Function at 0x140002c60
Capabilities:
Copy file
Create directory
Enumerate files on windows
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1260]
mov eax, 0x1360
call fcn.140008f50
sub rsp, rax
mov rax, qword [0x1400260e0]
xor rax, rsp
mov qword [rbp + 0x1250], rax
xor edi, edi
mov eax, edi
mov dword [rsp + 0x44], eax
mov dword [rsp + 0x58], eax
lea rdx, str.Update_started..
lea rcx, [rbp + 0x128]
call fcn.140001610
nop
lea rcx, [rbp + 0x128]
call fcn.140005350
nop
lea rcx, [rbp + 0x128]
call fcn.140001cb0
lea rdx, str.tupdates_temp
lea rcx, [rbp + 0x208]
call fcn.140001610
nop
lea rdx, str.tupdates_temp_ready
lea rcx, [rbp + 0x1e8]
call fcn.140001610
nop
lea rdx, str.tupdates_temp_tdata
lea rcx, [rbp + 0x148]
call fcn.140001610
nop
lea rcx, [rbp + 0x1e8]
call fcn.1400023c0
mov rcx, rax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [rdi + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140002d5a
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140002d80
lea rdx, str.tupdates_ready
lea rcx, [rbp + 0x208]
call fcn.1400019e0
lea rdx, str.tupdates_ready_tdata
lea rcx, [rbp + 0x148]
call fcn.1400019e0
lea r8, str._version
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0xe8]
call fcn.1400011b0
mov rcx, rax
call fcn.1400023c0
mov rcx, rax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
lea rcx, [rbp + 0xe8]
call fcn.140001cb0
cmp rbx, 0xffffffffffffffff
je 0x140002ebc
mov qword [rsp + 0x20], rdi
lea r9, [0x140026ce0]
mov r8d, 4
lea rdx, [0x140026cd8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140002e8a
cmp dword [0x140026ce0], 4
jne 0x140002e8a
cmp dword [0x140026cd8], 0x7fffffff
je 0x140002e90
mov qword [rsp + 0x20], rdi
lea r9, [0x140026ce0]
mov r8d, 4
lea rdx, [0x140026cdc]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140002e8a
cmp dword [0x140026ce0], 4
jne 0x140002e8a
mov r8d, dword [0x140026cdc]
cmp r8d, 0x3f
ja 0x140002e8a
mov qword [rsp + 0x20], rdi
lea r9, [0x140026ce0]
lea rdx, [0x140026cf0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140002e8a
mov eax, dword [0x140026cdc]
cmp dword [0x140026ce0], eax
je 0x140002e90
mov dword [0x140026cd8], edi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Version_file_read.
lea rcx, [rbp + 0x128]
call fcn.140001610
nop
lea rcx, [rbp + 0x128]
call fcn.140005350
nop
jmp 0x140002edd
lea rdx, str.Could_not_open_version_file_to_update_registry_:_
lea rcx, [rbp + 0x128]
call fcn.140001610
nop
lea rcx, [rbp + 0x128]
call fcn.140005350
nop
lea rcx, [rbp + 0x128]
call fcn.140001cb0
lea rcx, [rsp + 0x78]
call fcn.140001730
nop
lea rdx, [rbp + 0x208]
lea rcx, [rsp + 0x78]
call fcn.140002b70
lea rcx, [rbp - 0x60]
call fcn.140001730
nop
lea rcx, [rbp - 0x38]
call fcn.140001730
nop
lea rcx, [rbp]
call fcn.140001730
nop
lea rax, str.Telegram.exe
mov qword [rbp - 0x10], rax
movzx ebx, byte [rsp + 0x40]
movzx r12d, byte [rsp + 0x40]
movzx edi, byte [rsp + 0x40]
movzx r13d, byte [rsp + 0x40]
movzx r15d, byte [rsp + 0x40]
movzx r14d, byte [rsp + 0x40]
movzx esi, byte [rsp + 0x40]
lea rcx, [rsp + 0x78]
call fcn.140002600
mov rdx, rax
lea rcx, [rbp + 0xc8]
call fcn.140001570
nop
lea rcx, [rsp + 0x78]
call fcn.140002b30
lea rdx, [0x140026048]
lea rcx, [rbp + 0x1c8]
call fcn.140001570
nop
mov r8, qword [rbp + 0x218]
inc r8
mov rcx, qword [rbp + 0xd8]
cmp rcx, r8
jbe 0x14000306d
mov r9, 0xffffffffffffffff
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0xc8]
call fcn.140002c00
nop
lea r8, [0x1400198f4]
mov rdx, rax
lea rcx, [rbp + 0xe8]
call fcn.1400010d0
nop
mov rdx, rax
lea rcx, [rbp + 0x1c8]
call fcn.140001a40
nop
lea rcx, [rbp + 0xe8]
call fcn.140001cb0
nop
lea rcx, [rbp + 0x108]
call fcn.140001cb0
lea rdx, [rbp + 0x1c8]
lea rcx, [rbp]
call fcn.140002b70
lea r8, [rbp + 0x1c8]
lea rdx, str.Parsing_dir_
lea rcx, [rbp + 0x108]
call fcn.140001220
nop
lea r8, [0x1400198f8]
mov rdx, rax
lea rcx, [rbp + 0xe8]
call fcn.1400010d0
nop
mov rcx, rax
call fcn.140005350
nop
lea rcx, [rbp + 0xe8]
call fcn.140001cb0
nop
lea rcx, [rbp + 0x108]
call fcn.140001cb0
mov rcx, qword [rbp + 0xd8]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 2
jb 0x140004a94
lea r9, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 8
cmovae r9, qword [rbp + 0xc8]
mov qword [rsp + 0x30], 2
lea rax, [0x14001993c]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0xc8]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x108]
call fcn.140001650
or dword [rsp + 0x44], 0x40000
lea rcx, [rbp + 0x108]
cmp qword [rbp + 0x120], 8
cmovae rcx, qword [rbp + 0x108]
xor eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rbp + 0x250]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov qword [rsp + 0x70], rax
lea rcx, [rbp + 0x108]
call fcn.140001cb0
cmp qword [rsp + 0x70], 0xffffffffffffffff
je 0x14000499f
movabs r8, 0x7ffffffffffffffe
mov rax, r8
mov rcx, qword [rbp + 0xd8]
sub rax, rcx
mov qword [rbp - 8], rax
jmp 0x14000315a
movabs r8, 0x7ffffffffffffffe
cmp rax, 1
jb 0x140004a8e
lea rax, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 8
cmovae rax, qword [rbp + 0xc8]
mov qword [rsp + 0x68], rax
xor eax, eax
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x98], rax
mov qword [rbp + 0xa0], rax
lea rdx, [rcx + 1]
mov qword [rsp + 0x50], rdx
mov eax, 7
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x60], rcx
cmp rdx, rax
jbe 0x140003202
mov rax, rdx
or rax, 7
cmp rax, r8
jbe 0x1400031c7
mov rax, r8
jmp 0x1400031d4
cmp rax, 0xa
mov ecx, 0xa
cmovb rax, rcx
mov qword [rsp + 0x58], rax
lea rdx, [rax + 1]
lea rcx, [rbp + 0x88]
call fcn.140002190
mov rcx, rax
mov qword [rsp + 0x60], rax
mov qword [rbp + 0x88], rax
mov rax, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
mov qword [rbp + 0x98], rdx
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xd8]
lea r8, [rax + rax]
mov rdx, qword [rsp + 0x68]
call fcn.14000aaf0
mov rax, qword [rsp + 0x60]
mov rcx, qword [rbp + 0xd8]
mov dword [rax + rcx*2], 0x5c
or dword [rsp + 0x44], 0x40
lea rax, [rbp + 0x27c]
mov rdx, 0xffffffffffffffff
nop dword [rax + rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x140003250
mov qword [rsp + 0x68], rdx
mov rcx, qword [rbp + 0x98]
mov qword [rsp + 0x50], rcx
mov r8, qword [rbp + 0xa0]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x1400032d2
lea rax, [rdx + rcx]
mov qword [rbp + 0x98], rax
lea rax, [rbp + 0x88]
cmp r8, 8
cmovae rax, qword [rbp + 0x88]
mov qword [rsp + 0x60], rax
lea rcx, [rax + rcx*2]
lea r8, [rdx + rdx]
lea rdx, [rbp + 0x27c]
call fcn.14000aaf0
mov rax, qword [rsp + 0x50]
add rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
xor edx, edx
mov word [rcx + rax*2], dx
lea rax, [rbp + 0x88]
jmp 0x1400032ee
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x27c]
movzx r8d, bl
lea rcx, [rbp + 0x88]
call fcn.140001290
xor ecx, ecx
mov qword [rbp + 0x28], rcx
mov qword [rbp + 0x38], rcx
mov qword [rbp + 0x40], rcx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x38], xmm1
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 7
mov word [rax], cx
or dword [rsp + 0x44], 0x20
mov rdx, qword [rbp + 0xa0]
cmp rdx, 8
jb 0x140003367
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003360
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004a9a
call fcn.140008948
xor ecx, ecx
mov qword [rbp + 0x98], rcx
mov qword [rbp + 0xa0], 7
mov word [rbp + 0x88], cx
mov r8, qword [rbp + 0x158]
mov qword [rbp + 0x48], rcx
mov qword [rbp + 0x58], rcx
mov qword [rbp + 0x60], 7
mov word [rbp + 0x48], cx
cmp qword [rbp + 0x38], r8
cmovb r8, qword [rbp + 0x38]
lea rdx, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rdx, qword [rbp + 0x28]
lea rcx, [rbp + 0x48]
call fcn.140002290
mov r9d, dword [rsp + 0x44]
or r9d, 0x10
or r9d, 1
mov dword [rsp + 0x44], r9d
lea rax, [rbp + 0x148]
cmp qword [rbp + 0x160], 8
cmovae rax, qword [rbp + 0x148]
lea r10, [rbp + 0x48]
cmp qword [rbp + 0x60], 8
setae byte [rsp + 0x40]
mov rcx, qword [rbp + 0x48]
mov qword [rsp + 0x68], rcx
cmovae r10, rcx
mov r11, qword [rbp + 0x38]
mov r8, qword [rbp + 0x58]
mov rcx, qword [rbp + 0x158]
cmp r8, rcx
jne 0x14000344e
test r8, r8
je 0x140003597
movzx ecx, word [r10]
movzx edx, word [rax]
cmp cx, dx
jb 0x14000344e
sub r10, rax
cmp cx, dx
ja 0x14000344e
cmp r8, 1
je 0x140003590
dec r8
add rax, 2
movzx ecx, word [r10 + rax]
movzx edx, word [rax]
cmp cx, dx
jae 0x14000342e
mov r10, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x40]
mov byte [rsp + 0x48], 0
test r9b, 1
je 0x1400034b8
and r9d, 0xfffffffe
mov dword [rsp + 0x44], r9d
cmp byte [rsp + 0x40], 0
je 0x1400034b8
mov rdx, qword [rbp + 0x60]
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400034a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004aa0
call fcn.140008948
mov r11, qword [rbp + 0x38]
mov rdx, qword [rbp + 0x40]
mov r10, qword [rbp + 0x28]
cmp byte [rsp + 0x48], 0
je 0x1400035c5
movabs rax, 0x7ffffffffffffffe
sub rax, r11
cmp rax, 0x16
jb 0x140004aa6
lea rax, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rax, qword [rbp + 0x28]
mov qword [rsp + 0x30], r11
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x16
lea r9, str.Skipped_tdata_path_
lea r8, [rbp + 0x28]
movzx edx, r12b
lea rcx, [rbp + 0xa8]
call fcn.140001650
or dword [rsp + 0x44], 0x1000
mov r8d, 1
lea rdx, [0x14001965c]
lea rcx, [rbp + 0xa8]
call fcn.140002200
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x228], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x238], xmm1
xor ecx, ecx
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 7
mov word [rax], cx
or dword [rsp + 0x44], 0x800
lea rcx, [rbp + 0x228]
call fcn.140005350
nop
lea rcx, [rbp + 0x228]
call fcn.140001cb0
nop
lea rcx, [rbp + 0xa8]
call fcn.140001cb0
jmp 0x14000412e
mov rcx, qword [rbp + 0x158]
mov rdx, qword [rbp + 0x40]
mov r10, qword [rbp + 0x28]
cmp r11, rcx
jbe 0x1400035bb
lea rax, [rbp + 0x28]
cmp rdx, 8
cmovae rax, r10
cmp word [rax + rcx*2], 0x2f
jne 0x140003456
mov byte [rsp + 0x48], 1
jmp 0x14000345b
xor eax, eax
mov qword [rbp + 0x48], rax
test byte [rbp + 0x250], 0x10
je 0x1400038fe
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x60], 7
mov word [rbp + 0x48], ax
lea r8d, [rax + 1]
lea rdx, [0x140019a08]
lea rcx, [rbp + 0x48]
call fcn.140002290
nop
mov ecx, dword [rsp + 0x44]
or ecx, 2
mov dword [rsp + 0x44], ecx
mov dword [rsp + 0x58], ecx
lea rdx, [rbp + 0x27c]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140003620
lea r9, [rbp + 0x48]
cmp qword [rbp + 0x60], 8
setae byte [rsp + 0x40]
cmovae r9, qword [rbp + 0x48]
mov r8, qword [rbp + 0x58]
cmp r8, rax
jne 0x140003693
lea rax, [rbp + 0x27c]
test r8, r8
je 0x1400038f4
movzx ecx, word [r9]
movzx edx, word [rbp + 0x27c]
cmp cx, dx
jb 0x140003693
lea r10, [rbp + 0x27c]
sub r9, r10
cmp cx, dx
ja 0x140003693
cmp r8, 1
je 0x1400038f0
dec r8
add rax, 2
movzx ecx, word [r9 + rax]
movzx edx, word [rax]
cmp cx, dx
jae 0x140003673
xor eax, eax
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x80], 7
lea r8d, [rax + 2]
lea rdx, [0x140019a0c]
lea rcx, [rbp + 0x68]
call fcn.140002290
mov ecx, dword [rsp + 0x44]
or ecx, 4
mov dword [rsp + 0x44], ecx
lea rdx, [rbp + 0x27c]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400036d5
lea r9, [rbp + 0x68]
cmp qword [rbp + 0x80], 8
cmovae r9, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
cmp r8, rax
jne 0x14000374a
lea rax, [rbp + 0x27c]
test r8, r8
je 0x1400038f4
movzx ecx, word [r9]
movzx edx, word [rbp + 0x27c]
cmp cx, dx
jb 0x140003746
lea r10, [rbp + 0x27c]
sub r9, r10
cmp cx, dx
ja 0x140003746
cmp r8, 1
je 0x1400038f0
dec r8
add rax, 2
movzx ecx, word [rax + r9]
movzx edx, word [rax]
cmp cx, dx
jae 0x140003726
mov ecx, dword [rsp + 0x44]
mov byte [rsp + 0x48], 1
test cl, 4
je 0x140003768
and ecx, 0xfffffffb
mov dword [rsp + 0x44], ecx
lea rcx, [rbp + 0x68]
call fcn.140001cb0
mov ecx, dword [rsp + 0x44]
test cl, 2
je 0x14000378f
and ecx, 0xfffffffd
mov dword [rsp + 0x44], ecx
cmp byte [rsp + 0x40], 0
je 0x14000378f
mov r8, qword [rbp + 0x60]
inc r8
mov rdx, qword [rbp + 0x48]
lea rcx, [rbp + 0x48]
call fcn.1400023d0
cmp byte [rsp + 0x48], 0
je 0x14000412e
mov rcx, qword [rbp - 0x68]
lea rax, [rcx + 1]
mov rdx, qword [rbp - 0x78]
cmp rdx, rax
ja 0x1400037c2
mov edx, 1
lea rcx, [rsp + 0x78]
call fcn.140001ab0
mov rcx, qword [rbp - 0x68]
mov rdx, qword [rbp - 0x78]
dec rdx
mov rax, qword [rbp - 0x70]
and rax, rdx
mov qword [rbp - 0x70], rax
add rcx, rax
and rcx, rdx
lea rax, [rcx*8]
mov qword [rsp + 0x60], rax
mov rcx, qword [rbp - 0x80]
cmp qword [rcx + rax], 0
jne 0x14000380e
mov ecx, 0x20
call fcn.14000890c
mov rdx, qword [rbp - 0x80]
mov rcx, qword [rsp + 0x60]
mov qword [rcx + rdx], rax
mov rcx, qword [rbp - 0x80]
mov rax, qword [rsp + 0x60]
lea rdx, [rbp + 0x28]
mov rcx, qword [rax + rcx]
call fcn.140001570
inc qword [rbp - 0x68]
movabs rax, 0x7ffffffffffffffe
mov rcx, qword [rbp + 0x38]
sub rax, rcx
cmp rax, 0xb
jb 0x140004aac
lea rax, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rax, qword [rbp + 0x28]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xb
lea r9, str.Added_dir_
lea r8, [rbp + 0x28]
movzx edx, r15b
lea rcx, [rbp + 0xa8]
call fcn.140001650
or dword [rsp + 0x44], 0x10000
mov r8d, 0x12
lea rdx, [0x1400198f8]
lea rcx, [rbp + 0xa8]
call fcn.140002200
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x128], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x138], xmm1
xor ecx, ecx
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 7
mov word [rax], cx
or dword [rsp + 0x44], 0x20000
lea rcx, [rbp + 0x128]
call fcn.140005350
nop
lea rcx, [rbp + 0x128]
call fcn.140001cb0
nop
lea rcx, [rbp + 0xa8]
call fcn.140001cb0
jmp 0x14000412e
mov ecx, dword [rsp + 0x44]
mov byte [rsp + 0x48], 0
jmp 0x14000374f
mov rcx, qword [rbp + 0x218]
inc rcx
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x60], 7
mov word [rbp + 0x48], ax
cmp r11, rcx
jb 0x140004af4
sub r11, rcx
mov r8, 0xffffffffffffffff
cmp r11, r8
cmovb r8, r11
lea rax, [rbp + 0x28]
cmp rdx, 8
cmovae rax, r10
lea rdx, [rax + rcx*2]
lea rcx, [rbp + 0x48]
call fcn.140002290
or dword [rsp + 0x44], 0x4000
mov r10, qword [0x140026058]
mov qword [rsp + 0x68], r10
lea rcx, [0x140026048]
cmp qword [0x140026060], 8
cmovae rcx, qword [0x140026048]
mov qword [rsp + 0x60], rcx
mov r8, qword [rbp + 0x58]
mov r9, qword [rbp + 0x60]
mov rax, r9
sub rax, r8
cmp r10, rax
ja 0x140003a41
lea rax, [r8 + r10]
mov qword [rbp + 0x58], rax
lea rdx, [rbp + 0x48]
cmp r9, 8
cmovae rdx, qword [rbp + 0x48]
mov qword [rsp + 0x50], rdx
lea r9, [r10 + r10]
lea rax, [rcx + r9]
cmp rax, rdx
jbe 0x1400039e0
lea rax, [rdx + r8*2]
cmp rcx, rax
ja 0x1400039e0
cmp rdx, rcx
ja 0x1400039d0
xor eax, eax
mov qword [rsp + 0x58], rax
jmp 0x1400039e5
mov rax, rdx
sub rax, rcx
sar rax, 1
mov qword [rsp + 0x58], rax
jmp 0x1400039e5
mov qword [rsp + 0x58], r10
lea rcx, [rdx + r9]
lea r8, [r8*2 + 2]
call fcn.14000aaf0
mov rcx, qword [rsp + 0x58]
lea r8, [rcx + rcx]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
call fcn.14000aaf0
mov rax, qword [rsp + 0x68]
mov r8, rax
mov rcx, qword [rsp + 0x58]
sub r8, rcx
add rax, rcx
mov rdx, qword [rsp + 0x60]
lea rdx, [rdx + rax*2]
mov rax, qword [rsp + 0x50]
lea rcx, [rax + rcx*2]
add r8, r8
call fcn.14000aaf0
lea rax, [rbp + 0x48]
jmp 0x140003a5e
mov qword [rsp + 0x28], r10
mov qword [rsp + 0x20], rcx
xor r9d, r9d
movzx r8d, dil
mov rdx, r10
lea rcx, [rbp + 0x48]
call fcn.1400013e0
xor ecx, ecx
mov qword [rbp + 0x68], rcx
mov qword [rbp + 0x78], rcx
mov qword [rbp + 0x80], rcx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 7
mov word [rax], cx
or dword [rsp + 0x44], 0x2000
mov r8, qword [rbp + 0x60]
cmp r8, 8
jb 0x140003ab1
inc r8
mov rdx, qword [rbp + 0x48]
lea rcx, [rbp + 0x48]
call fcn.1400023d0
xor ecx, ecx
mov qword [rbp + 0x58], rcx
mov qword [rbp + 0x60], 7
mov word [rbp + 0x48], cx
lea rdx, [0x140026008]
cmp qword [0x140026020], 8
cmovae rdx, qword [0x140026008]
lea rcx, [rbp + 0x68]
cmp qword [rbp + 0x80], 8
cmovae rcx, qword [rbp + 0x68]
call fcn.14000f434
test eax, eax
je 0x1400048eb
mov rcx, qword [0x140026058]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 0xc
jb 0x140004aee
lea r9, [0x140026048]
cmp qword [0x140026060], 8
cmovae r9, qword [0x140026048]
mov qword [rsp + 0x30], 0xc
lea rax, str.Telegram.exe
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [0x140026048]
movzx edx, r13b
lea rcx, [rbp + 0xa8]
call fcn.140001650
or dword [rsp + 0x44], 0x8008
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 8
cmovae rdx, qword [rbp + 0xa8]
lea rcx, [rbp + 0x68]
cmp qword [rbp + 0x80], 8
cmovae rcx, qword [rbp + 0x68]
call fcn.14000f434
mov r11, qword [0x140026080]
mov r10, qword [0x140026078]
test eax, eax
jne 0x140003c08
lea r9, [0x140026068]
cmp r11, 8
cmovae r9, qword [0x140026068]
cmp r10, 0xc
jne 0x140003c01
mov rdx, r10
lea rax, str.Telegram.exe
test r10, r10
je 0x140003c08
movzx ecx, word [r9]
mov r8d, 0x54
cmp cx, r8w
jb 0x140003c01
sub r9, qword [rbp - 0x10]
cmp cx, r8w
ja 0x140003c01
cmp rdx, 1
je 0x140003c08
dec rdx
add rax, 2
movzx ecx, word [rax + r9]
movzx r8d, word [rax]
cmp cx, r8w
jae 0x140003be3
mov byte [rsp + 0x48], 1
jmp 0x140003c0d
mov byte [rsp + 0x48], 0
mov eax, dword [rsp + 0x44]
test al, 8
je 0x140003c36
and eax, 0xfffffff7
mov dword [rsp + 0x44], eax
lea rcx, [rbp + 0xa8]
call fcn.140001cb0
mov r11, qword [0x140026080]
mov r10, qword [0x140026078]
cmp byte [rsp + 0x48], 0
je 0x140003e17
mov rcx, qword [0x140026058]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, r10
jb 0x140004ab8
lea r9, [0x140026048]
cmp qword [0x140026060], 8
cmovae r9, qword [0x140026048]
lea rax, [0x140026068]
cmp r11, 8
cmovae rax, qword [0x140026068]
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [0x140026048]
movzx edx, sil
lea rcx, [rbp + 0xa8]
call fcn.140001650
or dword [rsp + 0x44], 0x400000
movabs rax, 0x7ffffffffffffffe
mov rcx, qword [rbp + 0x78]
sub rax, rcx
cmp rax, 0x16
jb 0x140004ab2
lea rax, [rbp + 0x68]
cmp qword [rbp + 0x80], 8
cmovae rax, qword [rbp + 0x68]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x16
lea r9, str.Target_binary_found:_
lea r8, [rbp + 0x68]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xe8]
call fcn.140001650
or dword [rsp + 0x44], 0x800000
mov r8d, 0x10
lea rdx, str.__changing_to_
lea rcx, [rbp + 0xe8]
call fcn.140002200
xor ecx, ecx
mov qword [rbp + 0x88], rcx
mov qword [rbp + 0x98], rcx
mov qword [rbp + 0xa0], rcx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x98], xmm1
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 7
mov word [rax], cx
or dword [rsp + 0x44], 0x1000000
lea r8, [rbp + 0xa8]
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x188]
call fcn.140001060
nop
lea r8, [0x14001965c]
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.1400010d0
nop
mov rcx, rax
call fcn.140005350
nop
lea rcx, [rbp + 0x168]
call fcn.140001cb0
nop
lea rcx, [rbp + 0x188]
call fcn.140001cb0
nop
lea rcx, [rbp + 0x88]
call fcn.140001cb0
nop
lea rcx, [rbp + 0xe8]
call fcn.140001cb0
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 8
cmovae rdx, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xb8]
lea rcx, [rbp + 0x68]
call fcn.140002290
nop
lea rcx, [rbp + 0xa8]
call fcn.140001cb0
lea rdx, [rbp + 0x1e8]
cmp qword [rbp + 0x200], 8
cmovae rdx, qword [rbp + 0x1e8]
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rcx, qword [rbp + 0x28]
call fcn.14000f434
test eax, eax
jne 0x140003f25
movabs rax, 0x7ffffffffffffffe
mov rcx, qword [rbp + 0x38]
sub rax, rcx
cmp rax, 0x14
jb 0x140004abe
lea rax, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rax, qword [rbp + 0x28]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x14
lea r9, str.Skipped_ready_file_
lea r8, [rbp + 0x28]
movzx edx, r14b
lea rcx, [rbp + 0xe8]
call fcn.140001650
or dword [rsp + 0x44], 0x80000
mov r8d, 1
lea rdx, [0x14001965c]
lea rcx, [rbp + 0xe8]
call fcn.140002200
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1a8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1b8], xmm1
xor ecx, ecx
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 7
mov word [rax], cx
or dword [rsp + 0x44], 0x100000
lea rcx, [rbp + 0x1a8]
call fcn.140005350
nop
mov r8, qword [rbp + 0x1c0]
cmp r8, 8
jb 0x140003f20
inc r8
mov rdx, qword [rbp + 0x1a8]
lea rcx, [rbp + 0x1a8]
call fcn.1400023d0
nop
jmp 0x140004103
mov rcx, qword [rbp - 0x40]
lea rax, [rcx + 1]
mov rdx, qword [rbp - 0x50]
cmp rdx, rax
ja 0x140003f4c
mov edx, 1
lea rcx, [rbp - 0x60]
call fcn.140001ab0
mov rcx, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x50]
dec rdx
mov rax, qword [rbp - 0x48]
and rax, rdx
mov qword [rbp - 0x48], rax
add rcx, rax
and rcx, rdx
lea rax, [rcx*8]
mov qword [rsp + 0x50], rax
mov rcx, qword [rbp - 0x58]
cmp qword [rcx + rax], 0
jne 0x140003f98
mov ecx, 0x20
call fcn.14000890c
mov rdx, qword [rbp - 0x58]
mov rcx, qword [rsp + 0x50]
mov qword [rdx + rcx], rax
mov rcx, qword [rbp - 0x58]
mov rax, qword [rsp + 0x50]
lea rdx, [rbp + 0x28]
mov rcx, qword [rcx + rax]
call fcn.140001570
inc qword [rbp - 0x40]
mov rdx, qword [rbp - 0x18]
lea rax, [rdx + 1]
mov rcx, qword [rbp - 0x28]
cmp rcx, rax
ja 0x140003fd0
mov edx, 1
lea rcx, [rbp - 0x38]
call fcn.140001ab0
mov rdx, qword [rbp - 0x18]
mov rcx, qword [rbp - 0x28]
dec rcx
mov rax, qword [rbp - 0x20]
and rax, rcx
mov qword [rbp - 0x20], rax
add rax, rdx
and rcx, rax
lea rax, [rcx*8]
mov qword [rsp + 0x50], rax
mov rcx, qword [rbp - 0x30]
cmp qword [rcx + rax], 0
jne 0x14000401c
mov ecx, 0x20
call fcn.14000890c
mov rdx, qword [rbp - 0x30]
mov rcx, qword [rsp + 0x50]
mov qword [rdx + rcx], rax
mov rcx, qword [rbp - 0x30]
mov rax, qword [rsp + 0x50]
lea rdx, [rbp + 0x68]
mov rcx, qword [rcx + rax]
call fcn.140001570
inc qword [rbp - 0x18]
movabs rax, 0x7ffffffffffffffe
mov rcx, qword [rbp + 0x38]
sub rax, rcx
cmp rax, 0xc
jb 0x140004ae8
lea rax, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rax, qword [rbp + 0x28]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xc
lea r9, str.Added_file_
lea r8, [rbp + 0x28]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xe8]
call fcn.140001650
or dword [rsp + 0x44], 0x200000
lea r8, str._to_be_copied_to_
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0xa8]
call fcn.1400010d0
nop
lea r8, [rbp + 0x68]
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.140001060
nop
lea r8, [0x14001965c]
mov rdx, rax
lea rcx, [rbp + 0x188]
call fcn.1400010d0
nop
mov rcx, rax
call fcn.140005350
nop
lea rcx, [rbp + 0x188]
call fcn.140001cb0
nop
lea rcx, [rbp + 0x168]
call fcn.140001cb0
nop
lea rcx, [rbp + 0xa8]
call fcn.140001cb0
nop
lea rcx, [rbp + 0xe8]
call fcn.140001cb0
nop
mov r8, qword [rbp + 0x80]
cmp r8, 8
jb 0x14000412e
inc r8
mov rdx, qword [rbp + 0x68]
lea rcx, [rbp + 0x68]
call fcn.1400023d0
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 8
jb 0x14000416e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004169
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ac4
call fcn.140008948
lea rdx, [rbp + 0x250]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
mov rcx, qword [rbp + 0xd8]
mov rax, qword [rbp - 8]
jne 0x140003150
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x58], eax
test eax, eax
je 0x1400041aa
cmp eax, 0x12
jne 0x1400043b5
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
lea rcx, [rbp + 0x1c8]
call fcn.140001cb0
nop
lea rcx, [rbp + 0xc8]
call fcn.140001cb0
cmp qword [rbp - 0x68], 0
jne 0x140002f55
xor r15d, r15d
mov ebx, r15d
cmp qword [rbp + 0x20], r15
jbe 0x1400042e3
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rbp]
call fcn.140001a20
mov rdx, rax
lea rcx, [rbp + 0xa8]
call fcn.140001570
nop
lea r8, [rbp + 0xa8]
lea rdx, str.Forcing_dir_
lea rcx, [rbp + 0x168]
call fcn.140001220
nop
lea r8, [0x1400196d8]
mov rdx, rax
lea rcx, [rbp + 0x188]
call fcn.1400010d0
nop
mov rcx, rax
call fcn.140005350
nop
lea rcx, [rbp + 0x188]
call fcn.140001cb0
nop
lea rcx, [rbp + 0x168]
call fcn.140001cb0
cmp qword [rbp + 0xb8], 0
je 0x1400042ca
lea rcx, [rbp + 0xa8]
call fcn.1400023c0
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1400042ca
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
je 0x14000429c
cmp eax, 0xb7
jne 0x1400043f2
lea rdx, str.Already_exists_
lea rcx, [rbp + 0xe8]
call fcn.140001610
nop
lea rcx, [rbp + 0xe8]
call fcn.140005350
nop
lea rcx, [rbp + 0xe8]
call fcn.140001cb0
nop
lea rcx, [rbp + 0xa8]
call fcn.140001cb0
inc rbx
cmp rbx, qword [rbp + 0x20]
jb 0x1400041f0
mov r13, r15
cmp qword [rbp - 0x40], r15
jbe 0x1400048b2
movzx ebx, byte [rsp + 0x40]
nop word [rax + rax]
mov rdx, r13
lea rcx, [rbp - 0x60]
call fcn.140001a20
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.140001570
nop
mov rdx, r13
lea rcx, [rbp - 0x38]
call fcn.140001a20
mov rdx, rax
lea rcx, [rbp + 0xc8]
call fcn.140001570
nop
nop word [rax + rax]
mov r15, qword [rbp + 0x38]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r15
cmp rax, 0xe
jb 0x140004ae2
lea r12, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae r12, qword [rbp + 0x28]
xor eax, eax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x60], rax
lea r14, [r15 + 0xe]
mov edi, 7
lea rsi, [rbp + 0x48]
cmp r14, rdi
jbe 0x14000448e
mov rdi, r14
cmp r14, 8
mov eax, 8
cmovb rdi, rax
or rdi, 7
cmp rdi, rcx
jbe 0x14000446d
mov rdi, rcx
jmp 0x14000447a
lea rdx, str.Error:_failed_to_find_next_update_file_:_
lea rcx, [rbp + 0xe8]
call fcn.140001610
nop
lea rcx, [rbp + 0xe8]
call fcn.140005350
nop
lea rcx, [rbp + 0xe8]
call fcn.140001cb0
mov edx, dword [rsp + 0x58]
lea rcx, str.Failed_to_find_next_update_file
jmp 0x1400049e6
lea r8, [rbp + 0xa8]
lea rdx, str.Error:_failed_to_create_dir_
lea rcx, [rbp + 0x168]
call fcn.140001220
nop
lea r8, [0x1400196d8]
mov rdx, rax
lea rcx, [rbp + 0x188]
call fcn.1400010d0
nop
mov rcx, rax
call fcn.140005350
nop
lea rcx, [rbp + 0x188]
call fcn.140001cb0
nop
lea rcx, [rbp + 0x168]
call fcn.140001cb0
mov edx, edi
lea rcx, str.Failed_to_create_directory
call fcn.140004b00
call fcn.140002410
nop
lea rcx, [rbp + 0xa8]
call fcn.140001cb0
xor bl, bl
jmp 0x140004a0c
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rbp + 0x48]
call fcn.140002190
mov rsi, rax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x60], rdi
movups xmm0, xmmword [str.Copying_file_]
movups xmmword [rsi], xmm0
movsd xmm1, qword [0x140019d08]
movsd qword [rsi + 0x10], xmm1
mov ecx, dword [0x140019d10]
mov dword [rsi + 0x18], ecx
lea rcx, [rsi + 0x1c]
lea r8, [r15 + r15]
mov rdx, r12
call fcn.14000aaf0
xor r15d, r15d
mov word [rsi + r14*2], r15w
mov r14d, dword [rsp + 0x44]
bts r14d, 8
mov rsi, qword [rbp + 0x58]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
sub rax, rsi
cmp rax, 6
jb 0x140004521
lea rax, [rsi + 6]
mov qword [rbp + 0x58], rax
lea rdi, [rbp + 0x48]
cmp rcx, 8
cmovae rdi, qword [rbp + 0x48]
lea rcx, [rdi + rsi*2]
lea r8d, [r15 + 0xc]
lea rdx, str._to_
call fcn.14000aaf0
mov word [rdi + rsi*2 + 0xc], r15w
lea rax, [rbp + 0x48]
jmp 0x140004543
mov qword [rsp + 0x20], 6
lea r9, str._to_
movzx r8d, bl
mov edx, 6
lea rcx, [rbp + 0x48]
call fcn.140001290
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x78], r15
mov qword [rbp + 0x80], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
bts r14d, 7
lea rdx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 8
cmovae rdx, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xd8]
lea rcx, [rbp + 0x68]
call fcn.140002200
mov qword [rbp + 0x88], r15
mov qword [rbp + 0x98], r15
mov qword [rbp + 0xa0], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x98], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
bts r14d, 9
mov r8d, 3
lea rdx, [0x1400196d8]
lea rcx, [rbp + 0x88]
call fcn.140002200
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x108], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x118], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
bts r14d, 0xa
mov dword [rsp + 0x44], r14d
lea rcx, [rbp + 0x108]
call fcn.140005350
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 8
jb 0x140004678
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004672
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004aca
call fcn.140008948
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 8
jb 0x1400046be
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ad0
call fcn.140008948
mov qword [rbp + 0x98], r15
mov qword [rbp + 0xa0], 7
mov word [rbp + 0x88], r15w
mov rdx, qword [rbp + 0x80]
cmp rdx, 8
jb 0x14000471b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004716
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ad6
call fcn.140008948
mov qword [rbp + 0x78], r15
mov qword [rbp + 0x80], 7
mov word [rbp + 0x68], r15w
mov rdx, qword [rbp + 0x60]
cmp rdx, 8
jb 0x14000476f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000476a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004adc
call fcn.140008948
mov edi, r15d
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 8
cmovae rdx, qword [rbp + 0xc8]
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rcx, qword [rbp + 0x28]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
mov esi, eax
test eax, eax
jne 0x1400047c4
inc edi
lea ecx, [rax + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp edi, 0x64
jl 0x140004780
test esi, esi
jne 0x14000488f
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0xb8], r15
mov qword [rbp + 0xc0], 7
mov word [rbp + 0xa8], r15w
lea r8d, [rsi + 0x28]
lea rdx, str.Error:_failed_to_copy__asking_to_retry..
lea rcx, [rbp + 0xa8]
call fcn.140002290
nop
lea rcx, [rbp + 0xa8]
call fcn.140005350
nop
lea rcx, [rbp + 0xa8]
call fcn.140001cb0
lea r8, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 8
cmovae r8, qword [rbp + 0xc8]
lea rdx, str.Failed_to_update_Telegram_:__n_s_is_not_accessible.
lea rcx, [rbp + 0x250]
call qword [sym.imp.USER32.dll_wsprintfW]
lea r9d, [rsi + 0x15]
lea r8, str.Update_error_
lea rdx, [rbp + 0x250]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 4
je 0x140004340
call fcn.140002410
nop
lea rcx, [rbp + 0xc8]
call fcn.140001cb0
nop
lea rcx, [rbp + 0x28]
call fcn.140001cb0
xor bl, bl
jmp 0x140004a0c
lea rcx, [rbp + 0xc8]
call fcn.140001cb0
nop
lea rcx, [rbp + 0x28]
call fcn.140001cb0
inc r13
cmp r13, qword [rbp - 0x40]
jb 0x140004300
lea rdx, str.Update_succeed__Clearing_folder..
lea rcx, [rbp + 0xe8]
call fcn.140001610
nop
lea rcx, [rbp + 0xe8]
call fcn.140005350
nop
lea rcx, [rbp + 0xe8]
call fcn.140001cb0
call fcn.140002410
mov bl, 1
jmp 0x140004a0c
lea r8, [rbp + 0x68]
lea rdx, str.Error:_bad_update__has_Updater.exe__
lea rcx, [rbp + 0xa8]
call fcn.140001220
nop
lea r8, str._equal_
mov rdx, rax
lea rcx, [rbp + 0xe8]
call fcn.1400010d0
nop
lea r8, [0x140026008]
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.140001060
nop
lea r8, [0x14001965c]
mov rdx, rax
lea rcx, [rbp + 0x188]
call fcn.1400010d0
nop
mov rcx, rax
call fcn.140005350
nop
lea rcx, [rbp + 0x188]
call fcn.140001cb0
nop
lea rcx, [rbp + 0x168]
call fcn.140001cb0
nop
lea rcx, [rbp + 0xe8]
call fcn.140001cb0
nop
lea rcx, [rbp + 0xa8]
call fcn.140001cb0
call fcn.140002410
nop
lea rcx, [rbp + 0x68]
call fcn.140001cb0
nop
lea rcx, [rbp + 0x28]
call fcn.140001cb0
jmp 0x1400049f0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 3
jne 0x1400049b0
mov bl, 1
jmp 0x1400049f2
lea rdx, str.Error:_failed_to_find_update_files_:_
lea rcx, [rbp + 0xe8]
call fcn.140001610
nop
lea rcx, [rbp + 0xe8]
call fcn.140005350
nop
lea rcx, [rbp + 0xe8]
call fcn.140001cb0
mov edx, ebx
lea rcx, str.Failed_to_find_update_files
call fcn.140004b00
call fcn.140002410
xor bl, bl
lea rcx, [rbp + 0x1c8]
call fcn.140001cb0
nop
lea rcx, [rbp + 0xc8]
call fcn.140001cb0
nop
lea rcx, [rbp]
call fcn.140001880
nop
lea rcx, [rbp - 0x38]
call fcn.140001880
nop
lea rcx, [rbp - 0x60]
call fcn.140001880
nop
lea rcx, [rsp + 0x78]
call fcn.140001880
nop
lea rcx, [rbp + 0x148]
call fcn.140001cb0
nop
lea rcx, [rbp + 0x1e8]
call fcn.140001cb0
nop
lea rcx, [rbp + 0x208]
call fcn.140001cb0
movzx eax, bl
mov rcx, qword [rbp + 0x1250]
xor rcx, rsp
call fcn.140008fb0
lea r11, [rsp + 0x1360]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001d40
nop
call fcn.140001d40
nop
call fcn.14000f278
int3
call fcn.14000f278
int3
call fcn.140001d40
int3
call fcn.140001d40
nop
call fcn.140001d40
nop
call fcn.140001d40
int3
call fcn.140001d40
nop
call fcn.14000f278
nop
call fcn.14000f278
nop
call fcn.14000f278
nop
call fcn.14000f278
nop
call fcn.14000f278
int3
call fcn.140001d40
nop
call fcn.140001d40
int3
call fcn.140001d40
nop
call fcn.140001d60
int3