Function at 0x140005ef0
Capabilities:
Check if file exists
Copy file
Create directory
Create process on windows
Create thread
Get common file path
Get file attributes
Move file
Read file on windows
Set registry value
Write and execute a file
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf18
movaps xmmword [rsp + 0xf00], xmm6
mov r14, rdx
mov r15d, ecx
mov rax, qword [0x140045010]
xor rax, rsp
mov qword [rsp + 0xef8], rax
lea rcx, [0x14003c2e8]
call fcn.140021530
test rax, rax
je 0x140005f3c
cmp byte [rax], 0
setne al
jmp 0x140005f3e
xor eax, eax
mov byte [0x140047f28], al
lea rcx, str.MOZ_USING_SERVICE
call fcn.14001e4d0
cmp r15d, 3
jg 0x140005f84
mov ecx, 2
call fcn.140016988
lea rcx, str.Usage:_updater_patch_dir_install_dir_apply_to_dir__wait_pid__callback_working_dir_callback_path_args...___n
mov edx, 0x6a
mov r8d, 1
mov r9, rax
call fcn.140021258
mov ebx, 1
jmp 0x1400072aa
mov rcx, qword [r14 + 8]
call fcn.14000ee80
mov rsi, qword [r14 + 8]
test al, al
je 0x140006919
lea rbx, [0x1400476f0]
mov r8d, 0x104
mov rcx, rbx
mov rdx, rsi
call fcn.1400225b0
mov word [0x1400478f6], 0
lea rsi, [rsp + 0xcf0]
mov r8d, 0x208
mov rcx, rsi
xor edx, edx
call fcn.140016100
lea r8, str._supdate_elevated.lock
mov edx, 0x104
mov rcx, rsi
mov r9, rbx
call fcn.1400042e0
mov al, 1
cmp byte [0x140047f28], 0
jne 0x140006014
lea rcx, [rsp + 0xcf0]
call fcn.14001f774
test eax, eax
je 0x140006012
call fcn.14001ba74
cmp dword [rax], 2
setne al
jmp 0x140006014
xor eax, eax
mov byte [0x140048138], al
mov rcx, qword [r14 + 0x10]
call fcn.14000ee80
test al, al
je 0x140006b14
mov rdx, qword [r14 + 0x10]
lea rsi, [0x140047f30]
mov r8d, 0x104
mov rcx, rsi
call fcn.1400225b0
mov word [0x140048136], 0
mov rcx, rsi
mov dx, 0x5c
call fcn.1400164fc
test rax, rax
je 0x14000606a
cmp word [rax + 2], 0
jne 0x14000606a
mov word [rax], 0
lea r8, str._s_update.status
lea r9, [0x1400476f0]
lea rbx, [rsp + 0x280]
mov edx, 0x104
mov rcx, rbx
call fcn.1400042e0
lea rdx, [0x14003d8bc]
mov rcx, rbx
call fcn.14001f530
test rax, rax
je 0x140006125
mov rsi, rax
movabs rdi, 0x656369767265732d
xorps xmm0, xmm0
movaps xmmword [rsp + 0x8b0], xmm0
movaps xmmword [rsp + 0x8a0], xmm0
lea rcx, [rsp + 0x8a0]
mov edx, 0x20
mov r8d, 1
mov r9, rax
call fcn.140020f94
movabs rax, 0x2d676e69646e6570
xor rax, qword [rsp + 0x8a0]
mov rcx, qword [rsp + 0x8a7]
xor rcx, rdi
or rcx, rax
je 0x14000612a
movabs rax, 0x2d6465696c707061
xor rax, qword [rsp + 0x8a0]
xor rdi, qword [rsp + 0x8a7]
or rdi, rax
sete r12b
jmp 0x14000612d
xor r12d, r12d
jmp 0x140006135
mov r12b, 1
mov rcx, rsi
call fcn.1400209d4
mov qword [rsp + 0x280], 0
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
lea rdx, str.SoftwareClassesApplications
mov rsi, qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, qword [rsp + 0x280]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 1
lea rdx, str.SoftwareClassesApplicationsupdater.exe
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call rsi
test eax, eax
je 0x140006219
cmp r15d, 5
jl 0x1400062b0
mov rcx, qword [r14 + 0x20]
call fcn.14001f7f4
cmp rax, 0xffffffffffffffff
je 0x1400062b4
mov rbx, rax
mov rcx, qword [r14 + 0x20]
lea rdx, str._replace
call fcn.1400165b0
test rax, rax
je 0x1400062c2
mov byte [0x140048139], 1
jmp 0x1400062c2
mov rcx, qword [rsp + 0x280]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, str.IsHostApp
mov rsi, qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, qword [rsp + 0x280]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, str.NoOpenWith
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, qword [rsp + 0x280]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, str.NoStartPage
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, qword [rsp + 0x280]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp r15d, 5
jge 0x1400061de
xor ebx, ebx
jmp 0x1400062c2
mov byte [0x1400478f8], 1
mov rbx, 0xffffffffffffffff
mov rcx, qword [r14 + 0x18]
call fcn.14000ee80
test al, al
je 0x140006b4c
mov rdx, qword [r14 + 0x18]
lea rsi, [0x140047900]
mov r8d, 0x104
mov rcx, rsi
call fcn.1400225b0
mov word [0x140047b06], 0
mov rcx, rsi
mov dx, 0x5c
call fcn.1400164fc
test rax, rax
je 0x140006311
cmp word [rax + 2], 0
je 0x1400063ac
cmp r15d, 7
jl 0x1400063bb
mov rcx, qword [r14 + 0x30]
call fcn.14000ee80
test al, al
je 0x140006d1e
lea rsi, [0x140047f30]
mov rcx, rsi
call fcn.1400220e8
mov rbp, rax
lea rdi, [rsp + 0x280]
mov r8d, 0x208
mov rcx, rdi
xor edx, edx
call fcn.140016100
mov rdx, qword [r14 + 0x30]
mov rcx, rdi
mov r8, rbp
call fcn.1400225b0
mov rcx, rsi
mov rdx, rdi
call fcn.140022094
test eax, eax
je 0x1400063bb
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x4e
call fcn.14000b030
mov rcx, rsi
call fcn.1400084c0
mov rsi, qword [r14 + 0x30]
mov ecx, 2
call fcn.140016988
lea rdx, str.The_callback_file_must_be_located_in_the_installation_directory___S__n
jmp 0x140006d51
mov word [rax], 0
cmp r15d, 7
jge 0x14000631b
lea rcx, [rsp + 0xae0]
mov r8d, 0x20a
xor edx, edx
call fcn.140016100
cmp byte [0x140048138], 0
je 0x140006401
lea rsi, [0x1400476f0]
mov rcx, rsi
call fcn.14000f570
lea rdx, [0x14003d618]
lea r8, [rsp + 0xae0]
mov rcx, rsi
call fcn.14000f3d0
jmp 0x140006421
lea r8, str._supdate.log
lea r9, [0x1400476f0]
lea rcx, [rsp + 0xae0]
mov edx, 0x105
call fcn.1400042e0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007ea3
lea rcx, [0x140048348]
lea rdx, [rsp + 0xae0]
call fcn.14000ecf0
lea rcx, str.applying
call fcn.1400084c0
test al, al
je 0x1400064a4
cmp byte [0x1400478f8], 1
jne 0x1400064eb
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
lea rsi, str.Performing_a_staged_update
cmp eax, dword [rcx + 4]
jle 0x140006520
jmp 0x140007fe8
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007ee4
lea rcx, [0x140048348]
lea rdx, str.failed_setting_status_to_applying
call fcn.14000ed50
call fcn.1400085d0
mov ebx, 1
jmp 0x1400072aa
cmp byte [0x140048139], 1
jne 0x14000652f
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
lea rsi, str.Performing_a_replace_request
cmp eax, dword [rcx + 4]
jg 0x140007fe8
lea rcx, [0x140048348]
mov rdx, rsi
call fcn.14000ed50
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007f25
lea rcx, [0x140048348]
lea rdx, str.PATCH_DIRECTORY__S
lea r8, [0x1400476f0]
call fcn.14000ed50
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007f66
lea rcx, [0x140048348]
lea rdx, str.INSTALLATION_DIRECTORY__S
lea r8, [0x140047f30]
call fcn.14000ed50
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007fa7
lea rcx, [0x140048348]
lea rdx, str.WORKING_DIRECTORY__S
lea rsi, [0x140047900]
mov r8, rsi
call fcn.14000ed50
lea rbp, [0x140047f30]
mov r8d, 0x104
mov rcx, rsi
mov rdx, rbp
call fcn.14001f35c
test eax, eax
je 0x140006677
cmp byte [0x1400478f8], 0
jne 0x140006621
cmp byte [0x140048139], 0
je 0x1400072d8
lea r8, [0x14003d1bc]
lea r9, [0x140047900]
lea rsi, [rsp + 0x280]
mov edx, 0x104
mov rcx, rsi
call fcn.1400042e0
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x140007131
lea rdx, [0x140047f30]
lea rcx, [rsp + 0x280]
mov r8d, 0x104
call fcn.14001f35c
test eax, eax
jne 0x140007195
test rbx, rbx
jle 0x1400066e9
mov ecx, 0x100000
xor edx, edx
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x1400066e9
mov rsi, rax
mov rcx, rax
mov edx, 0x7530
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
je 0x1400066e9
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140008029
lea rcx, [0x140048348]
lea rdx, str.The_parent_process_didnt_exit__Continuing_with_update.
call fcn.14000ed50
cmp byte [0x140048139], 0
jne 0x1400066fb
cmp byte [0x1400478f8], 1
jne 0x140006732
lea rsi, [rsp + 0x280]
mov r8d, 0x20a
mov rcx, rsi
xor edx, edx
call fcn.140016100
mov rcx, rsi
mov edx, 0x105
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x140006732
lea rcx, [rsp + 0x280]
call fcn.14001ec68
mov r13, 0xffffffffffffffff
cmp byte [0x140047f28], 0
je 0x1400068bf
cmp byte [0x1400478f8], 1
jne 0x14000675d
lea rcx, [0x140047900]
xor edx, edx
call fcn.1400087c0
cmp byte [0x140048139], 0
jne 0x140006784
lea rcx, [0x140047900]
call fcn.14001f65c
test eax, eax
je 0x140006784
call fcn.14001ba74
cmp dword [rax], 0x11
jne 0x1400064dc
lea rcx, [0x140047900]
lea rdx, [rsp + 0x8d0]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x140007093
mov rdi, 0xffffffffffffffff
cmp r15d, 7
jl 0x140006de5
mov rdi, r13
mov r13, rbp
lea rcx, [rsp + 0x690]
mov r12d, 0x208
mov r8d, 0x208
xor edx, edx
call fcn.140016100
lea rbp, [r14 + 0x30]
mov rsi, qword [r14 + 0x30]
lea rbx, [rsp + 0x280]
mov r8d, 0x410
mov rcx, rbx
xor edx, edx
call fcn.140016100
cmp byte [0x140048139], 1
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x48], rdi
jne 0x14000692f
mov rcx, rsi
mov r14, r13
mov rdx, r13
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
movsxd rsi, eax
mov rdx, qword [rbp]
mov rcx, rbx
mov r8, rsi
call fcn.1400225b0
lea rdi, [rsp + rsi*2]
add rdi, 0x280
sub r12, rsi
mov r13, rbp
lea rbp, [r14 + rsi*2]
mov rcx, rdi
mov rdx, rbp
mov r8, r12
call fcn.1400225b0
mov rcx, rbp
call fcn.1400220e8
mov dword [rdi + rax*2], 0x5c
lea rdi, [rdi + rax*2]
add rdi, 2
not rax
add r12, rax
lea rbp, [rsp + 0x70]
mov rcx, rbp
mov rdx, r14
call fcn.1400220cc
mov rcx, qword [r13]
mov rdx, rbp
mov rbp, r13
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
mov r13, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
movsxd rdx, eax
cmp rdx, rsi
cmovb rdx, rsi
add rdx, rdx
add rdx, qword [rbp]
mov rcx, rdi
mov r8, r12
call fcn.1400225b0
jmp 0x140006935
mov al, byte [0x1400478f8]
cmp r15d, 6
jle 0x1400068f1
test al, 1
jne 0x1400068f9
cmp byte [0x140048139], 1
je 0x140006b98
lea rcx, [rsp + 0x8d0]
mov r9, qword [r14 + 0x30]
lea r8, str._s.update_in_progress.lock
jmp 0x14000690f
test al, 1
je 0x140006b84
lea r8, str._s_updated.update_in_progress.lock
lea r9, [0x140047f30]
lea rcx, [rsp + 0x8d0]
mov edx, 0x104
jmp 0x140006bd7
mov ecx, 2
call fcn.140016988
lea rdx, str.The_patch_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140006d51
mov rbx, rsi
mov r13, rdi
lea rdx, [rsp + 0x690]
mov rcx, rbx
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x14000732e
mov rdi, 0xffffffffffffffff
cmp byte [0x140048139], 0
jne 0x140006de5
mov qword [rsp + 0x60], rbp
lea rcx, [rsp + 0x8d0]
call fcn.1400220e8
cdqe
cmp word [rsp + rax*2 + 0x690], 0x5c
lea rcx, [rsp + rax*2 + 0x690]
lea rax, [rsp + rax*2 + 0x692]
cmovne rax, rcx
movzx edx, word [rax]
xor ecx, ecx
lea rbp, [0x140047b10]
mov edi, 0x2f
nop word [rax + rax]
cmp dx, 0x5c
cmove edx, edi
mov word [rcx + rbp], dx
movzx edx, word [rax + rcx + 2]
add rcx, 2
test dx, dx
jne 0x1400069b0
mov word [rcx + rbp], 0
mov rdi, qword [rsp + 0x60]
mov r9, qword [rdi]
lea rcx, [0x140047d20]
lea r8, str._s.moz_callback
mov edx, 0x104
call fcn.1400042e0
cmp eax, 0x104
jae 0x14000740b
mov rcx, qword [rdi]
lea rdx, [0x140047d20]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x140007499
mov qword [rsp + 0x58], r15
mov esi, 1
mov rdi, qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, qword [sym.imp.KERNEL32.dll_GetLastError]
lea r15, [0x140048348]
lea r12, str.NS_main:_callback_app_file_open_attempt__d_failed._File:__S._Last_error:__d
mov r13, qword [sym.imp.KERNEL32.dll_Sleep]
nop word cs:[rax + rax]
nop dword [rax]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
mov rcx, rbx
mov edx, 0x40010000
mov r8d, 6
xor r9d, r9d
call rdi
cmp rax, 0xffffffffffffffff
jne 0x140006d66
call r14
mov ebp, eax
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006ada
mov dword [rsp + 0x20], ebp
mov rcx, r15
mov rdx, r12
mov r8d, esi
mov r9, rbx
call fcn.14000ed50
mov ecx, 0x64
call r13
add esi, 1
cmp esi, 0xb
jne 0x140006a50
jmp 0x140006d86
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140006aac
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140006aac
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x4b
call fcn.14000b030
mov rcx, rsi
call fcn.1400084c0
mov rsi, qword [r14 + 0x10]
mov ecx, 2
call fcn.140016988
lea rdx, str.The_install_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140006d51
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x4c
call fcn.14000b030
mov rcx, rsi
call fcn.1400084c0
mov rsi, qword [r14 + 0x18]
mov ecx, 2
call fcn.140016988
lea rdx, str.The_working_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140006d51
mov r13, 0xffffffffffffffff
cmp byte [0x140048139], 1
jne 0x140006766
lea rdx, [0x140047f30]
lea rsi, [rsp + 0x280]
mov rcx, rsi
call fcn.1400220cc
mov rcx, rsi
mov dx, 0x5c
call fcn.1400164fc
mov word [rax], 0
lea r8, str._smoz_update_in_progress.lock
lea rcx, [rsp + 0x8d0]
mov edx, 0x104
mov r9, rsi
call fcn.1400042e0
lea rcx, [rsp + 0x8d0]
call fcn.14001f774
test eax, eax
je 0x140006bfb
call fcn.14001ba74
cmp dword [rax], 2
jne 0x140006d00
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0x8d0]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r13, rax
lea rcx, [rsp + 0xcf0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140006c57
lea rdx, str.SeAssignPrimaryTokenPrivilege
mov r8d, 0x22
xor ecx, ecx
call fcn.14000e9e0
cmp r13, 0xffffffffffffffff
jne 0x140006746
lea rcx, [rsp + 0xcf0]
call fcn.14001f774
test eax, eax
je 0x140006c80
call fcn.14001ba74
cmp dword [rax], 2
jne 0x14000705b
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0xcf0]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x14000705b
mov rbx, rax
lea r8, [r14 + 8]
lea edx, [r15 - 1]
lea rcx, [rsp + 0x68]
call fcn.140005490
mov rsi, qword [rsp + 0x68]
test rsi, rsi
jne 0x140007656
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1400085d0
mov qword [rsp + 0x68], 0
mov ebx, 1
jmp 0x1400072aa
cmp byte [0x140048139], 1
jne 0x140007016
lea rcx, str.pending
call fcn.1400084c0
jmp 0x140007023
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x4d
call fcn.14000b030
mov rcx, rsi
call fcn.1400084c0
mov rsi, qword [r14 + 0x30]
mov ecx, 2
call fcn.140016988
lea rdx, str.The_callback_file_path_is_not_valid_for_this_application___S__n
mov rcx, rax
mov r8, rsi
call fcn.140005d20
mov ebx, 1
jmp 0x1400072aa
mov rdi, rax
mov r15, qword [rsp + 0x58]
mov r14, qword [rsp + 0x50]
mov r13, qword [rsp + 0x48]
cmp byte [0x1400478f8], 0
je 0x140006dee
jmp 0x140006e3f
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000812d
mov rbx, qword [rsp + 0x60]
mov r8, qword [rbx]
cmp ebp, 0x20
mov r15, qword [rsp + 0x58]
mov r14, qword [rsp + 0x50]
mov r13, qword [rsp + 0x48]
mov rdi, 0xffffffffffffffff
lea rcx, [0x140048348]
jne 0x140007555
lea rdx, str.NS_main:_callback_app_file_in_use__continuing_without_exclusive_access_for_executable_file:__S
call fcn.14000ed50
cmp byte [0x1400478f8], 0
jne 0x140006e3f
cmp byte [0x140048139], 0
jne 0x140006e3f
lea rax, str.tobedeleted
mov qword [rsp + 0x20], rax
lea rsi, [0x140048140]
lea r8, str._s__s
lea r9, [0x140047900]
mov edx, 0x104
mov rcx, rsi
call fcn.1400042e0
mov rcx, rsi
xor edx, edx
call fcn.14001eba8
test eax, eax
je 0x140006e3f
lea rcx, [0x140048140]
call fcn.14001f65c
lea rax, [0x140008ae0]
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x290], 0
lea rax, [rsp + 0x690]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
lea r8, [0x14000b0a0]
lea r9, [rsp + 0x280]
xor ecx, ecx
xor edx, edx
call fcn.14001abdc
mov qword [rsp + 0x280], rax
test rax, rax
je 0x140006eb7
cmp byte [0x1400478f8], 0
jne 0x140006eb7
cmp byte [0x140048139], 0
jne 0x140006eb7
xor ecx, ecx
mov dl, 1
call fcn.140001af0
mov rax, qword [rsp + 0x280]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x280]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r15d, 7
jl 0x140006f4a
cmp byte [0x140048139], 0
jne 0x140006f4a
cmp rdi, 0xffffffffffffffff
je 0x140006ef1
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x140047d20]
call fcn.14001f774
test eax, eax
je 0x140006f4a
call fcn.14001ba74
cmp dword [rax], 2
je 0x140006f4a
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400081af
lea rcx, [0x140048348]
lea rdx, str.NS_main:_non_fatal_error_removing_backup_of_callback_app_file__path:__S
lea r8, [0x140047d20]
call fcn.14000ed50
cmp byte [0x1400478f8], 0
jne 0x1400071fe
cmp byte [0x140048139], 0
jne 0x1400071fe
lea rcx, [0x140048140]
call fcn.14001f7cc
test eax, eax
je 0x1400071fe
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400080ab
call fcn.14001ba74
mov r9d, dword [rax]
lea rcx, [0x140048348]
lea rdx, str.NS_main:_unable_to_remove_directory:__S__err:__d
lea r8, str.tobedeleted
call fcn.14000ed50
lea rcx, [0x140048140]
xor edx, edx
mov r8d, 4
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov esi, eax
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400080ec
lea rcx, [0x140048348]
test esi, esi
je 0x1400071eb
lea rdx, str.NS_main:_directory_will_be_removed_on_OS_reboot:__S
jmp 0x1400071f2
cmp byte [0x1400478f8], 1
je 0x140007638
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000806a
lea rcx, [0x140048348]
lea rdx, str.Update_already_in_progress__Exiting
jmp 0x1400064d7
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000816e
lea rcx, [0x140048348]
lea rdx, str.Unable_to_create_elevated_lock_file__Exiting
jmp 0x1400064d7
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x41
call fcn.14000b030
mov rcx, rsi
call fcn.1400084c0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400081f0
lea rcx, [0x140048348]
lea rdx, str.NS_main:_unable_to_find_apply_to_dir:__S
lea r8, [0x140047900]
call fcn.14000ed50
call fcn.1400085d0
cmp r13, 0xffffffffffffffff
je 0x140007104
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcf0]
call fcn.14001f774
test eax, eax
je 0x1400073d4
call fcn.14001ba74
cmp dword [rax], 2
mov ebx, 1
je 0x1400073d9
jmp 0x1400072aa
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x47
call fcn.14000b030
mov rcx, rsi
call fcn.1400084c0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140008231
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140048348]
lea rdx, str.Error_calling_PathRemoveFileSpecW:__d
mov r8d, eax
call fcn.14000ed50
jmp 0x1400064dc
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x48
call fcn.14000b030
mov rcx, rsi
call fcn.1400084c0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140008272
lea rcx, [0x140048348]
lea rdx, str.The_apply_to_directory_must_be_the_same_as_or_a_child_of_the_installation_directory__Exiting.
jmp 0x1400064d7
lea rdx, str.NS_main:_failed_to_schedule_OS_reboot_removal_of_directory:__S
lea r8, str.tobedeleted
call fcn.14000ed50
call fcn.1400085d0
cmp r15d, 7
jl 0x1400072a0
cmp byte [0x140047f2a], 1
jne 0x140007258
call fcn.140005830
test al, al
jne 0x140007243
mov ecx, 2
call fcn.140016988
lea rcx, str.The_post_update_process_was_not_launched
mov edx, 0x28
mov r8d, 1
mov r9, rax
call fcn.140021258
cmp byte [0x140047f28], 0
jne 0x140007258
lea rcx, [0x140047f30]
call fcn.14000f700
cmp r13, 0xffffffffffffffff
je 0x140007267
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcf0]
call fcn.14001f774
test eax, eax
je 0x140007282
call fcn.14001ba74
cmp dword [rax], 2
jne 0x1400072a0
mov r9b, byte [0x140047f28]
add r15d, 0xfffffffa
mov rcx, qword [r14 + 0x28]
add r14, 0x30
mov edx, r15d
mov r8, r14
call fcn.140005d90
movzx ebx, byte [0x140047f2a]
xor ebx, 1
mov rcx, qword [rsp + 0xef8]
xor rcx, rsp
call fcn.140023fe0
mov eax, ebx
movaps xmm6, xmmword [rsp + 0xf00]
add rsp, 0xf18
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x4a
call fcn.14000b030
mov rcx, rsi
call fcn.1400084c0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400082b3
lea rcx, [0x140048348]
lea rdx, str.Installation_directory_and_working_directory_must_be_the_same_for_non_staged_updates._Exiting.
jmp 0x1400064d7
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x42
call fcn.14000b030
mov rcx, rsi
call fcn.1400084c0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400082f4
lea rcx, [0x140048348]
lea rdx, str.NS_main:_unable_to_find_callback_file:__S
mov r8, rbx
call fcn.14000ed50
call fcn.1400085d0
cmp r13, 0xffffffffffffffff
je 0x14000739b
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcf0]
call fcn.14001f774
test eax, eax
je 0x1400073ba
call fcn.14001ba74
cmp dword [rax], 2
jne 0x14000762e
mov r9b, byte [0x140047f28]
add r15d, 0xfffffffa
mov rcx, qword [r14 + 0x28]
mov edx, r15d
mov r8, rbp
jmp 0x140007629
mov ebx, 1
cmp r15d, 7
jl 0x1400072aa
mov r9b, byte [0x140047f28]
add r15d, 0xfffffffa
mov rcx, qword [r14 + 0x28]
add r14, 0x30
mov edx, r15d
mov r8, r14
call fcn.140005d90
mov ebx, 1
jmp 0x1400072aa
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 3
call fcn.14000b030
mov rcx, rsi
call fcn.1400084c0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140008335
lea rcx, [0x140048348]
lea rdx, str.NS_main:_callback_backup_path_truncated
call fcn.14000ed50
call fcn.1400085d0
cmp r13, 0xffffffffffffffff
je 0x140007475
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcf0]
call fcn.14001f774
test eax, eax
je 0x14000762e
call fcn.14001ba74
mov ebx, 1
jmp 0x1400072aa
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor ecx, ecx
cmp eax, 5
setne cl
lea r9d, [rcx + rcx]
add r9d, 0x23
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
call fcn.14000b030
mov rcx, rsi
call fcn.1400084c0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140008376
mov r8, qword [rdi]
lea rcx, [0x140048348]
lea rdx, str.NS_main:_failed_to_copy_callback_file__S_into_place_at__S
lea r9, [0x140047d20]
call fcn.14000ed50
call fcn.1400085d0
cmp r13, 0xffffffffffffffff
je 0x14000751d
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcf0]
call fcn.14001f774
test eax, eax
je 0x14000753c
call fcn.14001ba74
cmp dword [rax], 2
jne 0x14000762e
mov r9b, byte [0x140047f28]
add r15d, 0xfffffffa
mov rcx, qword [rdi]
mov edx, r15d
mov r8, rdi
jmp 0x140007629
lea rdx, str.NS_main:_callback_app_file_in_use__failed_to_exclusively_open_executable_file:__S
call fcn.14000ed50
xor eax, eax
cmp ebp, 5
setne al
lea r9d, [rax + rax]
add r9d, 0x23
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
call fcn.14000b030
mov rcx, rsi
call fcn.1400084c0
lea rcx, [0x140047d20]
call fcn.14001f774
test eax, eax
mov rsi, rbx
je 0x1400075e5
call fcn.14001ba74
cmp dword [rax], 2
je 0x1400075e5
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400083b7
lea rcx, [0x140048348]
lea rdx, str.NS_main:_unable_to_remove_backup_of_callback_app_file__path:__S
lea r8, [0x140047d20]
call fcn.14000ed50
call fcn.1400085d0
cmp r13, 0xffffffffffffffff
je 0x1400075f9
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcf0]
call fcn.14001f774
test eax, eax
je 0x140007614
call fcn.14001ba74
cmp dword [rax], 2
jne 0x14000762e
mov r9b, byte [0x140047f28]
add r15d, 0xfffffffa
mov rcx, qword [r14 + 0x28]
mov edx, r15d
mov r8, rsi
call fcn.140005d90
mov ebx, 1
jmp 0x1400072aa
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x2c
call fcn.14000b030
mov rcx, rsi
jmp 0x140006d14
test r12b, r12b
je 0x140007752
mov dword [rsp + 0x280], 0
mov rcx, qword [r14]
lea rdx, [rsp + 0x280]
call fcn.14000fdf0
test eax, eax
je 0x140007752
cmp dword [rsp + 0x280], 0
je 0x140007752
mov r13, r14
mov r12, r15
lea rcx, [rsp + 0x280]
call fcn.14000fe90
test eax, eax
je 0x1400076b1
cmp dword [rsp + 0x280], 0
jne 0x1400076cd
lea rcx, [0x140047f30]
lea rdx, [rsp + 0x280]
call fcn.14000db50
test eax, eax
jne 0x1400077f0
cmp byte [0x1400478f8], 0
mov r15, r12
mov r14, r13
jne 0x14000775b
xorps xmm6, xmm6
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
mov qword [rsp + 0x8d], 0
xor r12d, r12d
lea rdi, [rsp + 0x280]
mov r8d, 0x20a
mov rcx, rdi
xor edx, edx
call fcn.140016100
lea rcx, [0x1400476f0]
lea rdx, [0x14003d850]
mov r8, rdi
call fcn.14000f3d0
test eax, eax
je 0x1400078c1
lea rdx, [0x14003d8bc]
lea rcx, [rsp + 0x280]
call fcn.14001f530
test rax, rax
jne 0x1400077bb
xor r12d, r12d
jmp 0x1400078c1
cmp byte [0x1400478f8], 0
je 0x1400076dc
lea rdi, [rsp + 0x8a0]
mov rcx, rdi
mov r9d, 0x2b
call fcn.14000b030
mov rcx, rdi
call fcn.1400084c0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400083f8
lea rcx, [0x140048348]
lea rdx, str.Non_critical_update_staging_error__Falling_back_to_non_staged_updates_and_exiting
call fcn.14000ed50
call fcn.1400085d0
jmp 0x140007e8b
mov rbp, rax
lea rcx, [rsp + 0x70]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140020f94
cmp rax, 1
jne 0x1400078b6
mov byte [rsp + 0x94], 0
mov r12b, 1
jmp 0x1400078b9
mov qword [rsp + 0x690], 0
lea rax, [rsp + 0x690]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x280]
mov rcx, 0xffffffff80000002
xor r8d, r8d
mov r9d, 0x20119
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140007839
mov rcx, qword [rsp + 0x690]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x6a0], xmm0
movaps xmmword [rsp + 0x690], xmm0
mov qword [rsp + 0x6ad], 0
xor r14d, r14d
lea rdi, [rsp + 0x280]
mov r8d, 0x20a
mov rcx, rdi
xor edx, edx
call fcn.140016100
lea rcx, [0x1400476f0]
lea rdx, [0x14003d850]
mov r8, rdi
call fcn.14000f3d0
test eax, eax
je 0x140007b29
lea rdx, [0x14003d8bc]
lea rcx, [rsp + 0x280]
call fcn.14001f530
test rax, rax
jne 0x140007aed
xor r14d, r14d
jmp 0x140007b29
xor r12d, r12d
mov rcx, rbp
call fcn.1400209d4
lea rdi, [rsp + 0x8a0]
mov rcx, rdi
mov r9d, 0x4f
call fcn.14000b030
mov rcx, rdi
call fcn.1400084c0
movups xmmword [rsp + 0x6e8], xmm6
movups xmmword [rsp + 0x6d8], xmm6
movups xmmword [rsp + 0x6c8], xmm6
movups xmmword [rsp + 0x6b8], xmm6
mov qword [rsp + 0x6f8], 0
movabs rax, 0x54000000070
mov qword [rsp + 0x690], rax
mov qword [rsp + 0x698], 0
mov rax, qword [r14]
mov qword [rsp + 0x6a8], rax
mov qword [rsp + 0x6b0], rsi
lea rax, str.runas
mov qword [rsp + 0x6a0], rax
mov dword [rsp + 0x6c0], 1
lea rcx, [rsp + 0x690]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x140007ac3
mov rcx, qword [rsp + 0x6f8]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x6f8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x140047f29], 1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x8b0], xmm0
movaps xmmword [rsp + 0x8a0], xmm0
mov qword [rsp + 0x8bd], 0
test r12b, r12b
je 0x140007e59
lea rdi, [rsp + 0x280]
mov r8d, 0x20a
mov rcx, rdi
xor edx, edx
call fcn.140016100
lea rcx, [0x1400476f0]
lea rdx, [0x14003d850]
mov r8, rdi
call fcn.14000f3d0
test eax, eax
je 0x140007e59
lea rdx, [0x14003d8bc]
lea rcx, [rsp + 0x280]
call fcn.14001f530
test rax, rax
je 0x140007e59
mov rbp, rax
mov r12, r14
mov rdi, r15
lea rcx, [rsp + 0x8a0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140020f94
cmp rax, 1
jne 0x140007ab0
mov byte [rsp + 0x8c4], 0
mov rcx, rbp
call fcn.1400209d4
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0x8a0]
mov r8d, 0x25
call fcn.140021940
test eax, eax
mov r15, rdi
mov r14, r12
jne 0x140007e59
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140008439
lea rcx, [0x140048348]
lea rdx, str.The_secure_ID_hasnt_changed_after_launching_the_updater_using_runas
call fcn.14000ed50
mov byte [0x140047f29], 0
jmp 0x140007ab8
mov rcx, rbp
call fcn.1400209d4
mov r15, rdi
mov r14, r12
jmp 0x140007e59
mov byte [0x140047f29], 0
lea rdi, [rsp + 0x8a0]
mov rcx, rdi
mov r9d, 9
call fcn.14000b030
mov rcx, rdi
call fcn.1400084c0
jmp 0x140007e59
mov rbp, rax
lea rcx, [rsp + 0x690]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140020f94
cmp rax, 1
jne 0x140007b1e
mov byte [rsp + 0x6b4], 0
mov r14b, 1
jmp 0x140007b21
xor r14d, r14d
mov rcx, rbp
call fcn.1400209d4
lea rdi, [rsp + 0x8a0]
mov rcx, rdi
mov r9d, 0x3a
call fcn.14000b030
mov rcx, rdi
call fcn.1400084c0
mov ecx, r12d
mov rdx, r13
call fcn.14000fc80
test eax, eax
jne 0x140007d3c
cmp byte [0x1400478f8], 0
je 0x140007b67
xor edi, edi
jmp 0x140007b72
call fcn.140001a30
test eax, eax
sete dil
lea rcx, str.MozillaMaintenance
mov edx, 5
call fcn.14000fa50
cmp eax, 1
je 0x140007c11
lea rax, [0x140008790]
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x290], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
lea r8, [0x14000b0a0]
lea r9, [rsp + 0x280]
xor ecx, ecx
xor edx, edx
call fcn.14001abdc
mov qword [rsp + 0x280], rax
test rax, rax
je 0x140007bf5
xor dil, 1
jne 0x140007bf5
mov cl, 1
xor edx, edx
call fcn.140001af0
mov rax, qword [rsp + 0x280]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x280]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.MozillaMaintenance
mov edx, 1
call fcn.14000fa50
cmp eax, 1
jne 0x140007d3c
mov byte [0x140047f29], 1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x8d], 0
test r14b, r14b
je 0x140007d5c
lea rdi, [rsp + 0x280]
mov r8d, 0x20a
mov rcx, rdi
xor edx, edx
call fcn.140016100
lea rcx, [0x1400476f0]
lea rdx, [0x14003d850]
mov r8, rdi
call fcn.14000f3d0
test eax, eax
je 0x140007d5c
lea rdx, [0x14003d8bc]
lea rcx, [rsp + 0x280]
call fcn.14001f530
test rax, rax
je 0x140007d5c
mov rbp, rax
lea rcx, [rsp + 0x70]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140020f94
cmp rax, 1
jne 0x140007d54
mov byte [rsp + 0x94], 0
mov rcx, rbp
call fcn.1400209d4
lea rcx, [rsp + 0x690]
lea rdx, [rsp + 0x70]
mov r8d, 0x25
call fcn.140021940
test eax, eax
jne 0x140007d5c
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000847a
lea rcx, [0x140048348]
lea rdx, str.The_secure_ID_hasnt_changed_after_launching_the_updater_using_the_service
call fcn.14000ed50
mov byte [0x140047f29], 0
jmp 0x140007d5c
cmp byte [0x1400478f8], 1
mov r15, r12
mov r14, r13
jne 0x1400076dc
jmp 0x14000775b
mov rcx, rbp
call fcn.1400209d4
cmp byte [0x1400478f8], 0
mov r15, r12
mov r14, r13
jne 0x140007e59
lea rdi, [rsp + 0x280]
mov r8d, 0x20a
mov rcx, rdi
xor edx, edx
call fcn.140016100
lea rcx, [0x1400476f0]
lea rdx, [0x14003d132]
mov r8, rdi
call fcn.14000f3d0
test eax, eax
je 0x140007e53
lea rdx, [0x14003d8bc]
lea rcx, [rsp + 0x280]
call fcn.14001f530
test rax, rax
je 0x140007e53
mov r14, rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x8b0], xmm0
movaps xmmword [rsp + 0x8a0], xmm0
lea rcx, [rsp + 0x8a0]
mov edx, 0x20
mov r8d, 1
mov r9, rax
call fcn.140020f94
movabs rdi, 0x6564656563637573
xor rdi, qword [rsp + 0x8a0]
movzx ebp, byte [rsp + 0x8a8]
xor rbp, 0x64
mov rcx, r14
call fcn.1400209d4
or rbp, rdi
mov r15, r12
mov r14, r13
jne 0x140007e59
call fcn.140005830
test al, al
jne 0x140007e59
mov ecx, 2
call fcn.140016988
lea rcx, str.The_post_update_process_which_runs_as_the_user_for_service_update_could_not_be_launched.
mov edx, 0x58
mov r8d, 1
mov r9, rax
call fcn.140021258
jmp 0x140007e59
mov r15, r12
mov r14, r13
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1400085d0
cmp r15d, 7
jl 0x140007e8b
mov r9b, byte [0x140047f28]
add r15d, 0xfffffffa
mov rcx, qword [r14 + 0x28]
add r14, 0x30
mov edx, r15d
mov r8, r14
call fcn.140005d90
mov qword [rsp + 0x68], 0
mov rcx, rsi
call fcn.140013eac
xor ebx, ebx
jmp 0x1400072aa
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140006446
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140006446
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x1400064c9
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x1400064c9
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140006554
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140006554
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140006593
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140006593
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x1400065d2
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x1400065d2
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140006520
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140006520
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x1400066d6
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x1400066d6
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140007048
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140007048
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140006f9d
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140006f9d
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140006ffb
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140006ffb
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140006dab
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140006dab
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140007080
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140007080
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140006f30
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140006f30
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x1400070d6
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x1400070d6
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140007174
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140007174
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x1400071d8
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x1400071d8
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x14000731b
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x14000731b
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140007371
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140007371
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x14000744e
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x14000744e
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x1400074ec
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x1400074ec
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x1400075cb
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x1400075cb
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x14000779e
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x14000779e
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140007a94
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140007a94
lea rcx, [0x140048558]
call fcn.140014020
cmp dword [0x140048558], 0xffffffff
jne 0x140007d20
mov qword [0x140048348], 0
lea rcx, [0x14000ac50]
call fcn.1400141d8
lea rcx, [0x140048558]
call fcn.140014088
jmp 0x140007d20