Function at 0x140006460
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x108
mov rsi, rcx
mov rbp, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [0x1400111d0], rbp
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov qword [0x1400111d8], rax
mov edx, 0x6f
mov r8d, 0xa
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x34], eax
mov rcx, rsi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [rsp + 0x2c], eax
mov rcx, rsi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov qword [rsp + 0xc8], rax
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
mov eax, dword [rsp + 0x2c]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov ecx, 0xffffffff
call fcn.1400058b0
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov r8d, dword [rsp + 0x34]
mov ecx, 0xffffffff
mov edx, 0x64
call fcn.1400058b0
mov ecx, 0xfffffffd
mov edx, 0xf6
mov r8d, 0x49
call fcn.1400058b0
mov edx, dword [rsp + 0x34]
mov ecx, 0xffffffff
mov r8d, edx
call fcn.1400058b0
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
movabs rcx, 0x6968ba10dc3434c3
mov edx, 0x9f
call fcn.1400058b0
mov rax, qword [rsp + 0x58]
mov ecx, 0xffffffff
mov edx, 0x88
call fcn.1400058b0
mov ecx, 0xffffffff
mov edx, 0x3f
call fcn.1400058b0
mov edx, dword [rsp + 0x34]
mov ecx, 0xfffffffd
call fcn.1400058b0
mov ecx, 0xffffffff
call fcn.1400058b0
mov edx, dword [rsp + 0x34]
mov ecx, 2
mov r8d, 0x576ada
call fcn.1400058b0
mov r8d, dword [rsp + 0x34]
movabs rcx, 0x969745ef23cbdb3d
mov edx, 0xf6
call fcn.1400058b0
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov ecx, 1
call fcn.1400058b0
mov ecx, 0xffffffff
call fcn.1400058b0
mov eax, dword [rsp + 0x34]
mov eax, dword [rsp + 0x34]
mov ecx, 0xffffffff
mov edx, 0x64
call fcn.1400058b0
mov r8d, dword [rsp + 0x34]
mov ecx, 0xfffffffd
mov edx, 0xdb
call fcn.1400058b0
mov ecx, 0xffffffff
call fcn.1400058b0
mov ecx, 2
call fcn.1400058b0
mov eax, dword [rsp + 0x34]
mov eax, dword [rsp + 0x34]
movabs rcx, 0xc91eefe8668fcb49
mov edx, 0x985c24
call fcn.1400058b0
mov r8d, dword [rsp + 0x34]
mov edx, 0x89
xor ecx, ecx
call fcn.1400058b0
mov rcx, qword [rsp + 0x58]
mov edx, 0xb4
mov r8d, 0xdf
call fcn.1400058b0
mov rdi, rax
mov ecx, 0x1000
call fcn.1400058b0
mov rbx, rax
mov ecx, 4
mov edx, 0x3c4ad3
call fcn.1400058b0
xor ecx, ecx
mov rdx, rdi
mov r8d, ebx
mov r9d, eax
call rbp
mov qword [rsp + 0x60], rax
mov r8, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
mov rdx, rsi
call fcn.140005880
cmp qword [rsp + 0x60], 0
setne byte [rsp + 0x2a]
mov eax, dword [rsp + 0x34]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x34]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x34]
mov eax, dword [rsp + 0x2c]
mov edx, 0x31
xor ecx, ecx
call fcn.1400058b0
mov ecx, dword [rsp + 0x2c]
cmp ecx, eax
setne byte [rsp + 0x2b]
mov ecx, 0xffffffff
call fcn.1400058b0
mov ecx, 0xffffffff
call fcn.1400058b0
mov edx, dword [rsp + 0x34]
mov ecx, 0xfffffffd
call fcn.1400058b0
mov r8d, dword [rsp + 0x34]
mov ecx, 0xffffffff
mov edx, 4
call fcn.1400058b0
mov r8d, dword [rsp + 0x34]
mov ecx, 2
mov edx, 0x48
call fcn.1400058b0
movzx eax, byte [rsp + 0x2a]
and al, byte [rsp + 0x2b]
and al, 1
mov byte [rsp + 0x44], al
movzx eax, byte [rsp + 0x44]
cmp al, 1
jne 0x140007a6c
movzx esi, byte [rsp + 0x2a]
mov rax, qword [rsp + 0x58]
mov ecx, 1
mov edx, esi
mov r8d, esi
call fcn.1400058b0
movabs rcx, 0xbf00c48af42ab3c7
call fcn.1400058b0
movzx eax, byte [rsp + 0x2b]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400058b0
mov ecx, 0xfffffffd
call fcn.1400058b0
mov ecx, 0xffffffff
mov edx, 0x49
call fcn.1400058b0
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
movabs rcx, 0x428100f0f27d95d3
call fcn.1400058b0
mov ecx, 5
mov edx, esi
call fcn.1400058b0
mov ecx, dword [rsp + 0x2c]
cmp ecx, eax
seta byte [rsp + 0x39]
mov rax, qword [rsp + 0x60]
movzx ecx, byte [rsp + 0x39]
mov qword [rsp + 0x70], rax
cmp cl, 1
jne 0x140007aca
mov rax, qword [rsp + 0x60]
mov eax, dword [rax]
mov dword [rsp + 0x3c], eax
movzx eax, byte [rsp + 0x39]
movzx eax, byte [rsp + 0x2a]
mov ecx, 0xffffffff
call fcn.1400058b0
mov edx, dword [rsp + 0x3c]
mov ecx, 0xfffffffd
call fcn.1400058b0
mov edx, dword [rsp + 0x3c]
mov ecx, 0xffffffff
call fcn.1400058b0
mov edx, dword [rsp + 0x3c]
mov ecx, 2
call fcn.1400058b0
mov edx, dword [rsp + 0x3c]
movabs rcx, 0x8a4acfd9924d4347
call fcn.1400058b0
movzx eax, byte [rsp + 0x2a]
mov ecx, 0xffffffff
call fcn.1400058b0
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov ecx, 0xffffffff
call fcn.1400058b0
mov ecx, 0xfffffffd
mov edx, 0xd
call fcn.1400058b0
mov edx, dword [rsp + 0x3c]
mov ecx, 0xffffffff
call fcn.1400058b0
mov eax, dword [rsp + 0x2c]
mov edx, dword [rsp + 0x3c]
mov ecx, 2
call fcn.1400058b0
mov eax, dword [rsp + 0x2c]
movabs rcx, 0xae7abba3093459fe
call fcn.1400058b0
mov edx, dword [rsp + 0x3c]
xor ecx, ecx
call fcn.1400058b0
mov r8d, dword [rsp + 0x3c]
mov ecx, 0x2e786f72
mov edx, 0xd1
call fcn.1400058b0
mov ecx, dword [rsp + 0x3c]
cmp ecx, eax
sete byte [rsp + 0x33]
mov rax, qword [rsp + 0x60]
movzx ecx, byte [rsp + 0x33]
mov qword [rsp + 0x70], rax
cmp cl, 1
jne 0x140007aca
mov rax, qword [rsp + 0x60]
add rax, 4
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
movzx eax, byte [rax]
mov byte [rsp + 0x29], al
movzx eax, byte [rsp + 0x29]
mov ecx, dword [rsp + 0x2c]
sub ecx, eax
mov dword [rsp + 0x54], ecx
movzx eax, byte [rsp + 0x33]
mov ecx, 0x2f
mov edx, 0x89
call fcn.1400058b0
mov ecx, 0xff
call fcn.1400058b0
mov ecx, 0xa0bd
mov edx, 0x5f
call fcn.1400058b0
movzx edx, byte [rsp + 0x29]
mov ecx, 0x3b
mov r8d, 0xba5c3d
mov r9d, 0x84
call fcn.1400058b0
mov ecx, 0xff
call fcn.1400058b0
movzx edx, byte [rsp + 0x29]
mov ecx, 0xe39f
call fcn.1400058b0
movzx edx, byte [rsp + 0x29]
xor ecx, ecx
call fcn.1400058b0
movzx ecx, byte [rsp + 0x29]
cmp cl, al
setne byte [rsp + 0x45]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
movzx edx, byte [rsp + 0x29]
mov ecx, 1
call fcn.1400058b0
movabs rsi, 0x71ecb51c07e17d33
lea rcx, [rsi + 4]
mov edx, 0x34
mov r8d, 0x6b
call fcn.1400058b0
movzx eax, byte [rsp + 0x33]
movzx edx, byte [rsp + 0x29]
mov ecx, 7
mov r8d, edx
call fcn.1400058b0
mov ecx, 0xff
call fcn.1400058b0
mov ecx, 0x89ef
call fcn.1400058b0
movzx r8d, byte [rsp + 0x29]
mov ecx, 0x48
mov edx, 0x6b
mov r9d, r8d
call fcn.1400058b0
mov ecx, 0xff
call fcn.1400058b0
mov ecx, 0x175
call fcn.1400058b0
movzx r8d, byte [rsp + 0x29]
mov edx, 0xd1
mov rcx, rsi
call fcn.1400058b0
movzx edx, byte [rsp + 0x29]
mov ecx, 4
call fcn.1400058b0
mov ecx, dword [rsp + 0x54]
cmp ecx, eax
setg byte [rsp + 0x3a]
movzx eax, byte [rsp + 0x3a]
mov ecx, 0xffffffff
mov edx, 0x308efd
call fcn.1400058b0
movzx r8d, byte [rsp + 0x29]
mov ecx, 0xffffffff
mov edx, 0xad
call fcn.1400058b0
movzx edx, byte [rsp + 0x29]
mov ecx, 0xfffffffd
mov r8d, 0x10
call fcn.1400058b0
mov ecx, 0xffffffff
mov edx, 0x88
call fcn.1400058b0
mov ecx, 2
call fcn.1400058b0
movzx ecx, byte [rsp + 0x45]
movzx eax, byte [rsp + 0x3a]
cmp cl, 1
jne 0x140007adb
test al, 1
je 0x140007adb
movzx eax, byte [rsp + 0x29]
mov qword [rsp + 0x48], rax
movzx eax, byte [rsp + 0x33]
movzx eax, byte [rsp + 0x44]
mov ecx, 0xae
mov edx, 0x30062b
mov r8d, 0x5f376d
call fcn.1400058b0
mov rdx, qword [rsp + 0x48]
mov ecx, 0xff
call fcn.1400058b0
mov rdx, qword [rsp + 0x48]
mov ecx, 0xb249
mov r8, rdx
call fcn.1400058b0
mov rdx, qword [rsp + 0x48]
mov ecx, 0xa1
mov r8d, 0x24
call fcn.1400058b0
mov rdx, qword [rsp + 0x48]
mov ecx, 0xff
mov r8d, 0x8f3ef6
call fcn.1400058b0
mov ecx, 0x8207
call fcn.1400058b0
mov rdx, qword [rsp + 0x48]
movabs rcx, 0x60c1cb3fef898190
mov r8, rdx
call fcn.1400058b0
movzx eax, byte [rsp + 0x29]
movzx eax, byte [rsp + 0x3a]
mov ecx, 1
mov edx, 0x84f768
call fcn.1400058b0
xor ecx, ecx
call fcn.1400058b0
mov ecx, 4
mov edx, 0x3f
call fcn.1400058b0
add rax, qword [rsp + 0x48]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x60]
add rax, qword [rsp + 0x80]
mov qword [rsp + 0x68], rax
movzx eax, byte [rsp + 0x2a]
mov rax, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x48]
mov ecx, 1
call fcn.1400058b0
movabs rcx, 0xfa8329be5e786eef
call fcn.1400058b0
mov r9, qword [rsp + 0x48]
mov ecx, 0xa
mov edx, 0x5a
mov r8d, 0xad
call fcn.1400058b0
mov eax, dword [rsp + 0x3c]
mov ecx, 0xff
mov edx, 0x46
call fcn.1400058b0
mov rdx, qword [rsp + 0x48]
mov ecx, 0xfc9b
mov r8d, 0xd2
call fcn.1400058b0
mov ecx, 0x69
mov edx, 0xc2a8c7
call fcn.1400058b0
mov eax, dword [rsp + 0x34]
mov ecx, 0xff
call fcn.1400058b0
mov rdx, qword [rsp + 0x48]
mov ecx, 0x43ed
mov r8, rdx
call fcn.1400058b0
mov rdx, qword [rsp + 0x48]
movabs rcx, 0xe1539d0b673f7fb5
mov r8d, 0xd5e4c1
call fcn.1400058b0
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
mov r8, rdx
call fcn.1400058b0
mov rdx, qword [rsp + 0x48]
mov ecx, 0xfffffffb
xor r8d, r8d
call fcn.1400058b0
add eax, dword [rsp + 0x54]
mov dword [rsp + 0x40], eax
movzx eax, byte [rsp + 0x2b]
mov rax, qword [rsp + 0x80]
mov ecx, 1
mov edx, 0xd9
call fcn.1400058b0
mov rdx, qword [rsp + 0x48]
movabs rcx, 0xcf72b21d9372423
call fcn.1400058b0
mov edx, 0xdf
xor ecx, ecx
call fcn.1400058b0
mov eax, dword [rsp + 0x54]
mov eax, dword [rsp + 0x40]
mov eax, dword [rsp + 0x54]
mov eax, dword [rsp + 0x40]
mov eax, dword [rsp + 0x54]
mov eax, dword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
mov ecx, 1
mov r8, rdx
mov r9, rdx
call fcn.1400058b0
mov rdx, qword [rsp + 0x48]
movabs rcx, 0xdc0d3c9a2e495716
mov r8d, 0x64
call fcn.1400058b0
xor ecx, ecx
call fcn.1400058b0
mov rdx, qword [rsp + 0x48]
mov ecx, 2
mov r8d, 0x24
call fcn.1400058b0
mov ecx, dword [rsp + 0x40]
cmp ecx, eax
setb byte [rsp + 0x3b]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x70], rax
cmp byte [rsp + 0x3b], 0
jne 0x140007aca
movzx r13d, byte [rsp + 0x3b]
movzx ebx, byte [rsp + 0x2b]
mov ecx, 0xffffffff
mov edx, r13d
mov r8d, r13d
call fcn.1400058b0
mov rdi, rax
xor edi, ebx
or edi, r13d
mov esi, r13d
or esi, ebx
mov ecx, 0xffffffff
mov edx, r13d
call fcn.1400058b0
mov rbp, rax
xor ebp, esi
mov ecx, 0xfffffffd
call fcn.1400058b0
mov r14, rax
imul r14d, ebp
mov ecx, 0xffffffff
mov r8d, 0x7d2e47
mov edx, r13d
call fcn.1400058b0
mov rbp, rax
xor ebp, r13d
mov ecx, 2
mov edx, 0x3a
mov r8d, 0x34
call fcn.1400058b0
imul eax, ebp
sub eax, ebx
xor ebx, r13d
sub ebx, edi
sub ebx, r14d
xor ebx, eax
movabs rcx, 0x736d0d43caf1e69d
call fcn.1400058b0
mov rdi, rax
xor edi, ebx
movzx eax, byte [rsp + 0x45]
mov ecx, 0xf1
mov edx, r13d
call fcn.1400058b0
mov eax, dword [rsp + 0x40]
mov ecx, 0xff
call fcn.1400058b0
mov ecx, 0xc137
call fcn.1400058b0
mov ecx, 0xab
mov edx, 0x10
mov r8d, r13d
call fcn.1400058b0
mov ecx, 0xff
mov edx, 0xf5682d
mov r8d, 0xeb
call fcn.1400058b0
mov ecx, 0x2b99
mov edx, r13d
call fcn.1400058b0
movabs rcx, 0x9c83f489e0d0c12c
call fcn.1400058b0
mov r14, rax
mov r8d, 0x64
xor ecx, ecx
mov edx, r13d
call fcn.1400058b0
xor r14d, eax
imul r14d, edi
add r14d, dword [rsp + 0x54]
mov qword [rsp + 0xd0], r14
mov rax, qword [rsp + 0x48]
mov ecx, 0xffffffff
mov edx, 0x7a
mov r8d, r13d
mov r9d, r13d
call fcn.1400058b0
mov eax, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x3c]
mov ecx, 0xffffffff
call fcn.1400058b0
mov ecx, 0xfffffffd
mov r8d, 0x40
mov edx, r13d
call fcn.1400058b0
mov ecx, 0xffffffff
mov edx, r13d
call fcn.1400058b0
mov ecx, 2
mov edx, r13d
call fcn.1400058b0
mov eax, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x3c]
movabs rcx, 0xce2efa3e8cda3f8d
mov edx, 0x24
mov r8d, 0x44
call fcn.1400058b0
mov rdi, rax
xor ecx, ecx
call fcn.1400058b0
mov r15, rax
add r15d, edi
movzx esi, byte [rsp + 0x33]
movzx ebp, byte [rsp + 0x2a]
mov ecx, 0x8a
mov edx, 0x22
call fcn.1400058b0
mov rdi, rax
or edi, esi
mov ecx, 0xff
mov edx, r13d
call fcn.1400058b0
mov rbx, rax
and ebx, edi
imul ebx, ebx
mov ecx, 0x39af
mov edx, 0xd5b3da
mov r8d, r13d
call fcn.1400058b0
mov rdi, rax
imul edi, ebx
mov ecx, 0x3c
call fcn.1400058b0
mov rbx, rax
or ebx, ebp
mov ecx, 0xff
call fcn.1400058b0
mov rbp, rax
and ebp, ebx
imul ebp, ebp
mov ecx, 0x16f9
mov edx, 0xad
call fcn.1400058b0
mov r12, rax
imul r12d, ebp
xor esi, esi
cmp edi, r12d
sete sil
movabs rcx, 0xc116085bf79d1b45
mov edx, 0x349248
call fcn.1400058b0
sub eax, esi
imul eax, r15d
movzx ecx, byte [rsp + 0x29]
cmp cl, al
seta byte [rsp + 0x46]
mov ecx, 0xffffffff
mov edx, r13d
mov r8d, r13d
call fcn.1400058b0
mov ecx, 0xffffffff
mov edx, r13d
call fcn.1400058b0
mov ecx, 0xfffffffd
mov edx, r13d
call fcn.1400058b0
mov ecx, 0xffffffff
mov edx, 0x5a
call fcn.1400058b0
mov ecx, 2
call fcn.1400058b0
movabs rdi, 0x6fa569b84f036c4c
mov edx, 0x40
mov rcx, rdi
mov r8d, r13d
call fcn.1400058b0
mov eax, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
mov ecx, 1
mov edx, r13d
call fcn.1400058b0
or rdi, 2
mov rcx, rdi
mov edx, r13d
mov r8d, r13d
call fcn.1400058b0
mov edx, 0xda
mov r8d, 0x3a
xor ecx, ecx
call fcn.1400058b0
mov ecx, 0x55
mov edx, r13d
call fcn.1400058b0
mov ecx, 0xff
mov edx, 0x6ae5d9
call fcn.1400058b0
mov ecx, 0x2089
call fcn.1400058b0
mov ecx, 0xff
mov r8d, 0x27eae4
mov edx, r13d
call fcn.1400058b0
mov ecx, 0x94c3
mov edx, r13d
call fcn.1400058b0
movabs rcx, 0x7ab13a9a3df72957
mov edx, r13d
call fcn.1400058b0
mov edx, 0xdb
xor ecx, ecx
call fcn.1400058b0
mov ecx, 0xed
mov r8d, 0xf1
mov edx, r13d
call fcn.1400058b0
mov ecx, 0xff
mov edx, 0x59
mov r8d, 0xde102e
call fcn.1400058b0
mov ecx, 0xb21f
mov r8d, 0x2d9c9b
mov edx, r13d
call fcn.1400058b0
mov ecx, 0x23
mov edx, r13d
call fcn.1400058b0
mov eax, dword [rsp + 0x54]
mov ecx, 0xff
mov edx, 0x326bd6
mov r8d, r13d
call fcn.1400058b0
mov ecx, 0x9d01
mov edx, 0xa8
call fcn.1400058b0
movabs rcx, 0x854ec565c208d6aa
mov edx, 0x24
mov r8d, 0x90
call fcn.1400058b0
movzx eax, byte [rsp + 0x46]
inc rax
mov qword [rsp + 0x88], rax
movzx eax, byte [rsp + 0x39]
mov eax, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
mov ecx, 1
mov edx, r13d
call fcn.1400058b0
movabs rdi, 0x7906f65cd3b3a86
lea rcx, [rdi + 1]
mov edx, r13d
call fcn.1400058b0
mov edx, 0xba
xor ecx, ecx
call fcn.1400058b0
mov ecx, 1
mov edx, 0xcd
call fcn.1400058b0
mov rcx, rdi
mov edx, r13d
call fcn.1400058b0
mov edx, 0x24
xor ecx, ecx
mov r8d, r13d
call fcn.1400058b0
mov ecx, 1
mov edx, 0xf6
mov r8d, r13d
call fcn.1400058b0
and rax, qword [rsp + 0xd0]
mov qword [rsp + 0xf0], rax
mov r15, qword [rsp + 0x80]
mov ecx, 0xffffffff
mov edx, 0x3a
call fcn.1400058b0
mov rbp, rax
xor ebp, r15d
or ebp, r12d
mov esi, r12d
or esi, r15d
mov ecx, 0xffffffff
mov edx, r13d
mov r8d, r13d
mov r9d, r13d
call fcn.1400058b0
mov rdi, rax
xor edi, esi
mov ecx, 0xfffffffd
mov edx, 0xdb
mov r8d, r13d
call fcn.1400058b0
mov rbx, rax
imul ebx, edi
mov ecx, 0xffffffff
mov edx, 0x469c9c
call fcn.1400058b0
mov rdi, rax
xor edi, r12d
mov ecx, 2
call fcn.1400058b0
imul eax, edi
sub eax, r15d
xor r12d, r15d
sub r12d, ebp
sub r12d, ebx
xor r12d, eax
movabs rcx, 0x6d5c8e71d8564c0d
mov edx, 0xc6
call fcn.1400058b0
mov rdi, rax
add edi, r12d
movzx eax, byte [rsp + 0x29]
mov eax, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
mov eax, dword [rsp + 0x40]
mov ecx, 1
mov edx, r13d
mov r8d, r13d
call fcn.1400058b0
movabs rcx, 0x92a57d46cdcea84f
mov edx, r13d
mov r8d, r13d
call fcn.1400058b0
mov rbx, rax
xor ecx, ecx
xor edx, edx
mov r8d, r13d
call fcn.1400058b0
add eax, ebx
imul eax, edi
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0xa8], rcx
mov qword [rsp + 0xa0], 2
cmp r14d, eax
je 0x1400079e4
movzx edi, byte [rsp + 0x2b]
mov rsi, qword [rsp + 0x48]
lea ebx, [rdi + rsi]
mov eax, edi
xor eax, esi
sub ebx, eax
and esi, edi
mov ecx, 1
mov edx, edi
call fcn.1400058b0
mov ecx, eax
shl esi, cl
xor esi, ebx
movabs rcx, 0x8767767bb8008975
mov edx, edi
call fcn.1400058b0
mov rbx, rax
add rbx, rsi
movzx eax, byte [rsp + 0x46]
mov rax, qword [rsp + 0x58]
mov ecx, 0x54
mov r8d, 0xdb
mov r9d, 0xd
mov edx, edi
call fcn.1400058b0
mov ecx, 0xff
call fcn.1400058b0
mov ecx, 0xe053
mov edx, 0x3c2c7c
mov r8d, 0x171287
mov r9d, 0x49
call fcn.1400058b0
mov ecx, 0xa1
mov r8d, 0x64
mov edx, edi
call fcn.1400058b0
mov ecx, 0xff
mov edx, edi
call fcn.1400058b0
mov ecx, 0xa4b9
mov edx, edi
call fcn.1400058b0
movabs rcx, 0xd0e06480b3398246
mov edx, edi
call fcn.1400058b0
mov rsi, rax
xor ecx, ecx
mov edx, edi
mov r8d, edi
call fcn.1400058b0
mov rbp, rax
add rbp, rsi
imul rbp, rbx
add rbp, qword [rsp + 0xd0]
mov rax, qword [rsp + 0x88]
movzx eax, byte [rsp + 0x2b]
mov ecx, 1
mov edx, edi
mov r8d, edi
call fcn.1400058b0
xor ecx, ecx
mov edx, edi
call fcn.1400058b0
mov rax, qword [rsp + 0x58]
movzx eax, byte [rsp + 0x3b]
mov ecx, 1
call fcn.1400058b0
movabs rcx, 0xe4cfea9033d645c6
mov edx, edi
call fcn.1400058b0
mov edx, 0x6b
xor ecx, ecx
call fcn.1400058b0
mov rcx, 0xfffffffffffffffe
call fcn.1400058b0
and rax, rbp
mov qword [rsp + 0xf8], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xb8], 2
mov qword [rsp + 0xb0], 0
nop dword [rax]
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0xe8], rax
mov rsi, qword [rsp + 0xb8]
mov r15, qword [rsp + 0xc0]
cmp r15, qword [rsp + 0x48]
mov ebx, 0
cmovb rbx, r15
mov ecx, 0x7afafa69
call fcn.1400058b0
mov ecx, 0xa061440
call fcn.1400058b0
mov ecx, 0x1050504
call fcn.1400058b0
mov ecx, 0xb071544
mov r9d, 0x1f
mov rdx, r15
mov r8, r15
call fcn.1400058b0
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x78]
movzx r14d, byte [rcx + rbx]
mov qword [rsp + 0x98], rsi
movzx r13d, byte [rax + rsi]
xor r13b, r14b
mov byte [rax + rsi], r13b
mov ecx, 1
mov r8d, 0xc6
mov rdx, r15
call fcn.1400058b0
movabs rcx, 0x73112b1e429598ae
call fcn.1400058b0
mov rsi, rax
xor ecx, ecx
mov rdx, r15
mov r8, r15
call fcn.1400058b0
mov r12, rax
add r12, rsi
mov ecx, 0xffffffff
call fcn.1400058b0
mov rdi, rax
xor edi, ebx
or edi, r14d
mov ebp, r14d
or ebp, ebx
mov ecx, 0xffffffff
mov r8d, 0x48
mov rdx, r15
call fcn.1400058b0
mov rsi, rax
xor esi, ebp
mov ecx, 0xfffffffd
mov rdx, r15
call fcn.1400058b0
mov rbp, rax
imul ebp, esi
mov ecx, 0xffffffff
mov rdx, r15
call fcn.1400058b0
mov rsi, rax
xor esi, r14d
mov ecx, 2
mov edx, 0x6b
call fcn.1400058b0
imul eax, esi
sub eax, ebx
xor r14d, ebx
sub r14d, edi
sub r14d, ebp
xor r14d, eax
movabs rax, 0x73112b1e429598ae
lea rcx, [rax + 1]
call fcn.1400058b0
mov rsi, rax
xor ecx, ecx
call fcn.1400058b0
mov rdi, rax
xor rdi, rsi
xor rdi, r12
add rdi, rbx
mov ecx, 0xffffffff
call fcn.1400058b0
mov ecx, 0xffffffff
mov edx, 0x68
mov r8, r15
call fcn.1400058b0
mov ecx, 0xfffffffd
mov rdx, r15
call fcn.1400058b0
mov ecx, 0xffffffff
mov rdx, r15
call fcn.1400058b0
mov ecx, 2
mov rdx, r15
mov r8, r15
call fcn.1400058b0
movabs rcx, 0xb19bb226c6683911
mov rdx, r15
call fcn.1400058b0
mov qword [rsp + 0xe0], rax
mov edx, 0x941dc0
xor ecx, ecx
mov r8, r15
call fcn.1400058b0
mov r12, rax
mov ecx, 0xffffffff
mov rdx, r15
call fcn.1400058b0
mov ecx, 0xffffffff
mov rdx, r15
call fcn.1400058b0
mov ecx, 0xfffffffd
mov edx, 0x22d7de
call fcn.1400058b0
mov ecx, 0xffffffff
call fcn.1400058b0
mov ecx, 2
mov r8d, 0xe4
mov rdx, r15
mov r9, r15
call fcn.1400058b0
movabs rcx, 0xb306286268a5d7f1
call fcn.1400058b0
mov qword [rsp + 0xd8], rax
mov edx, 0xcd
mov r8d, 0x6b
xor ecx, ecx
call fcn.1400058b0
mov rsi, rax
mov rbp, qword [rsp + 0x48]
movzx eax, r13b
lea ebx, [rax + r14]
mov ecx, eax
xor ecx, r14d
sub ebx, ecx
and r14d, eax
mov ecx, 1
call fcn.1400058b0
mov ecx, eax
shl r14d, cl
xor r14d, ebx
xor r13d, r13d
cmp rdi, rbp
setb r13b
cmovb r14, rdi
add r12, qword [rsp + 0xe0]
add rsi, qword [rsp + 0xd8]
imul rsi, r12
or rsi, qword [rsp + 0x98]
mov rax, qword [rsp + 0x68]
movzx ecx, byte [rax + rsi]
mov rdx, qword [rsp + 0x78]
xor cl, byte [rdx + r14]
mov byte [rax + rsi], cl
mov ecx, 0xffffffff
mov edx, 0x64
call fcn.1400058b0
mov ecx, 0xffffffff
call fcn.1400058b0
mov ecx, 0xfffffffd
mov rdx, r15
call fcn.1400058b0
mov ecx, 0xffffffff
call fcn.1400058b0
mov ecx, 2
mov r8d, 0x2db38c
mov rdx, r15
call fcn.1400058b0
movabs rcx, 0x2a92f204642a9e9e
call fcn.1400058b0
mov ecx, 0xffffffff
call fcn.1400058b0
mov rdi, rax
xor edi, r14d
or edi, r13d
mov ebx, r13d
or ebx, r14d
mov ecx, 0xffffffff
call fcn.1400058b0
mov rsi, rax
xor esi, ebx
mov ecx, 0xfffffffd
mov rdx, r15
mov r8, r15
call fcn.1400058b0
mov rbx, rax
imul ebx, esi
mov esi, r13d
not esi
mov ecx, 2
mov rdx, r15
mov r8, r15
call fcn.1400058b0
imul eax, esi
sub eax, r14d
mov ebp, r13d
xor ebp, r14d
sub ebp, edi
sub ebp, ebx
xor ebp, eax
movabs rcx, 0xd56d0dfb9bd56163
call fcn.1400058b0
mov edx, 0xff
xor ecx, ecx
call fcn.1400058b0
mov ecx, 1
call fcn.1400058b0
mov r12, rax
add r12, r14
mov ecx, 0xffffffff
call fcn.1400058b0
mov rdi, rax
xor edi, ebp
or edi, r13d
mov ebx, r13d
or ebx, ebp
mov ecx, 0xffffffff
call fcn.1400058b0
mov rsi, rax
xor esi, ebx
mov ecx, 0xfffffffd
mov r8d, 0x34
mov rdx, r15
call fcn.1400058b0
mov rbx, rax
imul ebx, esi
mov ecx, 0xffffffff
mov edx, 0xa8
call fcn.1400058b0
mov rsi, rax
xor esi, r13d
mov ecx, 2
mov rdx, r15
mov r8, r15
call fcn.1400058b0
imul eax, esi
sub eax, ebp
xor ebp, r13d
sub ebp, edi
sub ebp, ebx
xor ebp, eax
movabs rcx, 0xda2d0030c8ec3b07
call fcn.1400058b0
mov rbx, rax
add rbx, rbp
mov ecx, 0x99
mov edx, 0x37d6d9
mov r8d, 0x10
call fcn.1400058b0
mov ecx, 0xff
mov r8d, 0x1b
mov rdx, r15
mov r9, r15
call fcn.1400058b0
mov ecx, 0xcfef
mov edx, 0x93bff5
call fcn.1400058b0
mov ecx, 0xb0
mov rdx, r15
call fcn.1400058b0
mov ecx, 0xff
mov edx, 0x64
mov r8, r15
call fcn.1400058b0
mov ecx, 0x610f
mov rdx, r15
call fcn.1400058b0
movabs rcx, 0x6e1f6322188c856e
mov rdx, r15
call fcn.1400058b0
mov rsi, rax
xor ecx, ecx
mov rdx, r15
call fcn.1400058b0
mov rdi, rax
add rdi, rsi
imul rdi, rbx
add rdi, qword [rsp + 0x98]
mov ecx, 1
call fcn.1400058b0
movabs rcx, 0x71dda83b1d28e6bc
mov rdx, r15
call fcn.1400058b0
mov edx, 0x46
xor ecx, ecx
call fcn.1400058b0
mov ecx, 0x26
mov edx, 0x36
mov r8d, 0x5f
call fcn.1400058b0
mov ecx, 0xff
mov rdx, r15
call fcn.1400058b0
mov ecx, 0xa5e9
mov rdx, r15
call fcn.1400058b0
mov ecx, 0x4b
mov edx, 0xfd0e39
call fcn.1400058b0
mov ecx, 0xff
mov edx, 0x96
call fcn.1400058b0
mov ecx, 0x3bb9
mov edx, 0x90
mov r8d, 0xb6
call fcn.1400058b0
movabs rcx, 0x8e2257c4e2d71946
mov rdx, r15
call fcn.1400058b0
mov ecx, 2
mov rdx, r15
mov r8, r15
call fcn.1400058b0
add rax, qword [rsp + 0xe8]
cmp rax, qword [rsp + 0xf8]
mov qword [rsp + 0xc0], r12
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xa8], r12
mov qword [rsp + 0xa0], rdi
jne 0x140007450
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x90], rax
mov rdx, qword [rsp + 0x90]
xor ecx, ecx
call fcn.1400058b0
mov rcx, qword [rsp + 0xf0]
cmp rcx, rax
sete byte [rsp + 0x47]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x70], rax
cmp byte [rsp + 0x47], 0
jne 0x140007aca
mov rsi, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x90]
cmp rdi, rsi
setb dl
movzx eax, byte [rsp + 0x47]
mov ecx, 1
mov r8d, edx
call fcn.1400058b0
cmp rdi, rsi
jae 0x140007aa1
mov rax, qword [rsp + 0x90]
jmp 0x140007aa3
mov edx, 0x92
xor ecx, ecx
call fcn.1400058b0
lea rdx, [0x140010051]
xor ecx, ecx
xor r8d, r8d
mov r9d, eax
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp qword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x100]
movzx ebx, byte [rcx + rdx]
mov rbp, qword [rsp + 0x78]
xor bl, byte [rbp + rax]
mov byte [rcx + rdx], bl
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x70], rax
mov rcx, qword [rsp + 0x70]
lea rdx, str.5vL95_b98r3z_Opp6nr58
call fcn.140001000
mov rcx, qword [rsp + 0xc8]
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp qword [sym.imp.KERNEL32.dll_FreeResource]
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
jne 0x14002084b
jne 0x1400207d7
push qword [rbp + 0x75]
jne 0x14002084f
jne 0x1400207db
jmp [rax - 0x67]
push 0x68ff1099
cdq
adc bh, bh
push 0x68ff1099
cdq
adc bh, bh
push 0x68ff1099
adc bh, bh
push 0x68ff1099
cdq
adc bh, bh
push 0x68ff1099
cdq
adc bh, bh
invalid
cdq
adc bh, bh
jmp [rax - 0x67]
adc bh, bh
push 0x68ff1099
cdq
adc bh, bh
push 0x68ff1099
cdq
adc bh, bh
push 0x68ff1099
push 0x68ff1099
cdq
adc bh, bh
invalid
push 0x68ff1099
cdq
adc bh, bh
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
jne 0x140020a4b
jne 0x1400209d7
push qword [rbp + 0x75]
jne 0x140020a4f
jne 0x1400209db
jmp [rax - 0x67]
jmp [rax - 0x67]