Function at 0x1400fc160
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x1401da800]
xor rax, rsp
mov qword [rbp + 0x18], rax
movzx r8d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp - 0x7a], rax
movups xmmword [rsp + 0x76], xmm0
mov dword [rbp - 0x72], eax
movabs rdi, 0x5a8d756150436649
mov byte [rbp - 0x6e], al
movabs rsi, 0xf5d91522995c98d7
mov dword [rsp + 0x40], 0x6f72626e
movabs r15, 0x1080a410d30f6665
mov dword [rsp + 0x44], 0x647e6e73
movabs r14, 0xd4d7cd00f33dcc0d
mov dword [rsp + 0x48], 0x66677b72
movabs r12, 0xb3d684df4d1eff43
mov dword [rsp + 0x4c], 0x72666a63
movabs r13, 0xb36a62e8dbfc657e
mov dword [rsp + 0x50], 0x6b73667d
mov dword [rsp + 0x54], 0x4a476c66
mov dword [rsp + 0x58], 0x634f564a
mov dword [rsp + 0x5c], 0xb6b5aa94
mov dword [rsp + 0x60], 0xa0a1b3bd
mov dword [rsp + 0x64], 0xa79895bf
mov dword [rsp + 0x68], 0xb6a3b8b1
mov dword [rsp + 0x6c], 0x8470bdb5
mov dword [rsp + 0x70], 0xada5a6bd
mov word [rsp + 0x74], 0x59a5
nop word [rax + rax]
mov rax, qword [0x14022e4a8]
mov r9, qword [0x14022e4a0]
nop
xor r10d, r10d
cmp r10, 0x53
jae 0x1400fcf00
movzx ebx, byte [rsp + r10 + 0x40]
mov r11d, ebx
cmp rax, r10
ja 0x1400fcef7
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x1400fc2b2
lea rdx, [r10 + r15]
mov rcx, rdx
and rcx, r11
imul r8, rcx, 0xfffffffffffffffe
add r8, rdx
add r8, r11
add r8b, 0x3d
jmp 0x1400fc2e0
je 0x1400fce74
inc rcx
cmp rax, rcx
je 0x1400fce38
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1400fcdf4
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1400fcdc6
nop
cmp r9, r10
ja 0x1400fceee
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jae 0x1400fc310
lea r8, [r10 + rdi]
movzx edx, r11b
movzx ecx, r8b
inc r8b
and cl, r11b
add cl, cl
sub dl, cl
add r8b, dl
jmp 0x1400fc350
lea rdx, [r9 + 1]
cmp rax, rdx
je 0x1400fcd7a
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1400fcd55
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x1400fcd30
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x1400fcc9d
nop dword [rax]
nop dword [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, r10
jbe 0x1400fc96d
nop dword [rax]
lea rcx, [r9 + 0x61]
cmp rax, rcx
je 0x1400fc946
lea rdx, [r9 + 0x200]
cmp rax, rdx
je 0x1400fc91a
lea rcx, [r9 + 0x40]
cmp rax, rcx
je 0x1400fc8ed
lea rcx, [r9 + 0xa]
cmp rax, rcx
je 0x1400fc8ca
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1400fc8a3
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x1400fc880
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x1400fc859
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
je 0x1400fc836
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x1400fc800
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x1400fc360
lea r9, [rdx + 0x64]
mov rax, rdx
lea rcx, [r9 + 0x40]
cmp rdx, rcx
jb 0x1400fcecb
lea rdx, [r9 + 0xa]
cmp rax, rdx
jb 0x1400fcea8
lea rcx, [r9 + 5]
cmp rax, rcx
jb 0x1400fc549
lea rcx, [r9 + 1]
cmp rax, rcx
jb 0x1400fc52a
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x1400fc50b
lea rcx, [r9 + 2]
cmp rax, rcx
jb 0x1400fc7a4
lea rcx, [r9 + 0x41]
cmp rax, rcx
jb 0x1400fc749
lea rcx, [r9 + 0x400]
cmp rax, rcx
jb 0x1400fc6f8
lea rcx, [r9 + 0x64]
cmp rax, rcx
jb 0x1400fc6cd
lea rcx, [r9 + 0x20]
cmp rax, rcx
jb 0x1400fc360
lea r9, [rdx + 8]
mov rax, rdx
lea rcx, [r9 + 5]
cmp rdx, rcx
ja 0x1400fc698
lea rdx, [r9 + 1]
cmp rax, rdx
ja 0x1400fc672
lea rcx, [r9 + 0x7a]
cmp rax, rcx
ja 0x1400fc64f
lea rcx, [r9 + 2]
cmp rax, rcx
ja 0x1400fc62c
lea rcx, [r9 + 0x41]
cmp rax, rcx
ja 0x1400fc605
lea rcx, [r9 + 0x400]
cmp rax, rcx
ja 0x1400fc5df
lea rcx, [r9 + 0x64]
cmp rax, rcx
ja 0x1400fc5b2
lea rcx, [r9 + 0x20]
cmp rax, rcx
ja 0x1400fc58f
lea rcx, [r9 + 8]
cmp rax, rcx
ja 0x1400fc568
lea rcx, [r9 + 3]
cmp rax, rcx
ja 0x1400fc360
mov rax, rdx
lea r9, [rdx + 9]
jmp 0x1400fc360
lea r8, [r10 + rsi]
movzx ecx, r11b
and cl, r8b
movzx edx, r11b
add cl, cl
add r8b, 0x1f
sub dl, cl
add r8b, dl
jmp 0x1400fc350
lea r8, [r10 + r14]
movzx ecx, r11b
and cl, r8b
movzx edx, r11b
add cl, cl
sub r8b, 0x5b
sub dl, cl
add r8b, dl
jmp 0x1400fc2e0
lea r8, [r10 + r12]
movzx ecx, r11b
and cl, r8b
movzx edx, r11b
add cl, cl
add r8b, 0x2b
sub dl, cl
add r8b, dl
jmp 0x1400fc286
movabs r8, 0xd46bab0a821b3248
mov edx, 4
add r8, r10
movzx ecx, r8b
and cl, bl
sub dl, cl
add dl, dl
add r8b, dl
add r8b, bl
jmp 0x1400fcd98
lea rdx, [r10 + r13]
inc r9
movzx ecx, dl
dec r10
and cl, bl
add cl, cl
sub dl, cl
lea r8d, [rbx + rdx]
sub r8b, 0x72
inc r10
jmp 0x1400fc273
movabs r8, 0x92691ac735dd98b4
mov edx, 0xa
add r8, r10
dec r10
movzx ecx, r8b
and cl, bl
sub dl, cl
add dl, dl
add r8b, dl
add r8b, bl
inc r10
jmp 0x1400fc273
movabs r8, 0x7167d2a58fbecbea
movzx edx, bl
add r8, r10
movzx ecx, r8b
sub r8b, 0x66
and cl, bl
add cl, cl
sub dl, cl
add r8b, dl
jmp 0x1400fce13
movabs r8, 0x50668a83e99fff20
mov edx, reloc.WS2_32.dll_recv
add r8, r10
movzx ecx, r8b
and cl, bl
sub dl, cl
add dl, dl
add r8b, dl
add r8b, bl
jmp 0x1400fce58
movabs rdx, 0x2f65426243813256
add rdx, r10
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r8d, [rbx + rdx]
sub r8b, 0x5a
jmp 0x1400fce5b
movabs r8, 0xe63fa409d62658c
mov edx, reloc.WLDAP32.dll_Ordinal_22
add r8, r10
movzx ecx, r8b
and cl, bl
sub dl, cl
add dl, dl
add dl, bl
jmp 0x1400fccbd
movabs r8, 0xed62b21ef74398c2
movzx ecx, bl
add r8, r10
movzx edx, bl
and cl, r8b
sub r8b, 0x4e
add cl, cl
sub dl, cl
add r8b, dl
jmp 0x1400fccec
movzx ecx, bl
movabs r8, 0xcc6169fd5124cbf8
add r8, r10
mov edx, Ordinal_30
and cl, r8b
sub dl, cl
movzx ecx, byte [rsp + r10 + 0x40]
add dl, dl
add rcx, r9
add dl, bl
add r10, rcx
add r8b, dl
inc r10
jmp 0x1400fc273
movzx ecx, bl
movabs rdx, 0x79de35a931d7cbff
add rdx, r10
and cl, dl
add cl, cl
sub bl, cl
lea r8d, [rdx + rbx]
add r8b, 7
mov byte [rsp + r10 + 0x40], r8b
inc r10
jmp 0x1400fc273
movabs r8, 0x58dced878bb8ff35
movzx ecx, bl
add r8, r10
movzx edx, bl
and cl, r8b
add cl, cl
sub dl, cl
sub r8b, 0x73
add r8b, dl
cmp r9, 3
jb 0x1400fc6eb
movzx edx, bl
movabs r8, 0x93415eb41822cc3e
add r8, r10
movzx ecx, bl
and cl, r8b
add cl, cl
sub dl, cl
add dl, r8b
lea r8d, [rdx*2 - 0x64]
jmp 0x1400fcd98
movabs r8, 0x37dba565e59a326b
movzx ecx, bl
add r8, r10
movzx edx, bl
and cl, r8b
add r8b, 0x13
add cl, cl
sub dl, cl
add r8b, dl
cmp rax, 0x20
jae 0x1400fcc4d
lea rcx, [r9 + 0xa]
cmp rax, rcx
jbe 0x1400fcb52
movabs r8, 0x49348d639aeecc5a
movzx ecx, bl
add r8, r10
movzx edx, bl
and cl, r8b
add cl, cl
sub dl, cl
sub r8b, 0x76
jmp 0x1400fc716
movabs rdx, 0x16da5d443f7b65a1
add rdx, r10
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r8d, [rbx + rdx]
sub r8b, 0x67
lea rcx, [r9 + rax]
cmp rcx, 0x10
je 0x1400fcc78
lea rcx, [r9 + 9]
cmp rax, rcx
jbe 0x1400fca66
movabs rdx, 0xeea718024aab6611
add rdx, r10
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r8d, [rbx + rdx]
sub r8b, 0x77
jmp 0x1400fc76a
movabs r8, 0x1f50c047e19465b6
mov edx, 3
add r8, r10
movzx ecx, r8b
and cl, bl
sub dl, cl
movzx ecx, byte [rsp + r10 + 0x40]
add dl, dl
add rcx, r9
add r8b, dl
add r10, rcx
add r8b, bl
inc r10
jmp 0x1400fc273
movabs rdx, 0xfe4f78263b7598ec
add rdx, r10
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r8d, [rbx + rdx]
sub r8b, 0x74
jmp 0x1400fccec
movabs r8, 0xdd4e30049556cc22
mov edx, 9
add r8, r10
movzx ecx, r8b
and cl, bl
sub dl, cl
add dl, dl
add r8b, dl
add r8b, bl
jmp 0x1400fccc0
movabs rdx, 0xbc4ce7e2ef37ff58
add rdx, r10
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r8d, [rbx + rdx]
sub r8b, 0x68
jmp 0x1400fce5b
movabs r8, 0x9b4b9fc14919328e
mov edx, reloc.WS2_32.dll_ntohs
add r8, r10
movzx ecx, r8b
and cl, bl
sub dl, cl
add dl, dl
add r8b, dl
add r8b, bl
jmp 0x1400fce58
movabs rdx, 0x7a4a579fa2fa65c4
add rdx, r10
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r8d, [rbx + rdx]
sub r8b, 0x5c
jmp 0x1400fce13
movabs r8, 0x59490f7dfcdb98fa
mov edx, reloc.WS2_32.dll_setsockopt
add r8, r10
dec r10
movzx ecx, r8b
and cl, bl
sub dl, cl
add dl, dl
add r8b, dl
add r8b, bl
inc r10
jmp 0x1400fc273
movabs rdx, 0x3847c75c56bccc30
inc r9
add rdx, r10
dec r10
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r8d, [rbx + rdx]
sub r8b, 0x50
inc r10
jmp 0x1400fc273
movabs r8, 0x17467f3ab09dff66
mov edx, reloc.WLDAP32.dll_Ordinal_27
add r8, r10
movzx ecx, r8b
and cl, bl
sub dl, cl
add dl, dl
add r8b, dl
add r8b, bl
jmp 0x1400fcd98
lea rcx, [r9 + 0x42]
cmp rax, rcx
jae 0x1400fc992
lea rdx, [r10 + r15]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
add r8b, 0x3d
jmp 0x1400fc7c2
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400fc9d1
movabs r8, 0xb51aeac2a086cc92
mov edx, 1
add r8, r10
movzx ecx, r8b
and cl, bl
sub dl, cl
movzx ecx, byte [rsp + r10 + 0x40]
add dl, dl
add rcx, r9
add r8b, dl
add r10, rcx
add r8b, bl
inc r10
jmp 0x1400fc273
inc rcx
cmp rax, rcx
jne 0x1400fca00
movabs r8, 0xd61c32e446a5995c
mov edx, 0x3e
add r8, r10
movzx ecx, r8b
and cl, bl
sub dl, cl
add dl, dl
add r8b, dl
add r8b, bl
jmp 0x1400fccec
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400fca30
movabs r8, 0x181ec32792e332f0
mov edx, gethostname
add r8, r10
movzx ecx, r8b
and cl, bl
sub dl, cl
add dl, dl
add r8b, dl
add r8b, bl
jmp 0x1400fce5b
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1400fc7c2
movabs rdx, 0x7b229b8c853f994e
add rdx, r10
dec r10
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r8d, [rbx + rdx]
sub r8b, 0x22
inc r10
jmp 0x1400fc273
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x1400fca95
movabs r8, 0xfa86023f0ca32db
movzx ecx, bl
add r8, r10
movzx edx, bl
and cl, r8b
add r8b, 3
add cl, cl
sub dl, cl
add r8b, dl
jmp 0x1400fcd98
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400fcac7
movzx ecx, bl
movabs rdx, 0x51aaf0673d07cc6f
add rdx, r10
dec r10
and cl, dl
add cl, cl
sub bl, cl
lea r8d, [rdx + rbx]
sub r8b, 9
inc r10
jmp 0x1400fc273
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x1400fcaf6
movabs r8, 0x72ac3888e3269939
movzx ecx, bl
add r8, r10
movzx edx, bl
and cl, r8b
add r8b, 0x71
add cl, cl
sub dl, cl
add r8b, dl
jmp 0x1400fce13
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1400fcb22
movzx ecx, bl
movabs rdx, 0xb4aec8cc2f6432cd
add rdx, r10
and cl, dl
add cl, cl
sub bl, cl
lea r8d, [rdx + rbx]
add r8b, 0x65
jmp 0x1400fce5b
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1400fc76a
movabs r8, 0xd5b010edd582ff97
movzx ecx, bl
add r8, r10
movzx edx, bl
and cl, r8b
add cl, cl
sub dl, cl
sub r8b, 0x21
jmp 0x1400fccbd
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400fcb90
movzx ecx, bl
movabs r8, 0x6a35d585410d9924
add r8, r10
mov edx, 2
and cl, r8b
sub dl, cl
movzx ecx, byte [rsp + r10 + 0x40]
add dl, dl
add rcx, r9
add dl, bl
add r10, rcx
add r8b, dl
inc r10
jmp 0x1400fc273
inc rcx
cmp rax, rcx
jne 0x1400fcbbf
movabs r8, 0x8b371da6e72c65ee
movzx ecx, bl
add r8, r10
mov edx, 0x3f
and cl, r8b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, bl
jmp 0x1400fccec
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400fcbeb
movabs rdx, 0xac3865c88d4b32b8
movzx ecx, bl
add rdx, r10
and cl, dl
add cl, cl
sub dl, cl
lea r8d, [rbx + rdx]
sub r8b, 8
jmp 0x1400fccc0
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1400fcc1a
movabs r8, 0xf3c3e2d7fa79916
movzx ecx, bl
add r8, r10
mov edx, 0x33
and cl, r8b
sub dl, cl
add dl, dl
add dl, bl
add r8b, dl
jmp 0x1400fce13
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x1400fc719
movabs r8, 0x724016927203ff74
movzx ecx, bl
add r8, r10
movzx edx, bl
and cl, r8b
sub r8b, 0x2c
add cl, cl
sub dl, cl
add r8b, dl
jmp 0x1400fcd98
movzx edx, byte [rsp + r10 + 0x40]
movabs r8, 0xb442a6d5be419908
add r8, r10
movzx ecx, bl
and cl, r8b
sub r8b, 0x38
add cl, cl
sub dl, cl
add dl, bl
add r8b, dl
jmp 0x1400fce13
movabs r8, 0xd543eef7646065d2
movzx ecx, bl
add r8, r10
mov edx, reloc.WLDAP32.dll_Ordinal_33
and cl, r8b
sub dl, cl
add dl, dl
sub dl, byte [rsp + r10 + 0x40]
add dl, bl
jmp 0x1400fccbd
movabs r8, 0x41966e4cdb1affcf
movzx ecx, r11b
add r8, r10
movzx edx, r11b
and cl, r8b
add cl, cl
sub dl, cl
add r8b, 0x57
add r8b, dl
inc r9
movabs rdx, 0xe5c49308376fcc37
add rdx, r10
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
add dl, 0x7f
add dl, bl
movzx ecx, dl
mov byte [rsp + r10 + 0x40], cl
add rcx, r9
sub r10, rcx
inc rax
movabs rdx, 0xf64537190a7f329c
add rdx, r10
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
sub dl, 0x44
add dl, bl
mov byte [rsp + r10 + 0x40], dl
add r10, rcx
movzx ecx, byte [rsp + r10 + 0x40]
add rcx, r9
add r10, rcx
inc r10
jmp 0x1400fc273
movzx ecx, r11b
movabs rdx, 0x2095262b34fc3305
add rdx, r10
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
sub r8b, 0x23
jmp 0x1400fce5b
movzx ecx, r11b
movabs rdx, 0xff93de098edd663b
add rdx, r10
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
add r8b, 0x63
jmp 0x1400fce58
movabs rcx, 0x7b8ebd82f6623313
add rcx, r10
and r11b, cl
add r11b, r11b
sub cl, r11b
lea r8d, [rbx + rcx]
add r8b, 0x7b
movzx ecx, bl
movabs rdx, 0xa3c202c4eb3232a3
add rdx, r10
inc r9
and cl, dl
add cl, cl
sub bl, cl
sub bl, 0x75
add bl, dl
mov byte [rsp + r10 + 0x40], bl
dec r10
inc r10
jmp 0x1400fc273
movzx ecx, r11b
movabs rdx, 0x188ae51e0405ccb5
add rdx, r10
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
add r8b, 0xd
inc r9
dec r10
inc r10
jmp 0x1400fc273
movabs rdx, 0xd68854dab7c83321
movzx ecx, r11b
add rdx, r10
and cl, dl
add cl, cl
sub dl, cl
lea r8d, [rbx + rdx]
add r8b, 0x19
movabs rdx, 0xc4c34ae69150ff6d
add rdx, r10
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
add dl, 5
add dl, bl
add dl, r8b
mov byte [rsp + r10 + 0x40], dl
jmp 0x1400fce58
movzx ecx, r11b
movabs rdx, 0xb5870cb911a96657
add rdx, r10
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
sub r8b, 0x61
add rax, r9
movzx ecx, r8b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add r10, rdx
inc r10
jmp 0x1400fc273
movzx ecx, r11b
movabs rdx, 0x3181ec32792e332f
add rdx, r10
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
sub r8b, 0x49
movzx ecx, byte [rsp + r10 + 0x40]
add rcx, r9
add r10, rcx
inc r10
jmp 0x1400fc273
movabs rdx, 0x92d53cbda7003279
add rdx, r10
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r8d, [rbx + rdx]
sub r8b, 0x4f
jmp 0x1400fc270
movabs rcx, 0x71d3f49c00e165af
add rcx, r10
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r8d, [rbx + rcx]
add r8b, 0x37
jmp 0x1400fc260
lea rdx, [rbp + 0x158cb1c]
jmp 0x1400fcf05
lea rdx, [rbp + 0xe83181]
jmp 0x1400fcf05
lea rdx, [rsp + 0x40]
lea rax, [rbp - 8]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movzx r10d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x44], eax
movups xmmword [rbp - 0x54], xmm0
mov word [rbp - 0x40], ax
movabs rdi, 0x6ad472eb3c54544d
mov byte [rbp - 0x3e], al
movabs rsi, 0x79f81d399b838353
mov dword [rbp - 0x60], 0x8cba99c4
movabs r15, 0x4e3ae0e6a1595959
mov dword [rbp - 0x5c], 0xb084bc80
movabs r14, 0xdd825b6c58d0d0a1
mov dword [rbp - 0x58], 0xbb0b682
movabs r12, 0x410c999f161e1def
movabs r13, 0xba2dd58c9fefefb6
nop
mov r8, qword [0x14022e4a8]
mov r9, qword [0x14022e4a0]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x1400fdd12
movzx r11d, byte [rbp + rbx - 0x60]
mov rdx, r11
cmp r8, rbx
ja 0x1400fdd09
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x1400fcfe1
lea rcx, [rbx + r15]
mov rax, rcx
and rax, rdx
imul r10, rax, 0xfffffffffffffffe
add r10, rcx
add r10, rdx
sub r10b, 0x6f
jmp 0x1400fd030
je 0x1400fdc85
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400fdbeb
lea rax, [rcx + 1]
cmp r8, rax
je 0x1400fdbb4
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400fdb90
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fdb66
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400fdb15
nop dword [rax + rax]
cmp r9, rbx
ja 0x1400fdd00
lea rax, [r9 + 0x64]
cmp r8, rax
jae 0x1400fd05a
lea rcx, [rbx + rdi]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x1b
jmp 0x1400fd0a0
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400fdaf4
inc rax
cmp r8, rax
je 0x1400fdac7
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fda9d
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400fda79
lea rax, [r9 + 8]
cmp r8, rax
je 0x1400fda47
nop word [rax + rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x1400fd6fa
nop dword [rax]
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x1400fd6d1
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x1400fd69f
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400fd675
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x1400fd651
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x1400fd62a
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x1400fd606
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x1400fd5dd
lea rax, [r9 + 9]
cmp r8, rax
je 0x1400fd5b4
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x1400fd57d
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x1400fd0b0
lea r8, [r9 + 0x80]
lea r9, [r8 + 4]
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x1400fdcdb
lea rax, [r9 + 2]
cmp r8, rax
jb 0x1400fdcb6
lea rax, [r9 + 3]
cmp r8, rax
jb 0x1400fd2a3
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x1400fd288
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x1400fd26d
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x1400fd51c
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x1400fd4ba
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x1400fd467
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x1400fd43a
lea rax, [r9 + 5]
cmp r8, rax
jb 0x1400fd0b0
lea r8, [r9 + 0x3e8]
lea r9, [r8 + 6]
lea rax, [r9 + 3]
cmp r8, rax
ja 0x1400fd403
lea rax, [r9 + 4]
cmp r8, rax
ja 0x1400fd3da
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x1400fd3b1
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x1400fd388
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x1400fd360
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x1400fd33b
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x1400fd310
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x1400fd2e7
lea rax, [r9 + 6]
cmp r8, rax
ja 0x1400fd2be
lea rax, [r9 + 8]
cmp r8, rax
ja 0x1400fd0b0
lea r8, [r9 + 0x1000]
lea r9, [r8 + 0x200]
jmp 0x1400fd0b0
lea rcx, [rbx + rsi]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x45
jmp 0x1400fd0a0
lea rcx, [rbx + r14]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x67
jmp 0x1400fd030
lea rcx, [rbx + r12]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x77
jmp 0x1400fcfb2
mov ecx, reloc.WS2_32.dll_sendto
movabs rdx, 0x56a39759e2a2a268
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fdb34
lea rdx, [rbx + r13]
mov ecx, 3
movzx eax, r11b
inc r9
and al, dl
dec rbx
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x1400fcfa2
movzx eax, r11b
movabs rcx, 0x1db813bf5d3d3d04
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x1c
inc rbx
jmp 0x1400fcfa2
movabs rdx, 0x814251f21a8a8a52
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x3e
jmp 0x1400fd9e7
movzx eax, r11b
movabs rcx, 0xe4cc9024d7d7d7a0
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x60
add r8, r9
jmp 0x1400fdbd2
mov ecx, 0x3f
movabs rdx, 0x4856ce57952524ee
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400fdbd2
mov ecx, reloc.WLDAP32.dll_Ordinal_46
movabs rdx, 0xabe10c8a5272723c
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fdc0d
mov ecx, Ordinal_30
movabs rdx, 0xf6b4abd0fbfbf8a
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fdc3d
movzx eax, r11b
mov ecx, recv
movabs rdx, 0x72f588efcd0d0cd8
add rdx, rbx
and al, dl
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x1400fcfa2
movzx eax, r11b
movabs rcx, 0xebcf246ea64e4e1b
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x43
mov byte [rbp + rbx - 0x60], r10b
inc rbx
jmp 0x1400fcfa2
movabs rdx, 0x4f5962a1639b9b69
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
add r10b, 0x21
add r10b, dl
cmp r9, 0xa
jb 0x1400fd45a
movzx ecx, r11b
movabs rdx, 0x2b759be449999976
add rdx, rbx
movzx eax, r11b
and al, dl
add al, al
sub cl, al
add cl, dl
lea r10d, [rcx*2 - 0x74]
jmp 0x1400fdb34
movabs rdx, 0xb2e3a0d420e8e8b7
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
dec r10b
add r10b, dl
cmp r8, 8
jae 0x1400fd9c2
lea rax, [r9 + 0x1000]
cmp r8, rax
jbe 0x1400fd8c2
mov ecx, reloc.WS2_32.dll_gethostname
movabs rdx, 0xedc09dfae9e9e82
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
jmp 0x1400fd487
movabs rcx, 0x166ddf06de363605
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x23
lea rax, [r9 + r8]
cmp rax, 5
je 0x1400fda19
lea rax, [r9 + 0x3e8]
cmp r8, rax
jbe 0x1400fd7c5
movabs rcx, 0xa40796f4724a4a35
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x73
jmp 0x1400fd4dc
mov ecx, Ordinal_50
movabs rdx, 0x80fab18369f9f9ce
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x1400fcfa2
mov ecx, reloc.WLDAP32.dll_Ordinal_30
movabs rdx, 0xe484efb62747471c
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fdc3d
mov ecx, reloc.WS2_32.dll_listen
movabs rdx, 0x480f2de8e494946a
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fdc0d
movabs rcx, 0xab996c1ba1e1e1b8
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 8
jmp 0x1400fdbd2
movabs rcx, 0xf23aa4e5f2f2f06
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x2a
add r8, r9
jmp 0x1400fdbd2
movabs rcx, 0x72ade8811c7c7c54
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x4c
jmp 0x1400fd9ea
movabs rcx, 0xd63826b3d9c9c9a2
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x6e
inc rbx
jmp 0x1400fcfa2
mov ecx, gethostname
movabs rdx, 0x39c264e6971716f0
add rdx, rbx
inc r9
movzx eax, dl
dec rbx
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x1400fcfa2
mov ecx, Ordinal_41
movabs rdx, 0x9d4ca3195464643e
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fdb34
lea rax, [r9 + 4]
cmp r8, rax
jae 0x1400fd71e
lea rcx, [rbx + r15]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x6f
jmp 0x1400fd53b
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fd759
movabs rcx, 0xd5a8e5d678a8a89a
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [r11 + rcx]
sub r10b, 0x36
inc rbx
jmp 0x1400fcfa2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fd78e
mov ecx, reloc.WLDAP32.dll_Ordinal_41
movabs rdx, 0x477fed0b83737362
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
add r8, r9
jmp 0x1400fdbd2
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fd53b
movabs rcx, 0x806b70a608d8d8c6
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x6a
inc rbx
jmp 0x1400fcfa2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fd7f2
movabs rcx, 0x407d58c1b4fcfce7
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x51
jmp 0x1400fdb34
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fd823
movzx eax, r11b
movabs rcx, 0xb2545ff6bfc7c7af
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x37
add r8, r9
jmp 0x1400fdbd2
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fd851
movzx eax, r11b
movabs rcx, 0x4eca21c4027a7a61
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x59
jmp 0x1400fdbd2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fd882
movabs rdx, 0x87b5a55e87dfdfc5
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x63
add r10b, dl
jmp 0x1400fdc3d
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400fd4dc
movzx eax, r11b
movabs rcx, 0x242b672bca929277
add rcx, rbx
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + r11]
sub r10b, 0x41
inc rbx
jmp 0x1400fcfa2
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1400fd8fe
movzx eax, r11b
movabs rcx, 0xab51cbacf1515134
add rcx, rbx
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + r11]
sub r10b, 0x6c
inc rbx
jmp 0x1400fcfa2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fd92f
movabs rdx, 0xe43d4f4776b6b698
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x28
add r10b, dl
jmp 0x1400fdc0d
lea rax, [rcx + 1]
cmp r8, rax
jne 0x1400fd95d
movzx eax, r11b
movabs rcx, 0x80b31114b969694a
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 6
jmp 0x1400fdbd2
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fd986
mov ecx, Ordinal_35
movabs rdx, 0xb99e94af3ececeae
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
jmp 0x1400fd9e4
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fd48a
mov ecx, Ordinal_50
movabs rdx, 0x5614567c81818160
add rdx, rbx
movzx eax, r11b
and al, dl
dec rbx
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x1400fcfa2
movzx r10d, byte [rbp + rbx - 0x60]
movabs rdx, 0xc7eb5db18c4c4c28
add rdx, rbx
movzx eax, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x18
add r10b, r11b
add r10b, dl
movabs rdx, 0x16263e982da5a581
movzx eax, r11b
add rdx, rbx
movzx ecx, r10b
and al, dl
add al, al
sub cl, al
add cl, 0x79
add cl, r11b
add cl, dl
mov byte [rbp + rbx - 0x60], cl
add r8, r9
jmp 0x1400fdbd2
mov ecx, 5
movabs rdx, 0x64611f7ecefefeda
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
sub r10b, byte [rbp + rbx - 0x60]
add r10b, r11b
add r10b, dl
jmp 0x1400fdc0d
movabs rcx, 0xeaf84322949c9c8f
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [r11 + rcx]
add r10b, 0x17
inc rbx
jmp 0x1400fcfa2
movabs rcx, 0x1596fdbacc848479
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x4f
jmp 0x1400fdbd2
movabs rcx, 0x4035b853046c6c63
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x4b
inc rbx
jmp 0x1400fcfa2
movabs rcx, 0xa3bff685c1b9b9b1
inc r9
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x29
inc rbx
jmp 0x1400fcfa2
movabs rcx, 0x74a34b87f0706ff
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 7
jmp 0x1400fdb34
movabs rcx, 0xce5eb11df9a1a19b
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x3d
movzx eax, r11b
movabs rcx, 0x79b07ccaeaf2f2cf
add rcx, rbx
and al, cl
add al, al
sub r11b, al
add r11b, 0x57
add r11b, cl
mov byte [rbp + rbx - 0x60], r11b
inc r9
dec rbx
inc rbx
jmp 0x1400fcfa2
movabs rcx, 0x95732d83743c3c37
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x7f
dec rbx
inc rbx
jmp 0x1400fcfa2
movabs rcx, 0x5c87a9e8eed6d6d3
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x3b
add r8, r9
jmp 0x1400fdbd2
movabs rcx, 0xc011e81bac242421
add rcx, rbx
movzx eax, cl
and al, dl
add al, al
sub dl, al
lea r10d, [rcx + rdx]
add r10b, 0x19
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1400fcfa2
mov r11, rdx
movabs rcx, 0x239c264e6971716f
add rcx, rbx
movzx r10d, r11b
and dl, cl
add dl, dl
sub r10b, dl
sub r10b, 9
add r10b, cl
movzx eax, r11b
inc r9
movabs rdx, 0xb29c006570585833
movzx ecx, r11b
add rdx, rbx
and al, dl
add al, al
sub cl, al
sub cl, 0x65
add cl, dl
movzx eax, cl
mov byte [rbp + rbx - 0x60], al
add rax, r9
sub rbx, rax
inc r8
movabs rdx, 0xd6e14c11b1b18c
add rdx, rbx
mov ecx, reloc.WLDAP32.dll_Ordinal_22
movzx eax, dl
and al, r11b
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, dl
add cl, r11b
mov byte [rbp + rbx - 0x60], cl
add rbx, rax
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400fcfa2
movzx eax, dl
movabs rcx, 0xeab0a2b3e40c0c0b
add rcx, rbx
and al, cl
add al, al
sub dl, al
lea r10d, [rcx + rdx]
sub r10b, 0x4d
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400fcfa2
movzx eax, r11b
movabs rcx, 0xa496d7d1d36b6b3d
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x55
jmp 0x1400fcfa0
movzx eax, r11b
movabs rcx, 0x821160490b8b88b
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x33
jmp 0x1400fcf90
lea rdx, [rbp + 0x148076c]
jmp 0x1400fdd16
lea rdx, [rbp + 0x6160c5]
jmp 0x1400fdd16
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [rbp - 0x10]
call fcn.140198c88
movzx r11d, byte [rsp + 0x30]
mov rsi, rax
xor eax, eax
mov dword [rbp - 0x38], 0x70826d40
xorps xmm0, xmm0
mov dword [rbp - 0x1c], eax
mov word [rbp - 0x18], ax
movabs r13, 0x94c6feaf66f7d683
mov byte [rbp - 0x16], al
movabs r14, 0x3452e463725498bf
mov dword [rbp - 0x34], 0x7c888084
movabs r15, 0xc80c493ce8917921
mov dword [rbp - 0x30], 0x1b747682
movabs r12, 0x9e7e4bde1aa1cc1b
movups xmmword [rbp - 0x2c], xmm0
nop word [rax + rax]
mov r8, qword [0x14022e4a8]
mov r9, qword [0x14022e4a0]
nop
xor edi, edi
cmp rdi, 0x23
jae 0x1400feb43
movzx ebx, byte [rbp + rdi - 0x38]
mov r10, rbx
cmp r8, rdi
ja 0x1400feb3a
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1400fddf1
lea rcx, [rdi + r13]
mov r11, rbx
movzx eax, cl
and al, r10b
add al, al
sub r11b, al
add r11b, 0x6b
add r11b, cl
jmp 0x1400fde37
je 0x1400feab8
inc rax
cmp r8, rax
je 0x1400fea4b
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fe9fc
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400fe99d
lea rax, [r9 + 7]
cmp r8, rax
je 0x1400fe974
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400fe929
cmp r9, rdi
ja 0x1400feb31
lea rax, [r9 + 5]
cmp r8, rax
jae 0x1400fde64
lea rdx, [rdi + r14]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
sub r11b, 0x39
add r11b, dl
jmp 0x1400fdeb0
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400fe909
inc rax
cmp r8, rax
je 0x1400fe8e0
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fe8bd
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400fe89a
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400fe876
nop dword [rax]
nop dword [rax + rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x1400fe46b
nop dword [rax]
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x1400fe448
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400fe41c
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fe3f3
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400fe3cb
lea rax, [r9 + 8]
cmp r8, rax
je 0x1400fe3a3
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x1400fe37b
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x1400fe358
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x1400fe335
lea r8, [r9 + 0x400]
lea r9, [r8 + 3]
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x1400feb0e
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x1400feaeb
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1400fe08f
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x1400fe071
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x1400fe053
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x1400fe2d9
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x1400fe27b
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x1400fe227
lea rax, [r9 + 8]
cmp r8, rax
jb 0x1400fdec0
lea r8, [r9 + 0x80]
lea r9, [r8 + 0xa]
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x1400fe1f6
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x1400fe1ce
lea rax, [r9 + 6]
cmp r8, rax
ja 0x1400fe1a6
lea rax, [r9 + 9]
cmp r8, rax
ja 0x1400fe17e
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x1400fe15b
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x1400fe138
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x1400fe10f
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x1400fe0de
lea rax, [r9 + 2]
cmp r8, rax
ja 0x1400fe0b6
lea rax, [r9 + 4]
cmp r8, rax
ja 0x1400fdec0
lea r8, [r9 + 0x40]
lea r9, [r8 + 6]
jmp 0x1400fdec0
lea rdx, [rdi + r15]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
add r11b, 0x19
add r11b, dl
jmp 0x1400fdeb0
lea rdx, [rdi + r12]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
add r11b, 0x43
add r11b, dl
jmp 0x1400fde37
movabs rdx, 0x74f04e7f4cb21f15
movzx eax, bl
add rdx, rdi
movzx r11d, bl
and al, dl
add al, al
sub r11b, al
add r11b, 0x6d
add r11b, dl
jmp 0x1400fddc1
mov ecx, Ordinal_30
movabs rdx, 0xa297231b92a4c5f8
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1400fe947
mov ecx, Ordinal_50
movabs rdx, 0x790925bcc4b518f2
add rdx, rdi
movzx eax, bl
and al, dl
inc r9
sub cl, al
dec rdi
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1400fddb2
movzx eax, bl
movabs rcx, 0x4f7b285df6c56bec
add rcx, rdi
dec rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x74
inc rdi
jmp 0x1400fddb2
movabs rcx, 0x25ed2aff28d5bee6
movzx eax, bl
add rcx, rdi
and al, cl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x4a
jmp 0x1400fe9bb
movzx eax, bl
movabs rcx, 0xfc5f2da05ae611e0
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x20
jmp 0x1400fe9e0
mov ecx, 5
movabs rdx, 0xd2d130418cf664da
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1400fe9e3
mov ecx, reloc.WLDAP32.dll_Ordinal_26
movabs rdx, 0xa94332e2bf06b7d4
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400fea1e
mov ecx, Ordinal_50
movabs rdx, 0x7fb53583f1170ace
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400fea72
movzx eax, bl
movabs rcx, 0x5627382523275dc8
add rcx, rdi
and al, cl
add al, al
sub bl, al
movzx eax, byte [rbp + rdi - 0x38]
add rax, r9
add rdi, rax
lea r11d, [rcx + rbx]
sub r11b, 0x78
inc rdi
jmp 0x1400fddb2
movabs rdx, 0x44b6415952608033
movzx eax, bl
add rdx, rdi
movzx r11d, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 0x65
add r11b, dl
cmp r9, 8
jb 0x1400fe80f
mov edx, reloc.WS2_32.dll_recvfrom
movabs rcx, 0x474979e306bf7832
add rcx, rdi
movzx eax, bl
and al, cl
sub dl, al
add dl, dl
add dl, cl
add dl, bl
lea r11d, [rdx + rdx]
jmp 0x1400fe947
movabs rdx, 0x1b2843fa8470d32d
movzx eax, bl
add rdx, rdi
movzx r11d, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 0x3b
add r11b, dl
cmp r8, 0x10
jae 0x1400fe81c
lea rax, [r9 + 3]
cmp r8, rax
jbe 0x1400fe6cf
mov ecx, reloc.WLDAP32.dll_Ordinal_35
movabs rdx, 0xa7bd942efb62b5f6
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
jmp 0x1400fe246
movabs rcx, 0xf19a469bb6812627
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x11
lea rax, [r9 + r8]
cmp rax, 0x40
je 0x1400fe849
lea rax, [r9 + 0x7a]
cmp r8, rax
jbe 0x1400fe5ba
movabs rcx, 0x736aafcb890e1d37
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x7f
jmp 0x1400fe29d
movabs rcx, 0x10635cf5e00be774
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x2c
jmp 0x1400fea72
movabs rcx, 0xe6d55f97121c3a6e
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 2
jmp 0x1400fea1e
mov ecx, reloc.WS2_32.dll_sendto
movabs rdx, 0xbd476238442c8d68
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400fe9e3
mov ecx, reloc.WLDAP32.dll_Ordinal_41
movabs rdx, 0x93b964d9763ce062
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400fe9e0
mov ecx, 0x3e
movabs rdx, 0x6a2b677aa84d335c
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400fe9bb
movabs rcx, 0x409d6a1bda5d8656
add rcx, rdi
dec rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x5a
inc rdi
jmp 0x1400fddb2
movabs rcx, 0x170f6cbd0c6dd950
inc r9
add rcx, rdi
dec rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x30
inc rdi
jmp 0x1400fddb2
movabs rcx, 0xed816f5e3e7e2c4a
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 6
jmp 0x1400fe947
lea rax, [r9 + 0x3e8]
cmp r8, rax
jae 0x1400fe491
lea rcx, [rdi + r13]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x6b
jmp 0x1400fe2f7
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fe4cb
movabs rcx, 0x68a5c8c6e4a9317e
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
movzx eax, byte [rbp + rdi - 0x38]
add rax, r9
add rdi, rax
lea r11d, [rbx + rcx]
sub r11b, 0x72
inc rdi
jmp 0x1400fddb2
inc rax
cmp r8, rax
jne 0x1400fe4fb
mov ecx, Ordinal_30
movabs rdx, 0xbbc1c38480888b8a
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1400fea1e
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fe527
movabs rcx, 0xeddbe421c67e596
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x1a
jmp 0x1400fe9e0
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fe553
movabs rcx, 0x386bbba0ea57929c
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x44
jmp 0x1400fe9bb
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fe585
movabs rcx, 0x61f9b8ffb8473fa2
add rcx, rdi
dec rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x6e
inc rdi
jmp 0x1400fddb2
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400fe2f7
mov ecx, Ordinal_35
movabs rdx, 0xb515b3bd542699ae
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400fe947
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fe5e6
movabs rcx, 0x9cf8ad2a56fdca3d
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x55
jmp 0x1400fe947
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fe617
movzx eax, bl
movabs rcx, 0xf014a7e7f2dd2449
add rcx, rdi
dec rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
inc r11b
inc rdi
jmp 0x1400fddb2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fe647
movabs rdx, 0x19a2a546c0ccd14f
movzx eax, bl
add rdx, rdi
movzx r11d, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 0x29
add r11b, dl
jmp 0x1400fe9bb
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fe673
movzx eax, bl
movabs rcx, 0x4330a2a58ebc7e55
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x53
jmp 0x1400fe9e0
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fe69f
movzx eax, bl
movabs rcx, 0x6cbea0045cac2b5b
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x7d
jmp 0x1400fe9e3
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400fe29d
movabs rcx, 0xbfda9ac1f88b8567
movzx eax, bl
add rcx, rdi
and al, cl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x2f
jmp 0x1400fea72
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1400fe70e
movzx eax, bl
mov ecx, recv
movabs rdx, 0xd14b918dc95262fc
add rdx, rdi
and al, dl
sub cl, al
movzx eax, byte [rbp + rdi - 0x38]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1400fddb2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fe73e
movabs rdx, 0x24678c4b6531bd08
movzx eax, bl
add rdx, rdi
movzx r11d, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 0x38
add r11b, dl
jmp 0x1400fea1e
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fe76f
mov ecx, Ordinal_60
movabs rdx, 0x7783870901111714
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1400fe9e0
lea rax, [rcx + 1]
cmp r8, rax
jne 0x1400fe7a6
mov ecx, reloc.WS2_32.dll_recv
movabs rdx, 0xca9f81c69cf07120
add rdx, rdi
movzx eax, bl
and al, dl
dec rdi
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1400fddb2
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fe7db
movzx eax, bl
movabs rcx, 0xf42d7f256ae01e26
add rcx, rdi
inc r9
and al, cl
dec rdi
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0xa
inc rdi
jmp 0x1400fddb2
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400fe249
movabs rdx, 0x1dbb7c8438cfcb2c
movzx eax, bl
add rdx, rdi
movzx r11d, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 0x34
add r11b, dl
jmp 0x1400fe947
mov byte [rbp + rdi - 0x38], r11b
inc rdi
jmp 0x1400fddb2
mov ecx, reloc.WLDAP32.dll_Ordinal_60
movabs rdx, 0x70d77741d4af2538
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, byte [rbp + rdi - 0x38]
add r11b, dl
add r11b, bl
jmp 0x1400fe9bb
mov ecx, Ordinal_41
movabs rdx, 0x9a6574a0a29ed23e
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
sub r11b, byte [rbp + rdi - 0x38]
add r11b, bl
add r11b, dl
jmp 0x1400fea1e
movabs rdx, 0x80c2cf59e1d200ef
movzx r11d, bl
add rdx, rdi
movzx eax, dl
and al, bl
add al, al
sub r11b, al
add r11b, 0x77
jmp 0x1400fea6f
movabs rcx, 0x5734d1fb13e253e9
movzx eax, bl
add rcx, rdi
and al, cl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x5f
jmp 0x1400fea1e
movabs rcx, 0xda8ad9deaa134cd7
movzx eax, bl
add rcx, rdi
and al, cl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x1f
jmp 0x1400fe9bb
movzx eax, bl
movabs rcx, 0xb0fcdc7fdc239fd1
add rcx, rdi
dec rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
add r11b, 0x49
inc rdi
jmp 0x1400fddb2
movabs rcx, 0x5de0e1c2404445c5
movzx eax, bl
add rcx, rdi
and al, cl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x63
jmp 0x1400fe947
movabs rcx, 0xac4e704a464ebb9
movzx eax, bl
add rcx, rdi
and al, cl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0xf
movabs rcx, 0xdc1078926db74eb5
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
add cl, 0xd
add cl, bl
mov byte [rbp + rdi - 0x38], cl
inc r9
dec rdi
inc rdi
jmp 0x1400fddb2
movzx eax, bl
movabs rcx, 0xb7a8ec47088591ad
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
add r11b, 0x45
dec rdi
inc rdi
jmp 0x1400fddb2
movabs rcx, 0x8e1aeee83a95e4a7
movzx eax, bl
add rcx, rdi
and al, cl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x6f
movabs rdx, 0x59e75f13ba6fbbb
movzx ecx, r11b
add rdx, rdi
movzx eax, dl
and al, bl
add al, al
sub cl, al
sub cl, 0x1d
add cl, dl
add cl, bl
mov byte [rbp + rdi - 0x38], cl
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x1400fddb2
movabs rcx, 0x1170f6cbd0c6dd95
mov rbx, r10
add rcx, rdi
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x13
inc r9
movabs rcx, 0x2f2c73500996a8c1
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
sub cl, 0x47
add cl, bl
movzx eax, cl
mov byte [rbp + rdi - 0x38], al
add rax, r9
sub rdi, rax
jmp 0x1400fea72
movabs rdx, 0xe7e2f96d02d7308f
movzx eax, r10b
add rdx, rdi
movzx r11d, r10b
and al, dl
movzx ebx, r10b
add al, al
sub r11b, al
add r11b, 0x17
add r11b, dl
movzx eax, bl
inc r8
movabs rdx, 0xc3f371ff708e7f44
mov ecx, reloc.WS2_32.dll_select
add rdx, rdi
and al, dl
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, bl
add cl, dl
mov byte [rbp + rdi - 0x38], cl
add rdi, rax
movzx eax, byte [rbp + rdi - 0x38]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1400fddb2
movzx eax, r10b
movabs rcx, 0xbe54fc0e34e78389
add rcx, rdi
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x41
movzx eax, byte [rbp + rdi - 0x38]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1400fddb2
movzx eax, bl
movabs rcx, 0x4b6251207ec2720f
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x69
jmp 0x1400fddb0
movzx eax, bl
movabs rcx, 0x21d453c1b0d2c509
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x3f
jmp 0x1400fdda0
lea rdx, [rbp + 0x1441fcc]
jmp 0x1400feb47
lea rdx, [rbp + 0x13bf64f]
jmp 0x1400feb47
lea rdx, [rbp - 0x38]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [rsi + 0x10]
lea rbx, [rsi + 0x18]
test eax, eax
je 0x1400feb94
mov edi, eax
lea r9, [rbx + 8]
mov r8, rbx
lea rdx, [rbp]
lea rcx, [0x14022e1f8]
call fcn.140059aa0
add rbx, 0x14
sub rdi, 1
jne 0x1400feb73
mov rcx, rsi
call fcn.1401988f4
mov rcx, qword [rbp - 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.140198890
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret