax, 0x101
ja 0x140001838
lea r14, [0x140055c90]
lea rdx, [rsp + 0x910]
mov r8d, 0x104
mov rcx, r14
call fcn.140028e84
lea rdx, [0x14004962a]
mov rcx, r14
call fcn.140024fd0
mov qword [0x140055c88], rax
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004765
cmp byte [0x140054a48], 0
lea rsi, [0x140047179]
lea r15, str.true
mov r8, r15
cmove r8, rsi
lea rdx, str.sUsingService_s
call fcn.1400139f0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400047a6
cmp byte [0x140054c5b], 0
mov r8, r15
cmove r8, rsi
lea rdx, str.sUpdateSilently_s
call fcn.1400139f0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400047e7
cmp byte [0x140054c58], 0
mov r8, r15
cmove r8, rsi
lea rdx, str.gUseSecureOutputPath_s
call fcn.1400139f0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004828
test r12b, r12b
mov r8, r15
cmove r8, rsi
lea rdx, [0x140046bb9]
call fcn.1400139f0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004869
cmp byte [0x140054c59], 0
mov r8, r15
cmove r8, rsi
lea rdx, str.gIsElevated_s
call fcn.1400139f0
lea rcx, str.applying
call fcn.14000ca10
test al, al
je 0x1400019c4
cmp byte [0x140054418], 1
jne 0x1400019ff
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004a50
lea r14, str.Performing_a_staged_update
jmp 0x140001a34
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400048aa
lea rdx, str.failed_setting_status_to_applying
call fcn.1400139f0
call fcn.14000c670
jmp 0x140002147
cmp byte [0x140054c5a], 1
jne 0x140001a3c
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004aa6
lea r14, str.Performing_a_replace_request
mov rdx, r14
call fcn.1400139f0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400048eb
lea rdx, str.PATCH_DIRECTORY__S
lea r8, [0x140054210]
call fcn.1400139f0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000492c
lea rdx, str.INSTALLATION_DIRECTORY__S
lea r8, [0x140054a50]
call fcn.1400139f0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000496d
lea rdx, str.WORKING_DIRECTORY__S
lea r14, [0x140054420]
mov r8, r14
call fcn.1400139f0
lea rsi, [0x140054a50]
mov r8d, 0x104
mov rcx, r14
mov rdx, rsi
call fcn.140024de8
test eax, eax
je 0x140001bca
cmp byte [0x140054418], 0
jne 0x140001b1d
cmp byte [0x140054c5a], 0
je 0x140001f07
lea r8, [0x14004975a]
lea r9, [0x140054420]
lea r14, [rsp + 0x290]
mov edx, 0x104
mov rcx, r14
call fcn.140005e90
mov rcx, r14
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x140001e9e
lea rdx, [0x140054a50]
lea rcx, [rsp + 0x290]
mov r8d, 0x104
call fcn.140024de8
test eax, eax
je 0x140001bca
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x48
call fcn.140005a70
mov rcx, rsi
call fcn.14000ca10
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004aee
lea rdx, str.The_apply_to_directory_must_be_the_same_as_or_a_child_of_the_installation_directory__Exiting.
jmp 0x1400019f0
test rbx, rbx
jle 0x140001c35
mov ecx, 0x100000
xor edx, edx
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x140001c35
mov rbx, rax
mov rcx, rax
mov edx, 0x7530
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebp, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebp, ebp
je 0x140001c35
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004c74
lea rdx, str.The_parent_process_didnt_exit__Continuing_with_update.
call fcn.1400139f0
cmp byte [0x140054c5a], 0
jne 0x140001c47
cmp byte [0x140054418], 1
jne 0x140001c7e
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cd40
mov rcx, rbx
mov edx, 0x105
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x140001c7e
lea rcx, [rsp + 0x290]
call fcn.1400246c4
mov dword [rsp + 0x68], r12d
mov r12, 0xffffffffffffffff
cmp byte [0x140054a48], 0
je 0x140001e31
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004a65
lea rdx, str.Going_to_update_via_this_updater_instance.
call fcn.1400139f0
cmp byte [0x140054418], 1
jne 0x140001cdf
lea rcx, [0x140054420]
xor edx, edx
call fcn.14000d390
cmp byte [0x140054c5a], 0
jne 0x140001d06
lea rcx, [0x140054420]
call fcn.140025100
test eax, eax
je 0x140001d06
call fcn.140020464
cmp dword [rax], 0x11
jne 0x1400019f5
lea rcx, [0x140054420]
lea rdx, [rsp + 0xd30]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x140001fa6
mov r15, 0xffffffffffffffff
cmp r13d, 7
jl 0x1400021b5
mov qword [rsp + 0x50], r13
lea rcx, [rsp + 0x700]
mov ebx, 0x208
mov r8d, 0x208
xor edx, edx
call fcn.14003cd40
lea r14, [rdi + 0x30]
mov r15, qword [rdi + 0x30]
lea r13, [rsp + 0x290]
mov r8d, 0x410
mov rcx, r13
xor edx, edx
call fcn.14003cd40
cmp byte [0x140054c5a], 1
jne 0x14000217a
mov rcx, r15
mov rdx, rsi
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
movsxd r15, eax
mov rdx, qword [r14]
mov rcx, r13
mov r8, r15
call fcn.140028e84
mov qword [rsp + 0x58], r12
lea r12, [rsp + r15*2]
add r12, 0x290
sub rbx, r15
lea rbp, [rsi + r15*2]
mov rcx, r12
mov rdx, rbp
mov r8, rbx
call fcn.140028e84
mov rcx, rbp
call fcn.1400289bc
lea r12, [r12 + rax*2]
add r12, 2
mov dword [r12 - 2], 0x5c
not rax
add rbx, rax
lea rbp, [rsp + 0x80]
mov rcx, rbp
mov rdx, rsi
call fcn.1400289a0
mov rcx, qword [r14]
mov rdx, rbp
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
cmp eax, r15d
cmova r15d, eax
movsxd rdx, r15d
add rdx, rdx
add rdx, qword [r14]
mov rcx, r12
mov r12, qword [rsp + 0x58]
mov r8, rbx
call fcn.140028e84
jmp 0x14000217d
cmp r13d, 6
jg 0x140001e4d
cmp byte [0x140054418], 0
jne 0x140001e4d
cmp byte [0x140054c5a], 1
jne 0x140001c97
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004b70
lea rdx, str.Checking_whether_elevation_is_needed
call fcn.1400139f0
cmp byte [0x140054418], 1
jne 0x14000206b
lea r8, str._s_updated.update_in_progress.lock
lea r9, [0x140054a50]
jmp 0x140002468
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x47
call fcn.140005a70
mov rcx, rsi
call fcn.14000ca10
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004b2f
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Error_calling_PathRemoveFileSpecW:__lu
mov r8d, eax
call fcn.1400139f0
jmp 0x1400019f5
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4a
call fcn.140005a70
mov rcx, rsi
call fcn.14000ca10
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004bb1
lea rdx, str.Installation_directory_and_working_directory_must_be_the_same_for_non_staged_updates._Exiting.
jmp 0x1400019f0
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4c
call fcn.140005a70
mov rcx, rsi
call fcn.14000ca10
mov rsi, qword [rdi + 0x18]
mov ecx, 2
call fcn.1400176e0
lea rdx, str.The_working_directory_path_is_not_valid_for_this_application___S__n
jmp 0x14000213c
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x41
call fcn.140005a70
mov rcx, rbx
call fcn.14000ca10
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004c33
lea rdx, str.NS_main:_unable_to_find_apply_to_dir:__S
lea r8, [0x140054420]
call fcn.1400139f0
call fcn.14000c670
cmp r12, 0xffffffffffffffff
je 0x14000201c
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.1400251f8
test eax, eax
je 0x14000203b
call fcn.140020464
cmp dword [rax], 2
jne 0x140002147
cmp r13d, 7
jl 0x140002147
mov r9b, byte [0x140054a48]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
jmp 0x1400027e0
mov r12b, 1
jmp 0x140001207
cmp byte [0x140054c5a], 1
jne 0x14000245d
lea rdx, [0x140054a50]
lea rbx, [rsp + 0x290]
mov rcx, rbx
call fcn.1400289a0
mov rcx, rbx
mov dx, 0x5c
call fcn.140017240
mov word [rax], 0
lea r8, str._smoz_update_in_progress.lock
lea rcx, [rsp + 0x700]
mov edx, 0x104
mov r9, rbx
jmp 0x140002475
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4d
call fcn.140005a70
mov rcx, rsi
call fcn.14000ca10
mov rsi, qword [rdi + 0x30]
mov ecx, 2
call fcn.1400176e0
lea rdx, str.The_callback_file_path_is_not_valid_for_this_application___S__n
jmp 0x14000213c
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4e
call fcn.140005a70
mov rcx, rsi
call fcn.14000ca10
mov rsi, qword [rdi + 0x30]
mov ecx, 2
call fcn.1400176e0
lea rdx, str.The_callback_file_must_be_located_in_the_installation_directory___S__n
mov rcx, rax
mov r8, rsi
call fcn.14003d9d0
mov ebx, 1
mov rcx, qword [rsp + 0xf48]
xor rcx, rsp
call fcn.14002cd00
mov eax, ebx
movaps xmm6, xmmword [rsp + 0xf50]
add rsp, 0xf68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r13, r15
lea rdx, [rsp + 0x700]
mov rcx, r13
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x140002737
mov r15, 0xffffffffffffffff
cmp byte [0x140054c5a], 0
je 0x1400027ea
mov r13, qword [rsp + 0x50]
cmp byte [0x140054418], 0
jne 0x14000220f
cmp byte [0x140054c5a], 0
jne 0x14000220f
lea rax, str.tobedeleted
mov qword [rsp + 0x20], rax
lea rbx, [0x140054c60]
lea r8, str._s__s
lea r9, [0x140054420]
mov edx, 0x104
mov rcx, rbx
call fcn.140005e90
mov rcx, rbx
xor edx, edx
call fcn.140024604
test eax, eax
je 0x14000220f
lea rcx, [0x140054c60]
call fcn.140025100
lea rax, [0x14000d5e0]
lea rbx, [rsp + 0x290]
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], 0
lea rsi, [rsp + 0x700]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0
lea r8, [0x14000cf10]
xor ecx, ecx
xor edx, edx
mov r9, rbx
call fcn.14001f5f8
mov qword [rbx], rax
test rax, rax
je 0x140002286
cmp byte [0x140054418], 0
jne 0x140002286
cmp byte [0x140054c5a], 0
jne 0x140002286
cmp byte [0x140054c5b], 0
jne 0x140002286
xor ecx, ecx
mov dl, 1
call fcn.140007980
mov rax, qword [rsp + 0x290]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r13d, 7
jl 0x140002312
cmp byte [0x140054c5a], 0
jne 0x140002312
cmp r15, 0xffffffffffffffff
je 0x1400022c0
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x140054840]
call fcn.1400251f8
test eax, eax
je 0x140002312
call fcn.140020464
cmp dword [rax], 2
je 0x140002312
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000505b
lea rdx, str.NS_main:_non_fatal_error_removing_backup_of_callback_app_file__path:__S
lea r8, [0x140054840]
call fcn.1400139f0
cmp byte [0x140054418], 0
jne 0x140002cf8
cmp byte [0x140054c5a], 0
jne 0x140002cf8
lea rcx, [0x140054c60]
call fcn.140025250
test eax, eax
je 0x140002cf8
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004f3f
call fcn.140020464
mov r9d, dword [rax]
lea rdx, str.NS_main:_unable_to_remove_directory:__S__err:__d
lea r8, str.tobedeleted
call fcn.1400139f0
lea rcx, [0x140054c60]
xor edx, edx
mov r8d, 4
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov ecx, dword [0x140055e98]
mov edx, dword [0x140052e00]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
test eax, eax
je 0x140002cda
cmp ecx, edx
jg 0x140005002
lea rbx, str.NS_main:_directory_will_be_removed_on_OS_reboot:__S
jmp 0x140002ce9
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.14003dbc0
test eax, eax
je 0x1400016ab
lea rcx, [rsp + 0xd30]
call fcn.1400251f8
jmp 0x1400016ab
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.14003dbc0
test eax, eax
je 0x1400016eb
lea rcx, [rsp + 0xd30]
call fcn.1400251f8
jmp 0x1400016eb
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.14003dbc0
test eax, eax
je 0x14000172b
lea rcx, [rsp + 0xd30]
call fcn.1400251f8
jmp 0x14000172b
mov r9, qword [rdi + 0x30]
lea r8, str._s.update_in_progress.lock
lea rcx, [rsp + 0x700]
mov edx, 0x104
call fcn.140005e90
lea rcx, [rsp + 0x700]
call fcn.1400251f8
test eax, eax
je 0x140002495
call fcn.140020464
cmp dword [rax], 2
jne 0x140002505
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0x700]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
cmp r12, 0xffffffffffffffff
je 0x14000251e
cmp eax, ecx
jg 0x140004cf6
lea rdx, str.Successfully_opened_lock_file
call fcn.1400139f0
jmp 0x14000253b
cmp byte [0x140054c5a], 1
jne 0x140002b47
lea rcx, str.pending
jmp 0x140002b75
cmp eax, ecx
jg 0x140004d78
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Failed_to_open_update_lock_file:__lu
mov r8d, eax
call fcn.1400139f0
cmp byte [0x140054c59], 0
je 0x14000293e
lea rbx, [rsp + 0x80]
mov qword [rbx], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0xf00ff
mov r8, rbx
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140002904
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r13
mov r13, qword [rsp + 0x80]
xor r12d, r12d
lea rbp, [rsp + 0xd30]
mov rbx, qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
xorps xmm6, xmm6
lea rax, str.SeAssignPrimaryTokenPrivilege
mov r14, qword [r12 + rax]
xor ecx, ecx
mov rdx, r14
mov r8, rbp
call rbx
test eax, eax
je 0x140002613
mov dword [rsp + 0x290], 1
mov rax, qword [rsp + 0xd30]
mov qword [rsp + 0x294], rax
mov dword [rsp + 0x29c], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
movups xmmword [rsp + 0x20], xmm6
mov rcx, r13
xor edx, edx
lea r8, [rsp + 0x290]
mov r9d, 0x10
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
test eax, eax
je 0x140002613
call rsi
test eax, eax
je 0x14000265e
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140002690
call rsi
lea rdx, str.Could_not_disable_token_privilege_value:__s.___lu_
mov r8, r14
mov r9d, eax
call fcn.1400139f0
add r12, 8
cmp r12, 0x110
jne 0x1400025a4
jmp 0x14000270a
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400026cd
lea rdx, str.Disabled_unneeded_token_privilege:__s.
mov r8, r14
call fcn.1400139f0
jmp 0x140002648
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002634
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002634
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x14000267f
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x14000267f
mov rcx, qword [rsp + 0x80]
test rcx, rcx
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
lea rsi, [0x140054a50]
je 0x14000293e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000293e
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x42
call fcn.140005a70
mov rcx, rbx
fld1
scasd eax, dword [rdi]
movabs byte [0x53731058b0000], al
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004dfa
lea rdx, str.NS_main:_unable_to_find_callback_file:__S
mov r8, r13
call fcn.1400139f0
call fcn.14000c670
cmp r12, 0xffffffffffffffff
je 0x1400027a9
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.1400251f8
test eax, eax
mov rsi, qword [rsp + 0x50]
je 0x1400027cd
call fcn.140020464
cmp dword [rax], 2
jne 0x140002147
mov r9b, byte [0x140054a48]
add esi, 0xfffffffa
mov rcx, qword [rdi + 0x28]
mov edx, esi
mov r8, r14
call fcn.14000c8a0
jmp 0x140002147
lea rcx, [rsp + 0xd30]
call fcn.1400289bc
movsxd rcx, eax
lea rax, [rsp + rcx*2]
add rax, 0x700
xor edx, edx
cmp word [rax], 0x5c
sete dl
movzx eax, word [rax + rdx*2]
add rdx, rdx
lea rcx, [rdx + rcx*2]
lea rdx, [rsp + rcx]
add rdx, 0x702
lea rcx, [0x140054630]
mov r8d, 0x2f
cmp ax, 0x5c
cmove eax, r8d
mov word [rcx], ax
add rcx, 2
movzx eax, word [rdx]
add rdx, 2
test ax, ax
jne 0x140002830
mov word [rcx], 0
mov r9, qword [r14]
lea rcx, [0x140054840]
lea r8, str._s.moz_callback
mov edx, 0x104
call fcn.140005e90
cmp eax, 0x104
jb 0x140002bdc
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x80]
mov edx, 0x20
mov rcx, rsi
mov r9d, 3
call fcn.140005a70
mov rcx, rsi
call fcn.14000ca10
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004fc1
lea rdx, str.NS_main:_callback_backup_path_truncated
call fcn.1400139f0
call fcn.14000c670
cmp r12, 0xffffffffffffffff
je 0x1400028e5
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.1400251f8
test eax, eax
je 0x140002147
call fcn.140020464
jmp 0x140002147
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004ebd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Could_not_obtain_token_for_current_process__no_privileges_changed.___lu_
mov r8d, eax
call fcn.140013b10
cmp r12, 0xffffffffffffffff
jne 0x140001c97
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004db9
lea rdx, str.Cant_open_lock_file___seems_like_we_need_elevation
call fcn.1400139f0
lea rcx, [rsp + 0xb20]
call fcn.1400251f8
test eax, eax
mov ebx, dword [rsp + 0x68]
je 0x14000299c
call fcn.140020464
cmp dword [rax], 2
jne 0x140002bab
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0xb20]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140002bab
mov rsi, rax
lea edx, [r13 - 1]
lea r14, [rsp + 0x78]
mov rcx, r14
mov r8, qword [rsp + 0x60]
call fcn.14000b8c0
mov rax, qword [r14]
test rax, rax
je 0x140002fb9
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rsi
test bl, bl
je 0x140003d33
lea rcx, [0x140054a50]
xor esi, esi
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x1400032ca
mov ebp, eax
mov r12d, eax
add r12, r12
mov rcx, r12
call fcn.1400156f8
mov r14, rax
xor esi, esi
mov rcx, rax
xor edx, edx
mov r8, r12
call fcn.14003cd40
lea rcx, [0x140054a50]
mov rdx, r14
mov r8d, ebp
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x1400032c2
mov qword [rsp + 0x50], r13
lea rsi, [rsp + 0x290]
mov qword [rsi], 0
lea rcx, [0x14003f010]
xor edx, edx
xor r8d, r8d
mov r9, rsi
call sub.SHELL32.dll_SHGetKnownFolderPath
test eax, eax
js 0x1400032bb
mov r13, qword [rsp + 0x290]
mov rcx, r13
call fcn.1400289bc
test rax, rax
je 0x1400032ad
mov rbp, rax
cmp word [r13 + rax*2 - 2], 0x5c
jne 0x1400034ad
mov rcx, r14
mov rdx, r13
mov r8, rbp
call fcn.140024de8
test eax, eax
je 0x140003515
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [rsp + 0x290], 0
mov r13, rsi
mov qword [rsp + 0x30], rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion
lea r8, str.ProgramFilesDir
mov rcx, 0xffffffff80000002
mov r9d, 0x10002
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov esi, 1
test eax, eax
jne 0x140002b36
mov ebp, dword [rsp + 0x290]
cmp rbp, 4
jae 0x140003526
xor r12d, r12d
test esi, esi
setne sil
and sil, r12b
jmp 0x1400032bd
cmp byte [0x140054418], 1
jne 0x140002b7a
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x2c
call fcn.140005a70
mov rcx, rsi
call fcn.14000ca10
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004d37
lea rdx, str.Update_already_in_progress__Exiting
jmp 0x1400019f0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004efe
lea rdx, str.Unable_to_create_elevated_lock_file__Exiting
jmp 0x1400019f0
mov rcx, qword [r14]
lea rdx, [0x140054840]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x140003002
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x58], r12
mov ebp, 1
mov rsi, qword [sym.imp.KERNEL32.dll_CreateFileW]
lea r12, str.NS_main:_callback_app_file_open_attempt__d_failed._File:__S._Last_error:__lu
mov r14, qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
mov rcx, r13
mov edx, 0x40010000
mov r8d, 6
xor r9d, r9d
call rsi
cmp rax, 0xffffffffffffffff
jne 0x140003033
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140002ca0
mov dword [rsp + 0x20], ebx
mov rdx, r12
mov r8d, ebp
mov r9, r13
call fcn.1400139f0
mov ecx, 0x64
call r14
inc ebp
cmp ebp, 0xb
jne 0x140002c1b
jmp 0x140003045
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002c7a
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002c7a
cmp ecx, edx
jg 0x14000509c
lea rbx, str.NS_main:_failed_to_schedule_OS_reboot_removal_of_directory:__S
lea r8, str.tobedeleted
mov rdx, rbx
call fcn.1400139f0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004bf2
lea rdx, str.Running_LaunchCallbackAndPostProcessApps
call fcn.1400139f0
cmp r13d, 7
jge 0x140002d65
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004cb5
lea rdx, str.No_callback_arg._Skipping_LaunchWinPostProcess_and_LaunchCallbackApp
call fcn.1400139f0
jmp 0x140002fa5
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
cmp byte [0x140054a4a], 1
jne 0x140002f42
cmp eax, ecx
jg 0x140004e3b
lea rdx, str.Launching_Windows_post_update_process
call fcn.1400139f0
call fcn.14000bb20
test al, al
jne 0x140002ddf
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140004f80
lea rdx, str.The_post_update_process_was_not_launched_successfully
call fcn.1400139f0
cmp byte [0x140054a48], 0
jne 0x140002f56
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000501a
lea rdx, str.Starting_Service_Update_before_launching_callback_app
call fcn.1400139f0
xor ecx, ecx
xor edx, edx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
test rax, rax
je 0x140002f56
mov r14, rax
lea rdx, str.MozillaMaintenance
mov rcx, rax
mov r8d, 0xf01ff
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rbx, rax
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test rbx, rbx
je 0x140002f56
lea r9, [rsp + 0x6d0]
mov rcx, rbx
xor edx, edx
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
test eax, eax
jne 0x140002e8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140003283
lea r15, [rsp + 0x6d0]
mov qword [rsp + 0x58], r12
mov r12d, dword [r15]
mov rcx, r12
call fcn.1400156f8
mov r14, rax
mov rcx, rax
xor edx, edx
mov r8, r12
call fcn.14003cd40
mov rcx, rbx
mov rdx, r14
mov r8d, r12d
mov r12, qword [rsp + 0x58]
mov r9, r15
call qword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
mov ebp, eax
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test ebp, ebp
je 0x140002f38
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea rcx, [rsp + 0x290]
mov r8d, 0x20a
xor edx, edx
call fcn.14003cd40
mov rbx, qword [r14 + 0x10]
mov rcx, rbx
call fcn.1400289bc
cmp rax, 0x104
ja 0x140002f38
lea r15, [rsp + 0x290]
mov r8d, 0x105
mov rcx, r15
mov rdx, rbx
call fcn.140028e84
mov rcx, r15
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
jne 0x14000359c
mov rcx, r14
call fcn.140015700
jmp 0x140002f56
cmp eax, ecx
jg 0x140004e7c
lea rdx, str.Not_launching_Windows_post_update_process_because__gSucceeded
call fcn.1400139f0
cmp r12, 0xffffffffffffffff
je 0x140002f65
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.1400251f8
test eax, eax
je 0x140002f80
call fcn.140020464
cmp dword [rax], 2
jne 0x140002fa5
call fcn.14000c670
mov r9b, byte [0x140054a48]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
call fcn.14000c8a0
jmp 0x140002faa
call fcn.14000c670
movzx ebx, byte [0x140054a4a]
xor ebx, 1
jmp 0x14000214c
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400050e4
lea rdx, str.Failed_to_make_command_line__Exiting
call fcn.1400139f0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.14000c670
mov ebx, 1
jmp 0x140003e2e
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.failed:__d_n
lea rdi, [rsp + 0x80]
mov edx, 0x20
mov rcx, rdi
cmp eax, 5
jne 0x1400030c2
mov r9d, 0x23
jmp 0x1400030c8
mov r15, rax
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
jmp 0x1400021b5
cmp ebx, 0x20
jne 0x14000315a
cmp byte [0x140054c5b], 0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
je 0x140003291
cmp eax, ecx
jg 0x14000532d
mov r8, qword [rsi]
lea rdx, str.NS_main:_callback_app_file_in_use__failed_to_exclusively_open_executable_file_from_background_task:__S
call fcn.1400139f0
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x6a
jmp 0x1400031d7
mov r9d, 0x25
call fcn.140005a70
mov rcx, rdi
call fcn.14000ca10
mov rsi, qword [rsp + 0x50]
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005125
mov r8, qword [r14]
lea rdx, str.NS_main:_failed_to_copy_callback_file__S_into_place_at__S
lea r9, [0x140054840]
call fcn.1400139f0
call fcn.14000c670
cmp r12, 0xffffffffffffffff
je 0x140003129
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.1400251f8
test eax, eax
je 0x140003148
call fcn.140020464
cmp dword [rax], 2
jne 0x140002147
mov r9b, byte [0x140054a48]
add esi, 0xfffffffa
mov rcx, qword [r14]
jmp 0x1400027db
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
jg 0x14000526a
mov r8, qword [rsi]
lea rdx, str.NS_main:_callback_app_file_in_use__failed_to_exclusively_open_executable_file:__S
call fcn.1400139f0
lea r8, str.failed:__d_n
cmp ebx, 5
jne 0x1400031c1
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x23
jmp 0x1400031d7
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x25
call fcn.140005a70
mov rcx, rbx
call fcn.14000ca10
lea rcx, [0x140054840]
call fcn.1400251f8
test eax, eax
je 0x140003236
call fcn.140020464
cmp dword [rax], 2
je 0x140003236
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400053f0
lea rdx, str.NS_main:_unable_to_remove_backup_of_callback_app_file__path:__S
lea r8, [0x140054840]
call fcn.1400139f0
call fcn.14000c670
cmp r12, 0xffffffffffffffff
je 0x14000324a
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.1400251f8
test eax, eax
je 0x140003269
call fcn.140020464
cmp dword [rax], 2
jne 0x140002147
mov r9b, byte [0x140054a48]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
mov edx, r13d
mov r8, rsi
jmp 0x1400027e0
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x140002f56
cmp eax, ecx
jg 0x140005431
mov r8, qword [rsi]
lea rdx, str.NS_main:_callback_app_file_in_use__continuing_without_exclusive_access_for_executable_file:__S
call fcn.1400139f0
jmp 0x1400021b5
test r13, r13
je 0x1400032bb
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor esi, esi
mov r13, qword [rsp + 0x50]
mov rcx, r14
call fcn.140015700
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005166
test sil, sil
mov r8, r15
lea rax, [0x140047179]
cmove r8, rax
lea rdx, str.After_checking_IsProgramFilesPath__useService_s
call fcn.1400139f0
test sil, sil
je 0x140003d33
mov r14, qword [rdi]
xor esi, esi
lea rcx, [rsp + 0x290]
mov r8d, 0x20a
xor edx, edx
call fcn.14003cd40
mov rcx, r14
call fcn.1400289bc
cmp rax, 0x104
ja 0x140003371
lea rbx, [rsp + 0x290]
mov r8d, 0x104
mov rcx, rbx
mov rdx, r14
call fcn.140028e84
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathStripToRootW]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
sete sil
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005229
test sil, sil
mov r8, r15
lea rax, [0x140047179]
cmove r8, rax
lea rdx, str.After_checking_IsLocalFile__useService_s
call fcn.1400139f0
test sil, sil
je 0x140003d33
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r12, [rsp + 0x290]
mov rcx, rax
mov edx, 8
mov r8, r12
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1400037eb
mov rcx, qword [rsp + 0x290]
lea rsi, [rsp + 0x80]
mov qword [rsp + 0x20], rsi
lea r14, [rsp + 0xd30]
mov edx, 0x12
mov r8, r14
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov ebx, eax
mov ebp, dword [r14]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x1400037eb
cmp ebp, 3
jne 0x1400037eb
mov qword [rsp + 0x20], r12
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem
mov rcx, 0xffffffff80000002
xor r8d, r8d
mov r9d, 0x20019
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400037eb
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0xd30], 4
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
lea rdx, str.ConsentPromptBehaviorAdmin
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x290]
test eax, eax
je 0x14000374d
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1400037eb
lea rax, [rbp + 1]
mov qword [rsp + 0x68], rax
lea rax, [rbp*2 + 4]
add rbp, 2
mov r12, 0xffffffffffffffff
cmovns r12, rax
mov rcx, r12
call fcn.1400156f8
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, r12
call fcn.14003cd40
mov rcx, rbx
mov rdx, rbp
mov r9, r13
call fcn.140013bc0
mov rcx, r14
mov rdx, rbx
mov r8, qword [rsp + 0x68]
call fcn.140024de8
mov ebp, eax
mov rcx, rbx
call fcn.140015700
test ebp, ebp
jne 0x140002ad7
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov sil, 1
jmp 0x1400032bd
shr ebp, 1
lea rbx, [rbp*2]
mov rcx, rbx
call fcn.1400156f8
mov rsi, rax
xor r12d, r12d
mov rcx, rax
xor edx, edx
mov r8, rbx
call fcn.14003cd40
mov qword [rsp + 0x30], r13
mov r13, rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], 0
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion
lea r8, str.ProgramFilesDir
mov rcx, 0xffffffff80000002
mov r9d, 0x10002
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov esi, 1
test eax, eax
je 0x14000446b
mov rcx, r13
call fcn.140015700
jmp 0x140002b39
lea rdx, str.maintenanceservice_tmp.exe
lea rcx, [rsp + 0x290]
call fcn.14003dbc0
test eax, eax
je 0x140002f38
lea rcx, [0x140054a50]
call fcn.1400289bc
cmp rax, 0x104
ja 0x140002f38
mov rbp, r13
lea r15, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, r15
xor edx, edx
call fcn.14003cd40
lea rbx, [0x140054a50]
mov r8d, 0x104
mov rcx, r15
mov rdx, rbx
call fcn.140028e84
lea rdx, str.maintenanceservice.exe
mov rcx, r15
call fcn.14003dbc0
lea rdx, [rsp + 0x290]
mov rcx, r15
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x1400049fd
lea rcx, [rsp + 0x290]
call fcn.140013f50
test eax, eax
je 0x1400049ef
xorps xmm0, xmm0
movaps xmmword [rsp + 0x700], xmm0
movaps xmmword [rsp + 0x710], xmm0
movaps xmmword [rsp + 0x750], xmm0
movaps xmmword [rsp + 0x740], xmm0
movaps xmmword [rsp + 0x730], xmm0
movaps xmmword [rsp + 0x720], xmm0
xor r12d, r12d
mov qword [rsp + 0x760], r12
mov dword [rsp + 0x700], 0x68
lea rax, [0x14004a09c]
mov qword [rsp + 0x710], rax
lea r13, [rsp + 0x80]
mov qword [r13 + 0x10], r12
movaps xmmword [r13], xmm0
lea r15, [rsp + 0x910]
movaps xmmword [r15 + 0x70], xmm0
movaps xmmword [r15 + 0x60], xmm0
movaps xmmword [r15 + 0x50], xmm0
movaps xmmword [r15 + 0x40], xmm0
movaps xmmword [r15 + 0x30], xmm0
movaps xmmword [r15 + 0x20], xmm0
movaps xmmword [r15 + 0x10], xmm0
movaps xmmword [r15], xmm0
lea rdx, str.dummyparam.exe_upgrade
mov r8d, 0x3f
mov rcx, r15
call fcn.140028e84
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
lea rcx, [rsp + 0x290]
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400049fd
mov rcx, qword [rsp + 0x80]
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rsi
mov rcx, qword [rsp + 0x88]
call rsi
jmp 0x1400049fd
mov dword [rsp + 0xd30], 4
mov qword [rsp + 0x28], r14
lea rax, [rsp + 0x6d0]
mov qword [rsp + 0x20], rax
lea rdx, str.PromptOnSecureDesktop
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
jne 0x1400037eb
mov eax, dword [rsp + 0x80]
or eax, dword [rsp + 0x6d0]
setne bl
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400057d3
test bl, bl
lea rax, [0x140047179]
cmove r15, rax
lea rdx, str.After_checking_IsUnpromptedElevation__useService_s
mov r8, r15
call fcn.1400139f0
test bl, bl
je 0x140003d33
lea rcx, [rsp + 0x290]
call fcn.140015470
test eax, eax
je 0x1400039bc
lea rax, [rsp + 0xd30]
mov qword [rax], 0
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x290]
mov rcx, 0xffffffff80000002
xor r8d, r8d
mov r9d, 0x20119
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140003844
mov rcx, qword [rsp + 0xd30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x9d], 0
xor esi, esi
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cd40
mov rcx, rbx
call fcn.140013610
test eax, eax
je 0x1400038ba
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cd40
lea rcx, [0x140049e9c]
mov rdx, rbx
call fcn.140013710
test eax, eax
jne 0x1400044ad
xor esi, esi
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x3a
call fcn.140005a70
mov rcx, rbx
call fcn.14000ca10
lea r12d, [r13 + 2]
lea rcx, [r12*8]
call fcn.1400156f8
mov r15, rax
lea rax, str.MozillaMaintenance
mov qword [r15], rax
lea rax, str.software_update
mov qword [r15 + 8], rax
lea rcx, [r15 + 0x10]
mov r8d, r13d
shl r8, 3
mov rdx, rdi
call fcn.14003d100
mov ecx, 5
call fcn.1400137e0
cmp eax, 1
mov qword [rsp + 0x50], r13
mov dword [rsp + 0x68], esi
jne 0x1400039ed
xor ecx, ecx
xor edx, edx
mov r8d, 5
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov ebp, 0x4269
test rax, rax
je 0x140003a19
lea rdx, str.MozillaMaintenance
mov qword [rsp + 0x70], rax
mov rcx, rax
mov r8d, 0x10
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
test rax, rax
je 0x1400039f7
mov r14, rax
mov ebx, 0xffffff9c
mov rsi, qword [sym.imp.ADVAPI32.dll_StartServiceW]
mov r13, qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r14
mov edx, r12d
mov r8, r15
call rsi
test eax, eax
jne 0x140003a04
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov ecx, 0x64
call r13
add ebx, 0x64
cmp ebx, 0x1324
jb 0x140003990
jmp 0x140003a06
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005531
lea rdx, str.Cant_get_registry_certificate_location._useServicefalse
jmp 0x140003d2e
mov ebp, eax
add ebp, 0x4e20
jmp 0x140003a19
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x140003a19
xor ebp, ebp
mov rsi, qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, r14
call rsi
mov rcx, qword [rsp + 0x70]
call rsi
mov rcx, r15
call fcn.140015700
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
test ebp, ebp
je 0x140003a58
cmp eax, ecx
jg 0x140005519
lea r14, str.Launching_service_failed._useServicefalse
jmp 0x140003d26
cmp eax, ecx
jg 0x140005572
lea rdx, str.Launched_service_successfully
call fcn.1400139f0
xor ebp, ebp
cmp byte [0x140054418], 0
jne 0x140003a8b
cmp byte [0x140054c5b], 0
jne 0x140003a8b
call fcn.140007840
test eax, eax
sete bpl
mov ecx, 5
call fcn.1400137e0
cmp eax, 1
je 0x140003b20
lea rax, [0x14000cef0]
lea rbx, [rsp + 0x290]
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], 0
lea rax, [rsp + 0xd30]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
lea r8, [0x14000cf10]
xor ecx, ecx
xor edx, edx
mov r9, rbx
call fcn.14001f5f8
mov qword [rbx], rax
test rax, rax
sete cl
xor bpl, 1
or bpl, cl
jne 0x140003b04
mov cl, 1
xor edx, edx
call fcn.140007980
mov rax, qword [rsp + 0x290]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 1
call fcn.1400137e0
mov ecx, dword [0x140055e98]
mov edx, dword [0x140052e00]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
cmp eax, 1
jne 0x140003d17
cmp ecx, edx
jg 0x140005600
lea rdx, str.Service_stop_detected.
call fcn.1400139f0
mov byte [0x140054a49], 1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x6e0], xmm0
movaps xmmword [rsp + 0x6d0], xmm0
mov qword [rsp + 0x6ed], 0
cmp byte [rsp + 0x68], 0
je 0x140003bef
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cd40
mov rcx, rbx
call fcn.140013610
test eax, eax
je 0x140003be6
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cd40
lea rcx, [0x140049e9c]
mov rdx, rbx
call fcn.140013710
test eax, eax
jne 0x14000461d
cmp byte [0x140054a49], 1
jne 0x140003bfc
cmp byte [0x140054418], 0
je 0x1400043cc
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000568e
lea rdx, str.Not_showing_a_UAC_prompt.
call fcn.1400139f0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400056cf
lea rdx, [0x140046bb9]
lea r8, str.true
call fcn.1400139f0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005710
lea rdx, str.noServiceFallback_s
lea r8, [0x140047179]
call fcn.1400139f0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005751
lea rdx, str.updateLockFileHandle_sINVALID_HANDLE_VALUE
lea r8, [0x1400487d2]
call fcn.1400139f0
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005792
lea rdx, str.forceServiceFallback_s
lea r8, [0x140047179]
call fcn.1400139f0
mov r13, qword [rsp + 0x50]
jmp 0x1400041ee
cmp ecx, edx
jg 0x140005641
lea r14, str.Service_didnt_stop_after_10_minutes._useServicefalse
mov r13, qword [rsp + 0x50]
mov rdx, r14
call fcn.1400139f0
cmp byte [0x140054418], 1
jne 0x140003da1
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x2b
call fcn.140005a70
mov rcx, rsi
call fcn.14000ca10
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400051a7
lea rdx, str.Non_critical_update_staging_error__Falling_back_to_non_staged_updates_and_exiting
call fcn.1400139f0
call fcn.14000c670
jmp 0x140003e2c
cmp byte [0x140054c5b], 0
je 0x140003e46
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x69
call fcn.140005a70
mov rcx, rbx
call fcn.14000ca10
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400051e8
lea rdx, str.Skipping_update_to_avoid_UAC_prompt_from_background_task.
call fcn.1400139f0
call fcn.14000c670
mov r9b, byte [0x140054a48]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
call fcn.14000c8a0
xor ebx, ebx
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14000214c
call fcn.140015700
jmp 0x14000214c
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400052ec
lea rdx, str.Elevating_via_a_UAC_prompt
call fcn.1400139f0
xorps xmm6, xmm6
movaps xmmword [rsp + 0x6e0], xmm6
movaps xmmword [rsp + 0x6d0], xmm6
mov qword [rsp + 0x6ed], 0
xor esi, esi
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cd40
mov rcx, rbx
call fcn.140013610
test eax, eax
je 0x140003eed
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cd40
lea rcx, [0x140049e9c]
mov rdx, rbx
call fcn.140013710
test eax, eax
jne 0x14000431c
xor esi, esi
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x4f
call fcn.140005a70
mov rcx, rbx
call fcn.14000ca10
xor eax, eax
lea rcx, [rsp + 0x80]
mov qword [rcx + 0x68], rax
movups xmmword [rcx + 0x58], xmm6
movups xmmword [rcx + 0x48], xmm6
movups xmmword [rcx + 0x38], xmm6
movups xmmword [rcx + 0x28], xmm6
movabs rdx, 0x54000000070
mov qword [rcx], rdx
mov qword [rcx + 8], rax
mov rax, qword [rdi]
mov qword [rcx + 0x18], rax
mov rax, qword [rsp + 0x58]
mov qword [rcx + 0x20], rax
lea rax, str.runas
mov qword [rcx + 0x10], rax
mov dword [rcx + 0x30], 1
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x14000418c
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000536e
lea rdx, str.Elevation_successful._Waiting_for_elevated_updater_to_run.
call fcn.1400139f0
mov rcx, qword [rsp + 0xe8]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400053af
lea rdx, str.Elevated_updater_has_finished_running.
call fcn.1400139f0
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x140054a49], 1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x6b0], xmm0
movaps xmmword [rsp + 0x6a0], xmm0
mov qword [rsp + 0x6bd], 0
test sil, sil
je 0x1400041ee
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cd40
mov rcx, rbx
call fcn.140013610
test eax, eax
je 0x1400041ee
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.14003cd40
lea rcx, [0x140049e9c]
mov rdx, rbx
call fcn.140013710
test eax, eax
je 0x1400041ee
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.14003dbc0
test eax, eax
je 0x1400041ee
mov rsi, r13
lea rdx, [0x140049ef6]
lea rcx, [rsp + 0xd30]
call fcn.140024fd0
test rax, rax
je 0x140004615
mov r14, rax
lea rcx, [rsp + 0x6a0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140026f34
cmp rax, 1
jne 0x1400045d8
mov byte [rsp + 0x6c4], 0
mov rcx, r14
call fcn.1400265ec
test eax, eax
je 0x140004129
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400058d7
lea rdx, str.File_close_did_not_execute_successfully
call fcn.1400139f0
lea rcx, [rsp + 0x6d0]
lea rdx, [rsp + 0x6a0]
mov r8d, 0x25
call fcn.140028110
test eax, eax
mov r13, rsi
jne 0x1400041ee
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005959
lea rdx, str.The_secure_ID_hasnt_changed_after_launching_the_updater_using_runas
call fcn.1400139f0
mov byte [0x140054a49], 0
jmp 0x140004615
mov byte [0x140054a49], 0
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 9
call fcn.140005a70
mov rcx, rbx
call fcn.14000ca10
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005472
lea rdx, str.Elevation_canceled.
call fcn.1400139f0
mov rsi, qword [rsp + 0x60]
cmp byte [0x140054418], 0
jne 0x1400042ae
lea rdx, [rsp + 0x290]
mov byte [rdx], 0
lea rcx, str.succeeded
xor r8d, r8d
call fcn.14000cf30
mov ecx, dword [0x140055e98]
mov edx, dword [0x140052e00]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
test al, al
je 0x140004297
cmp byte [rsp + 0x290], 0
je 0x140004297
cmp ecx, edx
jg 0x1400054b3
lea rdx, str.Running_LaunchWinPostProcess
call fcn.1400139f0
call fcn.14000bb20
test al, al
jne 0x1400042ae
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400055b3
lea r14, str.Failed_to_run_LaunchWinPostProcess
mov rsi, qword [rsp + 0x60]
jmp 0x1400042a6
cmp ecx, edx
jg 0x1400054f4
lea r14, str.Not_running_LaunchWinPostProcess_because_update_status_is_notsucceeded.
mov rdx, r14
call fcn.1400139f0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400052ab
lea rdx, str.Update_complete
call fcn.1400139f0
call fcn.14000c670
xor ebx, ebx
cmp r13d, 7
jl 0x140003e2e
mov r9b, byte [0x140054a48]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
call fcn.14000c8a0
jmp 0x140003e2e
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.14003dbc0
test eax, eax
je 0x140003eeb
lea rdx, [0x140049ef6]
lea rcx, [rsp + 0xd30]
call fcn.140024fd0
test rax, rax
je 0x140003eeb
mov r14, rax
lea rcx, [rsp + 0x6d0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140026f34
cmp rax, 1
sete sil
jne 0x140004386
mov byte [rsp + 0x6f4], 0
mov rcx, r14
call fcn.1400265ec
test eax, eax
je 0x140003eed
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005814
lea rdx, str.File_close_did_not_execute_successfully
call fcn.1400139f0
jmp 0x140003eed
xor eax, eax
lea r8, [rsp + 0x290]
mov byte [r8], al
mov byte [r8 + 4], al
lea rcx, [0x1400477dc]
lea rdx, [rsp + 0xd30]
call fcn.14000cf30
test al, al
je 0x140003bfc
cmp byte [rsp + 0xd30], 0
je 0x140003bfc
cmp byte [rsp + 0x294], 0
je 0x140003bfc
mov eax, dword [rsp + 0x290]
lea ecx, [rax - 0x18]
cmp ecx, 0xa
jb 0x140004430
add eax, 0xffffffcf
cmp eax, 9
ja 0x140003bfc
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005855
lea rdx, str.Service_specific_failure_detected._useServicefalse
call fcn.1400139f0
mov r13, qword [rsp + 0x50]
jmp 0x140003d33
mov rcx, r13
mov rdx, rbp
call fcn.140028ae8
test rax, rax
je 0x14000455d
mov r12, rax
cmp word [r13 + rax*2 - 2], 0x5c
jne 0x140004565
mov rcx, r14
mov rdx, r13
mov r8, r12
call fcn.140024de8
test eax, eax
jne 0x1400045ce
mov r12b, 1
jmp 0x14000358f
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.14003dbc0
test eax, eax
je 0x1400038b8
lea rdx, [0x140049ef6]
lea rcx, [rsp + 0xd30]
call fcn.140024fd0
test rax, rax
je 0x1400038b8
mov r14, rax
lea rcx, [rsp + 0x80]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140026f34
cmp rax, 1
sete sil
jne 0x140004517
mov byte [rsp + 0xa4], 0
mov rcx, r14
call fcn.1400265ec
test eax, eax
je 0x1400038ba
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005896
lea rdx, str.File_close_did_not_execute_successfully
call fcn.1400139f0
jmp 0x1400038ba
xor r12d, r12d
jmp 0x14000358f
lea rax, [r12 + 1]
mov qword [rsp + 0x68], rax
lea rax, [r12*2 + 4]
add r12, 2
mov rbp, 0xffffffffffffffff
cmovns rbp, rax
mov rcx, rbp
call fcn.1400156f8
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call fcn.14003cd40
mov rcx, rbx
mov rdx, r12
mov r9, r13
call fcn.140013bc0
mov rcx, r14
mov rdx, rbx
mov r8, qword [rsp + 0x68]
call fcn.140024de8
mov ebp, eax
mov rcx, rbx
call fcn.140015700
test ebp, ebp
je 0x1400044a5
mov r12b, 1
xor esi, esi
jmp 0x14000358f
mov rcx, r14
call fcn.1400265ec
test eax, eax
je 0x140004615
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005918
lea rdx, str.File_close_did_not_execute_successfully
call fcn.1400139f0
mov r13, rsi
jmp 0x1400041ee
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.14003dbc0
test eax, eax
je 0x140003be6
lea rdx, [0x140049ef6]
lea rcx, [rsp + 0xd30]
call fcn.140024fd0
test rax, rax
je 0x140003be6
mov r14, rax
lea rcx, [rsp + 0x6d0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140026f34
cmp rax, 1
jne 0x140004a0a
mov byte [rsp + 0x6f4], 0
mov rcx, r14
call fcn.1400265ec
test eax, eax
je 0x1400046c4
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000599a
lea rdx, str.File_close_did_not_execute_successfully
call fcn.1400139f0
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x6d0]
mov r8d, 0x25
call fcn.140028110
test eax, eax
jne 0x140003be6
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140005a1c
lea rdx, str.The_secure_ID_hasnt_changed_after_launching_the_updater_using_the_service
call fcn.1400139f0
mov byte [0x140054a49], 0
jmp 0x140003bfc
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400017e5
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400017e5
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x14000185d
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x14000185d
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400018aa
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400018aa
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400018e9
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400018e9
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140001928
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140001928
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140001963
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140001963
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400019e9
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400019e9
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140001a61
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140001a61
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140001a99
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140001a99
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140001ad1
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140001ad1
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140001238
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140001238
lea rcx, [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r13, rbp
mov r12, qword [rsp + 0x58]
jmp 0x140002f38
mov rcx, r14
call fcn.1400265ec
test eax, eax
je 0x140003be6
mov eax, dword [0x140055e98]
mov ecx, dword [0x140052e00]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400059db
lea rdx, str.File_close_did_not_execute_successfully
call fcn.1400139f0
jmp 0x140003be6
lea rcx, [0x140055e98]
call fcn.140015744
lea r14, str.Performing_a_staged_update
jmp 0x140004ab9
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140001cbc
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140001cbc
lea rcx, [0x140055e98]
call fcn.140015744
lea r14, str.Performing_a_replace_request
cmp dword [0x140055e98], 0xffffffff
jne 0x140001a34
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140001a34
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140001bbe
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140001bbe
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140001eed
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140001eed
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140001e72
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140001e72
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140001f56
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140001f56
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002d1d
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002d1d
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140001ff5
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140001ff5
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140001c29
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140001c29
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002d54
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002d54
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400024f7
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400024f7
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002b9f
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002b9f
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002526
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002526
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x14000296d
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x14000296d
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002786
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002786
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002d99
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002d99
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002f4a
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002f4a
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002929
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002929
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002bd0
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002bd0
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002365
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002365
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002dd3
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002dd3
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400028c5
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400028c5
lea rcx, [0x140055e98]
call fcn.140015744
lea rbx, str.NS_main:_directory_will_be_removed_on_OS_reboot:__S
jmp 0x1400050af
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002e11
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002e11
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400022ff
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400022ff
lea rcx, [0x140055e98]
call fcn.140015744
lea rbx, str.NS_main:_failed_to_schedule_OS_reboot_removal_of_directory:__S
cmp dword [0x140055e98], 0xffffffff
jne 0x140002ce9
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002ce9
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140002fde
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140002fde
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400030ff
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400030ff
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400032ef
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400032ef
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003d8b
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003d8b
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003dfd
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003dfd
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003396
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003396
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x14000318e
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x14000318e
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400042dc
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400042dc
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003e6b
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003e6b
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003091
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003091
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003f9b
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003f9b
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003fdf
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003fdf
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003223
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003223
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003299
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003299
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400041e2
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400041e2
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x14000424f
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x14000424f
lea rcx, [0x140055e98]
call fcn.140015744
lea r14, str.Not_running_LaunchWinPostProcess_because_update_status_is_notsucceeded.
cmp dword [0x140055e98], 0xffffffff
jne 0x1400042a6
jmp 0x1400055d8
lea rcx, [0x140055e98]
call fcn.140015744
lea r14, str.Launching_service_failed._useServicefalse
jmp 0x140005654
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400039e1
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400039e1
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003a60
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003a60
lea rcx, [0x140055e98]
call fcn.140015744
lea r14, str.Failed_to_run_LaunchWinPostProcess
cmp dword [0x140055e98], 0xffffffff
mov rsi, qword [rsp + 0x60]
jne 0x1400042a6
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400042a6
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003b5a
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003b5a
lea rcx, [0x140055e98]
call fcn.140015744
lea r14, str.Service_didnt_stop_after_10_minutes._useServicefalse
cmp dword [0x140055e98], 0xffffffff
mov r13, qword [rsp + 0x50]
jne 0x140003d2b
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003d2b
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003c21
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003c21
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003c52
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003c52
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003c8a
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003c8a
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003cc2
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003cc2
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140003cfa
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140003cfa
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400037c7
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400037c7
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400043bb
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400043bb
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140004455
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140004455
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x14000454c
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x14000454c
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x14000411d
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x14000411d
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140004609
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140004609
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140004174
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140004174
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x1400046b8
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x1400046b8
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x140004a3f
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x140004a3f
lea rcx, [0x140055e98]
call fcn.140015744
cmp dword [0x140055e98], 0xffffffff
jne 0x14000470c
mov qword [0x140055c88], 0
lea rcx, [0x140008510]
call fcn.140015828
lea rcx, [0x140055e98]
call fcn.1400157bc
jmp 0x14000470c