Function at 0x14001e870
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x7c0
lea rbp, [rsp + 0x80]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400ee200]
xor rax, rsp
mov qword [rbp + 0x728], rax
mov dword [rbp + 8], r9d
mov r15, rcx
mov qword [rbp + 0x10], rcx
xor esi, esi
mov edx, esi
lea r8, [0x140000000]
or r14, 0xffffffffffffffff
movsxd rcx, edx
mov eax, r14d
xchg dword [r8 + rcx*4 + 0xef464], eax
inc edx
cmp edx, 0x14
jb 0x14001e8be
mov edx, esi
movsxd rcx, edx
movabs rax, 0xbff0000000000000
xchg qword [r8 + rcx*8 + 0xef4b8], rax
inc edx
cmp edx, 0x14
jb 0x14001e8d5
mov edx, reloc.WS2_32.dll_WSAGetLastError
lea r8d, [rdx - 0x65]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
mov rdx, rbx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
lea r9, [rbp + 0x3c0]
xor r8d, r8d
mov edx, edi
mov rcx, rax
call qword [sym.imp.GDI32.dll_AddFontMemResourceEx]
mov qword [0x1400f3500], rax
movabs rax, 0xe309eddf4646543a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x64b9a082964402f4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0x108eb1d2ac4d4e69
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0x8da0e5d43abfcb2e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0x3ecb2a9cb0a5a0a2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0xc6f3fdfe1b62582a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs rax, 0x6d1223558f16b8e9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0x480d201423cbb45e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
movabs rax, 0xa4e3696d5cff05df
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0x8fe79252ec6a28fa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0x5a5d7f6b10a1cd25
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rax, 0x902bb2e13ae9316a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movabs rax, 0xe9cd756181b9641a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xdb16b1b5aacf0e4c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x165989cedba2b8c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0xadcd10d90a9d63e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0xd6e44f8945dbba68
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x17527e7392c3abf6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xa0269e265d322b38
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xbf77563b200dbfb1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0xf727121e5c14e0ac
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x8f60632ecc5e1030
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x9e6d5f37c9982abd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0xacb4c287e89654af
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x6d66cea3f7b735e2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0xad230dbceef03ddd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0xc145c546f2c4441
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x58b2185b0531357a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x3edb6640652f33e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x8db48f27cb372a0e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0xde66f3ff42ca730f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rax, 0xe798ab7adbb02ccb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
movabs rax, 0xad66636d09149237
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0x1d653ca3dd7a5652
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0x53bab022c08ff805
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0x2239c46ef163000c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movabs rax, 0xaabd246c279a3118
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0xbff39f107442af81
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0x747a72e73e48935d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
movabs rax, 0x13644b3a6a550fa5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs rax, 0x4a7f29a05969c4fa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rax, 0x5f3dea966fb8b620
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movabs rax, 0x61014d0f3f1235d1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
movabs rax, 0xe610034fe177a584
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
movabs rax, 0xf09443449ac5c3fc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
movabs rax, 0xb33e11991473f07e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movabs rax, 0xa615592088a78cf8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
movabs rax, 0x8bd51eaba274581e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movabs rax, 0xdddf9f2118235207
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
movabs rax, 0x3c2b50ddba05c643
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xc0c97d7f1112296
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
movabs rax, 0xd4fda14573aaad02
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
movabs rax, 0x3a5610af269e491e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x9e6cadd5420f5954
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x67dbd4d775ee491d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
movabs rax, 0x438806ab9a98910f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
movabs rax, 0x9b93dd5f49720d4a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
movabs rax, 0xed3c554cee2354bd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
movabs rax, 0x13d22afce839fdf2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x3d625a3f73900c96
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f8], rax
movabs rax, 0x89c6d4f1b5b1c9c6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
movabs rax, 0x5fb0e247e88929ef
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs rdi, 0xe361edb8462f5477
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
movabs r15, 0x64dfa0ed96640280
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
movabs rax, 0x10ebb1a2ac1e4e49
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
movabs rax, 0x8d80e5a73ad3cb42
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
movabs rax, 0x3eaa2abcb0d6a0cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
movabs r13, 0xc69ffd911b425844
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4c8], rax
movabs rax, 0x6d7123268f3bb88d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4d0], rax
movabs r12, 0x4861207b23a4b436
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4d8], rax
movabs rax, 0xa4ac69205cb205ff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
movabs rax, 0x8fc79215ec3a28a8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
movabs rax, 0x5a297f0a10c9cd51
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
movabs rax, 0x905db28f3a80314a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
movabs rax, 0xe9be750481cd6473
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
movabs rax, 0xdb77b1d9aabf0e6c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
movabs rax, 0x11698eeeddf2bf5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x510], rax
movabs rax, 0xaa8d16390c0d61e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x518], rax
movabs rax, 0xd6c44fe845fbba07
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x520], rax
movabs rax, 0x17267e1d92a2ab90
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x528], rax
movabs rax, 0xa04f9e525d412b59
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x530], rax
movabs rax, 0xbf575657206cbfd2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x538], rax
movabs rax, 0xf74b126c5c7be0db
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x540], rax
movabs rax, 0x8f066341cc7e1054
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x548], rax
movabs rax, 0x9e0a5f56c9f52a9d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x550], rax
movabs rax, 0xac94c2abe8f554c6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x558], rax
movabs rax, 0x6d12ced0f7ce358f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x560], rax
movabs rax, 0xad0f0dc5ee823db8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x568], rax
movabs rax, 0xc705c3a6f4d4461
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x570], rax
movabs rax, 0x58c4183f0550355a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x578], rax
movabs rax, 0x3eae663465413383
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x580], rax
movabs rax, 0x8dbe8f09cb522a7c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x588], rax
movabs rax, 0xde0bf39e428d7305
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x590], rax
movabs rax, 0xe7ebab13db902cae
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
movabs rax, 0xad14631809779217
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5a0], rax
movabs rax, 0x1d113ccddd1f5620
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5a8], rax
movabs rax, 0x53d3b002c0f6f869
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5b0], rax
movabs rax, 0x224dc407f1430062
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5b8], rax
movabs rax, 0xaacf241c27ba316b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5c0], rax
movabs rax, 0xbf9f9f71746fafe4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5c8], rax
movabs rax, 0x745a72863e20932d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5d0], rax
movabs rax, 0x13034b5b6a210fd6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5d8], rax
movabs rax, 0x4a0829805945c49f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
movabs rax, 0x5f55eaf56fd1b648
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
movabs rax, 0x61604d6a3f7f35f1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5f0], rax
movabs rax, 0xe669036fe104a5ea
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5f8], rax
movabs rax, 0xf0f543649ab0c393
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x600], rax
movabs rax, 0xb35f11b91416f00c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x608], rax
movabs rax, 0xa672594e88c88c95
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x610], rax
movabs rax, 0x8bb01ec3a200583e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x618], rax
movabs rax, 0xddad9f4818455227
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x620], rax
movabs rax, 0x3c5f50fdba71c630
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x628], rax
movabs rax, 0xc7497b2f13122f9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x630], rax
movabs rax, 0xd494a13773cfad72
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x638], rax
movabs rax, 0x3a3310cc26f0497b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x640], rax
movabs rax, 0x9e1fada142665974
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x648], rax
movabs rax, 0x67bcd4b67583493d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x650], rax
movabs rax, 0x43ea068b9afb9166
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x658], rax
movabs rax, 0x9be1dd3049140d2f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x660], rax
movabs rax, 0xed485525ee0354d8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x668], rax
movabs rax, 0x13a72a9ae819fd81
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x670], rax
movabs rax, 0x3d105a1f73fc0cfa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x678], rax
movabs rax, 0x89a7d494b5ddc9a3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x680], rax
movabs rax, 0x5fb0e269e8ec299c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x688], rax
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x4a0]
vmovdqa ymmword [rbp + 0x120], ymm1
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x4c0]
vmovdqa ymmword [rbp + 0x140], ymm1
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0x4e0]
vmovdqa ymmword [rbp + 0x160], ymm1
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x500]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x520]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x540]
vmovdqa ymmword [rbp + 0x1c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x560]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x200]
vpxor ymm1, ymm0, ymmword [rbp + 0x580]
vmovdqa ymmword [rbp + 0x200], ymm1
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x5a0]
vmovdqa ymmword [rbp + 0x220], ymm1
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x5c0]
vmovdqa ymmword [rbp + 0x240], ymm1
vmovdqu ymm0, ymmword [rbp + 0x260]
vpxor ymm1, ymm0, ymmword [rbp + 0x5e0]
vmovdqa ymmword [rbp + 0x260], ymm1
vmovdqu ymm0, ymmword [rbp + 0x280]
vpxor ymm1, ymm0, ymmword [rbp + 0x600]
vmovdqa ymmword [rbp + 0x280], ymm1
vmovdqu ymm0, ymmword [rbp + 0x2a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x620]
vmovdqa ymmword [rbp + 0x2a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x2c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x640]
vmovdqa ymmword [rbp + 0x2c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x2e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x660]
vmovdqa ymmword [rbp + 0x2e0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x300]
vxorps xmm0, xmm0, xmmword [rbp + 0x680]
vmovdqa xmmword [rbp + 0x300], xmm0
lea rax, [rbp + 0x120]
mov qword [0x1400f3528], rax
mov dword [rbp + 0x350], 3
lea rax, [0x1400203d0]
mov qword [rbp + 0x358], rax
mov qword [rbp + 0x360], rsi
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x368], rax
mov edx, WSAGetLastError
mov rcx, rax
vzeroupper
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rbp + 0x370], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rbp + 0x378], rax
mov ecx, 4
call qword [sym.imp.GDI32.dll_GetStockObject]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0x388], rsi
lea rax, str.MoSWebInstaller
mov qword [rbp + 0x390], rax
lea rcx, [rbp + 0x350]
call qword [sym.imp.USER32.dll_RegisterClassW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ebx, eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, eax
lea eax, [rbx - 0x230]
cdq
sub eax, edx
sar eax, 1
mov r9d, eax
lea eax, [rcx - 0xc8]
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
movabs rax, 0xe309eddf4646543a
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x40], rcx
movabs rax, 0x64b9a082964402f4
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x48], rcx
movabs rax, 0x108eb1d2ac4d4e69
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x50], rcx
movabs rax, 0x8da0e5d43abfcb2e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0x3ecf2aebb0f6a0e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0xc6f1fdd81b625826
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x6d1d23478f4fb8fe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x4861200923c1b45a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x6a0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x6a8], rax
movabs rbx, 0x10ebb1a2ac1e4e49
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x6b0], rax
movabs rax, 0x8d80e5a73ad3cb42
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6b8], rax
movabs rax, 0x3eaa2abcb0d6a0cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6c0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x6c8], rax
movabs rax, 0x6d7123268f3bb88d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x6d8], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x6a0]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x6c0]
vmovdqa ymmword [rbp + 0x60], ymm1
mov qword [rsp + 0x58], rsi
mov rax, qword [rbp + 0x10]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0xc8
mov dword [rsp + 0x30], 0x230
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], r9d
mov r9d, 0x80000000
lea r8, [rbp + 0x40]
lea rdx, str.MoSWebInstaller
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x1400f34f8], rax
mov edx, dword [rbp + 8]
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1400f34f8]
call qword [sym.imp.USER32.dll_UpdateWindow]
movabs rax, 0x92039ad22a413f04
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x51b493d8f30f36ea
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0x7684c5cacb772367
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0xeeae96cb56b6bb31
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs rax, 0x3eaa2abcb0d6cda4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x460], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x468], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x470], rax
movabs rax, 0x8d80e5a73ad3cb42
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x478], rax
movabs rax, 0x3eaa2abcb0d6a0cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x480], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x488], rax
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x460]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x100]
vxorps xmm0, xmm0, xmmword [rbp + 0x480]
vmovdqa xmmword [rbp + 0x100], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rsi
mov qword [rbp + 0xd8], rsi
lea rax, [rbp + 0xe0]
vzeroupper
inc r14
cmp byte [rax + r14], sil
jne 0x14001fadc
mov r8, r14
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0xc0]
call fcn.140008134
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x3e0]
call fcn.140013a1c
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x3a8], xmm0
mov qword [rbp + 0x3b8], rax
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x3a8]
call fcn.14001cdf4
nop
mov rcx, qword [rbp + 0x3b0]
mov rdx, qword [rbp + 0x3a8]
sub rcx, rdx
mov qword [rbp + 0x3c8], rdx
mov qword [rbp + 0x3d0], rcx
cmp rcx, 1
jb 0x1400200e4
mov al, byte [rdx]
mov byte [0x1400ef560], al
cmp rcx, 2
jb 0x140020103
mov al, byte [rdx + 1]
mov byte [0x1400ef561], al
mov qword [rbp + 0x3d8], 2
lea rax, [0x1400ef5b0]
mov qword [rsp + 0x28], rax
lea rax, [0x1400ef5a8]
mov qword [rsp + 0x20], rax
lea r9, [0x1400ef590]
lea r8, [0x1400ef588]
lea rdx, [0x1400ef568]
lea rcx, [rbp + 0x3c8]
call fcn.140023470
nop
jmp 0x14001fbeb
movabs r14, 0x10ebb1a2ac1e4e49
mov byte [0x1400ef561], sil
mov bl, sil
movabs rax, 0x8f0ec3dd3e4a7a5d
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x10], rax
movabs rax, 0x64dfa09ef9095de4
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x18], rax
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x430], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x438], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x430]
movdqa xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x10]
call fcn.14000efb8
test eax, eax
setne cl
test eax, eax
je 0x14001fcfd
movabs r13, 0x64dfa09ef9095de4
movabs r14, 0x8f0ec3dd3e4a7a5d
cmp cl, 1
je 0x14001fce9
cmp bl, 3
jge 0x14001fce9
inc bl
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x10], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x18], rax
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x430], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x438], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x430]
movdqa xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x10]
call fcn.14000efb8
test eax, eax
setne cl
test eax, eax
jne 0x14001fc84
movabs r13, 0xc69ffd911b425844
movabs r14, 0x10ebb1a2ac1e4e49
cmp byte [0x1400ef561], sil
jne 0x14001fd6a
movabs rax, 0x8f0ec3d62f4d7a5d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x64dfa09ef9095de4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x440], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x448], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x440]
movdqa xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x20]
call fcn.14000efb8
mov dword [rbp + 0x3a0], 8
mov dword [rbp + 0x3a4], 0x8000
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
xor r9d, r9d
lea edx, [r9 + 1]
mov r8d, 0xfa
mov rcx, qword [0x1400f34f8]
call qword [sym.imp.USER32.dll_SetTimer]
cmp byte [0x1400ef560], sil
je 0x14001ff66
movabs rax, 0xe315edd1464e5420
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x64ffa08a960a02e9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x10cbb1d0ac714e2f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x8de8e5d33aa6cb23
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x3ed02ad5b0a4a0a4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0xc6f0fdf81b365825
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0x6d7123268f3bb8e3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x6e0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x6e8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x6f0], rax
movabs rax, 0x8d80e5a73ad3cb42
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6f8], rax
movabs rax, 0x3eaa2abcb0d6a0cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x700], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x708], rax
movabs rax, 0x6d7123268f3bb88d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x710], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x718], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x6e0]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x700]
vmovdqa ymmword [rbp + 0xa0], ymm1
lea rdx, [rbp + 0x80]
vzeroupper
call fcn.1400230ec
mov qword [rsp + 0x20], rsi
lea r9, [0x140023b44]
xor r8d, r8d
mov edx, 0x3ea
mov rcx, qword [0x1400f3508]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
xor r9d, r9d
lea edx, [r9 + 2]
lea r8d, [r9 + 0xa]
mov rcx, qword [0x1400f34f8]
call qword [sym.imp.USER32.dll_SetTimer]
lea rcx, [0x1400ef560]
call fcn.14001d570
movabs rax, 0xe305edd94640543b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x64dfa08a960a02e9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x450], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x458], rax
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x450]
movdqa xmmword [rbp + 0x30], xmm0
lea rdx, [rbp + 0x30]
call fcn.1400230ec
jmp 0x14002000a
lea rcx, [rbp + 0x400]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x400]
call qword [sym.imp.USER32.dll_DispatchMessageW]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x400]
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jne 0x14001fff0
mov ebx, dword [rbp + 0x410]
mov rcx, qword [rbp + 0x3a8]
test rcx, rcx
je 0x14002007b
mov rdx, qword [rbp + 0x3b8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020064
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020123
call fcn.1400298a0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x3a8], xmm0
mov qword [rbp + 0x3b8], rsi
mov rdx, qword [rbp + 0x3f8]
cmp rdx, 0xf
jbe 0x1400200b8
inc rdx
mov rcx, qword [rbp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400200b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020129
call fcn.1400298a0
mov eax, ebx
mov rcx, qword [rbp + 0x728]
xor rcx, rsp
call fcn.140029880
mov rbx, qword [rsp + 0x808]
add rsp, 0x7c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, [rbp + 0x320]
call fcn.14001d3c8
lea rdx, [0x1400ec250]
lea rcx, [rbp + 0x320]
call fcn.1400846a0
lea rcx, [rbp + 0x338]
call fcn.14001d3c8
lea rdx, [0x1400ec250]
lea rcx, [rbp + 0x338]
call fcn.1400846a0
nop
call fcn.14008c6a4
nop
call fcn.14008c6a4
int3