Function at 0x140010b90
Capabilities:
Get file size
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x290
mov rax, qword [0x140052040]
xor rax, rsp
mov qword [rsp + 0x280], rax
xor r13d, r13d
mov dword [rsp + 0x40], r13d
lea ecx, [r13 + 0x50]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x140010beb
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], r13
mov qword [rsp + 0x238], r13
mov r8d, 0x13
lea rdx, str.C:WindowsSystem32
lea rcx, [rsp + 0x220]
call fcn.140001e80
nop
mov rsi, qword [rsp + 0x230]
movabs r12, 0x7fffffffffffffff
mov rax, r12
sub rax, rsi
cmp rax, 0x14
jb 0x140012928
lea r15, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova r15, qword [rsp + 0x220]
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x1f0], r13
mov qword [rsp + 0x1f8], r13
lea r14, [rsi + 0x14]
mov ebx, 0xf
lea rdi, [rsp + 0x1e0]
cmp r14, rbx
jbe 0x140010d0c
mov rbx, r14
or rbx, 0xf
cmp rbx, r12
jbe 0x140010cca
mov rbx, r12
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003eef0
test rax, rax
je 0x140012739
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140010d04
mov edi, 0x16
cmp rbx, rdi
cmovb rbx, rdi
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140010cf2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001292e
jmp 0x140010cab
test rcx, rcx
je 0x140010d01
call fcn.14003eef0
mov rdi, rax
jmp 0x140010d04
mov rdi, r13
mov qword [rsp + 0x1e0], rdi
mov qword [rsp + 0x1f0], r14
mov qword [rsp + 0x1f8], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.opencv_world470.dll]
movups xmmword [rdi + rsi], xmm0
mov eax, dword [0x140047828]
mov dword [rdi + rsi + 0x10], eax
mov byte [rdi + r14], 0
mov rdi, qword [rsp + 0x1f0]
lea rbx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0xf
cmova rbx, qword [rsp + 0x1e0]
call fcn.14003e5c0
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x1d8], rdi
lea r8, [rsp + 0x1d0]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.1400041e0
nop
mov dword [rsp + 0x40], 0xe000001
lea rcx, [rsp + 0x70]
call fcn.140005b80
test al, al
je 0x140010dbf
lea rcx, [rsp + 0x1e0]
call fcn.140017960
cmp rax, 0x100
jle 0x140010dbf
xor bl, bl
jmp 0x140010dc1
mov bl, 1
mov esi, 0xe000000
mov rdx, qword [rsp + 0x88]
cmp rdx, 7
jbe 0x140010e0e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010e09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010e09
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003ef34
test bl, bl
je 0x140011b70
mov r14, qword [0x1400c0e68]
mov rax, qword [0x1400c0e70]
mov qword [rsp + 0x1d0], rax
cmp r14, rax
je 0x140011545
nop word [rax + rax]
mov r9, qword [r14 + 0x10]
mov rdx, r14
mov r10, qword [r14 + 0x18]
cmp r10, 0xf
jbe 0x140010e54
mov rdx, qword [r14]
test r9, r9
je 0x140010eea
lea rax, [r9 - 1]
mov rcx, 0xffffffffffffffff
cmp rax, rcx
cmovb rcx, rax
add rcx, rdx
cmp byte [rcx], 0x2f
je 0x140010e84
cmp rcx, rdx
je 0x140010eea
dec rcx
cmp byte [rcx], 0x2f
jne 0x140010e77
sub rcx, rdx
cmp rcx, 0xffffffffffffffff
je 0x140010eea
inc rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
mov qword [rsp + 0x250], r13
mov qword [rsp + 0x258], r13
cmp r9, rcx
jb 0x14001293a
sub r9, rcx
mov r8, 0xffffffffffffffff
cmp r9, r8
cmovb r8, r9
mov rax, r14
cmp r10, 0xf
jbe 0x140010ed1
mov rax, qword [r14]
lea rdx, [rax + rcx]
lea rcx, [rsp + 0x240]
call fcn.140001e80
or esi, 0x60000
jmp 0x140010f20
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
mov qword [rsp + 0x250], r13
mov qword [rsp + 0x258], r13
xor r8d, r8d
lea rdx, [0x140042bb1]
lea rcx, [rsp + 0x240]
call fcn.140001e80
bts esi, 0x11
lea rdx, [rsp + 0x240]
cmp qword [rsp + 0x258], 0xf
cmova rdx, qword [rsp + 0x240]
lea rcx, str._info__downloading__s_n
call fcn.140002110
mov r12, qword [rsp + 0x230]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r12
cmp rax, 1
jb 0x140012952
lea rax, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rax, qword [rsp + 0x220]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x160], r13
mov qword [rsp + 0x168], r13
lea r15, [r12 + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x150]
cmp r15, rbx
jbe 0x140011046
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x140010fdc
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140011003
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140011027
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140012940
mov rcx, rax
call fcn.14003eef0
test rax, rax
je 0x140011609
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rax, qword [rsp + 0x40]
jmp 0x14001103e
test rcx, rcx
je 0x14001103b
call fcn.14003eef0
mov rdi, rax
mov rax, qword [rsp + 0x40]
jmp 0x14001103e
mov rdi, r13
mov qword [rsp + 0x150], rdi
mov qword [rsp + 0x160], r15
mov qword [rsp + 0x168], rbx
mov r8, r12
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r12], 0x5c
mov byte [rdi + r15], 0
bts esi, 0x13
lea rdx, [rsp + 0x240]
cmp qword [rsp + 0x258], 0xf
cmova rdx, qword [rsp + 0x240]
mov r8, qword [rsp + 0x250]
lea rcx, [rsp + 0x150]
call fcn.140014520
xorps xmm0, xmm0
movups xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x128], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x110], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x120], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts esi, 0x14
lea rdx, [rsp + 0x110]
mov rcx, r14
call fcn.140017180
movzx ebx, al
mov rdx, qword [rsp + 0x128]
cmp rdx, 0xf
jbe 0x14001113c
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011137
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011602
call fcn.14003ef34
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x128], 0xf
mov byte [rsp + 0x110], 0
mov rdx, qword [rsp + 0x168]
cmp rdx, 0xf
jbe 0x14001119b
inc rdx
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011196
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011609
call fcn.14003ef34
test bl, bl
je 0x140011625
mov r15, qword [rsp + 0x230]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 1
jb 0x14001294c
lea rax, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rax, qword [rsp + 0x220]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], r13
mov qword [rsp + 0x188], r13
lea r12, [r15 + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x170]
cmp r12, rbx
jbe 0x1400112a2
mov rbx, r12
or rbx, 0xf
cmp rbx, rcx
jbe 0x140011238
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14001125f
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140011283
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140012946
mov rcx, rax
call fcn.14003eef0
test rax, rax
je 0x14001161e
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rax, qword [rsp + 0x40]
jmp 0x14001129a
test rcx, rcx
je 0x140011297
call fcn.14003eef0
mov rdi, rax
mov rax, qword [rsp + 0x40]
jmp 0x14001129a
mov rdi, r13
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x180], r12
mov qword [rsp + 0x188], rbx
mov r8, r15
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r15], 0x5c
mov byte [rdi + r12], 0
bts esi, 0x17
lea rdx, [rsp + 0x240]
cmp qword [rsp + 0x258], 0xf
cmova rdx, qword [rsp + 0x240]
mov r8, qword [rsp + 0x250]
lea rcx, [rsp + 0x170]
call fcn.140014520
xorps xmm0, xmm0
movups xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xe8], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xe0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts esi, 0x18
mov rdi, qword [rsp + 0xe0]
lea rbx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 0xf
cmova rbx, qword [rsp + 0xd0]
call fcn.14003e5c0
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xc8], rdi
lea r8, [rsp + 0xc0]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.1400041e0
or esi, 0x600000
lea rcx, [rsp + 0x70]
call fcn.140005b80
movzx ebx, al
mov rdx, qword [rsp + 0x88]
cmp rdx, 7
jbe 0x1400113e5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400113e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011610
call fcn.14003ef34
mov qword [rsp + 0x80], r13
mov qword [rsp + 0x88], 7
mov word [rsp + 0x70], r13w
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0xf
jbe 0x140011442
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001143d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011617
call fcn.14003ef34
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xe8], 0xf
mov byte [rsp + 0xd0], 0
mov rdx, qword [rsp + 0x188]
cmp rdx, 0xf
jbe 0x1400114a1
inc rdx
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001149c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001161e
call fcn.14003ef34
test bl, bl
jne 0x1400114e6
lea r8, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova r8, qword [rsp + 0x220]
lea rdx, [rsp + 0x240]
cmp qword [rsp + 0x258], 0xf
cmova rdx, qword [rsp + 0x240]
lea rcx, str._error__failed_to_download__s_to__s_n
call fcn.140002110
nop
mov rdx, qword [rsp + 0x258]
cmp rdx, 0xf
jbe 0x140011529
inc rdx
mov rcx, qword [rsp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011524
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001167c
call fcn.14003ef34
add r14, 0x20
cmp r14, qword [rsp + 0x1d0]
jne 0x140010e40
movabs r12, 0x7fffffffffffffff
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x1e0]
call fcn.1400173c0
mov r14, qword [0x1400c0e68]
mov rbx, qword [0x1400c0e70]
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0x1d0], r14
cmp r14, rbx
je 0x140011b70
mov rax, qword [r14 + 0x10]
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x140011592
mov rdx, qword [r14]
test rax, rax
je 0x14001178a
dec rax
mov rcx, 0xffffffffffffffff
cmp rax, rcx
cmovb rcx, rax
add rcx, rdx
cmp byte [rcx], 0x2f
je 0x1400115c5
cmp rcx, rdx
je 0x14001178a
dec rcx
cmp byte [rcx], 0x2f
jne 0x1400115b4
sub rcx, rdx
cmp rcx, 0xffffffffffffffff
je 0x14001178a
inc rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x260], xmm0
mov qword [rsp + 0x270], r13
mov qword [rsp + 0x278], r13
mov rax, qword [r14 + 0x10]
cmp rax, rcx
jb 0x140012934
jmp 0x140011753
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r9d, 0x10
lea r8, str.diablo___notice
lea rdx, str.failed_to_download_dll__1_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rsp + 0x258]
cmp rdx, 0xf
jbe 0x140011688
inc rdx
mov rcx, qword [rsp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011683
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011683
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003ef34
mov qword [rsp + 0x250], r13
mov qword [rsp + 0x258], 0xf
mov byte [rsp + 0x240], 0
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0xf
jbe 0x1400116ea
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400116e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400116e5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003ef34
mov qword [rsp + 0x1f0], r13
mov qword [rsp + 0x1f8], 0xf
mov byte [rsp + 0x1e0], 0
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x14001222b
inc rdx
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012226
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140012226
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
sub rax, rcx
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
mov rax, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x140011771
mov rax, qword [r14]
lea rdx, [rax + rcx]
lea rcx, [rsp + 0x260]
call fcn.140001e80
or esi, 0xc0
jmp 0x1400117bf
xorps xmm0, xmm0
movups xmmword [rsp + 0x260], xmm0
mov qword [rsp + 0x270], r13
mov qword [rsp + 0x278], r13
xor r8d, r8d
lea rdx, [0x140042bb1]
lea rcx, [rsp + 0x260]
call fcn.140001e80
or esi, 0x40
mov dword [rsp + 0x40], esi
mov r15, qword [rsp + 0x230]
mov rax, r12
sub rax, r15
cmp rax, 1
jb 0x140012958
lea rax, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rax, qword [rsp + 0x220]
mov qword [rsp + 0xc0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x190], xmm0
mov qword [rsp + 0x1a0], r13
mov qword [rsp + 0x1a8], r13
lea r12, [r15 + 1]
mov edi, 0xf
lea rbx, [rsp + 0x190]
cmp r12, rdi
jbe 0x1400118cb
mov rdi, r12
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x140011880
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003eef0
test rax, rax
je 0x140011af4
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
mov rax, qword [rsp + 0xc0]
jmp 0x1400118c3
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1400118a9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001295d
jmp 0x140011859
test rcx, rcx
je 0x1400118c0
call fcn.14003eef0
mov rbx, rax
mov rax, qword [rsp + 0xc0]
jmp 0x1400118c3
mov rbx, r13
mov qword [rsp + 0x190], rbx
mov qword [rsp + 0x1a0], r12
mov qword [rsp + 0x1a8], rdi
mov r8, r15
mov rdx, rax
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r15], 0x5c
mov byte [rbx + r12], 0
bts esi, 0xa
mov dword [rsp + 0x40], esi
lea rdx, [rsp + 0x260]
cmp qword [rsp + 0x278], 0xf
cmova rdx, qword [rsp + 0x260]
mov r8, qword [rsp + 0x270]
lea rcx, [rsp + 0x190]
call fcn.140014520
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], r13
mov qword [rsp + 0x108], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xf0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x100], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts esi, 0xb
mov dword [rsp + 0x40], esi
mov rdi, qword [rsp + 0x100]
lea rbx, [rsp + 0xf0]
cmp qword [rsp + 0x108], 0xf
cmova rbx, qword [rsp + 0xf0]
call fcn.14003e5c0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rsp + 0x130]
call fcn.1400041e0
or esi, 0x300
mov dword [rsp + 0x40], esi
lea rcx, [rsp + 0x130]
cmp qword [rsp + 0x148], 7
cmova rcx, qword [rsp + 0x130]
call fcn.14003ec54
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x140012963
mov rdx, qword [rsp + 0x148]
cmp rdx, 7
jbe 0x140011a3b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011a36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011a36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003ef34
mov qword [rsp + 0x140], r13
mov qword [rsp + 0x148], 7
mov word [rsp + 0x130], r13w
mov rdx, qword [rsp + 0x108]
cmp rdx, 0xf
jbe 0x140011a9e
inc rdx
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011a99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011a99
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003ef34
mov qword [rsp + 0x100], r13
mov qword [rsp + 0x108], 0xf
mov byte [rsp + 0xf0], 0
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0xf
jbe 0x140011b01
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011afb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011afb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003ef34
nop
jmp 0x140011b12
mov rbx, qword [rsp + 0xb0]
movabs r12, 0x7fffffffffffffff
mov rdx, qword [rsp + 0x278]
cmp rdx, 0xf
jbe 0x140011b67
inc rdx
mov rcx, qword [rsp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011b62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400126d7
call fcn.14003ef34
add r14, 0x20
jmp 0x140011570
mov rdi, qword [rsp + 0x1f0]
lea rbx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0xf
cmova rbx, qword [rsp + 0x1e0]
call fcn.14003e5c0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.1400041e0
or esi, 0x30
or esi, 2
mov dword [rsp + 0x40], esi
lea rcx, [rsp + 0x70]
call fcn.140005b80
test al, al
je 0x140011c32
lea rcx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0xf
cmova rcx, qword [rsp + 0x1e0]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140011c32
lea rdx, [rsp + 0x1d0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov rcx, rbx
test eax, eax
jne 0x140011c80
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, 1
test sil, 2
je 0x140011c9d
and esi, 0xfffffffd
mov rdx, qword [rsp + 0x88]
cmp rdx, 7
jbe 0x140011c9d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011c98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011c98
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x1d0], 0x100
jle 0x140011c32
xor bl, bl
jmp 0x140011c34
call fcn.14003ef34
test bl, bl
je 0x140011cc2
mov r9d, 0x10
lea r8, str.diablo___notice
lea rdx, str.passed_download_but_unsuccessful_install__1_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x140012189
mov r14, qword [rsp + 0x230]
mov rax, r12
sub rax, r14
cmp rax, 0xd
jb 0x14001297c
lea rax, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rax, qword [rsp + 0x220]
mov qword [rsp + 0x1d0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
mov qword [rsp + 0x210], r13
mov qword [rsp + 0x218], r13
lea r15, [r14 + 0xd]
mov ebx, 0xf
lea rdi, [rsp + 0x200]
cmp r15, rbx
jbe 0x140011dc0
mov rbx, r15
or rbx, 0xf
cmp rbx, r12
jbe 0x140011d75
mov rbx, r12
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003eef0
test rax, rax
je 0x1400126d7
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rax, qword [rsp + 0x1d0]
jmp 0x140011db8
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140011d9e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140012982
jmp 0x140011d4e
test rcx, rcx
je 0x140011db5
call fcn.14003eef0
mov rdi, rax
mov rax, qword [rsp + 0x1d0]
jmp 0x140011db8
mov rdi, r13
mov qword [rsp + 0x200], rdi
mov qword [rsp + 0x210], r15
mov qword [rsp + 0x218], rbx
mov r8, r14
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.ds5w_x64.dll]
movsd qword [rdi + r14], xmm0
mov eax, dword [0x1400478d8]
mov dword [rdi + r14 + 8], eax
movzx eax, byte [0x1400478dc]
mov byte [rdi + r14 + 0xc], al
mov byte [rdi + r15], 0
bts esi, 0xc
mov rdi, qword [rsp + 0x210]
lea rbx, [rsp + 0x200]
cmp qword [rsp + 0x218], 0xf
cmova rbx, qword [rsp + 0x200]
call fcn.14003e5c0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.1400041e0
or esi, 0x6000
or esi, 4
mov dword [rsp + 0x40], esi
lea rcx, [rsp + 0x70]
call fcn.140005b80
test al, al
je 0x140011ed1
lea rcx, [rsp + 0x200]
cmp qword [rsp + 0x218], 0xf
cmova rcx, qword [rsp + 0x200]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140011ed1
lea rdx, [rsp + 0x1d0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov rcx, rbx
test eax, eax
jne 0x140011f1f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, 1
test sil, 4
je 0x140011f3c
and esi, 0xfffffffb
mov rdx, qword [rsp + 0x88]
cmp rdx, 7
jbe 0x140011f3c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011f37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011f37
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x1d0], 0x100
jle 0x140011ed1
xor bl, bl
jmp 0x140011ed3
call fcn.14003ef34
test bl, bl
je 0x140011fd8
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x80], xmm1
mov r8d, 0x3c
lea rdx, str.https:__github.com_nullifydiablo_depot_raw_main_ds5w_x64.dll
lea rcx, [rsp + 0x70]
call fcn.140001e80
nop
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x70]
call fcn.140017180
movzx ebx, al
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x140011fc8
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011fc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011fc3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003ef34
test bl, bl
jne 0x140011fd8
lea rdx, str.failed_to_download_dll__2_
jmp 0x140012114
mov rdi, qword [rsp + 0x210]
lea rbx, [rsp + 0x200]
cmp qword [rsp + 0x218], 0xf
cmova rbx, qword [rsp + 0x200]
call fcn.14003e5c0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.1400041e0
or esi, 0x18000
or esi, 8
mov dword [rsp + 0x40], esi
lea rcx, [rsp + 0x70]
call fcn.140005b80
test al, al
je 0x14001209d
lea rcx, [rsp + 0x200]
cmp qword [rsp + 0x218], 0xf
cmova rcx, qword [rsp + 0x200]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14001209d
lea rdx, [rsp + 0x1d0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov rcx, rbx
test eax, eax
jne 0x1400120e8
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, 1
test sil, 8
je 0x140012105
mov rdx, qword [rsp + 0x88]
cmp rdx, 7
jbe 0x140012105
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012100
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140012100
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x1d0], 0x100
jle 0x14001209d
xor bl, bl
jmp 0x14001209f
call fcn.14003ef34
test bl, bl
je 0x14001225f
lea rdx, str.passed_download_but_unsuccessful_install__2_
mov r9d, 0x10
lea r8, str.diablo___notice
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x14001216d
inc rdx
mov rcx, qword [rsp + 0x200]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140012168
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400126d7
call fcn.14003ef34
mov byte [rsp + 0x200], 0
mov qword [rsp + 0x218], 0xf
mov qword [rsp + 0x210], r13
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0xf
jbe 0x1400121cc
mov rcx, qword [rsp + 0x1e0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400121c7
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012739
call fcn.14003ef34
mov qword [rsp + 0x1f0], r13
mov qword [rsp + 0x1f8], 0xf
mov byte [rsp + 0x1e0], 0
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x14001222b
mov rcx, qword [rsp + 0x220]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012226
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400127a7
call fcn.14003ef34
xor eax, eax
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.14003eed0
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov byte [rsp + 0x40], 0x37
mov al, 0x65
mov cl, 0x42
mov dl, 0x44
mov r8b, 0x43
xor r9d, r9d
xor al, 0x37
mov byte [rsp + 0x41], al
xor cl, 0x37
mov byte [rsp + 0x42], cl
xor dl, 0x37
mov byte [rsp + 0x43], dl
xor r8b, 0x37
mov byte [rsp + 0x44], r8b
mov byte [rsp + 0x45], r9b
mov byte [rsp + 0x1d0], 0x4c
mov al, 0x19
mov cl, 0x22
mov dl, 0x25
mov r8b, 0x38
mov r9b, 0x35
mov r10b, 0x1b
movzx r11d, cl
mov bl, 0x28
mov dil, 0xf
mov sil, 0x20
mov r14b, 0x2d
mov r15b, 0x3f
xor al, 0x4c
mov byte [rsp + 0x1d1], al
xor cl, 0x4c
mov byte [rsp + 0x1d2], cl
xor dl, 0x4c
mov byte [rsp + 0x1d3], dl
xor r8b, 0x4c
mov byte [rsp + 0x1d4], r8b
xor r9b, 0x4c
mov byte [rsp + 0x1d5], r9b
xor r10b, 0x4c
mov byte [rsp + 0x1d6], r10b
xor r11b, 0x4c
mov byte [rsp + 0x1d7], r11b
xor bl, 0x4c
mov byte [rsp + 0x1d8], bl
xor dil, 0x4c
mov byte [rsp + 0x1d9], dil
xor sil, 0x4c
mov byte [rsp + 0x1da], sil
xor r14b, 0x4c
mov byte [rsp + 0x1db], r14b
xor r15b, 0x4c
mov byte [rsp + 0x1dc], r15b
mov r12b, 0x3f
xor r12b, 0x4c
mov byte [rsp + 0x1dd], r12b
mov byte [rsp + 0x1de], 0
lea rdx, [rsp + 0x41]
lea rcx, [rsp + 0x1d1]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400127ae
mov byte [rsp + 0x1d0], 0x7d
mov al, 0x3c
mov cl, 0xd
mov dl, 0x18
mov r8b, 5
mov r9b, 0x5d
mov r10b, 0x31
movzx r11d, dl
mov bl, 0x1a
movzx edi, dl
mov sil, 0x13
mov r14b, 0x19
mov r15b, 0xe
xor r12d, r12d
xor al, 0x7d
mov byte [rsp + 0x1d1], al
xor cl, 0x7d
mov byte [rsp + 0x1d2], cl
xor dl, 0x7d
mov byte [rsp + 0x1d3], dl
xor r8b, 0x7d
mov byte [rsp + 0x1d4], r8b
xor r9b, 0x7d
mov byte [rsp + 0x1d5], r9b
xor r10b, 0x7d
mov byte [rsp + 0x1d6], r10b
xor r11b, 0x7d
mov byte [rsp + 0x1d7], r11b
xor bl, 0x7d
mov byte [rsp + 0x1d8], bl
xor dil, 0x7d
mov byte [rsp + 0x1d9], dil
xor sil, 0x7d
mov byte [rsp + 0x1da], sil
xor r14b, 0x7d
mov byte [rsp + 0x1db], r14b
xor r15b, 0x7d
mov byte [rsp + 0x1dc], r15b
mov byte [rsp + 0x1dd], r12b
lea rdx, [rsp + 0x1d1]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400127ae
mov byte [rsp + 0x1d0], 0x2d
mov al, 0x7f
mov cl, 0x4c
mov dl, 0x44
mov r8b, 0x43
mov r9b, 0x4f
mov r10b, 0x42
mov r11b, 0x5a
mov bl, 0xd
mov dil, 0x7e
movzx esi, dl
mov r14b, 0x55
xor al, 0x2d
mov byte [rsp + 0x1d1], al
xor cl, 0x2d
mov byte [rsp + 0x1d2], cl
xor dl, 0x2d
mov byte [rsp + 0x1d3], dl
xor r8b, 0x2d
mov byte [rsp + 0x1d4], r8b
xor r9b, 0x2d
mov byte [rsp + 0x1d5], r9b
xor r10b, 0x2d
mov byte [rsp + 0x1d6], r10b
xor r11b, 0x2d
mov byte [rsp + 0x1d7], r11b
xor bl, 0x2d
mov byte [rsp + 0x1d8], bl
xor dil, 0x2d
mov byte [rsp + 0x1d9], dil
xor sil, 0x2d
mov byte [rsp + 0x1da], sil
xor r14b, 0x2d
mov byte [rsp + 0x1db], r14b
mov byte [rsp + 0x1dc], r12b
mov byte [rsp + 0x40], 0x4e
mov al, 0x1c
mov cl, 0x78
mov dl, 9
mov r8b, 0x2f
mov r9b, 0x23
mov r10b, 0x2b
xor r11d, r11d
xor al, 0x4e
mov byte [rsp + 0x41], al
xor cl, 0x4e
mov byte [rsp + 0x42], cl
xor dl, 0x4e
mov byte [rsp + 0x43], dl
xor r8b, 0x4e
mov byte [rsp + 0x44], r8b
xor r9b, 0x4e
mov byte [rsp + 0x45], r9b
xor r10b, 0x4e
mov byte [rsp + 0x46], r10b
mov byte [rsp + 0x47], r11b
lea rdx, [rsp + 0x1d1]
lea rcx, [rsp + 0x41]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400127ae
mov byte [rsp + 0x1d0], 0x26
mov al, 0x72
mov cl, 0x6e
mov dl, 0x63
mov r8b, 6
mov r9b, 0x60
mov r10b, 0x6f
mov r11b, 0x68
mov bl, 0x67
mov dil, 0x6a
mov sil, 0x75
movzx r14d, r8b
movzx r15d, r8b
xor al, 0x26
mov byte [rsp + 0x1d1], al
xor cl, 0x26
mov byte [rsp + 0x1d2], cl
xor dl, 0x26
mov byte [rsp + 0x1d3], dl
xor r8b, 0x26
mov byte [rsp + 0x1d4], r8b
xor r9b, 0x26
mov byte [rsp + 0x1d5], r9b
xor r10b, 0x26
mov byte [rsp + 0x1d6], r10b
xor r11b, 0x26
mov byte [rsp + 0x1d7], r11b
xor bl, 0x26
mov byte [rsp + 0x1d8], bl
xor dil, 0x26
mov byte [rsp + 0x1d9], dil
xor sil, 0x26
mov byte [rsp + 0x1da], sil
xor r14b, 0x26
mov byte [rsp + 0x1db], r14b
xor r15b, 0x26
mov byte [rsp + 0x1dc], r15b
mov byte [rsp + 0x1dd], r12b
lea rdx, [rsp + 0x1d1]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400127ae
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rsp + 0x70], rax
lea rax, [0x140010420]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0xa8], rax
lea rax, vtable.std::_Func_impl_no_alloc_bool____cdecl___struct_HWND______ptr64__unsigned_int__unsigned_long_long_unsigned___int64___long_long___int64____bool__struct_HWND______ptr64__unsigned_int__unsigned_long_long_unsigned___int64___long_long___int64__.0
mov qword [rsp + 0x190], rax
lea rax, [0x140010410]
mov qword [rsp + 0x198], rax
lea rax, [rsp + 0x190]
mov qword [rsp + 0x1c8], rax
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x190]
call fcn.140002ed0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x1400126e3
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400126de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400126de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003ef34
mov qword [rsp + 0x210], r13
mov qword [rsp + 0x218], 0xf
mov byte [rsp + 0x200], 0
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0xf
jbe 0x140012745
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012740
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140012740
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003ef34
mov qword [rsp + 0x1f0], r13
mov qword [rsp + 0x1f8], 0xf
mov byte [rsp + 0x1e0], 0
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x14001222b
inc rdx
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012226
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140012226
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movdqa xmm1, xmmword [0x140048430]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
mov byte [rsp + 0x60], 0
movdqa xmm1, xmmword [0x140048350]
movdqu xmmword [rsp + 0x70], xmm1
movdqa xmm2, xmmword [0x140048380]
movdqu xmmword [rsp + 0x80], xmm2
mov dl, 0x50
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x71], al
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x80], al
xor byte [rsp + 0x81], cl
xor byte [rsp + 0x82], cl
xor byte [rsp + 0x83], cl
xor byte [rsp + 0x84], cl
xor byte [rsp + 0x85], cl
xor byte [rsp + 0x86], cl
xor byte [rsp + 0x87], cl
xor byte [rsp + 0x88], cl
xor byte [rsp + 0x89], cl
xor byte [rsp + 0x8a], cl
xor byte [rsp + 0x8b], cl
xor byte [rsp + 0x8c], cl
xor byte [rsp + 0x8d], cl
xor byte [rsp + 0x8e], cl
xor byte [rsp + 0x8f], cl
xor dl, cl
mov byte [rsp + 0x90], dl
mov byte [rsp + 0x91], 0
mov r9d, 0x10
lea r8, [rsp + 0x51]
lea rdx, [rsp + 0x71]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.140001580
int3
call fcn.1400014e0
nop
call fcn.140001b80
int3
call fcn.140001b80
nop
call fcn.1400014e0
int3
call fcn.1400014e0
int3
call fcn.140001580
int3
call fcn.140001580
nop
call fcn.140001580
call fcn.1400014e0
nop
shr rdx, 0x20
lea r8, [rsp + 0x130]
lea rcx, str.remove
call fcn.140005240
nop
call fcn.140001580
int3
call fcn.1400014e0
int3