Function at 0x14004a760
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x1401dc800]
xor rax, rsp
mov qword [rbp + 0x18], rax
movzx r8d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp - 0x7a], rax
movups xmmword [rsp + 0x76], xmm0
mov dword [rbp - 0x72], eax
movabs rsi, 0xba2dc1ed23b4097
mov byte [rbp - 0x6e], al
movabs r12, 0x18ef5fd0b4ad7cfb
mov dword [rsp + 0x40], 0xdfd2e2de
movabs r14, 0x89f906521a32dc49
mov dword [rsp + 0x44], 0x202e1ecb
movabs r15, 0x581a46b0b0d7e253
mov dword [rsp + 0x48], 0x36272b3a
movabs r13, 0x263b870f477ce85d
mov dword [rsp + 0x4c], 0x2a263a2b
mov dword [rsp + 0x50], 0x23132629
mov dword [rsp + 0x54], 0x42472036
mov dword [rsp + 0x58], 0xeb5f5642
mov dword [rsp + 0x5c], 0x56495a38
mov dword [rsp + 0x60], 0x5c5d5349
mov dword [rsp + 0x64], 0x670c194f
mov dword [rsp + 0x68], 0x66637475
mov dword [rsp + 0x6c], 0xd46119
mov dword [rsp + 0x70], 0x61616669
mov word [rsp + 0x74], 0xed79
nop dword [rax]
mov rax, qword [0x1402304a8]
mov r9, qword [0x1402304a0]
nop
xor r10d, r10d
cmp r10, 0x53
jae 0x14004b5a7
movzx edi, byte [rsp + r10 + 0x40]
mov r11d, edi
nop word [rax + rax]
mov rbx, r11
cmp rax, r10
ja 0x14004b59e
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14004a8af
lea rdx, [r10 + r12]
mov rcx, rdx
and rcx, r11
imul r8, rcx, 0xfffffffffffffffe
add r8, rdx
add r8, r11
add r8b, 0x23
jmp 0x14004a8f6
je 0x14004b51d
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14004b488
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14004b450
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x14004b429
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004b3ff
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14004b3ae
cmp r9, r10
ja 0x14004b595
lea rcx, [r9 + 0x64]
cmp rax, rcx
jae 0x14004a923
lea r8, [r10 + rsi]
movzx edx, r11b
movzx ecx, r8b
sub r8b, 0x21
and cl, bl
add cl, cl
sub dl, cl
add r8b, dl
jmp 0x14004a960
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14004b38e
inc rcx
cmp rax, rcx
je 0x14004b364
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14004b344
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x14004b314
nop word [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, r10
jbe 0x14004afa2
nop dword [rax]
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x14004af7a
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x14004af49
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x14004af1f
lea rcx, [r9 + 0x10]
cmp rax, rcx
je 0x14004aefb
lea rcx, [r9 + 0x40]
cmp rax, rcx
je 0x14004aed3
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x14004aeab
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x14004ae87
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x14004ae63
lea rcx, [r9 + 0xa]
cmp rax, rcx
je 0x14004ae2c
lea rcx, [r9 + 0x28]
cmp rax, rcx
je 0x14004a970
lea rax, [r9 + 1]
lea r9, [rax + 0x64]
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x14004b571
lea rcx, [r9 + 8]
cmp rax, rcx
jb 0x14004b54d
lea rcx, [r9 + 0x400]
cmp rax, rcx
jb 0x14004ab65
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x14004ab47
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jb 0x14004ab2a
lea rcx, [r9 + 3]
cmp rax, rcx
jb 0x14004adce
lea rcx, [r9 + 6]
cmp rax, rcx
jb 0x14004ad6f
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jb 0x14004ad1a
lea rcx, [r9 + 0x61]
cmp rax, rcx
jb 0x14004aced
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jb 0x14004a970
lea rax, [r9 + 0x40]
lea r9, [rax + 2]
lea rcx, [r9 + 0x80]
cmp rax, rcx
ja 0x14004acb9
lea rcx, [r9 + 0x400]
cmp rax, rcx
ja 0x14004ac91
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x14004ac69
lea rcx, [r9 + 0xa]
cmp rax, rcx
ja 0x14004ac45
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x14004ac21
lea rcx, [r9 + 0x64]
cmp rax, rcx
ja 0x14004abff
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
ja 0x14004abd1
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x14004aba4
lea rcx, [r9 + 9]
cmp rax, rcx
ja 0x14004ab80
lea rcx, [r9 + 0x20]
cmp rax, rcx
ja 0x14004a970
lea rax, [r9 + 0x2a]
lea r9, [rax + 0x42]
jmp 0x14004a970
lea r8, [r10 + r14]
movzx ecx, bl
and cl, r8b
movzx edx, r11b
add cl, cl
inc r8b
sub dl, cl
add r8b, dl
jmp 0x14004a960
lea r8, [r10 + r15]
movzx ecx, bl
and cl, r8b
movzx edx, r11b
add cl, cl
sub r8b, 0x45
sub dl, cl
add r8b, dl
jmp 0x14004a8f6
lea rdx, [r10 + r13]
movzx r8d, r11b
and bl, dl
add bl, bl
sub r8b, bl
add r8b, 0x75
add r8b, dl
jmp 0x14004a880
movabs rdx, 0x5d16e0f691da04b8
add rdx, r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
lea r8d, [rdi + rdx]
sub r8b, 8
jmp 0x14004b3cd
movabs rdx, 0x2b382155287f0ac2
inc r9
add rdx, r10
dec r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
lea r8d, [rdi + rdx]
sub r8b, 0x4e
inc r10
jmp 0x14004a863
movabs r8, 0xf95961b3bf2410cc
mov edx, gethostname
add r8, r10
dec r10
movzx ecx, r8b
and cl, dil
sub dl, cl
add dl, dl
add r8b, dl
add r8b, dil
inc r10
jmp 0x14004a863
movabs r8, 0xc77aa21255c916d6
mov edx, reloc.WS2_32.dll_send
add r8, r10
movzx ecx, r8b
and cl, dil
sub dl, cl
add dl, dl
jmp 0x14004b2ba
movabs rdx, 0x959be270ec6e1ce0
add rdx, r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
lea r8d, [rdi + rdx]
sub r8b, 0x20
jmp 0x14004b46c
movabs rdx, 0x63bd22cf831322ea
add rdx, r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
lea r8d, [rdi + rdx]
sub r8b, 0x66
jmp 0x14004b46f
movabs r8, 0x31de632e19b828f4
mov edx, Ordinal_45
add r8, r10
movzx ecx, r8b
and cl, dil
sub dl, cl
add dl, dl
add r8b, dl
add r8b, dil
jmp 0x14004b4a7
movabs r8, 0xffffa38cb05d2efe
mov edx, 7
add r8, r10
movzx ecx, r8b
and cl, dil
sub dl, cl
add dl, dl
add dl, dil
add r8b, dl
jmp 0x14004b4d5
movzx ecx, dil
movabs rdx, 0xce20e3eb47023508
add rdx, r10
and cl, dl
add cl, cl
sub dil, cl
movzx ecx, byte [rsp + r10 + 0x40]
add rcx, r9
add r10, rcx
lea r8d, [rdx + rdi]
sub r8b, 0x38
inc r10
jmp 0x14004a863
movzx ecx, dil
movabs rdx, 0x517404d7bf9ec421
add rdx, r10
and cl, dl
add cl, cl
sub dil, cl
lea r8d, [rdx + rdi]
add r8b, 0x19
mov byte [rsp + r10 + 0x40], r8b
inc r10
jmp 0x14004a863
movabs r8, 0x1f9545365643ca2b
movzx ecx, dil
add r8, r10
movzx edx, dil
and cl, r8b
add cl, cl
sub dl, cl
sub r8b, 0x2d
add r8b, dl
cmp r9, 0x61
jb 0x14004ad0d
movzx edx, dil
movabs r8, 0xef602d27fd1fcc02
add r8, r10
movzx ecx, dil
and cl, r8b
add cl, cl
sub dl, cl
add dl, r8b
lea r8d, [rdx*2 - 0x1c]
jmp 0x14004b3cd
movabs r8, 0xedb68594ece8d035
movzx ecx, dil
add r8, r10
movzx edx, dil
and cl, r8b
sub r8b, 0x73
add cl, cl
sub dl, cl
add r8b, dl
cmp rax, 0xa
jae 0x14004b298
lea rcx, [r9 + 0x41]
cmp rax, rcx
jbe 0x14004b190
movabs r8, 0xfcacb0d9df920866
movzx ecx, dil
add r8, r10
mov edx, reloc.WLDAP32.dll_Ordinal_27
and cl, r8b
sub dl, cl
add dl, dl
add dl, dil
jmp 0x14004ad3a
movabs rdx, 0xbbd7c5f3838dd63f
add rdx, r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
lea r8d, [rdi + rdx]
add r8b, 0x47
lea rcx, [r9 + rax]
cmp rcx, 0x7a
je 0x14004b2ea
lea rcx, [r9 + 0x20]
cmp rax, rcx
jbe 0x14004b08c
movabs rdx, 0xf109d4bb0d56c7cf
add rdx, r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
lea r8d, [rdi + rdx]
add r8b, 0x57
jmp 0x14004ad92
movabs r8, 0x45d128b8ed63838a
mov edx, Ordinal_30
add r8, r10
movzx ecx, r8b
and cl, dil
sub dl, cl
movzx ecx, byte [rsp + r10 + 0x40]
add dl, dl
add rcx, r9
add r8b, dl
add r10, rcx
add r8b, dil
inc r10
jmp 0x14004a863
movabs rdx, 0x13f2691784088994
add rdx, r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
lea r8d, [rdi + rdx]
sub r8b, 0xc
jmp 0x14004b4d5
movabs rdx, 0xe213a9761aad8f9e
add rdx, r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
lea r8d, [rdi + rdx]
sub r8b, 0x52
jmp 0x14004b4a7
movabs r8, 0xb034e9d4b15295a8
mov edx, 0x34
add r8, r10
movzx ecx, r8b
and cl, dil
sub dl, cl
add dl, dl
add r8b, dl
add r8b, dil
jmp 0x14004b46f
movabs r8, 0x7e562a3347f79bb2
mov edx, reloc.WS2_32.dll_recvfrom
add r8, r10
movzx ecx, r8b
and cl, dil
sub dl, cl
add dl, dl
add r8b, dl
add r8b, dil
jmp 0x14004b46c
movabs rdx, 0x4c776a91de9ca1bc
add rdx, r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
lea r8d, [rdi + rdx]
sub r8b, 0x24
jmp 0x14004b2c0
movabs rdx, 0x1a98aaf07541a7c6
add rdx, r10
dec r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
lea r8d, [rdi + rdx]
sub r8b, 0x6a
inc r10
jmp 0x14004a863
movabs r8, 0xe8b9eb4f0be6add0
mov edx, Ordinal_41
add r8, r10
inc r9
movzx ecx, r8b
dec r10
and cl, dil
sub dl, cl
add dl, dl
add r8b, dl
add r8b, dil
inc r10
jmp 0x14004a863
movabs r8, 0xb6db2bada28bb3da
mov edx, 5
add r8, r10
movzx ecx, r8b
and cl, dil
sub dl, cl
add dl, dl
add r8b, dl
add r8b, dil
jmp 0x14004b3cd
lea rcx, [r9 + 0x40]
cmp rax, rcx
jae 0x14004afc3
lea rcx, [r10 + r12]
and bl, cl
add bl, bl
sub r11b, bl
lea r8d, [rcx + r11]
add r8b, 0x23
jmp 0x14004aded
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x14004afff
movabs rdx, 0x1745b83da476812e
add rdx, r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
movzx ecx, byte [rsp + r10 + 0x40]
add rcx, r9
add r10, rcx
lea r8d, [rdi + rdx]
sub r8b, 0x42
inc r10
jmp 0x14004a863
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004b030
movabs r8, 0x7b033780772c751a
mov edx, Ordinal_41
add r8, r10
movzx ecx, r8b
and cl, dil
sub dl, cl
add dl, dl
add r8b, dl
add r8b, dil
jmp 0x14004b4a7
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x14004b05b
movabs r8, 0x109f7664b33d62fc
mov edx, recv
add r8, r10
movzx ecx, r8b
and cl, dil
sub dl, cl
add dl, dl
jmp 0x14004b2ba
lea rcx, [r9 + 8]
cmp rax, rcx
jne 0x14004aded
movabs rdx, 0xa63bb548ef4e50de
add rdx, r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
lea r8d, [rdi + rdx]
sub r8b, 0x12
jmp 0x14004b3cd
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004b0ba
movabs r8, 0x22e8945c76b1c1c5
movzx ecx, dil
add r8, r10
movzx edx, dil
and cl, r8b
add cl, cl
sub dl, cl
sub r8b, 0x63
jmp 0x14004b3ca
inc rcx
cmp rax, rcx
jne 0x14004b0f0
movzx ecx, dil
movabs rdx, 0x54c753fde00cbbbb
add rdx, r10
inc r9
and cl, dl
dec r10
add cl, cl
sub dil, cl
lea r8d, [rdx + rdi]
sub r8b, 0x1d
inc r10
jmp 0x14004a863
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004b11e
movzx ecx, dil
movabs rdx, 0x1c4252838578a393
add rdx, r10
and cl, dl
add cl, cl
sub dil, cl
lea r8d, [rdx + rdi]
sub r8b, 5
jmp 0x14004b46f
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14004b14f
movabs r8, 0x7fffd1c6582e977f
movzx ecx, dil
add r8, r10
movzx edx, dil
and cl, r8b
sub r8b, 0x79
add cl, cl
sub dl, cl
add r8b, dl
jmp 0x14004b4d5
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x14004ad92
movzx ecx, dil
movabs rdx, 0xb1de9167c1899175
add rdx, r10
and cl, dl
add cl, cl
sub dil, cl
movzx ecx, byte [rsp + r10 + 0x40]
add rcx, r9
add r10, rcx
lea r8d, [rdx + rdi]
sub r8b, 0x33
inc r10
jmp 0x14004a863
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004b1d0
movzx ecx, dil
movabs r8, 0x2e8b707b48ed025c
add r8, r10
mov edx, 0x3e
and cl, r8b
sub dl, cl
movzx ecx, byte [rsp + r10 + 0x40]
add dl, dl
add rcx, r9
add dl, dil
add r10, rcx
add r8b, dl
inc r10
jmp 0x14004a863
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004b1fe
movabs r8, 0x9248efbe1ba2f648
movzx ecx, dil
add r8, r10
mov edx, 4
and cl, r8b
sub dl, cl
add dl, dl
add dl, dil
jmp 0x14004b4a4
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14004b22f
movabs r8, 0x27e52ea257b3e42a
movzx ecx, dil
add r8, r10
movzx edx, dil
and cl, r8b
sub r8b, 0x26
add cl, cl
sub dl, cl
add r8b, dl
jmp 0x14004b2c0
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14004b266
movabs r8, 0x59c3ee43c10ede20
movzx ecx, dil
add r8, r10
mov edx, reloc.WS2_32.dll_recv
and cl, r8b
dec r10
sub dl, cl
add dl, dl
add dl, dil
add r8b, dl
inc r10
jmp 0x14004a863
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14004ad3d
movabs r8, 0xbd816d8693c4d20c
movzx ecx, dil
add r8, r10
movzx edx, dil
and cl, r8b
add cl, cl
sub dl, cl
sub r8b, 0x54
jmp 0x14004b3ca
movabs r8, 0x213eecc9667ac5f8
movzx ecx, dil
add r8, r10
mov edx, Ordinal_30
and cl, r8b
sub dl, cl
add dl, dl
add dl, byte [rsp + r10 + 0x40]
add r8b, dl
add r8b, dil
movabs rdx, 0x3a2e4c9a1b2842f3
add rdx, r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
add dl, 0x5b
add dl, dil
add dl, r8b
mov byte [rsp + r10 + 0x40], dl
jmp 0x14004b46c
movabs r8, 0x531dac6acfd5bfee
movzx ecx, dil
add r8, r10
mov edx, 0x3f
and cl, r8b
sub dl, cl
add dl, dl
sub dl, byte [rsp + r10 + 0x40]
add dl, dil
jmp 0x14004b4a4
movabs rcx, 0xcc7798cb866e0a3d
add rcx, r10
and bl, cl
add bl, bl
sub r11b, bl
lea r8d, [rcx + r11]
movzx ecx, byte [rsp + r10 + 0x40]
add rcx, r9
add r8b, 0x55
add r10, rcx
inc r10
jmp 0x14004a863
movabs rcx, 0x68ba1988b3b81651
add rcx, r10
and bl, cl
add bl, bl
sub cl, bl
lea r8d, [rdi + rcx]
sub r8b, 0x37
jmp 0x14004b4a7
movabs rcx, 0x6f605b61a4f13483
inc r9
add rcx, r10
dec r10
and bl, cl
add bl, bl
sub r11b, bl
lea r8d, [rcx + r11]
add r8b, 0x6b
inc r10
jmp 0x14004a863
movabs rdx, 0x3d819bc03b963a8d
add rdx, r10
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r8d, [rdi + rdx]
add r8b, 0x25
jmp 0x14004b3cd
movabs rdx, 0xd9c41c7d68e046a1
movzx r8d, r11b
add rdx, r10
and bl, dl
add bl, bl
sub r8b, bl
sub r8b, 0x67
add r8b, dl
movzx ecx, dil
movabs rdx, 0x84f8cf8b1cd48fd
add rdx, r10
inc r9
and cl, dl
add cl, cl
sub dil, cl
add dil, 0x15
add dil, dl
mov byte [rsp + r10 + 0x40], dil
dec r10
inc r10
jmp 0x14004a863
movabs rcx, 0xa7e55cdbff854cab
add rcx, r10
and bl, cl
add bl, bl
sub r11b, bl
lea r8d, [rcx + r11]
add r8b, 0x53
inc r9
dec r10
inc r10
jmp 0x14004a863
movabs rcx, 0x76069d3a962a52b5
add rcx, r10
and bl, cl
add bl, bl
sub r11b, bl
lea r8d, [rcx + r11]
add r8b, 0xd
dec r10
inc r10
jmp 0x14004a863
movabs rcx, 0x12491df7c3745ec9
add rcx, r10
and bl, cl
add bl, bl
sub r11b, bl
lea r8d, [rcx + r11]
sub r8b, 0x7f
add rax, r9
movzx ecx, r8b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add r10, rdx
inc r10
jmp 0x14004a863
movabs rdx, 0xae8b9eb4f0be6add
movzx r8d, r11b
add rdx, r10
and bl, dl
add bl, bl
sub r8b, bl
sub r8b, 0xb
add r8b, dl
inc r9
movabs rdx, 0x6c0d0c3b84833ce9
add rdx, r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
sub dl, 0x5f
add dl, dil
movzx ecx, dl
mov byte [rsp + r10 + 0x40], cl
add rcx, r9
sub r10, rcx
movzx ecx, dil
inc rax
movabs rdx, 0x84fc6c0c3930b9e4
add rdx, r10
and cl, dl
add cl, cl
