Function at 0x1402114e0
Capabilities:
Set registry value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov r15, qword [0x1404e35f0]
xorps xmm0, xmm0
mov r12, qword [0x1404e35f8]
movabs rsi, 0x71e7ab8c840b536d
mov qword [rbp + 0x67], 0
movabs r13, 0x732369b15b9f03f9
movzx edx, byte [rbp + 0x67]
mov r14, 0xffffffffffffffff
movups xmmword [rbp + 0x19], xmm0
mov dword [rbp + 7], 0x33c335db
mov dword [rbp + 0xb], 0xcfc731c0
mov dword [rbp + 0xf], 0xcb40cd43
mov dword [rbp + 0x13], 0xc746c931
mov word [rbp + 0x17], 0xc5c6
mov r8, r12
mov r9, r15
nop dword [rax + rax]
xor r10d, r10d
cmp r10, 0x22
jae 0x140212075
movzx r11d, byte [rbp + r10 + 7]
mov ebx, r11d
movzx edi, r11b
nop word [rax + rax]
cmp r8, r10
ja 0x14021206c
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1402115b7
lea rdx, [r10 + r13]
movzx eax, bl
and al, dl
add al, al
sub dl, al
add dl, 0x31
add dl, r11b
jmp 0x1402115e3
je 0x140211ffe
inc rax
cmp r8, rax
je 0x140211fd1
lea rax, [r9 + 3]
cmp r8, rax
je 0x140211fa5
lea rax, [r9 + 7]
cmp r8, rax
je 0x140211f85
movzx edi, r11b
cmp r9, r10
ja 0x140212063
lea rax, [r9 + 3]
cmp r8, rax
jae 0x140211611
lea rdx, [r10 + rsi]
movzx eax, bl
and al, dl
movzx ecx, dil
add al, al
add dl, 5
sub cl, al
add dl, cl
jmp 0x140211640
lea rax, [r9 + 1]
cmp r8, rax
je 0x140211f49
inc rax
cmp r8, rax
je 0x140211f29
lea rax, [r9 + 5]
cmp r8, rax
je 0x140211efd
nop word [rax + rax]
lea rax, [r9 + r8]
cmp rax, r10
jbe 0x140211ba0
nop dword [rax]
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x140211b83
lea rax, [r9 + 1]
cmp r8, rax
je 0x140211b5d
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x140211b3d
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x140211b25
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x140211af9
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x140211ad0
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x140211ab3
lea rax, [r9 + 9]
cmp r8, rax
je 0x140211a99
lea rax, [r9 + 5]
cmp r8, rax
je 0x140211a6d
lea rax, [r9 + 2]
cmp r8, rax
je 0x140211650
lea r8, [r9 + 0x61]
lea r9, [r8 + 0x5a]
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x140212047
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x14021202b
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x140211837
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x14021181d
lea rax, [r9 + 6]
cmp r8, rax
jb 0x140211803
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x140211a26
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x1402119e3
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x1402119a9
lea rcx, [r9 + 0x10]
cmp r8, rcx
jb 0x140211987
lea rax, [r9 + 8]
cmp r8, rax
jb 0x140211650
lea r9, [rcx + 4]
mov r8, rcx
lea rax, [r9 + 0x41]
cmp rcx, rax
ja 0x14021195b
lea rax, [r9 + 0x1000]
cmp rcx, rax
ja 0x14021193e
lea rax, [r9 + 0x200]
cmp rcx, rax
ja 0x140211924
lea rax, [r9 + 0x42]
cmp rcx, rax
ja 0x1402118f8
lea rax, [r9 + 0x20]
cmp rcx, rax
ja 0x1402118cc
lea rax, [r9 + 9]
cmp rcx, rax
ja 0x1402118b4
lea rax, [r9 + 5]
cmp rcx, rax
ja 0x140211891
lea rax, [r9 + 2]
cmp rcx, rax
ja 0x14021186e
lea rax, [r9 + 0x5a]
cmp rcx, rax
ja 0x140211851
lea rax, [r9 + 0x61]
cmp rcx, rax
ja 0x140211650
lea r8, [r9 + 0x64]
lea r9, [r8 + 0xa]
jmp 0x140211650
lea ecx, [r10 + 0x33]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x65
jmp 0x140211640
lea ecx, [r10 + 0x41]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x39
jmp 0x1402115e7
lea ecx, [r10 + 0x4f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x29
jmp 0x140211590
lea edx, [r10 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140211f5e
lea ecx, [r10 + 0x76]
inc r9
movzx eax, cl
dec r10
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x3a
inc r10
jmp 0x140211573
lea edx, [r10 - 0x7c]
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movzx eax, dl
dec r10
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
inc r10
jmp 0x140211573
lea edx, [r10 - 0x6e]
mov ecx, 1
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
jmp 0x140211e53
lea ecx, [r10 - 0x60]
add r8, r9
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
mov rcx, r14
sub dl, 0x60
movzx eax, dl
sub rcx, rax
add r10, rcx
inc r10
jmp 0x140211573
lea edx, [r10 - 0x52]
mov ecx, Ordinal_33
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
mov rcx, r14
add dl, r11b
movzx eax, dl
sub rcx, rax
add r10, rcx
inc r10
jmp 0x140211573
lea ecx, [r10 - 0x44]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x24
jmp 0x140211e9f
lea edx, [r10 - 0x36]
mov ecx, 0x3d
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140211ec4
lea edx, [r10 - 0x28]
mov ecx, ntohl
movzx eax, dl
and al, r11b
sub cl, al
movzx eax, byte [rbp + r10 + 7]
add cl, cl
add rax, r9
add dl, cl
add r10, rax
add dl, r11b
inc r10
jmp 0x140211573
lea ecx, [r10 - 5]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x23
mov byte [rbp + r10 + 7], dl
inc r10
jmp 0x140211573
lea ecx, [r10 + 9]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x3f
cmp r9, 0x2a
jb 0x14021199c
lea ecx, [r10 + 0x36]
mov edx, 3
movzx eax, cl
and al, r11b
sub dl, al
add dl, dl
add dl, cl
add dl, r11b
add dl, dl
jmp 0x140211f5e
lea ecx, [r10 + 0x17]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x5f
cmp r8, 0x20
jae 0x140211e3e
lea rax, [r9 + 0x42]
cmp r8, rax
jbe 0x140211d45
lea ecx, [r10 - 0x3e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x4e
jmp 0x1402119be
lea ecx, [r10 + 0x25]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 3
lea rax, [r9 + r8]
cmp rax, 6
je 0x140211e8a
lea rax, [r9 + 0x2a]
cmp r8, rax
jbe 0x140211c9d
lea ecx, [r10 + 0x55]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x53
jmp 0x1402119f8
lea edx, [r10 - 0x72]
mov ecx, reloc.WS2_32.dll_ntohs
movzx eax, dl
and al, r11b
sub cl, al
movzx eax, byte [rbp + r10 + 7]
add cl, cl
add rax, r9
add dl, cl
add r10, rax
add dl, r11b
inc r10
jmp 0x140211573
lea ecx, [r10 - 0x64]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x44
jmp 0x140211ec4
lea edx, [r10 - 0x56]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140211e9f
lea ecx, [r10 - 0x48]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
mov rcx, r14
sub dl, 8
movzx eax, dl
sub rcx, rax
add r10, rcx
inc r10
jmp 0x140211573
lea ecx, [r10 - 0x3a]
add r8, r9
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
mov rcx, r14
sub dl, 0x6a
movzx eax, dl
sub rcx, rax
add r10, rcx
inc r10
jmp 0x140211573
lea edx, [r10 - 0x2c]
mov ecx, reloc.WLDAP32.dll_Ordinal_26
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
jmp 0x140211e53
lea ecx, [r10 - 0x1e]
dec r10
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x2e
inc r10
jmp 0x140211573
lea edx, [r10 - 0x10]
mov ecx, Ordinal_60
movzx eax, dl
inc r9
and al, r11b
dec r10
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
inc r10
jmp 0x140211573
lea edx, [r10 - 2]
mov ecx, 7
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140211f5e
lea rax, [r9 + 0x42]
cmp r8, rax
jae 0x140211bc3
lea ecx, [r10 - 7]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x31
jmp 0x140211a3b
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x140211bf8
lea edx, [r10 - 0x26]
mov ecx, 5
movzx eax, dl
and al, r11b
sub cl, al
movzx eax, byte [rbp + r10 + 7]
add cl, cl
add rax, r9
add dl, cl
add r10, rax
add dl, r11b
inc r10
jmp 0x140211573
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140211c1b
lea ecx, [r10 - 0x42]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x32
jmp 0x140211e9f
lea rax, [rcx + 1]
cmp r8, rax
jne 0x140211c50
lea edx, [r10 - 0x50]
mov ecx, Ordinal_27
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
mov rcx, r14
add dl, r11b
movzx eax, dl
sub rcx, rax
add r10, rcx
inc r10
jmp 0x140211573
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140211c73
lea ecx, [r10 - 0x6c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0xc
jmp 0x140211e58
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140211a3b
lea edx, [r10 + 0x6a]
mov ecx, reloc.WS2_32.dll_listen
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140211f5e
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x140211cc0
lea ecx, [r10 + 0x47]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0xf
jmp 0x140211f5e
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140211ce9
lea ecx, [r10 + 0x2b]
dec r10
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x2d
inc r10
jmp 0x140211573
lea rax, [rcx + 1]
cmp r8, rax
jne 0x140211d1e
lea ecx, [r10 + 0xf]
add r8, r9
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
mov rcx, r14
sub dl, 0x69
movzx eax, dl
sub rcx, rax
add r10, rcx
inc r10
jmp 0x140211573
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1402119f8
lea ecx, [r10 - 0xd]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x5b
jmp 0x140211e9f
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140211d7a
lea edx, [r10 - 0x4c]
mov ecx, 0xa
movzx eax, dl
and al, r11b
sub cl, al
movzx eax, byte [rbp + r10 + 7]
add cl, cl
add rax, r9
add dl, cl
add r10, rax
add dl, r11b
inc r10
jmp 0x140211573
inc rax
cmp r8, rax
jne 0x140211d9f
lea edx, [r10 - 0x5a]
mov ecx, Ordinal_60
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140211ec4
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140211dc2
lea ecx, [r10 - 0x68]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x28
jmp 0x140211e9f
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140211de2
lea ecx, [r10 + 0x6e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 2
jmp 0x140211e58
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140211e0e
lea edx, [r10 + 0x60]
mov ecx, Ordinal_50
movzx eax, dl
dec r10
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
inc r10
jmp 0x140211573
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1402119be
lea ecx, [r10 + 0x52]
inc r9
movzx eax, cl
dec r10
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x3e
inc r10
jmp 0x140211573
lea edx, [r10 + 0x28]
movzx ecx, r11b
movzx eax, dl
and al, r11b
add al, al
sub cl, al
sub dl, 0x18
add dl, cl
add dl, r11b
lea ecx, [r10 + 0x21]
add r8, r9
movzx eax, cl
and al, r11b
add al, al
sub cl, al
movzx eax, dl
add cl, 0x19
add cl, r11b
add cl, dl
mov byte [rbp + r10 + 7], cl
mov rcx, r14
sub rcx, rax
add r10, rcx
inc r10
jmp 0x140211573
lea edx, [r10 + 0x1a]
mov ecx, Ordinal_41
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
lea ecx, [r10 + 0x13]
inc r9
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, 0x7b
add cl, r11b
movzx eax, cl
mov byte [rbp + r10 + 7], al
add rax, r9
sub r10, rax
lea ecx, [r10 + 0xc]
inc r8
movzx eax, cl
and al, r11b
add al, al
sub cl, al
mov rax, r14
sub rax, r8
sub cl, 0x54
add cl, r11b
mov byte [rbp + r10 + 7], cl
add r10, rax
movzx eax, byte [rbp + r10 + 7]
add rax, r9
add r10, rax
inc r10
jmp 0x140211573
lea ecx, [r10 + 0x27]
add r8, r9
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
mov rcx, r14
sub dl, 0x11
movzx eax, dl
sub rcx, rax
add r10, rcx
inc r10
jmp 0x140211573
lea ecx, [r10 + 0x43]
dec r10
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x2b
inc r10
jmp 0x140211573
lea ecx, [r10 + 0x5f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x67
lea ecx, [r10 + 0x2f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x49
add cl, r11b
mov byte [rbp + r10 + 7], cl
inc r9
dec r10
inc r10
jmp 0x140211573
lea ecx, [r10 - 0x69]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x21
dec r10
inc r10
jmp 0x140211573
lea ecx, [r10 - 0x4d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x1b
movzx eax, dl
mov rcx, r14
sub rcx, rax
add r8, r9
add r10, rcx
inc r10
jmp 0x140211573
movabs rax, 0xc3eb73c389723c1
add rax, r10
and bl, al
add bl, bl
sub al, bl
lea edx, [rdi + rax]
sub dl, 0x47
movzx eax, dl
mov rcx, r14
sub rcx, rax
add r10, rcx
inc r10
jmp 0x140211573
movabs rax, 0x596a3d1412dd0beb
add rax, r10
and bl, al
add bl, bl
sub al, bl
lea edx, [rdi + rax]
sub dl, 0x6d
movzx eax, byte [rbp + r10 + 7]
add rax, r9
add r10, rax
inc r10
jmp 0x140211573
add r10b, 0x5d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x75
jmp 0x140211570
add r10b, 0x6b
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x13
jmp 0x140211562
lea rsi, [rbp + 0x156ab53]
jmp 0x140212079
lea rsi, [rbp + 0xf5af4c]
jmp 0x140212079
lea rsi, [rbp + 7]
movzx r10d, byte [rbp + 0x67]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp - 5], rax
movups xmmword [rbp - 0x15], xmm0
mov word [rbp + 3], ax
movabs r13, 0x58e2eecf9717ead7
mov byte [rbp + 5], al
mov dword [rbp - 0x19], 0x3b3839c6
mov rax, r12
mov r9, r15
nop dword [rax]
xor ebx, ebx
cmp rbx, 0x1f
jae 0x1402128e9
movzx r11d, byte [rbp + rbx - 0x19]
mov r8d, r11d
cmp rax, rbx
ja 0x1402128e0
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x1402120f3
lea rdx, [rbx + r13]
movzx ecx, r8b
and cl, dl
movzx r10d, r11b
add cl, cl
sub r10b, cl
add r10b, 0x1f
add r10b, dl
jmp 0x140212112
je 0x140212870
inc rcx
cmp rax, rcx
je 0x140212812
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x1402127bd
cmp r9, rbx
ja 0x1402128d7
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jae 0x140212140
lea r10d, [rbx - 0x5d]
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x75
add r10b, r11b
jmp 0x140212173
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14021277a
inc rcx
cmp rax, rcx
je 0x140212756
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14021272c
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1402126e3
lea rcx, [rax + r9]
cmp rcx, rbx
jbe 0x14021231d
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x1402122ff
lea rcx, [r9 + 0x10]
cmp rax, rcx
je 0x1402122db
lea rdx, [r9 + 0x40]
cmp rax, rdx
je 0x1402122bb
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x1402122a1
lea r9, [rdx + 0x10]
mov rax, rdx
lea rcx, [r9 + 0x80]
cmp rdx, rcx
jb 0x1402128bc
lea rcx, [r9 + 0x10]
cmp rdx, rcx
jb 0x1402128a1
lea rcx, [r9 + 0x40]
cmp rdx, rcx
jb 0x14021221f
mov rax, rcx
lea r9, [rcx + 0x400]
lea rcx, [r9 + 0x80]
cmp rax, rcx
ja 0x140212273
lea rcx, [r9 + 0x400]
cmp rax, rcx
ja 0x140212257
lea rcx, [r9 + 0x40]
cmp rax, rcx
ja 0x14021223b
lea rax, [r9 + 0x7a]
lea r9, [rax + 0x400]
jmp 0x140212180
lea r10d, [rbx + 0x61]
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
add r10b, 0x59
add r10b, r11b
jmp 0x1402120c5
lea r10d, [rbx + 4]
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x1c
add r10b, r11b
jmp 0x1402126fe
lea r10d, [rbx + 0x56]
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x5a
add r10b, r11b
jmp 0x140212833
lea edx, [rbx - 0x58]
mov r10d, gethostname
movzx ecx, dl
and cl, r11b
sub r10b, cl
movzx ecx, byte [rbp + rbx - 0x19]
add r10b, r10b
add rcx, r9
add r10b, dl
add rbx, rcx
add r10b, r11b
inc rbx
jmp 0x1402120b2
lea edx, [rbx + 0x76]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x3a
jmp 0x1402126fe
lea edx, [rbx - 0x42]
dec rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x32
inc rbx
jmp 0x1402120b2
lea edx, [rbx + 0x10]
movzx ecx, r11b
and cl, dl
inc r9
add cl, cl
dec rbx
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x70
inc rbx
jmp 0x1402120b2
mov edx, reloc.WLDAP32.dll_Ordinal_41
lea r8d, [rbx + 0x62]
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x140212792
lea rcx, [r9 + 0x41]
cmp rax, rcx
jae 0x1402123e2
lea r8d, [rbx - 0x29]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
add r10b, 0x1f
add r10b, r8b
lea rcx, [rax + r9]
cmp rcx, 4
je 0x1402126c6
lea rdi, [r9 + 1]
cmp rax, rdi
jbe 0x1402124c5
lea r8d, [rbx + 0x3b]
movzx ecx, r11b
and cl, r8b
lea rdx, [rdi + 1]
add cl, cl
add r8b, 0x63
movzx r10d, r11b
sub r10b, cl
add r10b, r8b
lea r8, [r9 + 4]
cmp rax, 4
jae 0x1402126a0
lea rcx, [r9 + 0x10]
cmp rax, rcx
jbe 0x1402125c2
lea r8d, [rbx - 0x22]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x12
add r10b, r8b
cmp r9, 0x40
jb 0x140212693
lea r8d, [rbx - 0x56]
movzx edx, r11b
movzx ecx, r11b
and cl, r8b
add cl, cl
sub dl, cl
add dl, r8b
lea r10d, [rdx*2 - 0x4c]
jmp 0x140212795
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14021241a
lea r8d, [rbx + 0x46]
movzx ecx, r11b
and cl, r8b
mov edx, ntohl
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x19]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
inc rbx
jmp 0x1402120b2
inc rcx
cmp rax, rcx
jne 0x140212443
lea r8d, [rbx - 0xc]
mov edx, Ordinal_45
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x140212833
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14021246d
lea r8d, [rbx - 2]
mov edx, 7
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x1402127fa
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x140212497
mov edx, Ordinal_41
lea r8d, [rbx - 0x54]
movzx ecx, r11b
movzx edi, bl
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x1402127d8
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x140212345
lea edx, [rbx + 0x5a]
movzx ecx, r11b
and cl, dl
dec rbx
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x76
inc rbx
jmp 0x1402120b2
jne 0x1402124e4
lea r8d, [rbx - 0x17]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x5f
jmp 0x140212792
lea rdx, [rdi + 1]
cmp rax, rdx
jne 0x14021250e
lea edx, [rbx + 0x45]
movzx ecx, r11b
and cl, dl
dec rbx
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
add r10b, 0x1d
inc rbx
jmp 0x1402120b2
lea r8, [r9 + 4]
cmp rax, r8
jne 0x140212532
lea edx, [rbx - 0x5f]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x67
jmp 0x1402127fa
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x140212566
lea edx, [rbx + 0x4f]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
mov rdx, r14
sub r10b, 0x29
movzx ecx, r10b
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x1402120b2
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14021258c
lea r8d, [rbx - 3]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
add r10b, 0x15
jmp 0x1402126fb
lea rcx, [r9 + 8]
cmp rax, rcx
jne 0x140212383
lea edx, [rbx + 0x59]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rbx - 0x19]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + r11]
sub r10b, 0x6f
inc rbx
jmp 0x1402120b2
cmp rax, rdi
jne 0x1402125f6
lea r8d, [rbx - 0x74]
movzx ecx, r11b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_22
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x19]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
inc rbx
jmp 0x1402120b2
cmp rax, rdx
jne 0x140212618
lea r8d, [rbx - 0x18]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x58
jmp 0x1402126fb
cmp rax, r8
jne 0x14021263e
lea r8d, [rbx + 0x44]
mov edx, reloc.WS2_32.dll_select
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x1402127fa
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x140212668
mov edx, Ordinal_50
lea r8d, [rbx - 0xe]
movzx ecx, r11b
movzx edi, bl
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x1402127d8
lea rcx, [r9 + 8]
cmp rax, rcx
jne 0x1402123b5
mov edx, reloc.WS2_32.dll_ntohl
lea r8d, [rbx - 4]
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x140212792
mov byte [rbp + rbx - 0x19], r10b
inc rbx
jmp 0x1402120b2
lea r8d, [rbx + 0x58]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
movzx edi, bl
sub r10b, cl
sub r10b, 0x68
add r10b, r8b
add r10b, r11b
jmp 0x1402127db
lea r8d, [rbx + 6]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
sub r10b, r11b
sub r10b, 0x2a
jmp 0x1402126fb
lea r8d, [rbx + 0x65]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
add r10b, 0x3d
add r10b, r8b
lea r8d, [rbx - 0x23]
movzx ecx, r11b
and cl, r8b
inc r9
add cl, cl
movzx edx, r11b
sub dl, cl
sub dl, 0xb
add dl, r8b
movzx ecx, dl
mov byte [rbp + rbx - 0x19], cl
add rcx, r9
sub rbx, rcx
jmp 0x140212833
lea edx, [rbx - 0x49]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
mov rdx, r14
dec r10b
movzx ecx, r10b
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x1402120b2
lea edx, [rbx - 1]
movzx ecx, r11b
and cl, dl
inc r9
add cl, cl
dec rbx
sub r11b, cl
lea r10d, [rdx + r11]
add r10b, 7
inc rbx
jmp 0x1402120b2
lea r8d, [rbx + 0x51]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x37
add r10b, r8b
movzx ecx, r11b
lea edx, [rbx - 0x7f]
and cl, dl
add cl, cl
sub r11b, cl
add r11b, 0x79
add r11b, dl
mov byte [rbp + rbx - 0x19], r11b
inc r9
dec rbx
inc rbx
jmp 0x1402120b2
movzx edi, bl
movzx ecx, r11b
movzx r10d, r11b
lea r8d, [rdi - 0x15]
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x6d
add r10b, r8b
movzx ecx, r11b
add dil, 0x2f
and cl, dil
add cl, cl
sub r11b, cl
sub r11b, 0x49
add r11b, dil
add r11b, r10b
mov byte [rbp + rbx - 0x19], r11b
add rax, r9
movzx ecx, r10b
mov rdx, r14
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x1402120b2
movabs rdx, 0xbc6eaa0df3779633
movzx r10d, r11b
add rdx, rbx
and r8b, dl
add r8b, r8b
sub r10b, r8b
sub r10b, 0x65
add r10b, dl
lea r8d, [rbx - 0x4c]
movzx ecx, r11b
and cl, r8b
inc rax
mov edx, 0xa
sub dl, cl
mov rcx, r14
sub rcx, rax
add dl, dl
add dl, r11b
add dl, r8b
mov byte [rbp + rbx - 0x19], dl
add rbx, rcx
movzx ecx, byte [rbp + rbx - 0x19]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1402120b2
movabs rcx, 0xaa8cc6ec547c085
add rcx, rbx
and r8b, cl
add r8b, r8b
sub r11b, r8b
lea r10d, [rcx + r11]
add r10b, 0x5d
movzx ecx, byte [rbp + rbx - 0x19]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1402120b2
sub bl, 0x4d
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
add r10b, 0x1b
jmp 0x1402120b0
add bl, 5
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x23
jmp 0x1402120a3
lea rbx, [rbp + 0x151c85b]
jmp 0x1402128ed
lea rbx, [rbp + 0x169b332]
jmp 0x1402128ed
lea rbx, [rbp - 0x19]
xor ecx, ecx
lea rax, [rbp + 0x67]
mov qword [rsp + 0x40], rcx
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersion
mov qword [rsp + 0x38], rax
xor r9d, r9d
mov qword [rsp + 0x30], rcx
xor r8d, r8d
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], ecx
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x14021296e
nop dword [rax]
cmp word [rbx + r14*2 + 2], 0
lea r14, [r14 + 1]
jne 0x140212930
mov rcx, qword [rbp + 0x67]
lea eax, [r14*2 + 2]
mov dword [rsp + 0x28], eax
mov r9d, 1
xor r8d, r8d
mov qword [rsp + 0x20], rbx
mov rdx, rsi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x67]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret