Function at 0x1400a2330
Capabilities:
Create thread
Delete registry value
Get token membership
Manipulate console buffer
Set registry value

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x220]
sub rsp, 0x320
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [0x14027dc78], rax
mov edx, ntohl
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xor r12d, r12d
mov dword [rbp + 0x260], r12d
mov dword [rbp + 0x268], r12d
mov word [rbp + 0x26c], 0x500
lea rax, [rbp + 0x270]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r12d
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
mov r9d, 0x220
mov r8d, 0x20
mov dl, 2
lea rcx, [rbp + 0x268]
call qword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
test eax, eax
je 0x1400a2400
lea r8, [rbp + 0x260]
mov rdx, qword [rbp + 0x270]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
test eax, eax
jne 0x1400a23f3
mov dword [rbp + 0x260], r12d
mov rcx, qword [rbp + 0x270]
call qword [sym.imp.ADVAPI32.dll_FreeSid]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmp dword [rbp + 0x260], r12d
jne 0x1400a24a7
lea rdx, str.Need_administrator_privileges__Please_open_as_admin.
call fcn.14009dc00
lea rdx, [0x14009da70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x260]
call fcn.140063b30
mov rax, qword [rbp + 0x260]
mov qword [rbp + 0x260], rax
movabs rcx, 0x7fffffff4d2fa1ff
cmp rax, rcx
je 0x1400a247e
mov edx, 0xff
mov r15d, 1
cmovl r15d, edx
test r15b, r15b
jns 0x1400a247e
mov ecx, 0xb2d05e00
add rcx, rax
mov qword [rbp + 0x260], rcx
jmp 0x1400a248f
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0x260], rax
lea rcx, [rbp + 0x260]
call fcn.140071de0
mov byte [reloc.WS2_32.dll_accept], r12b
jmp 0x1400a3b36
lea rdx, str.Loading...
call fcn.14009dc00
lea rdx, [0x14009da70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140275790]
lea rcx, [rbp + 0x110]
call fcn.140053450
lea rdi, [rbp + 0x110]
mov rdx, qword [rbp + 0x110]
mov rcx, qword [rbp + 0x128]
cmp rcx, 0xf
cmova rdi, rdx
lea rbx, [rbp + 0x110]
cmova rbx, rdx
mov r8, qword [rbp + 0x120]
add rbx, r8
cmp rdi, rbx
je 0x1400a2538
nop dword [rax]
movsx ecx, byte [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov byte [rdi], al
inc rdi
cmp rdi, rbx
jne 0x1400a2510
mov rcx, qword [rbp + 0x128]
mov r8, qword [rbp + 0x120]
mov rdx, qword [rbp + 0x110]
mov rax, rcx
sub rax, r8
mov r14d, select
lea rsi, str.SOFTWARESTOOLA_
cmp rax, r14
jb 0x1400a25d4
lea rax, [r8 + 0x10]
mov qword [rbp + 0x120], rax
lea rdi, [rbp + 0x110]
cmp rcx, 0xf
cmova rdi, rdx
lea rax, [0x1401abf20]
cmp rax, rdi
jbe 0x1400a2595
lea rax, [rdi + r8]
cmp rsi, rax
ja 0x1400a2595
cmp rdi, rsi
ja 0x1400a258d
mov rbx, r12
jmp 0x1400a2598
mov rbx, rdi
sub rbx, rsi
jmp 0x1400a2598
mov rbx, r14
inc r8
lea rcx, [rdi + 0x10]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memmove
mov r8, rbx
mov rdx, rsi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
sub r14, rbx
lea rdx, [rsi + 0x10]
add rdx, rbx
lea rcx, [rdi + rbx]
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0x110]
jmp 0x1400a25f0
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov rdx, r14
lea rcx, [rbp + 0x110]
call fcn.14004e380
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x140], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r12b
lea rcx, [rbp + 0x110]
call fcn.14004d380
lea rcx, [rbp + 0x1a0]
call fcn.1400b1fd0
lea r8, [rbp + 0x130]
cmp qword [rbp + 0x148], 0xf
cmova r8, qword [rbp + 0x130]
mov r9, qword [rbp + 0x140]
add r9, r8
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x1a0]
call fcn.1400b25c0
lea rax, vtable.std::wstring_convert_class_std::codecvt_utf8_wchar_t__1114111__0___wchar_t__class_std::allocator_wchar_t___class_std::allocator_char__.0
mov qword [rbp + 0x1a0], rax
lea rcx, [rbp + 0x1e0]
call fcn.1400aca50
lea rcx, [rbp + 0x1c0]
call fcn.14004d380
mov r15d, 1
mov rcx, qword [rbp + 0x1b8]
test rcx, rcx
je 0x1400a26c6
mov rax, qword [rcx]
call qword [rax + select]
test rax, rax
je 0x1400a26c6
mov rcx, qword [rax]
mov rdi, qword [rcx]
mov edx, r15d
mov rcx, rax
call rdi
lea rdx, [0x1401abf28]
lea rcx, [rbp - 0x80]
call fcn.1400ac8d0
lea r9, [rbp - 0x80]
lea r8, [rbp - 0x60]
lea rcx, [rbp + 0x180]
call fcn.1400b0900
lea rcx, [rbp - 0x80]
call fcn.1400aca50
lea rdx, str.Username
lea rcx, [rbp - 0x80]
call fcn.1400ac8d0
lea r9, [rbp - 0x80]
lea r8, [rbp - 0x60]
lea rcx, [rbp + 0x160]
call fcn.1400b0900
lea rcx, [rbp - 0x80]
call fcn.1400aca50
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov rbx, r12
mov qword [rbp + 0x10], rbx
mov r14d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x18], r14
mov byte [rbp], bl
cmp qword [rbp + 0x190], r12
je 0x1400a27a4
cmp qword [rbp + 0x170], rbx
je 0x1400a27a4
lea r8, [rbp + 0x160]
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x60]
call fcn.1400afc00
lea rcx, [rbp]
cmp rcx, rax
je 0x1400a279a
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r14
mov byte [rax], bl
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r14, xmm0
movq rbx, xmm1
lea rcx, [rsp + 0x60]
call fcn.14004d380
lea rcx, [rbp]
mov rsi, qword [rbp]
cmp r14, 0xf
cmova rcx, rsi
cmp rbx, 4
jne 0x1400a27d1
mov r8, rbx
lea rdx, str.true
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400a30bb
mov dword [rbp + 0x260], 0x30000
mov edx, dword [rbp + 0x260]
mov rcx, qword [0x14027dc78]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
lea rdx, [0x1401abdf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14009dc00
lea rdx, [0x1400acb60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, dword [rbp + 0x260]
mov rcx, qword [0x14027dc78]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
nop
lea rdx, str.Please_enter_your_activation_Key:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14009dc00
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x20], 0
lea rdx, [rbp - 0x20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400acb80
nop
mov dword [rbp + 0x260], 0x30000
mov edx, dword [rbp + 0x260]
mov rcx, qword [0x14027dc78]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
lea rdx, [0x1401abdf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14009dc00
lea rdx, [0x1400acb60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, dword [rbp + 0x260]
mov rcx, qword [0x14027dc78]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
nop
lea rdx, str.Please_enter_your_username:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14009dc00
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], 0
lea rdx, [rbp - 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400acb80
nop
mov dword [rbp + 0x260], 0x30000
mov edx, dword [rbp + 0x260]
mov rcx, qword [0x14027dc78]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
lea rdx, [0x1401abdf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14009dc00
lea rdx, [0x1400acb60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, dword [rbp + 0x260]
mov rcx, qword [0x14027dc78]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
nop
lea rdx, str.Loading...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14009dc00
lea rdx, [0x14009da70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1401abf28]
lea rcx, [rbp - 0x80]
call fcn.1400ac8d0
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 7
cmova rdx, qword [rbp - 0x60]
lea rax, [rbp + 0x260]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov r13d, 7
test eax, eax
je 0x1400a29fb
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], r13
cmova rdx, qword [rbp - 0x60]
mov qword [rsp + 0x40], r12
lea rax, [rbp + 0x260]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1400a2aa5
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov rdx, r13
mov qword [rsp + 0x78], rdx
mov word [rsp + 0x60], r12w
cmp qword [rbp - 0x10], 0
je 0x1400a2c12
lea r8, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova r8, qword [rbp - 0x20]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor edx, edx
mov ecx, 0xfde9
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd r12, eax
test eax, eax
jne 0x1400a2b46
mov rcx, qword [rbp + 0x260]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rsp + 0x78]
cmp rdx, r13
jbe 0x1400a2aa5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a2aa0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a2ca0
call fcn.14016d66c
lea rcx, [rbp - 0x80]
call fcn.1400aca50
lea rdx, str.Username
lea rcx, [rbp - 0x80]
call fcn.1400ac8d0
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], r13
cmova rdx, qword [rbp - 0x60]
lea rax, [rbp + 0x260]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x1400a2ca7
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], r13
cmova rdx, qword [rbp - 0x60]
xor edi, edi
mov qword [rsp + 0x40], rdi
lea rax, [rbp + 0x260]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x1400a2d4e
jmp 0x1400a2ca9
mov rdx, r12
mov r8, qword [rsp + 0x70]
cmp r12, r8
ja 0x1400a2b72
mov qword [rsp + 0x70], rdx
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], r13
cmova rax, qword [rsp + 0x60]
xor r10d, r10d
mov word [rax + r12*2], r10w
jmp 0x1400a2bca
sub rdx, r8
mov rcx, qword [rsp + 0x78]
mov rax, rcx
sub rax, r8
cmp rdx, rax
ja 0x1400a2bbd
lea rax, [rdx + r8]
mov qword [rsp + 0x70], rax
lea r9, [rsp + 0x60]
cmp rcx, r13
cmova r9, qword [rsp + 0x60]
lea rdi, [r9 + r8*2]
xor r10d, r10d
test rdx, rdx
je 0x1400a2bb2
movzx eax, r10w
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], r10w
jmp 0x1400a2bca
mov r9, rdx
lea rcx, [rsp + 0x60]
call fcn.1400b3430
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], r13
cmova rax, qword [rsp + 0x60]
lea r8, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova r8, qword [rbp - 0x20]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rax
xor edx, edx
mov ecx, 0xfde9
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x1400a2a57
mov rdx, qword [rsp + 0x78]
mov eax, dword [rsp + 0x70]
add eax, eax
lea rcx, [rsp + 0x60]
cmp rdx, r13
cmova rcx, qword [rsp + 0x60]
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], r13
cmova rdx, qword [rbp - 0x80]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, r15d
xor r8d, r8d
mov rcx, qword [rbp + 0x260]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x260]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rsp + 0x78]
cmp rdx, r13
jbe 0x1400a2aa5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a2aa0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a2aa0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor edi, edi
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], r13
mov word [rsp + 0x60], di
cmp qword [rbp - 0x30], 0
je 0x1400a2e7f
lea r8, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r8, qword [rbp - 0x40]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
xor edx, edx
mov ecx, 0xfde9
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd r12, eax
test eax, eax
jne 0x1400a2db6
mov rcx, qword [rbp + 0x260]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rsp + 0x78]
cmp rdx, r13
jbe 0x1400a2d4e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a2d49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a2f10
call fcn.14016d66c
lea rcx, [rbp - 0x80]
call fcn.1400aca50
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x80]
call fcn.1400afc00
mov rdi, rax
lea rax, [rbp]
cmp rax, rdi
je 0x1400a2f5a
cmp r14, 0xf
jbe 0x1400a2f1f
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400a2f17
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a2f17
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r12
mov r8, qword [rsp + 0x70]
cmp r12, r8
ja 0x1400a2ddf
mov qword [rsp + 0x70], rdx
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], r13
cmova rax, qword [rsp + 0x60]
mov word [rax + r12*2], di
jmp 0x1400a2e37
sub rdx, r8
mov rcx, qword [rsp + 0x78]
mov rax, rcx
sub rax, r8
cmp rdx, rax
ja 0x1400a2e2a
lea rax, [rdx + r8]
mov qword [rsp + 0x70], rax
lea r9, [rsp + 0x60]
cmp rcx, r13
cmova r9, qword [rsp + 0x60]
lea rdi, [r9 + r8*2]
xor r10d, r10d
test rdx, rdx
je 0x1400a2e1f
movzx eax, r10w
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], r10w
jmp 0x1400a2e37
mov r9, rdx
lea rcx, [rsp + 0x60]
call fcn.1400b3430
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], r13
cmova rax, qword [rsp + 0x60]
lea r8, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r8, qword [rbp - 0x40]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rax
xor edx, edx
mov ecx, 0xfde9
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x1400a2d00
mov r13, qword [rsp + 0x78]
mov eax, dword [rsp + 0x70]
add eax, eax
lea rcx, [rsp + 0x60]
cmp r13, 7
cmova rcx, qword [rsp + 0x60]
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova rdx, qword [rbp - 0x80]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
mov r9d, r15d
xor r8d, r8d
mov rcx, qword [rbp + 0x260]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x260]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x1400a2d4e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a2d49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a2d49
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.14016d66c
movups xmm2, xmmword [rdi]
movups xmmword [rbp], xmm2
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp + 0x10], xmm1
xor r12d, r12d
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r14, xmm0
movq rbx, xmm1
movq rsi, xmm2
jmp 0x1400a2f5d
xor r12d, r12d
lea rcx, [rbp - 0x80]
call fcn.14004d380
lea rcx, [rbp]
cmp r14, 0xf
cmova rcx, rsi
cmp rbx, 8
jne 0x1400a3036
mov r8, rbx
lea rdx, str.mismatch
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400a3036
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.1400b0380
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x80]
call fcn.1400afc00
mov rdi, rax
lea rax, [rbp]
cmp rax, rdi
je 0x1400a302d
cmp r14, 0xf
jbe 0x1400a2ff7
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400a2fef
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a2fef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.14016d66c
movups xmm2, xmmword [rdi]
movups xmmword [rbp], xmm2
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r14, xmm0
movq rbx, xmm1
movq rsi, xmm2
lea rcx, [rbp - 0x80]
call fcn.14004d380
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400a306d
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a3068
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a30af
call fcn.14016d66c
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400a30bb
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a30b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a30b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14016d66c
call fcn.1400a1f10
lea rcx, [rbp]
cmp r14, 0xf
cmova rcx, rsi
cmp rbx, 4
jne 0x1400a3c80
mov r8, rbx
lea rdx, str.true
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400a3c80
lea rdx, str.Username
lea rcx, [rbp - 0x80]
call fcn.1400ac8d0
lea r9, [rbp - 0x80]
lea r8, [rbp - 0x60]
lea rcx, [rbp - 0x20]
call fcn.1400b0900
mov rdx, rax
lea rbx, [0x140275eb8]
mov rcx, rbx
call fcn.1400533c0
lea rcx, [rbp - 0x20]
call fcn.14004d380
lea rcx, [rbp - 0x80]
call fcn.1400aca50
nop
mov dword [rbp + 0x260], 0x30000
mov edx, dword [rbp + 0x260]
mov rcx, qword [0x14027dc78]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
lea rdx, [0x1401abdf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14009dc00
lea rdx, [0x1400acb60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, dword [rbp + 0x260]
mov rcx, qword [0x14027dc78]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
nop
lea rdx, str.Welcome_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14009dc00
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rbx, qword [0x140275eb8]
mov r8, qword [0x140275ec8]
mov rdx, rbx
mov rcx, rax
call fcn.1400720d0
lea rdx, [0x1401abfb4]
mov rcx, rax
call fcn.14009dc00
lea rdx, [0x14009da70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x260]
call fcn.140063b30
mov rax, qword [rbp + 0x260]
mov qword [rbp + 0x260], rax
movabs rdi, 0x7fffffffa697d0ff
cmp rax, rdi
je 0x1400a321b
mov ecx, r15d
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x1400a321b
add rax, 0x59682f00
jmp 0x1400a3225
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0x260], rax
lea rcx, [rbp + 0x260]
call fcn.140071de0
mov byte [0x14027d1a5], 1
call fcn.140052350
mov ecx, 8
call fcn.14016d318
lea rcx, [0x1400a3ef0]
mov qword [rax], rcx
lea rcx, [rbp + 0x108]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x100], rax
test rax, rax
je 0x1400a3c6d
cmp dword [rbp + 0x108], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x1400a4e50]
mov qword [rax], rcx
lea rcx, [rbp + 0xf8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xf0], rax
test rax, rax
je 0x1400a3c50
cmp dword [rbp + 0xf8], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x1400a6e60]
mov qword [rax], rcx
lea rcx, [rbp + 0xe8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x1400a3c3d
cmp dword [rbp + 0xe8], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x1400a7130]
mov qword [rax], rcx
lea rcx, [rbp + 0xd8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x1400a3c2a
cmp dword [rbp + 0xd8], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x1400a7330]
mov qword [rax], rcx
lea rcx, [rbp + 0xc8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xc0], rax
test rax, rax
je 0x1400a3c17
cmp dword [rbp + 0xc8], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x1400a7e50]
mov qword [rax], rcx
lea rcx, [rbp + 0xb8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x1400a3c04
cmp dword [rbp + 0xb8], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xb0], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x1400a8560]
mov qword [rax], rcx
lea rcx, [rbp + 0xa8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x1400a3bf1
cmp dword [rbp + 0xa8], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x140066d10]
mov qword [rax], rcx
lea rcx, [rbp + 0x98]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x90], rax
test rax, rax
je 0x1400a3bde
cmp dword [rbp + 0x98], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x90], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x1400a89f0]
mov qword [rax], rcx
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x80], rax
test rax, rax
je 0x1400a3bcb
cmp dword [rbp + 0x88], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x80], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x1400a8e80]
mov qword [rax], rcx
lea rcx, [rbp + 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x70], rax
test rax, rax
je 0x1400a3bbb
cmp dword [rbp + 0x78], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x70], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x1400aa660]
mov qword [rax], rcx
lea rcx, [rbp + 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x60], rax
test rax, rax
je 0x1400a3bab
cmp dword [rbp + 0x68], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x60], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x1400a9860]
mov qword [rax], rcx
lea rcx, [rbp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x1400a3b9b
cmp dword [rbp + 0x58], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x50], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x140069eb0]
mov qword [rax], rcx
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x1400a3b8b
cmp dword [rbp + 0x48], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x40], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x1400aaec0]
mov qword [rax], rcx
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x1400a3b7b
cmp dword [rbp + 0x38], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x30], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x1400ac3f0]
mov qword [rax], rcx
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x1400a3b6b
cmp dword [rbp + 0x28], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
mov ecx, 8
call fcn.14016d318
lea rcx, [0x1400abbc0]
mov qword [rax], rcx
lea rcx, [rbp + 0x158]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x1400add00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x150], rax
test rax, rax
je 0x1400a3b58
cmp dword [rbp + 0x158], 0
je 0x1400a3c63
movaps xmm0, xmmword [rbp + 0x150]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400a3c63
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x150], xmm0
cmp dword [rbp + 0x28], eax
jne 0x1400a3b51
cmp dword [rbp + 0x38], eax
jne 0x1400a3b51
cmp dword [rbp + 0x48], eax
jne 0x1400a3b51
cmp dword [rbp + 0x58], eax
jne 0x1400a3b51
cmp dword [rbp + 0x68], eax
jne 0x1400a3b51
cmp dword [rbp + 0x78], eax
jne 0x1400a3b51
cmp dword [rbp + 0x88], eax
jne 0x1400a3b51
cmp dword [rbp + 0x98], eax
jne 0x1400a3b51
cmp dword [rbp + 0xa8], eax
jne 0x1400a3b51
cmp dword [rbp + 0xb8], eax
jne 0x1400a3b51
cmp dword [rbp + 0xc8], eax
jne 0x1400a3b51
cmp dword [rbp + 0xd8], eax
jne 0x1400a3b51
cmp dword [rbp + 0xe8], eax
jne 0x1400a3b51
cmp dword [rbp + 0xf8], eax
jne 0x1400a3b51
cmp dword [rbp + 0x108], eax
jne 0x1400a3b51
cmp r14, 0xf
jbe 0x1400a3ad3
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400a3acb
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a3ee5
mov rcx, rsi
call fcn.14016d66c
lea rcx, [rbp + 0x160]
call fcn.14004d380
lea rcx, [rbp + 0x180]
call fcn.14004d380
lea rcx, [rbp - 0x60]
call fcn.1400aca50
mov rdx, qword [rbp + 0x148]
cmp rdx, 0xf
jbe 0x1400a3b36
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a3b30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a3ee5
call fcn.14016d66c
nop
mov rbx, qword [rsp + 0x378]
add rsp, 0x320
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov dword [rbp + 0x158], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0x28], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0x38], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0x48], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0x58], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0x68], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0x78], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0x88], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0x98], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0xa8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0xb8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0xc8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0xd8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0xe8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0xf8], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0x108], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x260], 0x30000
mov edx, dword [rbp + 0x260]
mov rcx, qword [0x14027dc78]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
lea rdx, [0x1401abdf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14009dc00
lea rdx, [0x1400acb60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, dword [rbp + 0x260]
mov rcx, qword [0x14027dc78]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
nop
lea rdx, str.Invalid_license_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14009dc00
lea rdx, [0x14009da70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x260]
call fcn.140063b30
mov rax, qword [rbp + 0x260]
mov qword [rbp + 0x260], rax
movabs rcx, 0x7fffffff4d2fa1ff
cmp rax, rcx
je 0x1400a3d3f
mov edx, 0xff
cmovl r15d, edx
test r15b, r15b
jns 0x1400a3d3f
mov ecx, 0xb2d05e00
add rcx, rax
mov qword [rbp + 0x260], rcx
jmp 0x1400a3d50
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0x260], rax
lea rcx, [rbp + 0x260]
call fcn.140071de0
lea rdx, [0x1401abf28]
lea rcx, [rbp - 0x80]
call fcn.1400ac8d0
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 7
cmova rdx, qword [rbp - 0x60]
lea rax, [rbp + 0x260]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400a3dc8
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova rdx, qword [rbp - 0x80]
mov rcx, qword [rbp + 0x260]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov rcx, qword [rbp + 0x260]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp - 0x80]
call fcn.1400aca50
lea rdx, str.Username
lea rcx, [rbp - 0x80]
call fcn.1400ac8d0
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 7
cmova rdx, qword [rbp - 0x60]
lea rax, [rbp + 0x260]
mov qword [rsp + 0x20], rax
mov r9d, 0x20006
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1400a3e3d
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova rdx, qword [rbp - 0x80]
mov rcx, qword [rbp + 0x260]
call qword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov rcx, qword [rbp + 0x260]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, [rbp - 0x80]
call fcn.1400aca50
mov byte [reloc.WS2_32.dll_accept], 0
cmp r14, 0xf
jbe 0x1400a3e80
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400a3e78
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a3ee5
mov rcx, rsi
call fcn.14016d66c
lea rcx, [rbp + 0x160]
call fcn.14004d380
lea rcx, [rbp + 0x180]
call fcn.14004d380
lea rcx, [rbp - 0x60]
call fcn.1400aca50
mov rdx, qword [rbp + 0x148]
cmp rdx, 0xf
jbe 0x1400a3b36
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a3b30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a3b30
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3