Function at 0x1400fdf70
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x1401dc800]
xor rax, rsp
mov qword [rbp + 0x18], rax
movzx r10d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp - 0x7a], rax
movups xmmword [rsp + 0x76], xmm0
mov dword [rbp - 0x72], eax
movabs r13, 0x58a201712d69d18a
mov byte [rbp - 0x6e], al
movabs r14, 0x454a1e48b9ae3052
mov dword [rsp + 0x40], 0x87948c84
movabs r15, 0x1ff6c873a874c5ee
mov dword [rsp + 0x44], 0x9a888893
movabs r12, 0x6eb2c5914da122da
mov dword [rsp + 0x48], 0x8c9f8bb0
mov dword [rsp + 0x4c], 0x90808c83
mov dword [rsp + 0x50], 0x8b9b8891
mov dword [rsp + 0x54], 0x989f86bc
mov dword [rsp + 0x58], 0x43978898
mov dword [rsp + 0x5c], 0x9c918cbe
mov dword [rsp + 0x60], 0x86859391
mov dword [rsp + 0x64], 0x9fa68d97
mov dword [rsp + 0x68], 0x9c9b8a8d
mov dword [rsp + 0x6c], 0xaa5e8591
mov dword [rsp + 0x70], 0x85898891
mov word [rsp + 0x74], 0x7981
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x1402304a8]
mov r9, qword [0x1402304a0]
nop
xor r11d, r11d
cmp r11, 0x53
jae 0x1400feb89
movzx esi, byte [rsp + r11 + 0x40]
mov edi, esi
nop word [rax + rax]
mov rbx, rdi
cmp r8, r11
ja 0x1400feb80
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x1400fe0bf
lea rcx, [r11 + r13]
mov rax, rcx
and rax, rdi
imul r10, rax, 0xfffffffffffffffe
add r10, rcx
add r10, rdi
add r10b, 0x3a
jmp 0x1400fe100
je 0x1400feaf9
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fea5e
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400fea22
lea rax, [r9 + 7]
cmp r8, rax
je 0x1400fe9f7
lea rax, [rcx + 1]
cmp r8, rax
je 0x1400fe9a3
nop dword [rax]
cmp r9, r11
ja 0x1400feb77
lea rax, [r9 + 0x2a]
cmp r8, rax
jae 0x1400fe12d
lea rdx, [r11 + r14]
movzx r10d, dil
movzx eax, dl
and al, bl
add al, al
sub r10b, al
sub r10b, 0x3e
add r10b, dl
jmp 0x1400fe170
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400fe97e
inc rax
cmp r8, rax
je 0x1400fe96a
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fe925
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400fe904
lea rax, [r9 + 8]
cmp r8, rax
je 0x1400fe8d4
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, r11
jbe 0x1400fe4d7
nop dword [rax]
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1400fe4b3
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x1400fe481
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400fe457
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x1400fe42e
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x1400fe40a
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x1400fe180
lea r8, [r9 + 0x64]
lea r9, [r8 + 0x61]
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x1400feb52
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x1400feb29
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x1400fe2b8
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x1400fe299
lea rax, [r9 + 2]
cmp r8, rax
jb 0x1400fe27a
lea rax, [r9 + 6]
cmp r8, rax
jb 0x1400fe3b3
lea r8, [r9 + 4]
lea r9, [r8 + 0x10]
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x1400fe37b
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x1400fe353
lea rax, [r9 + 9]
cmp r8, rax
ja 0x1400fe32a
lea rax, [r9 + 4]
cmp r8, rax
ja 0x1400fe305
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x1400fe2dc
lea r8, [r9 + 0x3e8]
lea r9, [r8 + 9]
jmp 0x1400fe180
lea rdx, [r11 + r15]
mov ecx, 0x3f
movzx eax, bl
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1400fe170
lea rdx, [r11 + r12]
mov ecx, 5
movzx eax, bl
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1400fe100
movabs rcx, 0xbd6ec2aef2cd7fc6
movzx r10d, dil
add rcx, r11
and bl, cl
add bl, bl
sub r10b, bl
sub r10b, 0x6a
add r10b, cl
jmp 0x1400fe090
mov ecx, 8
movabs rdx, 0x2a50f245cd718290
add rdx, r11
movzx eax, sil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
jmp 0x1400fe9c3
movzx eax, sil
movabs rcx, 0xb3fce3da074f532c
add rcx, r11
and al, cl
add al, al
sub sil, al
lea r10d, [rcx + rsi]
sub r10b, 0x34
jmp 0x1400fea45
mov ecx, Ordinal_45
movabs rdx, 0x2b8e0f7ac7bb018
add rdx, r11
movzx eax, sil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
jmp 0x1400fea7d
movabs rdx, 0x5174de1551a80d04
movzx eax, sil
add rdx, r11
movzx r10d, sil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x1c
add r10b, dl
jmp 0x1400feaaf
movzx eax, sil
mov ecx, gethostname
movabs rdx, 0xa030db32f6d469f0
add rdx, r11
and al, dl
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rcx]
add r10b, sil
add r10b, dl
inc r11
jmp 0x1400fe073
movabs rdx, 0x33c2d11ab8efaf2a
movzx eax, sil
add rdx, r11
movzx r10d, sil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x26
add r10b, dl
cmp r9, 0x40
jb 0x1400fe86c
mov ecx, recv
movabs rdx, 0x508c931818297cfc
add rdx, r11
movzx eax, sil
and al, dl
sub cl, al
add cl, cl
add cl, sil
add cl, dl
lea r10d, [rcx + rcx]
jmp 0x1400fe9c3
movabs rcx, 0x3d34afefa46ddbc4
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x5c
jmp 0x1400fea7d
mov ecx, 0x24
movabs rdx, 0x2968a74893f2f288
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, sil
add r10b, dl
jmp 0x1400fe940
movabs rcx, 0x7824a466391f4f74
add rcx, r11
dec r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x2c
inc r11
jmp 0x1400fe073
mov ecx, Ordinal_50
movabs rdx, 0xc6e0a183de4bac60
add rdx, r11
inc r9
movzx eax, dl
dec r11
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
inc r11
jmp 0x1400fe073
movabs rcx, 0x159c9ea18378094c
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x14
jmp 0x1400fe9c3
lea rax, [r9 + 9]
cmp r8, rax
jae 0x1400fe574
lea rcx, [r11 + r13]
mov eax, Ordinal_30
and bl, cl
sub al, bl
lea r10d, [rax + rax]
add r10b, dil
add r10b, cl
lea rax, [r9 + r8]
cmp rax, 0x10
je 0x1400fe8a6
lea rax, [r9 + 0x80]
cmp r8, rax
jbe 0x1400fe6ae
movabs rcx, 0x1e9a57f7d236ede2
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x2e
cmp r8, 0x5a
jae 0x1400fe879
lea rax, [r9 + 0x42]
cmp r8, rax
jbe 0x1400fe756
movabs rdx, 0x63e476408be51e34
movzx eax, sil
add rdx, r11
movzx r10d, sil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x6c
jmp 0x1400fe3d3
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1400fe5b0
movabs rcx, 0x8a943c91735c60a4
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rsi + rcx]
sub r10b, 0x7c
inc r11
jmp 0x1400fe073
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fe5dd
movabs rcx, 0x9e60453883d749e0
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x20
jmp 0x1400fea45
lea rax, [rcx + 1]
cmp r8, rax
jne 0x1400fe60f
mov ecx, Ordinal_45
movabs rdx, 0x4fa4481adeaaecf4
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
jmp 0x1400fea42
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fe640
movabs rdx, 0xe84afd397e9008
movzx r10d, sil
add rdx, r11
movzx eax, dl
and al, sil
add al, al
sub r10b, al
sub r10b, 0x38
add r10b, dl
jmp 0x1400fe940
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400fe678
mov ecx, reloc.WLDAP32.dll_Ordinal_30
movabs rdx, 0xb22c4ddf9452331c
add rdx, r11
dec r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
inc r11
jmp 0x1400fe073
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fe4fb
mov ecx, reloc.WS2_32.dll_select
movabs rdx, 0x14b453a449f97944
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
jmp 0x1400fe9c3
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fe6e0
mov ecx, reloc.WLDAP32.dll_Ordinal_35
movabs rdx, 0xcfde5ada2d0a90f6
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
jmp 0x1400fe9c3
inc rax
cmp r8, rax
jne 0x1400fe715
movabs rcx, 0x81225dbc87de340a
inc r9
add rcx, r11
dec r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x46
inc r11
jmp 0x1400fe073
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fe538
movzx eax, sil
movabs rcx, 0x59fe71ed03a7a996
add rcx, r11
and al, cl
add al, al
sub sil, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rsi]
sub r10b, 0x1a
inc r11
jmp 0x1400fe073
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fe797
movzx eax, sil
mov ecx, 4
movabs rdx, 0x15287922e6b8c148
add rdx, r11
and al, dl
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rcx]
add r10b, sil
add r10b, dl
inc r11
jmp 0x1400fe073
inc rax
cmp r8, rax
jne 0x1400fe7c7
movabs rdx, 0x77b07ee79c600770
movzx eax, sil
add rdx, r11
movzx r10d, sil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x10
add r10b, dl
jmp 0x1400fea7d
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fe7f9
mov ecx, Ordinal_41
movabs rdx, 0x8b7c878eacdaf0ac
add rdx, r11
movzx eax, sil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, sil
add r10b, dl
jmp 0x1400fe940
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fe82d
movzx eax, sil
movabs rcx, 0x3cc08a7107ae93c0
add rcx, r11
dec r11
and al, cl
add al, al
sub sil, al
lea r10d, [rcx + rsi]
sub r10b, 0x40
inc r11
jmp 0x1400fe073
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400fe3d6
mov ecx, reloc.WLDAP32.dll_Ordinal_26
movabs rdx, 0xee048d53628236d4
add rdx, r11
movzx eax, sil
and al, dl
inc r9
sub cl, al
dec r11
lea r10d, [rcx + rcx]
add r10b, sil
add r10b, dl
inc r11
jmp 0x1400fe073
mov byte [rsp + r11 + 0x40], r10b
inc r11
jmp 0x1400fe073
movzx r10d, byte [rsp + r11 + 0x40]
movabs rdx, 0x1d095fa72fd2010
add rdx, r11
movzx eax, sil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x70
add r10b, sil
add r10b, dl
jmp 0x1400fe940
mov ecx, 2
movabs rdx, 0xb31498dccdd0c324
add rdx, r11
movzx eax, sil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
sub r10b, byte [rsp + r11 + 0x40]
add r10b, sil
add r10b, dl
jmp 0x1400fea7d
movabs rax, 0x80ae383deb1eec06
add rax, r11
and bl, al
add bl, bl
sub dil, bl
lea r10d, [rax + rdi]
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
sub r10b, 0x2a
add r11, rax
inc r11
jmp 0x1400fe073
movabs rcx, 0x1e2632793577a5de
movzx r10d, dil
add rcx, r11
and bl, cl
add bl, bl
sub r10b, bl
sub r10b, 0x12
jmp 0x1400fea7a
movabs rax, 0xa5a29d224fcbca2
add rax, r11
and bl, al
add bl, bl
sub al, bl
lea r10d, [rsi + rax]
sub r10b, 0x6e
movabs rcx, 0x5a72976ba066f19a
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
sub cl, 0x36
add cl, sil
add cl, r10b
mov byte [rsp + r11 + 0x40], cl
jmp 0x1400fea42
movabs rcx, 0x591626efca29198e
mov eax, reloc.WS2_32.dll_ntohs
jmp 0x1400fea06
mov ecx, reloc.WLDAP32.dll_Ordinal_27
movabs rdx, 0xf68e212b1481d366
add rdx, r11
movzx eax, dl
and al, bl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x1400fe9c3
mov eax, Ordinal_41
movabs rcx, 0x94061b665eda8d3e
add rcx, r11
and bl, cl
sub al, bl
lea r10d, [rax + rax]
add r10b, dil
add r10b, cl
movabs rdx, 0xa92e948945934e86
movzx eax, sil
add rdx, r11
mov ecx, Ordinal_45
and al, dl
sub cl, al
add cl, cl
add cl, sil
add cl, dl
mov byte [rsp + r11 + 0x40], cl
inc r9
dec r11
inc r11
jmp 0x1400fe073
movabs rcx, 0x317e15a1a9334716
mov eax, 0x33
add rcx, r11
and bl, cl
sub al, bl
lea r10d, [rax + rax]
add r10b, dil
add r10b, cl
dec r11
inc r11
jmp 0x1400fe073
mov eax, 0x3f
movabs rcx, 0xcef60fdcf38c00ee
add rcx, r11
and bl, cl
sub al, bl
lea r10d, [rax + rax]
add r10b, dil
add r10b, cl
add r8, r9
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
inc r11
jmp 0x1400fe073
movabs rcx, 0x6c6e0a183de4bac6
movzx r10d, dil
add rcx, r11
and bl, cl
add bl, bl
sub r10b, bl
sub r10b, 0x6a
add r10b, cl
inc r9
movabs rdx, 0xbb69a4dfb3a94ae
add rdx, r11
mov ecx, Ordinal_35
movzx eax, dl
and al, sil
sub cl, al
add cl, cl
add cl, dl
add cl, sil
movzx eax, cl
mov byte [rsp + r11 + 0x40], al
add rax, r9
sub r11, rax
movzx eax, sil
inc r8
movabs rdx, 0x64589bbf28a46638
mov ecx, reloc.WLDAP32.dll_Ordinal_60
add rdx, r11
and al, dl
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, sil
add cl, dl
mov byte [rsp + r11 + 0x40], cl
add r11, rax
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
inc r11
jmp 0x1400fe073
movabs rax, 0x9e60453883d749e
add rax, r11
and bl, al
add bl, bl
sub dil, bl
lea r10d, [rax + rdi]
sub r10b, 0x52
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
inc r11
jmp 0x1400fe073
mov ecx, reloc.WS2_32.dll_recvfrom
movabs rdx, 0xc2abfcc97f9dcb2
add rdx, r11
movzx eax, sil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, sil
add r10b, dl
jmp 0x1400fe070
movzx eax, sil
movabs rcx, 0x5ae6bcea3d26399e
add rcx, r11
and al, cl
add al, al
sub sil, al
lea r10d, [rcx + rsi]
sub r10b, 0x52
jmp 0x1400fe060
lea rdx, [rbp + 0x158c7f8]
jmp 0x1400feb8e
lea rdx, [rbp + 0x1029982]
jmp 0x1400feb8e
lea rdx, [rsp + 0x40]
lea rax, [rbp - 8]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movzx r11d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x44], eax
movups xmmword [rbp - 0x54], xmm0
mov word [rbp - 0x40], ax
movabs rsi, 0x34c2696c3899d576
mov byte [rbp - 0x3e], al
movabs r12, 0x703a05052744471e
mov dword [rbp - 0x60], 0x1264391e
movabs r14, 0xef80b9cc52129d4a
mov dword [rbp - 0x5c], 0x161a6662
movabs r15, 0xf0cafc2038a0f0e
mov dword [rbp - 0x58], 0xfb1e1060
movabs r13, 0x2e98a5b7b50180d2
nop dword [rax]
mov r8, qword [0x1402304a8]
mov r9, qword [0x1402304a0]
nop
xor edi, edi
cmp rdi, 0x23
jae 0x1400ff7ba
movzx ebx, byte [rbp + rdi - 0x60]
mov r10, rbx
cmp r8, rdi
ja 0x1400ff7b1
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1400fec60
lea rcx, [rdi + r12]
mov rax, rcx
and rax, rbx
imul r11, rax, 0xfffffffffffffffe
add r11, rcx
add r11, rbx
add r11b, 0x2e
jmp 0x1400fec90
je 0x1400ff72f
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400ff693
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400ff632
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400ff609
nop dword [rax]
cmp r9, rdi
ja 0x1400ff7a8
lea rax, [r9 + 9]
cmp r8, rax
jae 0x1400fecbd
lea rdx, [rdi + rsi]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
sub r11b, 0x3a
add r11b, dl
jmp 0x1400fed00
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400ff5b9
inc rax
cmp r8, rax
je 0x1400ff588
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400ff565
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400ff542
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400ff51f
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x1400ff0de
nop dword [rax]
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x1400ff0bb
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400ff08a
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400ff05c
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x1400ff039
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x1400ff011
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x1400fefe9
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x1400fefb8
lea rax, [r9 + 8]
cmp r8, rax
je 0x1400fed10
lea r8, [r9 + 0xa]
lea r9, [r8 + 2]
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x1400ff785
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x1400ff762
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x1400fee87
lea rax, [r9 + 5]
cmp r8, rax
jb 0x1400fee69
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1400fee4b
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x1400fed10
lea r8, [r9 + 0x3e8]
lea r9, [r8 + 0x20]
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x1400fef82
lea rax, [r9 + 9]
cmp r8, rax
ja 0x1400fef5b
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x1400fef33
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x1400fef0b
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x1400feee8
lea rax, [r9 + 4]
cmp r8, rax
ja 0x1400feed4
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x1400feea6
lea r8, [r9 + 2]
lea r9, [r8 + 0x1000]
jmp 0x1400fed10
lea rdx, [rdi + r14]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
sub r11b, 6
add r11b, dl
jmp 0x1400fed00
lea rdx, [rdi + r15]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
sub r11b, 0x62
add r11b, dl
jmp 0x1400fec90
lea rdx, [rdi + r13]
mov ecx, reloc.WLDAP32.dll_Ordinal_33
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1400fec31
mov ecx, reloc.WLDAP32.dll_Ordinal_60
movabs rdx, 0xe52b374d27bd8f38
add rdx, rdi
movzx eax, bl
and al, dl
dec rdi
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1400fec22
movabs rdx, 0x4b72d42d93500fc
mov ecx, recv
jmp 0x1400ff641
movzx eax, bl
movabs rcx, 0x244323388aac72c0
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x40
jmp 0x1400ff677
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movabs rdx, 0x43cf192e3c23e484
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1400ff67a
mov ecx, 4
movabs rdx, 0x635b0f23ed9b5648
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1400ff6ba
movabs rdx, 0x82e705199f12c80c
movzx eax, bl
add rdx, rdi
movzx r11d, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 0x54
add r11b, dl
jmp 0x1400ff6e9
movzx eax, bl
mov ecx, Ordinal_41
movabs rdx, 0xa272fb0f508a39d0
add rdx, rdi
and al, dl
sub cl, al
movzx eax, byte [rbp + rdi - 0x60]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1400fec22
movabs rcx, 0x3c8e7889539b00c4
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
movzx eax, byte [rbp + rdi - 0x60]
add rax, r9
add rdi, rax
lea r11d, [rbx + rcx]
sub r11b, 0x5c
inc rdi
jmp 0x1400fec22
mov ecx, 0x24
movabs rdx, 0x5c1a6e7f05127288
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1400ff6e9
mov ecx, reloc.WLDAP32.dll_Ordinal_26
movabs rdx, 0xbabe50601978c7d4
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400ff677
movabs rcx, 0xda4a4655caf03998
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x28
jmp 0x1400ff655
mov ecx, 0x3e
movabs rdx, 0xf9d63c4b7c67ab5c
add rdx, rdi
dec rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc rdi
jmp 0x1400fec22
mov ecx, reloc.WS2_32.dll_recv
movabs rdx, 0x196232412ddf1d20
add rdx, rdi
inc r9
movzx eax, dl
dec rdi
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc rdi
jmp 0x1400fec22
movabs rcx, 0x38ee2836df568ee4
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x3c
jmp 0x1400ff5dc
lea rax, [r9 + 0x5a]
cmp r8, rax
jae 0x1400ff1a9
lea rdx, [rdi + r12]
mov ecx, reloc.WS2_32.dll_socket
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
lea rax, [r9 + r8]
cmp rax, 0x40
je 0x1400ff4f2
lea rax, [r9 + 0x64]
cmp r8, rax
jbe 0x1400ff27b
movabs rcx, 0xbdd3323a5b44f226
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0xa
cmp r8, 6
jae 0x1400ff4c6
lea rax, [r9 + 0x5a]
cmp r8, rax
jbe 0x1400ff3ab
movabs rdx, 0xf2959ba693dec79c
movzx eax, bl
add rdx, rdi
movzx r11d, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 0x44
add r11b, dl
cmp r9, 0x64
jb 0x1400ff4b9
movzx ecx, bl
movabs rdx, 0xb71e000da53455f4
add rdx, rdi
movzx eax, bl
and al, dl
add al, al
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0x58]
jmp 0x1400ff5dc
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400ff1e3
movabs rcx, 0x6984d2d87133aaec
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
movzx eax, byte [rbp + rdi - 0x60]
add rax, r9
add rdi, rax
lea r11d, [rbx + rcx]
sub r11b, 0x74
inc rdi
jmp 0x1400fec22
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400ff214
mov ecx, Ordinal_35
movabs rdx, 0x2a6ce6ed0e44c764
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400ff6ba
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400ff246
movabs rcx, 0xac3d0f1648670054
add rcx, rdi
dec rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x4c
inc rdi
jmp 0x1400fec22
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400ff105
mov ecx, gethostname
movabs rdx, 0x6d25232ae5781ccc
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1400ff5dc
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400ff2a0
movabs rdx, 0x9e473c44a9cd8062
mov ecx, reloc.WLDAP32.dll_Ordinal_41
add rdx, rdi
movzx eax, dl
and al, bl
jmp 0x1400ff5d0
inc rax
cmp r8, rax
jne 0x1400ff2d4
movabs rcx, 0x7ebb464ef8560e9e
inc r9
add rcx, rdi
dec rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x52
inc rdi
jmp 0x1400fec22
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400ff30b
mov ecx, 5
movabs rdx, 0x5f2f505946de9cda
add rdx, rdi
dec rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc rdi
jmp 0x1400fec22
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400ff337
movabs rcx, 0x2017646de3efb952
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x3e
jmp 0x1400ff677
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400ff368
mov ecx, 0x3d
movabs rdx, 0xe0ff78828100d5ca
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1400ff6ba
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400ff13e
movzx eax, bl
mov ecx, Ordinal_26
movabs rdx, 0xa1e78c971e11f242
add rdx, rdi
and al, dl
sub cl, al
movzx eax, byte [rbp + rdi - 0x60]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1400fec22
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400ff3ea
movzx eax, bl
mov ecx, recv
movabs rdx, 0xd309a5b0e26755d8
add rdx, rdi
and al, dl
sub cl, al
movzx eax, byte [rbp + rdi - 0x60]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1400fec22
inc rax
cmp r8, rax
jne 0x1400ff419
movabs rdx, 0x93f1b9c57f787250
movzx eax, bl
add rdx, rdi
movzx r11d, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 0x30
add r11b, dl
jmp 0x1400ff6ba
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400ff449
movabs rdx, 0x354dd7e46b121d04
movzx eax, bl
add rdx, rdi
movzx r11d, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 0x1c
add r11b, dl
jmp 0x1400ff655
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400ff480
mov ecx, reloc.WLDAP32.dll_Ordinal_32
movabs rdx, 0x15c1e1eeb99aab40
add rdx, rdi
movzx eax, bl
and al, dl
dec rdi
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1400fec22
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400ff177
movzx eax, bl
movabs rcx, 0xf635ebf90823397c
add rcx, rdi
inc r9
and al, cl
dec rdi
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x64
inc rdi
jmp 0x1400fec22
mov byte [rbp + rdi - 0x60], r11b
inc rdi
jmp 0x1400fec22
movzx r11d, byte [rbp + rdi - 0x60]
movabs rdx, 0x97920a17f3bce430
add rdx, rdi
movzx eax, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 0x50
add r11b, bl
add r11b, dl
jmp 0x1400ff655
mov ecx, 6
movabs rdx, 0x780614224245726c
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
sub r11b, byte [rbp + rdi - 0x60]
add r11b, bl
add r11b, dl
jmp 0x1400ff6ba
movabs rcx, 0x3862b9beacde4756
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x5a
jmp 0x1400ff6e9
movabs rcx, 0x777aa5aa0fcd2ade
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x12
jmp 0x1400ff67a
movzx eax, bl
movabs rcx, 0x97069b9fc1449ca2
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x6e
jmp 0x1400ff677
mov ecx, 0x3f
movabs rdx, 0xf5aa7d80d5aaf1ee
add rdx, rdi
movzx eax, bl
and al, dl
inc r9
sub cl, al
dec rdi
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1400fec22
movabs rdx, 0x15367376872263b2
movzx eax, bl
add rdx, rdi
mov ecx, reloc.WS2_32.dll_recvfrom
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
movzx eax, bl
movabs rcx, 0x27580512cc789d12
add rcx, rdi
and al, cl
add al, al
sub bl, al
sub bl, 0x7e
add bl, cl
mov byte [rbp + rdi - 0x60], bl
inc r9
dec rdi
inc rdi
jmp 0x1400fec22
movzx eax, bl
movabs rcx, 0x93664b4d4d002ac2
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x4e
dec rdi
inc rdi
jmp 0x1400fec22
movabs rdx, 0xb2f24142fe779c86
mov ecx, Ordinal_45
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
movzx eax, bl
movabs rcx, 0x7cc0f1d1b012b4e
add rcx, rdi
and al, cl
add al, al
sub bl, al
sub bl, 0x22
add bl, r11b
add bl, cl
mov byte [rbp + rdi - 0x60], bl
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x1400fec22
mov ecx, reloc.WLDAP32.dll_Ordinal_33
movabs rdx, 0x1196232412ddf1d2
add rdx, rdi
mov rbx, r10
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
movzx eax, bl
inc r9
movabs rdx, 0xe84019276989b98a
mov ecx, Ordinal_30
add rdx, rdi
and al, dl
sub cl, al
add cl, cl
add cl, bl
add cl, dl
movzx eax, cl
mov byte [rbp + rdi - 0x60], al
add rax, r9
sub rdi, rax
movzx eax, bl
inc r8
movabs rdx, 0x587a1e2c90ce00a8
mov ecx, 0x34
add rdx, rdi
and al, dl
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, bl
add cl, dl
mov byte [rbp + rdi - 0x60], cl
add rdi, rax
movzx eax, byte [rbp + rdi - 0x60]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1400fec22
movzx eax, r10b
movabs rcx, 0x50ae0f0f75ccd55a
add rcx, rdi
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x76
movzx eax, byte [rbp + rdi - 0x60]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1400fec22
movzx eax, bl
movabs rcx, 0x4e249bad6678f296
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x1a
jmp 0x1400fec20
movzx eax, bl
movabs rcx, 0x6db091a317f0645a
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x76
jmp 0x1400fec10
lea rdx, [rbp + 0x15fc7c8]
jmp 0x1400ff7be
lea rdx, [rbp + 0xe40ee6]
jmp 0x1400ff7be
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [rbp - 0x10]
call fcn.14019b5c8
movzx r10d, byte [rsp + 0x30]
mov rsi, rax
xor eax, eax
mov dword [rbp - 0x38], 0x1220056e
xorps xmm0, xmm0
mov dword [rbp - 0x1c], eax
mov word [rbp - 0x18], ax
movabs r15, 0xb93d6e9ab1fc2d48
mov byte [rbp - 0x16], al
movabs r12, 0x320a12b099afb6e8
mov dword [rbp - 0x34], 0x162a262a
movabs r14, 0x945b0dfea3ec9618
mov dword [rbp - 0x30], 0xab0e0c3c
movabs r13, 0xaf655393dbfbe0f8
movups xmmword [rbp - 0x2c], xmm0
nop dword [rax]
nop word [rax + rax]
mov rax, qword [0x1402304a8]
mov r9, qword [0x1402304a0]
nop
xor edi, edi
cmp rdi, 0x23
jae 0x140100382
movzx r11d, byte [rbp + rdi - 0x38]
mov rbx, r11
cmp rax, rdi
ja 0x140100379
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x1400ff8a4
lea rdx, [rdi + r15]
mov r10d, 4
movzx ecx, dl
and cl, bl
sub r10b, cl
add r10b, r10b
add r10b, bl
add r10b, dl
jmp 0x1400ff8dd
je 0x1401002e6
inc rcx
cmp rax, rcx
je 0x140100279
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14010023c
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1401001e8
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x1401001bb
nop dword [rax]
cmp r9, rdi
ja 0x140100370
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jae 0x1400ff90a
lea rdx, [rdi + r12]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x58
jmp 0x1400ff950
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x140100167
inc rcx
cmp rax, rcx
je 0x14010013d
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x140100116
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1401000ec
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1401000b4
nop word [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, rdi
jbe 0x1400ffd32
nop dword [rax]
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x1400ffd08
lea rcx, [r9 + 0x40]
cmp rax, rcx
je 0x1400ffcde
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1400ffcb7
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x1400ffc93
lea rcx, [r9 + 0x20]
cmp rax, rcx
je 0x1400ffc61
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x1400ff960
mov rax, rcx
lea r9, [rcx + 2]
lea rcx, [r9 + 2]
cmp rax, rcx
jb 0x140100347
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jb 0x14010031d
lea rcx, [r9 + 0xa]
cmp rax, rcx
jb 0x1400ffa86
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jb 0x1400ffa65
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x1400ffbc8
lea rcx, [r9 + 8]
cmp rax, rcx
jb 0x1400ffb9b
lea rax, [r9 + 0x41]
lea r9, [rax + 0x41]
lea rcx, [r9 + 0x41]
cmp rax, rcx
ja 0x1400ffb68
lea rcx, [r9 + 0x42]
cmp rax, rcx
ja 0x1400ffb44
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x1400ffb1f
lea rcx, [r9 + 0x61]
cmp rax, rcx
ja 0x1400ffb01
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x1400ffad1
lea rcx, [r9 + 3]
cmp rax, rcx
ja 0x1400ffaa7
mov rax, rcx
lea r9, [rcx + 0x400]
jmp 0x1400ff960
lea r8, [rdi + r14]
mov edx, Ordinal_45
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1400ff950
lea r8, [rdi + r13]
mov edx, Ordinal_30
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1400ff872
mov edx, reloc.WLDAP32.dll_Ordinal_32
movabs r8, 0x90509584cd7db740
add r8, rdi
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x140100186
mov edx, reloc.WS2_32.dll_recv
movabs r8, 0xab5adb1a058d0220
add r8, rdi
movzx ecx, r11b
and cl, r8b
dec rdi
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
inc rdi
jmp 0x1400ff862
movabs r8, 0x38dffde4a194a790
movzx ecx, r11b
add r8, rdi
mov edx, 8
and cl, r8b
jmp 0x140100201
movzx ecx, r11b
movabs rdx, 0x53ea4379d9a3f270
add rdx, rdi
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x10
jmp 0x140100260
movabs rdx, 0x6ef4890f11b33d50
movzx ecx, r11b
add rdx, rdi
and cl, dl
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x30
jmp 0x14010029c
movzx ecx, r11b
movabs rdx, 0xfc79abd9adbae2c0
add rdx, rdi
and cl, dl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, r9
add rdi, rcx
lea r10d, [rdx + r11]
sub r10b, 0x40
inc rdi
jmp 0x1400ff862
movzx ecx, r11b
movabs rdx, 0x5e4682d433ce0058
add rdx, rdi
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x68
mov byte [rbp + rdi - 0x38], r10b
inc rdi
jmp 0x1400ff862
mov edx, reloc.WLDAP32.dll_Ordinal_60
movabs r8, 0x7950c8696bdd4b38
add r8, rdi
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
cmp rax, 0x400
jae 0x140100023
lea rcx, [r9 + 0x400]
cmp rax, rcx
jbe 0x1400fff84
movabs r8, 0x55ad6d8d02c68110
movzx ecx, r11b
add r8, rdi
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x70
add r10b, r8b
cmp r9, 0x5a
jb 0x1400ffbbb
mov r8d, Ordinal_26
movabs rdx, 0xce7a11a2ea7a0ab0
add rdx, rdi
movzx ecx, r11b
and cl, dl
sub r8b, cl
add r8b, r8b
add r8b, dl
add r8b, r11b
lea r10d, [r8 + r8]
jmp 0x140100186
movabs rdx, 0x2c3c70239a1e4970
add rdx, rdi
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, r9
add rdi, rcx
lea r10d, [r11 + rdx]
sub r10b, 0x10
inc rdi
jmp 0x1400ff862
movabs rdx, 0x4746b5b8d22d9450
add rdx, rdi
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x30
jmp 0x14010007c
movabs rdx, 0x6250fb4e0a3cdf30
add rdx, rdi
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x50
add rax, r9
jmp 0x140100260
movabs rdx, 0x7d5b40e3424c2a10
add rdx, rdi
dec rdi
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x70
inc rdi
jmp 0x1400ff862
mov edx, gethostname
movabs r8, 0x986586787a5b74f0
add r8, rdi
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x140100186
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jae 0x1400ffd99
lea r8, [rdi + r15]
mov edx, 4
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
lea rcx, [r9 + rax]
cmp rcx, 0x41
je 0x140100052
lea rcx, [r9 + 0x41]
cmp rax, rcx
jbe 0x1400ffe6a
movabs rdx, 0x23a35adc6916ca28
add rdx, rdi
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x18
jmp 0x1400ffbed
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400ffdda
mov edx, Ordinal_41
movabs r8, 0x64142561335f6dd0
add r8, rdi
movzx ecx, r8b
and cl, r11b
sub dl, cl
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, r9
add rdi, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rdi
jmp 0x1400ff862
inc rcx
cmp rax, rcx
jne 0x1400ffe0c
mov edx, gethostname
movabs r8, 0x4909dfcbfb5022f0
add r8, rdi
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x14010007c
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400ffe39
movabs rdx, 0xbb84bd015f487d80
add rdx, rdi
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x80
jmp 0x140100260
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x1400ffd5a
movabs rdx, 0xf7eb0f0c53224250
add rdx, rdi
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x30
jmp 0x140100186
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x1400ffe97
movabs rdx, 0x961e3811cd0f24b8
add rdx, rdi
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 8
jmp 0x140100186
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400ffed0
mov edx, recv
movabs r8, 0x7b13f27c94ffd9d8
add r8, rdi
dec rdi
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rdi
jmp 0x1400ff862
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x1400ffeed
movabs r8, 0xed8ecfb1f8f83468
mov edx, reloc.WS2_32.dll_sendto
jmp 0x1401001f7
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x1400fff20
mov edx, 0x24
movabs r8, 0xd2848a1cc0e8e988
add r8, rdi
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x140100260
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x1400fff4d
mov edx, Ordinal_45
movabs r8, 0x44ff675224e14418
add r8, rdi
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
jmp 0x140100076
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1400ffbed
mov edx, 0x34
movabs r8, 0xb77a448788d99ea8
add r8, rdi
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x14010029c
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400fffc0
movzx ecx, r11b
movabs rdx, 0xc8284ac266bedba0
add rdx, rdi
and cl, dl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, r9
add rdi, rcx
lea r10d, [rdx + r11]
sub r10b, 0x60
inc rdi
jmp 0x1400ff862
inc rcx
cmp rax, rcx
jne 0x1400fffee
movabs r8, 0xad1e052d2eaf90c0
movzx ecx, r11b
add r8, rdi
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x40
jmp 0x140100079
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400ffc2d
movzx ecx, r11b
movabs rdx, 0x9213bf97f6a045e0
add rdx, rdi
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x20
add rax, r9
jmp 0x140100260
mov edx, reloc.WLDAP32.dll_Ordinal_32
movabs r8, 0x40f4eed84e726540
add r8, rdi
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, byte [rbp + rdi - 0x38]
add r10b, r11b
add r10b, r8b
jmp 0x14010020d
mov edx, Ordinal_41
movabs r8, 0xb36fcc0db26abfd0
add r8, rdi
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
sub r10b, byte [rbp + rdi - 0x38]
add r10b, r11b
add r10b, r8b
movzx ecx, r11b
inc r9
movabs r8, 0x6cad3aa86466ed18
mov edx, Ordinal_45
add r8, rdi
and cl, r8b
sub dl, cl
add dl, dl
add dl, r11b
add dl, r8b
movzx ecx, dl
mov byte [rbp + rdi - 0x38], cl
add rcx, r9
sub rdi, rcx
jmp 0x14010029c
mov edx, Ordinal_30
movabs r8, 0x385bd9911d6ae5f8
add r8, rdi
movzx ecx, r8b
and cl, r11b
sub dl, cl
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, r9
add rdi, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rdi
jmp 0x1400ff862
mov edx, 4
movabs r8, 0xe0eb41f0f181d648
add r8, rdi
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x140100260
movabs rdx, 0x6e7064bb8d897bb8
add rdx, rdi
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 8
add rax, r9
jmp 0x140100260
movabs rdx, 0x897aaa50c598c698
add rdx, rdi
dec rdi
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x28
inc rdi
jmp 0x1400ff862
movabs rdx, 0xa484efe5fda81178
add rdx, rdi
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x48
movabs r8, 0x87b7803d9c7637f8
movzx ecx, r11b
add r8, rdi
mov edx, Ordinal_30
and cl, r8b
inc r9
sub dl, cl
add dl, dl
add dl, r11b
add dl, r8b
mov byte [rbp + rdi - 0x38], dl
dec rdi
inc rdi
jmp 0x1400ff862
movabs rdx, 0x4d145845d1bf01c8
add rdx, rdi
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x78
inc r9
dec rdi
inc rdi
jmp 0x1400ff862
movabs r8, 0x681e9ddb09ce4ca8
mov edx, 0x34
add r8, rdi
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
movabs r8, 0xfa325d73006e9288
mov edx, 0x24
add r8, rdi
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add dl, r10b
add dl, r8b
add dl, r11b
mov byte [rbp + rdi - 0x38], dl
add rax, r9
jmp 0x140100260
mov edx, 0x24
movabs r8, 0x8328e37041dd9788
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, bl
add r10b, r8b
movzx ecx, r10b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x1400ff862
mov r11, rbx
mov ecx, reloc.WS2_32.dll_sendto
movabs rdx, 0x9e33290579ece268
add rdx, rdi
and bl, dl
sub cl, bl
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rax
movabs r8, 0x25eaa94316631a60
add r8, rdi
mov edx, Ordinal_50
movzx ecx, r8b
and cl, r11b
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add dl, dl
add dl, r8b
add dl, r11b
mov byte [rbp + rdi - 0x38], dl
add rdi, rcx
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x1400ff862
mov edx, recv
movabs r8, 0x2bb84bd015f487d8
add r8, rdi
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, bl
add r10b, r8b
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x1400ff862
mov edx, reloc.WS2_32.dll_sendto
movabs r8, 0x3cea765e78038668
add r8, rdi
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x1400ff860
mov ecx, recv
movabs rdx, 0xca6f9929140b2bd8
add rdx, rdi
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400ff850
lea rdx, [rbp + 0x16e6c28]
jmp 0x140100386
lea rdx, [rbp + 0x6a9970]
jmp 0x140100386
lea rdx, [rbp - 0x38]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [rsi + 0x10]
lea rbx, [rsi + 0x18]
test eax, eax
je 0x1401003d3
mov edi, eax
lea r9, [rbx + 8]
mov r8, rbx
lea rdx, [rbp]
lea rcx, [0x1402301f8]
call fcn.140059e30
add rbx, 0x14
sub rdi, 1
jne 0x1401003b2
mov rcx, rsi
call fcn.14019b234
mov rcx, qword [rbp - 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.14019b1d0
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret