Function at 0x1400102a0
Capabilities:
Authenticate hmac
Log keystrokes via polling
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x1d0
mov rax, qword [0x140052040]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
xor esi, esi
lea ecx, [rsi + 0x50]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x1400102f4
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x1b0], rsi
mov qword [rsp + 0x1b8], rsi
mov r8d, 0x13
lea rdx, str.C:WindowsSystem32
lea rcx, [rsp + 0x1a0]
call fcn.140001e80
nop
movabs r13, 0x7fffffffffffffff
mov rax, r13
mov r12, qword [rsp + 0x1b0]
mov qword [rsp + 0x20], r12
sub rax, r12
cmp rax, 0x14
jb 0x14001203f
lea r15, [rsp + 0x1a0]
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x98], rax
mov rcx, qword [rsp + 0x1b8]
mov qword [rsp + 0x90], rcx
cmp rcx, 0xf
cmova r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x190], xmm1
lea r14, [r12 + 0x14]
mov eax, 0xf
mov qword [rsp + 0xa8], rax
mov ebx, eax
lea rdi, [rsp + 0x180]
cmp r14, rax
jbe 0x140010436
mov rbx, r14
or rbx, rax
cmp rbx, r13
jbe 0x1400103f4
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003e440
test rax, rax
je 0x14001055b
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14001042e
mov edi, 0x16
cmp rbx, rdi
cmovb rbx, rdi
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14001041c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140012045
jmp 0x1400103d5
test rcx, rcx
je 0x14001042b
call fcn.14003e440
mov rdi, rax
jmp 0x14001042e
mov rdi, rsi
mov qword [rsp + 0x180], rdi
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], rbx
mov r8, r12
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.opencv_world470.dll]
movups xmmword [rdi + r12], xmm0
mov eax, dword [0x1400477d8]
mov dword [rdi + r12 + 0x10], eax
mov byte [rdi + r14], 0
mov rdi, qword [rsp + 0x190]
lea rbx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rbx, qword [rsp + 0x180]
call fcn.14003db10
mov qword [rsp + 0x160], rbx
mov qword [rsp + 0x168], rdi
lea r8, [rsp + 0x160]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.1400041e0
nop
lea rcx, [rsp + 0x50]
call fcn.140005b80
movzx ebx, al
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x14001050e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010509
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010509
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
movdqa xmm0, xmmword [0x140048060]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], si
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x140010567
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010562
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010562
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
test bl, bl
jne 0x140011122
mov r14, qword [0x1400b2c28]
mov rax, qword [0x1400b2c30]
mov qword [rsp + 0xa0], rax
mov edi, 0xf
cmp r14, rax
je 0x14001091b
nop dword [rax]
nop word [rax + rax]
mov r9, qword [r14 + 0x10]
mov rdx, r14
mov r10, qword [r14 + 0x18]
cmp r10, 0xf
jbe 0x1400105b4
mov rdx, qword [r14]
test r9, r9
je 0x140010633
lea rax, [r9 - 1]
mov rcx, 0xffffffffffffffff
cmp rax, rcx
cmovb rcx, rax
add rcx, rdx
cmp byte [rcx], 0x2f
je 0x1400105e0
cmp rcx, rdx
je 0x140010633
dec rcx
cmp byte [rcx], 0x2f
jne 0x1400105d3
sub rcx, rdx
cmp rcx, 0xffffffffffffffff
je 0x140010633
inc rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x160], xmm0
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], rsi
cmp r9, rcx
jb 0x140012051
sub r9, rcx
mov r8, 0xffffffffffffffff
cmp r9, r8
cmovb r8, r9
mov rax, r14
cmp r10, 0xf
jbe 0x14001062d
mov rax, qword [r14]
lea rdx, [rax + rcx]
jmp 0x140010658
xorps xmm0, xmm0
movups xmmword [rsp + 0x160], xmm0
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], rsi
xor r8d, r8d
lea rdx, [0x140042bb1]
lea rcx, [rsp + 0x160]
call fcn.140001e80
nop
lea rdx, [rsp + 0x160]
cmp qword [rsp + 0x178], 0xf
cmova rdx, qword [rsp + 0x160]
lea rcx, str._info__downloading__s_n
call fcn.140002110
mov rax, r13
sub rax, r12
cmp rax, 1
jb 0x14001205d
lea r12, [rsp + 0x1a0]
cmp qword [rsp + 0x90], 0xf
cmova r12, qword [rsp + 0x98]
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rsi
mov rax, qword [rsp + 0x20]
lea r15, [rax + 1]
mov rbx, rdi
lea rdi, [rsp + 0xb0]
cmp r15, 0xf
jbe 0x140010778
mov rbx, r15
or rbx, 0xf
cmp rbx, r13
jbe 0x14001070e
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140010735
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140010759
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140012057
mov rcx, rax
call fcn.14003e440
test rax, rax
je 0x140010937
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rax, qword [rsp + 0x20]
jmp 0x140010770
test rcx, rcx
je 0x14001076d
call fcn.14003e440
mov rdi, rax
mov rax, qword [rsp + 0x20]
jmp 0x140010770
mov rdi, rsi
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xc0], r15
mov qword [rsp + 0xc8], rbx
mov r8, rax
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r12, qword [rsp + 0x20]
mov byte [rdi + r12], 0x5c
mov byte [rdi + r15], 0
lea rdx, [rsp + 0x160]
cmp qword [rsp + 0x178], 0xf
cmova rdx, qword [rsp + 0x160]
mov r8, qword [rsp + 0x170]
lea rcx, [rsp + 0xb0]
call fcn.140013bd0
xorps xmm0, xmm0
movups xmmword [rsp + 0x118], xmm0
mov qword [rsp + 0x128], rsi
mov qword [rsp + 0x130], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x118], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x128], xmm1
mov qword [rax + 0x10], rsi
mov edi, 0xf
mov qword [rax + 0x18], rdi
mov byte [rax], 0
lea rdx, [rsp + 0x118]
mov rcx, r14
call fcn.1400167a0
movzx ebx, al
mov rdx, qword [rsp + 0x130]
cmp rdx, rdi
jbe 0x14001086b
inc rdx
mov rcx, qword [rsp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010866
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010930
call fcn.14003e484
mov qword [rsp + 0x128], rsi
mov qword [rsp + 0x130], rdi
mov byte [rsp + 0x118], 0
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0xf
jbe 0x1400108c2
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400108bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010937
call fcn.14003e484
test bl, bl
je 0x14001093e
mov rdx, qword [rsp + 0x178]
cmp rdx, 0xf
jbe 0x140010909
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010904
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010995
call fcn.14003e484
add r14, 0x20
cmp r14, qword [rsp + 0xa0]
jne 0x1400105a0
mov rax, r13
sub rax, r12
cmp rax, 0x14
jb 0x14001204b
jmp 0x140010a07
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r9d, 0x10
lea r8, str.diablo___notice
lea rdx, str.failed_to_download_dll__1_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rsp + 0x178]
cmp rdx, 0xf
jbe 0x1400109a1
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001099c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001099c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], rdi
mov byte [rsp + 0x160], 0
mov rax, qword [rsp + 0x90]
cmp rax, 0xf
jbe 0x140011a3a
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011a35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011a35
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea r15, [rsp + 0x1a0]
cmp qword [rsp + 0x90], 0xf
cmova r15, qword [rsp + 0x98]
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xc0], xmm1
lea r14, [r12 + 0x14]
lea rbx, [rsp + 0xb0]
cmp r14, 0xf
jbe 0x140010aca
mov rdi, r14
or rdi, 0xf
cmp rdi, r13
jbe 0x140010a87
mov rdi, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003e440
test rax, rax
je 0x140010c91
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140010ac2
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140010ab0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140012063
jmp 0x140010a68
test rcx, rcx
je 0x140010abf
call fcn.14003e440
mov rbx, rax
jmp 0x140010ac2
mov rbx, rsi
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0xc0], r14
mov qword [rsp + 0xc8], rdi
mov r8, r12
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.opencv_world470.dll]
movups xmmword [rbx + r12], xmm0
mov eax, dword [0x1400477d8]
mov dword [rbx + r12 + 0x10], eax
mov byte [rbx + r14], 0
mov rax, r13
sub rax, r12
cmp rax, 0x14
jb 0x140012069
lea r15, [rsp + 0x1a0]
cmp qword [rsp + 0x90], 0xf
cmova r15, qword [rsp + 0x98]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea r14, [r12 + 0x14]
mov edi, 0xf
lea rbx, [rsp + 0x50]
cmp r14, rdi
jbe 0x140010bcf
mov rdi, r14
or rdi, 0xf
cmp rdi, r13
jbe 0x140010b8f
mov rdi, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003e440
test rax, rax
je 0x140010c4a
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140010bca
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140010bb8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001206f
jmp 0x140010b70
test rcx, rcx
je 0x140010bc7
call fcn.14003e440
mov rbx, rax
jmp 0x140010bca
mov rbx, rsi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rdi
mov r8, r12
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.opencv_world470.dll]
movups xmmword [r12 + rbx], xmm0
mov eax, dword [0x1400477d8]
mov dword [r12 + rbx + 0x10], eax
mov byte [rbx + r14], 0
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x50]
call fcn.1400169c0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140010c57
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010c51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010c51
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
nop
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0xf
jbe 0x140010c9d
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010c98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010c98
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
mov r14, qword [0x1400b2c28]
mov rbx, qword [0x1400b2c30]
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0xa0], r14
cmp r14, rbx
je 0x140011122
mov rax, qword [r14 + 0x10]
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x140010cd5
mov rdx, qword [r14]
test rax, rax
je 0x140010d5c
dec rax
mov rcx, 0xffffffffffffffff
cmp rax, rcx
cmovb rcx, rax
add rcx, rdx
cmp byte [rcx], 0x2f
je 0x140010d04
cmp rcx, rdx
je 0x140010d5c
dec rcx
cmp byte [rcx], 0x2f
jne 0x140010cf7
sub rcx, rdx
cmp rcx, 0xffffffffffffffff
je 0x140010d5c
inc rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], rsi
mov qword [rsp + 0x198], rsi
mov rax, qword [r14 + 0x10]
cmp rax, rcx
jb 0x140012075
sub rax, rcx
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
mov rax, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x140010d56
mov rax, qword [r14]
lea rdx, [rax + rcx]
jmp 0x140010d81
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], rsi
mov qword [rsp + 0x198], rsi
xor r8d, r8d
lea rdx, [0x140042bb1]
lea rcx, [rsp + 0x180]
call fcn.140001e80
nop
mov rax, r13
sub rax, r12
cmp rax, 1
jb 0x14001207b
lea r12, [rsp + 0x1a0]
cmp qword [rsp + 0x90], 0xf
cmova r12, qword [rsp + 0x98]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov rax, qword [rsp + 0x20]
lea r15, [rax + 1]
mov edi, 0xf
lea rbx, [rsp + 0x50]
cmp r15, rdi
jbe 0x140010e6d
mov rdi, r15
or rdi, 0xf
cmp rdi, r13
jbe 0x140010e28
mov rdi, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003e440
test rax, rax
je 0x14001106f
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
mov rax, qword [rsp + 0x20]
jmp 0x140010e68
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140010e51
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140012080
jmp 0x140010e04
test rcx, rcx
je 0x140010e65
call fcn.14003e440
mov rbx, rax
mov rax, qword [rsp + 0x20]
jmp 0x140010e68
mov rbx, rsi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], rdi
mov r8, rax
mov rdx, r12
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r12, qword [rsp + 0x20]
mov byte [rbx + r12], 0x5c
mov byte [rbx + r15], 0
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rdx, qword [rsp + 0x180]
mov r8, qword [rsp + 0x190]
lea rcx, [rsp + 0x50]
call fcn.140013bd0
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], rsi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xf0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x100], xmm1
mov qword [rax + 0x10], rsi
mov r15d, 0xf
mov qword [rax + 0x18], r15
mov byte [rax], 0
mov rdi, qword [rsp + 0x100]
lea rbx, [rsp + 0xf0]
cmp qword [rsp + 0x108], r15
cmova rbx, qword [rsp + 0xf0]
call fcn.14003db10
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x138]
call fcn.1400041e0
nop
lea rcx, [rsp + 0x138]
cmp qword [rsp + 0x150], 7
cmova rcx, qword [rsp + 0x138]
call fcn.14003e1a4
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x140012086
mov rdx, qword [rsp + 0x150]
cmp rdx, 7
jbe 0x140010fc1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010fbc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010fbc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
mov qword [rsp + 0x148], rsi
mov qword [rsp + 0x150], 7
mov word [rsp + 0x138], si
mov rdx, qword [rsp + 0x108]
cmp rdx, 0xf
jbe 0x140011023
inc rdx
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001101e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001101e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0x108], r15
mov byte [rsp + 0xf0], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14001107c
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011076
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011076
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
nop
jmp 0x1400110cb
mov rbx, qword [rsp + 0x110]
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x140011119
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011114
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011114
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
add r14, 0x20
jmp 0x140010cb3
mov rax, r13
sub rax, r12
cmp rax, 0x14
jb 0x14001209f
lea r15, [rsp + 0x1a0]
cmp qword [rsp + 0x90], 0xf
cmova r15, qword [rsp + 0x98]
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x190], xmm1
lea r14, [r12 + 0x14]
mov ebx, 0xf
lea rdi, [rsp + 0x180]
cmp r14, rbx
jbe 0x1400111fd
mov rbx, r14
or rbx, 0xf
cmp rbx, r13
jbe 0x1400111ba
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003e440
test rax, rax
je 0x140011319
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400111f5
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400111e3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400120a5
jmp 0x14001119b
test rcx, rcx
je 0x1400111f2
call fcn.14003e440
mov rdi, rax
jmp 0x1400111f5
mov rdi, rsi
mov qword [rsp + 0x180], rdi
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], rbx
mov r8, r12
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.opencv_world470.dll]
movups xmmword [r12 + rdi], xmm0
mov eax, dword [0x1400477d8]
mov dword [r12 + rdi + 0x10], eax
mov byte [rdi + r14], 0
mov rdi, qword [rsp + 0x190]
lea rbx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rbx, qword [rsp + 0x180]
call fcn.14003db10
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.1400041e0
nop
lea rcx, [rsp + 0x50]
call fcn.140005b80
movzx ebx, al
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x1400112cc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400112c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400112c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
movdqa xmm0, xmmword [0x140048060]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], si
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x140011325
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011320
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011320
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
test bl, bl
jne 0x140011392
lea rdx, str.passed_download_but_unsuccessful_install__1_
lea r8, str.diablo___notice
mov r9d, 0x10
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rax, qword [rsp + 0x90]
cmp rax, 0xf
jbe 0x140011a3a
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011a35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011ef7
jmp 0x140011a35
mov rax, r13
sub rax, r12
cmp rax, 0xd
jb 0x1400120ab
lea r15, [rsp + 0x1a0]
cmp qword [rsp + 0x90], 0xf
cmova r15, qword [rsp + 0x98]
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x190], xmm1
lea r14, [r12 + 0xd]
mov ebx, 0xf
lea rdi, [rsp + 0x180]
cmp r14, rbx
jbe 0x14001146d
mov rbx, r14
or rbx, 0xf
cmp rbx, r13
jbe 0x14001142a
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003e440
test rax, rax
je 0x140011597
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140011465
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140011453
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400120b1
jmp 0x14001140b
test rcx, rcx
je 0x140011462
call fcn.14003e440
mov rdi, rax
jmp 0x140011465
mov rdi, rsi
mov qword [rsp + 0x180], rdi
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x198], rbx
mov r8, r12
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.ds5w_x64.dll]
movsd qword [rdi + r12], xmm0
mov eax, dword [0x140047860]
mov dword [rdi + r12 + 8], eax
movzx eax, byte [0x140047864]
mov byte [rdi + r12 + 0xc], al
mov byte [rdi + r14], 0
mov rdi, qword [rsp + 0x190]
lea rbx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rbx, qword [rsp + 0x180]
call fcn.14003db10
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.1400041e0
nop
lea rcx, [rsp + 0x50]
call fcn.140005b80
movzx ebx, al
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x14001154a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011545
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011545
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
movdqa xmm0, xmmword [0x140048060]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], si
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x1400115a3
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001159e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001159e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
test bl, bl
jne 0x1400117b2
mov rax, r13
sub rax, r12
cmp rax, 0xd
jb 0x1400120b7
lea r15, [rsp + 0x1a0]
cmp qword [rsp + 0x90], 0xf
cmova r15, qword [rsp + 0x98]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea r14, [r12 + 0xd]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp r14, rbx
jbe 0x14001167a
mov rbx, r14
or rbx, 0xf
cmp rbx, r13
jbe 0x14001163a
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003e440
test rax, rax
je 0x140011796
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140011675
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140011663
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400120bd
jmp 0x14001161b
test rcx, rcx
je 0x140011672
call fcn.14003e440
mov rdi, rax
jmp 0x140011675
mov rdi, rsi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rbx
mov r8, r12
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.ds5w_x64.dll]
movsd qword [r12 + rdi], xmm0
mov eax, dword [0x140047860]
mov dword [r12 + rdi + 8], eax
movzx eax, byte [0x140047864]
mov byte [r12 + rdi + 0xc], al
mov byte [rdi + r14], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xc0], xmm1
mov r8d, 0x3c
lea rdx, str.https:__github.com_nullifydiablo_depot_raw_main_ds5w_x64.dll
lea rcx, [rsp + 0xb0]
call fcn.140001e80
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xb0]
call fcn.1400167a0
movzx ebx, al
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0xf
jbe 0x140011749
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011744
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011744
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
movdqa xmm0, xmmword [0x140048070]
movdqu xmmword [rsp + 0xc0], xmm0
mov byte [rsp + 0xb0], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1400117a2
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001179d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001179d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
test bl, bl
jne 0x1400117b2
lea rdx, str.failed_to_download_dll__2_
jmp 0x140011330
mov rax, r13
sub rax, r12
cmp rax, 0xd
jb 0x1400120c3
lea r14, [rsp + 0x1a0]
cmp qword [rsp + 0x90], 0xf
mov r15, qword [rsp + 0x98]
cmova r14, r15
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x190], xmm1
lea rdi, [r12 + 0xd]
lea rbx, [rsp + 0x180]
cmp rdi, 0xf
jbe 0x140011899
mov rbx, rdi
or rbx, 0xf
cmp rbx, r13
jbe 0x14001184e
mov qword [rsp + 0xa8], r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003e440
test rax, rax
je 0x1400119ca
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140011891
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
mov qword [rsp + 0xa8], rbx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14001187f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400120c9
jmp 0x14001182f
test rcx, rcx
je 0x14001188e
call fcn.14003e440
mov rbx, rax
jmp 0x140011891
mov rbx, rsi
mov qword [rsp + 0x180], rbx
mov qword [rsp + 0x190], rdi
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x198], rax
mov r8, r12
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.ds5w_x64.dll]
movsd qword [r12 + rbx], xmm0
mov eax, dword [0x140047860]
mov dword [r12 + rbx + 8], eax
movzx eax, byte [0x140047864]
mov byte [r12 + rbx + 0xc], al
mov byte [rbx + rdi], 0
mov rdi, qword [rsp + 0x190]
lea rbx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rbx, qword [rsp + 0x180]
call fcn.14003db10
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.1400041e0
nop
lea rcx, [rsp + 0x50]
call fcn.140005b80
movzx ebx, al
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x14001197d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011978
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011978
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
movdqa xmm0, xmmword [0x140048060]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], si
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x1400119d6
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400119d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400119d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e484
test bl, bl
jne 0x140011a6e
mov r9d, 0x10
lea r8, str.diablo___notice
lea rdx, str.passed_download_but_unsuccessful_install__2_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rax, qword [rsp + 0x90]
cmp rax, 0xf
jbe 0x140011a3a
lea rdx, [rax + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140011a32
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011ef7
mov rcx, r15
call fcn.14003e484
xor eax, eax
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.14003e420
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov byte [rsp + 0x20], 0x4a
mov al, 0x18
mov cl, 0x3f
mov dl, 0x39
mov r8b, 0x3e
xor r9d, r9d
xor al, 0x4a
mov byte [rsp + 0x21], al
xor cl, 0x4a
mov byte [rsp + 0x22], cl
xor dl, 0x4a
mov byte [rsp + 0x23], dl
xor r8b, 0x4a
mov byte [rsp + 0x24], r8b
mov byte [rsp + 0x25], r9b
mov byte [rsp + 0x160], 7
mov al, 0x52
mov cl, 0x69
mov dl, 0x6e
mov r8b, 0x73
mov r9b, 0x7e
mov r10b, 0x50
movzx r11d, cl
mov bl, 0x63
mov dil, 0x44
mov sil, 0x6b
mov r14b, 0x66
mov r15b, 0x74
movzx r12d, r15b
xor r13d, r13d
xor al, 7
mov byte [rsp + 0x161], al
xor cl, 7
mov byte [rsp + 0x162], cl
xor dl, 7
mov byte [rsp + 0x163], dl
xor r8b, 7
mov byte [rsp + 0x164], r8b
xor r9b, 7
mov byte [rsp + 0x165], r9b
xor r10b, 7
mov byte [rsp + 0x166], r10b
xor r11b, 7
mov byte [rsp + 0x167], r11b
xor bl, 7
mov byte [rsp + 0x168], bl
xor dil, 7
mov byte [rsp + 0x169], dil
xor sil, 7
mov byte [rsp + 0x16a], sil
xor r14b, 7
mov byte [rsp + 0x16b], r14b
xor r15b, 7
mov byte [rsp + 0x16c], r15b
xor r12b, 7
mov byte [rsp + 0x16d], r12b
mov byte [rsp + 0x16e], r13b
lea rdx, [rsp + 0x21]
lea rcx, [rsp + 0x161]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140011efe
mov byte [rsp + 0x160], 0x45
mov al, 4
mov cl, 0x35
mov dl, 0x20
mov r8b, 0x3d
mov r9b, 0x65
mov r10b, 9
movzx r11d, dl
mov bl, 0x22
movzx edi, dl
mov sil, 0x2b
mov r14b, 0x21
mov r15b, 0x36
xor r12d, r12d
xor al, 0x45
mov byte [rsp + 0x161], al
xor cl, 0x45
mov byte [rsp + 0x162], cl
xor dl, 0x45
mov byte [rsp + 0x163], dl
xor r8b, 0x45
mov byte [rsp + 0x164], r8b
xor r9b, 0x45
mov byte [rsp + 0x165], r9b
xor r10b, 0x45
mov byte [rsp + 0x166], r10b
xor r11b, 0x45
mov byte [rsp + 0x167], r11b
xor bl, 0x45
mov byte [rsp + 0x168], bl
xor dil, 0x45
mov byte [rsp + 0x169], dil
xor sil, 0x45
mov byte [rsp + 0x16a], sil
xor r14b, 0x45
mov byte [rsp + 0x16b], r14b
xor r15b, 0x45
mov byte [rsp + 0x16c], r15b
mov byte [rsp + 0x16d], r12b
lea rdx, [rsp + 0x161]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140011efe
mov byte [rsp + 0x160], 0x5b
mov al, 9
mov cl, 0x3a
mov dl, 0x32
mov r8b, 0x35
mov r9b, 0x39
mov r10b, 0x34
mov r11b, 0x2c
mov bl, 0x7b
mov dil, 8
movzx esi, dl
mov r14b, 0x23
xor al, 0x5b
mov byte [rsp + 0x161], al
xor cl, 0x5b
mov byte [rsp + 0x162], cl
xor dl, 0x5b
mov byte [rsp + 0x163], dl
xor r8b, 0x5b
mov byte [rsp + 0x164], r8b
xor r9b, 0x5b
mov byte [rsp + 0x165], r9b
xor r10b, 0x5b
mov byte [rsp + 0x166], r10b
xor r11b, 0x5b
mov byte [rsp + 0x167], r11b
xor bl, 0x5b
mov byte [rsp + 0x168], bl
xor dil, 0x5b
mov byte [rsp + 0x169], dil
xor sil, 0x5b
mov byte [rsp + 0x16a], sil
xor r14b, 0x5b
mov byte [rsp + 0x16b], r14b
mov byte [rsp + 0x16c], r12b
mov byte [rsp + 0x20], 0x64
mov al, 0x36
mov cl, 0x52
mov dl, 0x23
mov r8b, 5
mov r9b, 9
mov r10b, 1
xor r11d, r11d
xor al, 0x64
mov byte [rsp + 0x21], al
xor cl, 0x64
mov byte [rsp + 0x22], cl
xor dl, 0x64
mov byte [rsp + 0x23], dl
xor r8b, 0x64
mov byte [rsp + 0x24], r8b
xor r9b, 0x64
mov byte [rsp + 0x25], r9b
xor r10b, 0x64
mov byte [rsp + 0x26], r10b
mov byte [rsp + 0x27], r11b
lea rdx, [rsp + 0x161]
lea rcx, [rsp + 0x21]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140011efe
mov byte [rsp + 0x160], 0x4e
mov al, 0x1a
mov cl, 6
mov dl, 0xb
mov r8b, 0x6e
mov r9b, 8
mov r10b, 7
xor r11b, r11b
mov bl, 0xf
mov dil, 2
mov sil, 0x1d
movzx r14d, r8b
movzx r15d, r8b
xor al, 0x4e
mov byte [rsp + 0x161], al
xor cl, 0x4e
mov byte [rsp + 0x162], cl
xor dl, 0x4e
mov byte [rsp + 0x163], dl
xor r8b, 0x4e
mov byte [rsp + 0x164], r8b
xor r9b, 0x4e
mov byte [rsp + 0x165], r9b
xor r10b, 0x4e
mov byte [rsp + 0x166], r10b
xor r11b, 0x4e
mov byte [rsp + 0x167], r11b
xor bl, 0x4e
mov byte [rsp + 0x168], bl
xor dil, 0x4e
mov byte [rsp + 0x169], dil
xor sil, 0x4e
mov byte [rsp + 0x16a], sil
xor r14b, 0x4e
mov byte [rsp + 0x16b], r14b
xor r15b, 0x4e
mov byte [rsp + 0x16c], r15b
mov byte [rsp + 0x16d], r12b
lea rdx, [rsp + 0x161]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140011efe
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rsp + 0x50], rax
lea rax, [0x14000fb30]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x88], rax
lea rax, vtable.std::_Func_impl_no_alloc_bool____cdecl___struct_HWND______ptr64__unsigned_int__unsigned_long_long_unsigned___int64___long_long___int64____bool__struct_HWND______ptr64__unsigned_int__unsigned_long_long_unsigned___int64___long_long___int64__.0
mov qword [rsp + 0xb0], rax
lea rax, [0x14000fb20]
mov qword [rsp + 0xb8], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0xe8], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0xb0]
call fcn.140002ed0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
nop
mov rax, qword [rsp + 0x90]
cmp rax, 0xf
jbe 0x140011a3a
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011a35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011a35
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movdqa xmm1, xmmword [0x1400481a0]
movdqu xmmword [rsp + 0x30], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
mov byte [rsp + 0x40], r13b
movdqa xmm1, xmmword [0x1400481f0]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x140048200]
movdqu xmmword [rsp + 0x60], xmm2
mov dl, 0x35
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
xor dl, cl
mov byte [rsp + 0x70], dl
mov byte [rsp + 0x71], r13b
mov r9d, 0x10
lea r8, [rsp + 0x31]
lea rdx, [rsp + 0x51]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140001580
int3
call fcn.1400014e0
int3
call fcn.140001580
int3
call fcn.140001b80
nop
call fcn.1400014e0
int3
call fcn.140001580
nop
call fcn.1400014e0
nop
call fcn.140001580
int3
call fcn.1400014e0
nop
call fcn.140001b80
nop
call fcn.140001580
call fcn.1400014e0
nop
shr rdx, 0x20
lea r8, [rsp + 0x138]
lea rcx, str.remove
call fcn.140005240
nop
call fcn.140001580
int3
call fcn.1400014e0
int3
call fcn.140001580
int3
call fcn.1400014e0
int3
call fcn.140001580
int3
call fcn.1400014e0
int3
call fcn.140001580
int3
call fcn.1400014e0
int3