Function at 0x180031f10
Capabilities:
Capture screenshot
Delete file
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x4d8]
sub rsp, 0x5b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x18006b010]
xor rax, rsp
mov qword [rbp + 0x480], rax
movzx ebx, cl
lea rcx, [0x1800dd250]
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x180031f6c
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
test bl, bl
je 0x180032070
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x180031f92
imul rax, rax, 0x64
jmp 0x180031fb0
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rcx, rcx, 0x3b9aca00
add rax, rcx
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm0, dword [0x1800630fc]
divss xmm0, dword [0x1800630ec]
movss dword [0x1800dd33c], xmm0
xor edx, edx
mov r8d, 0xc0281
lea rcx, str.Render
call fcn.18000bc70
mov qword [rbp + 0xc0], 0
mov r10, qword [0x1800dd230]
xor r8d, r8d
lea rdx, [rbp + 0xc0]
mov rcx, qword [r10 + 0x3ed0]
call fcn.18000e750
movss xmm4, dword [r10 + 0x10]
movss dword [rbp + 0xc0], xmm4
movss xmm5, dword [r10 + 0x14]
movss dword [rbp + 0xc4], xmm5
xor r8d, r8d
lea rdx, [rbp + 0xc0]
mov rcx, qword [r10 + 0x3ed0]
call fcn.18000e8a0
mov rax, qword [r10 + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [r10 + 0x3ed0]
mov rdx, qword [rax + 0x298]
mov qword [0x1800dd378], rdx
call fcn.180036f20
call fcn.18000def0
jmp 0x1800335e7
cmp byte [0x1800acb5d], 0
je 0x1800335e7
mov rax, qword [0x1800dd3b0]
mov rcx, qword [rax + 0x80]
test rcx, rcx
je 0x180032099
mov qword [0x1800dd390], rcx
jmp 0x1800320b3
mov rax, qword [0x1800dd3a8]
mov rcx, qword [rax]
mov qword [0x1800dd390], rcx
test rcx, rcx
je 0x1800335e7
mov qword [0x1800dd360], rcx
mov qword [0x1800dd340], rcx
xor r12d, r12d
mov qword [rbp + 0xb4], r12
mov dword [rbp + 0xbc], r12d
mov qword [rbp + 0xa8], rcx
mov dword [rbp + 0xb0], r12d
mov rax, qword [rcx]
mov r9, qword [rax + 0x1b8]
lea r8, [rbp + 0xa8]
mov rdx, qword [0x1800dd4f0]
call r9
mov rax, qword [rbp + 0xb8]
mov qword [0x1800dd398], rax
test rax, rax
je 0x1800335e7
mov rcx, qword [0x1800dd360]
mov qword [rbp + 0x9c], r12
mov dword [rbp + 0xa4], r12d
mov rax, qword [0x1800dd390]
mov qword [rbp + 0x90], rax
mov dword [rbp + 0x98], r12d
mov rax, qword [rcx]
mov r9, qword [rax + 0x1b8]
lea r8, [rbp + 0x90]
mov rdx, qword [0x1800dd538]
call r9
mov rax, qword [rbp + 0xa0]
mov qword [0x1800dd370], rax
mov ecx, dword [0x1800dd34c]
test rax, rax
cmove ecx, r12d
mov dword [0x1800dd34c], ecx
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x180032196
imul rax, rax, 0x64
jmp 0x1800321b1
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm0, dword [0x1800630fc]
divss xmm0, dword [0x1800630ec]
movss dword [0x1800dd33c], xmm0
call fcn.180031d40
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov r13d, 0x16
cmp rax, qword [0x1800dd388]
jne 0x180032303
lea ecx, [r13 + 0x5c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180032303
lea ecx, [r13 + 0x5c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180032303
cmp qword [0x1800dd370], r12
je 0x180032266
cmp byte [0x1800dd358], r12b
jne 0x1800322a2
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 0xf
lea r8d, [r13 + 0x24]
lea rdx, str.You_need_to_be_in_the_main_menu_to_start_the_auto_crasher_
lea rcx, [rbp - 0x70]
call fcn.18002cdc0
movss xmm2, dword [0x180063088]
lea rdx, [rbp - 0x70]
lea ecx, [r13 - 0x14]
call fcn.180037830
jmp 0x1800335e7
cmp byte [0x1800dd358], r12b
jne 0x1800322a2
mov byte [0x1800dd358], 1
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 0xf
mov r8d, 0x15
lea rdx, str.Auto_Crasher_Enabled_
lea rcx, [rbp - 0x70]
call fcn.18002cdc0
lea rdx, [rbp - 0x70]
jmp 0x1800322df
mov byte [0x1800dd358], r12b
mov qword [rbp + 0x110], r12
mov qword [rbp + 0x120], r12
mov qword [rbp + 0x128], 0xf
mov r8, r13
lea rdx, str.Auto_Crasher_Disabled_
lea rcx, [rbp + 0x110]
call fcn.18002cdc0
lea rdx, [rbp + 0x110]
movss xmm2, dword [0x180063074]
xor ecx, ecx
call fcn.180037830
movss xmm1, dword [0x1800dd33c]
movaps xmm0, xmm1
movss dword [0x1800dd368], xmm1
jmp 0x180032313
movss xmm1, dword [0x1800dd33c]
movss xmm0, dword [0x1800dd368]
cmp qword [0x1800dd370], 0
jne 0x180033547
cmp byte [0x1800dd358], 0
je 0x180033547
addss xmm0, dword [0x180063058]
comiss xmm1, xmm0
jb 0x180033547
mov rsi, qword [0x1800dca78]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 8
jb 0x180033634
lea r15, [0x1800dca68]
cmp qword [0x1800dca80], 0x10
cmovae r15, qword [0x1800dca68]
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0x100], r12
mov qword [rbp + 0x108], r12
lea r14, [rsi + 8]
mov ebx, 0xf
lea rdi, [rbp + 0xf0]
lea rax, [rbx - 0x10]
cmp r14, rbx
jbe 0x180032417
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x1800323b6
mov rbx, rcx
jmp 0x1800323be
cmp rbx, 0x16
cmovb rbx, r13
mov rcx, rbx
add rcx, 1
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x1800323fe
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18003363a
mov rcx, rax
call fcn.18003b50c
test rax, rax
je 0x180033533
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180032410
test rcx, rcx
je 0x18003240d
call fcn.18003b50c
mov rdi, rax
jmp 0x180032410
mov rdi, r12
mov qword [rbp + 0xf0], rdi
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movabs rax, 0x5c736567616d695c
mov qword [rdi + rsi], rax
mov byte [rdi + r14], 0
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rbx, rax
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
movups xmmword [rbp + 0x1b0], xmm0
movups xmmword [rbp + 0x1c0], xmm0
movups xmmword [rbp + 0x1d0], xmm0
movups xmmword [rbp + 0x1e0], xmm0
movups xmmword [rbp + 0x1f0], xmm0
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::constructor_void____ptr64]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetDC]
mov r13, rax
mov rcx, rax
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov r12, rax
mov edx, 3
mov rcx, rax
call qword [sym.imp.GDI32.dll_SetStretchBltMode]
mov ecx, 0x4c
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov r14d, eax
mov ecx, 0x4d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ebx, eax
mov ecx, 0x4e
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov edi, eax
mov ecx, 0x4f
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov r15d, eax
mov r9d, 0x18
mov r8d, edi
mov edx, eax
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::create_int__int__int____ptr64]
mov r8d, r15d
mov edx, edi
mov rcx, r13
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov rsi, rax
mov dword [rbp - 0x70], 0x28
mov dword [rbp - 0x6c], edi
mov ecx, r15d
neg ecx
mov dword [rbp - 0x68], ecx
mov qword [rbp - 0x64], 0x200001
xor eax, eax
mov qword [rbp - 0x5c], rax
mov qword [rbp - 0x54], rax
mov dword [rbp - 0x4c], eax
movups xmm0, xmmword [rbp - 0x70]
movups xmmword [rbp + 0xc8], xmm0
movups xmm1, xmmword [rbp - 0x60]
movups xmmword [rbp + 0xd8], xmm1
movsd xmm0, qword [rbp - 0x50]
movsd qword [rbp + 0xe8], xmm0
mov rdx, rsi
mov rcx, r12
call qword [sym.imp.GDI32.dll_SelectObject]
mov dword [rsp + 0x50], 0xcc0020
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x40], edi
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r15d
mov r9d, edi
xor r8d, r8d
xor edx, edx
mov rcx, r12
call qword [sym.imp.GDI32.dll_StretchBlt]
mov dword [rsp + 0x30], 0
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x1b0]
mov qword [rsp + 0x20], rax
mov r9d, r15d
xor r8d, r8d
mov rdx, rsi
mov rcx, r12
call qword [sym.imp.GDI32.dll_GetDIBits]
mov rcx, rsi
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, r12
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rdx, r13
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.USER32.dll_ReleaseDC]
nop
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x90], xmm0
xor edx, edx
mov qword [rbp + 0xa0], rdx
mov qword [rbp + 0xb8], rdx
mov dword [rbp + 0xa8], 0x1010000
lea rax, [rbp + 0x1a0]
mov qword [rbp + 0xb0], rax
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r12, qword [rbp + 0x100]
sub rax, r12
mov qword [rbp - 0x40], rax
cmp rax, 0xe
jb 0x180033640
lea rsi, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0x10
setae r15b
mov byte [rsp + 0x60], r15b
mov r13, qword [rbp + 0xf0]
cmovae rsi, r13
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x78], rdx
mov qword [rbp - 0x80], rdx
lea r14, [r12 + 0xe]
mov edi, 0xf
lea rbx, [rsp + 0x68]
cmp r14, rdi
jbe 0x180032708
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x18003269d
mov rdi, rcx
jmp 0x1800326aa
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
mov rcx, rdi
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x1800326f1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180033646
mov rcx, rax
call fcn.18003b50c
test rax, rax
je 0x180032797
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180032703
test rcx, rcx
je 0x180032700
call fcn.18003b50c
mov rbx, rax
jmp 0x180032703
mov rbx, rdx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x80], rdi
mov r8, r12
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.screenshot.png]
movsd qword [rbx + r12], xmm0
mov eax, dword [0x180062148]
mov dword [rbx + r12 + 8], eax
movzx eax, word [0x18006214c]
mov word [rbx + r12 + 0xc], ax
mov byte [rbx + r14], 0
lea r8, [rbp + 0x90]
lea rdx, [rbp + 0xa8]
lea rcx, [rsp + 0x68]
call qword [sym.imp.opencv_imgcodecs460.dll_bool___cdecl_cv::imwrite_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__class_cv::_InputArray_const____ptr64__class_std::vector_int__class_std::allocator_int___const____ptr64_]
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x1800327a3
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003279e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003279e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003ae7c
xor eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], al
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x180032807
mov rax, qword [rbp + 0xa0]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180032800
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180032800
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003ae7c
xor eax, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x320], xmm0
movups xmmword [rbp + 0x330], xmm0
movups xmmword [rbp + 0x340], xmm0
movups xmmword [rbp + 0x350], xmm0
movups xmmword [rbp + 0x360], xmm0
movups xmmword [rbp + 0x370], xmm0
lea rsi, [rbp + 0xf0]
test r15b, r15b
cmovne rsi, r13
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rax
mov edi, 0xf
lea rbx, [rbp - 0x70]
cmp r14, rdi
jbe 0x1800328e3
mov rdi, r14
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x18003287b
mov rdi, rcx
jmp 0x180032888
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x1800328d2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18003364c
mov rcx, rax
call fcn.18003b50c
test rax, rax
je 0x1800328cb
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1800328df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1800328dc
call fcn.18003b50c
mov rbx, rax
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], rdi
mov r8, r12
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.screenshot.png]
movsd qword [r12 + rbx], xmm0
mov eax, dword [0x180062148]
mov dword [r12 + rbx + 8], eax
movzx eax, word [0x18006214c]
mov word [r12 + rbx + 0xc], ax
mov byte [rbx + r14], 0
mov r8d, 1
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x320]
call qword [sym.imp.opencv_imgcodecs460.dll_class_cv::Mat___cdecl_cv::imread_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__int_]
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x18003297a
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180032975
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180032975
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003ae7c
xor ebx, ebx
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], bl
lea rcx, [rbp + 0x320]
call qword [sym.imp.opencv_core460.dll_public:_bool___cdecl_cv::Mat::empty_void_const___ptr64]
test al, al
je 0x1800329ba
lea rcx, str.Cant_read_screenshot.png..._n
call fcn.180033d70
lea rcx, [0x1800dd250]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
jmp 0x1800334e3
mov qword [rbp + 0x380], rbx
movdqa xmm0, xmmword [0x180063150]
movdqa xmmword [rbp + 0x390], xmm0
mov byte [rbp + 0x380], 0
mov r8d, 0xc
lea rdx, str.allmondbeard
lea rcx, [rbp + 0x380]
call fcn.18002cdc0
nop
mov qword [rbp + 0x3a0], rbx
movdqa xmm0, xmmword [0x180063150]
movdqa xmmword [rbp + 0x3b0], xmm0
mov byte [rbp + 0x3a0], 0
mov r8d, 9
lea rdx, str.beanbeard
lea rcx, [rbp + 0x3a0]
call fcn.18002cdc0
nop
mov qword [rbp + 0x3c0], rbx
movdqa xmm0, xmmword [0x180063150]
movdqa xmmword [rbp + 0x3d0], xmm0
mov byte [rbp + 0x3c0], 0
mov r8d, 0x13
lea rdx, str.return_to_main_menu
lea rcx, [rbp + 0x3c0]
call fcn.18002cdc0
nop
mov qword [rbp + 0x3e0], rbx
movdqa xmm0, xmmword [0x180063150]
movdqa xmmword [rbp + 0x3f0], xmm0
mov byte [rbp + 0x3e0], 0
mov r8d, 4
lea rdx, str.play
lea rcx, [rbp + 0x3e0]
call fcn.18002cdc0
nop
mov qword [rbp + 0x400], rbx
movdqa xmm0, xmmword [0x180063150]
movdqa xmmword [rbp + 0x410], xmm0
mov byte [rbp + 0x400], 0
mov r8d, 0xd
lea rdx, str.monkey_island
lea rcx, [rbp + 0x400]
call fcn.18002cdc0
nop
mov qword [rbp + 0x420], rbx
movdqa xmm0, xmmword [0x180063150]
movdqa xmmword [rbp + 0x430], xmm0
mov byte [rbp + 0x420], 0
mov r8d, 7
lea rdx, str.confirm
lea rcx, [rbp + 0x420]
call fcn.18002cdc0
nop
mov qword [rbp + 0x440], rbx
movdqa xmm0, xmmword [0x180063150]
movdqa xmmword [rbp + 0x450], xmm0
mov byte [rbp + 0x440], 0
mov r8d, 5
lea rdx, str.sloop
lea rcx, [rbp + 0x440]
call fcn.18002cdc0
nop
mov qword [rbp + 0x460], rbx
movdqa xmm0, xmmword [0x180063150]
movdqa xmmword [rbp + 0x470], xmm0
mov byte [rbp + 0x460], 0
mov r8d, 8
lea rdx, str.set_sail
lea rcx, [rbp + 0x460]
call fcn.18002cdc0
nop
mov dword [rbp - 0x78], ebx
mov qword [rbp - 0x48], rbx
lea r14, [rbp + 0x380]
movsd xmm7, qword [0x180063048]
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
mov r15, qword [r14 + 0x10]
cmp qword [rbp - 0x40], r15
jb 0x18003362e
lea r12, [rbp + 0xf0]
cmp byte [rsp + 0x60], 0
cmovne r12, r13
mov r13, r14
cmp qword [r14 + 0x18], 0x10
jb 0x180032be8
mov r13, qword [r14]
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], rbx
mov rax, qword [rbp + 0x100]
lea rsi, [rax + r15]
mov edi, 0xf
lea rbx, [rsp + 0x68]
cmp rsi, rdi
jbe 0x180032ca7
mov rdi, rsi
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x180032c2f
mov rdi, rcx
jmp 0x180032c3c
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x180032c8a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180033652
mov rcx, rax
call fcn.18003b50c
test rax, rax
je 0x1800332c8
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
mov rax, qword [rbp + 0x100]
jmp 0x180032ca2
test rcx, rcx
je 0x180032ca0
call fcn.18003b50c
mov rbx, rax
mov rax, qword [rbp + 0x100]
jmp 0x180032ca2
xor ebx, ebx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], rdi
mov r8, rax
mov rdx, r12
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r12, qword [rbp + 0x100]
lea rcx, [rbx + r12]
mov r8, r15
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rbp - 0x80]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x180032d18
lea rax, [rcx + 4]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x68]
mov dword [rax + rcx], 0x676e702e
mov byte [rax + rcx + 4], 0
lea rax, [rsp + 0x68]
jmp 0x180032d37
mov qword [rsp + 0x20], 4
lea r9, str..png
mov edx, 4
lea rcx, [rsp + 0x68]
call fcn.18002fd60
xor ebx, ebx
mov qword [rbp + 0xc8], rbx
mov qword [rbp + 0xd8], rbx
mov qword [rbp + 0xe0], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
lea r8d, [rbx + 1]
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x140]
call qword [sym.imp.opencv_imgcodecs460.dll_class_cv::Mat___cdecl_cv::imread_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__int_]
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x180032dcb
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180032dc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800332cf
call fcn.18003ae7c
mov qword [rbp + 0xd8], rbx
mov qword [rbp + 0xe0], 0xf
mov byte [rbp + 0xc8], 0
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x180032e20
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180032e1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800332d6
call fcn.18003ae7c
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], 0
lea rcx, [rbp + 0x140]
call qword [sym.imp.opencv_core460.dll_public:_bool___cdecl_cv::Mat::empty_void_const___ptr64]
test al, al
jne 0x1800332dd
lea rax, [rbp - 0x30]
mov qword [rbp - 0x38], rax
lea rdx, [rbp + 0x140]
lea rcx, [rbp - 0x30]
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::constructor_class_cv::Mat_const____ptr64____ptr64]
mov rsi, rax
lea rdx, [rbp + 0x320]
lea rcx, [rbp + 0x30]
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::constructor_class_cv::Mat_const____ptr64____ptr64]
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c0], xmm0
movups xmmword [rbp + 0x2d0], xmm0
movups xmmword [rbp + 0x2e0], xmm0
movups xmmword [rbp + 0x2f0], xmm0
movups xmmword [rbp + 0x300], xmm0
movups xmmword [rbp + 0x310], xmm0
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::constructor_void____ptr64]
mov qword [rbp + 0x138], rbx
mov qword [rbp + 0xc0], rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0x260], xmm0
movups xmmword [rbp + 0x270], xmm0
movups xmmword [rbp + 0x280], xmm0
movups xmmword [rbp + 0x290], xmm0
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm0
lea rcx, [rbp + 0x260]
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::constructor_void____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
movups xmmword [rbp + 0x210], xmm0
movups xmmword [rbp + 0x220], xmm0
movups xmmword [rbp + 0x230], xmm0
movups xmmword [rbp + 0x240], xmm0
movups xmmword [rbp + 0x250], xmm0
lea rcx, [rbp + 0x200]
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::constructor_void____ptr64]
mov qword [rbp + 0xd8], rbx
mov dword [rbp + 0xc8], 0x2010000
lea rax, [rbp + 0x260]
mov qword [rbp + 0xd0], rax
mov qword [rsp + 0x78], rbx
mov dword [rsp + 0x68], 0x1010000
mov qword [rsp + 0x70], rdi
xor r9d, r9d
lea r8d, [r9 + 4]
lea rdx, [rbp + 0xc8]
lea rcx, [rsp + 0x68]
call qword [sym.imp.opencv_imgproc460.dll_void___cdecl_cv::cvtColor_class_cv::_InputArray_const____ptr64__class_cv::_OutputArray_const____ptr64__int__int_]
mov qword [rsp + 0x78], rbx
mov dword [rsp + 0x68], 0x2010000
lea rax, [rbp + 0x200]
mov qword [rsp + 0x70], rax
mov qword [rbp + 0xd8], rbx
mov dword [rbp + 0xc8], 0x1010000
mov qword [rbp + 0xd0], rsi
xor r9d, r9d
lea r8d, [r9 + 4]
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0xc8]
call qword [sym.imp.opencv_imgproc460.dll_void___cdecl_cv::cvtColor_class_cv::_InputArray_const____ptr64__class_cv::_OutputArray_const____ptr64__int__int_]
lea r8, [rbp + 0x2c0]
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x260]
call fcn.1800387e0
call qword [sym.imp.opencv_core460.dll_class_cv::_InputOutputArray_const____ptr64___cdecl_cv::noArray_void_]
mov qword [rsp + 0x78], rbx
mov dword [rsp + 0x68], 0x1010000
lea rcx, [rbp + 0x2c0]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x138]
lea r8, [rbp + 0x130]
lea rdx, [rbp + 0x90]
lea rcx, [rsp + 0x68]
call qword [sym.imp.opencv_core460.dll_void___cdecl_cv::minMaxLoc_class_cv::_InputArray_const____ptr64__double____ptr64__double____ptr64__class_cv::Point__int_____ptr64__class_cv::Point__int_____ptr64__class_cv::_InputArray_const____ptr64_]
movsd xmm6, qword [rbp + 0x130]
mov rbx, qword [rbp + 0xc0]
mov qword [rbp + 0xb0], rbx
lea rcx, [rbp + 0x200]
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::destructor_void____ptr64]
lea rcx, [rbp + 0x260]
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::destructor_void____ptr64]
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::destructor_void____ptr64]
mov rcx, rdi
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::destructor_void____ptr64]
mov rcx, rsi
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::destructor_void____ptr64]
nop
comisd xmm6, xmm7
jb 0x1800330fa
mov rsi, qword [r14 + 0x10]
mov rcx, r14
mov rdi, qword [r14 + 0x18]
cmp rdi, 0x10
jb 0x18003309b
mov rcx, qword [r14]
cmp rsi, 9
jne 0x1800330b4
mov r8, rsi
lea rdx, str.beanbeard
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1800330d9
mov rcx, r14
cmp rdi, 0x10
jb 0x1800330c0
mov rcx, qword [r14]
cmp rsi, 0xc
jne 0x180033131
mov r8, rsi
lea rdx, str.allmondbeard
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180033131
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0xd
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0xd
call qword [sym.imp.USER32.dll_keybd_event]
xor ebx, ebx
lea rcx, [rbp + 0x140]
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::destructor_void____ptr64]
inc dword [rbp - 0x78]
mov rax, qword [rbp - 0x48]
inc rax
mov qword [rbp - 0x48], rax
add r14, 0x20
cmp rax, 8
jge 0x180033313
mov r13, qword [rbp + 0xf0]
jmp 0x180032b90
mov rcx, r14
cmp rdi, 0x10
jb 0x18003313d
mov rcx, qword [r14]
cmp rsi, 0x13
jne 0x180033173
mov r8, rsi
lea rdx, str.return_to_main_menu
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180033173
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x1b
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [rsi - 0x11]
mov cl, 0x1b
jmp 0x1800330f4
mov rdx, r14
cmp rdi, 0x10
jb 0x18003317f
mov rdx, qword [r14]
cmp rsi, 4
jne 0x1800331b5
xor ecx, ecx
lea r8, str.play
nop
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x1800331a8
cmp rcx, 4
jne 0x180033190
xor eax, eax
jmp 0x1800331ad
sbb eax, eax
or eax, 1
test eax, eax
je 0x18003326e
mov rcx, r14
cmp rdi, 0x10
jb 0x1800331c1
mov rcx, qword [r14]
cmp rsi, 0xd
jne 0x1800331de
mov r8, rsi
lea rdx, str.monkey_island
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18003326e
mov rcx, r14
cmp rdi, 0x10
jb 0x1800331ea
mov rcx, qword [r14]
cmp rsi, 7
jne 0x180033203
mov r8, rsi
lea rdx, str.confirm
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x18003326e
mov rdx, r14
cmp rdi, 0x10
jb 0x18003320f
mov rdx, qword [r14]
cmp rsi, 5
jne 0x180033241
xor ecx, ecx
lea r8, str.sloop
nop
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x180033238
cmp rcx, 5
jne 0x180033220
xor eax, eax
jmp 0x18003323d
sbb eax, eax
or eax, 1
test eax, eax
je 0x18003326e
mov rcx, r14
cmp rdi, 0x10
jb 0x18003324d
mov rcx, qword [r14]
cmp rsi, 8
jne 0x1800330fa
mov r8, rsi
lea rdx, str.set_sail
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1800330fa
mov eax, dword [rbp + 0x14c]
cdq
sub eax, edx
sar eax, 1
lea ecx, [rbx + rax]
mov eax, dword [rbp + 0x148]
cdq
sub eax, edx
sar eax, 1
add eax, dword [rbp + 0xb4]
mov edx, eax
call qword [sym.imp.USER32.dll_SetCursorPos]
xor ebx, ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rbx + 2]
call qword [sym.imp.USER32.dll_mouse_event]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rbx + 4]
call qword [sym.imp.USER32.dll_mouse_event]
jmp 0x1800330fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movsxd rax, dword [rbp - 0x78]
shl rax, 5
lea rdx, [rbp + 0x380]
add rdx, rax
cmp qword [rdx + 0x18], 0x10
jb 0x1800332f9
mov rdx, qword [rdx]
lea rcx, str._nCant_read__s.png..._n
call fcn.180033d70
nop
lea rcx, [rbp + 0x140]
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::destructor_void____ptr64]
lea rsi, [rbp + 0xf0]
movzx r15d, byte [rsp + 0x60]
test r15b, r15b
mov r13, qword [rbp + 0xf0]
cmovne rsi, r13
mov qword [rbp + 0x110], rbx
mov qword [rbp + 0x120], rbx
mov qword [rbp + 0x128], rbx
mov edi, 0xf
lea rbx, [rbp + 0x110]
lea r14, [r12 + 0xe]
cmp r14, rdi
jbe 0x1800333e4
mov rdi, r14
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x180033378
mov rdi, rcx
jmp 0x180033385
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
mov rcx, rdi
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x1800333cc
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180033658
mov rcx, rax
call fcn.18003b50c
test rax, rax
je 0x18003349d
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1800333dd
test rcx, rcx
je 0x1800333db
call fcn.18003b50c
mov rbx, rax
jmp 0x1800333dd
xor ebx, ebx
mov qword [rbp + 0x110], rbx
mov qword [rbp + 0x120], r14
mov qword [rbp + 0x128], rdi
mov r8, r12
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.screenshot.png]
movsd qword [r12 + rbx], xmm0
mov eax, dword [0x180062148]
mov dword [r12 + rbx + 8], eax
movzx eax, word [0x18006214c]
mov word [r12 + rbx + 0xc], ax
mov byte [rbx + r14], 0
lea rcx, [rbp + 0x110]
cmp qword [rbp + 0x128], 0x10
cmovae rcx, qword [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
movss xmm0, dword [0x1800dd33c]
movss dword [0x1800dd368], xmm0
lea rcx, [0x1800dd250]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rdx, qword [rbp + 0x128]
cmp rdx, 0x10
jb 0x1800334a9
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800334a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800334a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18003ae7c
mov qword [rbp + 0x120], 0
mov qword [rbp + 0x128], 0xf
mov byte [rbp + 0x110], 0
lea r9, [fcn.18002fca0]
mov edx, 0x20
lea r8d, [rdx - 0x18]
lea rcx, [rbp + 0x380]
call fcn.18003adac
nop
lea rcx, [rbp + 0x320]
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.opencv_core460.dll_public:_void___cdecl_cv::Mat::destructor_void____ptr64]
nop
test r15b, r15b
je 0x1800335f4
mov rdx, qword [rbp + 0x108]
inc rdx
mov rax, r13
cmp rdx, 0x1000
jb 0x18003353a
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18003353a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.18003ae7c
jmp 0x1800335f4
mov rcx, qword [0x1800dd398]
mov qword [rbp + 0x98], r12
mov rax, qword [0x1800dd328]
mov qword [rbp + 0x90], rax
mov rax, qword [rcx]
lea r8, [rbp + 0x90]
mov rdx, qword [0x1800dd4b8]
call qword [rax + 0x1b8]
mov rax, qword [rbp + 0x98]
mov qword [0x1800dd380], rax
test rax, rax
je 0x1800335e7
mov rcx, qword [0x1800dd370]
test rcx, rcx
je 0x1800335e7
mov qword [rbp + 0xd0], r12
mov rax, qword [0x1800dd330]
mov qword [rbp + 0xc8], rax
mov rax, qword [rcx]
lea r8, [rbp + 0xc8]
mov rdx, qword [0x1800dd4b8]
call qword [rax + 0x1b8]
mov rax, qword [rbp + 0xd0]
mov qword [0x1800dd3a0], rax
test rax, rax
je 0x1800335e7
cmp qword [0x1800dd370], 0
je 0x1800335e7
call fcn.180033660
lea rcx, [0x1800dd250]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rcx, qword [rbp + 0x480]
xor rcx, rsp
call fcn.18003ac10
lea r11, [rsp + 0x5b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18002bb90
nop
call fcn.18002bb90
int3
call fcn.18002baf0
nop
call fcn.18002bb90
int3
call fcn.18002baf0
nop
call fcn.18002baf0
nop
call fcn.18002baf0
int3
call fcn.18002baf0
int3