Function at 0x40b6d0
Capabilities:
Check for foreground window switch
Create process on windows
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1c0]
sub rsp, 0x2c0
mov rax, qword [0x004a6080]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
xor r8d, r8d
mov dword [rsp + 0x30], r8d
mov r14, qword [0x004a60d0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 6
jb 0x40c70c
lea r12, [0x004a60c0]
mov r13, r12
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae r13, qword [0x004a60c0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x118], xmm1
lea r15, [r14 + 6]
mov ebx, reloc.WS2_32.dll_ntohs
mov edi, ebx
lea rsi, [rbp + 0x108]
lea edx, [rbx + 7]
lea rax, [rbx - 0x10]
cmp r15, rbx
jbe 0x40b7ee
mov rdi, r15
or rdi, rbx
cmp rdi, rcx
jbe 0x40b78e
mov rdi, rcx
jmp 0x40b795
cmp rdi, rdx
cmovb rdi, rdx
mov rcx, rdi
add rcx, 1
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x40b7d5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x40c712
mov rcx, rax
call fcn.00480f28
test rax, rax
je 0x40c6ca
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x40b7e7
test rcx, rcx
je 0x40b7e4
call fcn.00480f28
mov rsi, rax
jmp 0x40b7e7
mov rsi, r8
mov qword [rbp + 0x108], rsi
mov qword [rbp + 0x118], r15
mov qword [rbp + 0x120], rdi
mov r8, r14
mov rdx, r13
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [str._E.png]
mov dword [rsi + r14], eax
movzx eax, word [0x00494874]
mov word [rsi + r14 + 4], ax
mov byte [rsi + r15], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
xor r8d, r8d
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x130]
call qword [sym.imp.opencv_world420.dll_class_cv::Mat___cdecl_cv::imread_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__int_]
nop
mov r14, qword [0x004a60d0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 9
jb 0x40c718
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae r12, qword [0x004a60c0]
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
lea rsi, [r14 + 9]
lea rdi, [rbp + 0xe8]
cmp rsi, 0xf
jbe 0x40b95d
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x40b8d7
mov rbx, rcx
jmp 0x40b8e4
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x40b935
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x40c706
mov rcx, rax
call fcn.00480f28
test rax, rax
je 0x40c5d5
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
xor r15d, r15d
mov qword [rbp + 0xe8], rdi
jmp 0x40b960
test rcx, rcx
je 0x40b94e
call fcn.00480f28
mov rdi, rax
xor r15d, r15d
mov qword [rbp + 0xe8], rax
jmp 0x40b960
xor r15d, r15d
mov edi, r15d
mov qword [rbp + 0xe8], r15
jmp 0x40b960
xor r15d, r15d
mov qword [rbp + 0xf8], rsi
mov qword [rbp + 0x100], rbx
mov r8, r14
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str._bell.wav]
movsd qword [r14 + rdi], xmm0
movzx eax, byte [0x00494978]
mov byte [r14 + rdi + 8], al
mov byte [rdi + rsi], 0
lea r9, [rbp + 0xa0]
xor r8d, r8d
xor edx, edx
lea rcx, [0x004860e0]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
js 0x40b9f1
mov rdx, qword [rbp + 0xa0]
lea rcx, [rbp + 0x190]
call fcn.00413d80
mov rcx, qword [rbp + 0xa0]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
movups xmm0, xmmword [rbp + 0x190]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rbp + 0x1a0]
movups xmmword [rsp + 0x48], xmm1
jmp 0x40ba03
lea rdx, [0x00494864]
lea rcx, [rsp + 0x38]
call fcn.00413d80
nop
mov rdi, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
sub rax, rdi
cmp rax, 0x12
jb 0x40ba54
lea rax, [rdi + 0x12]
mov qword [rsp + 0x48], rax
lea rbx, [rsp + 0x38]
cmp rcx, 8
cmovae rbx, qword [rsp + 0x38]
lea rcx, [rbx + rdi*2]
mov r8d, Ordinal_41
lea rdx, str.qbots_litepm.exe
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rdi*2 + 0x24], r15w
lea rax, [rsp + 0x38]
jmp 0x40ba75
mov qword [rsp + 0x20], reloc.WS2_32.dll_select
lea r9, str.qbots_litepm.exe
xor r8d, r8d
lea edx, [r8 + 0x12]
lea rcx, [rsp + 0x38]
call fcn.00416820
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
xor edi, edi
mov qword [rbp + 0xd8], rdi
mov qword [rbp + 0xe0], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd8], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
mov esi, 0xf0
mov dword [rsp + 0x30], esi
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x40bb01
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40bafc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x40bafc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
movdqa xmm0, xmmword [0x00496260]
movdqu xmmword [rsp + 0x48], xmm0
mov word [rsp + 0x38], di
lea rdx, str.visible:
lea rcx, [rbp]
call fcn.00413d80
nop
lea r8, [rbp]
lea rcx, [rbp - 0x20]
call fcn.00404360
nop
mov rdx, rax
lea rcx, [rbp + 0xa8]
call fcn.004051b0
nop
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x40bb86
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40bb81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x40bb81
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
movdqa xmm0, xmmword [0x00496260]
movdqu xmmword [rbp - 0x10], xmm0
mov word [rbp - 0x20], di
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x40bbda
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40bbd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x40bbd5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
mov r12d, edi
mov r13, qword [rbp + 0xc0]
mov r14, qword [rbp + 0xb8]
mov r15, qword [rbp + 0xa8]
jmp 0x40bc02
xor edi, edi
lea rbx, [0x00494a24]
lea rdx, str.process:
lea rcx, [rbp + 0x20]
call fcn.00413d80
nop
lea r8, [rbp + 0x20]
lea rcx, [rsp + 0x60]
call fcn.00404360
mov r8, rax
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x40bc39
mov r8, qword [rax]
cmp rdx, 1
jne 0x40bc5d
mov rcx, rbx
sub r8, rbx
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x40bc5d
add rcx, 2
sub rdx, 1
jne 0x40bc45
xor bl, bl
jmp 0x40bc5f
mov bl, 1
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x40bca1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40bc9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x40c316
call fcn.00480f20
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], di
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x40bcf4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40bcef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x40c31d
call fcn.00480f20
test bl, bl
jne 0x40c47e
lea rdx, str.visible:
lea rcx, [rbp + 0x40]
call fcn.00413d80
nop
or esi, 1
mov dword [rsp + 0x30], esi
lea r8, [rbp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.00404360
mov r8, rax
or esi, 2
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x40bd35
mov r8, qword [rax]
cmp rdx, 4
jne 0x40bd90
lea rax, str.true
mov rcx, rax
sub r8, rax
nop dword [rax + rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x40bd90
add rcx, 2
sub rdx, 1
jne 0x40bd50
lea rcx, [rbp + 0xa8]
cmp r13, 0x10
cmovae rcx, r15
cmp r14, 5
jne 0x40bd90
mov r8, r14
lea rdx, str.false
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x40bd90
mov bl, 1
jmp 0x40bd92
xor bl, bl
test sil, 2
je 0x40bdeb
and esi, 0xfffffffd
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x40bddb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40bdd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x40c324
call fcn.00480f20
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], di
test sil, 1
je 0x40be34
and esi, 0xfffffffe
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x40be34
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40be2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x40c32b
call fcn.00480f20
test bl, bl
je 0x40bf03
mov rbx, qword [0x004a7640]
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
btr rax, 0x13
mov r8, rax
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov r9d, 2
mov r8b, 0xff
mov edx, 0xffffff
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov r9d, 0x485
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov rbx, qword [0x004a7640]
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
btr rax, 0x1b
mov r8, rax
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov rcx, qword [0x004a7640]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov r8d, 4
lea rdx, [0x00494704]
lea rcx, [rbp + 0xa8]
call fcn.00414cc0
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r13, qword [rbp + 0xc0]
mov r14, qword [rbp + 0xb8]
mov r15, qword [rbp + 0xa8]
lea rdx, str.visible:
lea rcx, [rbp + 0x60]
call fcn.00413d80
nop
or esi, 4
mov dword [rsp + 0x30], esi
lea r8, [rbp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.00404360
mov r8, rax
or esi, 8
mov dword [rsp + 0x30], esi
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x40bf40
mov r8, qword [rax]
cmp rdx, 5
jne 0x40bf93
lea rax, [0x00494a28]
mov rcx, rax
sub r8, rax
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x40bf93
add rcx, 2
sub rdx, 1
jne 0x40bf53
lea rcx, [rbp + 0xa8]
cmp r13, 0x10
cmovae rcx, r15
cmp r14, 4
jne 0x40bf93
mov r8, r14
lea rdx, [0x00494704]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x40bf93
mov bl, 1
jmp 0x40bf95
xor bl, bl
test sil, 8
je 0x40bff2
and esi, 0xfffffff7
mov dword [rsp + 0x30], esi
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x40bfe2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40bfdd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x40c332
call fcn.00480f20
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], di
test sil, 4
je 0x40c03f
and esi, 0xfffffffb
mov dword [rsp + 0x30], esi
mov rdx, qword [rbp + 0x78]
cmp rdx, 8
jb 0x40c03f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40c03a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x40c339
call fcn.00480f20
test bl, bl
je 0x40c164
mov ecx, 1
call qword [sym.imp.USER32.dll_BlockInput]
mov rbx, qword [0x004a7640]
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
bts rax, 0x1b
mov r8, rax
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov rdi, qword [0x004a7640]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov rbx, rax
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowLongW]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov r9d, 2
xor r8d, r8d
mov edx, 0xffffff
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov r9d, 0x485
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_RedrawWindow]
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Sleep]
lea r8, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 8
cmovae r8, qword [rbp + 0xc8]
mov dword [rsp + 0x28], 1
xor r15d, r15d
mov qword [rsp + 0x20], r15
lea r9, [0x0049486c]
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea r8d, [r15 + 5]
lea rdx, str.false
lea rcx, [rbp + 0xa8]
call fcn.00414cc0
xor ecx, ecx
call qword [sym.imp.USER32.dll_BlockInput]
mov r13, qword [rbp + 0xc0]
mov r14, qword [rbp + 0xb8]
mov r15, qword [rbp + 0xa8]
lea rcx, [rbp + 0x130]
call fcn.004057c0
mov rbx, rax
mov qword [rsp + 0x58], rax
mov rdi, rax
shr rdi, 0x20
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [0x004a7640]
cmp rax, rcx
jne 0x40bc00
cmp ebx, 0x382
jne 0x40c1a9
cmp edi, 0x38a
je 0x40c286
cmp ebx, 0x332
jne 0x40c1bd
cmp edi, 0x33d
je 0x40c286
mov eax, dword [rsp + 0x5c]
cmp ebx, 0x30a
jne 0x40c1d4
cmp eax, 0x370
je 0x40c286
cmp ebx, 0x2e2
jne 0x40c1ec
cmp eax, 0x2f1
je 0x40c286
jmp 0x40bc00
cmp ebx, 0x292
je 0x40c1dc
cmp ebx, 0x27e
jne 0x40c203
cmp eax, 0x370
jmp 0x40c1e1
cmp ebx, 0x242
jne 0x40c220
cmp eax, 0x35a
je 0x40c286
cmp eax, 0x324
je 0x40c286
cmp eax, 0x258
jmp 0x40c1e1
cmp ebx, 0x202
jne 0x40c22f
cmp eax, 0x2d7
jmp 0x40c1e1
cmp ebx, 0x1f6
jne 0x40c23e
cmp eax, 0x20e
jmp 0x40c1e1
cmp ebx, 0x1c2
jne 0x40c24d
cmp eax, 0x280
jmp 0x40c1e1
cmp ebx, 0x162
jne 0x40c25c
cmp eax, 0x206
jmp 0x40c1e1
cmp ebx, 0x152
mov edi, 0
lea rbx, [0x00494a24]
jne 0x40bc09
cmp eax, 0x1f2
lea rbx, [0x00494a24]
jne 0x40bc09
xor r9d, r9d
mov edx, 0x100
lea r8d, [r9 + 0x45]
call qword [sym.imp.USER32.dll_PostMessageW]
xor r9d, r9d
mov edx, 0x101
lea r8d, [r9 + 0x45]
mov rcx, qword [0x004a7640]
call qword [sym.imp.USER32.dll_PostMessageW]
mov ecx, 0x4b0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov edx, 0x100
lea r8d, [r9 + 0x45]
mov rcx, qword [0x004a7640]
call qword [sym.imp.USER32.dll_PostMessageW]
xor r9d, r9d
mov edx, 0x101
lea r8d, [r9 + 0x45]
mov rcx, qword [0x004a7640]
call qword [sym.imp.USER32.dll_PostMessageW]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x004a7640]
jne 0x40c300
inc r12d
cmp r12d, 0x65
je 0x40c340
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40bc00
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0x10
cmovae rcx, qword [rbp + 0xe8]
xor edx, edx
mov r8d, 0x20001
call qword [sym.imp.WINMM.dll_PlaySoundA]
xor edi, edi
lea rsi, [0x00494a24]
nop
lea rdx, str.process:
lea rcx, [rbp + 0x80]
call fcn.00413d80
nop
lea r8, [rbp + 0x80]
lea rcx, [rbp - 0x40]
call fcn.00404360
mov r8, rax
mov rax, qword [rax + 0x10]
cmp qword [r8 + 0x18], 8
jb 0x40c3a5
mov r8, qword [r8]
cmp rax, 1
jne 0x40c3cc
mov rdx, rax
mov rcx, rsi
sub r8, rsi
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x40c3cc
add rcx, 2
sub rdx, 1
jne 0x40c3b4
mov bl, 1
jmp 0x40c3ce
xor bl, bl
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x40c40a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40c405
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x40c470
call fcn.00480f20
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], di
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x40c45c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40c457
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x40c477
call fcn.00480f20
test bl, bl
je 0x40c47e
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40c370
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rbx, qword [0x004a7640]
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
btr rax, 0x13
mov r8, rax
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov r9d, 2
mov r8b, 0xff
mov edx, 0xffffff
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov r9d, 0x485
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov rbx, qword [0x004a7640]
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
btr rax, 0x1b
mov r8, rax
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
nop
cmp r13, 0x10
jb 0x40c53b
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x40c532
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x40c532
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.00480f20
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 8
jb 0x40c584
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40c57f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x40c57f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
mov qword [rbp + 0xd8], rdi
mov qword [rbp + 0xe0], 7
mov word [rbp + 0xc8], di
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x40c5e1
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40c5dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x40c5dc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
movdqa xmm0, xmmword [0x00496270]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], 0
mov rax, qword [rbp + 0x168]
test rax, rax
je 0x40c622
mov rcx, 0xffffffffffffffff
lock xadd dword [rax + 0x14], ecx
cmp ecx, 1
jne 0x40c622
lea rcx, [rbp + 0x130]
call qword [sym.imp.opencv_world420.dll_public:_void___cdecl_cv::Mat::deallocate_void____ptr64]
mov qword [rbp + 0x168], rdi
mov qword [rbp + 0x140], rdi
mov qword [rbp + 0x158], rdi
mov qword [rbp + 0x150], rdi
mov qword [rbp + 0x148], rdi
mov ecx, edi
cmp dword [rbp + 0x134], 0
jle 0x40c678
mov rdx, rdi
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbp + 0x170]
mov dword [rdx + rax], edi
inc ecx
lea rdx, [rdx + 4]
cmp ecx, dword [rbp + 0x134]
jl 0x40c660
lea rax, [rbp + 0x180]
mov rcx, qword [rbp + 0x178]
cmp rcx, rax
je 0x40c692
call qword [sym.imp.opencv_world420.dll_void___cdecl_cv::fastFree_void____ptr64_]
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0x10
jb 0x40c6d6
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x40c6d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x40c6d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.00480f20
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.00480f00
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.00401ef0
nop
call fcn.00401f90
int3
call fcn.00401ef0
nop
call fcn.00401f90
int3