Function at 0x140110c90
Capabilities:
Accept command line arguments
Copy file
Set file attributes
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push r13
lea rbp, [rsp - 0x3f8]
sub rsp, 0x4f8
mov rax, qword [0x14043c0c0]
xor rax, rsp
mov qword [rbp + 0x3b0], rax
mov r13, rcx
mov qword [rbp - 0x18], rcx
xor esi, esi
mov qword [rbp - 0x30], 3
lea rax, [0x140150240]
mov qword [rbp - 0x20], rsi
lea rbx, str.Neverlose
mov qword [rbp + 8], rsi
xor ecx, ecx
mov qword [rbp - 0x28], rax
mov edx, 0x7f00
mov qword [rbp + 0x10], rbx
call qword [sym.imp.USER32.dll_LoadCursorW]
lea edx, [rsi + 0x6e]
mov dword [rsp + 0x28], esi
lea r9d, [rsi + 0x20]
mov qword [rbp - 8], rax
lea r8d, [rsi + 1]
mov qword [rbp], send
mov rcx, r13
mov dword [rsp + 0x20], 0x20
call qword [sym.imp.USER32.dll_LoadImageW]
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x10], rax
call qword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
jne 0x140110d39
lea eax, [rsi + 1]
jmp 0x140111a93
mov qword [rsp + 0x528], rdi
mov rdx, rbx
mov qword [rsp + 0x530], r12
mov rcx, rbx
mov qword [rsp + 0x538], r14
mov qword [rsp + 0x4f0], r15
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
mov r12d, 2
test rax, rax
je 0x140110df0
lea rax, [rbp + 0x80]
xor r9d, r9d
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov dword [rsp + 0x28], 0x3e8
mov edx, 0x40a
mov rcx, rbx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.USER32.dll_SendMessageTimeoutW]
cmp qword [rbp + 0x80], 0x40a
jne 0x140110df0
lea rdx, [rsp + 0x6c]
mov dword [rsp + 0x6c], esi
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rsp + 0x6c]
test r8d, r8d
je 0x140110df0
xor edx, edx
lea ecx, [rdx + 1]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140110df0
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movaps xmmword [rsp + 0x4e0], xmm6
movaps xmmword [rsp + 0x4d0], xmm7
movaps xmmword [rsp + 0x4c0], xmm8
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x150]
call qword [sym.imp.USER32.dll_GetWindowRect]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rsp + 0x68]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov rbx, qword [0x1406a2c68]
mov edi, 1
mov r15, rax
lea r14, [rdi - 2]
cmp dword [rsp + 0x68], edi
jle 0x140110f38
lea rsi, [rax + 8]
nop dword [rax]
nop dword [rax + rax]
mov rdx, qword [rsi]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp + 0xc0], rax
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc8], rax
mov r8, r14
inc r8
cmp word [rdx + r8*2], ax
jne 0x140110e80
lea rcx, [rbp + 0xb0]
call fcn.140112ec0
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
je 0x140110eca
movups xmm0, xmmword [rbp + 0xb0]
xor eax, eax
movups xmm1, xmmword [rbp + 0xc0]
mov word [rbp + 0xb0], ax
movups xmmword [rdx], xmm0
movups xmmword [rdx + 0x10], xmm1
add qword [rbx + 8], 0x20
mov edx, 7
jmp 0x140110ee0
lea r8, [rbp + 0xb0]
mov rcx, rbx
call fcn.140113a40
mov rdx, qword [rbp + 0xc8]
cmp rdx, 7
jbe 0x140110f1f
mov rcx, qword [rbp + 0xb0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140110f1a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401120e4
call fcn.14015511c
inc edi
add rsi, 8
cmp edi, dword [rsp + 0x68]
jl 0x140110e60
mov rbx, qword [0x1406a2c68]
xor esi, esi
movabs rax, 0x440c5ba59ef637ee
mov r8, r14
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x110], rax
movabs rax, 0x9eecad5f17774598
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x118], rax
movabs rax, 0x446d5bca9e9a37c3
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp - 0x80], rax
movabs rax, 0x9eecad5f177745fc
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
movdqa xmm0, xmmword [rbp + 0x110]
mov qword [rbp - 0x78], rax
lea rax, [rbp + 0x110]
xorps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp + 0x110], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], rsi
mov qword [rbp + 0x148], rsi
inc r8
cmp word [rax + r8*2], 0
jne 0x140110fd4
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x130]
call fcn.140112ec0
lea rdx, [rbp + 0x130]
mov rcx, rbx
call fcn.140110690
mov rdx, rax
lea rcx, [rbp + 0xf0]
call fcn.140112490
mov rdx, qword [rbp + 0x148]
cmp rdx, 7
jbe 0x140111056
mov rcx, qword [rbp + 0x130]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140111051
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401120e4
call fcn.14015511c
mov r8, qword [rbp + 0x100]
mov qword [rbp + 0x140], rsi
mov qword [rbp + 0x148], 7
mov word [rbp + 0x130], si
test r8, r8
je 0x1401115d5
mov rcx, qword [rbp + 0x108]
xorps xmm0, xmm0
mov rax, qword [rbp + 0xf0]
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x30], rsi
lea rsi, [rbp + 0xf0]
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x40], 0
movups xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x20], 0
cmp rcx, 7
jbe 0x1401110d1
mov rsi, rax
lea rbx, [rax + r8*2]
mov rdi, rax
jmp 0x1401110e3
lea rdx, [rbp + 0xf0]
lea rbx, [rdx + r8*2]
lea rdi, [rbp + 0xf0]
cmp rdi, rbx
je 0x140111119
sub rsi, rdi
nop dword [rax + rax]
movzx ecx, word [rdi]
call fcn.140192aa0
mov word [rsi + rdi], ax
add rdi, r12
cmp rdi, rbx
jne 0x1401110f0
mov rcx, qword [rbp + 0x108]
mov r8, qword [rbp + 0x100]
mov rax, qword [rbp + 0xf0]
cmp rcx, 7
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x160]
cmova rdx, rax
call fcn.14014f8d0
mov rbx, rax
lea rax, [rbp + 0x40]
cmp rax, rbx
je 0x1401111ad
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14011117b
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140111176
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140112040
call fcn.14015511c
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
xor edi, edi
mov qword [rbp + 0x50], rdi
mov byte [rbp + 0x40], dil
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], dil
jmp 0x1401111af
xor edi, edi
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x1401111f0
mov rcx, qword [rbp + 0x160]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401111eb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140112040
call fcn.14015511c
mov rbx, qword [0x1406a2c68]
movabs rax, 0x44045bbf9ef837ee
mov qword [rbp + 0x170], rdi
mov r8, r14
mov qword [rbp + 0x178], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x160], 0
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x120], rax
movabs rax, 0x9eecad5f17134590
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x128], rax
movabs rax, 0x446d5bca9e9a37c3
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp - 0x70], rax
movabs rax, 0x9eecad5f177745fc
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp - 0x68], rax
lea rax, [rbp + 0x120]
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x120], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], rdi
inc r8
cmp word [rax + r8*2], 0
jne 0x1401112a3
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x60]
call fcn.140112ec0
lea rdx, [rbp + 0x60]
mov rcx, rbx
call fcn.140110690
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.140112490
mov rdx, qword [rbp + 0x78]
cmp rdx, 7
jbe 0x140111319
mov rcx, qword [rbp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140111314
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14011204c
call fcn.14015511c
mov rcx, qword [rbp + 0xa0]
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], 7
mov word [rbp + 0x60], di
test rcx, rcx
je 0x140111499
mov r8, qword [rbp + 0xa8]
lea rsi, [rbp + 0x90]
mov rax, qword [rbp + 0x90]
cmp r8, 7
jbe 0x140111360
mov rsi, rax
lea rbx, [rax + rcx*2]
mov rdi, rax
jmp 0x140111372
lea rdx, [rbp + 0x90]
lea rbx, [rdx + rcx*2]
lea rdi, [rbp + 0x90]
cmp rdi, rbx
je 0x1401113a2
sub rsi, rdi
nop word [rax + rax]
movzx ecx, word [rdi]
call fcn.140192aa0
mov word [rsi + rdi], ax
add rdi, r12
cmp rdi, rbx
jne 0x140111380
mov r8, qword [rbp + 0xa8]
mov rax, qword [rbp + 0x90]
cmp r8, 7
lea rdx, [rbp + 0x90]
mov r8d, dword [rbp + 0xa0]
lea rcx, [rbp + 0x180]
cmova rdx, rax
call fcn.14014f8d0
mov rbx, rax
lea rax, [rbp + 0x20]
cmp rax, rbx
je 0x14011143d
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14011140b
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140111406
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140112046
call fcn.14015511c
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
xor edi, edi
mov qword [rbp + 0x30], rdi
mov byte [rbp + 0x20], dil
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], dil
jmp 0x14011143f
xor edi, edi
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140111480
mov rcx, qword [rbp + 0x180]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011147b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140112046
call fcn.14015511c
mov qword [rbp + 0x190], rdi
mov qword [rbp + 0x198], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x180], 0
cmp qword [rbp + 0x38], 0xf
lea rsi, [rbp + 0x20]
mov rdi, qword [0x1406a2c30]
lea rdx, [rbp + 0x40]
cmova rsi, qword [rbp + 0x20]
cmp qword [rbp + 0x58], 0xf
mov r8, qword [rbp + 0x50]
cmova rdx, qword [rbp + 0x40]
lea rcx, [rdi + 0x50]
mov rbx, qword [rbp + 0x30]
call fcn.140114300
lea rcx, [rdi + 0x70]
mov r8, rbx
mov rdx, rsi
call fcn.140114300
mov rdx, qword [rbp + 0xa8]
cmp rdx, 7
jbe 0x140111522
mov rcx, qword [rbp + 0x90]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011151d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14011204c
call fcn.14015511c
mov rdx, qword [rbp + 0x38]
xor edi, edi
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xa8], 7
mov word [rbp + 0x90], di
cmp rdx, 0xf
jbe 0x140111578
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140111573
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14011204c
call fcn.14015511c
mov rdx, qword [rbp + 0x58]
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x20], dil
cmp rdx, 0xf
jbe 0x1401115c3
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401115be
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14011204c
call fcn.14015511c
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x40], dil
jmp 0x1401115d7
xor edi, edi
mov rbx, qword [0x1406a2c68]
movabs rax, 0x44095bba9eef37ee
mov qword [rsp + 0x60], rax
xor sil, sil
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x80], rax
movabs rax, 0x9eecad3a1703459d
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x88], rax
movabs rax, 0x446d5bca9e9a37c3
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0xb0], rax
movabs rax, 0x9eecad5f177745fc
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
movdqa xmm0, xmmword [rbp + 0x80]
mov qword [rbp + 0xb8], rax
lea rax, [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp + 0x80], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], rdi
nop word [rax + rax]
inc r14
cmp word [rax + r14*2], 0
jne 0x140111680
mov r8, r14
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x60]
call fcn.140112ec0
lea rdx, [rbp + 0x60]
mov rcx, rbx
call fcn.140110690
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.140112490
mov rdx, qword [rbp + 0x78]
cmp rdx, 7
jbe 0x1401116f9
mov rcx, qword [rbp + 0x60]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401116f4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401120e4
call fcn.14015511c
cmp qword [rbp + 0xe0], 0
je 0x14011176c
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, 0x104
lea rdx, [rbp + 0x1a0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp qword [rbp + 0xe8], 7
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x1a0]
cmova rdx, qword [rbp + 0xd0]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
cmp qword [rbp + 0xe8], 7
lea rcx, [rbp + 0xd0]
cmova rcx, qword [rbp + 0xd0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov sil, 1
cmp dword [rsp + 0x68], r12d
jl 0x1401117c0
mov rax, qword [r15 + 8]
cmp word [rax], 0x2d
je 0x1401117c0
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, 0x104
lea rdx, [rbp + 0x1a0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov rdx, qword [r15 + 8]
lea rcx, [rbp + 0x1a0]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
mov rcx, qword [r15 + 8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov sil, 1
mov rcx, qword [0x1406a2c10]
call fcn.140144e20
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
call fcn.1400029c0
mov rax, qword gs:[0x58]
movaps xmm7, xmm0
mov edi, 4
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x1406a2c38], eax
jg 0x140112052
mov eax, dword [rdi + rbx]
cmp dword [0x1406a2c40], eax
jg 0x14011209b
cvttss2si ecx, dword [0x1406a2c28]
xor r15d, r15d
mov r9d, 0x80c70000
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
movd xmm1, dword [rbp + 0x15c]
movd xmm0, dword [rbp + 0x158]
cvttss2si eax, dword [0x1406a2c3c]
cvtdq2ps xmm1, xmm1
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
lea ecx, [r15 + 0x20]
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm7
mulss xmm0, xmm7
subss xmm1, dword [0x1406a2c3c]
subss xmm0, dword [0x1406a2c28]
mulss xmm1, dword [0x14040d4f4]
mulss xmm0, dword [0x14040d4f4]
cvttss2si edx, xmm1
cvttss2si r8d, xmm0
mov dword [rsp + 0x28], edx
lea rdx, str.Neverlose
mov dword [rsp + 0x20], r8d
lea r8, str.Neverlose
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x1406a2b60], rax
test rax, rax
je 0x1401119b1
mov ecx, 0x80000020
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov qword [0x1406a2b70], rax
mov rcx, rax
test rax, rax
jne 0x1401118f0
mov rdx, r13
lea rcx, str.Neverlose
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov rcx, qword [0x1406a2b70]
mov r9, qword [0x1406a2b60]
lea rdx, [0x1406a2b68]
mov qword [rsp + 0x30], rdx
lea rdx, [0x1406a2b20]
mov qword [rsp + 0x28], rdx
xor edx, edx
mov qword [0x1406a2b20], r15
mov qword [0x1406a2b2c], r15
mov dword [0x1406a2b34], r15d
mov qword [0x1406a2b3c], r15
lea r8d, [rdx + 1]
mov dword [0x1406a2b44], r15d
mov qword [0x1406a2b54], r15
mov dword [0x1406a2b48], 1
mov dword [0x1406a2b38], 1
mov dword [0x1406a2b28], r15d
mov dword [0x1406a2b4c], 1
mov dword [0x1406a2b50], 0x50
mov dword [0x1406a2b5c], 1
mov rax, qword [rcx]
mov dword [rsp + 0x20], 0x44
call qword [rax + 0x80]
test eax, eax
jns 0x140111aaf
mov rcx, qword [0x1406a2b70]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rdx, r13
lea rcx, str.Neverlose
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov r12d, r15d
mov rdx, qword [rbp + 0xe8]
cmp rdx, 7
jbe 0x1401119f7
mov rcx, qword [rbp + 0xd0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401119f2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401120e4
call fcn.14015511c
mov rdx, qword [rbp + 0x108]
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], 7
mov word [rbp + 0xd0], r15w
cmp rdx, 7
jbe 0x140111a57
mov rcx, qword [rbp + 0xf0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140111a52
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401120e4
call fcn.14015511c
movaps xmm7, xmmword [rsp + 0x4d0]
mov eax, r12d
mov r12, qword [rsp + 0x530]
movaps xmm6, xmmword [rsp + 0x4e0]
movaps xmm8, xmmword [rsp + 0x4c0]
mov r14, qword [rsp + 0x538]
mov rdi, qword [rsp + 0x528]
mov r15, qword [rsp + 0x4f0]
mov rcx, qword [rbp + 0x3b0]
xor rcx, rsp
call fcn.140154c90
add rsp, 0x4f8
pop r13
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0xd0
call fcn.140154dd0
mov rcx, rax
call fcn.140136450
xor edx, edx
mov rcx, rax
call fcn.140012400
mov r9b, 1
xor r8d, r8d
xor edx, edx
call fcn.14013af10
mov rcx, qword [0x1406a2b60]
call fcn.140002850
mov rcx, qword [0x1406a2b68]
call fcn.140001db0
mov r9b, 1
xor r8d, r8d
xor edx, edx
call fcn.14013af10
call fcn.14013c5a0
mov rcx, qword [0x1406a2b60]
call fcn.140002850
mov rcx, qword [0x1406a2b68]
call fcn.140001db0
mov rcx, qword [0x1406a2b60]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rcx, qword [0x1406a2b60]
mov edx, 0xffffffec
mov r8d, 0x80000
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov rcx, qword [0x1406a2b60]
mov r9d, r12d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rcx, qword [0x1406a2b60]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rbx, qword [0x1406a2c18]
lea rdi, [rbx + 8]
mov rax, qword [0x1406a2b60]
mov qword [rbx + 0x18], rax
cmp qword [rdi], r15
jne 0x140111bcc
cmp byte [rbx + 0x10], r15b
jne 0x140111bcc
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
xor edx, edx
mov qword [rsp + 0x20], rdi
lea r9, [0x14035aa80]
lea rcx, [0x14035aa90]
lea r8d, [rdx + 1]
call qword [sym.imp.ole32.dll_CoCreateInstance]
cmp qword [rdi], r15
jne 0x140111bcc
mov byte [rbx + 0x10], 1
call qword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, 1
call fcn.140154dd0
lea rcx, [rsp + 0x78]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x1401144e0]
xor ecx, ecx
mov dword [rsp + 0x20], r15d
xor edx, edx
mov byte [rax], sil
call fcn.1401927e8
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140112030
cmp dword [rbp - 0x58], 0x12
je 0x140111f90
movss xmm6, dword [0x14040d50c]
movss xmm8, dword [0x14040d594]
nop dword [rax]
nop dword [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp - 0x60]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140111c67
lea rcx, [rbp - 0x60]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp - 0x60]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x140111f86
mov rdi, qword [0x1406a2c48]
mov rcx, rdi
call fcn.14015076c
test eax, eax
jne 0x14011210c
mov eax, dword [rdi + 0x4c]
cmp eax, 0x7fffffff
je 0x1401120fc
mov rbx, qword [rdi + 0x50]
xor r14b, r14b
cmp rbx, qword [rdi + 0x58]
je 0x140111d02
lea rsi, [rbx + 8]
nop dword [rax]
mov rcx, qword [rbx]
cmp dword [rcx + 0x24], r15d
jg 0x140111cd2
test rcx, rcx
je 0x140111cb9
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 0x48]
mov r8, qword [rdi + 0x58]
mov rdx, rsi
sub r8, rsi
mov rcx, rbx
call fcn.140355880
add qword [rdi + 0x58], 0xfffffffffffffff8
jmp 0x140111cfc
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rax, rax
jne 0x140111cf4
mov rcx, qword [rbx]
cmp byte [rcx + 0x28], r15b
jne 0x140111cf4
test r14b, r14b
jne 0x140111cf4
mov rax, qword [rcx]
call qword [rax + gethostname]
mov r14b, 1
add rbx, 8
add rsi, 8
cmp rbx, qword [rdi + 0x58]
jne 0x140111ca0
mov rcx, rdi
call fcn.140150774
call fcn.140001e60
call fcn.1400025c0
movaps xmm2, xmm6
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.140013550
mov rcx, qword [0x1406a2c20]
call fcn.140135030
mov rdi, qword [0x1406a2bf0]
mov rbx, qword [0x1406a2be8]
cmp rbx, rdi
je 0x140111d60
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + 0x28]
test al, al
jne 0x140111d57
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
add rbx, 8
cmp rbx, rdi
jne 0x140111d41
call fcn.140002d20
mov rcx, qword [0x1406a2b68]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x1406a2b68]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x1406a2b68]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x1406a2b68]
mov r9d, 3
mov dword [rsp + 0x30], r15d
xor r8d, r8d
movss dword [rsp + 0x28], xmm6
xor edx, edx
mov dword [rsp + 0x20], 0xff000000
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x1406a2b68]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140111e11
xor ecx, ecx
call fcn.14000b230
call fcn.140013530
mov rcx, rax
call section..text
mov rcx, qword [0x1406a2b68]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x1406a2b68]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r15
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140111f51
mov rcx, qword [0x1406a2b68]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x140111f86
call fcn.140001c10
mov rsi, qword [0x1406a2c48]
mov rcx, rsi
call fcn.14015076c
test eax, eax
jne 0x14011210c
mov eax, dword [rsi + 0x4c]
cmp eax, 0x7fffffff
je 0x1401120f5
mov rdi, qword [rsi + 0x58]
mov rbx, qword [rsi + 0x50]
cmp rbx, rdi
je 0x140111e9f
mov rcx, qword [rbx]
test rcx, rcx
je 0x140111e96
mov rax, qword [rcx]
call qword [rax + 0x40]
add rbx, 8
cmp rbx, rdi
jne 0x140111e88
mov rcx, rsi
call fcn.140150774
mov rdi, qword [0x1406a2bf0]
mov rbx, qword [0x1406a2be8]
cmp rbx, rdi
je 0x140111ed2
nop word [rax + rax]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + 0x18]
add rbx, 8
cmp rbx, rdi
jne 0x140111ec0
mov rcx, qword [0x1406a2b68]
lea rdx, [0x1406a2b20]
mov rax, qword [rcx]
call qword [rax + 0x80]
test eax, eax
js 0x140111f86
mov cl, 1
call fcn.140004c90
call fcn.140001f50
mov rsi, qword [0x1406a2c48]
mov rcx, rsi
call fcn.14015076c
test eax, eax
jne 0x14011210c
mov eax, dword [rsi + 0x4c]
cmp eax, 0x7fffffff
je 0x1401120f5
mov rdi, qword [rsi + 0x58]
mov rbx, qword [rsi + 0x50]
cmp rbx, rdi
je 0x140111f47
nop
mov rcx, qword [rbx]
test rcx, rcx
je 0x140111f3e
mov rax, qword [rcx]
call qword [rax + gethostname]
add rbx, 8
cmp rbx, rdi
jne 0x140111f30
mov rcx, rsi
call fcn.140150774
jmp 0x140111f86
test eax, eax
js 0x140111f86
mov rax, qword [0x1406a2c20]
mov edx, 0xb3b2b1
mov rcx, qword [0x1406a2b60]
mov r9d, 3
movss xmm0, dword [rax + 0x94]
mulss xmm0, xmm8
cvttss2si r8d, xmm0
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp dword [rbp - 0x58], 0x12
jne 0x140111c30
cmp dword [rsp + 0x78], r15d
je 0x1401120ea
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0x78], eax
je 0x14011210c
movaps xmm0, xmmword [rsp + 0x70]
lea rcx, [rbp + 0xb0]
xor edx, edx
movdqa xmmword [rbp + 0xb0], xmm0
call fcn.140150998
test eax, eax
jne 0x140112021
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
call fcn.140001cd0
xor ecx, ecx
call fcn.140005e30
mov rcx, qword [0x1406a2b68]
test rcx, rcx
je 0x140111ff0
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x1406a2b70]
test rcx, rcx
je 0x140112002
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rdx, r13
lea rcx, str.Neverlose
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov r12d, r15d
cmp dword [rsp + 0x78], r15d
jne 0x14011202a
jmp 0x1401119b1
mov ecx, r12d
call fcn.1401503fc
int3
call fcn.140192acc
int3
mov ecx, 6
mov dword [rsp + 0x78], r15d
call fcn.1401503fc
int3
call fcn.140192f04
int3
call fcn.140192f04
int3
call fcn.140192f04
int3
lea rcx, [0x1406a2c38]
call fcn.140154d58
cmp dword [0x1406a2c38], 0xffffffff
jne 0x140111803
mov rax, qword [0x1406a2c20]
cvttss2si ecx, dword [rax + 0x58]
movd xmm0, ecx
lea rcx, [0x1406a2c38]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm7
movss dword [0x1406a2c28], xmm0
call fcn.140154cec
jmp 0x140111803
lea rcx, [0x1406a2c40]
call fcn.140154d58
cmp dword [0x1406a2c40], 0xffffffff
jne 0x140111812
mov rax, qword [0x1406a2c20]
cvttss2si ecx, dword [rax + 0x5c]
movd xmm0, ecx
lea rcx, [0x1406a2c40]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm7
movss dword [0x1406a2c3c], xmm0
call fcn.140154cec
jmp 0x140111812
call fcn.140192f04
int3
mov ecx, 1
call fcn.1401503fc
int3
dec eax
mov dword [rsi + 0x4c], eax
jmp 0x140112101
dec eax
mov dword [rdi + 0x4c], eax
mov ecx, 6
call fcn.1401503fc
int3
mov ecx, 5
call fcn.1401503fc
int3