Function at 0x14004a280
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x1401da800]
xor rax, rsp
mov qword [rbp + 0x18], rax
movzx r10d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp - 0x7a], rax
movups xmmword [rsp + 0x76], xmm0
mov dword [rbp - 0x72], eax
movabs rsi, 0x1efb65f4795bfcae
mov byte [rbp - 0x6e], al
movabs r12, 0x19db359ded65e776
mov dword [rsp + 0x40], 0x7f40cf4
movabs r14, 0xa061cbfe654ad12
mov dword [rsp + 0x44], 0x2f000eb
movabs r15, 0xd64fb1840b88de26
mov dword [rsp + 0x48], 0xcfff3e8
movabs r13, 0xa299464830bd0f3a
mov dword [rsp + 0x4c], 0xf8080c0b
mov dword [rsp + 0x50], 0x3f300f9
mov dword [rsp + 0x54], 0x203f061c
mov dword [rsp + 0x58], 0xcb371020
mov dword [rsp + 0x5c], 0x3c390c1e
mov dword [rsp + 0x60], 0x6053b39
mov dword [rsp + 0x64], 0x3f160d37
mov dword [rsp + 0x68], 0x3c03322d
mov dword [rsp + 0x6c], 0x22fe0539
mov dword [rsp + 0x70], 0x5010039
mov word [rsp + 0x74], 0x9119
nop dword [rax]
mov r8, qword [0x14022e4a8]
mov r9, qword [0x14022e4a0]
nop
xor r11d, r11d
cmp r11, 0x53
jae 0x14004b047
movzx edi, byte [rsp + r11 + 0x40]
mov ebx, edi
cmp r8, r11
ja 0x14004b03e
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x14004a3c1
lea rcx, [r11 + r12]
mov rax, rcx
and rax, rbx
imul r10, rax, 0xfffffffffffffffe
add r10, rcx
add r10, rbx
sub r10b, 0x3a
jmp 0x14004a3f0
je 0x14004afb0
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004af19
lea rax, [rcx + 1]
cmp r8, rax
je 0x14004aedf
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004ae91
nop
cmp r9, r11
ja 0x14004b035
lea rax, [r9 + 0x42]
cmp r8, rax
jae 0x14004a41e
lea rdx, [r11 + rsi]
mov ecx, Ordinal_35
movzx eax, dl
and al, bl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
jmp 0x14004a451
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004ae46
inc rax
cmp r8, rax
je 0x14004ae15
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004adf2
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004adcf
lea rax, [r9 + r8]
cmp rax, r11
jbe 0x14004aaa9
nop
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x14004aa80
lea rax, [r9 + 6]
cmp r8, rax
je 0x14004aa53
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x14004aa24
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x14004aa00
lea rax, [r9 + 8]
cmp r8, rax
je 0x14004a9d7
lea rax, [r9 + 9]
cmp r8, rax
je 0x14004a9b3
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14004a98a
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x14004a966
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x14004a92e
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004a460
lea r8, [r9 + 0x7a]
lea r9, [r8 + 2]
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x14004b00c
lea rcx, [r9 + 0x64]
cmp r8, rcx
jb 0x14004afe7
lea rax, [r9 + 8]
cmp r8, rax
jb 0x14004a64e
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x14004a630
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x14004a612
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14004a8c6
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x14004a86f
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14004a81b
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x14004a7ee
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14004a460
lea r9, [rcx + 0x20]
mov r8, rcx
lea rax, [r9 + 8]
cmp rcx, rax
ja 0x14004a7ba
lea rcx, [r9 + 0x5a]
cmp r8, rcx
ja 0x14004a791
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14004a769
lea rax, [r9 + 9]
cmp r8, rax
ja 0x14004a740
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14004a71b
lea rax, [r9 + 1]
cmp r8, rax
ja 0x14004a6f2
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x14004a6c7
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x14004a695
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14004a66d
