Function at 0x1400bc8b0
Capabilities:
Check mutex on windows
Create process on windows
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0xb8]
sub rsp, 0x190
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140174540]
xor rax, rsp
mov qword [rbp + 0x60], rax
mov r14, rcx
xor r12d, r12d
mov ebx, r12d
mov dword [rbp], ebx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll___p___argc]
mov rsi, 0xffffffffffffffff
cmp dword [rax], 4
jne 0x1400bc96f
mov ebx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll___p___argv]
mov rcx, qword [rax]
mov rdx, qword [rcx + 8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r12
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rdx + r8], r12b
jne 0x1400bc930
lea rcx, [rbp - 0x20]
call fcn.140002c20
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rcx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x10]
cmp r8, 0xa
jne 0x1400bc96f
lea rdx, [0x14014f5d8]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400bc96f
movzx edi, bl
jmp 0x1400bc972
xor dil, dil
test bl, 1
je 0x1400bc980
lea rcx, [rbp - 0x20]
call fcn.140003f60
test dil, dil
je 0x1400bca38
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll___p___argv]
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x10]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r12
inc rsi
cmp byte [rdx + rsi], r12b
jne 0x1400bc9a5
mov r8, rsi
lea rcx, [rbp - 0x20]
call fcn.140002c20
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rdx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x10]
add r8, rdx
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rdx, qword [rbp - 0x20]
lea rcx, [rsp + 0x60]
call fcn.1400c3630
lea rcx, [rsp + 0x60]
call fcn.1400c3840
lea rcx, [rsp + 0x60]
call fcn.1400040d0
lea rcx, [rbp - 0x20]
call fcn.140003f60
xor eax, eax
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.1400eecb0
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 0x20
call fcn.1400eecd0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov rcx, rax
call fcn.140034460
mov qword [rbp - 0x30], rax
mov rcx, rax
call fcn.1400347d0
test eax, eax
je 0x1400bca88
mov rbx, qword [rbp - 0x30]
mov qword [rbp - 0x30], r12
test rbx, rbx
je 0x1400bdbc3
lea rcx, [rbx + 8]
call fcn.140034d40
mov edx, 0x20
jmp 0x1400bdbbb
mov qword [0x1401748d0], r14
mov ecx, 0x18
call fcn.1400eecd0
mov rbx, rax
mov qword [rax + 0x10], r12
mov qword [rax], r12
lea r8, str.GlobalUnixxVPN_Mutex
mov qword [rax + 8], r8
xor edx, edx
mov ecx, 0x1f0001
call qword [sym.imp.KERNEL32.dll_OpenMutexW]
mov qword [rbx], rax
test rax, rax
je 0x1400bcb35
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [rbx + 0x10], 1
mov qword [rbp - 0x28], rbx
cmp byte [rbx + 0x10], r12b
je 0x1400bcb60
mov qword [rbp - 0x28], r12
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400bcafc
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx], r12
mov edx, 0x18
mov rcx, rbx
call fcn.1400eef54
mov rbx, qword [rbp - 0x30]
mov qword [rbp - 0x30], r12
test rbx, rbx
je 0x1400bdb93
lea rcx, [rbx + 8]
call fcn.140034d40
mov edx, 0x20
mov rcx, rbx
call fcn.1400eef54
jmp 0x1400bdb93
mov byte [rbx + 0x10], r12b
mov r8, qword [rbx + 8]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
mov qword [rbx], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x1400bdc1c
jmp 0x1400bcad0
mov ecx, 1
call fcn.1400eecd0
mov r15, rax
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x58], r12
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
lea rax, [0x140025d90]
mov qword [rbp - 0x78], rax
mov rcx, qword [0x1401748d0]
mov qword [rbp - 0x68], rcx
lea rbx, str.UnixxLoadingWindow
mov qword [rbp - 0x40], rbx
mov edx, 0x66
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rbp - 0x60], rax
lea rcx, [rbp - 0x80]
call qword [sym.imp.USER32.dll_RegisterClassW]
mov qword [rsp + 0x58], r12
mov rax, qword [0x1401748d0]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], reloc.OLEAUT32.dll_DllRegisterServer
mov dword [rsp + 0x30], 0x12c
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xca0000
lea r8, [0x14013df98]
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x1401b1e10], rax
test rax, rax
je 0x1400bcc8d
mov edx, 5
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x30]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x1400bcc8d
lea rcx, [rbp + 0x30]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x30]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [rbp + 0x38], 0x12
je 0x1400bcc8d
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x30]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x1400bcc55
mov rbx, r15
lea rcx, [rbp]
call fcn.1400be080
mov rcx, qword [rax]
mov qword [rax], r12
mov rdx, qword [0x1401749d8]
mov qword [0x1401749d8], rcx
test rdx, rdx
je 0x1400bccb7
call fcn.140003e60
mov rdx, qword [rbp]
test rdx, rdx
je 0x1400bccc5
call fcn.140003e60
mov ecx, 0x270
call fcn.1400eecd0
mov rdi, rax
xor edx, edx
mov r8d, 0x270
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rcx, rdi
call fcn.14004cad0
mov rdi, qword [0x1401749c8]
mov qword [0x1401749c8], rax
test rdi, rdi
je 0x1400bcd12
mov rcx, rdi
call fcn.14004dc40
mov edx, 0x270
mov rcx, rdi
call fcn.1400eef54
mov ecx, 0xd0
call fcn.1400eecd0
mov rdi, rax
xor edx, edx
mov r8d, 0xd0
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rcx, rdi
call fcn.140027f50
mov rdx, qword [0x1401748f0]
mov qword [0x1401748f0], rax
test rdx, rdx
je 0x1400bcd4f
call fcn.140003db0
mov ecx, 0x48
call fcn.1400eecd0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov r8d, 0xf
lea rdx, str.Default_Message
mov rcx, rax
call fcn.140004140
lea rcx, [rdi + 0x20]
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r12
mov qword [rcx + 0x18], r12
mov r8d, 5
lea rdx, [0x14013df98]
call fcn.140004140
mov dword [rdi + 0x40], 0x44
mov r14, qword [0x1401749d0]
mov qword [0x1401749d0], rdi
test r14, r14
je 0x1400bcddb
lea rcx, [r14 + 0x20]
call fcn.1400040d0
mov rcx, r14
call fcn.1400040d0
mov edx, 0x48
mov rcx, r14
call fcn.1400eef54
call fcn.14005c300
test al, al
je 0x1400bd064
mov r14, qword [0x1401749d0]
mov rdi, qword [0x1401748f0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r12
mov r8d, 0x12
lea rdx, str.auto_update_prompt
lea rcx, [rbp - 0x20]
call fcn.140002c20
lea r8, [rbp - 0x20]
lea rdx, [rbp + 0x30]
mov rcx, rdi
call fcn.14002d470
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1400bce41
mov r8, qword [rax]
add r8, qword [rax + 0x10]
mov rdx, qword [rax]
jmp 0x1400bce48
mov r8, qword [rax + 0x10]
add r8, rax
lea rcx, [rsp + 0x60]
call fcn.1400c3630
lea rdx, [rsp + 0x60]
mov rcx, r14
call fcn.140004040
lea rcx, [rsp + 0x60]
call fcn.1400040d0
lea rcx, [rbp + 0x30]
call fcn.140003f60
mov rdx, qword [0x1401749d0]
mov r9d, dword [rdx + 0x40]
lea r8, [rdx + 0x20]
cmp qword [r8 + 0x18], 7
jbe 0x1400bce8b
mov r8, qword [r8]
cmp qword [rdx + 0x18], 7
jbe 0x1400bce95
mov rdx, qword [rdx]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x1400bd064
lea rcx, [rbp + 0x30]
call fcn.1400c32b0
mov r8d, 0xc
lea rdx, str.Updater.exe
mov rcx, rax
call fcn.140004710
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
lea rcx, [rbp + 0x30]
call fcn.1400040d0
lea r8, [rbp - 0x20]
cmp qword [rbp - 8], 7
cmova r8, qword [rbp - 0x20]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
jle 0x1400bd022
mov rdi, qword [0x1401749d0]
mov qword [0x1401749d0], r12
test rdi, rdi
je 0x1400bcf62
lea rcx, [rdi + 0x20]
call fcn.1400040d0
mov rcx, rdi
call fcn.1400040d0
mov edx, 0x48
mov rcx, rdi
call fcn.1400eef54
mov rdx, qword [0x1401748f0]
mov qword [0x1401748f0], r12
test rdx, rdx
je 0x1400bcf7a
call fcn.140003db0
mov rdi, qword [0x1401749c8]
mov qword [0x1401749c8], r12
test rdi, rdi
je 0x1400bcfa2
mov rcx, rdi
call fcn.14004dc40
mov edx, 0x270
mov rcx, rdi
call fcn.1400eef54
mov rdx, qword [0x1401749d8]
mov qword [0x1401749d8], r12
test rdx, rdx
je 0x1400bcfba
call fcn.140003e60
mov rdi, qword [rbp - 0x28]
mov qword [rbp - 0x28], r12
test rdi, rdi
je 0x1400bcfee
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400bcfe1
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rdi], r12
mov edx, 0x18
mov rcx, rdi
call fcn.1400eef54
mov rdi, qword [rbp - 0x30]
mov qword [rbp - 0x30], r12
test rdi, rdi
je 0x1400bd053
lea rcx, [rdi + 8]
call fcn.140034d40
mov edx, 0x20
mov rcx, rdi
call fcn.1400eef54
lea rcx, [rbp - 0x20]
call fcn.1400040d0
mov esi, r12d
jmp 0x1400bd4c3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
lea rdx, str.Error:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140004790
mov edx, edi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp - 0x20]
call fcn.1400040d0
mov esi, r12d
jmp 0x1400bd4c3
mov ecx, 0x18
call fcn.1400eecd0
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
mov qword [rax + 0x10], rcx
mov rcx, rax
call fcn.140074500
mov rbx, qword [0x140174a08]
mov qword [0x140174a08], rax
test rbx, rbx
je 0x1400bd0b1
mov rcx, rbx
call fcn.140074860
mov edx, 0x18
mov rcx, rbx
call fcn.1400eef54
mov rax, qword [0x140174a08]
cmp byte [rax + 8], r12b
jne 0x1400bd111
mov rbx, r12
mov rcx, qword [0x1401b1e10]
test rcx, rcx
je 0x1400bd0d3
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x1401b1e10], r12
mov edx, 1
mov rcx, r15
call fcn.1400eef54
mov rdi, qword [0x140174a08]
mov qword [0x140174a08], r12
test rdi, rdi
je 0x1400bd42c
mov rcx, rdi
call fcn.140074860
mov edx, 0x18
mov rcx, rdi
call fcn.1400eef54
jmp 0x1400bd42c
lea rcx, [rbp]
call fcn.1400be230
mov rdx, qword [rax]
mov qword [rax], r12
call fcn.1400bdf40
mov rbx, qword [rbp]
test rbx, rbx
je 0x1400bd175
lea rdi, [rbx + 0x58]
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x1400bd14b
mov rax, qword [rcx]
cmp rcx, rdi
setne dl
call qword [rax + 0x20]
mov qword [rdi + 0x38], r12
lea rdi, [rbx + 0x10]
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x1400bd168
mov rax, qword [rcx]
cmp rcx, rdi
setne dl
call qword [rax + 0x20]
mov qword [rdi + 0x38], r12
mov edx, 0xa0
mov rcx, rbx
call fcn.1400eef54
mov ecx, 0x20
call fcn.1400eecd0
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov rdx, rax
call fcn.1400bde90
mov ecx, 0x3f0
call fcn.1400eecd0
mov rdi, rax
xor edx, edx
mov r8d, 0x3f0
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rbx, qword [0x1401748c8]
mov qword [rdi + 8], rbx
mov dword [rdi + 0x18], 0x3d0
mov qword [rdi + 0x20], rbx
mov dword [rdi + 0x28], 1
mov dword [rdi + 0x2c], 7
mov dword [rdi + 0x30], 0x8001
mov edx, 0x66
mov rcx, qword [0x1401748d0]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rdi + 0x38], rax
lea rcx, [rdi + 0x40]
lea r8, [0x14013df98]
mov edx, 0x80
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov edx, 0xfffffffc
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
mov qword [rdi], rax
mov rdx, rdi
call fcn.1400bdd70
mov ecx, 0x30
call fcn.1400eecd0
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov rcx, rax
call fcn.14003dde0
mov rdx, qword [0x140174970]
mov qword [0x140174970], rax
test rdx, rdx
je 0x1400bd25b
call fcn.140003d30
lea rcx, [rbp]
call fcn.1400be410
mov rdx, qword [rax]
mov qword [rax], r12
mov rbx, qword [0x140174980]
mov qword [0x140174980], rdx
test rbx, rbx
je 0x1400bd2a3
call fcn.1400c4000
mov rcx, qword [0x1401b2020]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
call qword [sym.imp.WS2_32.dll_WSACleanup]
nop
mov edx, 1
mov rcx, rbx
call fcn.1400eef54
mov rbx, qword [rbp]
test rbx, rbx
je 0x1400bd2d2
call fcn.1400c4000
mov rcx, qword [0x1401b2020]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
call qword [sym.imp.WS2_32.dll_WSACleanup]
nop
mov edx, 1
mov rcx, rbx
call fcn.1400eef54
mov rax, qword [0x140174980]
cmp byte [rax], 0
jne 0x1400bd4f7
mov rbx, r12
mov rcx, qword [0x1401b1e10]
test rcx, rcx
je 0x1400bd2fe
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x1401b1e10], r12
mov edx, 1
mov rcx, r15
call fcn.1400eef54
mov rdi, qword [0x140174980]
mov qword [0x140174980], r12
test rdi, rdi
je 0x1400bd344
call fcn.1400c4000
mov rcx, qword [0x1401b2020]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
call qword [sym.imp.WS2_32.dll_WSACleanup]
nop
mov edx, 1
mov rcx, rdi
call fcn.1400eef54
mov rdx, qword [0x140174970]
mov qword [0x140174970], r12
test rdx, rdx
je 0x1400bd35c
call fcn.140003d30
mov rdi, qword [0x140174988]
mov qword [0x140174988], r12
test rdi, rdi
je 0x1400bd3ad
cmp byte [rdi + 0x3e8], 0
je 0x1400bd3a0
lea rdx, [rdi + 0x18]
mov ecx, 2
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov r8, qword [rdi]
mov edx, 0xfffffffc
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov byte [rdi + 0x3e8], 0
mov edx, 0x3f0
mov rcx, rdi
call fcn.1400eef54
xor edx, edx
call fcn.1400bde90
xor edx, edx
call fcn.1400bdf40
mov rdi, qword [0x140174a08]
mov qword [0x140174a08], r12
test rdi, rdi
je 0x1400bd3e3
mov rcx, rdi
call fcn.140074860
mov edx, 0x18
mov rcx, rdi
call fcn.1400eef54
mov rdi, qword [0x1401749d0]
mov qword [0x1401749d0], r12
test rdi, rdi
je 0x1400bd414
lea rcx, [rdi + 0x20]
call fcn.1400040d0
mov rcx, rdi
call fcn.1400040d0
mov edx, 0x48
mov rcx, rdi
call fcn.1400eef54
mov rdx, qword [0x1401748f0]
mov qword [0x1401748f0], r12
test rdx, rdx
je 0x1400bd42c
call fcn.140003db0
mov rdi, qword [0x1401749c8]
test rdi, rdi
mov qword [0x1401749c8], r12
je 0x1400bd454
mov rcx, rdi
call fcn.14004dc40
mov edx, 0x270
mov rcx, rdi
call fcn.1400eef54
mov rdx, qword [0x1401749d8]
test rdx, rdx
mov qword [0x1401749d8], r12
je 0x1400bd46c
call fcn.140003e60
mov rdi, qword [rbp - 0x28]
test rdi, rdi
mov qword [rbp - 0x28], r12
je 0x1400bd4a0
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400bd493
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rdi]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rdi], r12
mov edx, 0x18
mov rcx, rdi
call fcn.1400eef54
mov rdi, qword [rbp - 0x30]
test rdi, rdi
mov qword [rbp - 0x30], r12
je 0x1400bd4c3
lea rcx, [rdi + 8]
call fcn.140034d40
mov edx, 0x20
mov rcx, rdi
call fcn.1400eef54
test rbx, rbx
je 0x1400bdb93
mov rcx, qword [0x1401b1e10]
test rcx, rcx
je 0x1400bd4e5
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x1401b1e10], r12
mov edx, 1
mov rcx, rbx
call fcn.1400eef54
jmp 0x1400bdb93
mov ecx, 1
call fcn.1400eecd0
mov rcx, rax
call fcn.1400043d0
mov rbx, qword [0x1401748e8]
mov qword [0x1401748e8], rax
test rbx, rbx
je 0x1400bd546
mov ecx, dword [0x1401b2018]
test ecx, ecx
je 0x1400bd532
call fcn.1400c2cf0
mov dword [0x1401b2018], r12d
mov byte [0x1401b2128], 0
mov edx, 1
mov rcx, rbx
call fcn.1400eef54
mov rcx, qword [0x140174970]
call fcn.14004ae80
mov rcx, qword [0x140174970]
call fcn.140042490
call fcn.14004f440
call fcn.140042140
mov rcx, qword [0x1401b1e10]
test rcx, rcx
je 0x1400bd581
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x1401b1e10], r12
mov edx, 1
mov rcx, r15
call fcn.1400eef54
lea rax, [rbp - 0x30]
mov qword [rbp - 0x20], rax
lea rax, [rbp - 0x28]
mov qword [rbp - 0x18], rax
mov ecx, 0x10
call fcn.1400eecd0
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rax], xmm0
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400be680]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x1400bdc0c
cmp dword [rbp + 0x28], 0
je 0x1400bdc00
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400bdc00
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
mov ecx, 1
call fcn.1400eecd0
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400be6d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x1400bdbf0
cmp dword [rbp + 0x18], 0
je 0x1400bdc00
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400bdc00
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x10], xmm0
mov rcx, qword [0x1401748c0]
call fcn.1400c6e50
test eax, eax
jne 0x1400bd98f
mov dword [rbp - 0x18], 0x7f7fffff
mov dword [rbp - 0x14], 0x7f7fffff
movss xmm7, dword [0x14014fd38]
movss xmm6, dword [0x14014fcc8]
call fcn.1400c69d0
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x30]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x1400bd76d
nop word [rax + rax]
lea rcx, [rbp + 0x30]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x30]
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov eax, dword [rbp + 0x38]
add eax, 0xfffffffe
test eax, 0xffffffef
jne 0x1400bd74b
mov rcx, qword [0x1401748c0]
cmp byte [0x140174690], 0
je 0x1400bd741
call fcn.1400c6980
mov rbx, qword [0x140174988]
cmp byte [rbx + 0x3e8], 0
jne 0x1400bd74b
lea r8, [0x1400c46a0]
mov edx, 0xfffffffc
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
lea rdx, [rbx + 0x18]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov byte [rbx + 0x3e8], 1
jmp 0x1400bd74b
mov edx, 1
call fcn.1400c6af0
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x30]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x1400bd6d0
mov rax, qword [0x1401b1e30]
test rax, rax
je 0x1400bd782
mov rcx, qword [rax + 0x98]
jmp 0x1400bd785
mov rcx, r12
cmp dword [rcx + 0x30], 0
jne 0x1400bd790
call fcn.1400a8760
call fcn.1400a76e0
call fcn.140081770
movd xmm2, dword [0x1401748dc]
cvtdq2ps xmm2, xmm2
movd xmm0, dword [0x1401748d8]
cvtdq2ps xmm0, xmm0
mov rax, qword [0x1401b1e30]
movups xmm1, xmmword [rbp - 0x20]
movss xmm1, xmm0
shufps xmm1, xmm1, 0xe1
movss xmm1, xmm2
shufps xmm1, xmm1, 0xe1
movups xmmword [rbp - 0x20], xmm1
movups xmmword [rax + 0x47f4], xmm1
mov qword [rax + 0x4808], r12
mov qword [rax + 0x4810], r12
or dword [rax + 0x47b8], 0x11
mov qword [rax + 0x47c8], r12
mov qword [rax + 0x47d0], r12
mov dword [rax + 0x47bc], 1
xor edx, edx
mov r8d, 0x3b
lea rcx, str.UnixxVPN
call fcn.140086c70
mov rcx, qword [0x1401b1e30]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rdx, qword [rcx + 0x3ed8]
mov rax, qword [rdx + 0x298]
mov qword [0x1401b1c10], rax
movss xmm0, dword [rdx + 0x28]
movss xmm1, dword [rdx + 0x2c]
movss dword [0x1401745f8], xmm0
movss dword [0x1401745fc], xmm1
mov rbx, qword [0x140174a08]
cmp byte [rbx + 9], 0
jne 0x1400bd895
mov rdx, qword [0x1401745f8]
call fcn.140076470
cvttss2si r8d, dword [0x1401745fc]
cvttss2si edx, dword [0x1401745f8]
mov rcx, qword [0x1401748c0]
call fcn.1400c6b10
mov byte [rbx + 9], 1
mov rcx, qword [0x140174978]
call fcn.1400c1390
call fcn.140076730
mov rcx, qword [0x140174a08]
call fcn.140077450
mov rcx, qword [0x140174978]
cmp byte [rcx + 8], 0
jne 0x1400bd8d0
cmp qword [rcx + 0x48], 0
je 0x1400bd8d0
mov rcx, qword [rcx + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x10]
call fcn.140077060
mov rcx, qword [0x1401748f8]
call fcn.140034de0
cmp byte [0x1401745f2], 0
je 0x1400bd8fb
xor ecx, ecx
call fcn.14008a440
test al, al
jne 0x1400bd8fb
mov byte [0x1401745f2], al
call fcn.140088e80
call fcn.140083820
lea r8, [rbp + 8]
lea rdx, [rbp]
mov rcx, qword [0x1401748c0]
call fcn.1400c6750
mov r9d, dword [rbp + 8]
mov r8d, dword [rbp]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.OPENGL32.dll_glViewport]
movaps xmm3, xmm7
movaps xmm2, xmm6
movaps xmm1, xmm6
movaps xmm0, xmm6
call qword [sym.imp.OPENGL32.dll_glClearColor]
mov ecx, 0x4000
call qword [sym.imp.OPENGL32.dll_glClear]
mov rax, qword [0x1401b1e30]
mov rax, qword [rax + 0x48c8]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, r12
cmp byte [rcx], r12b
cmovne rax, rcx
mov rcx, rax
call fcn.1400a7f90
mov rcx, qword [0x1401748c0]
call fcn.1400c6040
mov rcx, qword [0x1401748c0]
call fcn.1400c6e50
test eax, eax
je 0x1400bd6a3
mov rbx, qword [0x1401748e8]
mov qword [0x1401748e8], r12
test rbx, rbx
je 0x1400bd9cc
mov ecx, dword [0x1401b2018]
test ecx, ecx
je 0x1400bd9b8
call fcn.1400c2cf0
mov dword [0x1401b2018], r12d
mov byte [0x1401b2128], 0
mov edx, 1
mov rcx, rbx
call fcn.1400eef54
mov rbx, qword [0x140174980]
mov qword [0x140174980], r12
test rbx, rbx
je 0x1400bda05
call fcn.1400c4000
mov rcx, qword [0x1401b2020]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
call qword [sym.imp.WS2_32.dll_WSACleanup]
nop
mov edx, 1
mov rcx, rbx
call fcn.1400eef54
mov rdx, qword [0x140174970]
mov qword [0x140174970], r12
test rdx, rdx
je 0x1400bda1d
call fcn.140003d30
mov rbx, qword [0x140174988]
mov qword [0x140174988], r12
test rbx, rbx
je 0x1400bda6e
cmp byte [rbx + 0x3e8], 0
je 0x1400bda61
lea rdx, [rbx + 0x18]
mov ecx, 2
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov r8, qword [rbx]
mov edx, 0xfffffffc
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov byte [rbx + 0x3e8], 0
mov edx, 0x3f0
mov rcx, rbx
call fcn.1400eef54
xor edx, edx
call fcn.1400bde90
xor edx, edx
call fcn.1400bdf40
mov rbx, qword [0x140174a08]
mov qword [0x140174a08], r12
test rbx, rbx
je 0x1400bdaa4
mov rcx, rbx
call fcn.140074860
mov edx, 0x18
mov rcx, rbx
call fcn.1400eef54
mov rbx, qword [0x1401749d0]
mov qword [0x1401749d0], r12
test rbx, rbx
je 0x1400bdad5
lea rcx, [rbx + 0x20]
call fcn.1400040d0
mov rcx, rbx
call fcn.1400040d0
mov edx, 0x48
mov rcx, rbx
call fcn.1400eef54
mov rdx, qword [0x1401748f0]
mov qword [0x1401748f0], r12
test rdx, rdx
je 0x1400bdaed
call fcn.140003db0
mov rbx, qword [0x1401749c8]
mov qword [0x1401749c8], r12
test rbx, rbx
je 0x1400bdb15
mov rcx, rbx
call fcn.14004dc40
mov edx, 0x270
mov rcx, rbx
call fcn.1400eef54
mov rdx, qword [0x1401749d8]
mov qword [0x1401749d8], r12
test rdx, rdx
je 0x1400bdb2d
call fcn.140003e60
mov rbx, qword [rbp - 0x28]
mov qword [rbp - 0x28], r12
test rbx, rbx
je 0x1400bdb61
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400bdb54
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx], r12
mov edx, 0x18
mov rcx, rbx
call fcn.1400eef54
mov rbx, qword [rbp - 0x30]
mov qword [rbp - 0x30], r12
test rbx, rbx
je 0x1400bdb84
lea rcx, [rbx + 8]
call fcn.140034d40
mov edx, 0x20
mov rcx, rbx
call fcn.1400eef54
mov esi, r12d
cmp dword [rbp + 0x18], r12d
jne 0x1400bdbe9
cmp dword [rbp + 0x28], r12d
jne 0x1400bdbe9
mov rbx, qword [rbp - 0x28]
test rbx, rbx
je 0x1400bdbc3
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400bdbb6
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx], r12
mov edx, 0x18
mov rcx, rbx
call fcn.1400eef54
mov rbx, qword [rbp - 0x30]
test rbx, rbx
je 0x1400bdbe2
lea rcx, [rbx + 8]
call fcn.140034d40
mov edx, 0x20
mov rcx, rbx
call fcn.1400eef54
mov eax, esi
jmp 0x1400bca06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov dword [rbp + 0x18], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0x28], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx], r12
lea rdx, str.Service_is_already_running.
lea rcx, [rbp - 0x20]
call fcn.1400050d0
lea rdx, [0x14016a9a8]
lea rcx, [rbp - 0x20]
call sub.VCRUNTIME140.dll__CxxThrowException
int3