Function at 0x14000b470
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x100
mov qword [rsp + 0xb0], 0xfffffffffffffffe
mov qword [rsp + 0x148], rbx
mov rax, qword [0x14002a528]
xor rax, rsp
mov qword [rsp + 0xf0], rax
mov word [rsp + 0x48], r8w
mov rsi, rcx
mov qword [rsp + 0x58], rcx
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_GetWindowTextLengthA]
test eax, eax
jne 0x14000b774
lea rcx, [0x14002a438]
mov rax, qword [0x14002a438]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x60], rbx
lea rcx, [0x14002a438]
mov rax, qword [0x14002a438]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0xa0], rdi
xor r12d, r12d
mov rsi, r12
xor edx, edx
lea rcx, [0x14002bc10]
call fcn.14000ea0c
mov rbp, rax
lea r14d, [r12 + 1]
test rax, rax
je 0x14000b5f7
test rsi, rsi
jne 0x14000b5f7
xor r9d, r9d
lea edx, [rsi + 6]
lea r8d, [rsi + 9]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
mov r13, rax
test rax, rax
jne 0x14000b54e
mov rsi, r12
jmp 0x14000b5b9
mov rdx, rax
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
jne 0x14000b564
mov rsi, r12
jmp 0x14000b5b4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
test rax, rax
jne 0x14000b57a
mov rsi, r12
jmp 0x14000b5b4
mov rdx, r13
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edx, eax
add rdx, rsi
mov ecx, 2
cmp rsi, rdx
jae 0x14000b5b1
movzx eax, word [rsi]
lea rsi, [rsi + rax*2 + 2]
add ecx, 0xffffffff
jne 0x14000b590
cmp rsi, rdx
jae 0x14000b5b1
cmp word [rsi], r12w
cmove rsi, r12
jmp 0x14000b5b4
mov rsi, r12
test rsi, rsi
jne 0x14000b5da
mov edx, r14d
lea rcx, [0x14002bc10]
call fcn.14000ea0c
mov rbp, rax
add r14d, 1
test rax, rax
jne 0x14000b525
jmp 0x14000b5f7
test rbp, rbp
je 0x14000b5f7
mov r8d, 0x82
mov rdx, rbp
lea rcx, [rsp + 0x60]
call fcn.140004070
mov rbx, qword [rsp + 0x60]
mov rsi, r12
xor edx, edx
lea rcx, [0x14002bc10]
call fcn.14000ea0c
mov rbp, rax
mov r14d, 1
test rax, rax
je 0x14000b6fd
nop
nop
test rsi, rsi
jne 0x14000b6fd
xor r9d, r9d
lea edx, [rsi + 6]
lea r8d, [rsi + 9]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
mov r13, rax
test rax, rax
jne 0x14000b649
mov rsi, r12
jmp 0x14000b6b9
mov rdx, rax
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
jne 0x14000b65f
mov rsi, r12
jmp 0x14000b6b4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
test rax, rax
jne 0x14000b675
mov rsi, r12
jmp 0x14000b6b4
mov rdx, r13
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edx, eax
add rdx, rsi
mov ecx, 3
nop
nop
cmp rsi, rdx
jae 0x14000b6b1
movzx eax, word [rsi]
lea rsi, [rsi + rax*2 + 2]
add ecx, 0xffffffff
jne 0x14000b690
cmp rsi, rdx
jae 0x14000b6b1
cmp word [rsi], r12w
cmove rsi, r12
jmp 0x14000b6b4
mov rsi, r12
test rsi, rsi
jne 0x14000b6da
mov edx, r14d
lea rcx, [0x14002bc10]
call fcn.14000ea0c
mov rbp, rax
add r14d, 1
test rax, rax
jne 0x14000b620
jmp 0x14000b6fd
test rbp, rbp
je 0x14000b6fd
mov r8d, 0x83
mov rdx, rbp
lea rcx, [rsp + 0xa0]
call fcn.140004070
mov rdi, qword [rsp + 0xa0]
mov r9d, 0x10
mov r8, rbx
mov rdx, rdi
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, qword [rbx + 0x40]
call qword [sym.imp.USER32.dll_SetFocus]
nop
lea rdx, [rdi - 0x18]
or r13, 0xffffffffffffffff
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14000b744
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
add r13d, 0xffffffff
test r13d, r13d
jg 0x14000b765
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
movabs rax, 1
jmp 0x14000c832
xor r12d, r12d
mov r15d, r12d
lea rdi, [0x14002a390]
lea rbx, [0x14002a3a0]
nop
nop
mov edx, dword [rdi]
mov rcx, qword [rsi + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextLengthA]
cmp eax, 4
jne 0x14000c577
add r15d, 1
add rdi, 4
cmp rdi, rbx
jl 0x14000b790
lea rcx, [0x14002a438]
mov rax, qword [0x14002a438]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x40], rbx
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_GetWindowTextLengthA]
lea edi, [rax + 1]
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x14000b804
mov edx, edi
lea rcx, [rsp + 0x40]
call fcn.140003800
mov rbx, qword [rsp + 0x40]
mov r8d, edi
mov rdx, rbx
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.USER32.dll_GetWindowTextA]
mov r11d, eax
mov ecx, eax
or r13, 0xffffffffffffffff
cmp eax, r13d
jne 0x14000b83d
test rbx, rbx
jne 0x14000b82c
mov ecx, r12d
jmp 0x14000b845
xor eax, eax
mov rcx, r13
mov rdi, rbx
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
test ecx, ecx
js 0x14000c56c
cmp ecx, dword [rbx - 0xc]
jg 0x14000c56c
mov dword [rbx - 0x10], ecx
movsxd rax, ecx
mov byte [rax + rbx], 0
test r11d, r11d
jne 0x14000b888
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], r13d
add r13d, 0xffffffff
test r13d, r13d
jg 0x14000b879
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
movabs rax, 1
jmp 0x14000c832
mov rsi, rbx
mov rdi, r12
cmp byte [rbx], dil
je 0x14000b905
movsx ecx, byte [rsi]
call fcn.140011270
test eax, eax
je 0x14000b8a9
test rdi, rdi
jne 0x14000b8ac
mov rdi, rsi
jmp 0x14000b8ac
mov rdi, r12
mov rcx, rsi
call fcn.140011030
mov rsi, rax
cmp byte [rax], 0
jne 0x14000b893
test rdi, rdi
je 0x14000b905
sub edi, ebx
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x14000b8e5
mov edx, edi
lea rcx, [rsp + 0x40]
call fcn.140003800
mov rbx, qword [rsp + 0x40]
test edi, edi
js 0x14000b8fa
cmp edi, dword [rbx - 0xc]
jg 0x14000b8fa
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov byte [rax + rbx], 0
jmp 0x14000b905
mov ecx, 0x80070057
call fcn.140003050
int3
lea rcx, [rsp + 0x40]
call fcn.14000b150
mov rbx, qword [rsp + 0x40]
cmp dword [rbx - 0x10], 0x40
jle 0x14000b95c
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x40
or eax, ecx
jge 0x14000b940
mov edx, 0x40
lea rcx, [rsp + 0x40]
call fcn.140003800
mov rbx, qword [rsp + 0x40]
cmp dword [rbx - 0xc], 0x40
jge 0x14000b951
mov ecx, 0x80070057
call fcn.140003050
int3
mov dword [rbx - 0x10], 0x40
mov byte [rbx + 0x40], 0
mov edi, 0xf
mov qword [rsp + 0xe0], rdi
mov rcx, r12
mov qword [rsp + 0xd8], rcx
mov byte [rsp + 0xc8], cl
mov byte [rsp + 0xe8], 0
mov r15, r12
lea rbp, [0x140021f94]
mov rbx, qword [rsp + 0x58]
test r15, r15
je 0x14000bc21
lea rax, [rsp + 0xc8]
mov r8, qword [rsp + 0xc8]
cmp rdi, 0x10
cmovae rax, r8
cmp rbp, rax
jb 0x14000bb30
lea rax, [rsp + 0xc8]
cmp rdi, 0x10
cmovae rax, r8
add rax, rcx
cmp rax, rbp
jbe 0x14000bb30
lea rax, [rsp + 0xc8]
cmp rdi, 0x10
cmovae rax, r8
mov r14, rbp
sub r14, rax
cmp rcx, r14
jae 0x14000ba08
call fcn.14000f310
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
sub rax, r14
mov ebp, 1
cmp rax, rbp
cmovb rbp, rax
mov rax, r13
sub rax, rcx
cmp rax, rbp
jbe 0x14000ba2e
lea rax, [rcx + rbp]
cmp rax, rcx
jae 0x14000ba43
call fcn.14000f120
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
test rbp, rbp
je 0x14000bc21
lea rsi, [rcx + rbp]
cmp rsi, 0xfffffffffffffffe
jbe 0x14000ba6b
call fcn.14000f120
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
cmp rdi, rsi
jae 0x14000ba95
mov r8, rcx
mov rdx, rsi
lea rcx, [rsp + 0xc0]
call fcn.140003630
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
jmp 0x14000babf
test rsi, rsi
jne 0x14000babf
mov qword [rsp + 0xd8], r12
lea rax, [rsp + 0xc8]
cmp rdi, 0x10
cmovae rax, qword [rsp + 0xc8]
mov byte [rax], sil
jmp 0x14000bc21
test rsi, rsi
je 0x14000bc21
lea rdx, [rsp + 0xc8]
mov r8, qword [rsp + 0xc8]
cmp rdi, 0x10
cmovae rdx, r8
lea rax, [rsp + 0xc8]
cmp rdi, 0x10
cmovae rax, r8
sub rdi, rcx
add rcx, rax
lea r8, [r14 + rdx]
mov r9, rbp
mov rdx, rdi
call fcn.14000f800
mov qword [rsp + 0xd8], rsi
lea rax, [rsp + 0xc8]
cmp qword [rsp + 0xe0], 0x10
cmovae rax, qword [rsp + 0xc8]
mov byte [rsi + rax], 0
jmp 0x14000bc21
mov rax, r13
sub rax, rcx
cmp rax, 1
jbe 0x14000bb45
lea rax, [rcx + 1]
cmp rax, rcx
jae 0x14000bb5a
call fcn.14000f120
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
lea rsi, [rcx + 1]
cmp rsi, 0xfffffffffffffffe
jbe 0x14000bb79
call fcn.14000f120
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
cmp rdi, rsi
jae 0x14000bba3
mov r8, rcx
mov rdx, rsi
lea rcx, [rsp + 0xc0]
call fcn.140003630
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
jmp 0x14000bbca
test rsi, rsi
jne 0x14000bbca
mov qword [rsp + 0xd8], r12
lea rax, [rsp + 0xc8]
cmp rdi, 0x10
cmovae rax, qword [rsp + 0xc8]
mov byte [rax], sil
jmp 0x14000bc21
test rsi, rsi
je 0x14000bc21
lea rax, [rsp + 0xc8]
cmp rdi, 0x10
cmovae rax, qword [rsp + 0xc8]
sub rdi, rcx
add rcx, rax
mov r9d, 1
mov r8, rbp
mov rdx, rdi
call fcn.14000f800
mov qword [rsp + 0xd8], rsi
lea rax, [rsp + 0xc8]
cmp qword [rsp + 0xe0], 0x10
cmovae rax, qword [rsp + 0xc8]
mov byte [rsi + rax], 0
mov byte [rsp + 0xe8], 0
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x20], rax
mov r9d, 5
lea r8d, [r9 + 8]
lea rax, [0x14002a390]
mov edx, dword [rax + r15*4]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SendDlgItemMessageA]
xor eax, eax
mov rcx, r13
lea rdi, [rsp + 0xe8]
repne scasb al, byte [rdi]
not rcx
lea rsi, [rcx - 1]
lea rax, [rsp + 0xc8]
mov r8, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xe0]
cmp rdi, 0x10
cmovae rax, r8
lea rdx, [rsp + 0xe8]
mov rcx, qword [rsp + 0xd8]
cmp rdx, rax
jb 0x14000be40
lea rax, [rsp + 0xc8]
cmp rdi, 0x10
cmovae rax, r8
add rax, rcx
lea rdx, [rsp + 0xe8]
cmp rax, rdx
jbe 0x14000be40
lea rax, [rsp + 0xc8]
cmp rdi, 0x10
cmovae rax, r8
lea r14, [rsp + 0xe8]
sub r14, rax
cmp rcx, r14
jae 0x14000bcfd
call fcn.14000f310
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
sub rax, r14
cmp rax, rsi
cmovb rsi, rax
mov rax, r13
sub rax, rcx
cmp rax, rsi
jbe 0x14000bd1e
lea rax, [rsi + rcx]
cmp rax, rcx
jae 0x14000bd33
call fcn.14000f120
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
test rsi, rsi
je 0x14000bf5b
lea rbp, [rsi + rcx]
cmp rbp, 0xfffffffffffffffe
jbe 0x14000bd5b
call fcn.14000f120
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
cmp rdi, rbp
jae 0x14000bd85
mov r8, rcx
mov rdx, rbp
lea rcx, [rsp + 0xc0]
call fcn.140003630
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
jmp 0x14000bdbf
test rbp, rbp
jne 0x14000bdbf
mov qword [rsp + 0xd8], r12
lea rax, [rsp + 0xc8]
cmp rdi, 0x10
cmovae rax, qword [rsp + 0xc8]
mov byte [rax], bpl
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
jmp 0x14000bf5b
test rbp, rbp
je 0x14000bf5b
lea rdx, [rsp + 0xc8]
mov r8, qword [rsp + 0xc8]
cmp rdi, 0x10
cmovae rdx, r8
lea rax, [rsp + 0xc8]
cmp rdi, 0x10
cmovae rax, r8
sub rdi, rcx
add rcx, rax
lea r8, [r14 + rdx]
mov r9, rsi
mov rdx, rdi
call fcn.14000f800
mov qword [rsp + 0xd8], rbp
lea rax, [rsp + 0xc8]
cmp qword [rsp + 0xe0], 0x10
cmovae rax, qword [rsp + 0xc8]
mov byte [rax + rbp], 0
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
jmp 0x14000bf5b
mov rax, r13
sub rax, rcx
cmp rax, rsi
jbe 0x14000be54
lea rax, [rsi + rcx]
cmp rax, rcx
jae 0x14000be69
call fcn.14000f120
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
test rsi, rsi
je 0x14000bf5b
lea rbp, [rsi + rcx]
cmp rbp, 0xfffffffffffffffe
jbe 0x14000be91
call fcn.14000f120
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
cmp rdi, rbp
jae 0x14000bebb
mov r8, rcx
mov rdx, rbp
lea rcx, [rsp + 0xc0]
call fcn.140003630
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
jmp 0x14000bef2
test rbp, rbp
jne 0x14000bef2
mov qword [rsp + 0xd8], r12
lea rax, [rsp + 0xc8]
cmp rdi, 0x10
cmovae rax, qword [rsp + 0xc8]
mov byte [rax], bpl
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
jmp 0x14000bf5b
test rbp, rbp
je 0x14000bf5b
lea rax, [rsp + 0xc8]
cmp rdi, 0x10
cmovae rax, qword [rsp + 0xc8]
sub rdi, rcx
add rcx, rax
mov r9, rsi
lea r8, [rsp + 0xe8]
mov rdx, rdi
call fcn.14000f800
mov qword [rsp + 0xd8], rbp
lea rax, [rsp + 0xc8]
cmp qword [rsp + 0xe0], 0x10
cmovae rax, qword [rsp + 0xc8]
mov byte [rax + rbp], 0
mov rdi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0xd8]
add r15, 1
cmp r15, 4
lea rbp, [0x140021f94]
jl 0x14000b992
lea rdx, [rsp + 0xc8]
cmp rdi, 0x10
cmovae rdx, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
call fcn.14000d6c0
test al, al
jne 0x14000c0f3
lea rcx, [0x14002a438]
mov rax, qword [0x14002a438]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x88], rbx
xor edx, edx
mov ecx, 0x86
call fcn.140003070
test rax, rax
je 0x14000bfe6
mov r8d, 0x86
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.140004070
mov rbx, qword [rsp + 0x88]
lea rcx, [0x14002a438]
mov rax, qword [0x14002a438]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x98], rdi
xor edx, edx
mov ecx, 0x87
call fcn.140003070
test rax, rax
je 0x14000c032
mov r8d, 0x87
mov rdx, rax
lea rcx, [rsp + 0x98]
call fcn.140004070
mov rdi, qword [rsp + 0x98]
mov r9d, 0x30
mov r8, rbx
mov rdx, rdi
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rdx, [rdi - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14000c06a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x88]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14000c08f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
cmp qword [rsp + 0xe0], 0x10
jb 0x14000c0a7
mov rcx, qword [rsp + 0xc8]
call fcn.14000f480
mov qword [rsp + 0xe0], 0xf
mov qword [rsp + 0xd8], r12
mov byte [rsp + 0xc8], 0
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
add r13d, 0xffffffff
test r13d, r13d
jg 0x14000c0e4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
movabs rax, 1
jmp 0x14000c832
lea rdx, [rsp + 0xc8]
cmp qword [rsp + 0xe0], 0x10
cmovae rdx, qword [rsp + 0xc8]
mov rcx, rbx
call fcn.14000d920
test al, al
jne 0x14000c40c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
lea rcx, [0x14002a438]
mov rdx, qword [0x14002a438]
call qword [rdx + 0x18]
lea rbp, [rax + 0x18]
mov qword [rsp + 0x78], rbp
xor edx, edx
mov ecx, 0x88
call fcn.140003070
test rax, rax
je 0x14000c168
mov r8d, 0x88
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140004070
mov rbp, qword [rsp + 0x78]
lea rcx, [0x14002a438]
mov rax, qword [0x14002a438]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x50], rbx
xor edx, edx
mov ecx, 0x89
call fcn.140003070
test rax, rax
je 0x14000c1ab
mov r8d, 0x89
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140004070
mov rbx, qword [rsp + 0x50]
lea rcx, [0x14002a438]
mov rax, qword [0x14002a438]
call qword [rax + 0x18]
lea rsi, [rax + 0x18]
mov qword [rsp + 0xb8], rsi
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x400
mov r8d, edi
xor edx, edx
mov ecx, 0x1100
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
cmp qword [rsp + 0x68], 0
je 0x14000c32b
xor eax, eax
mov rcx, r13
lea r15, [0x140021f90]
mov rdi, r15
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
mov qword [rsp + 0x70], rcx
mov r14, r15
sub r14, rbx
mov eax, dword [rbx - 0x10]
mov dword [rsp + 0x48], eax
lea edi, [rax + rcx]
mov edx, 1
sub edx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, edx
jge 0x14000c257
mov edx, edi
lea rcx, [rsp + 0x50]
call fcn.140003800
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x70]
mov eax, dword [rsp + 0x48]
cmp r14, rax
ja 0x14000c264
lea r15, [r14 + rbx]
movsxd rdx, ecx
lea rcx, [rax + rbx]
mov r9, rdx
mov r8, r15
call fcn.14000f800
test edi, edi
js 0x14000c320
cmp edi, dword [rbx - 0xc]
jg 0x14000c320
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov byte [rax + rbx], 0
mov edx, dword [rsi - 0x10]
mov dword [rsp + 0x48], edx
mov r15, rsi
mov r14, rsi
sub r14, rbx
mov eax, dword [rbx - 0x10]
mov dword [rsp + 0x60], eax
lea edi, [rax + rdx]
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x14000c2d1
mov edx, edi
lea rcx, [rsp + 0x50]
call fcn.140003800
mov rbx, qword [rsp + 0x50]
mov edx, dword [rsp + 0x48]
mov eax, dword [rsp + 0x60]
cmp r14, rax
ja 0x14000c2de
lea r15, [r14 + rbx]
movsxd rdx, edx
lea rcx, [rax + rbx]
mov r9, rdx
mov r8, r15
call fcn.14000f800
test edi, edi
js 0x14000c315
cmp edi, dword [rbx - 0xc]
jg 0x14000c315
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov byte [rax + rbx], 0
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x68], r12
jmp 0x14000c32b
mov ecx, 0x80070057
call fcn.140003050
int3
mov ecx, 0x80070057
call fcn.140003050
int3
mov r9d, 0x10
mov r8, rbp
mov rdx, rbx
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rdx, [rsi - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14000c364
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14000c386
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14000c3a8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
cmp qword [rsp + 0xe0], 0x10
jb 0x14000c3c0
mov rcx, qword [rsp + 0xc8]
call fcn.14000f480
mov qword [rsp + 0xe0], 0xf
mov qword [rsp + 0xd8], r12
mov byte [rsp + 0xc8], 0
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
add r13d, 0xffffffff
test r13d, r13d
jg 0x14000c3fd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
movabs rax, 1
jmp 0x14000c832
lea rcx, [0x14002a438]
mov rax, qword [0x14002a438]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x80], rbx
xor edx, edx
mov ecx, 0x8b
call fcn.140003070
test rax, rax
je 0x14000c458
mov r8d, 0x8b
mov rdx, rax
lea rcx, [rsp + 0x80]
call fcn.140004070
mov rbx, qword [rsp + 0x80]
lea rcx, [0x14002a438]
mov rax, qword [0x14002a438]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0xa8], rdi
xor edx, edx
mov ecx, 0x8a
call fcn.140003070
test rax, rax
je 0x14000c4a4
mov r8d, 0x8a
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.140004070
mov rdi, qword [rsp + 0xa8]
mov r9d, 0x40
mov r8, rbx
mov rdx, rdi
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rdx, [rdi - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14000c4dc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14000c500
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
movzx edx, word [rsp + 0x48]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_EndDialog]
nop
cmp qword [rsp + 0xe0], 0x10
jb 0x14000c528
mov rcx, qword [rsp + 0xc8]
call fcn.14000f480
mov qword [rsp + 0xe0], 0xf
mov qword [rsp + 0xd8], r12
mov byte [rsp + 0xc8], 0
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
add r13d, 0xffffffff
test r13d, r13d
jg 0x14000c565
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor eax, eax
jmp 0x14000c832
mov ecx, 0x80070057
call fcn.140003050
nop
lea rcx, [0x14002a438]
mov rax, qword [0x14002a438]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x90], rbx
lea rcx, [0x14002a438]
mov rax, qword [0x14002a438]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x70], rdi
mov rsi, r12
xor edx, edx
lea rcx, [0x14002bc10]
call fcn.14000ea0c
mov rbp, rax
mov r14d, 1
test rax, rax
je 0x14000c6ac
test rsi, rsi
jne 0x14000c6ac
xor r9d, r9d
lea edx, [rsi + 6]
lea r8d, [rsi + 9]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
mov r13, rax
test rax, rax
jne 0x14000c5fa
mov rsi, r12
jmp 0x14000c668
mov rdx, rax
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
jne 0x14000c610
mov rsi, r12
jmp 0x14000c663
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
test rax, rax
jne 0x14000c626
mov rsi, r12
jmp 0x14000c663
mov rdx, r13
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edx, eax
add rdx, rsi
mov ecx, 4
nop
cmp rsi, rdx
jae 0x14000c660
movzx eax, word [rsi]
lea rsi, [rsi + rax*2 + 2]
add ecx, 0xffffffff
jne 0x14000c640
cmp rsi, rdx
jae 0x14000c660
cmp word [rsi], cx
cmove rsi, r12
jmp 0x14000c663
mov rsi, r12
test rsi, rsi
jne 0x14000c689
mov edx, r14d
lea rcx, [0x14002bc10]
call fcn.14000ea0c
mov rbp, rax
add r14d, 1
test rax, rax
jne 0x14000c5d1
jmp 0x14000c6ac
test rbp, rbp
je 0x14000c6ac
mov r8d, 0x84
mov rdx, rbp
lea rcx, [rsp + 0x90]
call fcn.140004070
mov rbx, qword [rsp + 0x90]
mov rsi, r12
xor edx, edx
lea rcx, [0x14002bc10]
call fcn.14000ea0c
mov rbp, rax
mov r14d, 1
test rax, rax
je 0x14000c7a6
nop
test rsi, rsi
jne 0x14000c7a6
xor r9d, r9d
lea edx, [rsi + 6]
lea r8d, [rsi + 9]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
mov r13, rax
test rax, rax
jne 0x14000c6f9
mov rsi, r12
jmp 0x14000c768
mov rdx, rax
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
jne 0x14000c70f
mov rsi, r12
jmp 0x14000c763
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
test rax, rax
jne 0x14000c725
mov rsi, r12
jmp 0x14000c763
mov rdx, r13
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edx, eax
add rdx, rsi
mov ecx, 5
nop
nop
cmp rsi, rdx
jae 0x14000c760
movzx eax, word [rsi]
lea rsi, [rsi + rax*2 + 2]
add ecx, 0xffffffff
jne 0x14000c740
cmp rsi, rdx
jae 0x14000c760
cmp word [rsi], cx
cmove rsi, r12
jmp 0x14000c763
mov rsi, r12
test rsi, rsi
jne 0x14000c789
mov edx, r14d
lea rcx, [0x14002bc10]
call fcn.14000ea0c
mov rbp, rax
add r14d, 1
test rax, rax
jne 0x14000c6d0
jmp 0x14000c7a6
test rbp, rbp
je 0x14000c7a6
mov r8d, 0x85
mov rdx, rbp
lea rcx, [rsp + 0x70]
call fcn.140004070
mov rdi, qword [rsp + 0x70]
mov r9d, 0x10
mov r8, rbx
mov rdx, rdi
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_MessageBoxA]
movsxd r11, r15d
lea rax, [0x14002a390]
mov edx, dword [rax + r11*4]
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetFocus]
nop
lea rdx, [rdi - 0x18]
or r13, 0xffffffffffffffff
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14000c804
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x90]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r13d
add r13d, 0xffffffff
test r13d, r13d
jg 0x14000c828
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
movabs rax, 1
mov rcx, qword [rsp + 0xf0]
xor rcx, rsp
call fcn.1400105b0
mov rbx, qword [rsp + 0x148]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret