Function at 0x1400106d0
Capabilities:
Get file size
Log keystrokes via polling
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x290
mov rax, qword [0x140052040]
xor rax, rsp
mov qword [rsp + 0x280], rax
xor r13d, r13d
mov dword [rsp + 0x40], r13d
lea ecx, [r13 + 0x50]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x14001072b
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], r13
mov qword [rsp + 0x238], r13
mov r8d, 0x13
lea rdx, str.C:WindowsSystem32
lea rcx, [rsp + 0x220]
call fcn.140001e80
nop
mov rsi, qword [rsp + 0x230]
movabs r12, 0x7fffffffffffffff
mov rax, r12
sub rax, rsi
cmp rax, 0x14
jb 0x140012468
lea r15, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova r15, qword [rsp + 0x220]
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x1f0], r13
mov qword [rsp + 0x1f8], r13
lea r14, [rsi + 0x14]
mov ebx, 0xf
lea rdi, [rsp + 0x1e0]
cmp r14, rbx
jbe 0x14001084c
mov rbx, r14
or rbx, 0xf
cmp rbx, r12
jbe 0x14001080a
mov rbx, r12
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003e960
test rax, rax
je 0x140012279
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140010844
mov edi, 0x16
cmp rbx, rdi
cmovb rbx, rdi
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140010832
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001246e
jmp 0x1400107eb
test rcx, rcx
je 0x140010841
call fcn.14003e960
mov rdi, rax
jmp 0x140010844
mov rdi, r13
mov qword [rsp + 0x1e0], rdi
mov qword [rsp + 0x1f0], r14
mov qword [rsp + 0x1f8], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.opencv_world470.dll]
movups xmmword [rdi + rsi], xmm0
mov eax, dword [0x140047808]
mov dword [rdi + rsi + 0x10], eax
mov byte [rdi + r14], 0
mov rdi, qword [rsp + 0x1f0]
lea rbx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0xf
cmova rbx, qword [rsp + 0x1e0]
call fcn.14003e030
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x1d8], rdi
lea r8, [rsp + 0x1d0]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.1400041e0
nop
mov dword [rsp + 0x40], 0xe000001
lea rcx, [rsp + 0x70]
call fcn.140005b80
test al, al
je 0x1400108ff
lea rcx, [rsp + 0x1e0]
call fcn.1400173d0
cmp rax, 0x100
jle 0x1400108ff
xor bl, bl
jmp 0x140010901
mov bl, 1
mov esi, 0xe000000
mov rdx, qword [rsp + 0x88]
cmp rdx, 7
jbe 0x14001094e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010949
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010949
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e9a4
test bl, bl
je 0x1400116b0
mov r14, qword [0x1400b2c28]
mov rax, qword [0x1400b2c30]
mov qword [rsp + 0x1d0], rax
cmp r14, rax
je 0x140011085
nop word [rax + rax]
mov r9, qword [r14 + 0x10]
mov rdx, r14
mov r10, qword [r14 + 0x18]
cmp r10, 0xf
jbe 0x140010994
mov rdx, qword [r14]
test r9, r9
je 0x140010a2a
lea rax, [r9 - 1]
mov rcx, 0xffffffffffffffff
cmp rax, rcx
cmovb rcx, rax
add rcx, rdx
cmp byte [rcx], 0x2f
je 0x1400109c4
cmp rcx, rdx
je 0x140010a2a
dec rcx
cmp byte [rcx], 0x2f
jne 0x1400109b7
sub rcx, rdx
cmp rcx, 0xffffffffffffffff
je 0x140010a2a
inc rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
mov qword [rsp + 0x250], r13
mov qword [rsp + 0x258], r13
cmp r9, rcx
jb 0x14001247a
sub r9, rcx
mov r8, 0xffffffffffffffff
cmp r9, r8
cmovb r8, r9
mov rax, r14
cmp r10, 0xf
jbe 0x140010a11
mov rax, qword [r14]
lea rdx, [rax + rcx]
lea rcx, [rsp + 0x240]
call fcn.140001e80
or esi, 0x60000
jmp 0x140010a60
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
mov qword [rsp + 0x250], r13
mov qword [rsp + 0x258], r13
xor r8d, r8d
lea rdx, [0x140042bb1]
lea rcx, [rsp + 0x240]
call fcn.140001e80
bts esi, 0x11
lea rdx, [rsp + 0x240]
cmp qword [rsp + 0x258], 0xf
cmova rdx, qword [rsp + 0x240]
lea rcx, str._info__downloading__s_n
call fcn.140002110
mov r12, qword [rsp + 0x230]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r12
cmp rax, 1
jb 0x140012492
lea rax, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rax, qword [rsp + 0x220]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x160], r13
mov qword [rsp + 0x168], r13
lea r15, [r12 + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x150]
cmp r15, rbx
jbe 0x140010b86
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x140010b1c
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140010b43
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140010b67
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140012480
mov rcx, rax
call fcn.14003e960
test rax, rax
je 0x140011149
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rax, qword [rsp + 0x40]
jmp 0x140010b7e
test rcx, rcx
je 0x140010b7b
call fcn.14003e960
mov rdi, rax
mov rax, qword [rsp + 0x40]
jmp 0x140010b7e
mov rdi, r13
mov qword [rsp + 0x150], rdi
mov qword [rsp + 0x160], r15
mov qword [rsp + 0x168], rbx
mov r8, r12
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r12], 0x5c
mov byte [rdi + r15], 0
bts esi, 0x13
lea rdx, [rsp + 0x240]
cmp qword [rsp + 0x258], 0xf
cmova rdx, qword [rsp + 0x240]
mov r8, qword [rsp + 0x250]
lea rcx, [rsp + 0x150]
call fcn.140014020
xorps xmm0, xmm0
movups xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x128], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x110], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x120], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts esi, 0x14
lea rdx, [rsp + 0x110]
mov rcx, r14
call fcn.140016bf0
movzx ebx, al
mov rdx, qword [rsp + 0x128]
cmp rdx, 0xf
jbe 0x140010c7c
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010c77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011142
call fcn.14003e9a4
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x128], 0xf
mov byte [rsp + 0x110], 0
mov rdx, qword [rsp + 0x168]
cmp rdx, 0xf
jbe 0x140010cdb
inc rdx
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010cd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011149
call fcn.14003e9a4
test bl, bl
je 0x140011165
mov r15, qword [rsp + 0x230]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 1
jb 0x14001248c
lea rax, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rax, qword [rsp + 0x220]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], r13
mov qword [rsp + 0x188], r13
lea r12, [r15 + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x170]
cmp r12, rbx
jbe 0x140010de2
mov rbx, r12
or rbx, 0xf
cmp rbx, rcx
jbe 0x140010d78
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140010d9f
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140010dc3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140012486
mov rcx, rax
call fcn.14003e960
test rax, rax
je 0x14001115e
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rax, qword [rsp + 0x40]
jmp 0x140010dda
test rcx, rcx
je 0x140010dd7
call fcn.14003e960
mov rdi, rax
mov rax, qword [rsp + 0x40]
jmp 0x140010dda
mov rdi, r13
mov qword [rsp + 0x170], rdi
mov qword [rsp + 0x180], r12
mov qword [rsp + 0x188], rbx
mov r8, r15
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r15], 0x5c
mov byte [rdi + r12], 0
bts esi, 0x17
lea rdx, [rsp + 0x240]
cmp qword [rsp + 0x258], 0xf
cmova rdx, qword [rsp + 0x240]
mov r8, qword [rsp + 0x250]
lea rcx, [rsp + 0x170]
call fcn.140014020
xorps xmm0, xmm0
movups xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xe8], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xe0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts esi, 0x18
mov rdi, qword [rsp + 0xe0]
lea rbx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 0xf
cmova rbx, qword [rsp + 0xd0]
call fcn.14003e030
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xc8], rdi
lea r8, [rsp + 0xc0]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.1400041e0
or esi, 0x600000
lea rcx, [rsp + 0x70]
call fcn.140005b80
movzx ebx, al
mov rdx, qword [rsp + 0x88]
cmp rdx, 7
jbe 0x140010f25
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010f20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011150
call fcn.14003e9a4
mov qword [rsp + 0x80], r13
mov qword [rsp + 0x88], 7
mov word [rsp + 0x70], r13w
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0xf
jbe 0x140010f82
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010f7d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011157
call fcn.14003e9a4
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xe8], 0xf
mov byte [rsp + 0xd0], 0
mov rdx, qword [rsp + 0x188]
cmp rdx, 0xf
jbe 0x140010fe1
inc rdx
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010fdc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001115e
call fcn.14003e9a4
test bl, bl
jne 0x140011026
lea r8, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova r8, qword [rsp + 0x220]
lea rdx, [rsp + 0x240]
cmp qword [rsp + 0x258], 0xf
cmova rdx, qword [rsp + 0x240]
lea rcx, str._error__failed_to_download__s_to__s_n
call fcn.140002110
nop
mov rdx, qword [rsp + 0x258]
cmp rdx, 0xf
jbe 0x140011069
inc rdx
mov rcx, qword [rsp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011064
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400111bc
call fcn.14003e9a4
add r14, 0x20
cmp r14, qword [rsp + 0x1d0]
jne 0x140010980
movabs r12, 0x7fffffffffffffff
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x1e0]
call fcn.140016e30
mov r14, qword [0x1400b2c28]
mov rbx, qword [0x1400b2c30]
mov qword [rsp + 0xb0], rbx
mov qword [rsp + 0x1d0], r14
cmp r14, rbx
je 0x1400116b0
mov rax, qword [r14 + 0x10]
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x1400110d2
mov rdx, qword [r14]
test rax, rax
je 0x1400112ca
dec rax
mov rcx, 0xffffffffffffffff
cmp rax, rcx
cmovb rcx, rax
add rcx, rdx
cmp byte [rcx], 0x2f
je 0x140011105
cmp rcx, rdx
je 0x1400112ca
dec rcx
cmp byte [rcx], 0x2f
jne 0x1400110f4
sub rcx, rdx
cmp rcx, 0xffffffffffffffff
je 0x1400112ca
inc rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x260], xmm0
mov qword [rsp + 0x270], r13
mov qword [rsp + 0x278], r13
mov rax, qword [r14 + 0x10]
cmp rax, rcx
jb 0x140012474
jmp 0x140011293
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r9d, 0x10
lea r8, str.diablo___notice
lea rdx, str.failed_to_download_dll__1_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rsp + 0x258]
cmp rdx, 0xf
jbe 0x1400111c8
inc rdx
mov rcx, qword [rsp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400111c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400111c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e9a4
mov qword [rsp + 0x250], r13
mov qword [rsp + 0x258], 0xf
mov byte [rsp + 0x240], 0
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0xf
jbe 0x14001122a
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011225
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011225
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e9a4
mov qword [rsp + 0x1f0], r13
mov qword [rsp + 0x1f8], 0xf
mov byte [rsp + 0x1e0], 0
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x140011d6b
inc rdx
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011d66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011d66
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
sub rax, rcx
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
mov rax, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x1400112b1
mov rax, qword [r14]
lea rdx, [rax + rcx]
lea rcx, [rsp + 0x260]
call fcn.140001e80
or esi, 0xc0
jmp 0x1400112ff
xorps xmm0, xmm0
movups xmmword [rsp + 0x260], xmm0
mov qword [rsp + 0x270], r13
mov qword [rsp + 0x278], r13
xor r8d, r8d
lea rdx, [0x140042bb1]
lea rcx, [rsp + 0x260]
call fcn.140001e80
or esi, 0x40
mov dword [rsp + 0x40], esi
mov r15, qword [rsp + 0x230]
mov rax, r12
sub rax, r15
cmp rax, 1
jb 0x140012498
lea rax, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rax, qword [rsp + 0x220]
mov qword [rsp + 0xc0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x190], xmm0
mov qword [rsp + 0x1a0], r13
mov qword [rsp + 0x1a8], r13
lea r12, [r15 + 1]
mov edi, 0xf
lea rbx, [rsp + 0x190]
cmp r12, rdi
jbe 0x14001140b
mov rdi, r12
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x1400113c0
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003e960
test rax, rax
je 0x140011634
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
mov rax, qword [rsp + 0xc0]
jmp 0x140011403
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1400113e9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001249d
jmp 0x140011399
test rcx, rcx
je 0x140011400
call fcn.14003e960
mov rbx, rax
mov rax, qword [rsp + 0xc0]
jmp 0x140011403
mov rbx, r13
mov qword [rsp + 0x190], rbx
mov qword [rsp + 0x1a0], r12
mov qword [rsp + 0x1a8], rdi
mov r8, r15
mov rdx, rax
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r15], 0x5c
mov byte [rbx + r12], 0
bts esi, 0xa
mov dword [rsp + 0x40], esi
lea rdx, [rsp + 0x260]
cmp qword [rsp + 0x278], 0xf
cmova rdx, qword [rsp + 0x260]
mov r8, qword [rsp + 0x270]
lea rcx, [rsp + 0x190]
call fcn.140014020
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], r13
mov qword [rsp + 0x108], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xf0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x100], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts esi, 0xb
mov dword [rsp + 0x40], esi
mov rdi, qword [rsp + 0x100]
lea rbx, [rsp + 0xf0]
cmp qword [rsp + 0x108], 0xf
cmova rbx, qword [rsp + 0xf0]
call fcn.14003e030
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rsp + 0x130]
call fcn.1400041e0
or esi, 0x300
mov dword [rsp + 0x40], esi
lea rcx, [rsp + 0x130]
cmp qword [rsp + 0x148], 7
cmova rcx, qword [rsp + 0x130]
call fcn.14003e6c4
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x1400124a3
mov rdx, qword [rsp + 0x148]
cmp rdx, 7
jbe 0x14001157b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011576
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011576
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e9a4
mov qword [rsp + 0x140], r13
mov qword [rsp + 0x148], 7
mov word [rsp + 0x130], r13w
mov rdx, qword [rsp + 0x108]
cmp rdx, 0xf
jbe 0x1400115de
inc rdx
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400115d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400115d9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e9a4
mov qword [rsp + 0x100], r13
mov qword [rsp + 0x108], 0xf
mov byte [rsp + 0xf0], 0
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0xf
jbe 0x140011641
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001163b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001163b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e9a4
nop
jmp 0x140011652
mov rbx, qword [rsp + 0xb0]
movabs r12, 0x7fffffffffffffff
mov rdx, qword [rsp + 0x278]
cmp rdx, 0xf
jbe 0x1400116a7
inc rdx
mov rcx, qword [rsp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400116a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012217
call fcn.14003e9a4
add r14, 0x20
jmp 0x1400110b0
mov rdi, qword [rsp + 0x1f0]
lea rbx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0xf
cmova rbx, qword [rsp + 0x1e0]
call fcn.14003e030
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.1400041e0
or esi, 0x30
or esi, 2
mov dword [rsp + 0x40], esi
lea rcx, [rsp + 0x70]
call fcn.140005b80
test al, al
je 0x140011772
lea rcx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0xf
cmova rcx, qword [rsp + 0x1e0]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140011772
lea rdx, [rsp + 0x1d0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov rcx, rbx
test eax, eax
jne 0x1400117c0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, 1
test sil, 2
je 0x1400117dd
and esi, 0xfffffffd
mov rdx, qword [rsp + 0x88]
cmp rdx, 7
jbe 0x1400117dd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400117d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400117d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x1d0], 0x100
jle 0x140011772
xor bl, bl
jmp 0x140011774
call fcn.14003e9a4
test bl, bl
je 0x140011802
mov r9d, 0x10
lea r8, str.diablo___notice
lea rdx, str.passed_download_but_unsuccessful_install__1_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x140011cc9
mov r14, qword [rsp + 0x230]
mov rax, r12
sub rax, r14
cmp rax, 0xd
jb 0x1400124bc
lea rax, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rax, qword [rsp + 0x220]
mov qword [rsp + 0x1d0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
mov qword [rsp + 0x210], r13
mov qword [rsp + 0x218], r13
lea r15, [r14 + 0xd]
mov ebx, 0xf
lea rdi, [rsp + 0x200]
cmp r15, rbx
jbe 0x140011900
mov rbx, r15
or rbx, 0xf
cmp rbx, r12
jbe 0x1400118b5
mov rbx, r12
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003e960
test rax, rax
je 0x140012217
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rax, qword [rsp + 0x1d0]
jmp 0x1400118f8
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400118de
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400124c2
jmp 0x14001188e
test rcx, rcx
je 0x1400118f5
call fcn.14003e960
mov rdi, rax
mov rax, qword [rsp + 0x1d0]
jmp 0x1400118f8
mov rdi, r13
mov qword [rsp + 0x200], rdi
mov qword [rsp + 0x210], r15
mov qword [rsp + 0x218], rbx
mov r8, r14
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.ds5w_x64.dll]
movsd qword [rdi + r14], xmm0
mov eax, dword [0x1400478b8]
mov dword [rdi + r14 + 8], eax
movzx eax, byte [0x1400478bc]
mov byte [rdi + r14 + 0xc], al
mov byte [rdi + r15], 0
bts esi, 0xc
mov rdi, qword [rsp + 0x210]
lea rbx, [rsp + 0x200]
cmp qword [rsp + 0x218], 0xf
cmova rbx, qword [rsp + 0x200]
call fcn.14003e030
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.1400041e0
or esi, 0x6000
or esi, 4
mov dword [rsp + 0x40], esi
lea rcx, [rsp + 0x70]
call fcn.140005b80
test al, al
je 0x140011a11
lea rcx, [rsp + 0x200]
cmp qword [rsp + 0x218], 0xf
cmova rcx, qword [rsp + 0x200]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140011a11
lea rdx, [rsp + 0x1d0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov rcx, rbx
test eax, eax
jne 0x140011a5f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, 1
test sil, 4
je 0x140011a7c
and esi, 0xfffffffb
mov rdx, qword [rsp + 0x88]
cmp rdx, 7
jbe 0x140011a7c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011a77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011a77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x1d0], 0x100
jle 0x140011a11
xor bl, bl
jmp 0x140011a13
call fcn.14003e9a4
test bl, bl
je 0x140011b18
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x80], xmm1
mov r8d, 0x3c
lea rdx, str.https:__github.com_nullifydiablo_depot_raw_main_ds5w_x64.dll
lea rcx, [rsp + 0x70]
call fcn.140001e80
nop
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x70]
call fcn.140016bf0
movzx ebx, al
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x140011b08
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011b03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011b03
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e9a4
test bl, bl
jne 0x140011b18
lea rdx, str.failed_to_download_dll__2_
jmp 0x140011c54
mov rdi, qword [rsp + 0x210]
lea rbx, [rsp + 0x200]
cmp qword [rsp + 0x218], 0xf
cmova rbx, qword [rsp + 0x200]
call fcn.14003e030
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.1400041e0
or esi, 0x18000
or esi, 8
mov dword [rsp + 0x40], esi
lea rcx, [rsp + 0x70]
call fcn.140005b80
test al, al
je 0x140011bdd
lea rcx, [rsp + 0x200]
cmp qword [rsp + 0x218], 0xf
cmova rcx, qword [rsp + 0x200]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140011bdd
lea rdx, [rsp + 0x1d0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov rcx, rbx
test eax, eax
jne 0x140011c28
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, 1
test sil, 8
je 0x140011c45
mov rdx, qword [rsp + 0x88]
cmp rdx, 7
jbe 0x140011c45
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011c40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011c40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [rsp + 0x1d0], 0x100
jle 0x140011bdd
xor bl, bl
jmp 0x140011bdf
call fcn.14003e9a4
test bl, bl
je 0x140011d9f
lea rdx, str.passed_download_but_unsuccessful_install__2_
mov r9d, 0x10
lea r8, str.diablo___notice
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x140011cad
inc rdx
mov rcx, qword [rsp + 0x200]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140011ca8
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012217
call fcn.14003e9a4
mov byte [rsp + 0x200], 0
mov qword [rsp + 0x218], 0xf
mov qword [rsp + 0x210], r13
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0xf
jbe 0x140011d0c
mov rcx, qword [rsp + 0x1e0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011d07
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012279
call fcn.14003e9a4
mov qword [rsp + 0x1f0], r13
mov qword [rsp + 0x1f8], 0xf
mov byte [rsp + 0x1e0], 0
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x140011d6b
mov rcx, qword [rsp + 0x220]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011d66
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400122e7
call fcn.14003e9a4
xor eax, eax
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.14003e940
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov byte [rsp + 0x40], 0x4d
mov al, 0x1f
mov cl, 0x38
mov dl, 0x3e
mov r8b, 0x39
xor r9d, r9d
xor al, 0x4d
mov byte [rsp + 0x41], al
xor cl, 0x4d
mov byte [rsp + 0x42], cl
xor dl, 0x4d
mov byte [rsp + 0x43], dl
xor r8b, 0x4d
mov byte [rsp + 0x44], r8b
mov byte [rsp + 0x45], r9b
mov byte [rsp + 0x1d0], 0x62
mov al, 0x37
mov cl, 0xc
mov dl, 0xb
mov r8b, 0x16
mov r9b, 0x1b
mov r10b, 0x35
movzx r11d, cl
mov bl, 6
mov dil, 0x21
mov sil, 0xe
mov r14b, 3
mov r15b, 0x11
xor al, 0x62
mov byte [rsp + 0x1d1], al
xor cl, 0x62
mov byte [rsp + 0x1d2], cl
xor dl, 0x62
mov byte [rsp + 0x1d3], dl
xor r8b, 0x62
mov byte [rsp + 0x1d4], r8b
xor r9b, 0x62
mov byte [rsp + 0x1d5], r9b
xor r10b, 0x62
mov byte [rsp + 0x1d6], r10b
xor r11b, 0x62
mov byte [rsp + 0x1d7], r11b
xor bl, 0x62
mov byte [rsp + 0x1d8], bl
xor dil, 0x62
mov byte [rsp + 0x1d9], dil
xor sil, 0x62
mov byte [rsp + 0x1da], sil
xor r14b, 0x62
mov byte [rsp + 0x1db], r14b
xor r15b, 0x62
mov byte [rsp + 0x1dc], r15b
mov r12b, 0x11
xor r12b, 0x62
mov byte [rsp + 0x1dd], r12b
mov byte [rsp + 0x1de], 0
lea rdx, [rsp + 0x41]
lea rcx, [rsp + 0x1d1]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400122ee
mov byte [rsp + 0x1d0], 0x5d
mov al, 0x1c
mov cl, 0x2d
mov dl, 0x38
mov r8b, 0x25
mov r9b, 0x7d
mov r10b, 0x11
movzx r11d, dl
mov bl, 0x3a
movzx edi, dl
mov sil, 0x33
mov r14b, 0x39
mov r15b, 0x2e
xor r12d, r12d
xor al, 0x5d
mov byte [rsp + 0x1d1], al
xor cl, 0x5d
mov byte [rsp + 0x1d2], cl
xor dl, 0x5d
mov byte [rsp + 0x1d3], dl
xor r8b, 0x5d
mov byte [rsp + 0x1d4], r8b
xor r9b, 0x5d
mov byte [rsp + 0x1d5], r9b
xor r10b, 0x5d
mov byte [rsp + 0x1d6], r10b
xor r11b, 0x5d
mov byte [rsp + 0x1d7], r11b
xor bl, 0x5d
mov byte [rsp + 0x1d8], bl
xor dil, 0x5d
mov byte [rsp + 0x1d9], dil
xor sil, 0x5d
mov byte [rsp + 0x1da], sil
xor r14b, 0x5d
mov byte [rsp + 0x1db], r14b
xor r15b, 0x5d
mov byte [rsp + 0x1dc], r15b
mov byte [rsp + 0x1dd], r12b
lea rdx, [rsp + 0x1d1]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400122ee
mov byte [rsp + 0x1d0], 0x4a
mov al, 0x18
mov cl, 0x2b
mov dl, 0x23
mov r8b, 0x24
mov r9b, 0x28
mov r10b, 0x25
mov r11b, 0x3d
mov bl, 0x6a
mov dil, 0x19
movzx esi, dl
mov r14b, 0x32
xor al, 0x4a
mov byte [rsp + 0x1d1], al
xor cl, 0x4a
mov byte [rsp + 0x1d2], cl
xor dl, 0x4a
mov byte [rsp + 0x1d3], dl
xor r8b, 0x4a
mov byte [rsp + 0x1d4], r8b
xor r9b, 0x4a
mov byte [rsp + 0x1d5], r9b
xor r10b, 0x4a
mov byte [rsp + 0x1d6], r10b
xor r11b, 0x4a
mov byte [rsp + 0x1d7], r11b
xor bl, 0x4a
mov byte [rsp + 0x1d8], bl
xor dil, 0x4a
mov byte [rsp + 0x1d9], dil
xor sil, 0x4a
mov byte [rsp + 0x1da], sil
xor r14b, 0x4a
mov byte [rsp + 0x1db], r14b
mov byte [rsp + 0x1dc], r12b
mov byte [rsp + 0x40], 0x7c
mov al, 0x2e
mov cl, 0x4a
mov dl, 0x3b
mov r8b, 0x1d
mov r9b, 0x11
mov r10b, 0x19
xor r11d, r11d
xor al, 0x7c
mov byte [rsp + 0x41], al
xor cl, 0x7c
mov byte [rsp + 0x42], cl
xor dl, 0x7c
mov byte [rsp + 0x43], dl
xor r8b, 0x7c
mov byte [rsp + 0x44], r8b
xor r9b, 0x7c
mov byte [rsp + 0x45], r9b
xor r10b, 0x7c
mov byte [rsp + 0x46], r10b
mov byte [rsp + 0x47], r11b
lea rdx, [rsp + 0x1d1]
lea rcx, [rsp + 0x41]
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400122ee
mov byte [rsp + 0x1d0], 0x12
mov al, 0x46
mov cl, 0x5a
mov dl, 0x57
mov r8b, 0x32
mov r9b, 0x54
mov r10b, 0x5b
mov r11b, 0x5c
mov bl, 0x53
mov dil, 0x5e
mov sil, 0x41
movzx r14d, r8b
movzx r15d, r8b
xor al, 0x12
mov byte [rsp + 0x1d1], al
xor cl, 0x12
mov byte [rsp + 0x1d2], cl
xor dl, 0x12
mov byte [rsp + 0x1d3], dl
xor r8b, 0x12
mov byte [rsp + 0x1d4], r8b
xor r9b, 0x12
mov byte [rsp + 0x1d5], r9b
xor r10b, 0x12
mov byte [rsp + 0x1d6], r10b
xor r11b, 0x12
mov byte [rsp + 0x1d7], r11b
xor bl, 0x12
mov byte [rsp + 0x1d8], bl
xor dil, 0x12
mov byte [rsp + 0x1d9], dil
xor sil, 0x12
mov byte [rsp + 0x1da], sil
xor r14b, 0x12
mov byte [rsp + 0x1db], r14b
xor r15b, 0x12
mov byte [rsp + 0x1dc], r15b
mov byte [rsp + 0x1dd], r12b
lea rdx, [rsp + 0x1d1]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400122ee
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rsp + 0x70], rax
lea rax, [0x14000ff60]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0xa8], rax
lea rax, vtable.std::_Func_impl_no_alloc_bool____cdecl___struct_HWND______ptr64__unsigned_int__unsigned_long_long_unsigned___int64___long_long___int64____bool__struct_HWND______ptr64__unsigned_int__unsigned_long_long_unsigned___int64___long_long___int64__.0
mov qword [rsp + 0x190], rax
lea rax, [0x14000ff50]
mov qword [rsp + 0x198], rax
lea rax, [rsp + 0x190]
mov qword [rsp + 0x1c8], rax
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x190]
call fcn.140002ed0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x140012223
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001221e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001221e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e9a4
mov qword [rsp + 0x210], r13
mov qword [rsp + 0x218], 0xf
mov byte [rsp + 0x200], 0
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0xf
jbe 0x140012285
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012280
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140012280
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003e9a4
mov qword [rsp + 0x1f0], r13
mov qword [rsp + 0x1f8], 0xf
mov byte [rsp + 0x1e0], 0
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x140011d6b
inc rdx
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011d66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011d66
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movdqa xmm1, xmmword [0x1400482c0]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
mov byte [rsp + 0x60], 0
movdqa xmm1, xmmword [0x140048150]
movdqu xmmword [rsp + 0x70], xmm1
movdqa xmm2, xmmword [0x140048160]
movdqu xmmword [rsp + 0x80], xmm2
mov dl, 0xd
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x71], al
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x80], al
xor byte [rsp + 0x81], cl
xor byte [rsp + 0x82], cl
xor byte [rsp + 0x83], cl
xor byte [rsp + 0x84], cl
xor byte [rsp + 0x85], cl
xor byte [rsp + 0x86], cl
xor byte [rsp + 0x87], cl
xor byte [rsp + 0x88], cl
xor byte [rsp + 0x89], cl
xor byte [rsp + 0x8a], cl
xor byte [rsp + 0x8b], cl
xor byte [rsp + 0x8c], cl
xor byte [rsp + 0x8d], cl
xor byte [rsp + 0x8e], cl
xor byte [rsp + 0x8f], cl
xor dl, cl
mov byte [rsp + 0x90], dl
mov byte [rsp + 0x91], 0
mov r9d, 0x10
lea r8, [rsp + 0x51]
lea rdx, [rsp + 0x71]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.140001580
int3
call fcn.1400014e0
nop
call fcn.140001b80
int3
call fcn.140001b80
nop
call fcn.1400014e0
int3
call fcn.1400014e0
int3
call fcn.140001580
int3
call fcn.140001580
nop
call fcn.140001580
call fcn.1400014e0
nop
shr rdx, 0x20
lea r8, [rsp + 0x130]
lea rcx, str.remove
call fcn.140005240
nop
call fcn.140001580
int3
call fcn.1400014e0
int3