Function at 0x140005e20
Capabilities:
Check if file exists
Copy file
Create directory
Create process on windows
Create thread
Get common file path
Get file attributes
Move file
Read file on windows
Set registry value
Write and execute a file
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf18
movaps xmmword [rsp + 0xf00], xmm6
mov r14, rdx
mov r15d, ecx
mov rax, qword [0x140045010]
xor rax, rsp
mov qword [rsp + 0xef8], rax
lea rcx, [0x14003c2e8]
call fcn.1400213d0
test rax, rax
je 0x140005e6c
cmp byte [rax], 0
setne al
jmp 0x140005e6e
xor eax, eax
mov byte [0x140047f28], al
lea rcx, str.MOZ_USING_SERVICE
call fcn.14001e370
cmp r15d, 3
jg 0x140005eb4
mov ecx, 2
call fcn.140016828
lea rcx, str.Usage:_updater_patch_dir_install_dir_apply_to_dir__wait_pid__callback_working_dir_callback_path_args...___n
mov edx, 0x6a
mov r8d, 1
mov r9, rax
call fcn.1400210f8
mov ebx, 1
jmp 0x1400071da
mov rcx, qword [r14 + 8]
call fcn.14000edb0
mov rsi, qword [r14 + 8]
test al, al
je 0x140006849
lea rbx, [0x1400476f0]
mov r8d, 0x104
mov rcx, rbx
mov rdx, rsi
call fcn.140022450
mov word [0x1400478f6], 0
lea rsi, [rsp + 0xcf0]
mov r8d, 0x208
mov rcx, rsi
xor edx, edx
call fcn.140015fa0
lea r8, str._supdate_elevated.lock
mov edx, 0x104
mov rcx, rsi
mov r9, rbx
call fcn.140004260
mov al, 1
cmp byte [0x140047f28], 0
jne 0x140005f44
lea rcx, [rsp + 0xcf0]
call fcn.14001f614
test eax, eax
je 0x140005f42
call fcn.14001b914
cmp dword [rax], 2
setne al
jmp 0x140005f44
xor eax, eax
mov byte [0x140048138], al
mov rcx, qword [r14 + 0x10]
call fcn.14000edb0
test al, al
je 0x140006a44
mov rdx, qword [r14 + 0x10]
lea rsi, [0x140047f30]
mov r8d, 0x104
mov rcx, rsi
call fcn.140022450
mov word [0x140048136], 0
mov rcx, rsi
mov dx, 0x5c
call fcn.14001639c
test rax, rax
je 0x140005f9a
cmp word [rax + 2], 0
jne 0x140005f9a
mov word [rax], 0
lea r8, str._s_update.status
lea r9, [0x1400476f0]
lea rbx, [rsp + 0x280]
mov edx, 0x104
mov rcx, rbx
call fcn.140004260
lea rdx, [0x14003d8bc]
mov rcx, rbx
call fcn.14001f3d0
test rax, rax
je 0x140006055
mov rsi, rax
movabs rdi, 0x656369767265732d
xorps xmm0, xmm0
movaps xmmword [rsp + 0x8b0], xmm0
movaps xmmword [rsp + 0x8a0], xmm0
lea rcx, [rsp + 0x8a0]
mov edx, 0x20
mov r8d, 1
mov r9, rax
call fcn.140020e34
movabs rax, 0x2d676e69646e6570
xor rax, qword [rsp + 0x8a0]
mov rcx, qword [rsp + 0x8a7]
xor rcx, rdi
or rcx, rax
je 0x14000605a
movabs rax, 0x2d6465696c707061
xor rax, qword [rsp + 0x8a0]
xor rdi, qword [rsp + 0x8a7]
or rdi, rax
sete r12b
jmp 0x14000605d
xor r12d, r12d
jmp 0x140006065
mov r12b, 1
mov rcx, rsi
call fcn.140020874
mov qword [rsp + 0x280], 0
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0
lea rdx, str.SoftwareClassesApplications
mov rsi, qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, qword [rsp + 0x280]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 1
lea rdx, str.SoftwareClassesApplicationsupdater.exe
mov rcx, 0xffffffff80000001
xor r8d, r8d
xor r9d, r9d
call rsi
test eax, eax
je 0x140006149
cmp r15d, 5
jl 0x1400061e0
mov rcx, qword [r14 + 0x20]
call fcn.14001f694
cmp rax, 0xffffffffffffffff
je 0x1400061e4
mov rbx, rax
mov rcx, qword [r14 + 0x20]
lea rdx, str._replace
call fcn.140016450
test rax, rax
je 0x1400061f2
mov byte [0x140048139], 1
jmp 0x1400061f2
mov rcx, qword [rsp + 0x280]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, str.IsHostApp
mov rsi, qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, qword [rsp + 0x280]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, str.NoOpenWith
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, qword [rsp + 0x280]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, str.NoStartPage
xor r8d, r8d
xor r9d, r9d
call rsi
mov rcx, qword [rsp + 0x280]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp r15d, 5
jge 0x14000610e
xor ebx, ebx
jmp 0x1400061f2
mov byte [0x1400478f8], 1
mov rbx, 0xffffffffffffffff
mov rcx, qword [r14 + 0x18]
call fcn.14000edb0
test al, al
je 0x140006a7c
mov rdx, qword [r14 + 0x18]
lea rsi, [0x140047900]
mov r8d, 0x104
mov rcx, rsi
call fcn.140022450
mov word [0x140047b06], 0
mov rcx, rsi
mov dx, 0x5c
call fcn.14001639c
test rax, rax
je 0x140006241
cmp word [rax + 2], 0
je 0x1400062dc
cmp r15d, 7
jl 0x1400062eb
mov rcx, qword [r14 + 0x30]
call fcn.14000edb0
test al, al
je 0x140006c4e
lea rsi, [0x140047f30]
mov rcx, rsi
call fcn.140021f88
mov rbp, rax
lea rdi, [rsp + 0x280]
mov r8d, 0x208
mov rcx, rdi
xor edx, edx
call fcn.140015fa0
mov rdx, qword [r14 + 0x30]
mov rcx, rdi
mov r8, rbp
call fcn.140022450
mov rcx, rsi
mov rdx, rdi
call fcn.140021f34
test eax, eax
je 0x1400062eb
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x4e
call fcn.14000af60
mov rcx, rsi
call fcn.1400083f0
mov rsi, qword [r14 + 0x30]
mov ecx, 2
call fcn.140016828
lea rdx, str.The_callback_file_must_be_located_in_the_installation_directory___S__n
jmp 0x140006c81
mov word [rax], 0
cmp r15d, 7
jge 0x14000624b
lea rcx, [rsp + 0xae0]
mov r8d, 0x20a
xor edx, edx
call fcn.140015fa0
cmp byte [0x140048138], 0
je 0x140006331
lea rsi, [0x1400476f0]
mov rcx, rsi
call fcn.14000f4a0
lea rdx, [0x14003d618]
lea r8, [rsp + 0xae0]
mov rcx, rsi
call fcn.14000f300
jmp 0x140006351
lea r8, str._supdate.log
lea r9, [0x1400476f0]
lea rcx, [rsp + 0xae0]
mov edx, 0x105
call fcn.140004260
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007dd3
lea rcx, [0x140048348]
lea rdx, [rsp + 0xae0]
call fcn.14000ec20
lea rcx, str.applying
call fcn.1400083f0
test al, al
je 0x1400063d4
cmp byte [0x1400478f8], 1
jne 0x14000641b
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
lea rsi, str.Performing_a_staged_update
cmp eax, dword [rcx + 4]
jle 0x140006450
jmp 0x140007f18
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007e14
lea rcx, [0x140048348]
lea rdx, str.failed_setting_status_to_applying
call fcn.14000ec80
call fcn.140008500
mov ebx, 1
jmp 0x1400071da
cmp byte [0x140048139], 1
jne 0x14000645f
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
lea rsi, str.Performing_a_replace_request
cmp eax, dword [rcx + 4]
jg 0x140007f18
lea rcx, [0x140048348]
mov rdx, rsi
call fcn.14000ec80
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007e55
lea rcx, [0x140048348]
lea rdx, str.PATCH_DIRECTORY__S
lea r8, [0x1400476f0]
call fcn.14000ec80
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007e96
lea rcx, [0x140048348]
lea rdx, str.INSTALLATION_DIRECTORY__S
lea r8, [0x140047f30]
call fcn.14000ec80
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007ed7
lea rcx, [0x140048348]
lea rdx, str.WORKING_DIRECTORY__S
lea rsi, [0x140047900]
mov r8, rsi
call fcn.14000ec80
lea rbp, [0x140047f30]
mov r8d, 0x104
mov rcx, rsi
mov rdx, rbp
call fcn.14001f1fc
test eax, eax
je 0x1400065a7
cmp byte [0x1400478f8], 0
jne 0x140006551
cmp byte [0x140048139], 0
je 0x140007208
lea r8, [0x14003d1bc]
lea r9, [0x140047900]
lea rsi, [rsp + 0x280]
mov edx, 0x104
mov rcx, rsi
call fcn.140004260
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x140007061
lea rdx, [0x140047f30]
lea rcx, [rsp + 0x280]
mov r8d, 0x104
call fcn.14001f1fc
test eax, eax
jne 0x1400070c5
test rbx, rbx
jle 0x140006619
mov ecx, 0x100000
xor edx, edx
mov r8d, ebx
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x140006619
mov rsi, rax
mov rcx, rax
mov edx, 0x7530
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
je 0x140006619
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007f59
lea rcx, [0x140048348]
lea rdx, str.The_parent_process_didnt_exit__Continuing_with_update.
call fcn.14000ec80
cmp byte [0x140048139], 0
jne 0x14000662b
cmp byte [0x1400478f8], 1
jne 0x140006662
lea rsi, [rsp + 0x280]
mov r8d, 0x20a
mov rcx, rsi
xor edx, edx
call fcn.140015fa0
mov rcx, rsi
mov edx, 0x105
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x140006662
lea rcx, [rsp + 0x280]
call fcn.14001eb08
mov r13, 0xffffffffffffffff
cmp byte [0x140047f28], 0
je 0x1400067ef
cmp byte [0x1400478f8], 1
jne 0x14000668d
lea rcx, [0x140047900]
xor edx, edx
call fcn.1400086f0
cmp byte [0x140048139], 0
jne 0x1400066b4
lea rcx, [0x140047900]
call fcn.14001f4fc
test eax, eax
je 0x1400066b4
call fcn.14001b914
cmp dword [rax], 0x11
jne 0x14000640c
lea rcx, [0x140047900]
lea rdx, [rsp + 0x8d0]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x140006fc3
mov rdi, 0xffffffffffffffff
cmp r15d, 7
jl 0x140006d15
mov rdi, r13
mov r13, rbp
lea rcx, [rsp + 0x690]
mov r12d, 0x208
mov r8d, 0x208
xor edx, edx
call fcn.140015fa0
lea rbp, [r14 + 0x30]
mov rsi, qword [r14 + 0x30]
lea rbx, [rsp + 0x280]
mov r8d, 0x410
mov rcx, rbx
xor edx, edx
call fcn.140015fa0
cmp byte [0x140048139], 1
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x48], rdi
jne 0x14000685f
mov rcx, rsi
mov r14, r13
mov rdx, r13
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
movsxd rsi, eax
mov rdx, qword [rbp]
mov rcx, rbx
mov r8, rsi
call fcn.140022450
lea rdi, [rsp + rsi*2]
add rdi, 0x280
sub r12, rsi
mov r13, rbp
lea rbp, [r14 + rsi*2]
mov rcx, rdi
mov rdx, rbp
mov r8, r12
call fcn.140022450
mov rcx, rbp
call fcn.140021f88
mov dword [rdi + rax*2], 0x5c
lea rdi, [rdi + rax*2]
add rdi, 2
not rax
add r12, rax
lea rbp, [rsp + 0x70]
mov rcx, rbp
mov rdx, r14
call fcn.140021f6c
mov rcx, qword [r13]
mov rdx, rbp
mov rbp, r13
xor r8d, r8d
call qword [sym.imp.SHLWAPI.dll_PathCommonPrefixW]
mov r13, qword [rsp + 0x48]
mov r14, qword [rsp + 0x50]
movsxd rdx, eax
cmp rdx, rsi
cmovb rdx, rsi
add rdx, rdx
add rdx, qword [rbp]
mov rcx, rdi
mov r8, r12
call fcn.140022450
jmp 0x140006865
mov al, byte [0x1400478f8]
cmp r15d, 6
jle 0x140006821
test al, 1
jne 0x140006829
cmp byte [0x140048139], 1
je 0x140006ac8
lea rcx, [rsp + 0x8d0]
mov r9, qword [r14 + 0x30]
lea r8, str._s.update_in_progress.lock
jmp 0x14000683f
test al, 1
je 0x140006ab4
lea r8, str._s_updated.update_in_progress.lock
lea r9, [0x140047f30]
lea rcx, [rsp + 0x8d0]
mov edx, 0x104
jmp 0x140006b07
mov ecx, 2
call fcn.140016828
lea rdx, str.The_patch_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140006c81
mov rbx, rsi
mov r13, rdi
lea rdx, [rsp + 0x690]
mov rcx, rbx
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x14000725e
mov rdi, 0xffffffffffffffff
cmp byte [0x140048139], 0
jne 0x140006d15
mov qword [rsp + 0x68], rbp
lea rcx, [rsp + 0x8d0]
call fcn.140021f88
cdqe
cmp word [rsp + rax*2 + 0x690], 0x5c
lea rcx, [rsp + rax*2 + 0x690]
lea rax, [rsp + rax*2 + 0x692]
cmovne rax, rcx
movzx edx, word [rax]
xor ecx, ecx
lea rbp, [0x140047b10]
mov edi, 0x2f
nop word [rax + rax]
cmp dx, 0x5c
cmove edx, edi
mov word [rcx + rbp], dx
movzx edx, word [rax + rcx + 2]
add rcx, 2
test dx, dx
jne 0x1400068e0
mov word [rcx + rbp], 0
mov rdi, qword [rsp + 0x68]
mov r9, qword [rdi]
lea rcx, [0x140047d20]
lea r8, str._s.moz_callback
mov edx, 0x104
call fcn.140004260
cmp eax, 0x104
jae 0x14000733b
mov rcx, qword [rdi]
lea rdx, [0x140047d20]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x1400073c9
mov qword [rsp + 0x60], r15
mov esi, 1
mov rdi, qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, qword [sym.imp.KERNEL32.dll_GetLastError]
lea r15, [0x140048348]
lea r12, str.NS_main:_callback_app_file_open_attempt__d_failed._File:__S._Last_error:__d
mov r13, qword [sym.imp.KERNEL32.dll_Sleep]
nop word cs:[rax + rax]
nop dword [rax]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
mov rcx, rbx
mov edx, 0x40010000
mov r8d, 6
xor r9d, r9d
call rdi
cmp rax, 0xffffffffffffffff
jne 0x140006c96
call r14
mov ebp, eax
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006a0a
mov dword [rsp + 0x20], ebp
mov rcx, r15
mov rdx, r12
mov r8d, esi
mov r9, rbx
call fcn.14000ec80
mov ecx, 0x64
call r13
add esi, 1
cmp esi, 0xb
jne 0x140006980
jmp 0x140006cb6
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x1400069dc
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x1400069dc
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x4b
call fcn.14000af60
mov rcx, rsi
call fcn.1400083f0
mov rsi, qword [r14 + 0x10]
mov ecx, 2
call fcn.140016828
lea rdx, str.The_install_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140006c81
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x4c
call fcn.14000af60
mov rcx, rsi
call fcn.1400083f0
mov rsi, qword [r14 + 0x18]
mov ecx, 2
call fcn.140016828
lea rdx, str.The_working_directory_path_is_not_valid_for_this_application___S__n
jmp 0x140006c81
mov r13, 0xffffffffffffffff
cmp byte [0x140048139], 1
jne 0x140006696
lea rdx, [0x140047f30]
lea rsi, [rsp + 0x280]
mov rcx, rsi
call fcn.140021f6c
mov rcx, rsi
mov dx, 0x5c
call fcn.14001639c
mov word [rax], 0
lea r8, str._smoz_update_in_progress.lock
lea rcx, [rsp + 0x8d0]
mov edx, 0x104
mov r9, rsi
call fcn.140004260
lea rcx, [rsp + 0x8d0]
call fcn.14001f614
test eax, eax
je 0x140006b2b
call fcn.14001b914
cmp dword [rax], 2
jne 0x140006c30
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0x8d0]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r13, rax
lea rcx, [rsp + 0xcf0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140006b87
lea rdx, str.SeAssignPrimaryTokenPrivilege
mov r8d, 0x22
xor ecx, ecx
call fcn.14000e910
cmp r13, 0xffffffffffffffff
jne 0x140006676
lea rcx, [rsp + 0xcf0]
call fcn.14001f614
test eax, eax
je 0x140006bb0
call fcn.14001b914
cmp dword [rax], 2
jne 0x140006f8b
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 4
lea rcx, [rsp + 0xcf0]
mov edx, 0xc0000000
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140006f8b
mov rbx, rax
lea r8, [r14 + 8]
lea edx, [r15 - 1]
lea rcx, [rsp + 0x58]
call fcn.1400053c0
mov rsi, qword [rsp + 0x58]
test rsi, rsi
jne 0x140007586
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140008500
mov qword [rsp + 0x58], 0
mov ebx, 1
jmp 0x1400071da
cmp byte [0x140048139], 1
jne 0x140006f46
lea rcx, str.pending
call fcn.1400083f0
jmp 0x140006f53
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x4d
call fcn.14000af60
mov rcx, rsi
call fcn.1400083f0
mov rsi, qword [r14 + 0x30]
mov ecx, 2
call fcn.140016828
lea rdx, str.The_callback_file_path_is_not_valid_for_this_application___S__n
mov rcx, rax
mov r8, rsi
call fcn.140005c50
mov ebx, 1
jmp 0x1400071da
mov rdi, rax
mov r15, qword [rsp + 0x60]
mov r14, qword [rsp + 0x50]
mov r13, qword [rsp + 0x48]
cmp byte [0x1400478f8], 0
je 0x140006d1e
jmp 0x140006d6f
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000805d
mov rbx, qword [rsp + 0x68]
mov r8, qword [rbx]
cmp ebp, 0x20
mov r15, qword [rsp + 0x60]
mov r14, qword [rsp + 0x50]
mov r13, qword [rsp + 0x48]
mov rdi, 0xffffffffffffffff
lea rcx, [0x140048348]
jne 0x140007485
lea rdx, str.NS_main:_callback_app_file_in_use__continuing_without_exclusive_access_for_executable_file:__S
call fcn.14000ec80
cmp byte [0x1400478f8], 0
jne 0x140006d6f
cmp byte [0x140048139], 0
jne 0x140006d6f
lea rax, str.tobedeleted
mov qword [rsp + 0x20], rax
lea rsi, [0x140048140]
lea r8, str._s__s
lea r9, [0x140047900]
mov edx, 0x104
mov rcx, rsi
call fcn.140004260
mov rcx, rsi
xor edx, edx
call fcn.14001ea48
test eax, eax
je 0x140006d6f
lea rcx, [0x140048140]
call fcn.14001f4fc
lea rax, [0x140008a10]
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x290], 0
lea rax, [rsp + 0x690]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
lea r8, [0x14000afd0]
lea r9, [rsp + 0x280]
xor ecx, ecx
xor edx, edx
call fcn.14001aa7c
mov qword [rsp + 0x280], rax
test rax, rax
je 0x140006de7
cmp byte [0x1400478f8], 0
jne 0x140006de7
cmp byte [0x140048139], 0
jne 0x140006de7
xor ecx, ecx
mov dl, 1
call fcn.140001ad0
mov rax, qword [rsp + 0x280]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x280]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r15d, 7
jl 0x140006e7a
cmp byte [0x140048139], 0
jne 0x140006e7a
cmp rdi, 0xffffffffffffffff
je 0x140006e21
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x140047d20]
call fcn.14001f614
test eax, eax
je 0x140006e7a
call fcn.14001b914
cmp dword [rax], 2
je 0x140006e7a
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400080df
lea rcx, [0x140048348]
lea rdx, str.NS_main:_non_fatal_error_removing_backup_of_callback_app_file__path:__S
lea r8, [0x140047d20]
call fcn.14000ec80
cmp byte [0x1400478f8], 0
jne 0x14000712e
cmp byte [0x140048139], 0
jne 0x14000712e
lea rcx, [0x140048140]
call fcn.14001f66c
test eax, eax
je 0x14000712e
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007fdb
call fcn.14001b914
mov r9d, dword [rax]
lea rcx, [0x140048348]
lea rdx, str.NS_main:_unable_to_remove_directory:__S__err:__d
lea r8, str.tobedeleted
call fcn.14000ec80
lea rcx, [0x140048140]
xor edx, edx
mov r8d, 4
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
mov esi, eax
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000801c
lea rcx, [0x140048348]
test esi, esi
je 0x14000711b
lea rdx, str.NS_main:_directory_will_be_removed_on_OS_reboot:__S
jmp 0x140007122
cmp byte [0x1400478f8], 1
je 0x140007568
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007f9a
lea rcx, [0x140048348]
lea rdx, str.Update_already_in_progress__Exiting
jmp 0x140006407
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000809e
lea rcx, [0x140048348]
lea rdx, str.Unable_to_create_elevated_lock_file__Exiting
jmp 0x140006407
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x41
call fcn.14000af60
mov rcx, rsi
call fcn.1400083f0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140008120
lea rcx, [0x140048348]
lea rdx, str.NS_main:_unable_to_find_apply_to_dir:__S
lea r8, [0x140047900]
call fcn.14000ec80
call fcn.140008500
cmp r13, 0xffffffffffffffff
je 0x140007034
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcf0]
call fcn.14001f614
test eax, eax
je 0x140007304
call fcn.14001b914
cmp dword [rax], 2
mov ebx, 1
je 0x140007309
jmp 0x1400071da
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x47
call fcn.14000af60
mov rcx, rsi
call fcn.1400083f0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140008161
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140048348]
lea rdx, str.Error_calling_PathRemoveFileSpecW:__d
mov r8d, eax
call fcn.14000ec80
jmp 0x14000640c
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x48
call fcn.14000af60
mov rcx, rsi
call fcn.1400083f0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400081a2
lea rcx, [0x140048348]
lea rdx, str.The_apply_to_directory_must_be_the_same_as_or_a_child_of_the_installation_directory__Exiting.
jmp 0x140006407
lea rdx, str.NS_main:_failed_to_schedule_OS_reboot_removal_of_directory:__S
lea r8, str.tobedeleted
call fcn.14000ec80
call fcn.140008500
cmp r15d, 7
jl 0x1400071d0
cmp byte [0x140047f2a], 1
jne 0x140007188
call fcn.140005760
test al, al
jne 0x140007173
mov ecx, 2
call fcn.140016828
lea rcx, str.The_post_update_process_was_not_launched
mov edx, 0x28
mov r8d, 1
mov r9, rax
call fcn.1400210f8
cmp byte [0x140047f28], 0
jne 0x140007188
lea rcx, [0x140047f30]
call fcn.14000f630
cmp r13, 0xffffffffffffffff
je 0x140007197
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcf0]
call fcn.14001f614
test eax, eax
je 0x1400071b2
call fcn.14001b914
cmp dword [rax], 2
jne 0x1400071d0
mov r9b, byte [0x140047f28]
add r15d, 0xfffffffa
mov rcx, qword [r14 + 0x28]
add r14, 0x30
mov edx, r15d
mov r8, r14
call fcn.140005cc0
movzx ebx, byte [0x140047f2a]
xor ebx, 1
mov rcx, qword [rsp + 0xef8]
xor rcx, rsp
call fcn.140023e80
mov eax, ebx
movaps xmm6, xmmword [rsp + 0xf00]
add rsp, 0xf18
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x4a
call fcn.14000af60
mov rcx, rsi
call fcn.1400083f0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400081e3
lea rcx, [0x140048348]
lea rdx, str.Installation_directory_and_working_directory_must_be_the_same_for_non_staged_updates._Exiting.
jmp 0x140006407
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x42
call fcn.14000af60
mov rcx, rsi
call fcn.1400083f0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140008224
lea rcx, [0x140048348]
lea rdx, str.NS_main:_unable_to_find_callback_file:__S
mov r8, rbx
call fcn.14000ec80
call fcn.140008500
cmp r13, 0xffffffffffffffff
je 0x1400072cb
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcf0]
call fcn.14001f614
test eax, eax
je 0x1400072ea
call fcn.14001b914
cmp dword [rax], 2
jne 0x14000755e
mov r9b, byte [0x140047f28]
add r15d, 0xfffffffa
mov rcx, qword [r14 + 0x28]
mov edx, r15d
mov r8, rbp
jmp 0x140007559
mov ebx, 1
cmp r15d, 7
jl 0x1400071da
mov r9b, byte [0x140047f28]
add r15d, 0xfffffffa
mov rcx, qword [r14 + 0x28]
add r14, 0x30
mov edx, r15d
mov r8, r14
call fcn.140005cc0
mov ebx, 1
jmp 0x1400071da
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 3
call fcn.14000af60
mov rcx, rsi
call fcn.1400083f0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140008265
lea rcx, [0x140048348]
lea rdx, str.NS_main:_callback_backup_path_truncated
call fcn.14000ec80
call fcn.140008500
cmp r13, 0xffffffffffffffff
je 0x1400073a5
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcf0]
call fcn.14001f614
test eax, eax
je 0x14000755e
call fcn.14001b914
mov ebx, 1
jmp 0x1400071da
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor ecx, ecx
cmp eax, 5
setne cl
lea r9d, [rcx + rcx]
add r9d, 0x23
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
call fcn.14000af60
mov rcx, rsi
call fcn.1400083f0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400082a6
mov r8, qword [rdi]
lea rcx, [0x140048348]
lea rdx, str.NS_main:_failed_to_copy_callback_file__S_into_place_at__S
lea r9, [0x140047d20]
call fcn.14000ec80
call fcn.140008500
cmp r13, 0xffffffffffffffff
je 0x14000744d
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcf0]
call fcn.14001f614
test eax, eax
je 0x14000746c
call fcn.14001b914
cmp dword [rax], 2
jne 0x14000755e
mov r9b, byte [0x140047f28]
add r15d, 0xfffffffa
mov rcx, qword [rdi]
mov edx, r15d
mov r8, rdi
jmp 0x140007559
lea rdx, str.NS_main:_callback_app_file_in_use__failed_to_exclusively_open_executable_file:__S
call fcn.14000ec80
xor eax, eax
cmp ebp, 5
setne al
lea r9d, [rax + rax]
add r9d, 0x23
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
call fcn.14000af60
mov rcx, rsi
call fcn.1400083f0
lea rcx, [0x140047d20]
call fcn.14001f614
test eax, eax
mov rsi, rbx
je 0x140007515
call fcn.14001b914
cmp dword [rax], 2
je 0x140007515
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400082e7
lea rcx, [0x140048348]
lea rdx, str.NS_main:_unable_to_remove_backup_of_callback_app_file__path:__S
lea r8, [0x140047d20]
call fcn.14000ec80
call fcn.140008500
cmp r13, 0xffffffffffffffff
je 0x140007529
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xcf0]
call fcn.14001f614
test eax, eax
je 0x140007544
call fcn.14001b914
cmp dword [rax], 2
jne 0x14000755e
mov r9b, byte [0x140047f28]
add r15d, 0xfffffffa
mov rcx, qword [r14 + 0x28]
mov edx, r15d
mov r8, rsi
call fcn.140005cc0
mov ebx, 1
jmp 0x1400071da
lea rsi, [rsp + 0x8a0]
mov rcx, rsi
mov r9d, 0x2c
call fcn.14000af60
mov rcx, rsi
jmp 0x140006c44
test r12b, r12b
je 0x140007682
mov dword [rsp + 0x280], 0
mov rcx, qword [r14]
lea rdx, [rsp + 0x280]
call fcn.14000fd20
test eax, eax
je 0x140007682
cmp dword [rsp + 0x280], 0
je 0x140007682
mov r13, r14
mov r12, r15
lea rcx, [rsp + 0x280]
call fcn.14000fdc0
test eax, eax
je 0x1400075e1
cmp dword [rsp + 0x280], 0
jne 0x1400075fd
lea rcx, [0x140047f30]
lea rdx, [rsp + 0x280]
call fcn.14000da80
test eax, eax
jne 0x140007720
cmp byte [0x1400478f8], 0
mov r15, r12
mov r14, r13
jne 0x14000768b
xorps xmm6, xmm6
movaps xmmword [rsp + 0x80], xmm6
movaps xmmword [rsp + 0x70], xmm6
mov qword [rsp + 0x8d], 0
xor r12d, r12d
lea rdi, [rsp + 0x280]
mov r8d, 0x20a
mov rcx, rdi
xor edx, edx
call fcn.140015fa0
lea rcx, [0x1400476f0]
lea rdx, [0x14003d850]
mov r8, rdi
call fcn.14000f300
test eax, eax
je 0x1400077f1
lea rdx, [0x14003d8bc]
lea rcx, [rsp + 0x280]
call fcn.14001f3d0
test rax, rax
jne 0x1400076eb
xor r12d, r12d
jmp 0x1400077f1
cmp byte [0x1400478f8], 0
je 0x14000760c
lea rdi, [rsp + 0x8a0]
mov rcx, rdi
mov r9d, 0x2b
call fcn.14000af60
mov rcx, rdi
call fcn.1400083f0
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140008328
lea rcx, [0x140048348]
lea rdx, str.Non_critical_update_staging_error__Falling_back_to_non_staged_updates_and_exiting
call fcn.14000ec80
call fcn.140008500
jmp 0x140007dbb
mov rbp, rax
lea rcx, [rsp + 0x70]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140020e34
cmp rax, 1
jne 0x1400077e6
mov byte [rsp + 0x94], 0
mov r12b, 1
jmp 0x1400077e9
mov qword [rsp + 0x690], 0
lea rax, [rsp + 0x690]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x280]
mov rcx, 0xffffffff80000002
xor r8d, r8d
mov r9d, 0x20119
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140007769
mov rcx, qword [rsp + 0x690]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x6a0], xmm0
movaps xmmword [rsp + 0x690], xmm0
mov qword [rsp + 0x6ad], 0
xor r14d, r14d
lea rdi, [rsp + 0x280]
mov r8d, 0x20a
mov rcx, rdi
xor edx, edx
call fcn.140015fa0
lea rcx, [0x1400476f0]
lea rdx, [0x14003d850]
mov r8, rdi
call fcn.14000f300
test eax, eax
je 0x140007a59
lea rdx, [0x14003d8bc]
lea rcx, [rsp + 0x280]
call fcn.14001f3d0
test rax, rax
jne 0x140007a1d
xor r14d, r14d
jmp 0x140007a59
xor r12d, r12d
mov rcx, rbp
call fcn.140020874
lea rdi, [rsp + 0x8a0]
mov rcx, rdi
mov r9d, 0x4f
call fcn.14000af60
mov rcx, rdi
call fcn.1400083f0
movups xmmword [rsp + 0x6e8], xmm6
movups xmmword [rsp + 0x6d8], xmm6
movups xmmword [rsp + 0x6c8], xmm6
movups xmmword [rsp + 0x6b8], xmm6
mov qword [rsp + 0x6f8], 0
movabs rax, 0x54000000070
mov qword [rsp + 0x690], rax
mov qword [rsp + 0x698], 0
mov rax, qword [r14]
mov qword [rsp + 0x6a8], rax
mov qword [rsp + 0x6b0], rsi
lea rax, str.runas
mov qword [rsp + 0x6a0], rax
mov dword [rsp + 0x6c0], 1
lea rcx, [rsp + 0x690]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x1400079f3
mov rcx, qword [rsp + 0x6f8]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x6f8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x140047f29], 1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x8b0], xmm0
movaps xmmword [rsp + 0x8a0], xmm0
mov qword [rsp + 0x8bd], 0
test r12b, r12b
je 0x140007d89
lea rdi, [rsp + 0x280]
mov r8d, 0x20a
mov rcx, rdi
xor edx, edx
call fcn.140015fa0
lea rcx, [0x1400476f0]
lea rdx, [0x14003d850]
mov r8, rdi
call fcn.14000f300
test eax, eax
je 0x140007d89
lea rdx, [0x14003d8bc]
lea rcx, [rsp + 0x280]
call fcn.14001f3d0
test rax, rax
je 0x140007d89
mov rbp, rax
mov r12, r14
mov rdi, r15
lea rcx, [rsp + 0x8a0]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140020e34
cmp rax, 1
jne 0x1400079e0
mov byte [rsp + 0x8c4], 0
mov rcx, rbp
call fcn.140020874
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0x8a0]
mov r8d, 0x25
call fcn.1400217e0
test eax, eax
mov r15, rdi
mov r14, r12
jne 0x140007d89
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140008369
lea rcx, [0x140048348]
lea rdx, str.The_secure_ID_hasnt_changed_after_launching_the_updater_using_runas
call fcn.14000ec80
mov byte [0x140047f29], 0
jmp 0x1400079e8
mov rcx, rbp
call fcn.140020874
mov r15, rdi
mov r14, r12
jmp 0x140007d89
mov byte [0x140047f29], 0
lea rdi, [rsp + 0x8a0]
mov rcx, rdi
mov r9d, 9
call fcn.14000af60
mov rcx, rdi
call fcn.1400083f0
jmp 0x140007d89
mov rbp, rax
lea rcx, [rsp + 0x690]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140020e34
cmp rax, 1
jne 0x140007a4e
mov byte [rsp + 0x6b4], 0
mov r14b, 1
jmp 0x140007a51
xor r14d, r14d
mov rcx, rbp
call fcn.140020874
lea rdi, [rsp + 0x8a0]
mov rcx, rdi
mov r9d, 0x3a
call fcn.14000af60
mov rcx, rdi
call fcn.1400083f0
mov ecx, r12d
mov rdx, r13
call fcn.14000fbb0
test eax, eax
jne 0x140007c6c
cmp byte [0x1400478f8], 0
je 0x140007a97
xor edi, edi
jmp 0x140007aa2
call fcn.140001a10
test eax, eax
sete dil
lea rcx, str.MozillaMaintenance
mov edx, 5
call fcn.14000f980
cmp eax, 1
je 0x140007b41
lea rax, [0x1400086c0]
mov qword [rsp + 0x288], rax
mov qword [rsp + 0x290], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
lea r8, [0x14000afd0]
lea r9, [rsp + 0x280]
xor ecx, ecx
xor edx, edx
call fcn.14001aa7c
mov qword [rsp + 0x280], rax
test rax, rax
je 0x140007b25
xor dil, 1
jne 0x140007b25
mov cl, 1
xor edx, edx
call fcn.140001ad0
mov rax, qword [rsp + 0x280]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x280]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.MozillaMaintenance
mov edx, 1
call fcn.14000f980
cmp eax, 1
jne 0x140007c6c
mov byte [0x140047f29], 1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x8d], 0
test r14b, r14b
je 0x140007c8c
lea rdi, [rsp + 0x280]
mov r8d, 0x20a
mov rcx, rdi
xor edx, edx
call fcn.140015fa0
lea rcx, [0x1400476f0]
lea rdx, [0x14003d850]
mov r8, rdi
call fcn.14000f300
test eax, eax
je 0x140007c8c
lea rdx, [0x14003d8bc]
lea rcx, [rsp + 0x280]
call fcn.14001f3d0
test rax, rax
je 0x140007c8c
mov rbp, rax
lea rcx, [rsp + 0x70]
mov edx, 0x24
mov r8d, 1
mov r9, rax
call fcn.140020e34
cmp rax, 1
jne 0x140007c84
mov byte [rsp + 0x94], 0
mov rcx, rbp
call fcn.140020874
lea rcx, [rsp + 0x690]
lea rdx, [rsp + 0x70]
mov r8d, 0x25
call fcn.1400217e0
test eax, eax
jne 0x140007c8c
mov eax, dword [0x140048558]
mov ecx, dword [0x140045e44]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400083aa
lea rcx, [0x140048348]
lea rdx, str.The_secure_ID_hasnt_changed_after_launching_the_updater_using_the_service
call fcn.14000ec80
mov byte [0x140047f29], 0
jmp 0x140007c8c
cmp byte [0x1400478f8], 1
mov r15, r12
mov r14, r13
jne 0x14000760c
jmp 0x14000768b
mov rcx, rbp
call fcn.140020874
cmp byte [0x1400478f8], 0
mov r15, r12
mov r14, r13
jne 0x140007d89
lea rdi, [rsp + 0x280]
mov r8d, 0x20a
mov rcx, rdi
xor edx, edx
call fcn.140015fa0
lea rcx, [0x1400476f0]
lea rdx, [0x14003d132]
mov r8, rdi
call fcn.14000f300
test eax, eax
je 0x140007d83
lea rdx, [0x14003d8bc]
lea rcx, [rsp + 0x280]
call fcn.14001f3d0
test rax, rax
je 0x140007d83
mov r14, rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x8b0], xmm0
movaps xmmword [rsp + 0x8a0], xmm0
lea rcx, [rsp + 0x8a0]
mov edx, 0x20
mov r8d, 1
mov r9, rax
call fcn.140020e34
movabs rdi, 0x6564656563637573
xor rdi, qword [rsp + 0x8a0]
movzx ebp, byte [rsp + 0x8a8]
xor rbp, 0x64
mov rcx, r14
call fcn.140020874
or rbp, rdi
mov r15, r12
mov r14, r13
jne 0x140007d89
call fcn.140005760
test al, al
jne 0x140007d89
mov ecx, 2
call fcn.140016828
lea rcx, str.The_post_update_process_which_runs_as_the_user_for_service_update_could_not_be_launched.
mov edx, 0x58
mov r8d, 1
mov r9, rax
call fcn.1400210f8
jmp 0x140007d89
mov r15, r12
mov r14, r13
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140008500
cmp r15d, 7
jl 0x140007dbb
mov r9b, byte [0x140047f28]
add r15d, 0xfffffffa
mov rcx, qword [r14 + 0x28]
add r14, 0x30
mov edx, r15d
mov r8, r14
call fcn.140005cc0
mov qword [rsp + 0x58], 0
mov rcx, rsi
call fcn.140013d4c
xor ebx, ebx
jmp 0x1400071da
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x140006376
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x140006376
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x1400063f9
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x1400063f9
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x140006484
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x140006484
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x1400064c3
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x1400064c3
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x140006502
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x140006502
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x140006450
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x140006450
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x140006606
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x140006606
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x140006f78
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x140006f78
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x140006ecd
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x140006ecd
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x140006f2b
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x140006f2b
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x140006cdb
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x140006cdb
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x140006fb0
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x140006fb0
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x140006e60
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x140006e60
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x140007006
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x140007006
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x1400070a4
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x1400070a4
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x140007108
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x140007108
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x14000724b
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x14000724b
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x1400072a1
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x1400072a1
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x14000737e
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x14000737e
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x14000741c
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x14000741c
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x1400074fb
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x1400074fb
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x1400076ce
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x1400076ce
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x1400079c4
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x1400079c4
lea rcx, [0x140048558]
call fcn.140013ec0
cmp dword [0x140048558], 0xffffffff
jne 0x140007c50
mov qword [0x140048348], 0
lea rcx, [0x14000ab80]
call fcn.140014078
lea rcx, [0x140048558]
call fcn.140013f28
jmp 0x140007c50