lea rax, [r9 + 3]
cmp r8, rax
ja 0x14004a460
mov r8, rcx
lea r9, [rcx + 0x1000]
jmp 0x14004a460
lea rdx, [r11 + r14]
movzx eax, bl
and al, dl
movzx r10d, bl
add al, al
sub r10b, al
sub r10b, 0x7e
add r10b, dl
jmp 0x14004a451
lea rdx, [r11 + r15]
movzx eax, bl
and al, dl
movzx r10d, bl
add al, al
sub r10b, al
sub r10b, 0xa
add r10b, dl
jmp 0x14004a3f0
lea rdx, [r11 + r13]
mov ecx, gethostname
movzx eax, bl
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
jmp 0x14004a395
movabs rdx, 0xf7db2fa3cadfe570
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x10
add r10b, dl
jmp 0x14004ae61
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movabs rdx, 0xc424c467f0141684
add rdx, r11
movzx eax, dil
and al, dl
inc r9
sub cl, al
dec r11
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
inc r11
jmp 0x14004a383
movzx eax, dil
movabs rcx, 0x906e592c15484798
add rcx, r11
dec r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x28
inc r11
jmp 0x14004a383
mov ecx, Ordinal_41
movabs rdx, 0x5cb7edf03a7c78ac
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14004aeb4
movzx eax, dil
movabs rcx, 0x290182b45fb0a9c0
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x40
jmp 0x14004aefd
mov ecx, reloc.WLDAP32.dll_Ordinal_26
movabs rdx, 0xf54b177884e4dad4
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x14004af00
movabs rdx, 0xc194ac3caa190be8
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x58
add r10b, dl
jmp 0x14004af3c
mov ecx, recv
movabs rdx, 0x8dde4100cf4d3cfc
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x14004af6a
movzx eax, dil
movabs rcx, 0x5a27d5c4f4816e10
add rcx, r11
and al, cl
add al, al
sub dil, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rdi]
sub r10b, 0x70
inc r11
jmp 0x14004a383
movzx eax, dil
movabs rcx, 0xd8dfc9af5183e8c2
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x4e
mov byte [rsp + r11 + 0x40], r10b
inc r11
jmp 0x14004a383
movabs rdx, 0xa5295e7376b819d6
movzx eax, dil
add rdx, r11
mov ecx, reloc.WS2_32.dll_send
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
cmp r9, 0x28
jb 0x14004a80e
movzx ecx, dil
movabs rdx, 0x4d575cec969a3904
add rdx, r11
movzx eax, dil
and al, dl
add al, al
sub cl, al
add cl, dl
lea r10d, [rcx*2 - 0x38]
jmp 0x14004ae61
movabs rdx, 0x7172f3379bec4aea
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x66
add r10b, dl
cmp r8, 3
jae 0x14004ad77
lea rax, [r9 + 0x5a]
cmp r8, rax
jbe 0x14004ac6e
movabs rdx, 0x48372c960aa423cc
movzx eax, dil
add rdx, r11
mov ecx, gethostname
and al, dl
jmp 0x14004a833
mov ecx, 7
movabs rdx, 0x3dbc87fbc1207bfe
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
lea rax, [r9 + r8]
cmp rax, 0x10
je 0x14004ada2
lea rax, [r9 + 0x64]
cmp r8, rax
jbe 0x14004aba6
mov ecx, reloc.WS2_32.dll_socket
movabs rdx, 0x293bc6a19148271e
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14004a892
mov ecx, Ordinal_60
movabs rdx, 0xb9e463bad827ec14
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
inc r11
jmp 0x14004a383
movabs rcx, 0x862df87efd5c1d28
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x18
jmp 0x14004af6a
mov ecx, reloc.WLDAP32.dll_Ordinal_46
movabs rdx, 0x52778d4322904e3c
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14004af3c
movabs rcx, 0x1ec1220747c47f50
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x30
jmp 0x14004af00
mov ecx, Ordinal_35
movabs rdx, 0xeb0ab6cb6cf8b064
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14004aefd
movabs rcx, 0xb7544b8f922ce178
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x48
jmp 0x14004aeb4
mov ecx, reloc.WLDAP32.dll_Ordinal_22
movabs rdx, 0x839de053b761128c
add rdx, r11
dec r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
inc r11
jmp 0x14004a383
movabs rcx, 0x4fe77517dc9543a0
inc r9
add rcx, r11
dec r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x60
inc r11
jmp 0x14004a383
mov ecx, 0xa
movabs rdx, 0x1c3109dc01c974b4
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14004ae61
lea rcx, [r9 + 2]
cmp r8, rcx
jae 0x14004aacc
lea rcx, [r11 + r12]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r10d, [rcx + rbx]
sub r10b, 0x3a
jmp 0x14004a8ea
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004ab0d
mov ecx, 0x3e
movabs rdx, 0x3df6cbe8f2b7f95c
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
inc r11
jmp 0x14004a383
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14004ab3a
movabs rcx, 0xa563a260a84f9734
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x6c
jmp 0x14004af3c
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14004ab67
movabs rcx, 0xcd078d85de7350c
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x54
jmp 0x14004aefd
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14004a8ea
mov ecx, Ordinal_41
movabs rdx, 0xa7f3ba8bee4aa1d0
add rdx, r11
inc r9
movzx eax, dl
dec r11
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
inc r11
jmp 0x14004a383
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14004abd3
movabs rcx, 0x5cf231dd6c13f60a
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x46
jmp 0x14004ae61
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004ac06
movabs rcx, 0xc45f085521ab93e2
add rcx, r11
dec r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x2e
inc r11
jmp 0x14004a383
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14004ac38
mov ecx, Ordinal_50
movabs rdx, 0xf8157390fc7762ce
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14004aeb4
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14004a892
mov ecx, 1
movabs rdx, 0x9338b5448cdacf92
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14004af3c
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004acab
movzx eax, dil
movabs rcx, 0x7bed97d1e56ff2b8
add rcx, r11
and al, cl
add al, al
sub dil, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rdi]
sub r10b, 8
inc r11
jmp 0x14004a383
inc rax
cmp r8, rax
jne 0x14004acdb
movabs rdx, 0xafa4030dc03bc1a4
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x7c
add r10b, dl
jmp 0x14004af6a
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004ad09
movabs rdx, 0x7e7daffd2b6afd54
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x4c
jmp 0x14004aeb1
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004ad41
mov ecx, reloc.WLDAP32.dll_Ordinal_32
movabs rdx, 0xb2341b390636cc40
add rdx, r11
movzx eax, dil
and al, dl
dec r11
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
inc r11
jmp 0x14004a383
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14004a83f
mov ecx, Ordinal_45
movabs rdx, 0x19a0f1b0bbce6a18
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x14004ae61
mov ecx, gethostname
movabs rdx, 0x810dc828716607f0
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, byte [rsp + r11 + 0x40]
add r10b, dil
jmp 0x14004aeb1
movabs rdx, 0xb4c433644c31d6dc
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, byte [rsp + r11 + 0x40]
sub r10b, 4
add r10b, dl
jmp 0x14004af3c
movabs rcx, 0xbcaebfd34fba740e
movzx eax, bl
add rcx, r11
and al, cl
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x62
jmp 0x14004af6a
movzx eax, bl
movabs rcx, 0x218b7e1fbf57074a
add rcx, r11
and al, cl
add al, al
sub bl, al
lea r10d, [rcx + rbx]
sub r10b, 6
jmp 0x14004aefd
mov ecx, Ordinal_45
movabs rdx, 0x86683c6c2ef39a86
add rdx, r11
movzx eax, bl
and al, dl
inc r9
sub cl, al
dec r11
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
inc r11
jmp 0x14004a383
movabs rax, 0x52b1d1305427cb9a
add rax, r11
and bl, al
add bl, bl
sub al, bl
lea r10d, [rdi + rax]
sub r10b, 0x36
movabs rcx, 0x6732928a8400207a
