Function at 0x140016a00
Capabilities:
Get installed programs

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x890
mov qword [r11 - 0x730], 0xfffffffffffffffe
mov qword [r11 + 0x18], rbx
mov qword [r11 + 0x20], rsi
mov rax, qword [0x1404680d8]
xor rax, rsp
mov qword [rsp + 0x880], rax
mov rbx, rdx
mov qword [rsp + 0x2a0], rdx
mov r13d, ecx
mov dword [rsp + 0x64], ecx
mov dword [rsp + 0x360], ecx
mov qword [rsp + 0x2f8], rdx
xor r15d, r15d
mov dword [r11 - 0x5f4], r15d
lea rax, [r11 - 0x450]
mov qword [r11 - 0x390], rax
lea rcx, [r11 - 0x450]
call fcn.14000c280
nop
lea rcx, [rsp + 0x468]
call fcn.14000c3b0
nop
mov eax, r15d
mov dword [rsp + 0x5c], eax
mov dword [rsp + 0x280], r15d
mov byte [rsp + 0x5b], 1
mov dword [rsp + 0x270], r15d
mov dword [rsp + 0x68], r15d
mov byte [rsp + 0x52], al
mov byte [rsp + 0x5a], al
mov byte [rsp + 0x54], al
mov byte [rsp + 0x58], 1
mov byte [rsp + 0x57], 1
xor dil, dil
mov byte [rsp + 0x55], dil
mov r12d, r15d
mov dword [rsp + 0x60], r15d
mov byte [rsp + 0x50], al
lea rax, [rsp + 0x368]
mov qword [rsp + 0x278], rax
lea rcx, [rsp + 0x368]
call fcn.14000c280
nop
lea rcx, [rsp + 0x368]
call fcn.14000c3b0
nop
lea rax, [rsp + 0x318]
mov qword [rsp + 0x278], rax
lea rcx, [rsp + 0x318]
call fcn.14000c280
nop
lea rcx, [rsp + 0x318]
call fcn.14000c3b0
nop
lea rax, [rsp + 0x428]
mov qword [rsp + 0x278], rax
lea rcx, [rsp + 0x428]
call fcn.14000c280
nop
lea rcx, [rsp + 0x428]
call fcn.14000c3b0
nop
lea rax, [rsp + 0x3c8]
mov qword [rsp + 0x278], rax
lea rcx, [rsp + 0x3c8]
call fcn.14000c280
nop
lea rcx, [rsp + 0x3c8]
call fcn.14000c3b0
nop
lea rax, [rsp + 0x3e8]
mov qword [rsp + 0x278], rax
lea rcx, [rsp + 0x3e8]
call fcn.14000c280
nop
lea rcx, [rsp + 0x3e8]
call fcn.14000c3b0
nop
lea rax, [rsp + 0x448]
mov qword [rsp + 0x278], rax
lea rcx, [rsp + 0x448]
call fcn.14000c280
nop
lea rcx, [rsp + 0x448]
call fcn.14000c3b0
nop
lea rax, [rsp + 0x408]
mov qword [rsp + 0x278], rax
lea rcx, [rsp + 0x408]
call fcn.14000c280
nop
lea rcx, [rsp + 0x408]
call fcn.14000bc60
nop
xor sil, sil
mov byte [rsp + 0x53], sil
mov byte [rsp + 0x298], sil
mov byte [rsp + 0x59], sil
mov byte [rsp + 0x56], sil
xor al, al
mov byte [rsp + 0x51], al
mov byte [rsp + 0x285], al
mov byte [rsp + 0x2c0], al
xor r9d, r9d
lea r8, [0x1400166b0]
lea edx, [r15 + 3]
lea ecx, [rdx - 2]
call fcn.140013de0
mov rdx, rbx
mov ecx, r13d
call fcn.140013eb0
test al, al
je 0x140016d64
mov rdx, rbx
mov ecx, r13d
call fcn.140014030
mov ebx, eax
lea rcx, [rsp + 0x408]
call fcn.14000bc00
nop
lea rax, [rsp + 0x408]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x448]
call fcn.14000c340
nop
lea rax, [rsp + 0x448]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x3e8]
call fcn.14000c340
nop
lea rax, [rsp + 0x3e8]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x3c8]
call fcn.14000c340
nop
lea rax, [rsp + 0x3c8]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x428]
call fcn.14000c340
nop
lea rax, [rsp + 0x428]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x318]
call fcn.14000c340
nop
lea rax, [rsp + 0x318]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x368]
call fcn.14000c340
nop
lea rax, [rsp + 0x368]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x468]
call fcn.14000c340
nop
lea rax, [rsp + 0x468]
mov qword [rsp + 0x2f8], rax
jmp 0x14001ae74
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
call fcn.14029109c
lea rcx, [rsp + 0x388]
call fcn.140082e60
nop
cmp r13d, 3
jle 0x140016dad
mov rdx, qword [rbx + 0x18]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x140016d90
lea rcx, [rsp + 0x368]
call fcn.14000d3a0
jmp 0x140016ee6
lea rdx, str.SystemCurrentControlSetServices_
lea rcx, [rsp + 0x4e8]
call fcn.14000d360
nop
mov r8d, sendto
lea rdx, str.MBAMUpdaterService
lea rcx, [rsp + 0x4e8]
call fcn.14000d710
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, str.Parameters
lea rcx, [rsp + 0x4e8]
call fcn.14000d710
lea rcx, [rsp + 0x4e8]
call fcn.14000d320
mov rdx, rax
lea rax, [rsp + 0x278]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140016ec8
lea rdx, str.DataDirectory
lea rcx, [rsp + 0x508]
call fcn.14000d360
nop
lea r9, [rsp + 0x368]
lea r8, [rsp + 0x508]
mov rdx, qword [rsp + 0x278]
lea rcx, [rsp + 0x4c8]
call fcn.1400628c0
nop
mov rdx, rax
lea rcx, [rsp + 0x368]
call fcn.140025640
nop
lea rcx, [rsp + 0x4c8]
call fcn.14000c340
nop
lea rax, [rsp + 0x4c8]
mov qword [rsp + 0x2c8], rax
lea rcx, [rsp + 0x508]
call fcn.14000c340
nop
lea rax, [rsp + 0x508]
mov qword [rsp + 0x2c8], rax
mov rcx, qword [rsp + 0x278]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rsp + 0x4e8]
call fcn.14000c340
nop
lea rax, [rsp + 0x4e8]
mov qword [rsp + 0x2c8], rax
lea rdx, [rsp + 0x368]
lea rcx, [rsp + 0x284]
call fcn.140016160
nop
lea rdx, str.version.dat
lea rcx, [rsp + 0x508]
call fcn.14000d360
nop
lea r8, [rsp + 0x508]
lea rdx, [rsp + 0x388]
lea rcx, [rsp + 0x3a8]
call fcn.140082ed0
nop
lea rcx, [rsp + 0x508]
call fcn.14000c340
nop
lea rax, [rsp + 0x508]
mov qword [rsp + 0x278], rax
lea rdx, [rsp + 0x3a8]
lea rcx, [rsp + 0x488]
call fcn.14001b590
nop
mov rax, qword [0x14047aa00]
movsxd rcx, dword [rax + 4]
lea r14, [0x14047aa00]
mov eax, dword [rcx + r14 + 0x10]
shr eax, 2
test al, 1
je 0x140017115
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3a8]
call fcn.1400927b0
lea rdx, str.Error_opening_log_file
lea rcx, [0x1404782a0]
call fcn.140036d30
mov rcx, rax
call fcn.140036f70
nop
lea rcx, [rsp + 0x488]
call fcn.14000bc00
nop
lea rax, [rsp + 0x488]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x3a8]
call fcn.14000c340
nop
lea rax, [rsp + 0x3a8]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x284]
call fcn.1400165a0
nop
lea rcx, [rsp + 0x388]
call fcn.14000c340
nop
lea rax, [rsp + 0x388]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x408]
call fcn.14000bc00
nop
lea rax, [rsp + 0x408]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x448]
call fcn.14000c340
nop
lea rax, [rsp + 0x448]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x3e8]
call fcn.14000c340
nop
lea rax, [rsp + 0x3e8]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x3c8]
call fcn.14000c340
nop
lea rax, [rsp + 0x3c8]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x428]
call fcn.14000c340
nop
lea rax, [rsp + 0x428]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x318]
call fcn.14000c340
nop
lea rax, [rsp + 0x318]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x368]
call fcn.14000c340
nop
lea rax, [rsp + 0x368]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x468]
call fcn.14000c340
nop
lea rax, [rsp + 0x468]
mov qword [rsp + 0x2f8], rax
mov eax, 8
jmp 0x14001ae76
xor edx, edx
lea rcx, [rsp + 0x4c8]
cmp qword [rsp + 0x498], rdx
jne 0x140017180
call fcn.14007d750
nop
mov rcx, rax
call fcn.14000b860
mov rbx, rax
lea rdx, str._____MBUPDATR_starting____
mov rcx, r14
call fcn.140036d30
mov rcx, rax
mov rdx, rbx
call fcn.140036d30
mov rcx, rax
call fcn.140036f70
nop
lea rcx, [rsp + 0x4c8]
call fcn.14000bc00
nop
lea rax, [rsp + 0x4c8]
mov qword [rsp + 0x278], rax
jmp 0x1400171ff
call fcn.14007d750
nop
mov rcx, rax
call fcn.14000b860
mov rdi, rax
lea rcx, [rsp + 0x488]
call fcn.14000b860
mov rbx, rax
lea rdx, str._____MBUPDATR_starting_to_apply_update____
mov rcx, r14
call fcn.140036d30
mov rcx, rax
mov rdx, rbx
call fcn.140036d30
mov rcx, rax
lea rdx, [0x1403bb2fc]
call fcn.140036d30
mov rcx, rax
mov rdx, rdi
call fcn.140036d30
mov rcx, rax
call fcn.140036f70
nop
lea rcx, [rsp + 0x4c8]
call fcn.14000bc00
nop
lea rax, [rsp + 0x4c8]
mov qword [rsp + 0x278], rax
xor dil, dil
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x278], rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.MBUPDATR_version:
call fcn.140036d30
mov rcx, rax
lea rdx, [0x1403bb340]
call fcn.140036d30
mov rcx, rax
call fcn.140036f70
lea rax, [rsp + 0x4a8]
mov qword [rsp + 0x278], rax
lea rcx, [rsp + 0x4a8]
call fcn.14000c280
nop
lea rcx, [rsp + 0x4a8]
call fcn.14000c3b0
nop
mov rbx, qword [rsp + 0x2a0]
cmp r13d, 1
jle 0x1400172ab
mov rdx, qword [rbx + 8]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x140017293
lea rcx, [rsp + 0x4a8]
call fcn.14000d3a0
lea rdx, str._elam
lea rcx, [rsp + 0x4a8]
call fcn.14003af00
test al, al
jne 0x140018e6c
cmp r13d, 6
jge 0x1400177ce
lea rdx, str.MBAMUpdaterService
lea rcx, [rsp + 0x508]
call fcn.14000d360
nop
lea rcx, [rsp + 0x508]
call fcn.140067060
movzx ebx, al
lea rcx, [rsp + 0x508]
call fcn.14000c340
nop
lea rax, [rsp + 0x508]
mov qword [rsp + 0x2f8], rax
test bl, bl
je 0x1400175fb
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.No_params_provided_but_MBUpdatrService_is_installed._Therefore__attempting_to_run_MBUpdatr_as_a_service_with_params_read_from_registry.
call fcn.140036d30
mov rcx, rax
call fcn.140036f70
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rsp + 0x550]
call fcn.140286140
lea rcx, [rsp + 0x550]
call fcn.140057cc0
nop
lea rcx, [rsp + 0x550]
call fcn.140058420
test al, al
jne 0x1400173f1
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rdx, rbx
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Service_failed_to_launch:
call fcn.140036d30
mov rcx, rax
mov edx, edi
call fcn.1400283a0
mov rcx, rax
lea rdx, [0x1403bb340]
call fcn.140036d30
mov rcx, rax
call fcn.140036f70
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.MBUpdatrService_started.
call fcn.140036d30
mov rcx, rax
lea rdx, [0x1403bb340]
call fcn.140036d30
mov rcx, rax
call fcn.140036f70
nop
lea rax, vtable.MBUpdatrService.0
mov qword [rsp + 0x550], rax
lea rax, [rsp + 0x558]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x558]
call fcn.14000c340
nop
lea rax, [rsp + 0x558]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x4a8]
call fcn.14000c340
nop
lea rax, [rsp + 0x4a8]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x488]
call fcn.14000bc00
nop
lea rax, [rsp + 0x488]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x3a8]
call fcn.14000c340
nop
lea rax, [rsp + 0x3a8]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x284]
call fcn.1400165a0
nop
lea rcx, [rsp + 0x388]
call fcn.14000c340
nop
lea rax, [rsp + 0x388]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x408]
call fcn.14000bc00
nop
lea rax, [rsp + 0x408]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x448]
call fcn.14000c340
nop
lea rax, [rsp + 0x448]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x3e8]
call fcn.14000c340
nop
lea rax, [rsp + 0x3e8]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x3c8]
call fcn.14000c340
nop
lea rax, [rsp + 0x3c8]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x428]
call fcn.14000c340
nop
lea rax, [rsp + 0x428]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x318]
call fcn.14000c340
nop
lea rax, [rsp + 0x318]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x368]
call fcn.14000c340
nop
lea rax, [rsp + 0x368]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x468]
call fcn.14000c340
nop
lea rax, [rsp + 0x468]
mov qword [rsp + 0x2f8], rax
xor eax, eax
jmp 0x14001ae76
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3a8]
call fcn.1400927b0
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.not_enough_params
call fcn.140036d30
mov rcx, rax
call fcn.140036f70
nop
lea rcx, [rsp + 0x4a8]
call fcn.14000c340
nop
lea rax, [rsp + 0x4a8]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x488]
call fcn.14000bc00
nop
lea rax, [rsp + 0x488]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x3a8]
call fcn.14000c340
nop
lea rax, [rsp + 0x3a8]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x284]
call fcn.1400165a0
nop
lea rcx, [rsp + 0x388]
call fcn.14000c340
nop
lea rax, [rsp + 0x388]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x408]
call fcn.14000bc00
nop
lea rax, [rsp + 0x408]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x448]
call fcn.14000c340
nop
lea rax, [rsp + 0x448]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x3e8]
call fcn.14000c340
nop
lea rax, [rsp + 0x3e8]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x3c8]
call fcn.14000c340
nop
lea rax, [rsp + 0x3c8]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x428]
call fcn.14000c340
nop
lea rax, [rsp + 0x428]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x318]
call fcn.14000c340
nop
lea rax, [rsp + 0x318]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x368]
call fcn.14000c340
nop
lea rax, [rsp + 0x368]
mov qword [rsp + 0x2f8], rax
lea rcx, [rsp + 0x468]
call fcn.14000c340
nop
lea rax, [rsp + 0x468]
mov qword [rsp + 0x2f8], rax
mov eax, 1
jmp 0x14001ae76
xor al, al
mov byte [rsp + 0x54], al
mov byte [rsp + 0x55], al
mov edi, 5
mov dword [rsp + 0x278], edi
cmp edi, r13d
jge 0x1400184ca
movsxd rdx, edi
mov rdx, qword [rbx + rdx*8]
lea rcx, [rsp + 0x2d8]
call fcn.14000d360
nop
mov r9d, 7
xor r8d, r8d
lea rdx, [rsp + 0x4e8]
lea rcx, [rsp + 0x2d8]
call fcn.140025500
nop
lea rdx, str._db:yes
lea rcx, [rsp + 0x508]
call fcn.14000d360
nop
lea rcx, [rsp + 0x508]
call fcn.14000d320
mov rbx, rax
lea rcx, [rsp + 0x2d8]
call fcn.14000d320
mov rcx, rax
mov rdx, rbx
call fcn.140298e58
mov ebx, eax
lea rcx, [rsp + 0x508]
call fcn.14000c340
nop
lea rax, [rsp + 0x508]
mov qword [rsp + 0x288], rax
test ebx, ebx
je 0x140017950
lea rdx, str._db:no
lea rcx, [rsp + 0x530]
call fcn.14000d360
nop
lea rcx, [rsp + 0x530]
call fcn.14000d320
mov rbx, rax
lea rcx, [rsp + 0x2d8]
call fcn.14000d320
mov rcx, rax
mov rdx, rbx
call fcn.140298e58
mov ebx, eax
lea rcx, [rsp + 0x530]
call fcn.14000c340
nop
lea rax, [rsp + 0x530]
mov qword [rsp + 0x288], rax
test ebx, ebx
je 0x140017950
lea rdx, str._su:yes
lea rcx, [rsp + 0x128]
call fcn.14000d360
nop
lea rcx, [rsp + 0x128]
call fcn.14000d320
mov rbx, rax
lea rcx, [rsp + 0x2d8]
call fcn.14000d320
mov rcx, rax
mov rdx, rbx
call fcn.140298e58
mov ebx, eax
lea rcx, [rsp + 0x128]
call fcn.14000c340
nop
lea rax, [rsp + 0x128]
mov qword [rsp + 0x288], rax
test ebx, ebx
jne 0x14001797a
mov sil, 1
mov byte [rsp + 0x53], sil
mov rbx, qword [rsp + 0x2a0]
lea rcx, [rsp + 0x4e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x2d8]
call fcn.14000c300
inc edi
jmp 0x1400177dd
lea rdx, str._su:no
lea rcx, [rsp + 0xe8]
call fcn.14000d360
nop
lea rcx, [rsp + 0xe8]
call fcn.14000d320
mov rbx, rax
lea rcx, [rsp + 0x2d8]
call fcn.14000d320
mov rcx, rax
mov rdx, rbx
call fcn.140298e58
mov ebx, eax
lea rcx, [rsp + 0xe8]
call fcn.14000c340
nop
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x288], rax
test ebx, ebx
jne 0x1400179e3
xor sil, sil
jmp 0x14001794b
lea rdx, str._forcesu
lea rcx, [rsp + 0x1d0]
call fcn.14000d360
nop
lea rcx, [rsp + 0x1d0]
call fcn.14000d320
mov rbx, rax
lea rcx, [rsp + 0x2d8]
call fcn.14000d320
mov rcx, rax
mov rdx, rbx
call fcn.140298e58
mov ebx, eax
lea rcx, [rsp + 0x1d0]
call fcn.14000c340
nop
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x288], rax
test ebx, ebx
jne 0x140017a54
mov sil, 1
mov byte [rsp + 0x298], sil
jmp 0x14001794b
lea rdx, str._db:
lea rcx, [rsp + 0x1b0]
call fcn.14000d360
nop
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x2d8]
call fcn.14007f470
movzx ebx, al
lea rcx, [rsp + 0x1b0]
call fcn.14000c340
nop
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x288], rax
test bl, bl
je 0x140017e2d
xor sil, sil
mov byte [rsp + 0x53], sil
lea rdx, str._db:dbupdatev1
lea rcx, [rsp + 0x190]
call fcn.14000d360
nop
lea rcx, [rsp + 0x190]
call fcn.14000d320
mov rbx, rax
lea rcx, [rsp + 0x2d8]
call fcn.14000d320
mov rcx, rax
mov rdx, rbx
call fcn.140298e58
mov ebx, eax
lea rcx, [rsp + 0x190]
call fcn.14000c340
nop
lea rax, [rsp + 0x190]
mov qword [rsp + 0x288], rax
test ebx, ebx
jne 0x140017b20
mov r12d, 1
mov dword [rsp + 0x60], r12d
jmp 0x140017950
lea rdx, str._db:dbupdatev4
lea rcx, [rsp + 0x168]
call fcn.14000d360
nop
lea rcx, [rsp + 0x168]
call fcn.14000d320
mov rbx, rax
lea rcx, [rsp + 0x2d8]
call fcn.14000d320
mov rcx, rax
mov rdx, rbx
call fcn.140298e58
mov ebx, eax
lea rcx, [rsp + 0x168]
call fcn.14000c340
nop
lea rax, [rsp + 0x168]
mov qword [rsp + 0x288], rax
test ebx, ebx
jne 0x140017b91
mov r12d, 2
mov dword [rsp + 0x60], r12d
jmp 0x140017950
lea rdx, str._db:dbupdate
lea rcx, [rsp + 0x148]
call fcn.14000d360
nop
lea rcx, [rsp + 0x148]
call fcn.14000d320
mov rbx, rax
lea rcx, [rsp + 0x2d8]
call fcn.14000d320
mov rcx, rax
mov rdx, rbx
call fcn.140298e58
mov ebx, eax
lea rcx, [rsp + 0x148]
call fcn.14000c340
nop
lea rax, [rsp + 0x148]
mov qword [rsp + 0x288], rax
test ebx, ebx
jne 0x140017c02
mov r12d, 3
mov dword [rsp + 0x60], r12d
jmp 0x140017950
lea rdx, [rsp + 0x2d8]
lea rcx, [rsp + 0x4c8]
call fcn.14007ed70
mov rsi, rax
lea rdx, str.Unexpected_param:
lea rcx, [0x1404783c0]
call fcn.140036d30
mov rdi, rax
mov rbx, qword [rsi + 0x10]
mov rcx, rsi
call fcn.14000b860
mov rdx, rax
mov r8, rbx
mov rcx, rdi
call fcn.1400421f0
mov rcx, rax
call fcn.140036f70
nop
lea rcx, [rsp + 0x4c8]
call fcn.14000bc00
nop
lea rax, [rsp + 0x4c8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x4e8]
call fcn.14000c340
nop
lea rax, [rsp + 0x4e8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2d8]
call fcn.14000c340
nop
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x4a8]
call fcn.14000c340
nop
lea rax, [rsp + 0x4a8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x488]
call fcn.14000bc00
nop
lea rax, [rsp + 0x488]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x3a8]
call fcn.14000c340
nop
lea rax, [rsp + 0x3a8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x284]
call fcn.1400165a0
nop
lea rcx, [rsp + 0x388]
call fcn.14000c340
nop
lea rax, [rsp + 0x388]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x408]
call fcn.14000bc00
nop
lea rax, [rsp + 0x408]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x448]
call fcn.14000c340
nop
lea rax, [rsp + 0x448]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x3e8]
call fcn.14000c340
nop
lea rax, [rsp + 0x3e8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x3c8]
call fcn.14000c340
nop
lea rax, [rsp + 0x3c8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x428]
call fcn.14000c340
nop
lea rax, [rsp + 0x428]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x318]
call fcn.14000c340
nop
lea rax, [rsp + 0x318]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x368]
call fcn.14000c340
nop
lea rax, [rsp + 0x368]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x468]
call fcn.14000c340
nop
lea rax, [rsp + 0x468]
mov qword [rsp + 0x288], rax
mov eax, 0xa
jmp 0x14001ae76
lea rdx, str._ui:yes
lea rcx, [rsp + 0x108]
call fcn.14000d360
nop
lea rcx, [rsp + 0x108]
call fcn.14000d320
mov rbx, rax
lea rcx, [rsp + 0x2d8]
call fcn.14000d320
mov rcx, rax
mov rdx, rbx
call fcn.140298e58
mov ebx, eax
lea rcx, [rsp + 0x108]
call fcn.14000c340
nop
lea rax, [rsp + 0x108]
mov qword [rsp + 0x288], rax
test ebx, ebx
jne 0x140017ea8
mov r13b, 1
mov byte [rsp + 0x51], r13b
mov byte [rsp + 0x285], r13b
mov r13d, dword [rsp + 0x64]
jmp 0x140017950
lea rdx, str._ui:no
lea rcx, [rsp + 0x640]
call fcn.14000d360
nop
lea rcx, [rsp + 0x640]
call fcn.14000d320
mov rbx, rax
lea rcx, [rsp + 0x2d8]
call fcn.14000d320
mov rcx, rax
mov rdx, rbx
call fcn.140298e58
mov ebx, eax
lea rcx, [rsp + 0x640]
call fcn.14000c340
nop
lea rax, [rsp + 0x640]
mov qword [rsp + 0x288], rax
test ebx, ebx
jne 0x140017f1b
xor al, al
mov byte [rsp + 0x51], al
mov byte [rsp + 0x285], al
jmp 0x140017950
lea rdx, str._restartui
lea rcx, [rsp + 0x4c8]
call fcn.14000d360
nop
lea rcx, [rsp + 0x4c8]
call fcn.14000d320
mov rbx, rax
lea rcx, [rsp + 0x2d8]
call fcn.14000d320
mov rcx, rax
mov rdx, rbx
call fcn.140298e58
mov ebx, eax
lea rcx, [rsp + 0x4c8]
call fcn.14000c340
nop
lea rax, [rsp + 0x4c8]
mov qword [rsp + 0x288], rax
test ebx, ebx
jne 0x140017f86
mov byte [rsp + 0x52], 1
jmp 0x140017950
lea rdx, str._uises:
lea rcx, [rsp + 0x210]
call fcn.14000d360
nop
lea rcx, [rsp + 0x210]
call fcn.14000d320
mov rbx, rax
lea rcx, [rsp + 0x4e8]
call fcn.14000d320
mov rcx, rax
mov rdx, rbx
call fcn.140298e58
mov ebx, eax
lea rcx, [rsp + 0x210]
call fcn.14000c300
test ebx, ebx
jne 0x1400180e4
xor al, al
mov byte [rsp + 0x5b], al
mov r9, 0xffffffffffffffff
lea r8d, [rbx + 7]
lea rdx, [rsp + 0x550]
lea rcx, [rsp + 0x2d8]
call fcn.140025500
nop
mov rcx, rax
call fcn.14000d320
mov rcx, rax
xor edx, edx
lea r8d, [rbx + 0xa]
call fcn.140290208
mov ebx, eax
mov dword [rsp + 0x68], eax
lea rcx, [rsp + 0x550]
call fcn.14000c300
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.parsed_session_id:
call fcn.140036d30
mov rcx, rax
mov edx, ebx
call fcn.1400283a0
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
mov dword [rsp + 0x270], ebx
jmp 0x140017950
lea rdx, str._enableTestMode
lea rcx, [rsp + 0x1f0]
call fcn.14000d360
nop
lea rdx, [rsp + 0x1f0]
lea rcx, [rsp + 0x2d8]
call fcn.14007f450
mov ebx, eax
lea rcx, [rsp + 0x1f0]
call fcn.14000c300
test ebx, ebx
jne 0x140018152
lea rdx, str.Test_mode_enabled.
lea rcx, [0x1404783c0]
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
mov al, 1
mov byte [rsp + 0x54], al
mov byte [rsp + 0x55], al
jmp 0x140017950
lea rdx, str._prepUpdFail:no
lea rcx, [rsp + 0x230]
call fcn.14000d360
nop
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x2d8]
call fcn.14007f450
mov ebx, eax
lea rcx, [rsp + 0x230]
call fcn.14000c300
test ebx, ebx
jne 0x1400181bb
lea rdx, str.parsed_prepUpdFail:no
lea rcx, [0x1404783c0]
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
mov byte [rsp + 0x58], 1
jmp 0x140017950
lea rdx, str._prepUpdFail:yes
lea rcx, [rsp + 0x250]
call fcn.14000d360
nop
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x2d8]
call fcn.14007f450
mov ebx, eax
lea rcx, [rsp + 0x250]
call fcn.14000c300
test ebx, ebx
jne 0x140018223
lea rdx, str.parsed_prepUpdFail:yes
lea rcx, [0x1404783c0]
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
mov byte [rsp + 0x58], bl
jmp 0x140017950
lea rdx, str._finUpdFail:no
lea rcx, [rsp + 0xc8]
call fcn.14000d360
nop
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x2d8]
call fcn.14007f450
mov ebx, eax
lea rcx, [rsp + 0xc8]
call fcn.14000c300
test ebx, ebx
jne 0x14001828c
lea rdx, str.parsed_finUpdFail:no
lea rcx, [0x1404783c0]
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
mov byte [rsp + 0x57], 0
jmp 0x140017950
lea rdx, str._finUpdFail:yes
lea rcx, [rsp + 0xa8]
call fcn.14000d360
nop
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x2d8]
call fcn.14007f450
mov ebx, eax
lea rcx, [rsp + 0xa8]
call fcn.14000c300
test ebx, ebx
jne 0x1400182d2
lea rdx, str.parsed_finUpdFail:yes
jmp 0x140018267
lea rdx, str._allowReboot
lea rcx, [rsp + 0x600]
call fcn.14000d360
nop
lea rdx, [rsp + 0x600]
lea rcx, [rsp + 0x2d8]
call fcn.14007f450
mov ebx, eax
lea rcx, [rsp + 0x600]
call fcn.14000c300
test ebx, ebx
jne 0x14001833b
lea rdx, str.parsed_allowReboot
lea rcx, [0x1404783c0]
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
mov byte [rsp + 0x59], 1
jmp 0x140017950
lea rdx, str._testServiceStartFailure
lea rcx, [rsp + 0x70]
call fcn.14000d360
nop
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x2d8]
call fcn.14007f450
mov ebx, eax
lea rcx, [rsp + 0x70]
call fcn.14000c300
test ebx, ebx
jne 0x14001839b
lea rdx, str.parsed_testServiceStartFailure
lea rcx, [0x1404783c0]
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
mov byte [rsp + 0x56], 1
jmp 0x140017950
lea rdx, [rsp + 0x2d8]
lea rcx, [rsp + 0x550]
call fcn.14007ed70
mov rbx, rax
lea rdx, str.Unexpected_param:
lea rcx, [0x1404783c0]
call fcn.140036d30
mov rcx, rax
mov rdx, rbx
call fcn.140036fb0
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
nop
lea rcx, [rsp + 0x550]
call fcn.14000b890
nop
lea rcx, [rsp + 0x4e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x2d8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x4a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x488]
call fcn.14000b890
nop
lea rcx, [rsp + 0x3a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x284]
call fcn.1400165a0
nop
lea rcx, [rsp + 0x388]
call fcn.14000c300
nop
lea rcx, [rsp + 0x408]
call fcn.14000b890
nop
lea rcx, [rsp + 0x448]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3c8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x428]
call fcn.14000c300
nop
lea rcx, [rsp + 0x318]
call fcn.14000c300
nop
lea rcx, [rsp + 0x368]
call fcn.14000c300
nop
lea rcx, [rsp + 0x468]
call fcn.14000c300
mov eax, 0xa
jmp 0x14001ae76
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x318]
call fcn.140025620
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x550]
call fcn.14007ed70
mov rdi, rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
mov rbx, rax
mov rcx, rdi
call fcn.14000b860
mov rdi, rax
mov rdx, rbx
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.programPath:
call fcn.140036d30
mov rcx, rax
mov rdx, rdi
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
nop
lea rcx, [rsp + 0x550]
call fcn.14000b890
lea rcx, [rsp + 0x318]
call fcn.140092520
test al, al
jne 0x14001868e
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3a8]
call fcn.1400927b0
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Invalid_path__1_
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
nop
lea rcx, [rsp + 0x4a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x488]
call fcn.14000b890
nop
lea rcx, [rsp + 0x3a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x284]
call fcn.1400165a0
nop
lea rcx, [rsp + 0x388]
call fcn.14000c300
nop
lea rcx, [rsp + 0x408]
call fcn.14000b890
nop
lea rcx, [rsp + 0x448]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3c8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x428]
call fcn.14000c300
nop
lea rcx, [rsp + 0x318]
call fcn.14000c300
nop
lea rcx, [rsp + 0x368]
call fcn.14000c300
nop
lea rcx, [rsp + 0x468]
call fcn.14000c300
mov eax, 2
jmp 0x14001ae76
mov rdx, qword [rsp + 0x2a0]
mov rdx, qword [rdx + 0x10]
lea rcx, [rsp + 0x3e8]
call fcn.140025620
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0x3e8]
lea rcx, [rsp + 0x550]
call fcn.14007ed70
mov rdi, rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
mov rbx, rax
mov rcx, rdi
call fcn.14000b860
mov rdi, rax
mov rdx, rbx
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.configPath_:
call fcn.140036d30
mov rcx, rax
mov rdx, rdi
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
nop
lea rcx, [rsp + 0x550]
call fcn.14000b890
lea r8, [rsp + 0x428]
lea r13, [0x140469ab0]
mov rdx, r13
lea rcx, [rsp + 0x318]
call fcn.140020570
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x288], rax
mov rdx, r13
lea rcx, [rsp + 0x550]
call fcn.14007ed70
mov rdi, rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
mov rbx, rax
mov rcx, rdi
call fcn.14000b860
mov rdi, rax
mov rdx, rbx
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.product_code_is:
call fcn.140036d30
mov rcx, rax
mov rdx, rdi
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
nop
lea rcx, [rsp + 0x550]
call fcn.14000b890
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0x428]
lea rcx, [rsp + 0x550]
call fcn.14007ed70
mov rdi, rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
mov rbx, rax
mov rcx, rdi
call fcn.14000b860
mov rdi, rax
mov rdx, rbx
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.program_version:
call fcn.140036d30
mov rcx, rax
mov rdx, rdi
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
nop
lea rcx, [rsp + 0x550]
call fcn.14000b890
lea rdx, [rsp + 0x428]
lea rcx, [0x140469ad0]
call fcn.14007e650
lea rdx, [rsp + 0x408]
lea rcx, [rsp + 0x3e8]
call fcn.140020b40
lea rcx, [rsp + 0x2b0]
test al, al
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x288], rax
je 0x1400188c7
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.current_CU_ver_:
call fcn.140036d30
mov rcx, rax
lea rdx, [rsp + 0x408]
call fcn.140036fb0
jmp 0x1400188e7
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Unable_to_determine_current_CU_version
call fcn.140036d30
lea rdx, [fcn.140036f70]
mov rcx, rax
call fcn.140028720
lea rdx, [rsp + 0x408]
lea rcx, [rsp + 0x340]
call fcn.14007e5c0
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0x368]
lea rcx, [rsp + 0x550]
call fcn.14007ed70
mov rdi, rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
mov rbx, rax
mov rcx, rdi
call fcn.14000b860
mov rdi, rax
mov rdx, rbx
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.dataDirPath:
call fcn.140036d30
mov rcx, rax
mov rdx, rdi
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
nop
lea rcx, [rsp + 0x550]
call fcn.14000b890
lea rcx, [rsp + 0x368]
call fcn.140092520
test al, al
jne 0x140018abe
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3a8]
call fcn.1400927b0
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Invalid_path__3_
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
nop
lea rcx, [rsp + 0x4a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x488]
call fcn.14000b890
nop
lea rcx, [rsp + 0x3a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x284]
call fcn.1400165a0
nop
lea rcx, [rsp + 0x388]
call fcn.14000c300
nop
lea rcx, [rsp + 0x408]
call fcn.14000b890
nop
lea rcx, [rsp + 0x448]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3c8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x428]
call fcn.14000c300
nop
lea rcx, [rsp + 0x318]
call fcn.14000c300
nop
lea rcx, [rsp + 0x368]
call fcn.14000c300
nop
lea rcx, [rsp + 0x468]
call fcn.14000c300
mov eax, 2
jmp 0x14001ae76
test r12d, r12d
je 0x140018b08
movaps xmm0, xmmword [rsp + 0x340]
movdqa xmmword [rsp + 0x2b0], xmm0
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x3e8]
lea r8, [rsp + 0x368]
lea rdx, [rsp + 0x318]
mov ecx, r12d
call fcn.14001b900
mov ebx, eax
jmp 0x14001adbf
call fcn.140016990
movzx edi, al
mov byte [rsp + 0x55], al
call fcn.14000d080
mov rcx, rax
xor edx, edx
call fcn.14007e100
test al, al
jne 0x140018c41
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.SHA_2_KB_patch_is_missing_on_this_system._Not_proceeding_with_the_update.
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3a8]
call fcn.1400927b0
nop
lea rcx, [rsp + 0x4a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x488]
call fcn.14000b890
nop
lea rcx, [rsp + 0x3a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x284]
call fcn.1400165a0
nop
lea rcx, [rsp + 0x388]
call fcn.14000c300
nop
lea rcx, [rsp + 0x408]
call fcn.14000b890
nop
lea rcx, [rsp + 0x448]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3c8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x428]
call fcn.14000c300
nop
lea rcx, [rsp + 0x318]
call fcn.14000c300
nop
lea rcx, [rsp + 0x368]
call fcn.14000c300
nop
lea rcx, [rsp + 0x468]
call fcn.14000c300
xor eax, eax
jmp 0x14001ae76
mov rax, qword [rsp + 0x2a0]
mov rdx, qword [rax + 0x20]
lea rcx, [rsp + 0x448]
call fcn.140025620
lea rdx, [0x1403bb870]
lea rcx, [rsp + 0x70]
call fcn.14000d360
nop
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x550]
call fcn.140082ed0
nop
mov rdx, rax
lea rcx, [rsp + 0x3c8]
call fcn.140025640
nop
lea rcx, [rsp + 0x550]
call fcn.14000c300
nop
lea rcx, [rsp + 0x70]
call fcn.14000c300
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.creating_LKG_directory
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
mov dword [rsp + 0x2c8], r15d
lea rcx, [rsp + 0x3c8]
call fcn.1400924d0
test al, al
jne 0x140018e73
lea r8, [rsp + 0x2c8]
xor edx, edx
lea rcx, [rsp + 0x3c8]
call fcn.140092890
test al, al
jne 0x140018e73
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2b0]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Error:_unable_to_create_LKG_directory___error_code:
call fcn.140036d30
mov rcx, rax
mov edx, dword [rsp + 0x2c8]
call fcn.1400283a0
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
cmp dword [rsp + 0x2c8], 0xb7
je 0x140018e73
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3a8]
call fcn.1400927b0
nop
lea rcx, [rsp + 0x4a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x488]
call fcn.14000b890
nop
lea rcx, [rsp + 0x3a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x284]
call fcn.1400165a0
nop
lea rcx, [rsp + 0x388]
call fcn.14000c300
nop
lea rcx, [rsp + 0x408]
call fcn.14000b890
nop
lea rcx, [rsp + 0x448]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3c8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x428]
call fcn.14000c300
nop
lea rcx, [rsp + 0x318]
call fcn.14000c300
nop
lea rcx, [rsp + 0x368]
call fcn.14000c300
nop
lea rcx, [rsp + 0x468]
call fcn.14000c300
mov eax, 9
jmp 0x14001ae76
lea r13, [0x140469ab0]
lea rdx, str.mbam.exe
lea rcx, [rsp + 0x70]
call fcn.14000d360
nop
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x5c0]
call fcn.140082ed0
nop
lea rcx, [rsp + 0x70]
call fcn.14000c300
lea rax, str.MB3Service
lea rdx, str.MBAMService
test dil, dil
cmovne rdx, rax
lea rcx, [rsp + 0x5e0]
call fcn.14000d360
nop
xor bl, bl
call fcn.1400169c0
test al, al
jne 0x140018ee9
call fcn.140016990
test al, al
jne 0x140018ee9
xor sil, sil
mov byte [rsp + 0x51], sil
call fcn.140016990
test al, al
je 0x140018efa
mov sil, 1
mov byte [rsp + 0x51], 0
lea rdx, [rsp + 0x2c0]
lea rcx, [rsp + 0x388]
call fcn.140020f00
movzx r12d, al
mov byte [rsp + 0x299], al
xor dil, dil
cmp byte [rsp + 0x51], dil
je 0x140018fcd
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x340]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str._ui:yes_specified
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
test r12b, r12b
je 0x140018f83
cmp byte [rsp + 0x2c0], dil
je 0x140018f83
mov dil, 1
jmp 0x140018fcd
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x340]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str._ui:yes_specified_but_no_UI_components_found_in_package
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
xor dil, dil
test sil, sil
je 0x1400190d4
lea rdx, str.MBAMService.exe
lea rcx, [rsp + 0x70]
call fcn.14000d360
nop
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x388]
call fcn.140022c00
movzx esi, al
lea rcx, [rsp + 0x70]
call fcn.14000c300
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x340]
call fcn.14000b590
nop
lea rcx, [0x1403bb948]
lea rbx, [0x1403bb94c]
test sil, sil
cmovne rbx, rcx
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.MBAMService.exe_in_update_pkg_is_newer:
call fcn.140036d30
mov rcx, rax
mov rdx, rbx
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
cmp byte [rsp + 0x298], 0
je 0x1400190cb
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x340]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Forced_SU_Mode.
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
mov bl, 1
jmp 0x14001911b
test sil, sil
jne 0x1400190c7
xor bl, bl
jmp 0x14001911b
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x340]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.SU_not_allowed
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
test dil, dil
je 0x1400191da
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x340]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Doing_UI_package_update
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
mov edx, 0xa0
lea rcx, [rsp + 0x660]
call fcn.14001b190
lea rcx, [rsp + 0x660]
call fcn.14006b660
nop
movzx ebx, byte [rsp + 0x52]
mov byte [rsp + 0x28], bl
lea rax, [rsp + 0x388]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x318]
lea r8, [rsp + 0x368]
mov rdx, r13
lea rcx, [rsp + 0x660]
call fcn.14006b6e0
mov dword [rsp + 0x2c4], eax
lea rcx, [rsp + 0x660]
call fcn.14001b140
jmp 0x14001ad9c
mov edx, 0x178
lea rcx, [rsp + 0x700]
call fcn.140010190
lea rax, [rsp + 0x550]
lea rdx, [0x1400166b0]
lea rcx, [rsp + 0x550]
mov qword [rsp + 0x288], rax
call fcn.14002ff20
test bl, bl
je 0x140019316
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x700]
call fcn.140083720
nop
lea rcx, [rsp + 0x700]
call fcn.1400944a0
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x340]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Doing_SU
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
lea rcx, [rsp + 0x2a0]
call fcn.140067da0
nop
lea rcx, [rsp + 0x2f8]
call fcn.14001b1a0
movzx eax, byte [rsp + 0x56]
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x270]
mov dword [rsp + 0x40], eax
movzx eax, byte [rsp + 0x59]
mov byte [rsp + 0x38], al
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r13
lea rax, [rsp + 0x368]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x3c8]
lea r8, [rsp + 0x318]
lea rdx, [rsp + 0x388]
lea rcx, [rsp + 0x2a0]
call fcn.140067df0
mov dword [rsp + 0x2c4], eax
lea rcx, [rsp + 0x2a0]
call fcn.140067de0
nop
jmp 0x14001ad8f
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x700]
call fcn.140083720
nop
lea rcx, [rsp + 0x700]
call fcn.1400944a0
lea rdx, str.MBAMService.exe
lea rcx, [rsp + 0x70]
call fcn.14000d360
nop
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x4e8]
call fcn.140082ed0
nop
lea rcx, [rsp + 0x70]
call fcn.14000c300
lea rdx, str.MBUpdateDlg.exe
lea rcx, [rsp + 0x600]
call fcn.14000d360
nop
lea r8, [rsp + 0x600]
lea rdx, [rsp + 0x388]
lea rcx, [rsp + 0x530]
call fcn.140082ed0
nop
lea rcx, [rsp + 0x600]
call fcn.14000c300
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x340]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Doing_CU
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2f8]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Connecting_to_MBAM_Service...
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rsp + 0x2c8]
call fcn.14000cc30
movzx eax, byte [rsp + 0x55]
mov byte [rsp + 0x20], al
movzx r9d, byte [rsp + 0x57]
movzx r8d, byte [rsp + 0x58]
movzx edx, byte [rsp + 0x54]
lea rcx, [rsp + 0x2c8]
call fcn.140053d10
nop
lea rdx, [rsp + 0x2c8]
xor ecx, ecx
call fcn.140036fd0
test al, al
je 0x1400195fa
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x340]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Error_connecting_to_service
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3a8]
call fcn.1400927b0
nop
lea rcx, [rsp + 0x2c8]
call fcn.14000b800
nop
lea rcx, [rsp + 0x530]
call fcn.14000c300
nop
lea rcx, [rsp + 0x4e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x700]
call fcn.1400837f0
nop
lea rcx, [rsp + 0x5e0]
call fcn.14000c300
nop
lea rcx, [rsp + 0x5c0]
call fcn.14000c300
nop
lea rcx, [rsp + 0x4a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x488]
call fcn.14000b890
nop
lea rcx, [rsp + 0x3a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x284]
call fcn.1400165a0
nop
lea rcx, [rsp + 0x388]
call fcn.14000c300
nop
lea rcx, [rsp + 0x408]
call fcn.14000b890
nop
lea rcx, [rsp + 0x448]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3c8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x428]
call fcn.14000c300
nop
lea rcx, [rsp + 0x318]
call fcn.14000c300
nop
lea rcx, [rsp + 0x368]
call fcn.14000c300
nop
lea rcx, [rsp + 0x468]
call fcn.14000c300
mov eax, 3
jmp 0x14001ae76
lea rcx, [rsp + 0x2c8]
call fcn.14000d5d0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x58]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x2c8]
call fcn.14000d5d0
mov r10, qword [rax]
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x368]
lea r8, [rsp + 0x318]
lea rdx, [rsp + 0x5e0]
mov rcx, rax
call qword [r10]
mov byte [rsp + 0x285], 1
xor r12b, r12b
call fcn.1400169c0
test al, al
jne 0x14001966f
call fcn.1400169f0
test al, al
je 0x140019749
lea rcx, [rsp + 0x2c8]
call fcn.14000d5d0
mov r9, qword [rax]
xor r8d, r8d
lea rdx, [rsp + 0x285]
mov rcx, rax
call qword [r9 + reloc.OLEAUT32.dll_VariantTimeToSystemTime]
test al, al
jne 0x1400196df
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x340]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Failed_to_disable_SP__continuing_
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
lea rcx, [rsp + 0x2c8]
call fcn.14000d5d0
mov r8, qword [rax]
mov edx, 0x5265c00
mov rcx, rax
call qword [r8 + 0x78]
test al, al
jne 0x140019746
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x340]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Failed_to_set_service_auto_restart_time__continuing_
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
mov r12b, 1
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rsp + 0x2b0]
call fcn.14000cc30
mov qword [rsp + 0x2f8], r15
mov qword [rsp + 0x360], r15
lea rcx, [rsp + 0x340]
call fcn.140036fe0
nop
mov r9, rax
lea r8, [rsp + 0x2f8]
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x2b0]
call fcn.1400370b0
nop
lea rcx, [rsp + 0x340]
call fcn.14000b800
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rax, [rsp + 0x340]
mov qword [rsp + 0x2f8], rax
lea rax, [rsp + 0x550]
mov qword [rsp + 0x360], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x278], rax
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0x2d8]
call fcn.140024e90
mov rsi, rax
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x340]
call fcn.140024e90
mov rdi, rax
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x550]
call fcn.1400256d0
mov rbx, rax
lea rdx, [rsp + 0x388]
lea rcx, [rsp + 0x70]
call fcn.1400256d0
nop
lea rcx, [rsp + 0x2c4]
mov qword [rsp + 0x28], rcx
mov byte [rsp + 0x20], 0
mov r9, rsi
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.140023350
test al, al
jne 0x1400198b7
mov ebx, dword [rsp + 0x2c4]
lea rcx, [rsp + 0x2b0]
call fcn.14000b800
nop
lea rcx, [rsp + 0x2c8]
call fcn.14000b800
nop
lea rcx, [rsp + 0x530]
call fcn.14000c300
nop
lea rcx, [rsp + 0x4e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x700]
call fcn.1400837f0
jmp 0x14001ada3
call fcn.140016990
test al, al
je 0x140019af2
lea rcx, [rsp + 0x340]
call fcn.14000c320
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallBEBF7481_07C5_42F5_941E_2E9F78A76D56_is1
lea rcx, [rsp + 0x640]
call fcn.14000d360
nop
lea rdx, str.UninstallString
lea rcx, [rsp + 0x4c8]
call fcn.14000d360
nop
mov dword [rsp + 0x360], r15d
lea rcx, [rsp + 0x2b0]
call fcn.14000d5d0
mov r10, qword [rax]
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], 3
lea rcx, [rsp + 0x360]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x340]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x4c8]
lea r8, [rsp + 0x640]
mov rdx, 0xffffffff80000002
mov rcx, rax
call qword [r10 + 0x80]
mov ebx, eax
test eax, eax
jne 0x140019a68
xor r8d, r8d
lea rdx, str._uselocalisvc
lea rcx, [rsp + 0x340]
call fcn.140025570
cmp rax, 0xffffffffffffffff
je 0x140019ac9
mov dword [rsp + 0x278], r15d
mov rdx, rax
lea rcx, [rsp + 0x340]
call fcn.1400255e0
lea rcx, [rsp + 0x2b0]
call fcn.14000d5d0
mov r10, qword [rax]
lea rcx, [rsp + 0x278]
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], 1
lea rcx, [rsp + 0x340]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x4c8]
lea r8, [rsp + 0x640]
mov rdx, 0xffffffff80000002
mov rcx, rax
call qword [r10 + 0xe0]
lea rcx, [rsp + 0x2d8]
test al, al
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
je 0x140019a30
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
lea rdx, str.successfully_modified_ARW_uninstall_string
jmp 0x140019ab1
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Error
call fcn.140036d30
mov rcx, rax
mov edx, dword [rsp + 0x278]
call fcn.1400283a0
lea rdx, str._from_RegistryUtils::WriteData._Continuing.
jmp 0x140019ab1
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2d8]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Error
call fcn.140036d30
mov rcx, rax
mov edx, ebx
call fcn.1400283a0
lea rdx, str._from_RegistryUtils::GetValueString._Continuing.
mov rcx, rax
call fcn.140036d30
lea rdx, [fcn.140036f70]
mov rcx, rax
call fcn.140028720
nop
lea rcx, [rsp + 0x4c8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x640]
call fcn.14000c300
nop
lea rcx, [rsp + 0x340]
call fcn.14000c300
xor edx, edx
lea rcx, [rsp + 0x298]
call fcn.14000ed60
mov dword [rsp + 0x528], 0x1d4c0
mov edx, 8
lea rcx, [rsp + 0x2a0]
call fcn.14001b1c0
mov edx, 1
lea rcx, [rsp + 0x2a0]
call fcn.140115e60
nop
mov edx, 0x78
lea rcx, [rsp + 0x660]
call fcn.14001b1d0
lea rax, [rsp + 0x600]
mov qword [rsp + 0x288], rax
lea rax, [rsp + 0x530]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x318]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x4e8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x298]
lea r8, [rsp + 0x528]
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x70]
call fcn.14001b110
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x550], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x560], xmm1
movups xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x570], xmm0
lea rdx, [rsp + 0x550]
lea rcx, [rsp + 0x600]
call fcn.1400371a0
nop
mov rdx, rax
lea rcx, [rsp + 0x660]
call fcn.140090f30
nop
xor edx, edx
lea rcx, [rsp + 0x660]
call fcn.140091010
lea rcx, [rsp + 0x2c8]
call fcn.14000d5d0
mov r10, qword [rax]
lea rcx, str.Starting_Update
mov qword [rsp + 0x20], rcx
mov r9d, 0x391
lea r8, str.wmain
lea rdx, str.d:jenkinsworkspace_a_mbam3_updaterexe_srcmbupdatrmbupdatr.cpp
mov rcx, rax
call qword [r10 + 0x18]
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2d8]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Connected_to_MBAM_Service__preparing_update...
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
lea rcx, [rsp + 0x2c8]
call fcn.14000d5d0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + reloc.OLEAUT32.dll_VariantClear]
mov ebx, eax
lea rcx, [rsp + 0x2a0]
call fcn.14000f130
mov edx, 0x2710
lea rcx, [rsp + 0x660]
call fcn.1400913a0
lea rcx, [rsp + 0x298]
call fcn.14000ed70
test al, al
je 0x140019d8a
lea rcx, [rsp + 0x360]
call fcn.140067da0
nop
lea rcx, [rsp + 0x288]
call fcn.14001b1a0
mov byte [rsp + 0x293], 1
mov byte [rsp + 0x28a], 1
movzx eax, byte [rsp + 0x285]
mov byte [rsp + 0x289], al
movzx eax, byte [rsp + 0x56]
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x270]
mov dword [rsp + 0x40], eax
movzx eax, byte [rsp + 0x59]
mov byte [rsp + 0x38], al
lea rax, [rsp + 0x288]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r13
lea rax, [rsp + 0x368]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x3c8]
lea r8, [rsp + 0x318]
lea rdx, [rsp + 0x388]
lea rcx, [rsp + 0x360]
call fcn.140067df0
mov ebx, eax
lea rcx, [rsp + 0x360]
call fcn.140067de0
nop
lea rcx, [rsp + 0x660]
call fcn.140090f90
nop
lea rcx, [rsp + 0x2a0]
call fcn.140115f20
jmp 0x14001986d
test ebx, ebx
jns 0x140019f95
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3a8]
call fcn.1400927b0
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2d8]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, [0x1403bbd38]
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
lea rcx, [rsp + 0x2c8]
call fcn.14000d5d0
mov r10, qword [rax]
lea rcx, str.The_PrepareUpdate___method_failed.__now_calling_FinishUpdate_
mov qword [rsp + 0x20], rcx
mov r9d, 0x3a8
lea r8, str.wmain
lea rdx, str.d:jenkinsworkspace_a_mbam3_updaterexe_srcmbupdatrmbupdatr.cpp
mov rcx, rax
call qword [r10 + 0x20]
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x340]
call fcn.140024e90
nop
xor r8d, r8d
lea edx, [r8 + 6]
mov rcx, rax
call fcn.14001b1e0
nop
lea rcx, [rsp + 0x660]
call fcn.140090f90
nop
lea rcx, [rsp + 0x2a0]
call fcn.140115f20
nop
lea rcx, [rsp + 0x2b0]
call fcn.14000b800
nop
lea rcx, [rsp + 0x2c8]
call fcn.14000b800
nop
lea rcx, [rsp + 0x530]
call fcn.14000c300
nop
lea rcx, [rsp + 0x4e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x700]
call fcn.1400837f0
nop
lea rcx, [rsp + 0x5e0]
call fcn.14000c300
nop
lea rcx, [rsp + 0x5c0]
call fcn.14000c300
nop
lea rcx, [rsp + 0x4a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x488]
call fcn.14000b890
nop
lea rcx, [rsp + 0x3a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x284]
call fcn.1400165a0
nop
lea rcx, [rsp + 0x388]
call fcn.14000c300
nop
lea rcx, [rsp + 0x408]
call fcn.14000b890
nop
lea rcx, [rsp + 0x448]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3c8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x428]
call fcn.14000c300
nop
lea rcx, [rsp + 0x318]
call fcn.14000c300
nop
lea rcx, [rsp + 0x368]
call fcn.14000c300
nop
lea rcx, [rsp + 0x468]
call fcn.14000c300
mov eax, 6
jmp 0x14001ae76
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2d8]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, [0x1403bbe00]
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
lea rcx, [rsp + 0x2c8]
call fcn.14000d5d0
mov r10, qword [rax]
lea rcx, str.The_PrepareUpdate___method_succeeded.
mov qword [rsp + 0x20], rcx
mov r9d, 0x3b1
lea r8, str.wmain
lea rdx, str.d:jenkinsworkspace_a_mbam3_updaterexe_srcmbupdatrmbupdatr.cpp
mov rcx, rax
call qword [r10 + 0x18]
call fcn.140016990
test al, al
jne 0x14001a246
movzx r8d, byte [rsp + 0x54]
lea rdx, [rsp + 0x368]
lea rcx, [rsp + 0x388]
call fcn.14001d180
test al, al
jne 0x14001a246
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3a8]
call fcn.1400927b0
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2d8]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Error:_CopyDriverFiles_failed.
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
lea rcx, [rsp + 0x2c8]
call fcn.14000d5d0
mov r10, qword [rax]
lea rcx, str.Error:_CopyDriverFiles_failed._See_mbupdatr.log
mov qword [rsp + 0x20], rcx
mov r9d, 0x3bd
lea r8, str.wmain
lea rdx, str.d:jenkinsworkspace_a_mbam3_updaterexe_srcmbupdatrmbupdatr.cpp
mov rcx, rax
call qword [r10 + 0x20]
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x340]
call fcn.140024e90
nop
xor r8d, r8d
lea edx, [r8 + 8]
mov rcx, rax
call fcn.14001b1e0
nop
lea rcx, [rsp + 0x660]
call fcn.140090f90
nop
lea rcx, [rsp + 0x2a0]
call fcn.140115f20
nop
lea rcx, [rsp + 0x2b0]
call fcn.14000b800
nop
lea rcx, [rsp + 0x2c8]
call fcn.14000b800
nop
lea rcx, [rsp + 0x530]
call fcn.14000c300
nop
lea rcx, [rsp + 0x4e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x700]
call fcn.1400837f0
nop
lea rcx, [rsp + 0x5e0]
call fcn.14000c300
nop
lea rcx, [rsp + 0x5c0]
call fcn.14000c300
nop
lea rcx, [rsp + 0x4a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x488]
call fcn.14000b890
nop
lea rcx, [rsp + 0x3a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x284]
call fcn.1400165a0
nop
lea rcx, [rsp + 0x388]
call fcn.14000c300
nop
lea rcx, [rsp + 0x408]
call fcn.14000b890
nop
lea rcx, [rsp + 0x448]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3c8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x428]
call fcn.14000c300
nop
lea rcx, [rsp + 0x318]
call fcn.14000c300
nop
lea rcx, [rsp + 0x368]
call fcn.14000c300
nop
lea rcx, [rsp + 0x468]
call fcn.14000c300
mov eax, 8
jmp 0x14001ae76
call fcn.1400169c0
test al, al
je 0x14001a39a
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2d8]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Registering_BrowserGuard_Native_Msg_App...
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
lea r8, [0x140469a30]
lea rdx, [0x140469a70]
lea rcx, [rsp + 0x318]
call fcn.14007cd00
lea rcx, [rsp + 0x2d8]
test al, al
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
je 0x14001a2eb
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
lea rdx, str.Successfully_registered_BrowserGuard_Native_Msg_App._for_Chrome__Edge
jmp 0x14001a303
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
lea rdx, str.Problem_registering_BrowserGuard_Native_Msg_App__continuing_._for_Chrome__Edge
mov rcx, rax
call fcn.140036d30
lea rdx, [fcn.140036f70]
mov rcx, rax
call fcn.140028720
lea r8, [0x140469a50]
lea rdx, [0x140469a90]
lea rcx, [rsp + 0x318]
call fcn.14007cd00
lea rcx, [rsp + 0x2d8]
test al, al
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
je 0x14001a36b
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
lea rdx, str.Successfully_registered_BrowserGuard_Native_Msg_App._for_Firefox
jmp 0x14001a383
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
lea rdx, str.Problem_registering_BrowserGuard_Native_Msg_App__continuing_._for_Firefox
mov rcx, rax
call fcn.140036d30
lea rdx, [fcn.140036f70]
mov rcx, rax
call fcn.140028720
lea rcx, [rsp + 0x318]
call fcn.14007bf60
lea rdx, [rsp + 0x368]
lea rcx, [rsp + 0x388]
call fcn.140021350
lea rcx, [rsp + 0x388]
call fcn.14007d060
lea rcx, [rsp + 0x318]
call fcn.140079e80
movzx edi, byte [rsp + 0x5a]
cmp qword [str.AEControllerImpl.dll], 0
je 0x14001a624
lea rsi, str.AEControllerImpl.dll
test dil, dil
jne 0x14001a624
mov rdx, qword [rsi + r15*8]
lea rcx, [rsp + 0x70]
call fcn.14000d360
nop
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x4c8]
call fcn.140082ed0
nop
lea rcx, [rsp + 0x70]
call fcn.14000c300
mov rdx, qword [rsi + r15*8]
lea rcx, [rsp + 0x600]
call fcn.14000d360
nop
lea r8, [rsp + 0x600]
lea rdx, [rsp + 0x388]
lea rcx, [rsp + 0x340]
call fcn.140082ed0
nop
lea rcx, [rsp + 0x600]
call fcn.14000c300
lea rcx, [rsp + 0x340]
call fcn.1400924f0
test al, al
jne 0x14001a4f5
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0x550]
call fcn.14007ed70
mov rbx, rax
lea rdx, str.File_not_found:
mov rcx, r14
call fcn.140036d30
mov rcx, rax
mov rdx, rbx
call fcn.140036fb0
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
nop
lea rcx, [rsp + 0x550]
call fcn.14000b890
inc dword [rsp + 0x5c]
inc r15
lea rcx, [rsp + 0x340]
call fcn.14000c300
nop
lea rcx, [rsp + 0x4c8]
call fcn.14000c300
jmp 0x14001a619
lea r8, [rsp + 0x280]
lea rdx, [rsp + 0x4c8]
lea rcx, [rsp + 0x340]
call fcn.140021e70
test al, al
jne 0x14001a5e0
mov rdx, qword [rsi + r15*8]
lea rcx, [rsp + 0xa8]
call fcn.14000d360
nop
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0xc8]
call fcn.14007ed70
mov rdi, rax
lea rcx, [rsp + 0x2d8]
call fcn.14000b590
mov rbx, rax
mov rcx, rdi
call fcn.14000b860
mov rdi, rax
mov rdx, rbx
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Error
call fcn.140036d30
mov rcx, rax
mov edx, dword [rsp + 0x280]
call fcn.1400283a0
mov rcx, rax
lea rdx, str._copying_file:
call fcn.140036d30
mov rcx, rax
mov rdx, rdi
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
nop
lea rcx, [rsp + 0xc8]
call fcn.14000b890
nop
lea rcx, [rsp + 0xa8]
call fcn.14000c300
mov dil, 1
lea rcx, [rsp + 0x340]
call fcn.14000c300
nop
lea rcx, [rsp + 0x4c8]
call fcn.14000c300
mov ebx, dword [rsp + 0x5c]
lea eax, [rbx + 1]
test dil, dil
cmovne eax, ebx
mov ebx, eax
mov dword [rsp + 0x5c], eax
lea rax, [r15 + 1]
cmovne rax, r15
mov r15, rax
cmp qword [rsi + r15*8], 0
jne 0x14001a3f0
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x388]
call fcn.140022890
test dil, dil
je 0x14001a658
mov dword [rsp + 0x2c4], 8
movzx ebx, byte [rsp + 0x52]
movzx edi, byte [rsp + 0x50]
jmp 0x14001ab37
call fcn.1400169c0
test al, al
je 0x14001a66e
lea rcx, [rsp + 0x318]
call fcn.14007b6f0
call fcn.1400169c0
test al, al
je 0x14001ab23
lea rdx, str.Languages
lea rcx, [rsp + 0x70]
call fcn.14000d360
nop
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x2f8]
call fcn.140082ed0
nop
lea rcx, [rsp + 0x70]
call fcn.14000c300
lea rdx, str.ui_upd
lea rcx, [rsp + 0x600]
call fcn.14000d360
nop
lea r8, [rsp + 0x600]
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x508]
call fcn.140082ed0
nop
lea rcx, [rsp + 0x600]
call fcn.14000c300
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x508]
call fcn.1400927b0
cmp byte [rsp + 0x299], 0
je 0x14001aafc
movzx ebx, byte [rsp + 0x5b]
test bl, bl
je 0x14001a84b
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x2d8]
call fcn.140024e90
nop
lea r8, [rsp + 0x318]
lea rdx, [rsp + 0x270]
mov rcx, rax
call fcn.140021510
test al, al
jne 0x14001a84b
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3a8]
call fcn.1400927b0
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2d8]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, [0x1403bc0c0]
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
lea rcx, [rsp + 0x2c8]
call fcn.14000d5d0
mov r10, qword [rax]
lea rcx, str.Error_updating_UI_files___UI_process_would_not_stop
mov qword [rsp + 0x20], rcx
mov r9d, 0x421
lea r8, str.wmain
lea rdx, str.d:jenkinsworkspace_a_mbam3_updaterexe_srcmbupdatrmbupdatr.cpp
mov rcx, rax
call qword [r10 + 0x20]
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x340]
call fcn.140024e90
nop
xor r8d, r8d
lea edx, [r8 + 8]
mov rcx, rax
call fcn.14001b1e0
nop
lea rcx, [rsp + 0x508]
call fcn.14000c300
nop
lea rcx, [rsp + 0x2f8]
call fcn.14000c300
jmp 0x14001a109
mov eax, dword [rsp + 0x270]
mov ecx, dword [rsp + 0x68]
test ecx, ecx
cmovne eax, ecx
mov dword [rsp + 0x270], eax
test bl, bl
je 0x14001a947
test eax, eax
je 0x14001a947
cmp eax, 0x3e7
je 0x14001a947
lea rdx, str.starting_MBUpdateDlg...
