Function at 0x14002da20
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x330]
sub rsp, 0x430
mov rax, qword [0x1400f6ec8]
xor rax, rsp
mov qword [rbp + 0x320], rax
mov rbx, rdx
mov qword [rbp], rdx
mov r14, rcx
mov qword [rbp + 0xd8], rdx
xor edi, edi
mov dword [rsp + 0x68], edi
lea rcx, [rbp + 0x108]
call fcn.14002a970
nop
lea rdx, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rdx, qword [rbp + 0x108]
mov r8, qword [rbp + 0x118]
lea rcx, [section..data]
call fcn.14001ae80
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x140024ef0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x140025010]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x140025240]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, str.START_of_license_function
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000df80
cmp byte [0x1400f7ad0], dil
jne 0x14002db3d
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], rdi
lea r8d, [rdi + 0x52]
lea rdx, str.You_need_to_run_the_KeyAuthApp.init____function_before_any_other_KeyAuth_functions
lea rcx, [rbp - 0x60]
call fcn.14000e920
lea rcx, [rbp - 0x60]
call fcn.140029c70
lea rcx, [rbp + 0x1e8]
call fcn.14003c420
nop
mov dword [rbp + 0xf8], 0xdbc3dc94
mov dword [rbp + 0xfc], 0xddd1c5d3
mov word [rbp + 0x100], 0x87
mov byte [rbp + 0x102], 1
mov dword [rbp + 0xc8], 0xd8d5dd94
mov dword [rbp + 0xcc], 0x1008ad3
mov dword [rbp - 0x80], 0xc6d1c094
mov dword [rbp - 0x7c], 0xd7d7dec5
mov dword [rbp - 0x78], 0x81dfd3
mov byte [rbp - 0x74], 1
mov dword [rbp - 0x68], 0xdcc3db94
mov dword [rbp - 0x64], 0x1008ad2
mov dword [rsp + 0x68], 0xccd1d894
mov word [rsp + 0x6c], 0x8b
mov byte [rsp + 0x6e], 1
mov dword [rbp + 0xe8], 0xd0c4cac6
mov dword [rbp + 0xec], 0xdad1db8b
mov dword [rbp + 0xf0], 0xd8cfd5df
mov word [rbp + 0xf4], 0x100
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x4e]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 5
jb 0x14002dbf0
mov byte [rsp + 0x6e], 0
lea r9, [rbp + 0xe0]
lea r8, [rsp + 0x6d]
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x20]
call fcn.140012df0
nop
cmp byte [rbp + 0xf5], 0
je 0x14002dc4a
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x4e]
xor byte [rbp + rcx + 0xe8], al
inc rcx
cmp rcx, 0xc
jb 0x14002dc30
mov byte [rbp + 0xf5], 0
lea r9, [rbp + 0xe0]
lea r8, [rbp + 0xf4]
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0x148]
call fcn.140012df0
nop
lea r9, [rbp - 0x20]
lea r8, [rbp + 0x148]
movzx edx, byte [rbp + 0xe0]
lea rcx, [rbp - 0x40]
call fcn.1400227a0
nop
mov rdx, qword [rbp + 0x160]
cmp rdx, 0x10
jb 0x14002dccd
inc rdx
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002dcc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002dcc7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bf1bc
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14002dd0c
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002dd06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002dd06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bf1bc
nop
mov rdx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14002dd19
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
lea rcx, [rbp - 0x40]
call fcn.14000ce40
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x128], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x138], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp - 0x68]
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0xa8]
call fcn.14001bf30
nop
lea rdx, [rbp + 0x1e8]
cmp qword [rbp + 0x200], 0x10
cmovae rdx, qword [rbp + 0x1e8]
mov r8, qword [rbp + 0x1f8]
mov rcx, rax
call fcn.14000ce40
movups xmm0, xmmword [rax]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x18], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp - 0x80]
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x88]
call fcn.14001c4b0
nop
lea rdx, [r14 + 0x258]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14002ddd0
mov rdx, qword [rdx]
mov rcx, rax
call fcn.14000ce40
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x48]
call fcn.14001bf30
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x14002de18
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
mov rcx, rax
call fcn.14000ce40
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp + 0xf8]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x28]
call fcn.14001c1d0
nop
lea rdx, [r14 + 0x20]
cmp qword [r14 + 0x38], 0x10
jb 0x14002de66
mov rdx, qword [r14 + 0x20]
mov r8, qword [r14 + 0x30]
mov rcx, rax
call fcn.14000ce40
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x188], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x198], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x14002ded4
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002decf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002decf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bf1bc
movdqa xmm0, xmmword [0x1400e4c40]
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14002df24
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002df1e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002df1e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bf1bc
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x14002df62
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002df5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002df5d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bf1bc
movdqa xmm0, xmmword [0x1400e4c40]
movdqu xmmword [rbp + 0x58], xmm0
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x14002dfb5
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002dfaf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002dfaf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bf1bc
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x14002dff9
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002dff4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002dff4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bf1bc
movdqa xmm0, xmmword [0x1400e4c40]
movdqu xmmword [rbp + 0x98], xmm0
mov byte [rbp + 0x88], 0
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x14002e04f
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e049
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002e049
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bf1bc
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x14002e093
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e08e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002e08e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bf1bc
movdqa xmm0, xmmword [0x1400e4c40]
movdqu xmmword [rbp + 0xb8], xmm0
mov byte [rbp + 0xa8], 0
mov rdx, qword [rbp + 0x140]
cmp rdx, 0x10
jb 0x14002e0ef
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e0e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002e0e9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bf1bc
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14002e12d
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e128
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002e128
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bf1bc
movdqa xmm0, xmmword [0x1400e4c40]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
lea rax, [rbp + 8]
mov qword [rsp + 0x70], rax
lea rdx, [r14 + 0x80]
lea rcx, [rbp + 8]
call fcn.14000b720
mov r13, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], rdi
lea r15, [rbp + 0x188]
cmp qword [rbp + 0x1a0], 0x10
cmovae r15, qword [rbp + 0x188]
movabs rdi, 0x7fffffffffffffff
mov rsi, qword [rbp + 0x198]
cmp rsi, rdi
ja 0x14002ef12
mov rbx, 0xffffffffffffffff
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
cmp rsi, 0x10
jae 0x14002e1bd
mov qword [rbp - 0x50], rsi
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x60], xmm0
jmp 0x14002e208
mov rax, rsi
or rax, 0xf
cmp rax, rdi
ja 0x14002e1d8
mov rdi, rax
mov ecx, socket
cmp rax, rcx
cmovb rdi, rcx
mov rdx, rdi
add rdx, 1
cmovb rdx, rbx
lea rcx, [rbp - 0x60]
call fcn.140010630
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rdi
lea r8, [rsi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov r8, r13
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x1c8]
call fcn.1400332f0
nop
lea rax, [rbp - 0x40]
mov qword [rsp + 0x58], rax
lea rdx, [rbp + 0x1c8]
cmp qword [rbp + 0x1e0], 0x10
cmovae rdx, qword [rbp + 0x1c8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xor r15d, r15d
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], r15
nop
inc rbx
cmp byte [rdx + rbx], r15b
jne 0x14002e250
mov r8, rbx
lea rcx, [rbp - 0x40]
call fcn.14000e920
nop
lea rax, [rbp - 0x20]
mov qword [rsp + 0x70], rax
lea rdx, [0x1400f6040]
lea rcx, [rbp - 0x20]
call fcn.14000b720
mov rbx, rax
lea rdx, [0x1400f6020]
lea rcx, [rbp + 0x148]
call fcn.14000b720
nop
lea r8, [rbp - 0x40]
mov rdx, rbx
mov rcx, rax
call fcn.140023d40
xor eax, 0xa5a5
mov edx, eax
shr eax, 8
movzx r8d, al
movzx eax, dl
movabs r13, 0xcbf29ce484222325
xor rax, r13
movabs rsi, 0x100000001b3
imul rax, rsi
xor r8, rax
imul r8, rsi
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor r8, rcx
imul r8, rsi
shr rdx, 0x18
xor r8, rdx
imul r8, rsi
cmp r8w, 0xdf7f
jne 0x14002ef06
mov qword [rbp + 0x180], r15
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp + 0x148]
lea rdx, [rbp + 0x1c8]
lea rcx, [rbp + 0xe8]
call fcn.14001fc10
nop
mov byte [rbp - 0x80], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0xf8], xmm0
mov ecx, 0x20
call fcn.1400bef30
mov rbx, rax
lea rax, [rbp + 0xe0]
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x100], rbx
lea rdx, [r14 + 0x20]
mov rcx, rbx
call fcn.14000b720
nop
mov qword [rbp - 0x78], rbx
mov dword [rsp + 0x58], 0xd0dac4dd
mov dword [rsp + 0x5c], 0xdcdec4
mov byte [rsp + 0x60], 1
mov rcx, r15
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x4e]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 7
jb 0x14002e390
mov byte [rsp + 0x60], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x5f]
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x40]
call fcn.140012df0
nop
movzx ecx, byte [rbp + 0xe8]
test cl, cl
jne 0x14002e3e5
mov byte [rbp + 0xe8], 1
call fcn.14000e470
mov qword [rbp + 0xf0], rax
movzx ecx, byte [rbp + 0xe8]
jmp 0x14002e3ec
mov rax, qword [rbp + 0xf0]
cmp cl, 1
jne 0x14002e3ff
lea rdx, [rbp - 0x40]
mov rcx, rax
call fcn.140023710
jmp 0x14002e404
mov rax, qword [rsp + 0x58]
lea rdx, [rbp - 0x80]
mov rcx, rax
call fcn.140023320
test al, al
sete bl
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14002e453
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e44e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002e44e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bf1bc
movdqa xmm0, xmmword [0x1400e4c40]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
movzx edx, byte [rbp - 0x80]
lea rcx, [rbp - 0x78]
call fcn.140028010
test bl, bl
je 0x14002e481
mov ecx, 8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x70], 0xc6c7d6df
mov dword [rsp + 0x74], 0xddd0d7
mov byte [rsp + 0x78], 1
mov rcx, r15
nop dword [rax]
lea eax, [rcx - 0x4e]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 7
jb 0x14002e4a0
mov byte [rsp + 0x78], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x77]
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x20]
call fcn.140012df0
nop
mov rbx, qword [rsp + 0x58]
movzx ecx, byte [rbp + 0xe8]
test cl, cl
jne 0x14002e4fa
mov byte [rbp + 0xe8], 1
call fcn.14000e470
mov qword [rbp + 0xf0], rax
movzx ecx, byte [rbp + 0xe8]
jmp 0x14002e501
mov rax, qword [rbp + 0xf0]
cmp cl, 1
jne 0x14002e515
lea rdx, [rbp - 0x20]
mov rcx, rax
call fcn.140023710
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
movdqa xmm1, xmmword [0x1400e4c40]
movdqu xmmword [rbp + 0x1b8], xmm1
mov byte [rbp + 0x1a8], 0
mov dword [rsp + 0x68], 0x17ffc
cmp byte [rbx], 3
jne 0x14002e555
mov rdx, qword [rbx + 8]
lea rax, [rbp + 0x1a8]
cmp rax, rdx
je 0x14002e573
jmp 0x14002e558
mov rdx, r15
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14002e566
mov rdx, qword [rdx]
lea rcx, [rbp + 0x1a8]
call fcn.14001ae80
nop
lea rcx, [rbp - 0x20]
call fcn.14000b570
movabs r12, 0xcbe5c873d26645f1
mov dword [rsp + 0x68], 0xd0d0dcd1
mov word [rsp + 0x6c], 0x100
mov rcx, r15
nop dword [rax + rax]
lea eax, [rcx - 0x4e]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 4
jb 0x14002e5a0
mov byte [rsp + 0x6d], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x6c]
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x148]
call fcn.140012df0
nop
movzx ecx, byte [rbp + 0xe8]
test cl, cl
jne 0x14002e5f8
mov byte [rbp + 0xe8], 1
call fcn.14000e470
mov qword [rbp + 0xf0], rax
movzx ecx, byte [rbp + 0xe8]
jmp 0x14002e5ff
mov rax, qword [rbp + 0xf0]
cmp cl, 1
jne 0x14002e615
lea rdx, [rbp + 0x148]
mov rcx, rax
call fcn.140023710
jmp 0x14002e61a
mov rax, qword [rsp + 0x58]
mov rcx, rax
call fcn.14001bca0
mov edx, eax
shr eax, 8
movzx edi, al
movzx eax, dl
xor rax, r13
imul rax, rsi
xor rdi, rax
imul rdi, rsi
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor rdi, rcx
imul rdi, rsi
shr rdx, 0x18
xor rdi, rdx
imul rdi, rsi
lea rcx, [rbp + 0x148]
call fcn.14000b570
mov dword [rsp + 0x58], 0xd6d7c6c1
mov dword [rsp + 0x5c], 0xcbc4d3
mov byte [rsp + 0x60], 1
mov rcx, r15
nop dword [rax]
lea eax, [rcx - 0x4e]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 7
jb 0x14002e680
mov byte [rsp + 0x60], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x5f]
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x128]
call fcn.140012df0
nop
mov ebx, 0x1efffd
mov dword [rsp + 0x68], ebx
movzx ecx, byte [rbp + 0xe8]
test cl, cl
jne 0x14002e6e1
mov byte [rbp + 0xe8], 1
call fcn.14000e470
mov qword [rbp + 0xf0], rax
movzx ecx, byte [rbp + 0xe8]
jmp 0x14002e6e8
mov rax, qword [rbp + 0xf0]
cmp cl, 1
jne 0x14002e701
lea rdx, [rbp + 0x128]
mov rcx, rax
call fcn.140023710
mov rcx, rax
jmp 0x14002e706
mov rcx, qword [rsp + 0x58]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, r15
cmp byte [rax], 0
je 0x14002e7e9
mov dword [rbp + 0xc8], 0xd6d7c6c1
mov dword [rbp + 0xcc], 0xcbc4d3
mov byte [rbp + 0xd0], 1
mov rcx, r15
nop dword [rax + rax]
lea eax, [rcx - 0x4e]
xor byte [rbp + rcx + 0xc8], al
inc rcx
cmp rcx, 7
jb 0x14002e740
mov byte [rbp + 0xd0], 0
lea r9, [rsp + 0x50]
lea r8, [rbp + 0xcf]
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x148]
call fcn.140012df0
nop
mov ebx, 0x7effff
mov dword [rsp + 0x68], ebx
movzx ecx, byte [rbp + 0xe8]
test cl, cl
jne 0x14002e7aa
mov byte [rbp + 0xe8], 1
call fcn.14000e470
mov qword [rbp + 0xf0], rax
movzx ecx, byte [rbp + 0xe8]
jmp 0x14002e7b1
mov rax, qword [rbp + 0xf0]
cmp cl, 1
jne 0x14002e7ca
lea rdx, [rbp + 0x148]
mov rcx, rax
call fcn.140023710
mov rcx, rax
jmp 0x14002e7cf
mov rcx, qword [rsp + 0x58]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, r15
cmp byte [rax], 0
je 0x14002e7e4
cmp rdi, r12
je 0x14002e7e9
xor dil, dil
jmp 0x14002e7ec
mov dil, 1
test bl, 2
je 0x14002e801
and ebx, 0xfffffffd
lea rcx, [rbp + 0x148]
call fcn.14000b570
nop
test bl, 1
je 0x14002e812
lea rcx, [rbp + 0x128]
call fcn.14000b570
test dil, dil
je 0x14002eefa
lea rdx, [rbp + 0xe8]
lea rcx, [rbp - 0x80]
call fcn.140022490
mov rdx, rax
mov rcx, r14
call fcn.14002f3e0
mov dword [rsp + 0x58], 0xd6d7c6c1
mov dword [rsp + 0x5c], 0xcbc4d3
mov byte [rsp + 0x60], 1
mov rcx, r15
nop
lea eax, [rcx - 0x4e]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 7
jb 0x14002e850
mov byte [rsp + 0x60], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x5f]
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x148]
call fcn.140012df0
nop
movzx ecx, byte [rbp + 0xe8]
test cl, cl
jne 0x14002e8a8
mov byte [rbp + 0xe8], 1
call fcn.14000e470
mov qword [rbp + 0xf0], rax
movzx ecx, byte [rbp + 0xe8]
jmp 0x14002e8af
mov rax, qword [rbp + 0xf0]
cmp cl, 1
jne 0x14002e8c8
lea rdx, [rbp + 0x148]
mov rcx, rax
call fcn.140023710
mov rcx, rax
jmp 0x14002e8cd
mov rcx, qword [rsp + 0x58]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, r15
movzx ebx, byte [rax]
lea rcx, [rbp + 0x148]
call fcn.14000b570
test bl, bl
je 0x14002e9ae
mov dword [rsp + 0x68], 0xdad2dddb
mov word [rsp + 0x6c], 0x100
mov rcx, r15
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x4e]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 4
jb 0x14002e910
mov byte [rsp + 0x6d], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x6c]
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x148]
call fcn.140012df0
nop
movzx ecx, byte [rbp + 0xe8]
test cl, cl
jne 0x14002e968
mov byte [rbp + 0xe8], 1
call fcn.14000e470
mov qword [rbp + 0xf0], rax
movzx ecx, byte [rbp + 0xe8]
jmp 0x14002e96f
mov rax, qword [rbp + 0xf0]
cmp cl, 1
jne 0x14002e985
lea rdx, [rbp + 0x148]
mov rcx, rax
call fcn.140023710
jmp 0x14002e98a
mov rax, qword [rsp + 0x58]
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140022490
mov rdx, rax
mov rcx, r14
call fcn.14002f4a0
nop
lea rcx, [rbp + 0x148]
call fcn.14000b570
lea rdx, str._nlicense_RESPONSE_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000df80
lea rdx, [r14 + 0x238]
cmp qword [r14 + 0x250], 0x10
jb 0x14002e9d9
mov rdx, qword [r14 + 0x238]
mov r8, qword [r14 + 0x248]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140013120
cmp byte [r14 + 0x230], 0
je 0x14002eeee
mov dword [rbp + 0xf8], 0xc1ddddfb
mov dword [rbp + 0xfc], 0xd0d4d6df
mov dword [rbp + 0x100], 0xd8dec0
mov byte [rbp + 0x104], 1
mov rdx, r15
lea eax, [rdx - 0x4e]
xor byte [rbp + rdx + 0xf8], al
inc rdx
cmp rdx, 0xb
jb 0x14002ea22
mov byte [rbp + 0x104], 0
lea rdx, [rbp + 0xf8]
lea rcx, [r14 + 0x238]
call fcn.14001b9f0
test al, al
je 0x14002eeee
lea rsi, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rsi, qword [rbp + 0x108]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14002eaf6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14002eaf6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x3be35e06
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14002eaf1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14002ead0
cmp r8d, 0x72325000
je 0x14002eafb
test r9d, r9d
jne 0x14002eab0
mov rax, qword [rax]
jmp 0x14002ea80
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rdx + rax*4]
add rdx, r10
mov rcx, rsi
call rdx
movdqa xmm0, xmmword [0x1400c5cf0]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rbp - 0x70], 1
lea rcx, [rbp - 0x80]
call fcn.140024e00
mov rdx, rax
lea r8, [rbp + 0x108]
lea rcx, [rbp + 0x148]
call fcn.14000dd40
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x210]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x210]
call fcn.14000a030
nop
cmp qword [rbp + 0x298], 0
je 0x14002ebc2
lea rdx, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rdx, qword [rbp + 0x108]
mov r8, qword [rbp + 0x118]
lea rcx, [rbp + 0x210]
call fcn.140013120
lea rcx, [rbp + 0x210]
call fcn.140009ff0
mov dword [rsp + 0x58], 0xc1d2dce1
mov dword [rsp + 0x5c], 0xdccad6c1
mov word [rsp + 0x60], 0xe6
mov byte [rsp + 0x62], 1
mov rcx, r15
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x4e]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 9
jb 0x14002ebf0
mov byte [rsp + 0x62], 0
lea r8, [rbp + 0x108]
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x128]
call fcn.14000dd40
nop
lea rdx, [rbp + 0x128]
cmp qword [rbp + 0x140], 0x10
cmovae rdx, qword [rbp + 0x128]
mov qword [rsp + 0x40], r15
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x14002ee2c
mov r15, qword [rbp + 0x118]
inc r15
lea rsi, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rsi, qword [rbp + 0x108]
lea r14, [rbp + 0x108]
cmovae r14, qword [rbp + 0x108]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x14002ed36
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14002ed36
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r11
mov r8d, 0xc17d0dcd
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14002ed31
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14002ed10
cmp r8d, 0x75b95f84
je 0x14002ed3b
test r9d, r9d
jne 0x14002ecf0
mov rax, qword [rax]
jmp 0x14002ecc0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rsi
mov r9d, 1
xor r8d, r8d
mov rdx, r14
mov rcx, qword [rbp + 0xc8]
call r10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14002ee06
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14002ee06
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
mov r8d, 0x3084784f
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14002ee01
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x14002ede0
cmp r8d, 0x8a64b440
je 0x14002ee0b
test r9d, r9d
jne 0x14002edc0
mov rax, qword [rax]
jmp 0x14002ed90
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, qword [rbp + 0xc8]
call rdx
nop
lea rcx, [rbp + 0x128]
call fcn.14000b570
nop
lea rcx, [rbp + 0x210]
call fcn.140005830
nop
lea rcx, [rbp + 0x148]
call fcn.14000b570
nop
lea rcx, [rbp + 0x1a8]
call fcn.14000b570
nop
movzx edx, byte [rbp + 0xe8]
lea rcx, [rbp + 0xf0]
call fcn.140028010
lea rdx, str.END_of_license_function
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000df80
nop
lea rcx, [rbp + 0x1c8]
call fcn.14000b570
nop
lea rcx, [rbp + 0x188]
call fcn.14000b570
nop
lea rcx, [rbp + 0x1e8]
call fcn.14000b570
nop
lea rcx, [rbp + 0x108]
call fcn.14000b570
nop
mov rcx, qword [rbp]
call fcn.14000b570
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.1400bef10
mov rbx, qword [rsp + 0x480]
add rsp, 0x430
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, listen
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov ecx, 7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.140001ea0
int3