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
sub cl, 0x56
add cl, dil
mov byte [rsp + r11 + 0x40], cl
inc r9
dec r11
inc r11
jmp 0x14004a383
mov ecx, 7
movabs rdx, 0x5021b9050e2cc0fe
add rdx, r11
movzx eax, bl
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
movabs rdx, 0x9ae8fdc65ecbef66
movzx eax, dil
add rdx, r11
mov ecx, reloc.WLDAP32.dll_Ordinal_27
and al, dl
sub cl, al
add cl, cl
add cl, dil
add cl, dl
add cl, r10b
mov byte [rsp + r11 + 0x40], cl
jmp 0x14004aefd
movzx eax, bl
movabs rcx, 0x1c6b4dc93360f212
add rcx, r11
and al, cl
add al, al
sub bl, al
lea r10d, [rcx + rbx]
sub r10b, 0x7e
add r8, r9
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
inc r11
jmp 0x14004a383
mov ecx, gethostname
movabs rdx, 0xb4fe77517dc9543a
add rdx, r11
movzx eax, bl
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
inc r9
movabs rcx, 0xce9f69023997be52
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
sub cl, 0x3e
add cl, dil
movzx eax, cl
mov byte [rsp + r11 + 0x40], al
add rax, r9
sub r11, rax
inc r8
movabs rcx, 0xe87a9ea026fda5c8
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub cl, 0x78
add cl, dil
mov byte [rsp + r11 + 0x40], cl
add r11, rax
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
inc r11
jmp 0x14004a383
mov ecx, reloc.WLDAP32.dll_Ordinal_41
movabs rdx, 0x4d91a0d9c831b662
add rdx, r11
movzx eax, bl
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
inc r11
jmp 0x14004a383
movzx eax, dil
movabs rcx, 0x6ee2db0c55f1404e
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x22
jmp 0x14004a380
mov ecx, reloc.WLDAP32.dll_Ordinal_41
movabs rdx, 0x3b2c6fd07b257162
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x14004a370
lea rdx, [rbp + 0x1778288]
jmp 0x14004b04c
lea rdx, [rbp + 0x15d69fe]
jmp 0x14004b04c
lea rdx, [rsp + 0x40]
lea rax, [rbp - 8]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movzx r11d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x44], eax
movups xmmword [rbp - 0x54], xmm0
mov word [rbp - 0x40], ax
movabs rsi, 0x6d57a664f92ecf2f
mov byte [rbp - 0x3e], al
movabs rdx, 0x60535411fadfbb12
mov dword [rbp - 0x60], 0xf0e28da0
movabs r12, 0x534ef8ae74b5f33
mov dword [rbp - 0x5c], 0xfce8e0e4
movabs r14, 0xd3be106b95ecb0b1
mov dword [rbp - 0x58], 0x5bf4f6e2
movabs r15, 0xc9543155c755f24b
movabs r13, 0xbeea523ff8bf33e5
nop word [rax + rax]
mov r8, qword [0x14022e4a8]
mov r9, qword [0x14022e4a0]
nop
xor edi, edi
cmp rdi, 0x23
jae 0x14004be34
movzx ebx, byte [rbp + rdi - 0x60]
mov r10, rbx
cmp r8, rdi
ja 0x14004be2b
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14004b130
lea rcx, [rdi + r12]
mov rax, rcx
and rax, rbx
imul r11, rax, 0xfffffffffffffffe
add r11, rcx
add r11, rbx
sub r11b, 0x65
jmp 0x14004b170
je 0x14004bd9f
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004bd16
lea rax, [r9 + 4]
cmp r8, rax
je 0x14004bca9
lea rax, [r9 + 2]
cmp r8, rax
je 0x14004bc76
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004bc21
nop word [rax + rax]
cmp r9, rdi
ja 0x14004be22
lea rax, [r9 + 0x61]
cmp r8, rax
jae 0x14004b199
lea rcx, [rdi + rsi]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x49
jmp 0x14004b1d0
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004bc01
inc rax
cmp r8, rax
je 0x14004bbcb
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004bb98
lea rax, [r9 + 6]
cmp r8, rax
je 0x14004bb75
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x14004b80a
nop dword [rax]
lea rax, [r9 + 9]
cmp r8, rax
je 0x14004b7e7
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14004b7b1
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x14004b779
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x14004b754
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004b72c
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14004b709
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x14004b6e6
lea rax, [r9 + 2]
cmp r8, rax
je 0x14004b6be
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14004b696
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x14004b1e0
lea r8, [r9 + 8]
lea r9, [r8 + 3]
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x14004bdff
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x14004bddc
lea rax, [r9 + 9]
cmp r8, rax
jb 0x14004b3d1
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x14004b3b7
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14004b39d
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x14004b637
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14004b5da
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x14004b58a
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14004b556
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14004b1e0
lea r8, [r9 + 8]
lea r9, [r8 + 3]
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x14004b52e
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14004b506
lea rax, [r9 + 9]
cmp r8, rax
ja 0x14004b4de
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x14004b4bb
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x14004b498
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14004b473
lea rax, [r9 + 1]
cmp r8, rax
ja 0x14004b43b
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x14004b40e
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x14004b3eb
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14004b1e0
lea r8, [r9 + 0x41]
lea r9, [r8 + 0x400]
jmp 0x14004b1e0
lea rcx, [rdi + r14]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x29
jmp 0x14004b1d0
lea rcx, [rdi + r15]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0xd
jmp 0x14004b170
lea rcx, [rdi + r13]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x43
jmp 0x14004b101
movabs rcx, 0x6abd3327c9767978
movzx eax, bl
add rcx, rdi
and al, cl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x48
jmp 0x14004bc3f
lea rcx, [rdi + rdx]
movzx eax, bl
and al, cl
inc r9
add al, al
dec rdi
sub bl, al
movabs rdx, 0x60535411fadfbb12
lea r11d, [rcx + rbx]
sub r11b, 0x7e
inc rdi
jmp 0x14004b0f2
mov ecx, Ordinal_41
movabs rdx, 0x55e974fc2c48fcac
add rdx, rdi
movzx eax, bl
and al, dl
dec rdi
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
movabs rdx, 0x60535411fadfbb12
inc rdi
jmp 0x14004b0f2
mov ecx, listen
movabs rdx, 0x4b7f95e65db23e46
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
jmp 0x14004bcc8
movzx eax, bl
movabs rcx, 0x4115b6d08f1b7fe0
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x20
jmp 0x14004bcf0
movzx eax, bl
movabs rcx, 0x36abd7bac084c17a
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x56
jmp 0x14004bcf3
mov ecx, Ordinal_60
movabs rdx, 0x2c41f8a4f1ee0314
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004bd3c
mov ecx, Ordinal_35
movabs rdx, 0x21d8198f235744ae
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x14004bd6a
mov ecx, 4
movabs rdx, 0x176e3a7954c08648
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x14004bdbf
movzx eax, bl
movabs rcx, 0xfd658cc2d047aa49
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
inc r11b
mov byte [rbp + rdi - 0x60], r11b
movabs rdx, 0x60535411fadfbb12
inc rdi
jmp 0x14004b0f2
movabs rdx, 0xf2fbadad01b0ebe3
movzx eax, bl
add rdx, rdi
movzx r11d, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 0x35
add r11b, dl
cmp r9, 0x64
jb 0x14004b573
movzx ecx, bl
movabs rdx, 0x131771582807ee52
add rdx, rdi
movzx eax, bl
and al, dl
add al, al
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0x7c]
jmp 0x14004bc3f
movabs rdx, 0xe891ce97331a2d7d
movzx eax, bl
add rdx, rdi
movzx r11d, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 0x6b