sub dil, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
sub dil, 0x3c
add dil, dl
mov byte [rsp + r10 + 0x40], dil
add r10, rcx
movzx ecx, byte [rsp + r10 + 0x40]
add rcx, r9
add r10, rcx
inc r10
jmp 0x14004a863
movabs rcx, 0x4ace1f721e0876f1
add rcx, r10
and bl, cl
add bl, bl
sub r11b, bl
lea r8d, [rcx + r11]
add r8b, 0x69
movzx ecx, byte [rsp + r10 + 0x40]
add rcx, r9
add r10, rcx
inc r10
jmp 0x14004a863
movabs rdx, 0xf45cc76dde21ee67
add rdx, r10
movzx ecx, dl
and cl, dil
add cl, cl
sub dl, cl
lea r8d, [rdi + rdx]
add r8b, 0x2f
jmp 0x14004a860
movabs rcx, 0xc27e07cc74c6f471
add rcx, r10
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r8d, [rdi + rcx]
sub r8b, 0x17
jmp 0x14004a850
lea rdx, [rbp + 0x14ff7e4]
jmp 0x14004b5ac
lea rdx, [rbp + 0xbd74df]
jmp 0x14004b5ac
lea rdx, [rsp + 0x40]
lea rax, [rbp - 8]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movzx r11d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x44], eax
movups xmmword [rbp - 0x54], xmm0
mov word [rbp - 0x40], ax
movabs rdi, 0xcfffb05b2215d707
mov byte [rbp - 0x3e], al
movabs rsi, 0xff97779cbcaa393
mov dword [rbp - 0x60], 0x98aa8d58
movabs r14, 0xafd6000ef98464b1
mov dword [rbp - 0x5c], 0x9c90a894
movabs r15, 0x7fd0b61c3cf7ac28
mov dword [rbp - 0x58], 0x238486aa
movabs r12, 0xcfd2e39e4e5ecaf7
movabs r13, 0x8fd42231c6076edb
nop word [rax + rax]
mov r8, qword [0x1402304a8]
mov r9, qword [0x1402304a0]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x14004bfd3
movzx r10d, byte [rbp + rbx - 0x60]
mov rdx, r10
cmp r8, rbx
ja 0x14004bfca
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14004b691
lea rcx, [rbx + rdi]
mov rax, rcx
and rax, rdx
imul r11, rax, 0xfffffffffffffffe
add r11, rcx
add r11, rdx
sub r11b, 0x31
jmp 0x14004b6ca
je 0x14004bf6b
inc rax
cmp r8, rax
je 0x14004bf34
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004bf10
lea rax, [r9 + 7]
cmp r8, rax
je 0x14004bee6
lea rax, [r9 + 2]
cmp r8, rax
je 0x14004be95
nop word [rax + rax]
cmp r9, rbx
ja 0x14004bfc1
lea rax, [r9 + 0x64]
cmp r8, rax
jae 0x14004b6fb
lea r11, [rbx + rsi]
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 5
add r11b, r10b
jmp 0x14004b72f
lea rcx, [r9 + 1]
cmp r8, rcx
je 0x14004be74
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004be26
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004be02
lea rax, [rcx + 1]
cmp r8, rax
je 0x14004bd6e
nop
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x14004ba34
nop dword [rax]
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14004ba10
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004b9e1
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14004b9b8
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x14004b98f
lea r8, [r9 + 1]
lea r9, [r8 + 1]
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14004bf9c
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14004b7f1
lea rax, [r9 + 9]
cmp r8, rax
jb 0x14004b8f9
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x14004b8ab
mov r8, rax
lea r9, [rax + 0x64]
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x14004b881
lea rax, [r9 + 6]
cmp r8, rax
ja 0x14004b858
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14004b834
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x14004b80c
mov r8, rax
lea r9, [rax + 4]
jmp 0x14004b740
lea rcx, [rbx + r14]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x29
jmp 0x14004b662
movabs rdx, 0x7fcbbbce5e551c98
movzx eax, r10b
add rdx, rbx
movzx r11d, r10b
and al, dl
add al, al
sub r11b, al
sub r11b, 0x28
add r11b, dl
jmp 0x14004beb4
movabs rcx, 0x9fcd99ab91d2126e
movzx eax, r10b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 2
jmp 0x14004be45
mov ecx, reloc.WS2_32.dll_select
movabs rdx, 0xbfcf7788c54f0844
add rdx, rbx
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14004bd8d
lea rcx, [rbx + r15]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r11d, [rcx + r10]
sub r11b, 0x18
inc rbx
jmp 0x14004b652
lea rcx, [rbx + r12]
movzx eax, r10b
and al, cl
movzx r11d, r10b
add al, al
sub r11b, al
add r11b, 0x3f
add r11b, cl
cmp r9, 5
jb 0x14004bd09
movzx ecx, r10b
movabs rdx, 0xdfe0444f94b3acca
add rdx, rbx
movzx eax, r10b
and al, dl
add al, al
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0xc]
jmp 0x14004beb4
lea r11, [rbx + r13]
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
add r11b, 3
add r11b, r10b
lea rax, [r9 + r8]
cmp rax, 0x3e8
je 0x14004bd44
lea rax, [r9 + 0x3e8]
cmp r8, rax
jbe 0x14004bb30
movabs rcx, 0x8fed05b71f343cab
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x53
cmp r8, 8
jae 0x14004bd16
lea rax, [r9 + 8]
cmp r8, rax
jbe 0x14004bbc5
mov ecx, Ordinal_41
movabs rdx, 0x9fe67d30eafee03e
add rdx, rbx
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14004b8c5
mov ecx, Ordinal_35
movabs rdx, 0xbfd96c2482942764
add rdx, rbx
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14004bdba
mov ecx, 4
movabs rdx, 0x7fdaaab7fa3ccb48
add rdx, rbx
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14004bf52
mov ecx, reloc.WS2_32.dll_socket
movabs rdx, 0x9fdc88952db9c11e
add rdx, rbx
dec rbx
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc rbx
jmp 0x14004b652
movabs rcx, 0x5fddc728a5626502
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0xe
jmp 0x14004beb4
lea rax, [r9 + 4]
cmp r8, rax
jae 0x14004ba58
lea rcx, [rbx + rdi]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x31
jmp 0x14004b910
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004ba93
movabs rcx, 0x1ff2eef397954726
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r11d, [r10 + rcx]
sub r11b, 0xa
inc rbx
jmp 0x14004b652
inc rax
cmp r8, rax
jne 0x14004bac4
mov ecx, Ordinal_26
movabs rdx, 0x5ff1b0601feca342
add rdx, rbx
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14004bd8d
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004baf9
mov ecx, gethostname
movabs rdx, 0x9ff071cca843ff5e
add rdx, rbx
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
add r8, r9
jmp 0x14004bf52
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004b910
movabs rcx, 0xdfef3339309b5b7a
add rcx, rbx
dec rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x56
inc rbx
jmp 0x14004b652
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004bb5d
movabs rcx, 0x2fec666d635feab9
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0xf
jmp 0x14004beb4
inc rax
cmp r8, rax
jne 0x14004bb90
movzx eax, r10b
movabs rcx, 0x6feb27d9ebb746d5
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x2d
inc rbx
jmp 0x14004b652
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004b94f
movabs rdx, 0xfea88902fe2f4e3
movzx eax, r10b
add rdx, rbx
movzx r11d, r10b
and al, dl
add al, al
sub r11b, al
sub r11b, 0x35
add r11b, dl
jmp 0x14004be45
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14004bc01
movzx eax, r10b
movabs rcx, 0x3fe5dde72f2a8e4c
add rcx, rbx
and al, cl
add al, al
sub r10b, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r11d, [rcx + r10]
sub r11b, 0x14
inc rbx
jmp 0x14004b652
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004bc33
mov ecx, reloc.WS2_32.dll_sendto
movabs rdx, 0x7fe49f53b781ea68
add rdx, rbx
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14004bd8d
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14004bc61
movzx eax, r10b
movabs rcx, 0x1fe40009fbad9876
add rcx, rbx
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x3a
jmp 0x14004bf52
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14004bc96
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movabs rdx, 0xbfe360c03fd94684
add rdx, rbx
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
add r8, r9
jmp 0x14004bf52
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14004bcca
movzx eax, r10b
movabs rcx, 0xffe2222cc830a2a0
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x60
inc rbx
jmp 0x14004b652
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14004b8c5
mov ecx, Ordinal_35
movabs rdx, 0x9fe182e30c5c50ae
add rdx, rbx
movzx eax, r10b
and al, dl
inc r9
sub cl, al
dec rbx
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
inc rbx
jmp 0x14004b652
mov byte [rbp + rbx - 0x60], r11b
inc rbx
jmp 0x14004b652
mov ecx, recv
movabs rdx, 0x7fdfa505d8df5ad8
add rdx, rbx
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, byte [rbp + rbx - 0x60]
add r11b, dl
add r11b, r10b
jmp 0x14004be45
movabs rdx, 0x1fdf05bc1d0b08e6
movzx eax, r10b
add rdx, rbx
movzx r11d, r10b
and al, dl
add al, al
sub r11b, al
sub r11b, byte [rbp + rbx - 0x60]
sub r11b, 0x4a
add r11b, dl
jmp 0x14004bd8d
movabs rcx, 0x6ff51c75a8fc65f5
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x4d
inc r9
movabs rcx, 0xefdeb6173f20dfed
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0x7b
add cl, r10b
movzx eax, cl
mov byte [rbp + rbx - 0x60], al
add rax, r9
sub rbx, rax
inc r8
movabs rdx, 0xbfde66726136b6f4
add rdx, rbx
mov ecx, Ordinal_45
movzx eax, dl
and al, r10b
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, dl
add cl, r10b
mov byte [rbp + rbx - 0x60], cl
add rbx, rax
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14004b652
movabs rcx, 0xcff5bbbf64d0b7e7
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x51
jmp 0x14004bf52
movabs rcx, 0x8ff6fa52dc795bcb
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x73
movabs rdx, 0x4fdf5560faf531df
movzx ecx, r11b
add rdx, rbx
movzx eax, dl
and al, r10b
add al, al
sub cl, al
sub cl, 0x19
add cl, dl
add cl, r10b
mov byte [rbp + rbx - 0x60], cl
add r8, r9
jmp 0x14004bf52
movabs rcx, 0xaff8d8300ff651a1
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x67
jmp 0x14004beb4
movabs rcx, 0x6ffa16c3879ef585
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x5d
movzx eax, r10b
movabs rcx, 0xafdff4aab6c983d1
add rcx, rbx
and al, cl
add al, al
sub r10b, al
add r10b, 0x49
add r10b, cl
mov byte [rbp + rbx - 0x60], r10b
inc r9
dec rbx
inc rbx
jmp 0x14004b652
movabs rcx, 0x2ffb5556ff479969
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x21
dec rbx
inc rbx
jmp 0x14004b652
movabs rcx, 0xeffc93ea76f03d4d
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x1b
add r8, r9
jmp 0x14004bf52
movabs rcx, 0x4ffd333432c48f3f
add rcx, rbx
movzx eax, cl
and al, dl
add al, al
sub dl, al
lea r11d, [rcx + rdx]
add r11b, 0x47
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14004b652
movzx eax, dl
movabs rcx, 0x6fff111166418515
add rcx, rbx
and al, cl
add al, al
sub dl, al
lea r11d, [rcx + rdx]
add r11b, 0x6d
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14004b652
movzx eax, r10b
movabs rcx, 0x6fd73ea2712d0895
add rcx, rbx
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x13
jmp 0x14004b640
lea rdx, [rbp + 0x16c7854]
jmp 0x14004bfd7
lea rdx, [rbp + 0x424f5b]
jmp 0x14004bfd7
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [rbp - 0x10]
call fcn.14019b5c8
movzx r10d, byte [rsp + 0x30]
mov rsi, rax
xor eax, eax
mov dword [rbp - 0x38], 0x8c927154
xorps xmm0, xmm0
mov dword [rbp - 0x1c], eax
mov word [rbp - 0x18], ax
movabs rdi, 0x4ebf6f294c32abe9
mov byte [rbp - 0x16], al
movabs r12, 0x2852423eeb3f5d85
mov dword [rbp - 0x34], 0x88849c98
movabs r14, 0xe4a9f829bb67c737
mov dword [rbp - 0x30], 0x3388869a
movabs r15, 0x940573abe4e90c2d
movups xmmword [rbp - 0x2c], xmm0
movabs r13, 0x4360ef2e0e6a5123
nop word [rax + rax]
mov r9, qword [0x1402304a8]
mov r8, qword [0x1402304a0]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x14004ce31
movzx r11d, byte [rbp + rbx - 0x38]
mov rdx, r11
cmp r9, rbx
ja 0x14004ce28
lea rax, [r8 + 1]
cmp r9, rax
jae 0x14004c0c1
lea rcx, [rbx + r12]
mov r10, rdx
movzx eax, cl
and al, dl
add al, al
sub r10b, al
add r10b, 0x5d
add r10b, cl
jmp 0x14004c100
je 0x14004cda6
lea rax, [r8 + 2]
cmp r9, rax
je 0x14004cd0d
lea rax, [r8 + 3]
cmp r9, rax
je 0x14004ccd3
lea rax, [r8 + 5]
cmp r9, rax
je 0x14004cc8b
lea rax, [r8 + 6]
cmp r9, rax
je 0x14004cc3a
nop dword [rax + rax]
cmp r8, rbx
ja 0x14004ce1f
lea rax, [r8 + 9]
cmp r9, rax
jae 0x14004c12a
lea rcx, [rbx + rdi]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x5f
jmp 0x14004c170
lea rax, [r8 + 1]
cmp r9, rax
je 0x14004cc19
lea rax, [r8 + 4]
cmp r9, rax
je 0x14004cbf5
lea rax, [r8 + 5]
cmp r9, rax
je 0x14004cbd1
lea rax, [r8 + 2]
cmp r9, rax
je 0x14004cbad
lea rax, [r8 + 6]
cmp r9, rax
je 0x14004cb89
nop dword [rax + rax]
lea rax, [r8 + r9]
cmp rax, rbx
jbe 0x14004c7a0
nop dword [rax]
lea rax, [r8 + 0x2a]
cmp r9, rax
je 0x14004c77c
lea rax, [r8 + 0x40]
cmp r9, rax
je 0x14004c74f
lea rax, [r8 + 1]
cmp r9, rax
je 0x14004c720
lea rax, [r8 + 0x41]
cmp r9, rax
je 0x14004c6f7
lea rax, [r8 + 0x20]
cmp r9, rax
je 0x14004c6d3
lea rax, [r8 + 0x5a]
cmp r9, rax
je 0x14004c6af
lea rax, [r8 + 0x61]
cmp r9, rax
je 0x14004c686
lea rax, [r8 + 0xa]
cmp r9, rax
je 0x14004c65d
lea rax, [r8 + 0x7a]
cmp r9, rax
je 0x14004c62b
lea rax, [r8 + 0x400]
cmp r9, rax
je 0x14004c180
lea r9, [r8 + 0x40]
lea r8, [r9 + 8]
lea rax, [r8 + 1]
cmp r9, rax
jb 0x14004cdfb
lea rax, [r8 + 0x42]
cmp r9, rax
jb 0x14004cdd7
lea rax, [r8 + 0x20]
cmp r9, rax
jb 0x14004c35b
lea rax, [r8 + 0x5a]
cmp r9, rax
jb 0x14004c340
lea rax, [r8 + 0x28]
cmp r9, rax
jb 0x14004c325
lea rax, [r8 + 0xa]
cmp r9, rax
jb 0x14004c5cd
lea rax, [r8 + 0x7a]
cmp r9, rax
jb 0x14004c56b
lea rax, [r8 + 0x10]
cmp r9, rax
jb 0x14004c51c
lea rax, [r8 + 0x41]
cmp r9, rax
jb 0x14004c4f0
lea rax, [r8 + 0x1000]
cmp r9, rax
jb 0x14004c180
lea r9, [r8 + 0x42]
lea r8, [r9 + 9]
lea rax, [r8 + 2]
cmp r9, rax
ja 0x14004c4b9
lea rax, [r8 + 0x5a]
cmp r9, rax
ja 0x14004c495
lea rax, [r8 + 0x28]
cmp r9, rax
ja 0x14004c471
lea rax, [r8 + 0x2a]
cmp r9, rax
ja 0x14004c448
lea rax, [r8 + 0x7a]
cmp r9, rax
ja 0x14004c41f
lea rax, [r8 + 0x10]
cmp r9, rax
ja 0x14004c3fb
lea rax, [r8 + 0x41]
cmp r9, rax
ja 0x14004c3d1
lea rax, [r8 + 0x20]
cmp r9, rax
ja 0x14004c39f
lea rax, [r8 + 9]
cmp r9, rax
ja 0x14004c376
lea rax, [r8 + 0x61]
cmp r9, rax
ja 0x14004c180
lea r9, [r8 + 0x64]
lea r8, [r9 + 0xa]
jmp 0x14004c180
lea rcx, [rbx + r14]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x7f
jmp 0x14004c170
lea rcx, [rbx + r15]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x3b
jmp 0x14004c100
lea rcx, [rbx + r13]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0xb
jmp 0x14004c092
mov ecx, 4
movabs rdx, 0x75fb794a61955f48
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14004cc59
mov ecx, Ordinal_41
movabs rdx, 0x2556f4cc8b16a43e
add rdx, rbx
inc r8
movzx eax, dl
dec rbx
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x14004c082
movabs rcx, 0xd4b2704eb497e934
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x6c
inc rbx
jmp 0x14004c082
movabs rcx, 0x840debd0de192e2a
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x26
jmp 0x14004ccaa
mov ecx, reloc.WS2_32.dll_recv
movabs rdx, 0x33696753079a7320
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14004ccf1
mov ecx, 0x33
movabs rdx, 0xe2c4e2d5311bb816
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14004ccf4
movabs rcx, 0x92205e575a9cfd0c
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x54
jmp 0x14004cd2e
movabs rcx, 0x417bd9d9841e4202
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0xe
jmp 0x14004cd5e
mov ecx, Ordinal_30
movabs rdx, 0xf0d7555bad9f86f8
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r8
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x14004c082
movabs rcx, 0x273c0a211562b35f
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x67
mov byte [rbp + rbx - 0x38], r10b
inc rbx
jmp 0x14004c082
movabs rcx, 0xd69785a33ee3f855
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x53
cmp r8, 5
jb 0x14004c50f
mov ecx, 7
movabs rdx, 0x10c66511bb3f42fe
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
lea r10d, [rcx + rcx]
jmp 0x14004cc59
movabs rdx, 0x85f3012568653d4b
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0xd
add r10b, dl
cmp r9, 4
jae 0x14004cb2f
lea rax, [r8 + 0x41]
cmp r9, rax
jbe 0x14004ca29
movabs rdx, 0xea5938275a4bf49a
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x36
add r10b, dl
jmp 0x14004c53b
movabs rcx, 0x354e7ca791e68241
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x39
lea rax, [r8 + r9]
cmp rax, 3
je 0x14004cb5c
lea rax, [r8 + 0x7a]
cmp r9, rax
jbe 0x14004c8f8
movabs rcx, 0x9b99c8fe0e1948b1
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x29
jmp 0x14004c58e
movabs rcx, 0xd87c9af7c9300776
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r8
add rbx, rax
lea r10d, [r11 + rcx]
sub r10b, 0x3a
inc rbx
jmp 0x14004c082
mov ecx, 6
movabs rdx, 0x87d81679f2b14c6c
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14004cd5e
mov ecx, reloc.WLDAP32.dll_Ordinal_41
movabs rdx, 0x373391fc1c329162
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14004cd2e
movabs rcx, 0xe68f0d7e45b3d658
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x68
jmp 0x14004ccf4
movabs rcx, 0x95ea89006f351b4e
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x22
jmp 0x14004ccf1
mov ecx, reloc.WS2_32.dll_select
movabs rdx, 0x4546048298b66044
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14004ccaa
mov ecx, gethostname
movabs rdx, 0xf4a18004c237a53a
add rdx, rbx
dec rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x14004c082
movabs rcx, 0xa3fcfb86ebb8ea30
inc r8
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x50
inc rbx
jmp 0x14004c082
movabs rcx, 0x53587709153a2f26
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0xa
jmp 0x14004cc59
lea rax, [r8 + 0x64]
cmp r9, rax
jae 0x14004c7c4
lea rcx, [rbx + r12]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x5d
jmp 0x14004c5ec
lea rax, [r8 + 1]
cmp r9, rax
jne 0x14004c804
mov ecx, reloc.WLDAP32.dll_Ordinal_33
movabs rdx, 0x9d7ede52986557d2
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r8
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x14004c082
inc rax
cmp r9, rax
jne 0x14004c830
movabs rcx, 0x3ec7e74e4562cde6
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x4a
jmp 0x14004cd2e
lea rax, [r8 + 2]
cmp r9, rax
jne 0x14004c862
mov ecx, reloc.WS2_32.dll_setsockopt
movabs rdx, 0xe010f049f26043fa
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14004ccf1
lea rax, [r8 + 3]
cmp r9, rax
jne 0x14004c88f
movabs rcx, 0x30b574c7c8deff04
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x1c
jmp 0x14004ccaa
lea rax, [r8 + 6]
cmp r9, rax
jne 0x14004c8c2
movabs rcx, 0x8159f9459f5dba0e
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x62
inc rbx
jmp 0x14004c082
lea rax, [r8 + 7]
cmp r9, rax
jne 0x14004c5ec
mov ecx, 9
movabs rdx, 0x22a302414c5b3022
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14004cc59
lea rcx, [r8 + 1]
cmp r9, rcx
jne 0x14004c925
movabs rcx, 0xec3e4d7be49803bb
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x1d
jmp 0x14004cc59
lea rax, [r8 + 2]
cmp r9, rax
jne 0x14004c959
movzx eax, r11b
movabs rcx, 0x8d875677919579cf
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x57
inc rbx
jmp 0x14004c082
lea rax, [rcx + 1]
cmp r9, rax
jne 0x14004c98a
movabs rdx, 0xde2bdaf5681434d9
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
add r10b, 0x11
add r10b, dl
jmp 0x14004ccaa
lea rax, [r8 + 5]
cmp r9, rax
jne 0x14004c9b8
movzx eax, r11b
movabs rcx, 0x7f74e3f11511aaed
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x7b
jmp 0x14004ccf4
lea rax, [r8 + 7]
cmp r9, rax
jne 0x14004c9e9
movabs rdx, 0xd019686eeb9065f7
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
add r10b, 0x3f
add r10b, dl
jmp 0x14004cd2e
lea rax, [r8 + 3]
cmp r9, rax
jne 0x14004c58e
movzx eax, r11b
movabs rcx, 0x7162716a988ddc0b
add rcx, rbx
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r8
add rbx, rax
lea r10d, [rcx + r11]
sub r10b, 0x4d
inc rbx
jmp 0x14004c082
lea rax, [r8 + 1]
cmp r9, rax
jne 0x14004ca65
movzx eax, r11b
movabs rcx, 0x3afdbca530caafa4
add rcx, rbx
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r8
add rbx, rax
lea r10d, [rcx + r11]
sub r10b, 0x7c
inc rbx
jmp 0x14004c082
inc rax
cmp r9, rax
jne 0x14004ca96
mov ecx, Ordinal_35
movabs rdx, 0x8ba2412307496aae
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14004cd5e
lea rax, [r8 + 2]
cmp r9, rax
jne 0x14004cac7
movabs rdx, 0xdc46c5a0ddc825b8
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 8
add r10b, dl
jmp 0x14004cd2e
lea rax, [r8 + 5]
cmp r9, rax
jne 0x14004caf9
mov ecx, reloc.WS2_32.dll_send
movabs rdx, 0xce34531a614456d6
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14004ccaa
lea rax, [r8 + 9]
cmp r9, rax
jne 0x14004c53b
mov ecx, Ordinal_45
movabs rdx, 0xc021e093e4c087f4
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14004cc59
movzx r10d, byte [rbp + rbx - 0x38]
movabs rdx, 0x616ae98f91bdfe08
add rdx, rbx
movzx eax, dl
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x38
add r10b, r11b
add r10b, dl
jmp 0x14004ccaa
movabs rdx, 0xb20f6e0d683cb912
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, byte [rbp + rbx - 0x38]
sub r10b, 0x7e
add r10b, dl
jmp 0x14004cd2e
movabs rcx, 0xd3e3931800288439
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x71
jmp 0x14004cd5e
movabs rcx, 0x833f0e9a29a9c92f
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x49
jmp 0x14004cd2e
movabs rcx, 0x329a8a1c532b0e25
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 3
jmp 0x14004ccf4
movabs rcx, 0xe1f6059e7cac531b
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x43
jmp 0x14004ccf1
movabs rcx, 0x9f63f3a722b166f3
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x5b
jmp 0x14004cc59
movabs rcx, 0xfe1aeaab75b3f0df
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x19
movzx eax, r11b
movabs rcx, 0x3918a750a67ea083
add rcx, rbx
and al, cl
add al, al
sub r11b, al
add r11b, 0x6b
add r11b, cl
mov byte [rbp + rbx - 0x38], r11b
inc r8
dec rbx
inc rbx
jmp 0x14004c082
movabs rcx, 0xc2d5d31f237bfc1
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x47
movabs rdx, 0x89bd2bce7cfd5b8d
movzx eax, r11b
add rdx, rbx
movzx ecx, r10b
and al, dl
add al, al
sub cl, al
add cl, 0x25
add cl, r11b
add cl, dl
mov byte [rbp + rbx - 0x38], cl
jmp 0x14004ccf1
movabs rcx, 0xbb88d8b41bb904b7
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
dec r10b
add r9, r8
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14004c082
movabs rcx, 0x1a3fcfb86ebb8ea3
mov r11, rdx
add rcx, rbx
movzx eax, cl
and al, dl
add al, al
sub cl, al
lea r10d, [rdx + rcx]
sub r10b, 0x75
movzx eax, r11b
inc r8
movabs rdx, 0xda61b04c537c1697
movzx ecx, r11b
add rdx, rbx
and al, dl
add al, al
sub cl, al
sub cl, 0x21
add cl, dl
movzx eax, cl
mov byte [rbp + rbx - 0x38], al
add rax, r8
sub rbx, rax
movzx eax, r11b
inc r9
movabs rdx, 0x2b3f28b3ebb741c
mov ecx, reloc.WLDAP32.dll_Ordinal_30
add rdx, rbx
and al, dl
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r9
add cl, cl
add cl, r11b
add cl, dl
mov byte [rbp + rbx - 0x38], cl
add rbx, rax
movzx eax, byte [rbp + rbx - 0x38]
add rax, r8
add rbx, rax
inc rbx
jmp 0x14004c082
movzx eax, dl
movabs rcx, 0x78f6c6bcc1be188f
add rcx, rbx
and al, cl
add al, al
sub dl, al
lea r10d, [rcx + rdx]
add r10b, 0x17
movzx eax, byte [rbp + rbx - 0x38]
add rax, r8
add rbx, rax
inc rbx
jmp 0x14004c082
movabs rcx, 0xf2bc6ab037eb9619
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x51
jmp 0x14004c080
movabs rcx, 0xa217e632616cdb0f
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x69
jmp 0x14004c070
lea rdx, [rbp + 0x152d524]
jmp 0x14004ce35
lea rdx, [rbp + 0x11232a9]
jmp 0x14004ce35
lea rdx, [rbp - 0x38]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [rsi + 0x10]
lea rbx, [rsi + 0x18]
test eax, eax
je 0x14004ce82
mov edi, eax
lea r9, [rbx + 8]
mov r8, rbx
lea rdx, [rbp]
lea rcx, [0x14022fe40]
call fcn.140059e30
add rbx, 0x14
sub rdi, 1
jne 0x14004ce61
mov rcx, rsi
call fcn.14019b234
mov rcx, qword [rbp - 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.14019b1d0
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret