Function at 0x140006700
Capabilities:
Enumerate gui resources
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1a8
xor ebx, ebx
mov edx, 0x1e8836a
xor ecx, ecx
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdi, rax
mov qword [0x1400284b8], rax
lea rsi, [0x140027a70]
mov r8d, 0xa28
mov rcx, rsi
xor edx, edx
call fcn.140008e30
mov qword [0x140027c80], rdi
lea rax, [rdi + 0x1400000]
mov qword [0x1400284c0], 0x1e8836a
mov qword [0x140028498], rax
vxorps xmm0, xmm0, xmm0
vmovups ymmword [rdi + 0x1400000], ymm0
vmovups ymmword [rdi + 0x1400020], ymm0
vmovups ymmword [rdi + 0x1400040], ymm0
vmovups ymmword [rdi + 0x1400060], ymm0
vmovups ymmword [rdi + 0x1400080], ymm0
vmovups ymmword [rdi + 0x14000a0], ymm0
vmovups ymmword [rdi + 0x14000c0], ymm0
vmovups ymmword [rdi + 0x14000e0], ymm0
vmovups ymmword [rdi + 0x1400100], ymm0
mov qword [rdi + 0x1400010], 0x80
mov word [rdi + 0x1400018], 0x100
lea rcx, [rdi + 0x1408120]
mov qword [0x1400284a0], rcx
mov r8d, 0x220
xor edx, edx
vzeroupper
call fcn.140008e30
mov qword [rdi + 0x1408130], 0x400
mov word [rdi + 0x1408138], 0x200
lea rax, [rdi + 0x1488340]
mov qword [0x1400284a8], rax
vxorps xmm0, xmm0, xmm0
vmovups ymmword [rdi + 0x148834a], ymm0
vmovups ymmword [rdi + 0x1488340], ymm0
mov qword [rdi + 0x1488350], 0x100000
mov word [rdi + 0x1488358], 0xa
vzeroupper
call section..text
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, dword [rsi + rbx*4 + 0x10]
cmp ecx, eax
je 0x14000688e
mov ecx, dword [rsi + rbx*4 + 0x14]
cmp ecx, eax
je 0x14000687f
mov ecx, dword [rsi + rbx*4 + 0x18]
cmp ecx, eax
je 0x140006884
mov ecx, dword [rsi + rbx*4 + 0x1c]
cmp ecx, eax
je 0x14000688a
add rbx, 4
cmp rbx, 0x80
jne 0x140006850
jmp 0x14000689a
inc rbx
jmp 0x14000688e
add rbx, 2
jmp 0x14000688e
add rbx, 3
mov eax, ebx
mov ecx, 0xffffffff
cmp rax, rcx
jne 0x1400068c2
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
movzx ecx, byte [0x140028490]
test cl, cl
je 0x1400068be
mov ecx, dword [0x140028494]
cmp ecx, eax
jne 0x1400068be
lea rdx, [0x140028480]
jmp 0x1400068d1
xor edx, edx
jmp 0x1400068d1
shl rax, 4
lea rdx, [rax + rsi]
add rdx, 0x210
lea rcx, [rsp + 0xb0]
call fcn.140004ed0
vmovdqu xmm0, xmmword [rsp + 0xb0]
vmovdqu xmmword [0x1400284e0], xmm0
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
mov r14, qword [0x1400284e0]
mov rbx, qword [0x1400284e8]
xor edi, edi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
nop dword [rax + rax]
mov ecx, dword [rsi + rdi*4 + 0x10]
cmp ecx, eax
je 0x140006953
mov ecx, dword [rsi + rdi*4 + 0x14]
cmp ecx, eax
je 0x140006944
mov ecx, dword [rsi + rdi*4 + 0x18]
cmp ecx, eax
je 0x140006949
mov ecx, dword [rsi + rdi*4 + 0x1c]
cmp ecx, eax
je 0x14000694f
add rdi, 4
cmp rdi, 0x80
jne 0x140006910
mov eax, 0xffffffff
jmp 0x140006955
inc rdi
jmp 0x140006953
add rdi, 2
jmp 0x140006953
add rdi, 3
mov eax, edi
shl rax, 4
mov r15, qword [rax + rsi + 0x210]
mov r12, qword [rax + rsi + 0x218]
lea rdi, [r15 + r12]
lea rcx, [rbx + r12]
add rcx, 0xb
mov qword [rax + rsi + 0x218], rcx
movabs r13, 0x78652e7365747962
test rbx, rbx
je 0x1400069ce
mov rcx, rdi
mov rdx, r14
mov r8, rbx
call fcn.140008780
mov byte [rdi + rbx], 0x2f
mov qword [rdi + rbx + 1], r13
mov byte [rdi + rbx + 9], 0x65
lea rax, [rbx + 0xa]
mov qword [0x1400284f0], rdi
mov qword [0x1400284f8], rax
cmp rbx, 0xfffffffffffffff7
jl 0x140006e5e
lea rax, [rdi + rbx]
add rax, 0xa
jmp 0x1400069eb
mov qword [rdi], r13
mov byte [rdi + 8], 0x65
mov qword [0x1400284f0], rdi
mov qword [0x1400284f8], 9
lea rax, [rdi + 9]
lea rcx, [r12 + r15]
inc rcx
cmp rax, rcx
cmova rcx, rax
sub rcx, r15
sub rcx, r12
cmp rcx, 0x10
jae 0x140006a0d
mov r8, rdi
jmp 0x140006b7c
cmp rcx, 0x20
jae 0x140006b88
xor edx, edx
mov r9, rcx
and r9, 0xfffffffffffffff0
lea r8, [rdi + r9]
vmovdqa xmm0, xmmword [0x1400193e0]
jmp 0x140006a3d
add rdx, 0x10
cmp r9, rdx
je 0x140006b59
vpcmpeqb xmm1, xmm0, xmmword [rdi + rdx]
vmovd r10d, xmm1
test r10b, 1
je 0x140006a51
mov byte [rdi + rdx], 0x2f
vpextrb r10d, xmm1, 1
test r10b, 1
je 0x140006a62
mov byte [rdi + rdx + 1], 0x2f
vpextrb r10d, xmm1, 2
test r10b, 1
je 0x140006a73
mov byte [rdi + rdx + 2], 0x2f
vpextrb r10d, xmm1, 3
test r10b, 1
je 0x140006a84
mov byte [rdi + rdx + 3], 0x2f
vpextrb r10d, xmm1, 4
test r10b, 1
je 0x140006a95
mov byte [rdi + rdx + 4], 0x2f
vpextrb r10d, xmm1, 5
test r10b, 1
je 0x140006aa6
mov byte [rdi + rdx + 5], 0x2f
vpextrb r10d, xmm1, 6
test r10b, 1
je 0x140006ab7
mov byte [rdi + rdx + 6], 0x2f
vpextrb r10d, xmm1, 7
test r10b, 1
je 0x140006ac8
mov byte [rdi + rdx + 7], 0x2f
vpextrb r10d, xmm1, 8
test r10b, 1
je 0x140006ad9
mov byte [rdi + rdx + 8], 0x2f
vpextrb r10d, xmm1, 9
test r10b, 1
je 0x140006aea
mov byte [rdi + rdx + 9], 0x2f
vpextrb r10d, xmm1, 0xa
test r10b, 1
je 0x140006afb
mov byte [rdi + rdx + 0xa], 0x2f
vpextrb r10d, xmm1, 0xb
test r10b, 1
je 0x140006b0c
mov byte [rdi + rdx + 0xb], 0x2f
vpextrb r10d, xmm1, 0xc
test r10b, 1
je 0x140006b1d
mov byte [rdi + rdx + 0xc], 0x2f
vpextrb r10d, xmm1, 0xd
test r10b, 1
je 0x140006b2e
mov byte [rdi + rdx + 0xd], 0x2f
vpextrb r10d, xmm1, 0xe
test r10b, 1
je 0x140006b3f
mov byte [rdi + rdx + 0xe], 0x2f
vpextrb r10d, xmm1, 0xf
test r10b, 1
je 0x140006a30
mov byte [rdi + rdx + 0xf], 0x2f
jmp 0x140006a30
cmp rcx, r9
jne 0x140006b7c
jmp 0x140006e5e
inc r8
cmp r8, rax
jae 0x140006e5e
cmp byte [r8], 0x5c
jne 0x140006b70
mov byte [r8], 0x2f
jmp 0x140006b70
mov rdx, rcx
and rdx, 0xffffffffffffffe0
xor r8d, r8d
vmovdqa xmm0, xmmword [0x1400193c0]
vmovdqa xmm1, xmmword [0x1400193d0]
jmp 0x140006bbd
add r8, 0x20
cmp rdx, r8
je 0x140006e55
vmovdqu ymm2, ymmword [rdi + r8]
vpcmpeqb xmm3, xmm0, xmmword [rdi + r8]
vmovd r9d, xmm3
test r9b, 1
je 0x140006bd9
mov byte [rdi + r8], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 1
test r9b, 1
je 0x140006bef
mov byte [rdi + r8 + 1], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 2
test r9b, 1
je 0x140006c05
mov byte [rdi + r8 + 2], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 3
test r9b, 1
je 0x140006c1b
mov byte [rdi + r8 + 3], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 4
test r9b, 1
je 0x140006c31
mov byte [rdi + r8 + 4], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 5
test r9b, 1
je 0x140006c47
mov byte [rdi + r8 + 5], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 6
test r9b, 1
je 0x140006c5d
mov byte [rdi + r8 + 6], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 7
test r9b, 1
je 0x140006c73
mov byte [rdi + r8 + 7], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 8
test r9b, 1
je 0x140006c89
mov byte [rdi + r8 + 8], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 9
test r9b, 1
je 0x140006c9f
mov byte [rdi + r8 + 9], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 0xa
test r9b, 1
je 0x140006cb5
mov byte [rdi + r8 + 0xa], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 0xb
test r9b, 1
je 0x140006ccb
mov byte [rdi + r8 + 0xb], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 0xc
test r9b, 1
je 0x140006ce1
mov byte [rdi + r8 + 0xc], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 0xd
test r9b, 1
je 0x140006cf7
mov byte [rdi + r8 + 0xd], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 0xe
test r9b, 1
je 0x140006d0d
mov byte [rdi + r8 + 0xe], 0x2f
vpcmpeqb xmm3, xmm2, xmm0
vpextrb r9d, xmm3, 0xf
test r9b, 1
je 0x140006d23
mov byte [rdi + r8 + 0xf], 0x2f
vextracti128 xmm2, ymm2, 1
vpcmpeqb xmm2, xmm2, xmm1
vmovd r9d, xmm2
test r9b, 1
je 0x140006d3e
mov byte [rdi + r8 + 0x10], 0x2f
vpextrb r9d, xmm2, 1
test r9b, 1
je 0x140006d50
mov byte [rdi + r8 + 0x11], 0x2f
vpextrb r9d, xmm2, 2
test r9b, 1
je 0x140006d62
mov byte [rdi + r8 + 0x12], 0x2f
vpextrb r9d, xmm2, 3
test r9b, 1
je 0x140006d74
mov byte [rdi + r8 + 0x13], 0x2f
vpextrb r9d, xmm2, 4
test r9b, 1
je 0x140006d86
mov byte [rdi + r8 + 0x14], 0x2f
vpextrb r9d, xmm2, 5
test r9b, 1
je 0x140006d98
mov byte [rdi + r8 + 0x15], 0x2f
vpextrb r9d, xmm2, 6
test r9b, 1
je 0x140006daa
mov byte [rdi + r8 + 0x16], 0x2f
vpextrb r9d, xmm2, 7
test r9b, 1
je 0x140006dbc
mov byte [rdi + r8 + 0x17], 0x2f
vpextrb r9d, xmm2, 8
test r9b, 1
je 0x140006dce
mov byte [rdi + r8 + 0x18], 0x2f
vpextrb r9d, xmm2, 9
test r9b, 1
je 0x140006de0
mov byte [rdi + r8 + 0x19], 0x2f
vpextrb r9d, xmm2, 0xa
test r9b, 1
je 0x140006df2
mov byte [rdi + r8 + 0x1a], 0x2f
vpextrb r9d, xmm2, 0xb
test r9b, 1
je 0x140006e04
mov byte [rdi + r8 + 0x1b], 0x2f
vpextrb r9d, xmm2, 0xc
test r9b, 1
je 0x140006e16
mov byte [rdi + r8 + 0x1c], 0x2f
vpextrb r9d, xmm2, 0xd
test r9b, 1
je 0x140006e28
mov byte [rdi + r8 + 0x1d], 0x2f
vpextrb r9d, xmm2, 0xe
test r9b, 1
je 0x140006e3a
mov byte [rdi + r8 + 0x1e], 0x2f
vpextrb r9d, xmm2, 0xf
test r9b, 1
je 0x140006bb0
mov byte [rdi + r8 + 0x1f], 0x2f
jmp 0x140006bb0
cmp rcx, rdx
jne 0x1400073cc
mov r14, qword [0x1400284e0]
mov rdi, qword [0x1400284e8]
xor ebx, ebx
vzeroupper
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
nop word [rax + rax]
mov ecx, dword [rsi + rbx*4 + 0x10]
cmp ecx, eax
je 0x140006ec3
mov ecx, dword [rsi + rbx*4 + 0x14]
cmp ecx, eax
je 0x140006eb4
mov ecx, dword [rsi + rbx*4 + 0x18]
cmp ecx, eax
je 0x140006eb9
mov ecx, dword [rsi + rbx*4 + 0x1c]
cmp ecx, eax
je 0x140006ebf
add rbx, 4
cmp rbx, 0x80
jne 0x140006e80
mov eax, 0xffffffff
jmp 0x140006ec5
inc rbx
jmp 0x140006ec3
add rbx, 2
jmp 0x140006ec3
add rbx, 3
mov eax, ebx
shl rax, 4
mov rcx, qword [rax + rsi + 0x218]
mov rbx, qword [rax + rsi + 0x210]
add rbx, rcx
add rcx, rdi
add rcx, 0xd
mov qword [rax + rsi + 0x218], rcx
test rdi, rdi
je 0x140006f07
mov rcx, rbx
mov rdx, r14
mov r8, rdi
call fcn.140008780
mov byte [rbx + rdi], 0x2f
inc rdi
jmp 0x140006f09
xor edi, edi
movabs rax, 0x642e657461647075
mov qword [rbx + rdi], rax
mov dword [rbx + rdi + 7], 0x61746164
add rdi, 0xb
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0xb8], rdi
lea rcx, [rsp + 0xb0]
call fcn.140005ef0
mov r14d, eax
cmp eax, 0x200
ja 0x140006f53
mov rdx, qword [0x140028498]
jmp 0x140006f79
cmp r14d, 0x1000
ja 0x140006f65
mov rdx, qword [0x1400284a0]
jmp 0x140006f79
cmp r14d, 0xa00000
ja 0x140007346
mov rdx, qword [0x1400284a8]
lea rcx, [rsp + 0xb0]
mov r8, r14
call fcn.140001150
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], 1
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rdi
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0xe0]
call fcn.140004be0
mov r12, qword [rsp + 0xe0]
mov r14d, dword [r12 + 4]
cmp r14, 1
jbe 0x140006ff2
mov dword [rsp + 0x84], 0
lea rbp, str.The_update_data_seems_corrupt_or_unsupported__unsupported_format_version_.
mov eax, 0x4a
mov qword [rsp + 0x30], rax
jmp 0x140007027
movsxd rdx, dword [rsp + 0xec]
lea rax, [0x140019614]
cmp edx, dword [rax + r14*4]
jge 0x140007188
lea rbp, str.The_update_data_is_too_small.
mov eax, 0x1d
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x84], 0
xor r15d, r15d
xor r13d, r13d
lea rdx, [0x140019dbb]
lea rdi, [rsp + 0x188]
mov rcx, rdi
mov r8d, r14d
call fcn.140004760
mov dword [rsp + 0x20], 5
lea rbx, str._u._u._u
lea r14, [rsp + 0x178]
xor r12d, r12d
mov rcx, r14
mov rdx, rbx
xor r8d, r8d
mov r9d, 2
call fcn.140004840
lea rdx, str.Bytes_Updater_v___data_format_version_v_
lea rcx, [rsp + 0x138]
mov r8, r14
mov r9, rdi
call fcn.1400045d0
movzx eax, byte [rsp + 0x84]
movzx r9d, r15b
movzx r8d, r13b
mov dword [rsp + 0x20], eax
lea rdi, [rsp + 0x168]
mov rcx, rdi
mov rdx, rbx
call fcn.140004840
mov qword [rsp + 0x40], rbp
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x48], rax
lea rdx, str.ERROR:_Failed_to_properly_apply_update_v__with_the_following_error:_n_
lea rcx, [rsp + 0x128]
lea r9, [rsp + 0x40]
mov r8, rdi
call fcn.1400045d0
vmovups xmm0, xmmword [rsp + 0x138]
vmovaps xmmword [rsp + 0x40], xmm0
vmovups xmm0, xmmword [rsp + 0x128]
vmovaps xmmword [rsp + 0xf0], xmm0
lea rdx, [0x140019e2d]
lea rcx, [rsp + 0x158]
lea r8, [rsp + 0x40]
lea r9, [rsp + 0xf0]
call fcn.1400045d0
mov edi, dword [rsp + 0x160]
mov rbx, qword [rsp + 0x158]
mov r15, qword [0x1400284e0]
mov r14, qword [0x1400284e8]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
nop word cs:[rax + rax]
mov ecx, dword [rsi + r12*4 + 0x10]
cmp ecx, eax
je 0x1400071d0
mov ecx, dword [rsi + r12*4 + 0x14]
cmp ecx, eax
je 0x1400071c1
mov ecx, dword [rsi + r12*4 + 0x18]
cmp ecx, eax
je 0x1400071c6
mov ecx, dword [rsi + r12*4 + 0x1c]
cmp ecx, eax
je 0x1400071cc
add r12, 4
cmp r12, 0x80
jne 0x140007150
mov eax, 0xffffffff
jmp 0x1400071d3
mov ebp, dword [r12 + 0x14]
movzx r13d, byte [r12 + 8]
movzx r9d, byte [r12 + 9]
movzx r10d, byte [r12 + 0xa]
cmp ebp, 0x20
mov dword [rsp + 0x84], r10d
jle 0x140007389
xor ebp, ebp
mov r15d, r9d
xor eax, eax
mov qword [rsp + 0x30], rax
jmp 0x14000702d
inc r12
jmp 0x1400071d0
add r12, 2
jmp 0x1400071d0
add r12, 3
mov eax, r12d
shl rax, 4
mov rcx, qword [rax + rsi + 0x218]
mov r12, qword [rax + rsi + 0x210]
add r12, rcx
add rcx, r14
add rcx, 0x17
mov qword [rax + rsi + 0x218], rcx
mov qword [rsp + 0x148], r12
test r14, r14
je 0x14000721e
mov rcx, r12
mov rdx, r15
mov r8, r14
call fcn.140008780
mov byte [r12 + r14], 0x2f
inc r14
jmp 0x140007221
xor r14d, r14d
vmovups xmm0, xmmword [str.updater_error_log.txt]
vmovups xmmword [r12 + r14], xmm0
movabs rax, 0x7478742e676f6c5f
mov qword [r12 + r14 + 0xd], rax
add r14, 0x15
mov qword [rsp + 0x150], r14
lea rcx, [rsp + 0x148]
mov rdx, rbx
mov r8d, edi
call fcn.140004d70
mov rax, qword [rsp + 0x140]
test rax, rax
je 0x140007279
mov r8, qword [rsp + 0x138]
mov byte [r8 + rax], 0
jmp 0x14000727c
xor r8d, r8d
mov rax, qword [rsp + 0x130]
test rax, rax
je 0x140007297
mov rdx, qword [rsp + 0x128]
mov byte [rdx + rax], 0
jmp 0x140007299
xor edx, edx
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.USER32.dll_MessageBoxA]
xor edi, edi
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
nop dword [rax]
mov ecx, dword [rsi + rdi*4 + 0x10]
cmp ecx, eax
je 0x1400072f3
mov ecx, dword [rsi + rdi*4 + 0x14]
cmp ecx, eax
je 0x1400072e4
mov ecx, dword [rsi + rdi*4 + 0x18]
cmp ecx, eax
je 0x1400072e9
mov ecx, dword [rsi + rdi*4 + 0x1c]
cmp ecx, eax
je 0x1400072ef
add rdi, 4
cmp rdi, 0x80
jne 0x1400072b0
mov edi, 0xffffffff
jmp 0x1400072f3
inc rdi
jmp 0x1400072f3
add rdi, 2
jmp 0x1400072f3
add rdi, 3
mov ecx, edi
sub ecx, 0x40
lea rdx, [0x140027a78]
cmovb rdx, rsi
mov eax, edi
cmovb ecx, edi
mov r8d, 0xfffffffe
rol r8d, cl
mov dword [rsi + rax*4 + 0x10], 0
movsxd rcx, r8d
nop dword [rax]
mov rax, qword [rdx]
mov r8, rax
and r8, rcx
lock cmpxchg qword [rdx], r8
jne 0x140007320
xor eax, eax
add rsp, 0x1a8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor ecx, ecx
mov rdx, r14
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], r14
mov qword [rsp + 0xc0], 0
mov dword [rsp + 0xc8], 0
jmp 0x140006f89
movsxd rax, dword [r12 + 0xc]
lea rax, [rax + rbp*8]
lea r8, str.The_update_data_seems_corrupt__bad_address_.
cmp rax, rdx
ja 0x1400073b7
movsxd rax, dword [r12 + 0x10]
lea rcx, [rbp*2]
add rcx, rbp
lea rax, [rax + rcx*4]
cmp rax, rdx
jbe 0x1400073dd
mov rbp, r8
mov r15d, r9d
mov eax, 0x2c
mov qword [rsp + 0x30], rax
jmp 0x14000702d
test cl, 0x10
jne 0x140006a19
add rdi, rdx
jmp 0x140006a05
mov qword [rsp + 0x120], rdx
mov dword [rsp + 0x38], r13d
lea rcx, [0x140006040]
xor r15d, r15d
xor edx, edx
mov dword [rsp + 0x3c], r9d
call qword [sym.imp.USER32.dll_EnumWindows]
movsxd rax, dword [r12 + 0xc]
mov qword [rsp + 0xd8], rax
movsxd rax, dword [r12 + 0x10]
mov qword [rsp + 0xd0], rax
vpxor xmm0, xmm0, xmm0
vmovdqa xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], 0
test rbp, rbp
je 0x14000785d
add qword [rsp + 0xd8], r12
add qword [rsp + 0xd0], r12
xor eax, eax
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x118], r12
mov qword [rsp + 0x68], r15
mov eax, r15d
mov rcx, qword [rsp + 0xd8]
movsxd r13, dword [rcx + rax*8]
movsxd r15, dword [rcx + rax*8 + 4]
lea ecx, [r15 + r13]
mov rdx, qword [rsp + 0x120]
cmp ecx, edx
jg 0x1400078be
lea rax, [rax + rax*2]
mov rcx, qword [rsp + 0xd0]
lea rcx, [rcx + rax*4]
mov eax, dword [rcx]
add eax, dword [rcx + 8]
cmp eax, edx
jg 0x1400078be
mov qword [rsp + 0x30], rcx
add r13, r12
mov rax, qword [0x1400284e0]
mov qword [rsp + 0x70], rax
mov rbp, qword [0x1400284e8]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r8, rbp
xor ecx, ecx
nop word cs:[rax + rax]
mov edx, dword [rsi + rcx*4 + 0x10]
cmp edx, eax
je 0x140007523
mov edx, dword [rsi + rcx*4 + 0x14]
cmp edx, eax
je 0x140007514
mov edx, dword [rsi + rcx*4 + 0x18]
cmp edx, eax
je 0x140007519
mov edx, dword [rsi + rcx*4 + 0x1c]
cmp edx, eax
je 0x14000751f
add rcx, 4
cmp rcx, 0x80
jne 0x1400074e0
mov eax, 0xffffffff
jmp 0x140007525
inc rcx
jmp 0x140007523
add rcx, 2
jmp 0x140007523
add rcx, 3
mov eax, ecx
shl rax, 4
mov rcx, qword [rax + rsi + 0x218]
mov rbp, qword [rax + rsi + 0x210]
add rbp, rcx
lea rdx, [r15 + r8]
add rcx, rdx
add rcx, 2
mov qword [rax + rsi + 0x218], rcx
test r8, r8
je 0x140007585
mov rcx, rbp
mov rdx, qword [rsp + 0x70]
mov r12, r14
mov r14, rbp
mov rbp, r8
call fcn.140008780
mov rax, rbp
mov rbp, r14
mov r14, r12
mov r12, qword [rsp + 0x118]
mov byte [rbp + rax], 0x2f
inc rax
jmp 0x140007587
xor eax, eax
lea rcx, [rax + rbp]
mov rdx, r13
mov r8, r15
mov r13, rax
call fcn.140008780
mov r9, r13
add r9, r15
mov r10, qword [rsp + 0x30]
movsxd r15, dword [r10 + 8]
add r15, r12
test r14, r14
je 0x14000766a
cmp r14d, 1
lea r13, [rsp + 0x40]
jne 0x1400077fc
movsxd r8, dword [r10 + 4]
mov eax, dword [r10]
cmp r8d, eax
jle 0x1400077a5
mov qword [rsp + 0x70], r9
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0xa0]
lea rcx, [rsp + 0xf8]
mov qword [rcx + 0x10], rax
vmovaps xmm0, xmmword [rsp + 0x90]
vmovups xmmword [rcx], xmm0
mov rcx, r13
lea rdx, [rsp + 0xf0]
call fcn.140001350
mov r13, qword [rsp + 0x40]
lea rax, [rsp + 0x48]
vmovdqu xmm0, xmmword [rax]
vmovdqa xmmword [rsp + 0x90], xmm0
mov rax, qword [rax + 0x10]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x30]
mov r8d, dword [rax]
mov r9d, dword [rax + 4]
mov rcx, r15
mov rdx, r13
call fcn.140005310
mov r15d, eax
mov rax, qword [rsp + 0x30]
cmp r15d, dword [rax + 4]
je 0x1400076fe
jmp 0x1400078fe
mov qword [rsp + 0x70], r9
movsxd r8, dword [r10 + 4]
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0xa0]
lea rcx, [rsp + 0xf8]
mov qword [rcx + 0x10], rax
vmovaps xmm0, xmmword [rsp + 0x90]
vmovups xmmword [rcx], xmm0
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0xf0]
call fcn.140001350
mov r13, qword [rsp + 0x40]
lea rax, [rsp + 0x48]
vmovdqu xmm0, xmmword [rax]
vmovdqa xmmword [rsp + 0x90], xmm0
mov rax, qword [rax + 0x10]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x30]
mov r8d, dword [rax]
mov rcx, r15
mov rdx, r13
call fcn.140005180
mov r15d, eax
mov rax, qword [rsp + 0x30]
cmp r15d, dword [rax + 4]
jne 0x1400078de
mov qword [rsp + 0x40], rbp
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x40]
mov rdx, r13
mov r8d, r15d
call fcn.140004d70
test al, al
mov qword [rsp + 0x88], r13
jne 0x1400077fc
mov ecx, 0x64
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov qword [rsp + 0x40], rbp
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x40]
mov rdx, r13
mov r8d, r15d
call fcn.140004d70
test al, al
mov rax, rbp
mov rbp, qword [rsp + 0x78]
jne 0x140007801
mov ecx, 0x64
mov qword [rsp + 0x30], rax
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x40]
mov rdx, r13
mov r8d, r15d
call fcn.140004d70
test al, al
jmp 0x140007846
cmp r8d, eax
jne 0x140007916
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], r9
mov rcx, r13
mov rdx, r15
mov r13, r9
call fcn.140004d70
test al, al
jne 0x1400077fc
mov ecx, 0x64
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
mov rax, qword [rsp + 0x30]
mov r8d, dword [rax + 4]
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], r13
lea rcx, [rsp + 0x40]
mov rdx, r15
call fcn.140004d70
test al, al
je 0x140007814
mov rbp, qword [rsp + 0x78]
mov r15, qword [rsp + 0x68]
inc r15d
cmp r15d, ebp
jne 0x140007464
jmp 0x14000785d
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rsp + 0x30]
mov r8d, dword [rax + 4]
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], r13
lea rcx, [rsp + 0x40]
mov rdx, r15
call fcn.140004d70
test al, al
mov rbp, qword [rsp + 0x78]
mov r15, qword [rsp + 0x68]
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
jne 0x140007806
mov ecx, 0x64
call rax
jmp 0x140007806
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rdi
lea rcx, [rsp + 0x40]
call fcn.140007940
vmovups xmm0, xmmword [0x1400284e0]
vmovaps xmmword [rsp + 0x40], xmm0
lea rdx, str.bytes____changelog.txt_
lea rdi, [rsp + 0x198]
lea r8, [rsp + 0x40]
mov rcx, rdi
call fcn.1400045d0
vmovups xmm0, xmmword [0x1400284f0]
vmovaps xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
mov rdx, rdi
xor r8d, r8d
call fcn.140007a00
jmp 0x1400072a4
lea rbp, str.The_update_data_seems_corrupt__bad_address_.
mov eax, 0x2c
mov qword [rsp + 0x30], rax
mov r15d, dword [rsp + 0x3c]
mov r13d, dword [rsp + 0x38]
jmp 0x14000702d
mov eax, 0x36
mov qword [rsp + 0x30], rax
mov r15d, dword [rsp + 0x3c]
mov r13d, dword [rsp + 0x38]
lea rbp, str.The_update_data_seems_corrupt__bad_uncompressed_size_.
jmp 0x14000702d
mov eax, 0x36
mov qword [rsp + 0x30], rax
mov r13d, dword [rsp + 0x38]
lea rbp, str.The_update_data_seems_corrupt__bad_uncompressed_size_.
jmp 0x14000792c
mov eax, 0x52
mov qword [rsp + 0x30], rax
lea rbp, str.The_update_data_seems_corrupt__compressed_size_is_greater_than_uncompressed_size_.
mov r13d, dword [rsp + 0x38]
mov r15d, dword [rsp + 0x3c]
jmp 0x14000702d