mov rcx, r14
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
lea rcx, [rsp + 0x530]
call fcn.1400924f0
test al, al
je 0x14001a929
lea rcx, [rsp + 0x530]
call fcn.14007a670
test al, al
je 0x14001a929
lea rdx, [0x1403b8fe8]
lea rcx, [rsp + 0x70]
call fcn.14000d360
nop
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x530]
mov ecx, dword [rsp + 0x270]
call fcn.140069e50
movzx ebx, al
lea rcx, [rsp + 0x70]
call fcn.14000c300
mov rcx, r14
test bl, bl
je 0x14001a920
mov dil, 1
lea rdx, str.started_MBUpdateDlg
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
jmp 0x14001a94c
lea rdx, str.Problem_starting_MBUpdateDlg
jmp 0x14001a933
lea rdx, str.MBUpdateDlg_not_found_or_not_signed
mov rcx, r14
call fcn.140036d30
lea rdx, [fcn.140036f70]
mov rcx, rax
call fcn.140028720
movzx edi, byte [rsp + 0x50]
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x2f8]
call fcn.140021100
test al, al
je 0x14001a9fa
lea rcx, [rsp + 0x318]
call fcn.1400211b0
test al, al
je 0x14001a9fa
lea rdx, [rsp + 0x318]
lea rcx, [rsp + 0x388]
call fcn.14001dae0
test al, al
je 0x14001a9fa
lea rdx, str.Languages
lea rcx, [rsp + 0x70]
call fcn.14000d360
nop
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x388]
lea rcx, [rsp + 0x600]
call fcn.140082ed0
nop
lea rcx, [rsp + 0x70]
call fcn.14000c300
lea rdx, [rsp + 0x2f8]
lea rcx, [rsp + 0x600]
call fcn.140020120
mov bl, 1
lea rcx, [rsp + 0x600]
call fcn.14000c300
jmp 0x14001ab06
mov dl, 1
lea rcx, [rsp + 0x530]
call fcn.140079c20
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3a8]
call fcn.1400927b0
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2d8]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, [0x1403bc1e0]
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
lea rcx, [rsp + 0x2c8]
call fcn.14000d5d0
mov r10, qword [rax]
lea rcx, str.Error_updating_UI_files
mov qword [rsp + 0x20], rcx
mov r9d, 0x44c
lea r8, str.wmain
lea rdx, str.d:jenkinsworkspace_a_mbam3_updaterexe_srcmbupdatrmbupdatr.cpp
mov rcx, rax
call qword [r10 + 0x20]
lea rcx, [rsp + 0x318]
call fcn.140022050
lea rax, [rsp + 0x340]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x340]
call fcn.140024e90
nop
xor r8d, r8d
lea edx, [r8 + 8]
mov rcx, rax
call fcn.14001b1e0
nop
lea rcx, [rsp + 0x508]
call fcn.14000c300
nop
lea rcx, [rsp + 0x2f8]
call fcn.14000c300
jmp 0x14001a109
movzx ebx, byte [rsp + 0x52]
movzx edi, byte [rsp + 0x50]
lea rcx, [rsp + 0x508]
call fcn.14000c300
nop
lea rcx, [rsp + 0x2f8]
call fcn.14000c300
jmp 0x14001ab2d
movzx ebx, byte [rsp + 0x52]
movzx edi, byte [rsp + 0x50]
cmp dword [rsp + 0x2c4], 0
je 0x14001ab58
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3a8]
call fcn.1400927b0
lea rcx, [rsp + 0x318]
call fcn.140022050
jmp 0x14001ab65
lea rcx, [rsp + 0x318]
call fcn.140021f90
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x2d8]
call fcn.140024e90
nop
xor r8d, r8d
mov edx, dword [rsp + 0x2c4]
mov rcx, rax
call fcn.14001b1e0
mov ecx, dword [rsp + 0x2c4]
test al, al
mov eax, 7
cmove ecx, eax
mov dword [rsp + 0x2c4], ecx
test r12b, r12b
je 0x14001ac09
mov byte [rsp + 0x299], 0
lea rcx, [rsp + 0x2c8]
call fcn.14000d5d0
mov r9, qword [rax]
movzx r8d, byte [rsp + 0x285]
lea rdx, [rsp + 0x299]
mov rcx, rax
call qword [r9 + reloc.OLEAUT32.dll_VariantTimeToSystemTime]
lea rcx, [rsp + 0x2c8]
call fcn.14000d5d0
mov r8, qword [rax]
mov edx, 0x1388
mov rcx, rax
call qword [r8 + 0x78]
test dil, dil
jne 0x14001ac18
cmp dword [rsp + 0x270], 0
je 0x14001ac49
mov dl, 1
lea rcx, [rsp + 0x530]
call fcn.140079c20
test al, al
jne 0x14001ac49
lea rdx, str.Problem_stopping_MBUpdateDlg
mov rcx, r14
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
test bl, bl
je 0x14001ad2d
cmp dword [rsp + 0x270], 0
je 0x14001ad2d
xor edx, edx
lea rcx, [rsp + 0x5c0]
call fcn.140079c20
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2d8]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Restarting_UI_in_session:
call fcn.140036d30
mov rcx, rax
mov edx, dword [rsp + 0x270]
call fcn.1400283a0
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
lea rcx, [rsp + 0x2c8]
call fcn.14000d5d0
mov r8, qword [rax]
mov edx, dword [rsp + 0x270]
mov rcx, rax
call qword [r8 + 0x38]
test al, al
jne 0x14001ad2d
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x2d8]
call fcn.14000b590
nop
mov rdx, rax
mov rcx, r14
call fcn.14000b740
mov rcx, rax
lea rdx, str.Problem_restarting_UI__continuing_
call fcn.140036d30
mov rcx, rax
lea rdx, [fcn.140036f70]
call fcn.140028720
lea rcx, [rsp + 0x2c8]
call fcn.140024fd0
nop
lea rcx, [rsp + 0x660]
call fcn.140090f90
nop
lea rcx, [rsp + 0x2a0]
call fcn.140115f20
nop
lea rcx, [rsp + 0x2b0]
call fcn.14000b800
nop
lea rcx, [rsp + 0x2c8]
call fcn.14000b800
nop
lea rcx, [rsp + 0x530]
call fcn.14000c300
nop
lea rcx, [rsp + 0x4e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x700]
call fcn.1400837f0
mov ebx, dword [rsp + 0x2c4]
lea rcx, [rsp + 0x5e0]
call fcn.14000c300
nop
lea rcx, [rsp + 0x5c0]
call fcn.14000c300
nop
lea rcx, [rsp + 0x4a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x488]
call fcn.14000b890
nop
lea rcx, [rsp + 0x3a8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x284]
call fcn.1400165a0
nop
lea rcx, [rsp + 0x388]
call fcn.14000c300
nop
lea rcx, [rsp + 0x408]
call fcn.14000b890
nop
lea rcx, [rsp + 0x448]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3e8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x3c8]
call fcn.14000c300
nop
lea rcx, [rsp + 0x428]
call fcn.14000c300
nop
lea rcx, [rsp + 0x318]
call fcn.14000c300
nop
lea rcx, [rsp + 0x368]
call fcn.14000c300
nop
lea rcx, [rsp + 0x468]
call fcn.14000c300
mov eax, ebx
mov rcx, qword [rsp + 0x880]
xor rcx, rsp
call fcn.140282c10
lea r11, [rsp + 0x890]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret