Function at 0x140008050
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov rax, qword [0x140041080]
xor rax, rsp
mov qword [rbp + 0x48], rax
xor ebx, ebx
mov edx, 5
mov rcx, qword [0x140043ed8]
call qword [sym.imp.USER32.dll_ShowWindow]
mov r8d, 0x68
lea rcx, [rbp + 0x28]
call fcn.140007e90
nop
mov r8d, 0x69
lea rcx, [rbp + 8]
call fcn.140007e90
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov ecx, 0x20
call fcn.14000d4e8
mov r14, rax
mov qword [rbp - 0x40], rax
lea r13, [rax + 0x20]
mov qword [rbp - 0x30], r13
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rbp - 0x38], r13
movups xmmword [rbp - 0x28], xmm0
mov ecx, 0x10
call fcn.14000d4e8
mov r15, rax
mov qword [rbp - 0x28], rax
add rax, 0x10
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x18], rax
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov qword [rbp - 0x20], rax
mov esi, ebx
mov edi, ebx
nop word [rax + rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbx
mov rax, qword [rbp + 0x38]
cmp rax, rdi
jb 0x140008711
sub rax, rdi
mov r8d, 2
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp + 0x28]
cmp qword [rbp + 0x40], 0xf
cmova rdx, qword [rbp + 0x28]
add rdx, rdi
lea rcx, [rsp + 0x58]
call fcn.140004e60
nop
call fcn.1400168d8
mov r12, rax
lea rbx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rbx, qword [rsp + 0x58]
mov dword [rax], 0
mov r8d, 0x10
lea rdx, [rbp - 0x60]
mov rcx, rbx
call fcn.1400173fc
cmp rbx, qword [rbp - 0x60]
je 0x140008704
cmp dword [r12], 0x22
je 0x140008791
mov byte [r14 + rsi], al
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x1400081f2
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400081ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008717
call fcn.14000d4e0
inc rsi
add rdi, 2
cmp rdi, 0x40
jae 0x140008206
xor ebx, ebx
jmp 0x140008120
xor eax, eax
mov esi, eax
mov edi, eax
nop dword [rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], rax
mov rax, qword [rbp + 0x18]
cmp rax, rdi
jb 0x14000878b
sub rax, rdi
mov r8d, 2
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp + 8]
cmp qword [rbp + 0x20], 0xf
cmova rdx, qword [rbp + 8]
add rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.140004e60
nop
call fcn.1400168d8
mov r12, rax
lea rbx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rbx, qword [rsp + 0x78]
mov dword [rax], 0
mov r8d, 0x10
lea rdx, [rbp - 0x60]
mov rcx, rbx
call fcn.1400173fc
cmp rbx, qword [rbp - 0x60]
je 0x14000877e
cmp dword [r12], 0x22
je 0x140008771
mov byte [r15 + rsi], al
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x1400082de
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400082d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000871d
call fcn.14000d4e0
inc rsi
add rdi, 2
cmp rdi, 0x20
jae 0x1400082f2
xor eax, eax
jmp 0x140008210
lea r8, [0x14003a778]
lea rdx, str.IDR_BIN0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
jne 0x14000831c
lea rdx, str.Could_not_find_resource:_patch.list
jmp 0x1400085d4
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
jne 0x140008338
lea rdx, str.Failed_to_load_resource:_patch.list
jmp 0x1400085d4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
test rsi, rsi
je 0x1400085cd
test eax, eax
je 0x1400085cd
xorps xmm0, xmm0
mov edi, eax
movdqu xmmword [rbp - 0x58], xmm0
xor r12d, r12d
mov qword [rbp - 0x48], r12
cmp rdi, 0x1000
jb 0x1400083a6
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x140008723
call fcn.14000d4e8
mov rcx, rax
test rax, rax
je 0x140008753
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400083ae
mov rcx, rdi
call fcn.14000d4e8
mov qword [rbp - 0x58], rax
lea rbx, [rax + rdi]
mov qword [rbp - 0x48], rbx
mov r8, rdi
mov rdx, rsi
mov rcx, rax
call fcn.14002d0f0
mov qword [rbp - 0x50], rbx
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov qword [rbp], r12
lea rax, [rsp + 0x28]
mov qword [rbp - 0x60], rax
movdqu xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x38], r12
mov rdi, qword [rsp + 0x20]
sub rdi, r15
movabs rsi, 0x7fffffffffffffff
je 0x14000846f
cmp rdi, rsi
ja 0x140008729
cmp rdi, 0x1000
jb 0x140008441
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x14000872f
call fcn.14000d4e8
mov rcx, rax
test rax, rax
je 0x140008735
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140008449
mov rcx, rdi
call fcn.14000d4e8
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rax
lea rbx, [rax + rdi]
mov qword [rsp + 0x38], rbx
mov r8, rdi
mov rdx, r15
mov rcx, rax
call fcn.14002d0f0
mov qword [rsp + 0x30], rbx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov rdi, r13
sub rdi, r14
je 0x1400084f1
cmp rdi, rsi
ja 0x14000873b
cmp rdi, 0x1000
jb 0x1400084c3
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x140008741
call fcn.14000d4e8
mov rcx, rax
test rax, rax
je 0x140008747
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400084cb
mov rcx, rdi
call fcn.14000d4e8
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
lea rbx, [rax + rdi]
mov qword [rsp + 0x50], rbx
mov r8, rdi
mov rdx, r14
mov rcx, rax
call fcn.14002d0f0
mov qword [rsp + 0x48], rbx
lea r9, [rbp - 0x10]
lea r8, [rsp + 0x28]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x58]
call fcn.140001ec0
mov rbx, qword [rbp - 0x10]
test al, al
jne 0x14000852d
lea rdx, str.Decryption_failed
lea rcx, [0x1400426b0]
call fcn.1400049e0
mov rcx, rax
call fcn.140004c90
jmp 0x140008557
mov edx, dword [rbp - 8]
sub edx, ebx
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x40]
mov rcx, rbx
call fcn.140007290
mov r13, qword [rbp - 0x30]
mov r14, qword [rbp - 0x40]
mov rdi, qword [rbp - 0x18]
mov qword [rsp + 0x20], rdi
mov r15, qword [rbp - 0x28]
test rbx, rbx
je 0x140008591
mov rdx, qword [rbp]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x140008588
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000874d
mov rcx, rbx
call fcn.14000d4e0
nop
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x1400085e9
mov rdx, qword [rbp - 0x48]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400085c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008753
call fcn.14000d4e0
jmp 0x1400085e9
lea rdx, str.Failed_to_lock_resource:_patch.list
lea rcx, [0x1400426b0]
call fcn.1400049e0
mov rcx, rax
call fcn.140004c90
nop
test r15, r15
je 0x140008627
mov rcx, qword [rsp + 0x20]
sub rcx, r15
mov rax, r15
cmp rcx, 0x1000
jb 0x14000861b
add rcx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008759
mov rdx, rcx
mov rcx, r15
call fcn.14000d4e0
nop
test r14, r14
je 0x140008660
sub r13, r14
mov rax, r14
cmp r13, 0x1000
jb 0x140008654
add r13, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000875f
mov rdx, r13
mov rcx, r14
call fcn.14000d4e0
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x14000869c
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008696
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008765
call fcn.14000d4e0
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x1400086d7
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400086d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000876b
call fcn.14000d4e0
mov rcx, qword [rbp + 0x48]
xor rcx, rsp
call fcn.14000d4c0
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, str.invalid_stoi_argument
call fcn.14000c630
nop
call fcn.140004880
int3
call fcn.140015884
int3
call fcn.140015884
int3
call fcn.1400013a0
nop
call fcn.1400061f0
int3
call fcn.1400013a0
int3
call fcn.140015884
nop
call fcn.1400061f0
int3
call fcn.1400013a0
int3
call fcn.140015884
nop
call fcn.140015884
nop
call fcn.140015884
nop
call fcn.140015884
nop
call fcn.140015884
nop
call fcn.140015884
nop
call fcn.140015884
nop
lea rcx, str.stoi_argument_out_of_range
call fcn.14000c678
int3
lea rcx, str.invalid_stoi_argument
call fcn.14000c630
nop
call fcn.140004880
nop
lea rcx, str.stoi_argument_out_of_range
call fcn.14000c678
int3