Function at 0x140005ae0
Capabilities:
Copy file
Create directory
Create process on windows
Read file on windows
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1198
call fcn.1400204d0
sub rsp, rax
mov rax, qword [0x140038010]
xor rax, rsp
mov qword [rsp + 0x1190], rax
cmp ecx, 2
jg 0x140005b48
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400065fa
lea rcx, [0x140039fa8]
lea rdx, str.Not_enough_command_line_arguments_to_execute_a_service_command
jmp 0x140005cca
mov rsi, rdx
mov edi, ecx
lea rbx, [rsp + 0xb40]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140010350
mov rcx, rbx
call fcn.14000d660
mov ebx, eax
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000663b
mov r8, qword [rsi + 0x10]
lea rcx, [0x140039fa8]
test ebx, ebx
je 0x140005bb9
lea rdx, str.Executing_service_command__ls__ID:__ls
lea r9, [rsp + 0xb40]
call fcn.14000bdb0
jmp 0x140005bc5
lea rdx, str.Executing_service_command__ls
call fcn.14000bdb0
mov rcx, qword [rsi + 0x10]
lea rdx, str.software_update
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x140005c36
mov rcx, qword [rsi + 0x10]
lea rdx, str.fix_update_directory_perms
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x140005cd6
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400066bd
mov r8, qword [rsi + 0x10]
lea rcx, [0x140039fa8]
lea rdx, str.Service_command_not_recognized:__ls.
call fcn.14000be30
xor edi, edi
jmp 0x140005dbf
cmp edi, 4
jl 0x140005c97
mov rcx, qword [rsi + 0x20]
call fcn.14000c250
test al, al
je 0x140005c97
lea rbp, [rsi + 0x20]
mov rbx, qword [rbp]
mov rcx, rbx
call fcn.14001787c
cmp rax, 9
ja 0x140005e35
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400069d8
lea rcx, [0x140039fa8]
lea rdx, str.The_patch_directory_path_length_is_not_valid_for_this_application.
jmp 0x140005cca
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400066fe
lea rcx, [0x140039fa8]
lea rdx, str.The_patch_directory_path_is_not_valid_for_this_application.
call fcn.14000be30
xor edi, edi
jmp 0x140005e0f
mov qword [rsp + 0xf80], 0
cmp edi, 3
jg 0x140005d23
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000673f
lea rcx, [0x140039fa8]
lea rdx, str.Didnt_get_an_install_dir_for_fix_update_directory_perms
call fcn.14000be30
xor ecx, ecx
jmp 0x140005d27
mov rcx, qword [rsi + 0x18]
lea rax, [rsp + 0xf80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call fcn.140007f90
test eax, eax
js 0x140005d5c
mov edi, 1
mov rbx, qword [rsp + 0xf80]
jmp 0x140005da6
mov edi, eax
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006780
mov rbx, qword [rsp + 0xf80]
lea rcx, [0x140039fa8]
lea rdx, str.Unable_to_set_the_permissions_on_the_update_directory___S_:__d
mov r8, rbx
mov r9d, edi
call fcn.14000be30
xor edi, edi
mov qword [rsp + 0xf80], 0
test rbx, rbx
je 0x140005dbf
mov rcx, rbx
call fcn.14000e730
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000667c
test edi, edi
lea rax, str.Failure
lea r9, str.Success
cmove r9, rax
mov r8, qword [rsi + 8]
lea rcx, [0x140039fa8]
lea rdx, str.service_command__ls_complete_with_result:__ls.
call fcn.14000bdb0
mov rcx, qword [rsp + 0x1190]
xor rcx, rsp
call fcn.140019770
mov eax, edi
add rsp, 0x1198
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rbx + rax*2]
add rcx, 0xffffffffffffffec
lea rdx, str.updates0
mov r8d, 0xa
call fcn.140015f5c
test eax, eax
je 0x140005e8b
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006a19
lea rcx, [0x140039fa8]
lea rdx, str.The_patch_directory_path_subdirectory_is_not_valid_for_this_application.
jmp 0x140005cca
mov rcx, qword [rbp]
call fcn.14000c9b0
mov rcx, qword [rbp]
call fcn.14000c830
test eax, eax
je 0x140005f7c
cmp edi, 5
jl 0x140005eef
mov rcx, qword [rsi + 0x28]
call fcn.14000c250
test al, al
je 0x140005eef
mov rcx, qword [rsi + 0x28]
call fcn.14000bee0
test al, al
je 0x140005eef
lea r12d, [rdi - 3]
cmp r12d, 4
jne 0x140005fb4
mov rcx, qword [rsi + 0x30]
lea rdx, [0x140031490]
call fcn.140017828
test eax, eax
jne 0x140005fb6
jmp 0x140006161
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006b8e
lea rcx, [0x140039fa8]
lea rdx, str.The_install_directory_path_is_not_valid_for_this_application.
call fcn.14000be30
mov rcx, qword [rbp]
mov edx, 0x37
call fcn.14000d0c0
xor edi, edi
test eax, eax
jne 0x140005e0f
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006ca6
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_for_previous_failure.
call fcn.14000be30
jmp 0x140005e0f
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006bcf
lea rcx, [0x140039fa8]
lea rdx, str.Unable_to_write_to_secure_ID_file.
jmp 0x140005cca
jl 0x140005fec
mov rcx, qword [rsi + 0x30]
lea rdx, str._replace
call fcn.140010628
test rax, rax
jne 0x140006161
mov rbx, qword [rsi + 0x30]
movzx ecx, word [rbx]
test cx, cx
je 0x140006161
add rbx, 2
call fcn.140017500
test eax, eax
jne 0x140005fd3
cmp edi, 6
jl 0x140006068
mov rcx, qword [rsi + 0x30]
call fcn.14000c250
test al, al
je 0x140006068
mov rdx, qword [rsi + 0x28]
mov rcx, qword [rsi + 0x30]
mov r8d, 0x104
call fcn.140015f5c
test eax, eax
je 0x140006161
cmp edi, 7
jge 0x1400060ae
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400071c1
lea rcx, [0x140039fa8]
lea rdx, str.Installation_directory_and_working_directory_must_be_the_same_for_non_staged_updates._Exiting.
call fcn.14000be30
mov rcx, qword [rbp]
mov edx, 0x36
jmp 0x140005f30
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006dbb
lea rcx, [0x140039fa8]
lea rdx, str.The_working_directory_path_is_not_valid_for_this_application.
call fcn.14000be30
mov rcx, qword [rbp]
mov edx, 0x38
jmp 0x140005f30
mov rcx, qword [rsi + 0x38]
lea rdx, [0x140031490]
call fcn.140017828
test eax, eax
je 0x1400060db
mov rcx, qword [rsi + 0x38]
lea rdx, str._replace
call fcn.140010628
test rax, rax
je 0x140006022
mov r9, qword [rsi + 0x30]
lea r14, [rsp + 0xf80]
mov rcx, r14
call fcn.140007de0
mov rcx, r14
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x140006442
mov rdx, qword [rsi + 0x28]
lea rcx, [rsp + 0xf80]
mov r8d, 0x104
call fcn.140015f5c
test eax, eax
je 0x140006161
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400072c5
lea rcx, [0x140039fa8]
lea rdx, str.The_apply_to_directory_must_be_the_same_as_or_a_child_of_the_installation_directory__Exiting.
call fcn.14000be30
mov rcx, qword [rbp]
mov edx, 0x34
jmp 0x1400062c9
lea r14, [rsi + 0x18]
lea rbx, [rsp + 0x930]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140010350
mov ecx, r12d
mov rdx, r14
mov r8, rbx
call fcn.140004f40
test eax, eax
je 0x14000627d
call fcn.14000d3c0
test eax, eax
jne 0x14000631f
lea rcx, [rsp + 0x930]
lea rdx, [rsp + 0xf80]
call fcn.14000ac80
test eax, eax
je 0x1400062c0
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006e3d
lea rcx, [0x140039fa8]
lea rdx, str.Checking_for_Maintenance_Service_registry._key:__ls
lea rbx, [rsp + 0xf80]
mov r8, rbx
call fcn.14000bdb0
mov qword [rsp + 0xd50], 0
lea rax, [rsp + 0xd50]
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
mov rdx, rbx
xor r8d, r8d
mov r9d, 0x20119
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x140006311
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006ebf
lea rcx, [0x140039fa8]
lea rdx, str.The_maintenance_service_registry_key_does_not_exist.
call fcn.14000be30
mov rcx, qword [rbp]
mov edx, 0x39
jmp 0x1400062c9
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006dfc
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_get_the_installation_directory
call fcn.14000be30
mov rcx, qword [rbp]
mov edx, 0x21
jmp 0x1400062c9
mov rcx, qword [rbp]
mov edx, 0x35
call fcn.14000d0c0
test eax, eax
jne 0x14000630a
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006e7e
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_for_previous_failure.
call fcn.14000be30
xor edi, edi
jmp 0x140005e0f
mov rcx, qword [rsp + 0xd50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rbx, [rsp + 0x720]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140010350
lea rdx, [rsp + 0x930]
mov r8d, 0x104
mov rcx, rbx
call fcn.140017d44
lea rdx, str.updater.exe
mov rcx, rbx
call fcn.14000d610
test eax, eax
jne 0x140006398
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007202
lea rcx, [0x140039fa8]
lea rdx, str.Install_directory_updater_could_not_be_determined.
call fcn.14000be30
mov r8, qword [rbp]
lea rcx, [rsp + 0x720]
lea rdx, [rsp + 0x930]
call fcn.140005080
mov ebx, eax
lea rcx, [rsp + 0x510]
mov r8d, 0x20a
xor edx, edx
call fcn.140010350
test bl, bl
je 0x1400064d2
lea rdx, [rsp + 0x510]
xor ecx, ecx
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x140006491
lea rcx, [rsp + 0x510]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
jne 0x1400065a0
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007284
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Couldnt_remove_file_spec_when_attempting_to_use_a_secure_updater_path.____d_
jmp 0x1400064ca
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007306
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Couldnt_remove_file_spec_when_attempting_to_verify_the_working_directory_path.____d_
mov r8d, eax
call fcn.14000be30
mov rcx, qword [rbp]
mov edx, 0x47
jmp 0x1400062c9
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007347
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_obtain_module_filename_when_attempting_to_use_a_secure_updater_path.____d_
mov r8d, eax
call fcn.14000be30
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007180
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_copy_path_to_secure_location.____d_
mov r8d, eax
call fcn.14000be30
mov rcx, qword [rbp]
mov edx, 0x31
call fcn.14000d0c0
xor edi, edi
test eax, eax
jne 0x14000655f
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007243
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_could_not_copy_updater_error
call fcn.14000be30
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000713f
mov r8, qword [rsi + 0x10]
lea rcx, [0x140039fa8]
lea rdx, str.Service_command__ls_complete.
call fcn.14000bdb0
jmp 0x140005dbf
lea rdx, [0x140031206]
lea rcx, [rsp + 0x510]
call fcn.14000d610
test eax, eax
jne 0x1400067c1
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140006a62
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Couldnt_append_file_spec_when_attempting_to_use_a_secure_updater_path.____d_
jmp 0x1400064ca
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005b35
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140005b35
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005b94
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140005b94
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005de4
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140005de4
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005c18
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140005c18
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005cbc
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140005cbc
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005d0c
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140005d0c
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005d83
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140005d83
lea r15, [rsp + 0x510]
mov rcx, r15
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rdx, str.updater.exe
mov rcx, r15
call fcn.14000d610
mov ecx, dword [0x14003a1b8]
mov edx, dword [0x140038cbc]
mov rbx, qword gs:[0x58]
mov rdx, qword [rbx + rdx*8]
mov edx, dword [rdx + 4]
test eax, eax
je 0x140006a5a
cmp ecx, edx
jg 0x140007388
mov r8, qword [r14]
mov qword [rsp + 0x20], r15
lea rcx, [0x140039fa8]
lea rdx, str.Passed_in_path:__ls__ignored___Install_dir_has:__ls__Using_this_path_for_updating:__ls.
lea rbx, [rsp + 0x720]
mov r9, rbx
call fcn.14000bdb0
mov rcx, r15
call fcn.140005930
mov rcx, rbx
mov rdx, r15
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x1400064d2
mov qword [r14], r15
lea rcx, [rsp + 0x300]
mov r8d, 0x20a
xor edx, edx
call fcn.140010350
lea rbx, [rsp + 0xf0]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140010350
lea r8, str.updater.ini
mov rcx, rbx
mov rdx, r15
call fcn.14000c580
test eax, eax
je 0x140006930
lea r8, str.updater.ini
lea rcx, [rsp + 0x300]
lea rdx, [rsp + 0x720]
call fcn.14000c580
test eax, eax
je 0x140006930
lea rcx, [rsp + 0x300]
lea rdx, [rsp + 0xf0]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x140006930
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400074cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_copy_updater.ini_from:__ls_to__ls.____d_
lea r8, [rsp + 0x300]
lea r9, [rsp + 0xf0]
call fcn.14000be30
cmp r12d, 2
ja 0x140006aa3
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400073c9
lea rcx, [0x140039fa8]
lea rdx, str.Not_enough_command_line_parameters_specified._Updating_update.status.
call fcn.14000be30
cmp r12d, 2
jne 0x140006990
mov rcx, qword [rbp]
mov edx, 0x19
call fcn.14000d0c0
xor edi, edi
test eax, eax
jne 0x140006c94
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000740a
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_service_update_failure.____d_
mov r8d, eax
call fcn.14000be30
xor edi, edi
jmp 0x140006c94
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005c87
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140005c87
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005e78
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140005e78
cmp ecx, edx
jle 0x1400065e1
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400065e1
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x1400065e1
lea rbx, [rsp + 0xd50]
mov r8d, 0x20a
mov rcx, rbx
xor edx, edx
call fcn.140010350
mov ecx, r12d
mov rdx, r14
mov r8, rbx
call fcn.140004f40
test eax, eax
je 0x140006c10
mov r8, qword [rbp]
mov rcx, qword [r14]
lea rdx, [rsp + 0xd50]
call fcn.140005080
mov ecx, dword [0x14003a1b8]
mov edx, dword [0x140038cbc]
mov rbx, qword gs:[0x58]
mov rdx, qword [rbx + rdx*8]
mov edx, dword [rdx + 4]
test al, al
jne 0x140006ce7
cmp ecx, edx
jg 0x14000744b
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_start_process_due_to_certificate_check_error_on_updater.exe._Updating_update.status.____d_
mov r8d, eax
call fcn.14000be30
mov rcx, qword [rbp]
mov edx, 0x1a
call fcn.14000d0c0
xor edi, edi
test eax, eax
jne 0x140006c94
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000750e
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_pending_state_to_update.status.____d_
mov r8d, eax
call fcn.14000be30
jmp 0x140006c94
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005f14
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140005f14
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005fa1
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140005fa1
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000748c
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_get_the_installation_directory
call fcn.14000be30
mov rcx, qword [rbp]
mov edx, 0x21
call fcn.14000d0c0
xor edi, edi
test eax, eax
jne 0x140006c94
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000754f
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_for_GetInstallationDir_failure.
call fcn.14000be30
lea rcx, [rsp + 0x510]
call fcn.140005930
jmp 0x14000655f
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140005f64
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140005f64
cmp ecx, edx
jg 0x140007590
lea rcx, [0x140039fa8]
lea rdx, str.Starting_update_process_as_the_service_in_session_0.
call fcn.14000bdb0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], 0
movaps xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x80], 0x68
lea rax, str.winsta0Default
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x20], 0
lea rcx, [rsp + 0x58]
mov edx, r12d
mov r8, r14
xor r9d, r9d
call fcn.1400020d0
cmp r12d, 4
jne 0x140006f00
mov rcx, qword [rsi + 0x30]
lea rdx, [0x140031490]
call fcn.140017828
test eax, eax
jne 0x140006f08
mov r15d, 2
cmp r15d, r12d
jle 0x140006f47
jmp 0x140006f68
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000608d
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x14000608d
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400062a2
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x1400062a2
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400061e2
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x1400061e2
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400062f7
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x1400062f7
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000625f
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x14000625f
mov r15d, 3
jl 0x140006f42
mov rcx, qword [rsi + 0x30]
lea rdx, str._replace
call fcn.140010628
mov r15d, 2
test rax, rax
jne 0x140006f42
mov rbx, qword [rsi + 0x30]
movzx ecx, word [rbx]
test cx, cx
je 0x140006f42
add rbx, 2
call fcn.140017500
test eax, eax
jne 0x140006f27
mov r15d, 3
cmp r15d, r12d
jg 0x140006f68
lea rax, [0x1400314ec]
mov qword [rsp + 0x90], rax
or byte [rsp + 0xbc], 1
mov word [rsp + 0xc0], 0
lea rcx, str.MOZ_USING_SERVICE1
call fcn.1400154b8
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400075d1
mov r8, qword [rsp + 0x58]
lea rcx, [0x140039fa8]
lea rdx, str.Starting_service_with_cmdline:__ls
call fcn.14000bdb0
mov rdx, qword [rsp + 0x58]
mov rcx, qword [r14]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0x4000000
mov dword [rsp + 0x20], 0
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov r15d, eax
test eax, eax
je 0x140007072
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007612
lea rcx, [0x140039fa8]
lea rdx, str.Process_was_started..._waiting_on_result.
call fcn.14000bdb0
mov rcx, qword [rsp + 0x60]
mov edx, 0xdbba0
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x1400070c6
mov rcx, qword [rsp + 0x60]
mov dword [rsp + 0x54], 1
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [rsp + 0x50], 0
xor r12d, r12d
jmp 0x1400076fe
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007653
mov r9, qword [rsp + 0x58]
mov r8, qword [r14]
mov dword [rsp + 0x20], ebx
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_create_process_as_current_user__updaterPath:__ls__cmdLine:__ls.____d_
call fcn.14000be30
xor r12d, r12d
jmp 0x14000798f
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0xf80]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov ebx, eax
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007694
test ebx, ebx
je 0x1400076d8
mov r8d, dword [rsp + 0xf80]
lea rcx, [0x140039fa8]
lea rdx, str.Process_finished_with_return_code__d.
call fcn.14000bdb0
xor r12d, r12d
cmp dword [rsp + 0xf80], 0
sete r12b
mov dword [rsp + 0x50], 0
jmp 0x1400076f6
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006584
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140006584
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400064f7
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x1400064f7
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006047
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140006047
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006385
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140006385
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000654c
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x14000654c
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006429
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140006429
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006140
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140006140
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006467
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140006467
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400064b6
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x1400064b6
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006812
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140006812
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000695f
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x14000695f
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400069b5
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x1400069b5
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006b14
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140006b14
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006c35
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140006c35
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006903
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140006903
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006b6d
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140006b6d
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006c81
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140006c81
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006cef
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140006cef
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140006f99
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140006f99
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007020
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140007020
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000709f
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x14000709f
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007100
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
test ebx, ebx
jne 0x140007108
lea rcx, [0x140039fa8]
lea rdx, str.Process_finished_but_could_not_obtain_return_code.
call fcn.14000be30
xor r12d, r12d
mov dword [rsp + 0x50], 1
mov dword [rsp + 0x54], 0
mov rcx, qword [rsp + 0x60]
mov rbx, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rbx
mov rcx, qword [rsp + 0x68]
call rbx
mov rbx, qword [rbp]
lea r14, [rsp + 0xf80]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call fcn.140010350
lea rdx, str..status
mov rcx, rbx
mov r8, r14
call fcn.14000c7a0
test eax, eax
je 0x1400077f0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
lea rcx, [rsp + 0xf80]
mov edx, 0x80000000
mov r8d, 7
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14000782d
xorps xmm0, xmm0
movaps xmmword [rsp + 0xf70], xmm0
movaps xmmword [rsp + 0xf60], xmm0
mov qword [rsp + 0x20], 0
lea rdx, [rsp + 0xf60]
lea r9, [rsp + 0xec]
mov rcx, r14
mov r8d, 0x20
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140007862
movabs rax, 0x676e69796c707061
xor ebx, ebx
cmp qword [rsp + 0xf60], rax
sete bl
mov r13d, 1
jmp 0x14000789f
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007c15
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_get_path_for_the_secure_update_status_file
call fcn.14000be30
jmp 0x14000798f
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007c97
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_open_update.status_file
jmp 0x140007895
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007cd8
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_read_from_update.status_file
call fcn.14000be30
xor ebx, ebx
xor r13d, r13d
mov rax, r14
add rax, 1
cmp rax, 2
jb 0x1400078b5
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x14000798f
test r13d, r13d
je 0x14000798f
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007c56
lea rcx, [0x140039fa8]
test r12d, r12d
je 0x140007950
lea rdx, str.update.status_is_still_applying_even_though_update_was_successful.
call fcn.14000bdb0
mov rcx, qword [rbp]
mov edx, 0x1d
call fcn.14000d0c0
xor r12d, r12d
test eax, eax
jne 0x14000798f
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007d5a
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_still_applying_on_success_error.
jmp 0x140007823
lea rdx, str.update.status_is_still_applying_and_update_was_not_successful.
call fcn.14000be30
cmp dword [rsp + 0x54], 0
mov eax, 0x1e
mov ecx, 0x32
cmove ecx, eax
cmp dword [rsp + 0x50], 0
mov edx, 0x33
cmove edx, ecx
mov rcx, qword [rbp]
call fcn.14000d0c0
xor r12d, r12d
test eax, eax
je 0x140007a65
lea rcx, str.MOZ_USING_SERVICE
call fcn.1400154b8
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x58], 0
test rcx, rcx
je 0x1400079b3
call fcn.14000e730
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007a9d
test r12d, r12d
je 0x140007ae2
lea rcx, [0x140039fa8]
lea rdx, str.updater.exe_was_launched_and_run_successfully_
call fcn.14000bdb0
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007b93
mov rcx, qword [0x140039fa8]
test rcx, rcx
je 0x140007a2a
call fcn.140016314
cmp edi, 8
je 0x140007a3a
cmp edi, 7
jne 0x140007a4e
mov rcx, qword [rsi + 0x30]
jmp 0x140007a3e
mov rcx, qword [rsi + 0x38]
lea rdx, [0x140031490]
call fcn.140017828
test eax, eax
je 0x140007a5b
lea rcx, [rsp + 0xd50]
call fcn.14000cb40
mov edi, 1
jmp 0x140006c94
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007d9b
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_still_applying_on_failure_error.
jmp 0x140007823
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400079d8
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
test r12d, r12d
jne 0x1400079e1
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Error_running_update_process._Updating_update.status____d_
mov r8d, eax
call fcn.14000be30
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007bd4
mov rcx, qword [0x140039fa8]
test rcx, rcx
je 0x140007b34
call fcn.140016314
xor edi, edi
test r15d, r15d
jne 0x140006c94
mov rcx, qword [rbp]
mov edx, 0x18
call fcn.14000d0c0
test eax, eax
jne 0x140006c94
mov eax, dword [0x14003a1b8]
mov ecx, dword [0x140038cbc]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140007d19
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140039fa8]
lea rdx, str.Could_not_write_update.status_service_update_failure.____d_
jmp 0x140006b81
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007a19
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140007a19
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007b23
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140007b23
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007815
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140007815
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x1400078eb
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x1400078eb
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007852
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140007852
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007887
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140007887
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007b7a
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140007b7a
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x14000793d
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x14000793d
lea rcx, [0x14003a1b8]
call fcn.14000e8a0
cmp dword [0x14003a1b8], 0xffffffff
jne 0x140007a8a
mov qword [0x140039fa8], 0
lea rcx, [0x140002090]
call fcn.14000ea58
lea rcx, [0x14003a1b8]
call fcn.14000e908
jmp 0x140007a8a