Function at 0x140007da0
Capabilities:
Check if file exists
Copy file
Create a process with modified i/o handles and window
Create directory
Create process on windows
Create thread
Delete file
Get common file path
Get disk information
Get file attributes
Move file
Query or enumerate registry value
Read file on windows
Set registry value
Start service
Write and execute a file
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf68
movaps xmmword [rsp + 0xf50], xmm6
mov rdi, rdx
mov r13d, ecx
mov rax, qword [0x14004c030]
xor rax, rsp
mov qword [rsp + 0xf48], rax
lea rcx, [0x14004288e]
call fcn.140022e44
test rax, rax
je 0x140007dec
cmp byte [rax], 0
setne al
jmp 0x140007dee
xor eax, eax
mov byte [0x14004ea38], al
lea rcx, str.MOZ_USING_SERVICE
call fcn.14001fcc0
cmp r13d, 3
jg 0x140007e2f
mov ecx, 2
call fcn.1400177b8
lea rcx, str.Usage:_updater_patch_dir_install_dir_apply_to_dir__wait_pid__callback_working_dir_callback_path_args...___n
mov edx, 0x6a
mov r8d, 1
mov r9, rax
call fcn.140022b68
jmp 0x140008ee7
lea rsi, [rdi + 8]
mov rdx, qword [rdi + 8]
lea rbx, [0x14004e200]
mov r8d, 0x104
mov rcx, rbx
call fcn.1400153dc
mov word [0x14004e406], 0
lea r14, [rsp + 0xb20]
mov r8d, 0x208
mov rcx, r14
xor edx, edx
call fcn.140017010
lea r8, str._supdate_elevated.lock
mov edx, 0x104
mov rcx, r14
mov r9, rbx
call fcn.140004010
mov al, 1
cmp byte [0x14004ea38], 0
jne 0x140007eaf
lea rcx, [rsp + 0xb20]
call fcn.140020f8c
test eax, eax
je 0x140007ead
call fcn.14001c7f0
cmp dword [rax], 2
setne al
jmp 0x140007eaf
xor eax, eax
mov byte [0x14004ec48], al
lea rcx, [rsp + 0xb20]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
setne byte [0x14004ec49]
mov rcx, qword [rsi]
call fcn.140013970
test al, al
je 0x140008371
mov rcx, qword [rdi + 0x10]
call fcn.140013970
test al, al
je 0x14000838a
mov rdx, qword [rdi + 0x10]
lea rbx, [0x14004ea40]
mov r8d, 0x104
mov rcx, rbx
call fcn.1400153dc
mov word [0x14004ec46], 0
mov rcx, rbx
mov dx, 0x5c
call fcn.14001734c
test rax, rax
je 0x140007f2d
cmp word [rax + 2], 0
jne 0x140007f2d
mov word [rax], 0
lea r8, str._s_update.status
lea r9, [0x14004e200]
lea rbx, [rsp + 0x290]
mov edx, 0x104
mov rcx, rbx
call fcn.140004010
lea rdx, [0x140043fee]
mov rcx, rbx
call fcn.140020d64
test rax, rax
mov qword [rsp + 0x60], rsi
je 0x140007fe6
mov r15, rax
xorps xmm0, xmm0
lea rcx, [rsp + 0xd30]
movaps xmmword [rcx + 0x10], xmm0
movaps xmmword [rcx], xmm0
mov edx, 1
mov r8d, 0x1f
mov r9, rax
call fcn.1400228d4
mov r14, rax
mov rcx, r15
call fcn.1400222cc
test eax, eax
je 0x140008132
xor r12d, r12d
mov rcx, r15
call fcn.1400221e4
test eax, eax
je 0x140007fe9
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b74e
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013720
jmp 0x140007fe9
xor r12d, r12d
xor esi, esi
mov qword [rsp + 0x290], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rsi
mov ebp, 2
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 0
lea rdx, str.SoftwareClassesApplications
mov r14, qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call r14
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 1
lea rdx, str.SoftwareClassesApplicationsupdater.exe
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call r14
test eax, eax
jne 0x1400080ea
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea rdx, str.IsHostApp
mov rbx, qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea rdx, str.NoOpenWith
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
lea rdx, str.NoStartPage
xor r8d, r8d
xor r9d, r9d
call rbx
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp r13d, 5
jl 0x14000812b
mov rcx, qword [rdi + 0x20]
call fcn.140021084
cmp rax, 0xffffffffffffffff
je 0x14000822f
mov rbx, rax
mov rcx, qword [rdi + 0x20]
lea rdx, str._replace
call fcn.1400173fc
test rax, rax
je 0x140008240
lea rax, [0x14004ec4a]
jmp 0x14000823d
xor ebx, ebx
jmp 0x140008240
mov byte [rsp + r14 + 0xd30], 0
lea r14, [rsp + 0xd30]
mov rcx, r14
mov edx, 0x3a
call fcn.1400171a0
mov r12, rax
test rax, rax
jne 0x140008185
lea rcx, [rsp + 0xd30]
mov edx, 0xa
call fcn.1400171a0
test rax, rax
jne 0x140008185
lea rcx, [rsp + 0xd30]
call fcn.140023730
add rax, rsp
add rax, 0xd30
sub rax, r14
cmp rax, 0xf
jne 0x1400081bb
movabs rax, 0x2d676e69646e6570
xor rax, qword [rsp + 0xd30]
movabs rcx, 0x656369767265732d
xor rcx, qword [rsp + 0xd37]
or rcx, rax
je 0x140008e03
test r12, r12
jne 0x1400081f2
lea rcx, [rsp + 0xd30]
mov edx, 0xa
call fcn.1400171a0
mov r12, rax
test rax, rax
jne 0x1400081f2
lea rcx, [rsp + 0xd30]
call fcn.140023730
lea r12, [rsp + rax]
add r12, 0xd30
sub r12, r14
cmp r12, 0xf
jne 0x140007fa4
movabs rax, 0x2d6465696c707061
xor rax, qword [rsp + 0xd30]
movabs rcx, 0x656369767265732d
xor rcx, qword [rsp + 0xd37]
or rcx, rax
sete r12b
jmp 0x140007fa7
mov rbx, 0xffffffffffffffff
lea rax, [0x14004e408]
mov byte [rax], 1
mov rcx, qword [rdi + 0x18]
call fcn.140013970
test al, al
je 0x140008d02
mov rdx, qword [rdi + 0x18]
lea r14, [0x14004e410]
mov r8d, 0x104
mov rcx, r14
call fcn.1400153dc
mov word [0x14004e616], 0
mov rcx, r14
mov dx, 0x5c
call fcn.14001734c
test rax, rax
je 0x140008290
cmp word [rax + 2], 0
jne 0x140008290
mov word [rax], 0
cmp r13d, 7
jl 0x1400083d6
mov rcx, qword [rdi + 0x30]
call fcn.140013970
test al, al
je 0x140008e5c
mov esi, r12d
lea r14, [0x14004ea40]
mov rcx, r14
call fcn.1400152a8
mov r15, rax
lea r12, [rsp + 0x290]
mov r8d, 0x208
mov rcx, r12
xor edx, edx
call fcn.140017010
mov rdx, qword [rdi + 0x30]
mov rcx, r12
mov r8, r15
call fcn.1400153dc
mov rcx, r14
mov rdx, r12
call fcn.140023f2c
test eax, eax
jne 0x140008e9d
cmp r13d, 8
mov r12d, esi
jl 0x140008354
lea esi, [r13 - 6]
dec rsi
xor r15d, r15d
lea r14, str.backgroundtask
mov rcx, qword [rdi + r15*8 + 0x38]
test rcx, rcx
je 0x14000834c
movzx eax, word [rcx]
cmp eax, 0x2f
je 0x140008332
cmp eax, 0x2d
jne 0x14000834c
cmp word [rcx + 2], 0x2d
je 0x140008338
add rcx, 2
jmp 0x14000833c
add rcx, 4
mov rdx, r14
call fcn.140023f2c
test eax, eax
je 0x1400083ce
inc r15
cmp rsi, r15
jne 0x140008314
lea rcx, str.MOZ_APP_SILENT_START
call fcn.140022e44
test rax, rax
je 0x14000836d
cmp byte [rax], 0
setne al
jmp 0x1400083d0
xor eax, eax
jmp 0x1400083d0
mov rsi, qword [rsi]
mov ecx, 2
call fcn.1400177b8
lea rdx, str.The_patch_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140008edc
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4b
call fcn.140001000
mov rcx, rsi
call fcn.14000c800
mov rsi, qword [rdi + 0x10]
mov ecx, 2
call fcn.1400177b8
lea rdx, str.The_install_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140008edc
mov al, 1
mov byte [0x14004ec4b], al
lea rcx, [rsp + 0x910]
mov r8d, 0x20a
xor edx, edx
call fcn.140017010
cmp byte [0x14004ec48], 0
je 0x140008522
lea r14, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.140017010
mov rcx, r14
call fcn.140013340
test eax, eax
je 0x14000844b
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.140017010
lea rcx, [0x140043f94]
mov rdx, r14
call fcn.140013440
test eax, eax
jne 0x140009170
lea rcx, [rsp + 0xd30]
call fcn.140013340
test eax, eax
je 0x14000848b
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.140017010
lea rcx, [0x1400437c8]
mov rdx, r14
call fcn.140013440
test eax, eax
jne 0x14000919f
lea rcx, [rsp + 0xd30]
call fcn.140013340
test eax, eax
je 0x1400084cb
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.140017010
lea rcx, [0x140043d68]
mov rdx, r14
call fcn.140013440
test eax, eax
jne 0x1400091ce
lea rcx, [rsp + 0x910]
call fcn.140013340
test eax, eax
je 0x140008560
lea r14, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.140017010
lea rcx, [0x140043d68]
mov rdx, r14
call fcn.140013440
test eax, eax
je 0x140008560
lea rcx, [rsp + 0x910]
lea rdx, [rsp + 0x290]
call fcn.1400372d0
jmp 0x140008560
cmp byte [0x14004ec49], 0
lea rax, str.update.log
lea rcx, [0x140043d4a]
cmove rcx, rax
mov qword [rsp + 0x20], rcx
lea r8, str._s_s
lea r9, [0x14004e200]
lea rcx, [rsp + 0x910]
mov edx, 0x105
call fcn.140004010
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b4c4
cmp qword [0x14004fc78], 0
jne 0x1400085d8
lea rcx, [rsp + 0x910]
call fcn.1400152a8
dec eax
cmp eax, 0x101
ja 0x1400085d8
lea r14, [0x14004fc80]
lea rdx, [rsp + 0x910]
mov r8d, 0x104
mov rcx, r14
call fcn.1400153dc
lea rdx, [0x140043722]
mov rcx, r14
call fcn.140020d64
mov qword [0x14004fc78], rax
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b505
cmp byte [0x14004ea38], 0
lea rsi, [0x140041271]
lea r15, str.true
mov r8, r15
cmove r8, rsi
lea rdx, str.sUsingService_s
call fcn.140013720
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b546
cmp byte [0x14004ec4b], 0
mov r8, r15
cmove r8, rsi
lea rdx, str.sUpdateSilently_s
call fcn.140013720
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b587
cmp byte [0x14004ec48], 0
mov r8, r15
cmove r8, rsi
lea rdx, str.gUseSecureOutputPath_s
call fcn.140013720
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b5c8
test r12b, r12b
mov r8, r15
cmove r8, rsi
lea rdx, [0x140040cb1]
call fcn.140013720
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b609
cmp byte [0x14004ec49], 0
mov r8, r15
cmove r8, rsi
lea rdx, str.gIsElevated_s
call fcn.140013720
lea rcx, str.applying
call fcn.14000c800
test al, al
je 0x140008764
cmp byte [0x14004e408], 1
jne 0x14000879f
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b7f0
lea r14, str.Performing_a_staged_update
jmp 0x1400087d4
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b64a
lea rdx, str.failed_setting_status_to_applying
call fcn.140013720
call fcn.140007a00
jmp 0x140008ee7
cmp byte [0x14004ec4a], 1
jne 0x1400087dc
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b846
lea r14, str.Performing_a_replace_request
mov rdx, r14
call fcn.140013720
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b68b
lea rdx, str.PATCH_DIRECTORY__S
lea r8, [0x14004e200]
call fcn.140013720
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b6cc
lea rdx, str.INSTALLATION_DIRECTORY__S
lea r8, [0x14004ea40]
call fcn.140013720
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b70d
lea rdx, str.WORKING_DIRECTORY__S
lea r14, [0x14004e410]
mov r8, r14
call fcn.140013720
lea rsi, [0x14004ea40]
mov r8d, 0x104
mov rcx, r14
mov rdx, rsi
call fcn.140020b80
test eax, eax
je 0x14000896a
cmp byte [0x14004e408], 0
jne 0x1400088bd
cmp byte [0x14004ec4a], 0
je 0x140008ca7
lea r8, [0x140043852]
lea r9, [0x14004e410]
lea r14, [rsp + 0x290]
mov edx, 0x104
mov rcx, r14
call fcn.140004010
mov rcx, r14
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x140008c3e
lea rdx, [0x14004ea40]
lea rcx, [rsp + 0x290]
mov r8d, 0x104
call fcn.140020b80
test eax, eax
je 0x14000896a
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x48
call fcn.140001000
mov rcx, rsi
call fcn.14000c800
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b88e
lea rdx, str.The_apply_to_directory_must_be_the_same_as_or_a_child_of_the_installation_directory__Exiting.
jmp 0x140008790
test rbx, rbx
jle 0x1400089d5
mov ecx, 0x100000
xor edx, edx
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x1400089d5
mov rbx, rax
mov rcx, rax
mov edx, 0x7530
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebp, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebp, ebp
je 0x1400089d5
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000ba14
lea rdx, str.The_parent_process_didnt_exit__Continuing_with_update.
call fcn.140013720
cmp byte [0x14004ec4a], 0
jne 0x1400089e7
cmp byte [0x14004e408], 1
jne 0x140008a1e
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140017010
mov rcx, rbx
mov edx, 0x105
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x140008a1e
lea rcx, [rsp + 0x290]
call fcn.1400204d4
mov dword [rsp + 0x68], r12d
mov r12, 0xffffffffffffffff
cmp byte [0x14004ea38], 0
je 0x140008bd1
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b805
lea rdx, str.Going_to_update_via_this_updater_instance.
call fcn.140013720
cmp byte [0x14004e408], 1
jne 0x140008a7f
lea rcx, [0x14004e410]
xor edx, edx
call fcn.14000d180
cmp byte [0x14004ec4a], 0
jne 0x140008aa6
lea rcx, [0x14004e410]
call fcn.140020e94
test eax, eax
je 0x140008aa6
call fcn.14001c7f0
cmp dword [rax], 0x11
jne 0x140008795
lea rcx, [0x14004e410]
lea rdx, [rsp + 0xd30]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x140008d46
mov r15, 0xffffffffffffffff
cmp r13d, 7
jl 0x140008f55
mov qword [rsp + 0x50], r13
lea rcx, [rsp + 0x700]
mov ebx, 0x208
mov r8d, 0x208
xor edx, edx
call fcn.140017010
lea r14, [rdi + 0x30]
mov r15, qword [rdi + 0x30]
lea r13, [rsp + 0x290]
mov r8d, 0x410
mov rcx, r13
xor edx, edx
call fcn.140017010
cmp byte [0x14004ec4a], 1
jne 0x140008f1a
mov rcx, r15
mov rdx, rsi
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
movsxd r15, eax
mov rdx, qword [r14]
mov rcx, r13
mov r8, r15
call fcn.1400153dc
mov qword [rsp + 0x58], r12
lea r12, [rsp + r15*2]
add r12, 0x290
sub rbx, r15
lea rbp, [rsi + r15*2]
mov rcx, r12
mov rdx, rbp
mov r8, rbx
call fcn.1400153dc
mov rcx, rbp
call fcn.1400152a8
lea r12, [r12 + rax*2]
add r12, 2
mov dword [r12 - 2], 0x5c
not rax
add rbx, rax
lea rbp, [rsp + 0x80]
mov rcx, rbp
mov rdx, rsi
call fcn.140015210
mov rcx, qword [r14]
mov rdx, rbp
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
cmp eax, r15d
cmova r15d, eax
movsxd rdx, r15d
add rdx, rdx
add rdx, qword [r14]
mov rcx, r12
mov r12, qword [rsp + 0x58]
mov r8, rbx
call fcn.1400153dc
jmp 0x140008f1d
cmp r13d, 6
jg 0x140008bed
cmp byte [0x14004e408], 0
jne 0x140008bed
cmp byte [0x14004ec4a], 1
jne 0x140008a37
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b910
lea rdx, str.Checking_whether_elevation_is_needed
call fcn.140013720
cmp byte [0x14004e408], 1
jne 0x140008e0b
lea r8, str._s_updated.update_in_progress.lock
lea r9, [0x14004ea40]
jmp 0x140009208
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x47
call fcn.140001000
mov rcx, rsi
call fcn.14000c800
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b8cf
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Error_calling_PathRemoveFileSpecW:__lu
mov r8d, eax
call fcn.140013720
jmp 0x140008795
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4a
call fcn.140001000
mov rcx, rsi
call fcn.14000c800
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b951
lea rdx, str.Installation_directory_and_working_directory_must_be_the_same_for_non_staged_updates._Exiting.
jmp 0x140008790
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4c
call fcn.140001000
mov rcx, rsi
call fcn.14000c800
mov rsi, qword [rdi + 0x18]
mov ecx, 2
call fcn.1400177b8
lea rdx, str.The_working_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140008edc
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x41
call fcn.140001000
mov rcx, rbx
call fcn.14000c800
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b9d3
lea rdx, str.NS_main:_unable_to_find_apply_to_dir:__S
lea r8, [0x14004e410]
call fcn.140013720
call fcn.140007a00
cmp r12, 0xffffffffffffffff
je 0x140008dbc
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140020f8c
test eax, eax
je 0x140008ddb
call fcn.14001c7f0
cmp dword [rax], 2
jne 0x140008ee7
cmp r13d, 7
jl 0x140008ee7
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
jmp 0x140009580
mov r12b, 1
jmp 0x140007fa7
cmp byte [0x14004ec4a], 1
jne 0x1400091fd
lea rdx, [0x14004ea40]
lea rbx, [rsp + 0x290]
mov rcx, rbx
call fcn.140015210
mov rcx, rbx
mov dx, 0x5c
call fcn.14001734c
mov word [rax], 0
lea r8, str._smoz_update_in_progress.lock
lea rcx, [rsp + 0x700]
mov edx, 0x104
mov r9, rbx
jmp 0x140009215
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4d
call fcn.140001000
mov rcx, rsi
call fcn.14000c800
mov rsi, qword [rdi + 0x30]
mov ecx, 2
call fcn.1400177b8
lea rdx, str.The_callback_file_path_is_not_valid_for_this_application___S__n
jmp 0x140008edc
lea r8, str.failed:__d_n
lea rsi, [rsp + 0xd30]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x4e
call fcn.140001000
mov rcx, rsi
call fcn.14000c800
mov rsi, qword [rdi + 0x30]
mov ecx, 2
call fcn.1400177b8
lea rdx, str.The_callback_file_must_be_located_in_the_installation_directory___S__n
mov rcx, rax
mov r8, rsi
call fcn.1400370e0
mov ebx, 1
mov rcx, qword [rsp + 0xf48]
xor rcx, rsp
call fcn.140027ea0
mov eax, ebx
movaps xmm6, xmmword [rsp + 0xf50]
add rsp, 0xf68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r13, r15
lea rdx, [rsp + 0x700]
mov rcx, r13
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x1400094d7
mov r15, 0xffffffffffffffff
cmp byte [0x14004ec4a], 0
je 0x14000958a
mov r13, qword [rsp + 0x50]
cmp byte [0x14004e408], 0
jne 0x140008faf
cmp byte [0x14004ec4a], 0
jne 0x140008faf
lea rax, str.tobedeleted
mov qword [rsp + 0x20], rax
lea rbx, [0x14004ec50]
lea r8, str._s__s
lea r9, [0x14004e410]
mov edx, 0x104
mov rcx, rbx
call fcn.140004010
mov rcx, rbx
xor edx, edx
call fcn.140020414
test eax, eax
je 0x140008faf
lea rcx, [0x14004ec50]
call fcn.140020e94
lea rax, [0x14000d3d0]
lea rbx, [rsp + 0x290]
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], 0
lea rsi, [rsp + 0x700]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0
lea r8, [0x14000cd00]
xor ecx, ecx
xor edx, edx
mov r9, rbx
call fcn.14001b9e4
mov qword [rbx], rax
test rax, rax
je 0x140009026
cmp byte [0x14004e408], 0
jne 0x140009026
cmp byte [0x14004ec4a], 0
jne 0x140009026
cmp byte [0x14004ec4b], 0
jne 0x140009026
xor ecx, ecx
mov dl, 1
call fcn.140002ee0
mov rax, qword [rsp + 0x290]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r13d, 7
jl 0x1400090b2
cmp byte [0x14004ec4a], 0
jne 0x1400090b2
cmp r15, 0xffffffffffffffff
je 0x140009060
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x14004e830]
call fcn.140020f8c
test eax, eax
je 0x1400090b2
call fcn.14001c7f0
cmp dword [rax], 2
je 0x1400090b2
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bdfb
lea rdx, str.NS_main:_non_fatal_error_removing_backup_of_callback_app_file__path:__S
lea r8, [0x14004e830]
call fcn.140013720
cmp byte [0x14004e408], 0
jne 0x140009a98
cmp byte [0x14004ec4a], 0
jne 0x140009a98
lea rcx, [0x14004ec50]
call fcn.140020fe4
test eax, eax
je 0x140009a98
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bcdf
call fcn.14001c7f0
mov r9d, dword [rax]
lea rdx, str.NS_main:_unable_to_remove_directory:__S__err:__d
lea r8, str.tobedeleted
call fcn.140013720
lea rcx, [0x14004ec50]
xor edx, edx
mov r8d, 4
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov ecx, dword [0x14004fe88]
mov edx, dword [0x14004cde8]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
test eax, eax
je 0x140009a7a
cmp ecx, edx
jg 0x14000bda2
lea rbx, str.NS_main:_directory_will_be_removed_on_OS_reboot:__S
jmp 0x140009a89
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.1400372d0
test eax, eax
je 0x14000844b
lea rcx, [rsp + 0xd30]
call fcn.140020f8c
jmp 0x14000844b
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.1400372d0
test eax, eax
je 0x14000848b
lea rcx, [rsp + 0xd30]
call fcn.140020f8c
jmp 0x14000848b
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.1400372d0
test eax, eax
je 0x1400084cb
lea rcx, [rsp + 0xd30]
call fcn.140020f8c
jmp 0x1400084cb
mov r9, qword [rdi + 0x30]
lea r8, str._s.update_in_progress.lock
lea rcx, [rsp + 0x700]
mov edx, 0x104
call fcn.140004010
lea rcx, [rsp + 0x700]
call fcn.140020f8c
test eax, eax
je 0x140009235
call fcn.14001c7f0
cmp dword [rax], 2
jne 0x1400092a5
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0x700]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
cmp r12, 0xffffffffffffffff
je 0x1400092be
cmp eax, ecx
jg 0x14000ba96
lea rdx, str.Successfully_opened_lock_file
call fcn.140013720
jmp 0x1400092db
cmp byte [0x14004ec4a], 1
jne 0x1400098e7
lea rcx, str.pending
jmp 0x140009915
cmp eax, ecx
jg 0x14000bb18
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Failed_to_open_update_lock_file:__lu
mov r8d, eax
call fcn.140013720
cmp byte [0x14004ec49], 0
je 0x1400096de
lea rbx, [rsp + 0x80]
mov qword [rbx], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0xf00ff
mov r8, rbx
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1400096a4
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r13
mov r13, qword [rsp + 0x80]
xor r12d, r12d
lea rbp, [rsp + 0xd30]
mov rbx, qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
xorps xmm6, xmm6
lea rax, str.SeAssignPrimaryTokenPrivilege
mov r14, qword [r12 + rax]
xor ecx, ecx
mov rdx, r14
mov r8, rbp
call rbx
test eax, eax
je 0x1400093b3
mov dword [rsp + 0x290], 1
mov rax, qword [rsp + 0xd30]
mov qword [rsp + 0x294], rax
mov dword [rsp + 0x29c], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
movups xmmword [rsp + 0x20], xmm6
mov rcx, r13
xor edx, edx
lea r8, [rsp + 0x290]
mov r9d, 0x10
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
test eax, eax
je 0x1400093b3
call rsi
test eax, eax
je 0x1400093fe
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140009430
call rsi
lea rdx, str.Could_not_disable_token_privilege_value:__s.___lu_
mov r8, r14
mov r9d, eax
call fcn.140013720
add r12, 8
cmp r12, 0x110
jne 0x140009344
jmp 0x1400094aa
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000946d
lea rdx, str.Disabled_unneeded_token_privilege:__s.
mov r8, r14
call fcn.140013720
jmp 0x1400093e8
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400093d4
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x1400093d4
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000941f
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000941f
mov rcx, qword [rsp + 0x80]
test rcx, rcx
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
lea rsi, [0x14004ea40]
je 0x1400096de
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400096de
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x42
call fcn.140001000
mov rcx, rbx
call fcn.14000c800
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bb9a
lea rdx, str.NS_main:_unable_to_find_callback_file:__S
mov r8, r13
call fcn.140013720
call fcn.140007a00
cmp r12, 0xffffffffffffffff
je 0x140009549
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140020f8c
test eax, eax
mov rsi, qword [rsp + 0x50]
je 0x14000956d
call fcn.14001c7f0
cmp dword [rax], 2
jne 0x140008ee7
mov r9b, byte [0x14004ea38]
add esi, 0xfffffffa
mov rcx, qword [rdi + 0x28]
mov edx, esi
mov r8, r14
call fcn.140007c30
jmp 0x140008ee7
lea rcx, [rsp + 0xd30]
call fcn.1400152a8
movsxd rcx, eax
lea rax, [rsp + rcx*2]
add rax, 0x700
xor edx, edx
cmp word [rax], 0x5c
sete dl
movzx eax, word [rax + rdx*2]
add rdx, rdx
lea rcx, [rdx + rcx*2]
lea rdx, [rsp + rcx]
add rdx, 0x702
lea rcx, [0x14004e620]
mov r8d, 0x2f
cmp ax, 0x5c
cmove eax, r8d
mov word [rcx], ax
add rcx, 2
movzx eax, word [rdx]
add rdx, 2
test ax, ax
jne 0x1400095d0
mov word [rcx], 0
mov r9, qword [r14]
lea rcx, [0x14004e830]
lea r8, str._s.moz_callback
mov edx, 0x104
call fcn.140004010
cmp eax, 0x104
jb 0x14000997c
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x80]
mov edx, 0x20
mov rcx, rsi
mov r9d, 3
call fcn.140001000
mov rcx, rsi
call fcn.14000c800
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bd61
lea rdx, str.NS_main:_callback_backup_path_truncated
call fcn.140013720
call fcn.140007a00
cmp r12, 0xffffffffffffffff
je 0x140009685
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140020f8c
test eax, eax
je 0x140008ee7
call fcn.14001c7f0
jmp 0x140008ee7
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bc5d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Could_not_obtain_token_for_current_process__no_privileges_changed.___lu_
mov r8d, eax
call fcn.140013840
cmp r12, 0xffffffffffffffff
jne 0x140008a37
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bb59
lea rdx, str.Cant_open_lock_file___seems_like_we_need_elevation
call fcn.140013720
lea rcx, [rsp + 0xb20]
call fcn.140020f8c
test eax, eax
mov ebx, dword [rsp + 0x68]
je 0x14000973c
call fcn.14001c7f0
cmp dword [rax], 2
jne 0x14000994b
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0xb20]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x14000994b
mov rsi, rax
lea edx, [r13 - 1]
lea r14, [rsp + 0x78]
mov rcx, r14
mov r8, qword [rsp + 0x60]
call fcn.140001090
mov rax, qword [r14]
test rax, rax
je 0x140009d59
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rsi
test bl, bl
je 0x14000aad3
lea rcx, [0x14004ea40]
xor esi, esi
xor edx, edx
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x14000a06a
mov ebp, eax
mov r12d, eax
add r12, r12
mov rcx, r12
call fcn.1400151d4
mov r14, rax
xor esi, esi
mov rcx, rax
xor edx, edx
mov r8, r12
call fcn.140017010
lea rcx, [0x14004ea40]
mov rdx, r14
mov r8d, ebp
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x14000a062
mov qword [rsp + 0x50], r13
lea rsi, [rsp + 0x290]
mov qword [rsi], 0
lea rcx, [0x140039010]
xor edx, edx
xor r8d, r8d
mov r9, rsi
call sub.SHELL32.dll_SHGetKnownFolderPath
test eax, eax
js 0x14000a05b
mov r13, qword [rsp + 0x290]
mov rcx, r13
call fcn.1400152a8
test rax, rax
je 0x14000a04d
mov rbp, rax
cmp word [r13 + rax*2 - 2], 0x5c
jne 0x14000a24d
mov rcx, r14
mov rdx, r13
mov r8, rbp
call fcn.140020b80
test eax, eax
je 0x14000a2b5
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [rsp + 0x290], 0
mov r13, rsi
mov qword [rsp + 0x30], rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion
lea r8, str.ProgramFilesDir
mov rcx, 0xffffffff80000002
mov r9d, 0x10002
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov esi, 1
test eax, eax
jne 0x1400098d6
mov ebp, dword [rsp + 0x290]
cmp rbp, 4
jae 0x14000a2c6
xor r12d, r12d
test esi, esi
setne sil
and sil, r12b
jmp 0x14000a05d
cmp byte [0x14004e408], 1
jne 0x14000991a
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x2c
call fcn.140001000
mov rcx, rsi
call fcn.14000c800
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bad7
lea rdx, str.Update_already_in_progress__Exiting
jmp 0x140008790
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bc9e
lea rdx, str.Unable_to_create_elevated_lock_file__Exiting
jmp 0x140008790
mov rcx, qword [r14]
lea rdx, [0x14004e830]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x140009da2
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x58], r12
mov ebp, 1
mov rsi, qword [sym.imp.KERNEL32.dll_CreateFileW]
lea r12, str.NS_main:_callback_app_file_open_attempt__d_failed._File:__S._Last_error:__lu
mov r14, qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
mov rcx, r13
mov edx, 0x40010000
mov r8d, 6
xor r9d, r9d
call rsi
cmp rax, 0xffffffffffffffff
jne 0x140009dd3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140009a40
mov dword [rsp + 0x20], ebx
mov rdx, r12
mov r8d, ebp
mov r9, r13
call fcn.140013720
mov ecx, 0x64
call r14
inc ebp
cmp ebp, 0xb
jne 0x1400099bb
jmp 0x140009de5
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009a1a
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009a1a
cmp ecx, edx
jg 0x14000be3c
lea rbx, str.NS_main:_failed_to_schedule_OS_reboot_removal_of_directory:__S
lea r8, str.tobedeleted
mov rdx, rbx
call fcn.140013720
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000b992
lea rdx, str.Running_LaunchCallbackAndPostProcessApps
call fcn.140013720
cmp r13d, 7
jge 0x140009b05
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000ba55
lea rdx, str.No_callback_arg._Skipping_LaunchWinPostProcess_and_LaunchCallbackApp
call fcn.140013720
jmp 0x140009d45
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
cmp byte [0x14004ea3a], 1
jne 0x140009ce2
cmp eax, ecx
jg 0x14000bbdb
lea rdx, str.Launching_Windows_post_update_process
call fcn.140013720
call fcn.140006eb0
test al, al
jne 0x140009b7f
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bd20
lea rdx, str.The_post_update_process_was_not_launched_successfully
call fcn.140013720
cmp byte [0x14004ea38], 0
jne 0x140009cf6
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bdba
lea rdx, str.Starting_Service_Update_before_launching_callback_app
call fcn.140013720
xor ecx, ecx
xor edx, edx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
test rax, rax
je 0x140009cf6
mov r14, rax
lea rdx, str.MozillaMaintenance
mov rcx, rax
mov r8d, 0xf01ff
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rbx, rax
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test rbx, rbx
je 0x140009cf6
lea r9, [rsp + 0x6d0]
mov rcx, rbx
xor edx, edx
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
test eax, eax
jne 0x140009c2d
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14000a023
lea r15, [rsp + 0x6d0]
mov qword [rsp + 0x58], r12
mov r12d, dword [r15]
mov rcx, r12
call fcn.1400151d4
mov r14, rax
mov rcx, rax
xor edx, edx
mov r8, r12
call fcn.140017010
mov rcx, rbx
mov rdx, r14
mov r8d, r12d
mov r12, qword [rsp + 0x58]
mov r9, r15
call qword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
mov ebp, eax
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test ebp, ebp
je 0x140009cd8
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
lea rcx, [rsp + 0x290]
mov r8d, 0x20a
xor edx, edx
call fcn.140017010
mov rbx, qword [r14 + 0x10]
mov rcx, rbx
call fcn.1400152a8
cmp rax, 0x104
ja 0x140009cd8
lea r15, [rsp + 0x290]
mov r8d, 0x105
mov rcx, r15
mov rdx, rbx
call fcn.1400153dc
mov rcx, r15
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
jne 0x14000a33c
mov rcx, r14
call fcn.1400153d4
jmp 0x140009cf6
cmp eax, ecx
jg 0x14000bc1c
lea rdx, str.Not_launching_Windows_post_update_process_because__gSucceeded
call fcn.140013720
cmp r12, 0xffffffffffffffff
je 0x140009d05
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140020f8c
test eax, eax
je 0x140009d20
call fcn.14001c7f0
cmp dword [rax], 2
jne 0x140009d45
call fcn.140007a00
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
call fcn.140007c30
jmp 0x140009d4a
call fcn.140007a00
movzx ebx, byte [0x14004ea3a]
xor ebx, 1
jmp 0x140008eec
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000be84
lea rdx, str.Failed_to_make_command_line__Exiting
call fcn.140013720
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140007a00
mov ebx, 1
jmp 0x14000abce
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, str.failed:__d_n
lea rdi, [rsp + 0x80]
mov edx, 0x20
mov rcx, rdi
cmp eax, 5
jne 0x140009e62
mov r9d, 0x23
jmp 0x140009e68
mov r15, rax
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
jmp 0x140008f55
cmp ebx, 0x20
jne 0x140009efa
cmp byte [0x14004ec4b], 0
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
je 0x14000a031
cmp eax, ecx
jg 0x14000c0cd
mov r8, qword [rsi]
lea rdx, str.NS_main:_callback_app_file_in_use__failed_to_exclusively_open_executable_file_from_background_task:__S
call fcn.140013720
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x6a
jmp 0x140009f77
mov r9d, 0x25
call fcn.140001000
mov rcx, rdi
call fcn.14000c800
mov rsi, qword [rsp + 0x50]
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bec5
mov r8, qword [r14]
lea rdx, str.NS_main:_failed_to_copy_callback_file__S_into_place_at__S
lea r9, [0x14004e830]
call fcn.140013720
call fcn.140007a00
cmp r12, 0xffffffffffffffff
je 0x140009ec9
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140020f8c
test eax, eax
je 0x140009ee8
call fcn.14001c7f0
cmp dword [rax], 2
jne 0x140008ee7
mov r9b, byte [0x14004ea38]
add esi, 0xfffffffa
mov rcx, qword [r14]
jmp 0x14000957b
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
mov r13, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
jg 0x14000c00a
mov r8, qword [rsi]
lea rdx, str.NS_main:_callback_app_file_in_use__failed_to_exclusively_open_executable_file:__S
call fcn.140013720
lea r8, str.failed:__d_n
cmp ebx, 5
jne 0x140009f61
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x23
jmp 0x140009f77
lea rbx, [rsp + 0x80]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x25
call fcn.140001000
mov rcx, rbx
call fcn.14000c800
lea rcx, [0x14004e830]
call fcn.140020f8c
test eax, eax
je 0x140009fd6
call fcn.14001c7f0
cmp dword [rax], 2
je 0x140009fd6
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c190
lea rdx, str.NS_main:_unable_to_remove_backup_of_callback_app_file__path:__S
lea r8, [0x14004e830]
call fcn.140013720
call fcn.140007a00
cmp r12, 0xffffffffffffffff
je 0x140009fea
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xb20]
call fcn.140020f8c
test eax, eax
je 0x14000a009
call fcn.14001c7f0
cmp dword [rax], 2
jne 0x140008ee7
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
mov edx, r13d
mov r8, rsi
jmp 0x140009580
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x140009cf6
cmp eax, ecx
jg 0x14000c1d1
mov r8, qword [rsi]
lea rdx, str.NS_main:_callback_app_file_in_use__continuing_without_exclusive_access_for_executable_file:__S
call fcn.140013720
jmp 0x140008f55
test r13, r13
je 0x14000a05b
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor esi, esi
mov r13, qword [rsp + 0x50]
mov rcx, r14
call fcn.1400153d4
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bf06
test sil, sil
mov r8, r15
lea rax, [0x140041271]
cmove r8, rax
lea rdx, str.After_checking_IsProgramFilesPath__useService_s
call fcn.140013720
test sil, sil
je 0x14000aad3
mov r14, qword [rdi]
xor esi, esi
lea rcx, [rsp + 0x290]
mov r8d, 0x20a
xor edx, edx
call fcn.140017010
mov rcx, r14
call fcn.1400152a8
cmp rax, 0x104
ja 0x14000a111
lea rbx, [rsp + 0x290]
mov r8d, 0x104
mov rcx, rbx
mov rdx, r14
call fcn.1400153dc
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathStripToRootW]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
sete sil
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bfc9
test sil, sil
mov r8, r15
lea rax, [0x140041271]
cmove r8, rax
lea rdx, str.After_checking_IsLocalFile__useService_s
call fcn.140013720
test sil, sil
je 0x14000aad3
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r12, [rsp + 0x290]
mov rcx, rax
mov edx, 8
mov r8, r12
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14000a58b
mov rcx, qword [rsp + 0x290]
lea rsi, [rsp + 0x80]
mov qword [rsp + 0x20], rsi
lea r14, [rsp + 0xd30]
mov edx, 0x12
mov r8, r14
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov ebx, eax
mov ebp, dword [r14]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x14000a58b
cmp ebp, 3
jne 0x14000a58b
mov qword [rsp + 0x20], r12
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem
mov rcx, 0xffffffff80000002
xor r8d, r8d
mov r9d, 0x20019
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000a58b
mov rcx, qword [rsp + 0x290]
mov dword [rsp + 0xd30], 4
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
lea rdx, str.ConsentPromptBehaviorAdmin
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x290]
test eax, eax
je 0x14000a4ed
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14000a58b
lea rax, [rbp + 1]
mov qword [rsp + 0x68], rax
lea rax, [rbp*2 + 4]
add rbp, 2
mov r12, 0xffffffffffffffff
cmovns r12, rax
mov rcx, r12
call fcn.1400151d4
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, r12
call fcn.140017010
mov rcx, rbx
mov rdx, rbp
mov r9, r13
call fcn.1400138f0
mov rcx, r14
mov rdx, rbx
mov r8, qword [rsp + 0x68]
call fcn.140020b80
mov ebp, eax
mov rcx, rbx
call fcn.1400153d4
test ebp, ebp
jne 0x140009877
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov sil, 1
jmp 0x14000a05d
shr ebp, 1
lea rbx, [rbp*2]
mov rcx, rbx
call fcn.1400151d4
mov rsi, rax
xor r12d, r12d
mov rcx, rax
xor edx, edx
mov r8, rbx
call fcn.140017010
mov qword [rsp + 0x30], r13
mov r13, rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], 0
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion
lea r8, str.ProgramFilesDir
mov rcx, 0xffffffff80000002
mov r9d, 0x10002
call qword [sym.imp.ADVAPI32.dll_RegGetValueW]
mov esi, 1
test eax, eax
je 0x14000b20b
mov rcx, r13
call fcn.1400153d4
jmp 0x1400098d9
lea rdx, str.maintenanceservice_tmp.exe
lea rcx, [rsp + 0x290]
call fcn.1400372d0
test eax, eax
je 0x140009cd8
lea rcx, [0x14004ea40]
call fcn.1400152a8
cmp rax, 0x104
ja 0x140009cd8
mov rbp, r13
lea r15, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, r15
xor edx, edx
call fcn.140017010
lea rbx, [0x14004ea40]
mov r8d, 0x104
mov rcx, r15
mov rdx, rbx
call fcn.1400153dc
lea rdx, str.maintenanceservice.exe
mov rcx, r15
call fcn.1400372d0
lea rdx, [rsp + 0x290]
mov rcx, r15
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x14000b79d
lea rcx, [rsp + 0x290]
call fcn.140013c80
test eax, eax
je 0x14000b78f
xorps xmm0, xmm0
movaps xmmword [rsp + 0x700], xmm0
movaps xmmword [rsp + 0x710], xmm0
movaps xmmword [rsp + 0x750], xmm0
movaps xmmword [rsp + 0x740], xmm0
movaps xmmword [rsp + 0x730], xmm0
movaps xmmword [rsp + 0x720], xmm0
xor r12d, r12d
mov qword [rsp + 0x760], r12
mov dword [rsp + 0x700], 0x68
lea rax, [0x140044194]
mov qword [rsp + 0x710], rax
lea r13, [rsp + 0x80]
mov qword [r13 + 0x10], r12
movaps xmmword [r13], xmm0
lea r15, [rsp + 0x910]
movaps xmmword [r15 + 0x70], xmm0
movaps xmmword [r15 + 0x60], xmm0
movaps xmmword [r15 + 0x50], xmm0
movaps xmmword [r15 + 0x40], xmm0
movaps xmmword [r15 + 0x30], xmm0
movaps xmmword [r15 + 0x20], xmm0
movaps xmmword [r15 + 0x10], xmm0
movaps xmmword [r15], xmm0
lea rdx, str.dummyparam.exe_upgrade
mov r8d, 0x3f
mov rcx, r15
call fcn.1400153dc
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
lea rcx, [rsp + 0x290]
mov rdx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14000b79d
mov rcx, qword [rsp + 0x80]
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rsi
mov rcx, qword [rsp + 0x88]
call rsi
jmp 0x14000b79d
mov dword [rsp + 0xd30], 4
mov qword [rsp + 0x28], r14
lea rax, [rsp + 0x6d0]
mov qword [rsp + 0x20], rax
lea rdx, str.PromptOnSecureDesktop
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
jne 0x14000a58b
mov eax, dword [rsp + 0x80]
or eax, dword [rsp + 0x6d0]
setne bl
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c573
test bl, bl
lea rax, [0x140041271]
cmove r15, rax
lea rdx, str.After_checking_IsUnpromptedElevation__useService_s
mov r8, r15
call fcn.140013720
test bl, bl
je 0x14000aad3
lea rcx, [rsp + 0x290]
call fcn.140001270
test eax, eax
je 0x14000a75c
lea rax, [rsp + 0xd30]
mov qword [rax], 0
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x290]
mov rcx, 0xffffffff80000002
xor r8d, r8d
mov r9d, 0x20119
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000a5e4
mov rcx, qword [rsp + 0xd30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x9d], 0
xor esi, esi
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140017010
mov rcx, rbx
call fcn.140013340
test eax, eax
je 0x14000a65a
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140017010
lea rcx, [0x140043f94]
mov rdx, rbx
call fcn.140013440
test eax, eax
jne 0x14000b24d
xor esi, esi
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x3a
call fcn.140001000
mov rcx, rbx
call fcn.14000c800
lea r12d, [r13 + 2]
lea rcx, [r12*8]
call fcn.1400151d4
mov r15, rax
lea rax, str.MozillaMaintenance
mov qword [r15], rax
lea rax, str.software_update
mov qword [r15 + 8], rax
lea rcx, [r15 + 0x10]
mov r8d, r13d
shl r8, 3
mov rdx, rdi
call fcn.140027ef0
mov ecx, 5
call fcn.140013510
cmp eax, 1
mov qword [rsp + 0x50], r13
mov dword [rsp + 0x68], esi
jne 0x14000a78d
xor ecx, ecx
xor edx, edx
mov r8d, 5
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov ebp, 0x4269
test rax, rax
je 0x14000a7b9
lea rdx, str.MozillaMaintenance
mov qword [rsp + 0x70], rax
mov rcx, rax
mov r8d, 0x10
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
test rax, rax
je 0x14000a797
mov r14, rax
mov ebx, 0xffffff9c
mov rsi, qword [sym.imp.ADVAPI32.dll_StartServiceW]
mov r13, qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r14
mov edx, r12d
mov r8, r15
call rsi
test eax, eax
jne 0x14000a7a4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov ecx, 0x64
call r13
add ebx, 0x64
cmp ebx, 0x1324
jb 0x14000a730
jmp 0x14000a7a6
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c2d1
lea rdx, str.Cant_get_registry_certificate_location._useServicefalse
jmp 0x14000aace
mov ebp, eax
add ebp, 0x4e20
jmp 0x14000a7b9
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x14000a7b9
xor ebp, ebp
mov rsi, qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, r14
call rsi
mov rcx, qword [rsp + 0x70]
call rsi
mov rcx, r15
call fcn.1400153d4
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov ecx, dword [rcx + 4]
test ebp, ebp
je 0x14000a7f8
cmp eax, ecx
jg 0x14000c2b9
lea r14, str.Launching_service_failed._useServicefalse
jmp 0x14000aac6
cmp eax, ecx
jg 0x14000c312
lea rdx, str.Launched_service_successfully
call fcn.140013720
xor ebp, ebp
cmp byte [0x14004e408], 0
jne 0x14000a82b
cmp byte [0x14004ec4b], 0
jne 0x14000a82b
call fcn.140002e20
test eax, eax
sete bpl
mov ecx, 5
call fcn.140013510
cmp eax, 1
je 0x14000a8c0
lea rax, [0x14000cce0]
lea rbx, [rsp + 0x290]
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], 0
lea rax, [rsp + 0xd30]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
lea r8, [0x14000cd00]
xor ecx, ecx
xor edx, edx
mov r9, rbx
call fcn.14001b9e4
mov qword [rbx], rax
test rax, rax
sete cl
xor bpl, 1
or bpl, cl
jne 0x14000a8a4
mov cl, 1
xor edx, edx
call fcn.140002ee0
mov rax, qword [rsp + 0x290]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 1
call fcn.140013510
mov ecx, dword [0x14004fe88]
mov edx, dword [0x14004cde8]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
cmp eax, 1
jne 0x14000aab7
cmp ecx, edx
jg 0x14000c3a0
lea rdx, str.Service_stop_detected.
call fcn.140013720
mov byte [0x14004ea39], 1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x6e0], xmm0
movaps xmmword [rsp + 0x6d0], xmm0
mov qword [rsp + 0x6ed], 0
cmp byte [rsp + 0x68], 0
je 0x14000a98f
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140017010
mov rcx, rbx
call fcn.140013340
test eax, eax
je 0x14000a986
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140017010
lea rcx, [0x140043f94]
mov rdx, rbx
call fcn.140013440
test eax, eax
jne 0x14000b3bd
cmp byte [0x14004ea39], 1
jne 0x14000a99c
cmp byte [0x14004e408], 0
je 0x14000b16c
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c42e
lea rdx, str.Not_showing_a_UAC_prompt.
call fcn.140013720
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c46f
lea rdx, [0x140040cb1]
lea r8, str.true
call fcn.140013720
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c4b0
lea rdx, str.noServiceFallback_s
lea r8, [0x140041271]
call fcn.140013720
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c4f1
lea rdx, str.updateLockFileHandle_sINVALID_HANDLE_VALUE
lea r8, [0x1400428ca]
call fcn.140013720
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c532
lea rdx, str.forceServiceFallback_s
lea r8, [0x140041271]
call fcn.140013720
mov r13, qword [rsp + 0x50]
jmp 0x14000af8e
cmp ecx, edx
jg 0x14000c3e1
lea r14, str.Service_didnt_stop_after_10_minutes._useServicefalse
mov r13, qword [rsp + 0x50]
mov rdx, r14
call fcn.140013720
cmp byte [0x14004e408], 1
jne 0x14000ab41
lea r8, str.failed:__d_n
lea rsi, [rsp + 0x290]
mov edx, 0x20
mov rcx, rsi
mov r9d, 0x2b
call fcn.140001000
mov rcx, rsi
call fcn.14000c800
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bf47
lea rdx, str.Non_critical_update_staging_error__Falling_back_to_non_staged_updates_and_exiting
call fcn.140013720
call fcn.140007a00
jmp 0x14000abcc
cmp byte [0x14004ec4b], 0
je 0x14000abe6
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x69
call fcn.140001000
mov rcx, rbx
call fcn.14000c800
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000bf88
lea rdx, str.Skipping_update_to_avoid_UAC_prompt_from_background_task.
call fcn.140013720
call fcn.140007a00
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
call fcn.140007c30
xor ebx, ebx
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x140008eec
call fcn.1400153d4
jmp 0x140008eec
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c08c
lea rdx, str.Elevating_via_a_UAC_prompt
call fcn.140013720
xorps xmm6, xmm6
movaps xmmword [rsp + 0x6e0], xmm6
movaps xmmword [rsp + 0x6d0], xmm6
mov qword [rsp + 0x6ed], 0
xor esi, esi
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140017010
mov rcx, rbx
call fcn.140013340
test eax, eax
je 0x14000ac8d
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140017010
lea rcx, [0x140043f94]
mov rdx, rbx
call fcn.140013440
test eax, eax
jne 0x14000b0bc
xor esi, esi
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 0x4f
call fcn.140001000
mov rcx, rbx
call fcn.14000c800
xor eax, eax
lea rcx, [rsp + 0x80]
mov qword [rcx + 0x68], rax
movups xmmword [rcx + 0x58], xmm6
movups xmmword [rcx + 0x48], xmm6
movups xmmword [rcx + 0x38], xmm6
movups xmmword [rcx + 0x28], xmm6
movabs rdx, 0x54000000070
mov qword [rcx], rdx
mov qword [rcx + 8], rax
mov rax, qword [rdi]
mov qword [rcx + 0x18], rax
mov rax, qword [rsp + 0x58]
mov qword [rcx + 0x20], rax
lea rax, str.runas
mov qword [rcx + 0x10], rax
mov dword [rcx + 0x30], 1
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x14000af2c
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c10e
lea rdx, str.Elevation_successful._Waiting_for_elevated_updater_to_run.
call fcn.140013720
mov rcx, qword [rsp + 0xe8]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c14f
lea rdx, str.Elevated_updater_has_finished_running.
call fcn.140013720
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x14004ea39], 1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x6b0], xmm0
movaps xmmword [rsp + 0x6a0], xmm0
mov qword [rsp + 0x6bd], 0
test sil, sil
je 0x14000af8e
lea rbx, [rsp + 0xd30]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140017010
mov rcx, rbx
call fcn.140013340
test eax, eax
je 0x14000af8e
lea rbx, [rsp + 0x290]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140017010
lea rcx, [0x140043f94]
mov rdx, rbx
call fcn.140013440
test eax, eax
je 0x14000af8e
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.1400372d0
test eax, eax
je 0x14000af8e
mov rsi, r13
lea rdx, [0x140043fee]
lea rcx, [rsp + 0xd30]
call fcn.140020d64
test rax, rax
je 0x14000b3b5
mov r14, rax
lea rcx, [rsp + 0x6a0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.1400228d4
cmp rax, 1
jne 0x14000b378
mov byte [rsp + 0x6c4], 0
mov rcx, r14
call fcn.1400221e4
test eax, eax
je 0x14000aec9
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c677
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013720
lea rcx, [rsp + 0x6d0]
lea rdx, [rsp + 0x6a0]
mov r8d, 0x25
call fcn.1400237f0
test eax, eax
mov r13, rsi
jne 0x14000af8e
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c6f9
lea rdx, str.The_secure_ID_hasnt_changed_after_launching_the_updater_using_runas
call fcn.140013720
mov byte [0x14004ea39], 0
jmp 0x14000b3b5
mov byte [0x14004ea39], 0
lea r8, str.failed:__d_n
lea rbx, [rsp + 0x290]
mov edx, 0x20
mov rcx, rbx
mov r9d, 9
call fcn.140001000
mov rcx, rbx
call fcn.14000c800
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c212
lea rdx, str.Elevation_canceled.
call fcn.140013720
mov rsi, qword [rsp + 0x60]
cmp byte [0x14004e408], 0
jne 0x14000b04e
lea rdx, [rsp + 0x290]
mov byte [rdx], 0
lea rcx, str.succeeded
xor r8d, r8d
call fcn.14000cd20
mov ecx, dword [0x14004fe88]
mov edx, dword [0x14004cde8]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
test al, al
je 0x14000b037
cmp byte [rsp + 0x290], 0
je 0x14000b037
cmp ecx, edx
jg 0x14000c253
lea rdx, str.Running_LaunchWinPostProcess
call fcn.140013720
call fcn.140006eb0
test al, al
jne 0x14000b04e
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c353
lea r14, str.Failed_to_run_LaunchWinPostProcess
mov rsi, qword [rsp + 0x60]
jmp 0x14000b046
cmp ecx, edx
jg 0x14000c294
lea r14, str.Not_running_LaunchWinPostProcess_because_update_status_is_notsucceeded.
mov rdx, r14
call fcn.140013720
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c04b
lea rdx, str.Update_complete
call fcn.140013720
call fcn.140007a00
xor ebx, ebx
cmp r13d, 7
jl 0x14000abce
mov r9b, byte [0x14004ea38]
add r13d, 0xfffffffa
mov rcx, qword [rdi + 0x28]
add rdi, 0x30
mov edx, r13d
mov r8, rdi
call fcn.140007c30
jmp 0x14000abce
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.1400372d0
test eax, eax
je 0x14000ac8b
lea rdx, [0x140043fee]
lea rcx, [rsp + 0xd30]
call fcn.140020d64
test rax, rax
je 0x14000ac8b
mov r14, rax
lea rcx, [rsp + 0x6d0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.1400228d4
cmp rax, 1
sete sil
jne 0x14000b126
mov byte [rsp + 0x6f4], 0
mov rcx, r14
call fcn.1400221e4
test eax, eax
je 0x14000ac8d
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c5b4
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013720
jmp 0x14000ac8d
xor eax, eax
lea r8, [rsp + 0x290]
mov byte [r8], al
mov byte [r8 + 4], al
lea rcx, [0x1400418d4]
lea rdx, [rsp + 0xd30]
call fcn.14000cd20
test al, al
je 0x14000a99c
cmp byte [rsp + 0xd30], 0
je 0x14000a99c
cmp byte [rsp + 0x294], 0
je 0x14000a99c
mov eax, dword [rsp + 0x290]
lea ecx, [rax - 0x18]
cmp ecx, 0xa
jb 0x14000b1d0
add eax, 0xffffffcf
cmp eax, 9
ja 0x14000a99c
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c5f5
lea rdx, str.Service_specific_failure_detected._useServicefalse
call fcn.140013720
mov r13, qword [rsp + 0x50]
jmp 0x14000aad3
mov rcx, r13
mov rdx, rbp
call fcn.140023f64
test rax, rax
je 0x14000b2fd
mov r12, rax
cmp word [r13 + rax*2 - 2], 0x5c
jne 0x14000b305
mov rcx, r14
mov rdx, r13
mov r8, r12
call fcn.140020b80
test eax, eax
jne 0x14000b36e
mov r12b, 1
jmp 0x14000a32f
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.1400372d0
test eax, eax
je 0x14000a658
lea rdx, [0x140043fee]
lea rcx, [rsp + 0xd30]
call fcn.140020d64
test rax, rax
je 0x14000a658
mov r14, rax
lea rcx, [rsp + 0x80]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.1400228d4
cmp rax, 1
sete sil
jne 0x14000b2b7
mov byte [rsp + 0xa4], 0
mov rcx, r14
call fcn.1400221e4
test eax, eax
je 0x14000a65a
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c636
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013720
jmp 0x14000a65a
xor r12d, r12d
jmp 0x14000a32f
lea rax, [r12 + 1]
mov qword [rsp + 0x68], rax
lea rax, [r12*2 + 4]
add r12, 2
mov rbp, 0xffffffffffffffff
cmovns rbp, rax
mov rcx, rbp
call fcn.1400151d4
mov rbx, rax
mov rcx, rax
xor edx, edx
mov r8, rbp
call fcn.140017010
mov rcx, rbx
mov rdx, r12
mov r9, r13
call fcn.1400138f0
mov rcx, r14
mov rdx, rbx
mov r8, qword [rsp + 0x68]
call fcn.140020b80
mov ebp, eax
mov rcx, rbx
call fcn.1400153d4
test ebp, ebp
je 0x14000b245
mov r12b, 1
xor esi, esi
jmp 0x14000a32f
mov rcx, r14
call fcn.1400221e4
test eax, eax
je 0x14000b3b5
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c6b8
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013720
mov r13, rsi
jmp 0x14000af8e
lea rcx, [rsp + 0xd30]
lea rdx, [rsp + 0x290]
call fcn.1400372d0
test eax, eax
je 0x14000a986
lea rdx, [0x140043fee]
lea rcx, [rsp + 0xd30]
call fcn.140020d64
test rax, rax
je 0x14000a986
mov r14, rax
lea rcx, [rsp + 0x6d0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.1400228d4
cmp rax, 1
jne 0x14000b7aa
mov byte [rsp + 0x6f4], 0
mov rcx, r14
call fcn.1400221e4
test eax, eax
je 0x14000b464
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c73a
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013720
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0x6d0]
mov r8d, 0x25
call fcn.1400237f0
test eax, eax
jne 0x14000a986
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c7bc
lea rdx, str.The_secure_ID_hasnt_changed_after_launching_the_updater_using_the_service
call fcn.140013720
mov byte [0x14004ea39], 0
jmp 0x14000a99c
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008585
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140008585
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400085fd
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x1400085fd
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000864a
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000864a
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008689
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140008689
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400086c8
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x1400086c8
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008703
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140008703
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008789
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140008789
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008801
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140008801
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008839
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140008839
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008871
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140008871
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140007fd8
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140007fd8
lea rcx, [rsp + 0x290]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov r13, rbp
mov r12, qword [rsp + 0x58]
jmp 0x140009cd8
mov rcx, r14
call fcn.1400221e4
test eax, eax
je 0x14000a986
mov eax, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000c77b
lea rdx, str.File_close_did_not_execute_successfully
call fcn.140013720
jmp 0x14000a986
lea rcx, [0x14004fe88]
call fcn.1400155a0
lea r14, str.Performing_a_staged_update
jmp 0x14000b859
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008a5c
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140008a5c
lea rcx, [0x14004fe88]
call fcn.1400155a0
lea r14, str.Performing_a_replace_request
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400087d4
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x1400087d4
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000895e
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000895e
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008c8d
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140008c8d
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008c12
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140008c12
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008cf6
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140008cf6
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009abd
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009abd
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140008d95
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140008d95
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400089c9
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x1400089c9
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009af4
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009af4
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009297
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009297
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000993f
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000993f
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400092c6
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x1400092c6
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000970d
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000970d
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009526
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009526
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009b39
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009b39
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009cea
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009cea
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x1400096c9
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x1400096c9
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009970
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009970
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009105
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009105
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009b73
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009b73
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009665
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009665
lea rcx, [0x14004fe88]
call fcn.1400155a0
lea rbx, str.NS_main:_directory_will_be_removed_on_OS_reboot:__S
jmp 0x14000be4f
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009bb1
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009bb1
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000909f
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000909f
lea rcx, [0x14004fe88]
call fcn.1400155a0
lea rbx, str.NS_main:_failed_to_schedule_OS_reboot_removal_of_directory:__S
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009a89
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009a89
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009d7e
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009d7e
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009e9f
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009e9f
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a08f
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000a08f
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000ab2b
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000ab2b
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000ab9d
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000ab9d
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a136
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000a136
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009f2e
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009f2e
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b07c
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000b07c
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000ac0b
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000ac0b
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009e31
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009e31
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000ad3b
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000ad3b
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000ad7f
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000ad7f
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x140009fc3
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x140009fc3
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a039
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000a039
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000af82
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000af82
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000afef
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000afef
lea rcx, [0x14004fe88]
call fcn.1400155a0
lea r14, str.Not_running_LaunchWinPostProcess_because_update_status_is_notsucceeded.
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b046
jmp 0x14000c378
lea rcx, [0x14004fe88]
call fcn.1400155a0
lea r14, str.Launching_service_failed._useServicefalse
jmp 0x14000c3f4
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a781
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000a781
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a800
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000a800
lea rcx, [0x14004fe88]
call fcn.1400155a0
lea r14, str.Failed_to_run_LaunchWinPostProcess
cmp dword [0x14004fe88], 0xffffffff
mov rsi, qword [rsp + 0x60]
jne 0x14000b046
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000b046
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a8fa
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000a8fa
lea rcx, [0x14004fe88]
call fcn.1400155a0
lea r14, str.Service_didnt_stop_after_10_minutes._useServicefalse
cmp dword [0x14004fe88], 0xffffffff
mov r13, qword [rsp + 0x50]
jne 0x14000aacb
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000aacb
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a9c1
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000a9c1
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a9f2
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000a9f2
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000aa2a
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000aa2a
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000aa62
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000aa62
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000aa9a
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000aa9a
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000a567
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000a567
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b15b
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000b15b
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b1f5
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000b1f5
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b2ec
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000b2ec
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000aebd
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000aebd
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b3a9
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000b3a9
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000af14
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000af14
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b458
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000b458
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b7df
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000b7df
lea rcx, [0x14004fe88]
call fcn.1400155a0
cmp dword [0x14004fe88], 0xffffffff
jne 0x14000b4ac
mov qword [0x14004fc78], 0
lea rcx, [0x140003a70]
call fcn.140015738
lea rcx, [0x14004fe88]
call fcn.140015608
jmp 0x14000b4ac