add r11b, dl
cmp r8, 0x64
jae 0x14004bb22
lea rax, [r9 + 0x20]
cmp r8, rax
jbe 0x14004ba2b
movabs rdx, 0xaaf4ba7e16247e56
movzx eax, bl
add rdx, rdi
movzx r11d, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 0x5a
jmp 0x14004b5a9
movabs rcx, 0xde27ef8164836f17
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x5f
lea rax, [r9 + r8]
cmp rax, 0x5a
je 0x14004bb4b
lea rax, [r9 + 0x1000]
cmp r8, rax
jbe 0x14004b93c
movabs rcx, 0x3d9d14191cf5af27
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x11
jmp 0x14004b5fc
mov ecx, Ordinal_41
movabs rdx, 0x900de65dd718db1a
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004bdbf
mov ecx, 0xa
movabs rdx, 0x85a4074808821cb4
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004bd6a
movabs rcx, 0x7b3a283239eb5e4e
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x22
jmp 0x14004bd3c
movabs rcx, 0x70d0491c6b549fe8
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x58
jmp 0x14004bcf3
mov ecx, reloc.WS2_32.dll_gethostname
movabs rdx, 0x66666a069cbde182
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004bcf0
mov ecx, reloc.WLDAP32.dll_Ordinal_30
movabs rdx, 0x5bfc8af0ce27231c
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
jmp 0x14004bcc8
mov ecx, 3
movabs rdx, 0x5192abdaff9064b6
add rdx, rdi
dec rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
movabs rdx, 0x60535411fadfbb12
add r11b, bl
inc rdi
jmp 0x14004b0f2
movabs rcx, 0x4728ccc530f9a650
inc r9
add rcx, rdi
movabs rdx, 0x60535411fadfbb12
movzx eax, cl
dec rdi
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x30
inc rdi
jmp 0x14004b0f2
movabs rcx, 0x3cbeedaf6262e7ea
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x66
jmp 0x14004bc3f
lea rax, [r9 + 0x80]
cmp r8, rax
jae 0x14004b830
lea rcx, [rdi + r12]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x65
jmp 0x14004b655
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004b861
mov ecx, gethostname
movabs rdx, 0xdaaf4cc9f25d9e5e
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004bdbf
inc rax
cmp r8, rax
jne 0x14004b88c
movabs rcx, 0xef830af58f8b1b2a
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x26
jmp 0x14004bd3c
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004b8c8
movabs rcx, 0x192a874cc9e614c2
movabs rdx, 0x60535411fadfbb12
add rcx, rdi
dec rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x4e
inc rdi
jmp 0x14004b0f2
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004b907
movabs rcx, 0x23946662987cd328
inc r9
add rcx, rdi
movabs rdx, 0x60535411fadfbb12
movzx eax, cl
dec rdi
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x18
inc rdi
jmp 0x14004b0f2
lea rax, [r9 + 9]
cmp r8, rax
jne 0x14004b655
mov ecx, reloc.WS2_32.dll_ntohs
movabs rdx, 0x2dfe45786713918e
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004bc3f
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004b968
movabs rcx, 0x4806f32eeb8c6d8d
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x25
jmp 0x14004bc3f
inc rax
cmp r8, rax
jne 0x14004b9a3
movabs rcx, 0x5cdab15a88b9ea59
movabs rdx, 0x60535411fadfbb12
add rcx, rdi
dec rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x6f
inc rdi
jmp 0x14004b0f2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004b9cf
movabs rcx, 0x7c184e9bf47e258b
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x33
jmp 0x14004bcf3
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14004b9fb
movabs rcx, 0x86822db1c314e3f1
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x69
jmp 0x14004bd3c
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14004b5fc
movabs rcx, 0x90ec0cc791aba257
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x61
jmp 0x14004bd6a
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004ba57
