Function at 0x14000fef0
Capabilities:
Encode data using xor
Extract resource via kernel32 functions
Hash data with crc32

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc0
lea rbp, [rsp + 0x20]
mov qword [rbp + 0xf8], rbx
mov rax, qword [0x14003e008]
xor rax, rbp
mov qword [rbp + 0x98], rax
xor esi, esi
mov dword [rbp], r8d
mov r15d, r8d
mov qword [rbp + 8], rcx
mov dword [rbp + 0x10], esi
mov rdi, rdx
mov r12, rcx
mov r8d, esi
test r15d, r15d
jle 0x14000fd72
lea r9, [0x140000000]
lea r10, [0x14000ed60]
mov qword [r12], rsi
mov rbx, rdi
movzx r13d, byte [rdi]
inc rdi
mov edx, r13d
lea eax, [r13 - 0x2e]
cmp eax, 0x49
ja case.default.0x14000fb17
cdqe
movzx eax, byte [r9 + rax + 0xfe70]
mov ecx, dword [r9 + rax*4 + 0xfdec]
add rcx, r9
jmp rcx
mov rax, qword [r12 - 8]
jmp 0x14000fd34
movsxd rsi, dword [rdi]
lea rdi, [rbx + 5]
mov rcx, rsi
call qword [sym.imp.python310.dll_PyTuple_New]
mov rbx, rax
test esi, esi
jle 0x14000f299
lea rcx, [rax + 0x18]
mov r8d, esi
mov rdx, rdi
call 0x14000f1d0
mov rdi, rax
mov rcx, qword [rbx + 8]
lea rax, [0x14000eb20]
mov rsi, qword [0x140047ab0]
mov r14, qword [rcx + 0x78]
mov r15, qword [rcx + 0xc8]
mov qword [rcx + 0x78], rax
lea rcx, [0x14000eb80]
mov rax, qword [rbx + 8]
mov qword [rax + 0xc8], rcx
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.python310.dll_PyDict_GetItem]
test rax, rax
je 0x14000f2e2
mov rbx, rax
jmp 0x14000f2f1
mov r8, rbx
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.python310.dll_PyDict_SetItem]
mov rax, qword [rbx + 8]
mov qword [rax + 0x78], r14
mov rax, qword [rbx + 8]
mov qword [rax + 0xc8], r15
mov r15d, dword [rbp]
mov qword [r12], rbx
jmp 0x14000fd38
movsxd rsi, dword [rdi]
lea rdi, [rbx + 5]
mov rcx, rsi
call qword [sym.imp.python310.dll_PyList_New]
mov rbx, rax
test esi, esi
jle 0x14000f33a
mov rcx, qword [rax + 0x18]
mov r8d, esi
mov rdx, rdi
call 0x14000f1d0
mov rdi, rax
mov rcx, qword [rbx + 8]
lea rax, [0x14000ea50]
mov rsi, qword [0x140047b30]
mov r14, qword [rcx + 0x78]
mov r15, qword [rcx + 0xc8]
mov qword [rcx + 0x78], rax
lea rcx, [0x14000eab0]
jmp 0x14000f2c1
movsxd r12, dword [rdi]
lea rdi, [rbx + 5]
mov rcx, r12
mov rsi, r12
call qword [sym.imp.python310.dll__PyDict_NewPresized]
mov r14, rax
test r12d, r12d
jle 0x14000f41a
lea rcx, [r12*8]
movabs rdx, 0xffffffffffffff0
lea rax, [rcx + 0xf]
cmp rax, rcx
ja 0x14000f3a4
mov rax, rdx
and rax, 0xfffffffffffffff0
call fcn.14002b480
sub rsp, rax
lea rax, [rcx + 0xf]
lea rbx, [rsp + 0x20]
cmp rax, rcx
ja 0x14000f3c1
mov rax, rdx
and rax, 0xfffffffffffffff0
call fcn.14002b480
sub rsp, rax
mov r8d, r12d
mov rdx, rdi
mov rcx, rbx
lea r15, [rsp + 0x20]
call 0x14000f1d0
mov r8d, r12d
mov rdx, rax
mov rcx, r15
call 0x14000f1d0
mov rdi, rax
test r12d, r12d
jle 0x14000f41a
sub r15, rbx
nop dword [rax]
mov r8, qword [r15 + rbx]
mov rcx, r14
mov rdx, qword [rbx]
call qword [sym.imp.python310.dll_PyDict_SetItem]
lea rbx, [rbx + 8]
sub rsi, 1
jne 0x14000f400
mov rax, qword [r14 + 8]
lea rcx, [0x14000ed80]
mov rbx, qword [0x140047ad8]
mov rdx, r14
mov rsi, qword [rax + 0x78]
mov r15, qword [rax + 0xc8]
mov qword [rax + 0x78], rcx
lea rcx, [0x14000ef30]
mov rax, qword [r14 + 8]
mov qword [rax + 0xc8], rcx
mov rcx, rbx
call qword [sym.imp.python310.dll_PyDict_GetItem]
test rax, rax
je 0x14000f463
mov r14, rax
jmp 0x14000f472
mov r8, r14
mov rdx, r14
mov rcx, rbx
call qword [sym.imp.python310.dll_PyDict_SetItem]
mov rax, qword [r14 + 8]
mov r12, qword [rbp + 8]
mov qword [rax + 0x78], rsi
mov rax, qword [r14 + 8]
mov qword [rax + 0xc8], r15
mov r15d, dword [rbp]
mov qword [r12], r14
jmp 0x14000fd38
movsxd r12, dword [rdi]
lea rdi, [rbx + 5]
cmp r13b, 0x53
jne 0x14000f4ad
xor ecx, ecx
call qword [sym.imp.python310.dll_PySet_New]
jmp 0x14000f4f2
test r12d, r12d
jne 0x14000f4ea
mov rsi, qword [0x140047cc8]
test rsi, rsi
jne 0x14000f4e4
lea rcx, [0x140034fd5]
call qword [sym.imp.python310.dll_PyBytes_FromString]
mov rcx, qword [sym.imp.python310.dll_PyFrozenSet_Type]
mov rdx, rax
call fcn.14000a7c0
mov rsi, rax
mov qword [0x140047cc8], rax
mov rax, qword [rsi + 8]
jmp 0x14000f567
xor ecx, ecx
call qword [sym.imp.python310.dll_PyFrozenSet_New]
mov rsi, rax
test r12d, r12d
jle 0x14000f556
lea rax, [r12*8]
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x14000f515
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.14002b480
sub rsp, rcx
mov r8d, r12d
mov rdx, rdi
lea r15, [rsp + 0x20]
mov rcx, r15
call 0x14000f1d0
xor ebx, ebx
mov rdi, rax
test r12d, r12d
jle 0x14000f556
mov rdx, qword [r15 + rbx*8]
mov rcx, rsi
call qword [sym.imp.python310.dll_PySet_Add]
inc rbx
cmp rbx, r12
jl 0x14000f541
mov rax, qword [rsi + 8]
mov rbx, qword [0x140047b10]
cmp r13b, 0x53
je 0x14000f56e
mov rbx, qword [0x140047b18]
mov r14, qword [rax + 0x78]
lea rcx, [0x14000ebf0]
mov r15, qword [rax + 0xc8]
mov rdx, rsi
mov qword [rax + 0x78], rcx
lea rcx, [0x14000ec90]
mov rax, qword [rsi + 8]
mov qword [rax + 0xc8], rcx
mov rcx, rbx
call qword [sym.imp.python310.dll_PyDict_GetItem]
test rax, rax
je 0x14000f5ac
mov rsi, rax
jmp 0x14000f5bb
mov r8, rsi
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.python310.dll_PyDict_SetItem]
mov rax, qword [rsi + 8]
mov r12, qword [rbp + 8]
mov qword [rax + 0x78], r14
mov rax, qword [rsi + 8]
mov qword [rax + 0xc8], r15
mov r15d, dword [rbp]
mov qword [r12], rsi
jmp 0x14000fd38
mov ecx, dword [rdi]
lea rdi, [rbx + 5]
call qword [sym.imp.python310.dll_PyLong_FromLong]
mov rsi, qword [0x140047ae0]
mov rdx, rax
mov rcx, rsi
mov rbx, rax
call qword [sym.imp.python310.dll_PyDict_GetItem]
test rax, rax
je 0x14000f612
mov rbx, rax
mov qword [r12], rax
jmp 0x14000fd38
mov r8, rbx
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.python310.dll_PyDict_SetItem]
mov qword [r12], rbx
jmp 0x14000fd38
mov rcx, qword [rdi]
lea rdi, [rbx + 9]
call qword [sym.imp.python310.dll_PyLong_FromLongLong]
jmp 0x14000f5eb
xor ecx, ecx
call qword [sym.imp.python310.dll_PyLong_FromLong]
movzx r13d, byte [rdi]
mov ecx, 0x40
lea rdi, [rbx + 2]
mov r15, rax
mov ebx, dword [rdi]
add rdi, 4
call qword [sym.imp.python310.dll_PyLong_FromLong]
mov r12, rax
test ebx, ebx
jle 0x14000f6b3
mov r14d, ebx
nop word [rax + rax]
mov rdx, r12
mov rcx, r15
call qword [sym.imp.python310.dll_PyNumber_InPlaceLshift]
mov rcx, qword [rdi]
mov rbx, rax
add rdi, 8
call qword [sym.imp.python310.dll_PyLong_FromUnsignedLongLong]
mov rdx, rax
mov rcx, rbx
mov rsi, rax
call qword [sym.imp.python310.dll_PyNumber_InPlaceAdd]
sub qword [rsi], 1
mov r15, rax
jne 0x14000f6ad
mov rcx, rsi
call qword [sym.imp.python310.dll__Py_Dealloc]
sub r14, 1
jne 0x14000f670
sub qword [r12], 1
jne 0x14000f6c3
mov rcx, r12
call qword [sym.imp.python310.dll__Py_Dealloc]
cmp r13b, 0x2d
jne 0x14000f6f5
mov ecx, 0xffffffff
call qword [sym.imp.python310.dll_PyLong_FromLong]
mov rdx, rax
mov rcx, r15
mov rbx, rax
call qword [sym.imp.python310.dll_PyNumber_InPlaceMultiply]
sub qword [rbx], 1
mov r15, rax
jne 0x14000f6f5
mov rcx, rbx
call qword [sym.imp.python310.dll__Py_Dealloc]
mov rbx, qword [0x140047ae0]
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.python310.dll_PyDict_GetItem]
test rax, rax
je 0x14000f721
mov r12, qword [rbp + 8]
mov r15, rax
mov r15d, dword [rbp]
mov qword [r12], rax
jmp 0x14000fd38
mov r8, r15
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.python310.dll_PyDict_SetItem]
mov r12, qword [rbp + 8]
mov qword [r12], r15
mov r15d, dword [rbp]
jmp 0x14000fd38
mov rax, qword [rdi]
lea rdi, [rbx + 9]
mov qword [rbp + 8], rax
movsd xmm0, qword [rbp + 8]
call qword [sym.imp.python310.dll_PyFloat_FromDouble]
mov rsi, qword [0x140047b08]
mov rbx, rax
mov rcx, qword [rax + 8]
lea rax, [0x14000ed60]
mov r14, qword [rcx + 0x78]
mov r15, qword [rcx + 0xc8]
mov qword [rcx + 0xc8], rax
jmp 0x14000f2cc
mov rax, qword [rdi]
lea rdi, [rbx + 9]
mov qword [rbp + 0x28], rax
mov rax, qword [rdi]
add rdi, 8
movsd xmm0, qword [rbp + 0x28]
mov qword [rbp + 8], rax
movsd xmm1, qword [rbp + 8]
call qword [sym.imp.python310.dll_PyComplex_FromDoubles]
jmp 0x14000fd34
mov r8d, 2
lea rcx, [rbp + 0x38]
mov rdx, rdi
call 0x14000f1d0
mov rcx, qword [sym.imp.python310.dll_PyComplex_Type]
lea rdx, [rbp + 0x48]
mov rdi, rax
mov rax, qword [rbp + 0x38]
test rax, rax
cmove rax, qword [0x140046350]
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x40]
mov qword [rbp + 0x50], rax
call fcn.14000b520
jmp 0x14000fd34
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp byte [rdi + rbx], 0
jne 0x14000f800
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.python310.dll_PyBytes_FromStringAndSize]
inc rbx
add rdi, rbx
mov rbx, qword [0x140047ac0]
mov rdx, rax
mov rcx, rbx
mov rsi, rax
call qword [sym.imp.python310.dll_PyDict_GetItem]
test rax, rax
je 0x14000f842
mov rsi, rax
mov qword [r12], rax
jmp 0x14000fd38
mov r8, rsi
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.python310.dll_PyDict_SetItem]
mov qword [r12], rsi
jmp 0x14000fd38
mov edx, 1
mov rcx, rdi
call qword [sym.imp.python310.dll_PyBytes_FromStringAndSize]
lea rdi, [rbx + 2]
jmp 0x14000f81b
mov edx, 1
mov rcx, rdi
call qword [sym.imp.python310.dll_PyUnicode_FromStringAndSize]
lea rcx, [rbp + 0x18]
mov qword [rbp + 0x18], rax
lea rdi, [rbx + 2]
call qword [sym.imp.python310.dll_PyUnicode_InternInPlace]
mov rax, qword [rbp + 0x18]
jmp 0x14000fd34
movsxd rax, dword [rdi]
lea rdi, [rbx + 5]
mov rcx, rdi
mov rdx, rax
mov rbx, rax
call qword [sym.imp.python310.dll_PyBytes_FromStringAndSize]
jmp 0x14000f818
movsxd rax, dword [rdi]
lea rdi, [rbx + 5]
mov rcx, rdi
mov rdx, rax
mov rbx, rax
call qword [sym.imp.python310.dll_PyByteArray_FromStringAndSize]
add rdi, rbx
jmp 0x14000fd34
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rdi + rbx], 0
jne 0x14000f8d7
lea r8, str.surrogatepass
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.python310.dll_PyUnicode_DecodeUTF8]
inc rdi
mov qword [rbp + 0x20], rax
add rdi, rbx
cmp r13b, 0x61
jne 0x14000fd34
lea rcx, [rbp + 0x20]
call qword [sym.imp.python310.dll_PyUnicode_InternInPlace]
mov rax, qword [rbp + 0x20]
jmp 0x14000fd34
movsxd rax, dword [rdi]
lea r8, str.surrogatepass
lea rdi, [rbx + 5]
mov rdx, rax
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.python310.dll_PyUnicode_DecodeUTF8]
add rdi, rbx
jmp 0x14000fd34
mov rax, qword [sym.imp.python310.dll__Py_NoneStruct]
jmp 0x14000fd34
mov rax, qword [sym.imp.python310.dll__Py_TrueStruct]
jmp 0x14000fd34
mov rax, qword [sym.imp.python310.dll__Py_FalseStruct]
jmp 0x14000fd34
mov r8d, 3
lea rcx, [rbp + 0x68]
mov rdx, rdi
call 0x14000f1d0
mov r8, qword [rbp + 0x78]
mov rdi, rax
mov rdx, qword [rbp + 0x70]
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.python310.dll_PySlice_New]
jmp 0x14000fd34
mov r8d, 3
lea rcx, [rbp + 0x80]
mov rdx, rdi
call 0x14000f1d0
mov r8, qword [rbp + 0x90]
mov rdi, rax
mov rdx, qword [rbp + 0x88]
mov rcx, qword [rbp + 0x80]
call fcn.140009440
jmp 0x14000fd34
movzx eax, byte [rdi]
lea rdi, [rbx + 2]
mov edx, eax
cmp eax, 6
ja case.default.0x14000f9e3
mov ecx, dword [r9 + rax*4 + 0xfebc]
add rcx, r9
jmp rcx
mov rax, qword [sym.imp.python310.dll__Py_NoneStruct]
mov rcx, qword [rax + 8]
mov qword [r12], rcx
jmp 0x14000fd38
mov rcx, qword [sym.imp.python310.dll_PyEllipsis_Type]
mov qword [r12], rcx
jmp 0x14000fd38
mov rax, qword [sym.imp.python310.dll__Py_NotImplementedStruct]
mov rcx, qword [rax + 8]
mov qword [r12], rcx
jmp 0x14000fd38
mov rcx, qword [sym.imp.python310.dll_PyFunction_Type]
mov qword [r12], rcx
jmp 0x14000fd38
mov rcx, qword [sym.imp.python310.dll_PyGen_Type]
mov qword [r12], rcx
jmp 0x14000fd38
mov rcx, qword [sym.imp.python310.dll_PyCFunction_Type]
mov qword [r12], rcx
jmp 0x14000fd38
mov rcx, qword [sym.imp.python310.dll_PyCode_Type]
mov qword [r12], rcx
jmp 0x14000fd38
movzx eax, byte [rdi]
lea rdi, [rbx + 2]
mov edx, eax
mov ecx, eax
test al, al
je 0x14000fa9f
sub ecx, 1
je 0x14000fa86
cmp ecx, 1
jne 0x14000fdc2
mov rax, qword [0x1400465a0]
jmp 0x14000fd34
mov rcx, qword [0x1400465d0]
lea rdx, [0x140037b88]
call qword [sym.imp.python310.dll_PyObject_GetAttrString]
jmp 0x14000fd34
mov rcx, qword [0x1400465d0]
lea rdx, str.Ellipsis
call qword [sym.imp.python310.dll_PyObject_GetAttrString]
jmp 0x14000fd34
mov rdx, rdi
nop dword [rax + rax]
movzx eax, byte [rdi]
inc rdi
test al, al
jne 0x14000fac0
mov rcx, qword [0x1400465d0]
call qword [sym.imp.python310.dll_PyObject_GetAttrString]
jmp 0x14000fd34
mov rdx, rdi
nop
movzx eax, byte [rdi]
inc rdi
test al, al
jne 0x14000fae0
mov rcx, qword [0x1400465d0]
call qword [sym.imp.python310.dll_PyObject_GetAttrString]
jmp 0x14000fd34
movzx eax, byte [rdi]
lea rdi, [rbx + 2]
cmp eax, 5
ja case.default.0x14000fb17
mov ecx, dword [r9 + rax*4 + 0xfed8]
add rcx, r9
jmp rcx
mov rbx, qword [0x140047cf0]
test rbx, rbx
jne 0x14000fc84
xorps xmm0, xmm0
call qword [sym.imp.python310.dll_PyFloat_FromDouble]
mov rbx, rax
mov qword [0x140047cf0], rax
jmp 0x14000fc7d
mov rbx, qword [0x140047ca8]
test rbx, rbx
jne 0x14000fc84
xorps xmm0, xmm0
call qword [sym.imp.python310.dll_PyFloat_FromDouble]
movsd xmm1, qword [0x140039108]
mov qword [0x140047ca8], rax
movsd xmm0, qword [rax + 0x10]
call fcn.14001f208
mov rbx, qword [0x140047ca8]
jmp 0x14000fc78
mov rbx, qword [0x140047c98]
test rbx, rbx
jne 0x14000fc84
movsd xmm0, qword [0x140039110]
call qword [sym.imp.python310.dll_PyFloat_FromDouble]
movsd xmm1, qword [0x1400390f8]
mov qword [0x140047c98], rax
movsd xmm0, qword [rax + 0x10]
call fcn.14001f208
mov rbx, qword [0x140047c98]
jmp 0x14000fc78
mov rbx, qword [0x140047c68]
test rbx, rbx
jne 0x14000fc84
movsd xmm0, qword [0x140039110]
call qword [sym.imp.python310.dll_PyFloat_FromDouble]
movsd xmm1, qword [0x140039108]
mov qword [0x140047c68], rax
movsd xmm0, qword [rax + 0x10]
call fcn.14001f208
mov rbx, qword [0x140047c68]
jmp 0x14000fc78
mov rbx, qword [0x140047cd8]
test rbx, rbx
jne 0x14000fc84
movsd xmm0, qword [0x140039100]
call qword [sym.imp.python310.dll_PyFloat_FromDouble]
movsd xmm1, qword [0x1400390f8]
mov qword [0x140047cd8], rax
movsd xmm0, qword [rax + 0x10]
call fcn.14001f208
mov rbx, qword [0x140047cd8]
jmp 0x14000fc78
mov rbx, qword [0x140047c90]
test rbx, rbx
jne 0x14000fc84
movsd xmm0, qword [0x140039100]
call qword [sym.imp.python310.dll_PyFloat_FromDouble]
movsd xmm1, qword [0x140039108]
mov qword [0x140047c90], rax
movsd xmm0, qword [rax + 0x10]
call fcn.14001f208
mov rbx, qword [0x140047c90]
movsd qword [rbx + 0x10], xmm0
lea r10, [0x14000ed60]
mov rax, qword [rbx + 8]
mov rsi, qword [0x140047b08]
mov r14, qword [rax + 0x78]
mov r15, qword [rax + 0xc8]
mov qword [rax + 0xc8], r10
jmp 0x14000f2cc
movsxd rcx, dword [rdi]
lea rax, [rbx + 5]
lea rdi, [rbx + 5]
mov qword [r12], rax
add rdi, rcx
jmp 0x14000fd5a
mov r8d, 2
lea rcx, [rbp + 0x58]
mov rdx, rdi
call 0x14000f1d0
mov rdx, qword [rbp + 0x60]
mov rdi, rax
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.python310.dll_Py_GenericAlias]
jmp 0x14000fd34
mov r8d, 1
lea rcx, [rbp + 0x30]
mov rdx, rdi
call 0x14000f1d0
mov r14, qword [rbp + 0x30]
mov rdi, rax
mov rcx, r14
call fcn.14000dfd0
cmp qword [r14 + 0x10], 0
mov rax, rsi
jle 0x14000fd34
lea rbx, [r14 + 0x18]
mov rdx, qword [rbx]
test rax, rax
jne 0x14000fd1e
mov rax, rdx
jmp 0x14000fd27
mov rcx, rax
call qword [sym.imp.python310.dll_PyNumber_InPlaceOr]
inc rsi
add rbx, 8
cmp rsi, qword [r14 + 0x10]
jl 0x14000fd11
mov qword [r12], rax
mov rax, qword [r12]
lea r9, [0x140000000]
mov r8d, dword [rbp + 0x10]
lea r10, [0x14000ed60]
inc qword [rax]
mov rax, qword [r12]
inc qword [rax]
xor esi, esi
add r12, 8
inc r8d
mov qword [rbp + 8], r12
mov dword [rbp + 0x10], r8d
cmp r8d, r15d
jl 0x14000f230
mov rax, rdi
mov rcx, qword [rbp + 0x98]
xor rcx, rbp
call fcn.140019ae0
mov rbx, qword [rbp + 0xf8]
lea rsp, [rbp + 0xa0]
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, str.Missing_decoding_for__d_n
call fcn.140009530
call fcn.14001bd28
int3
lea rcx, str.Missing_anon_value_for__d_n
call fcn.140009530
call fcn.14001bd28
int3
lea rcx, str.Missing_special_value_for__d_n
call fcn.140009530
call fcn.14001bd28
int3
sub r15d, r8d
lea rcx, str.Missing_values__d_n
mov edx, r15d
call fcn.140009530
call fcn.14001bd28
int3
mov qword [rsp + 0x18], rbp
push rsi
sub rsp, 0x20
cmp byte [0x140047ce8], 0
mov rsi, rdx
mov rbp, rcx
jne 0x140010026
mov edx, 3
xor ecx, ecx
lea r8d, [rdx + 7]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov qword [0x140046e68], rax
mov edx, 0xffffffff
mov r10d, dword [rax]
add rax, 4
mov qword [0x140046e68], rax
mov ecx, dword [rax]
lea r8, [rax + 4]
mov qword [0x140046e68], r8
test ecx, ecx
je 0x140010014
mov r9d, ecx
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [r8]
lea r8, [r8 + 1]
xor edx, eax
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0xedb88320
xor ecx, edx
mov eax, ecx
and al, 1
neg al
sbb edx, edx
shr ecx, 1
and edx, 0xedb88320
xor edx, ecx
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0xedb88320
xor ecx, edx
mov eax, ecx
and al, 1
neg al
sbb edx, edx
shr ecx, 1
and edx, 0xedb88320
xor edx, ecx
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0xedb88320
xor ecx, edx
mov eax, ecx
and al, 1
neg al
sbb edx, edx
shr ecx, 1
and edx, 0xedb88320
xor edx, ecx
mov eax, edx
and al, 1
neg al
sbb ecx, ecx
shr edx, 1
and ecx, 0xedb88320
xor ecx, edx
mov eax, ecx
and al, 1
neg al
sbb edx, edx
shr ecx, 1
and edx, 0xedb88320
xor edx, ecx
sub r9, 1
jne 0x14000ff70
not edx
cmp edx, r10d
jne 0x1400101a1
mov byte [0x140047ce8], 1
lea rdx, [0x140036838]
mov rcx, rsi
call fcn.14002b640
test eax, eax
je 0x1400100f5
cmp byte [0x140047c59], 1
je 0x1400100f5
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
call qword [sym.imp.python310.dll_PyDict_New]
mov qword [0x140047ae0], rax
call qword [sym.imp.python310.dll_PyDict_New]
mov qword [0x140047b08], rax
call qword [sym.imp.python310.dll_PyDict_New]
mov qword [0x140047ac0], rax
call qword [sym.imp.python310.dll_PyDict_New]
mov qword [0x140047ab0], rax
call qword [sym.imp.python310.dll_PyDict_New]
mov qword [0x140047b30], rax
call qword [sym.imp.python310.dll_PyDict_New]
mov qword [0x140047ad8], rax
call qword [sym.imp.python310.dll_PyDict_New]
mov qword [0x140047b10], rax
call qword [sym.imp.python310.dll_PyDict_New]
mov qword [0x140047b18], rax
mov ebx, 0xfffffffb
lea rdi, [0x1400465f0]
mov ecx, ebx
call qword [sym.imp.python310.dll_PyLong_FromLong]
inc ebx
mov qword [rdi], rax
lea rdi, [rdi + 8]
inc qword [rax]
cmp ebx, 0x101
jle 0x1400100c8
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov byte [0x140047c59], 1
mov r8, qword [0x140046e68]
mov rax, rsi
mov rdx, r8
sub rdx, rsi
movzx ecx, byte [rax]
cmp cl, byte [rax + rdx]
jne 0x140010118
inc rax
test cl, cl
jne 0x140010105
xor ecx, ecx
jmp 0x14001011d
sbb ecx, ecx
or ecx, 1
mov rax, 0xffffffffffffffff
cmp byte [r8 + rax + 1], 0
lea rax, [rax + 1]
jne 0x140010124
lea rdx, [r8 + rax]
mov eax, dword [r8 + rax + 1]
add rdx, 5
test ecx, ecx
je 0x140010187
add rdx, rax
mov rax, rsi
mov r8, rdx
sub r8, rsi
nop dword [rax]
movzx ecx, byte [rax]
cmp cl, byte [rax + r8]
jne 0x140010164
inc rax
test cl, cl
jne 0x140010150
xor ecx, ecx
jmp 0x140010169
sbb ecx, ecx
or ecx, 1
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdx + rax], 0
jne 0x140010170
add rdx, rax
mov eax, dword [rdx + 1]
add rdx, 5
test ecx, ecx
jne 0x140010141
movzx r8d, word [rdx]
mov rcx, rbp
add rdx, 2
mov rbp, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
jmp 0x14000f1d0
lea rcx, str.Error__corrupted_constants_object
call fcn.14001cd64
call fcn.14001bd28
int3