Function at 0x140001dc0
Capabilities:
Copy file
Create directory
Enumerate files on windows
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1650]
mov eax, 0x1750
call fcn.140019180
sub rsp, rax
mov rax, qword [0x140028040]
xor rax, rsp
mov qword [rbp + 0x1640], rax
xor r12d, r12d
mov esi, r12d
mov dword [rsp + 0x40], r12d
mov r14d, r12d
mov dword [rsp + 0x48], r12d
lea rdx, str.Update_started..
lea rcx, [rbp + 0x1d0]
call fcn.140007090
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400014a0
nop
lea rcx, [rbp + 0x1d0]
call fcn.140007020
lea rdx, str.tupdates_temp
lea rcx, [rbp + 0x310]
call fcn.140007090
nop
lea rdx, str.tupdates_temp_ready
lea rcx, [rbp + 0x230]
call fcn.140007090
nop
lea rdx, str.tupdates_temp_tdata
lea rcx, [rbp + 0x1f0]
call fcn.140007090
nop
lea rcx, [rbp + 0x230]
call fcn.140006f90
mov rcx, rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r12 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140001ec2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140001ee8
lea rdx, str.tupdates_ready
lea rcx, [rbp + 0x310]
call fcn.140006fa0
lea rdx, str.tupdates_ready_tdata
lea rcx, [rbp + 0x1f0]
call fcn.140006fa0
lea r8, str._version
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0xd0]
call fcn.1400075a0
mov rcx, rax
call fcn.140006f90
mov rcx, rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
lea rcx, [rbp + 0xd0]
call fcn.140007020
cmp rbx, 0xffffffffffffffff
je 0x140002025
mov qword [rsp + 0x20], r12
lea r9, [0x14002a044]
mov r8d, 4
lea rdx, [0x14002a048]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140001ff2
cmp dword [0x14002a044], 4
jne 0x140001ff2
cmp dword [0x14002a048], 0x7fffffff
je 0x140001ff9
mov qword [rsp + 0x20], r12
lea r9, [0x14002a044]
mov r8d, 4
lea rdx, [0x14002a040]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140001ff2
cmp dword [0x14002a044], 4
jne 0x140001ff2
mov r8d, dword [0x14002a040]
cmp r8d, 0x3f
ja 0x140001ff2
mov qword [rsp + 0x20], r12
lea r9, [0x14002a044]
lea rdx, [0x14002a050]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140001ff2
mov eax, dword [0x14002a040]
cmp dword [0x14002a044], eax
je 0x140001ff9
mov dword [0x14002a048], r12d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Version_file_read.
lea rcx, [rbp + 0x1d0]
call fcn.140007090
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400014a0
nop
jmp 0x140002046
lea rdx, str.Could_not_open_version_file_to_update_registry_:_
lea rcx, [rbp + 0x1d0]
call fcn.140007090
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400014a0
nop
lea rcx, [rbp + 0x1d0]
call fcn.140007020
lea rcx, [rsp + 0x50]
call fcn.140006ee0
nop
lea rdx, [rbp + 0x310]
lea rcx, [rsp + 0x50]
call fcn.140006df0
lea rcx, [rsp + 0x78]
call fcn.140006ee0
nop
lea rcx, [rbp - 0x60]
call fcn.140006ee0
nop
lea rcx, [rbp - 0x18]
call fcn.140006ee0
nop
movabs r15, 0x7ffffffffffffffe
lea r13, [0x1400232ac]
mov rdx, qword [rsp + 0x60]
dec rdx
and rdx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax + rdx*8]
lea rcx, [rbp + 0x190]
call fcn.1400070d0
nop
mov rdx, qword [rsp + 0x60]
dec rdx
and rdx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax + rdx*8]
call fcn.140007750
sub qword [rsp + 0x70], 1
jne 0x1400020eb
mov qword [rsp + 0x68], r12
jmp 0x1400020f0
inc qword [rsp + 0x68]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], r12
mov rbx, qword [0x140028ac0]
lea rdi, [0x140028ab0]
cmp qword [0x140028ac8], 7
cmova rdi, qword [0x140028ab0]
cmp rbx, r15
ja 0x140004103
cmp rbx, 7
ja 0x140002153
mov qword [rbp + 0x1c0], rbx
mov qword [rbp + 0x1c8], 7
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x1b0], xmm0
jmp 0x1400021ae
mov rax, rbx
or rax, 7
cmp rax, r15
jbe 0x140002164
mov rax, r15
jmp 0x140002171
cmp rax, 0xa
mov ecx, 0xa
cmovb rax, rcx
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
call fcn.1400080c0
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1c0], rbx
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x1c8], rcx
lea r8, [rbx*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.140019750
nop
mov rdx, qword [rbp + 0x320]
inc rdx
mov rcx, qword [rbp + 0x1a0]
cmp rcx, rdx
jbe 0x140002311
xorps xmm0, xmm0
movups xmmword [rbp + 0x330], xmm0
mov qword [rbp + 0x340], r12
mov qword [rbp + 0x348], r12
sub rcx, rdx
mov r8, 0xffffffffffffffff
cmp rcx, r8
cmovb r8, rcx
lea rax, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 7
cmova rax, qword [rbp + 0x190]
lea rdx, [rax + rdx*2]
lea rcx, [rbp + 0x330]
call fcn.1400077c0
bts esi, 0x1e
lea rdx, [0x140023264]
lea rcx, [rbp + 0x330]
call fcn.1400073a0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
or r14d, 1
mov dword [rsp + 0x48], r14d
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x1b0]
call fcn.140007430
nop
lea rcx, [rbp + 0x30]
call fcn.140007020
nop
mov r8, qword [rbp + 0x348]
cmp r8, 7
jbe 0x14000228b
mov rdx, qword [rbp + 0x330]
call fcn.1400074c0
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp - 0x18]
call fcn.140006df0
lea r8, [rbp + 0x1b0]
lea rdx, str.Parsing_dir_
lea rcx, [rbp + 0x2b0]
call fcn.140007530
nop
lea rdx, [0x140023268]
mov rcx, rax
call fcn.1400073a0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
or esi, 0x80000000
lea rcx, [rbp + 0x30]
call fcn.1400014a0
nop
lea rcx, [rbp + 0x30]
call fcn.140007020
nop
lea rcx, [rbp + 0x2b0]
call fcn.140007020
mov rcx, qword [rbp + 0x1a0]
mov rax, r15
sub rax, rcx
cmp rax, 2
jb 0x1400040fd
lea r9, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 7
cmova r9, qword [rbp + 0x190]
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x390]
call fcn.140007e50
bts esi, 0x12
lea rcx, [rbp + 0x390]
cmp qword [rbp + 0x3a8], 7
cmova rcx, qword [rbp + 0x390]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0x3f0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rdi, rax
mov qword [rbp - 0x38], rax
lea rcx, [rbp + 0x390]
call fcn.140007020
cmp rdi, 0xffffffffffffffff
je 0x140003f68
mov r13, qword [rbp + 0x1a0]
mov rax, r15
sub rax, r13
mov qword [rbp - 0x30], rax
mov rcx, qword [rbp + 0x1a8]
mov qword [rbp - 0x28], rcx
mov rdx, qword [rbp + 0x190]
mov qword [rbp - 0x20], rdx
cmp rax, 1
jb 0x1400041ab
lea r15, [rbp + 0x190]
cmp rcx, 7
cmova r15, rdx
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r12
mov qword [rbp + 0x108], r12
lea r14, [r13 + 1]
mov ebx, 7
lea rdi, [rbp + 0xf0]
cmp r14, rbx
jbe 0x1400024ba
mov rbx, r14
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
jbe 0x140002445
mov rbx, rax
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x140002475
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14000410f
add rcx, rcx
cmp rcx, 0x1000
jb 0x1400024a1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000410f
mov rcx, rax
call fcn.14000968c
test rax, rax
je 0x140004109
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400024b3
test rcx, rcx
je 0x1400024b0
call fcn.14000968c
mov rdi, rax
jmp 0x1400024b3
mov rdi, r12
mov qword [rbp + 0xf0], rdi
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], rbx
lea rbx, [r13*2]
mov r8, rbx
mov rdx, r15
mov rcx, rdi
call fcn.140019750
mov word [rdi + rbx], 0x5c
mov word [rdi + r14*2], r12w
or esi, 0x40
lea rax, [rbp + 0x41c]
mov rdi, 0xffffffffffffffff
nop word [rax + rax]
inc rdi
cmp word [rax + rdi*2], 0
jne 0x140002500
mov r14, qword [rbp + 0x100]
mov rcx, qword [rbp + 0x108]
mov rax, rcx
sub rax, r14
cmp rdi, rax
ja 0x140002567
lea rax, [rdi + r14]
mov qword [rbp + 0x100], rax
lea rbx, [rbp + 0xf0]
cmp rcx, 7
cmova rbx, qword [rbp + 0xf0]
lea rcx, [rbx + r14*2]
lea r8, [rdi + rdi]
lea rdx, [rbp + 0x41c]
call fcn.140019750
lea rax, [r14 + rdi]
mov word [rbx + rax*2], r12w
lea rax, [rbp + 0xf0]
jmp 0x140002582
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x41c]
mov rdx, rdi
lea rcx, [rbp + 0xf0]
call fcn.140007a70
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
or esi, 0x20
mov rdx, qword [rbp + 0x108]
cmp rdx, 7
jbe 0x1400025f9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400025f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004115
call fcn.140009910
mov qword [rbp + 0x100], r12
mov qword [rbp + 0x108], 7
mov word [rbp + 0xf0], r12w
mov r8, qword [rbp + 0x200]
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
mov qword [rbp + 0x2a0], r12
mov qword [rbp + 0x2a8], r12
cmp qword [rbp + 0x20], r8
cmovb r8, qword [rbp + 0x20]
lea rdx, [rbp + 0x10]
cmp qword [rbp + 0x28], 7
cmova rdx, qword [rbp + 0x10]
lea rcx, [rbp + 0x290]
call fcn.1400077c0
or esi, 0x10
or esi, 1
lea rcx, [rbp + 0x1f0]
cmp qword [rbp + 0x208], 7
cmova rcx, qword [rbp + 0x1f0]
lea r8, [rbp + 0x290]
mov r15, qword [rbp + 0x2a8]
cmp r15, 7
seta r12b
mov r10, qword [rbp + 0x290]
cmova r8, r10
mov rdi, qword [rbp + 0x28]
mov r9, qword [rbp + 0x20]
mov r14, qword [rbp + 0x10]
mov rdx, qword [rbp + 0x2a0]
mov r11, qword [rbp + 0x200]
cmp rdx, r11
jne 0x1400026f1
test rdx, rdx
je 0x1400026d4
sub r8, rcx
nop word [rax + rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x1400026f1
add rcx, 2
sub rdx, 1
jne 0x1400026c0
cmp r9, r11
jbe 0x1400026ed
lea rax, [rbp + 0x10]
cmp rdi, 7
cmova rax, r14
cmp word [rax + r11*2], 0x2f
jne 0x1400026f1
mov bl, 1
jmp 0x1400026f3
xor bl, bl
test sil, 1
je 0x140002742
and esi, 0xfffffffe
test r12b, r12b
je 0x140002742
lea rdx, [r15*2 + 2]
mov rax, r10
cmp rdx, 0x1000
jb 0x14000272e
add rdx, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000412d
mov rcx, r10
call fcn.140009910
mov rdi, qword [rbp + 0x28]
mov r9, qword [rbp + 0x20]
mov r14, qword [rbp + 0x10]
test bl, bl
je 0x1400028c9
movabs r15, 0x7ffffffffffffffe
mov rax, r15
sub rax, r9
cmp rax, 0x16
jb 0x140004127
lea rax, [rbp + 0x10]
cmp rdi, 7
cmova rax, r14
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x16
lea r9, str.Skipped_tdata_path_
lea rcx, [rbp + 0x270]
call fcn.140007e50
bts esi, 0xc
mov rcx, qword [rbp + 0x280]
mov rdx, qword [rbp + 0x288]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x1400027e2
lea rax, [rcx + 1]
mov qword [rbp + 0x280], rax
lea rax, [rbp + 0x270]
cmp rdx, 7
cmova rax, qword [rbp + 0x270]
mov dword [rax + rcx*2], 0x27
lea rax, [rbp + 0x270]
jmp 0x140002803
mov qword [rsp + 0x20], 1
lea r9, [0x140022fbc]
mov edx, 1
lea rcx, [rbp + 0x270]
call fcn.140007a70
xor r12d, r12d
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x80], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
bts esi, 0xb
lea rcx, [rbp + 0x70]
call fcn.1400014a0
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 7
jbe 0x14000287a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002874
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000411b
call fcn.140009910
nop
mov rdx, qword [rbp + 0x288]
cmp rdx, 7
jbe 0x14000342a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400028bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004121
call fcn.140009910
jmp 0x14000342a
xorps xmm0, xmm0
xor r12d, r12d
test byte [rbp + 0x3f0], 0x10
je 0x140002bff
movups xmmword [rbp + 0x2d0], xmm0
mov qword [rbp + 0x2e0], r12
mov qword [rbp + 0x2e8], r12
lea r8d, [r12 + 1]
lea rdx, [0x140023380]
lea rcx, [rbp + 0x2d0]
call fcn.1400077c0
nop
or esi, 2
mov dword [rsp + 0x40], esi
lea rcx, [rbp + 0x41c]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140002920
lea r8, [rbp + 0x2d0]
mov r14, qword [rbp + 0x2e8]
cmp r14, 7
seta r15b
mov rdi, qword [rbp + 0x2d0]
cmova r8, rdi
mov rdx, qword [rbp + 0x2e0]
cmp rdx, rax
jne 0x140002992
lea rcx, [rbp + 0x41c]
test rdx, rdx
je 0x140002984
lea rax, [rbp + 0x41c]
sub r8, rax
nop dword [rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140002992
add rcx, 2
sub rdx, 1
jne 0x140002970
mov r9, qword [rbp + 0x228]
xor bl, bl
jmp 0x140002a3a
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r12
mov qword [rbp + 0x228], r12
mov r8d, 2
lea rdx, [0x140023384]
lea rcx, [rbp + 0x210]
call fcn.1400077c0
or esi, 4
lea rcx, [rbp + 0x41c]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400029d4
lea r8, [rbp + 0x210]
mov r9, qword [rbp + 0x228]
cmp r9, 7
cmova r8, qword [rbp + 0x210]
mov rdx, qword [rbp + 0x220]
cmp rdx, rax
jne 0x140002a38
lea rcx, [rbp + 0x41c]
test rdx, rdx
je 0x140002a34
lea rax, [rbp + 0x41c]
sub r8, rax
nop word [rax + rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140002a38
add rcx, 2
sub rdx, 1
jne 0x140002a20
xor bl, bl
jmp 0x140002a3a
mov bl, 1
test sil, 4
je 0x140002a59
and esi, 0xfffffffb
cmp r9, 7
jbe 0x140002a59
mov r8, r9
mov rdx, qword [rbp + 0x210]
call fcn.1400074c0
nop
test sil, 2
je 0x140002a9c
and esi, 0xfffffffd
test r15b, r15b
je 0x140002a9c
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140002a94
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000412d
mov rcx, rdi
call fcn.140009910
test bl, bl
je 0x140003420
mov r8, qword [rsp + 0x70]
lea rax, [r8 + 1]
mov rdx, qword [rsp + 0x60]
cmp rdx, rax
ja 0x140002acb
lea rcx, [rsp + 0x50]
call fcn.140007c50
mov r8, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x60]
lea rcx, [rdx - 1]
mov rax, qword [rsp + 0x68]
and rax, rcx
mov qword [rsp + 0x68], rax
lea rdi, [rax + r8]
and rcx, rdi
lea rbx, [rcx*8]
mov rax, qword [rsp + 0x58]
cmp qword [rbx + rax], 0
jne 0x140002b14
mov ecx, 0x20
call fcn.14000968c
mov rcx, qword [rsp + 0x58]
mov qword [rbx + rcx], rax
mov rdx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x58]
lea rcx, [rdx - 1]
and rcx, rdi
lea rdx, [rbp + 0x10]
mov rcx, qword [rax + rcx*8]
call fcn.1400070d0
inc qword [rsp + 0x70]
movabs r15, 0x7ffffffffffffffe
mov rax, r15
mov rcx, qword [rbp + 0x20]
sub rax, rcx
cmp rax, 0xb
jb 0x140004133
lea rax, [rbp + 0x10]
cmp qword [rbp + 0x28], 7
cmova rax, qword [rbp + 0x10]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xb
lea r9, str.Added_dir_
lea rcx, [rbp + 0x1d0]
call fcn.140007e50
bts esi, 0x10
lea rdx, [0x140023268]
lea rcx, [rbp + 0x1d0]
call fcn.1400073a0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x80], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
bts esi, 0x11
lea rcx, [rbp + 0x70]
call fcn.1400014a0
nop
mov r8, qword [rbp + 0x88]
cmp r8, 7
jbe 0x140002bdd
mov rdx, qword [rbp + 0x70]
call fcn.1400074c0
nop
mov r8, qword [rbp + 0x1e8]
cmp r8, 7
jbe 0x14000342a
mov rdx, qword [rbp + 0x1d0]
call fcn.1400074c0
jmp 0x14000342a
mov rcx, qword [rbp + 0x320]
inc rcx
movups xmmword [rbp + 0x250], xmm0
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x268], r12
cmp r9, rcx
jb 0x1400041a5
sub r9, rcx
mov r8, 0xffffffffffffffff
cmp r9, r8
cmovb r8, r9
lea rax, [rbp + 0x10]
cmp rdi, 7
cmova rax, r14
lea rdx, [rax + rcx*2]
lea rcx, [rbp + 0x250]
call fcn.1400077c0
bts esi, 0xe
lea r14, [0x140028ab0]
mov r8, r14
cmp qword [0x140028ac8], 7
cmova r8, qword [0x140028ab0]
mov r9, qword [0x140028ac0]
lea rcx, [rbp + 0x250]
call fcn.140007fc0
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0xa8], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
bts esi, 0xd
mov rdx, qword [rbp + 0x268]
cmp rdx, 7
jbe 0x140002d0c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d07
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004139
call fcn.140009910
mov qword [rbp + 0x260], r12
mov qword [rbp + 0x268], 7
mov word [rbp + 0x250], r12w
lea rdx, [0x140028af0]
cmp qword [0x140028b08], 7
cmova rdx, qword [0x140028af0]
lea rcx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 7
cmova rcx, qword [rbp + 0x90]
call fcn.14000fdac
test eax, eax
je 0x140003eae
mov rcx, qword [0x140028ac0]
movabs r15, 0x7ffffffffffffffe
mov rax, r15
sub rax, rcx
cmp rax, 0xc
jb 0x14000419f
mov r9, r14
cmp qword [0x140028ac8], 7
cmova r9, qword [0x140028ab0]
mov qword [rsp + 0x30], 0xc
lea rbx, str.Telegram.exe
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x50]
call fcn.140007e50
or esi, 0x8008
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 7
cmova rdx, qword [rbp + 0x50]
lea rcx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 7
cmova rcx, qword [rbp + 0x90]
call fcn.14000fdac
mov r11, qword [0x140028ae8]
mov r10, qword [0x140028ae0]
mov rdi, qword [0x140028ad0]
test eax, eax
jne 0x140002e48
lea r8, [0x140028ad0]
cmp r11, 7
cmova r8, rdi
cmp r10, 0xc
jne 0x14000317d
mov rdx, r10
mov rcx, rbx
test r10, r10
je 0x140002e48
sub r8, rbx
nop dword [rax + rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x14000317d
add rcx, 2
sub rdx, 1
jne 0x140002e30
xor bl, bl
test sil, 8
je 0x140002e71
and esi, 0xfffffff7
lea rcx, [rbp + 0x50]
call fcn.140007020
mov r11, qword [0x140028ae8]
mov r10, qword [0x140028ae0]
mov rdi, qword [0x140028ad0]
test bl, bl
je 0x140003072
mov rcx, qword [0x140028ac0]
mov rax, r15
sub rax, rcx
cmp rax, r10
jb 0x140004145
mov r9, r14
cmp qword [0x140028ac8], 7
cmova r9, qword [0x140028ab0]
lea rax, [0x140028ad0]
cmp r11, 7
cmova rax, rdi
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x70]
call fcn.140007e50
bts esi, 0x16
mov rax, r15
mov rcx, qword [rbp + 0xa0]
sub rax, rcx
cmp rax, 0x16
jb 0x14000413f
lea rax, [rbp + 0x90]
cmp qword [rbp + 0xa8], 7
cmova rax, qword [rbp + 0x90]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x16
lea r9, str.Target_binary_found:_
lea rcx, [rbp + 0x3b0]
call fcn.140007e50
bts esi, 0x17
lea rdx, str.__changing_to_
lea rcx, [rbp + 0x3b0]
call fcn.1400073a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x370], xmm0
mov qword [rbp + 0x380], r12
mov qword [rbp + 0x388], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x370], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x380], xmm1
mov qword [rax + 0x18], 7
mov qword [rax + 0x10], r12
mov word [rax], r12w
bts esi, 0x18
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x370]
call fcn.140007430
xorps xmm0, xmm0
movups xmmword [rbp + 0x350], xmm0
mov qword [rbp + 0x360], r12
mov qword [rbp + 0x368], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x350], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x360], xmm1
mov qword [rax + 0x18], 7
mov qword [rax + 0x10], r12
mov word [rax], r12w
bts esi, 0x19
lea rdx, [0x140022fbc]
lea rcx, [rbp + 0x350]
call fcn.1400073a0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
bts esi, 0x1a
lea rcx, [rbp + 0x30]
call fcn.1400014a0
nop
mov r8, qword [rbp + 0x48]
cmp r8, 7
jbe 0x14000301e
mov rdx, qword [rbp + 0x30]
call fcn.1400074c0
nop
lea rcx, [rbp + 0x350]
call fcn.140007020
nop
lea rcx, [rbp + 0x370]
call fcn.140007020
nop
lea rcx, [rbp + 0x3b0]
call fcn.140007020
lea rdx, [rbp + 0x70]
cmp qword [rbp + 0x88], 7
cmova rdx, qword [rbp + 0x70]
mov r8, qword [rbp + 0x80]
lea rcx, [rbp + 0x90]
call fcn.140007330
nop
lea rcx, [rbp + 0x70]
call fcn.140007020
lea rdx, [rbp + 0x230]
cmp qword [rbp + 0x248], 7
cmova rdx, qword [rbp + 0x230]
lea rcx, [rbp + 0x10]
cmp qword [rbp + 0x28], 7
cmova rcx, qword [rbp + 0x10]
call fcn.14000fdac
test eax, eax
jne 0x140003184
mov rax, r15
mov rcx, qword [rbp + 0x20]
sub rax, rcx
cmp rax, 0x14
jb 0x140004151
lea rax, [rbp + 0x10]
cmp qword [rbp + 0x28], 7
cmova rax, qword [rbp + 0x10]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x14
lea r9, str.Skipped_ready_file_
lea rcx, [rbp + 0x3d0]
call fcn.140007e50
bts esi, 0x13
lea rdx, [0x140022fbc]
lea rcx, [rbp + 0x3d0]
call fcn.1400073a0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
bts esi, 0x14
lea rcx, [rbp + 0x30]
call fcn.1400014a0
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 7
jbe 0x140003171
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000316b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000414b
call fcn.140009910
nop
lea rcx, [rbp + 0x3d0]
jmp 0x1400033d2
mov bl, 1
jmp 0x140002e4a
mov r8, qword [rbp - 0x68]
lea rax, [r8 + 1]
mov rdx, qword [rbp - 0x78]
cmp rdx, rax
ja 0x1400031a7
lea rcx, [rsp + 0x78]
call fcn.140007c50
mov r8, qword [rbp - 0x68]
mov rdx, qword [rbp - 0x78]
lea rcx, [rdx - 1]
mov rax, qword [rbp - 0x70]
and rax, rcx
mov qword [rbp - 0x70], rax
lea rdi, [rax + r8]
mov rax, rdi
and rax, rcx
lea rbx, [rax*8]
mov rax, qword [rbp - 0x80]
cmp qword [rbx + rax], 0
jne 0x1400031ed
mov ecx, 0x20
call fcn.14000968c
mov rcx, qword [rbp - 0x80]
mov qword [rbx + rcx], rax
mov rdx, qword [rbp - 0x78]
mov rax, qword [rbp - 0x80]
lea rcx, [rdx - 1]
and rcx, rdi
lea rdx, [rbp + 0x10]
mov rcx, qword [rax + rcx*8]
call fcn.1400070d0
inc qword [rbp - 0x68]
mov r8, qword [rbp - 0x40]
lea rax, [r8 + 1]
mov rdx, qword [rbp - 0x50]
cmp rdx, rax
ja 0x140003227
lea rcx, [rbp - 0x60]
call fcn.140007c50
mov r8, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x50]
lea rcx, [rdx - 1]
mov rax, qword [rbp - 0x48]
and rax, rcx
mov qword [rbp - 0x48], rax
lea rdi, [rax + r8]
mov rax, rdi
and rax, rcx
lea rbx, [rax*8]
mov rax, qword [rbp - 0x58]
cmp qword [rbx + rax], 0
jne 0x14000326d
mov ecx, 0x20
call fcn.14000968c
mov rcx, qword [rbp - 0x58]
mov qword [rbx + rcx], rax
mov rdx, qword [rbp - 0x50]
mov rax, qword [rbp - 0x58]
lea rcx, [rdx - 1]
and rcx, rdi
lea rdx, [rbp + 0x90]
mov rcx, qword [rax + rcx*8]
call fcn.1400070d0
inc qword [rbp - 0x40]
mov rax, r15
mov rcx, qword [rbp + 0x20]
sub rax, rcx
cmp rax, 0xc
jb 0x140004199
lea rax, [rbp + 0x10]
cmp qword [rbp + 0x28], 7
cmova rax, qword [rbp + 0x10]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xc
lea r9, str.Added_file_
lea rcx, [rbp + 0xd0]
call fcn.140007e50
bts esi, 0x15
lea rdx, str._to_be_copied_to_
lea rcx, [rbp + 0xd0]
call fcn.1400073a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x68], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x18], 7
mov qword [rax + 0x10], r12
mov word [rax], r12w
bts esi, 0x1b
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x50]
call fcn.140007430
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
mov qword [rbp + 0x300], r12
mov qword [rbp + 0x308], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2f0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x300], xmm1
mov qword [rax + 0x18], 7
mov qword [rax + 0x10], r12
mov word [rax], r12w
bts esi, 0x1c
lea rdx, [0x140022fbc]
lea rcx, [rbp + 0x2f0]
call fcn.1400073a0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
bts esi, 0x1d
lea rcx, [rbp + 0x30]
call fcn.1400014a0
nop
lea rcx, [rbp + 0x30]
call fcn.140007020
nop
lea rcx, [rbp + 0x2f0]
call fcn.140007020
nop
lea rcx, [rbp + 0x50]
call fcn.140007020
nop
lea rcx, [rbp + 0xd0]
call fcn.140007020
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 7
jbe 0x14000342a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003419
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004157
call fcn.140009910
jmp 0x14000342a
movabs r15, 0x7ffffffffffffffe
mov rdx, qword [rbp + 0x28]
cmp rdx, 7
jbe 0x14000346a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003465
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000415d
call fcn.140009910
lea rdx, [rbp + 0x3f0]
mov rdi, qword [rbp - 0x38]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
mov rax, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
jne 0x1400023d2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
test eax, eax
je 0x1400034a3
cmp eax, 0x12
jne 0x1400034d8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
lea rcx, [rbp + 0x1b0]
call fcn.140007020
nop
lea rcx, [rbp + 0x190]
call fcn.140007020
cmp qword [rsp + 0x70], 0
je 0x140003511
mov r14d, dword [rsp + 0x48]
jmp 0x140002097
lea rdx, str.Error:_failed_to_find_next_update_file_:_
lea rcx, [rbp + 0xd0]
call fcn.140007090
nop
lea rcx, [rbp + 0xd0]
call fcn.1400014a0
nop
lea rcx, [rbp + 0xd0]
call fcn.140007020
lea rcx, str.Failed_to_find_next_update_file
jmp 0x140003fad
mov rbx, r12
cmp qword [rbp + 8], 0
jbe 0x140003604
nop
mov rdx, rbx
lea rcx, [rbp - 0x18]
call fcn.140006e90
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400070d0
nop
lea r8, [rbp + 0x50]
lea rdx, str.Forcing_dir_
lea rcx, [rbp + 0xd0]
call fcn.140007530
nop
lea r8, [0x140023040]
mov rdx, rax
lea rcx, [rbp + 0x2b0]
call fcn.140007610
nop
mov rcx, rax
call fcn.1400014a0
nop
lea rcx, [rbp + 0x2b0]
call fcn.140007020
nop
lea rcx, [rbp + 0xd0]
call fcn.140007020
cmp qword [rbp + 0x60], 0
je 0x1400035ee
lea rcx, [rbp + 0x50]
call fcn.140006f90
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1400035ee
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
je 0x1400035c0
cmp eax, 0xb7
jne 0x140003685
lea rdx, str.Already_exists_
lea rcx, [rbp + 0xd0]
call fcn.140007090
nop
lea rcx, [rbp + 0xd0]
call fcn.1400014a0
nop
lea rcx, [rbp + 0xd0]
call fcn.140007020
nop
lea rcx, [rbp + 0x50]
call fcn.140007020
inc rbx
cmp rbx, qword [rbp + 8]
jb 0x140003520
mov r13, r12
cmp qword [rbp - 0x68], 0
jbe 0x140003e5f
mov rcx, qword [rbp - 0x70]
add rcx, r13
mov rdx, qword [rbp - 0x78]
dec rdx
and rdx, rcx
mov rax, qword [rbp - 0x80]
mov rdi, qword [rax + rdx*8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r12
mov qword [rbp + 0x128], r12
mov rbx, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 7
jbe 0x140003651
mov rdi, qword [rdi]
cmp rbx, r15
ja 0x140004193
cmp rbx, 7
ja 0x1400036fa
mov qword [rbp + 0x120], rbx
mov qword [rbp + 0x128], 7
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x110], xmm0
jmp 0x140003755
lea r8, [rbp + 0x50]
lea rdx, str.Error:_failed_to_create_dir_
lea rcx, [rbp + 0xd0]
call fcn.140007530
nop
lea r8, [0x140023040]
mov rdx, rax
lea rcx, [rbp + 0x2b0]
call fcn.140007610
nop
mov rcx, rax
call fcn.1400014a0
nop
lea rcx, [rbp + 0x2b0]
call fcn.140007020
nop
lea rcx, [rbp + 0xd0]
call fcn.140007020
mov edx, edi
lea rcx, str.Failed_to_create_directory
call fcn.140001220
call fcn.140001c00
nop
lea rcx, [rbp + 0x50]
call fcn.140007020
xor bl, bl
jmp 0x140003fd5
mov rax, rbx
or rax, 7
cmp rax, r15
jbe 0x14000370b
mov rax, r15
jmp 0x140003718
cmp rax, 0xa
mov ecx, 0xa
cmovb rax, rcx
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
call fcn.1400080c0
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x120], rbx
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0x128], rcx
lea r8, [rbx*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.140019750
nop
mov rcx, qword [rbp - 0x48]
add rcx, r13
mov rdx, qword [rbp - 0x50]
dec rdx
and rdx, rcx
mov rax, qword [rbp - 0x58]
mov rdi, qword [rax + rdx*8]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], r12
mov qword [rbp + 0xc8], r12
mov rbx, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 7
jbe 0x140003794
mov rdi, qword [rdi]
cmp rbx, r15
ja 0x14000418d
cmp rbx, 7
ja 0x1400037c1
mov qword [rbp + 0xc0], rbx
mov qword [rbp + 0xc8], 7
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0xb0], xmm0
jmp 0x14000381c
mov rax, rbx
or rax, 7
cmp rax, r15
jbe 0x1400037d2
mov rax, r15
jmp 0x1400037df
cmp rax, 0xa
mov ecx, 0xa
cmovb rax, rcx
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
call fcn.1400080c0
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xc0], rbx
mov rcx, qword [rsp + 0x40]
mov qword [rbp + 0xc8], rcx
lea r8, [rbx*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.140019750
nop
nop dword [rax]
mov r15, qword [rbp + 0x120]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r15
cmp rax, 0xe
jb 0x140004187
lea r12, [rbp + 0x110]
cmp qword [rbp + 0x128], 7
cmova r12, qword [rbp + 0x110]
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
xor eax, eax
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x188], rax
lea r14, [r15 + 0xe]
mov edi, 7
lea rbx, [rbp + 0x170]
cmp r14, rdi
jbe 0x14000391a
mov rdi, r14
or rdi, 7
cmp rdi, rcx
jbe 0x1400038aa
mov rdi, rcx
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x1400038da
cmp rdi, 0xa
mov ecx, 0xa
cmovb rdi, rcx
lea rcx, [rdi + 1]
movabs rdx, 0x7fffffffffffffff
cmp rcx, rdx
ja 0x140004163
add rcx, rcx
cmp rcx, 0x1000
jb 0x140003906
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004163
mov rcx, rax
call fcn.14000968c
test rax, rax
je 0x14000417b
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140003913
test rcx, rcx
je 0x140003910
call fcn.14000968c
mov rbx, rax
mov qword [rbp + 0x170], rbx
mov qword [rbp + 0x180], r14
mov qword [rbp + 0x188], rdi
movaps xmm0, xmmword [str.Copying_file_]
movups xmmword [rbx], xmm0
movsd xmm0, qword [0x140023690]
movsd qword [rbx + 0x10], xmm0
mov eax, dword [0x140023698]
mov dword [rbx + 0x18], eax
lea rcx, [rbx + 0x1c]
lea r8, [r15 + r15]
mov rdx, r12
call fcn.140019750
xor r12d, r12d
mov word [rbx + r14*2], r12w
bts esi, 8
mov rdi, qword [rbp + 0x180]
mov rcx, qword [rbp + 0x188]
mov rax, rcx
sub rax, rdi
cmp rax, 6
jb 0x1400039c0
lea rax, [rdi + 6]
mov qword [rbp + 0x180], rax
lea rbx, [rbp + 0x170]
cmp rcx, 7
cmova rbx, qword [rbp + 0x170]
lea rcx, [rbx + rdi*2]
lea r8d, [r12 + 0xc]
lea rdx, str._to_
call fcn.140019750
mov word [rbx + rdi*2 + 0xc], r12w
lea rax, [rbp + 0x170]
jmp 0x1400039e1
mov qword [rsp + 0x20], 6
lea r9, str._to_
mov edx, 6
lea rcx, [rbp + 0x170]
call fcn.140007a70
xorps xmm0, xmm0
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x160], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
bts esi, 7
mov rdi, qword [rbp + 0xc0]
lea r9, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 7
cmova r9, qword [rbp + 0xb0]
mov r14, qword [rbp + 0x160]
mov rcx, qword [rbp + 0x168]
mov rax, rcx
sub rax, r14
cmp rdi, rax
ja 0x140003a99
lea rax, [r14 + rdi]
mov qword [rbp + 0x160], rax
lea rbx, [rbp + 0x150]
cmp rcx, 7
cmova rbx, qword [rbp + 0x150]
lea rcx, [rbx + r14*2]
lea r8, [rdi + rdi]
mov rdx, r9
call fcn.140019750
lea rax, [rdi + r14]
mov word [rbx + rax*2], r12w
lea rax, [rbp + 0x150]
jmp 0x140003aad
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp + 0x150]
call fcn.140007a70
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x140], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
bts esi, 9
mov rdi, qword [rbp + 0x140]
mov rcx, qword [rbp + 0x148]
mov rax, rcx
sub rax, rdi
cmp rax, 3
jb 0x140003b4b
lea rax, [rdi + 3]
mov qword [rbp + 0x140], rax
lea rbx, [rbp + 0x130]
cmp rcx, 7
cmova rbx, qword [rbp + 0x130]
lea rcx, [rbx + rdi*2]
mov r8d, 6
lea rdx, [0x140023040]
call fcn.140019750
mov word [rbx + rdi*2 + 6], r12w
lea rax, [rbp + 0x130]
jmp 0x140003b6c
mov qword [rsp + 0x20], 3
lea r9, [0x140023040]
mov edx, 3
lea rcx, [rbp + 0x130]
call fcn.140007a70
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
bts esi, 0xa
lea rcx, [rbp + 0x30]
call fcn.1400014a0
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 7
jbe 0x140003bda
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003bd4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004169
call fcn.140009910
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 7
jbe 0x140003c20
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003c1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000416f
call fcn.140009910
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], 7
mov word [rbp + 0x130], r12w
mov rdx, qword [rbp + 0x168]
cmp rdx, 7
jbe 0x140003c80
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003c7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004175
call fcn.140009910
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x168], 7
mov word [rbp + 0x150], r12w
mov rdx, qword [rbp + 0x188]
cmp rdx, 7
jbe 0x140003ce0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003cdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000417b
call fcn.140009910
mov ebx, r12d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 7
cmova rdx, qword [rbp + 0xb0]
lea rcx, [rbp + 0x110]
cmp qword [rbp + 0x128], 7
cmova rcx, qword [rbp + 0x110]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x140003e2e
inc ebx
lea ecx, [rax + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp ebx, 0x64
jl 0x140003cf0
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], r12
mov r8d, 0x28
lea rdx, str.Error:_failed_to_copy__asking_to_retry..
lea rcx, [rbp + 0x70]
call fcn.1400077c0
nop
lea rcx, [rbp + 0x70]
call fcn.1400014a0
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 7
jbe 0x140003db8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003db3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004181
call fcn.140009910
lea r8, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 7
cmova r8, qword [rbp + 0xb0]
lea rdx, str.Failed_to_update_Telegram_:__n_s_is_not_accessible.
lea rcx, [rbp + 0x640]
call qword [sym.imp.USER32.dll_wsprintfW]
mov r9d, 0x15
lea r8, str.Update_error_
lea rdx, [rbp + 0x640]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 4
je 0x140003820
call fcn.140001c00
nop
lea rcx, [rbp + 0xb0]
call fcn.140007020
nop
lea rcx, [rbp + 0x110]
call fcn.140007020
xor bl, bl
jmp 0x140003fd5
lea rcx, [rbp + 0xb0]
call fcn.140007020
nop
lea rcx, [rbp + 0x110]
call fcn.140007020
inc r13
cmp r13, qword [rbp - 0x68]
jae 0x140003e5f
movabs r15, 0x7ffffffffffffffe
jmp 0x140003612
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x60], xmm1
mov r8d, 0x21
lea rdx, str.Update_succeed__Clearing_folder..
lea rcx, [rbp + 0x50]
call fcn.1400077c0
nop
lea rcx, [rbp + 0x50]
call fcn.1400014a0
nop
mov r8, qword [rbp + 0x68]
cmp r8, 7
jbe 0x140003ea2
mov rdx, qword [rbp + 0x50]
call fcn.1400074c0
call fcn.140001c00
mov bl, 1
jmp 0x140003fd5
lea r8, [rbp + 0x90]
lea rdx, str.Error:_bad_update__has_Updater.exe__
lea rcx, [rbp + 0x3b0]
call fcn.140007530
nop
lea r8, str._equal_
mov rdx, rax
lea rcx, [rbp + 0x3d0]
call fcn.140007610
nop
lea r8, [0x140028af0]
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.1400076f0
nop
lea r8, [0x140022fbc]
mov rdx, rax
lea rcx, [rbp + 0x2b0]
call fcn.140007610
nop
mov rcx, rax
call fcn.1400014a0
nop
lea rcx, [rbp + 0x2b0]
call fcn.140007020
nop
lea rcx, [rbp + 0xd0]
call fcn.140007020
nop
lea rcx, [rbp + 0x3d0]
call fcn.140007020
nop
lea rcx, [rbp + 0x3b0]
call fcn.140007020
call fcn.140001c00
nop
lea rcx, [rbp + 0x90]
call fcn.140007020
nop
lea rcx, [rbp + 0x10]
call fcn.140007020
jmp 0x140003fb9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 3
jne 0x140003f79
mov bl, 1
jmp 0x140003fbb
lea rdx, str.Error:_failed_to_find_update_files_:_
lea rcx, [rbp + 0xd0]
call fcn.140007090
nop
lea rcx, [rbp + 0xd0]
call fcn.1400014a0
nop
lea rcx, [rbp + 0xd0]
call fcn.140007020
lea rcx, str.Failed_to_find_update_files
mov edx, ebx
call fcn.140001220
call fcn.140001c00
xor bl, bl
lea rcx, [rbp + 0x1b0]
call fcn.140007020
nop
lea rcx, [rbp + 0x190]
call fcn.140007020
nop
lea rcx, [rbp - 0x18]
call fcn.140007200
mov rcx, qword [rbp - 0x18]
mov qword [rbp - 0x18], r12
mov edx, 0x10
call fcn.140009910
nop
lea rcx, [rbp - 0x60]
call fcn.140007200
mov rcx, qword [rbp - 0x60]
mov qword [rbp - 0x60], r12
mov edx, 0x10
call fcn.140009910
nop
lea rcx, [rsp + 0x78]
call fcn.140007200
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x78], r12
mov edx, 0x10
call fcn.140009910
nop
lea rcx, [rsp + 0x50]
call fcn.140007200
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x50], r12
mov edx, 0x10
call fcn.140009910
nop
mov r8, qword [rbp + 0x208]
cmp r8, 7
jbe 0x140004064
mov rdx, qword [rbp + 0x1f0]
call fcn.1400074c0
mov qword [rbp + 0x200], r12
mov qword [rbp + 0x208], 7
mov word [rbp + 0x1f0], r12w
mov r8, qword [rbp + 0x248]
cmp r8, 7
jbe 0x140004097
mov rdx, qword [rbp + 0x230]
call fcn.1400074c0
mov qword [rbp + 0x240], r12
mov qword [rbp + 0x248], 7
mov word [rbp + 0x230], r12w
mov r8, qword [rbp + 0x328]
cmp r8, 7
jbe 0x1400040ca
mov rdx, qword [rbp + 0x310]
call fcn.1400074c0
movzx eax, bl
mov rcx, qword [rbp + 0x1640]
xor rcx, rsp
call fcn.1400093d0
lea r11, [rsp + 0x1750]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001200
nop
call fcn.140001200
nop
call fcn.140010394
int3
call fcn.140001160
nop
call fcn.140010394
nop
call fcn.140010394
nop
call fcn.140010394
int3
call fcn.140001200
int3
call fcn.140010394
int3
call fcn.140001200
nop
call fcn.140010394
nop
call fcn.140001200
nop
call fcn.140001200
nop
call fcn.140010394
nop
call fcn.140001200
nop
call fcn.140010394
nop
call fcn.140010394
nop
call fcn.140001160
nop
call fcn.140010394
nop
call fcn.140010394
nop
call fcn.140010394
nop
call fcn.140010394
int3
call fcn.140010394
int3
call fcn.140001200
nop
call fcn.140001200
nop
call fcn.140001200
nop
call fcn.140001200
int3
call fcn.140001200
nop
call fcn.140007510
nop
call fcn.140001200
int3