movzx eax, bl
movabs rcx, 0xb55e9993e4bb3cbc
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x24
jmp 0x14004bdbf
inc rax
cmp r8, rax
jne 0x14004ba84
mov ecx, 0x24
movabs rdx, 0xca3257bf81e8b988
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
jmp 0x14004bd39
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004bab0
movzx eax, bl
movabs rcx, 0xdf0615eb1f163654
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x4c
jmp 0x14004bcf0
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004badd
movabs rdx, 0xe96ff500edacf4ba
movzx eax, bl
add rdx, rdi
movzx r11d, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 0x16
jmp 0x14004bcc8
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14004b5ac
mov ecx, reloc.WS2_32.dll_recv
movabs rdx, 0xf3d9d416bc43b320
add rdx, rdi
movzx eax, bl
and al, dl
dec rdi
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
movabs rdx, 0x60535411fadfbb12
inc rdi
jmp 0x14004b0f2
movzx r11d, byte [rbp + rdi - 0x60]
movabs rdx, 0x1d81506df69eacb8
add rdx, rdi
movzx eax, bl
and al, dl
add al, al
sub r11b, al
sub r11b, 8
add r11b, bl
jmp 0x14004bcc8
mov ecx, reloc.WS2_32.dll_socket
movabs rdx, 0x27eb2f83c5356b1e
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
sub r11b, byte [rbp + rdi - 0x60]
add r11b, bl
jmp 0x14004bd39
movabs rcx, 0xabd2e0e7d0b74593
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 5
jmp 0x14004bcf3
movabs rcx, 0x8c9543a664f30a61
movabs rdx, 0x60535411fadfbb12
add rcx, rdi
dec rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x59
inc rdi
jmp 0x14004b0f2
movabs rcx, 0x822b6490965c4bfb
inc r9
add rcx, rdi
movabs rdx, 0x60535411fadfbb12
movzx eax, cl
dec rdi
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x23
inc rdi
jmp 0x14004b0f2
movabs rcx, 0x77c1857ac7c58d95
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x13
jmp 0x14004bc3f
movabs rcx, 0x62edc74f2a9810c9
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x7f
movabs rcx, 0x184c60e30f534d85
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
add cl, 0x5d
add cl, bl
mov byte [rbp + rdi - 0x60], cl
inc r9
dec rdi
inc rdi
movabs rdx, 0x60535411fadfbb12
jmp 0x14004b0f2
movabs rcx, 0x4e1a09238d6a93fd
add rcx, rdi
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
add r11b, 0x15
dec rdi
movabs rdx, 0x60535411fadfbb12
inc rdi
jmp 0x14004b0f2
movabs rdx, 0x43b02a0dbed3d597
movzx r11d, bl
add rdx, rdi
movzx eax, dl
and al, bl
add al, al
sub r11b, al
sub r11b, 0x21
add r11b, dl
movabs rdx, 0x22b63ff8ddea0beb
movzx eax, bl
add rdx, rdi
movzx ecx, r11b
and al, dl
add al, al
sub cl, al
sub cl, 0x6d
add cl, bl
add cl, dl
mov byte [rbp + rdi - 0x60], cl
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
movabs rdx, 0x60535411fadfbb12
add rdi, rcx
inc rdi
jmp 0x14004b0f2
movabs rdx, 0x24728ccc530f9a65
movzx r11d, r10b
add rdx, rdi
mov rbx, r10
movzx eax, dl
and al, r10b
add al, al
sub r11b, al
add r11b, 0x3d
add r11b, dl
movzx eax, bl
inc r9
movabs rdx, 0x2d201f0eac80ca51
movzx ecx, bl
add rdx, rdi
and al, dl
add al, al
sub cl, al
sub cl, 0x37
add cl, dl
movzx eax, cl
mov byte [rbp + rdi - 0x60], al
add rax, r9
sub rdi, rax
inc r8
movabs rdx, 0x32550e9993cc2984
add rdx, rdi
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movzx eax, dl
and al, bl
sub cl, al
mov rax, 0xffffffffffffffff
add cl, cl
sub rax, r8
add cl, dl
add cl, bl
mov byte [rbp + rdi - 0x60], cl
add rdi, rax
jmp 0x14004bdbf
movzx eax, r10b
movabs rcx, 0xf9ecea0b5e21d99
add rcx, rdi
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x2f
movzx eax, byte [rbp + rdi - 0x60]
movabs rdx, 0x60535411fadfbb12
add rax, r9
add rdi, rax
inc rdi
jmp 0x14004b0f2
movzx eax, bl
movabs rcx, 0xb480732a2a28757f
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x79
jmp 0x14004b0f0
movzx eax, bl
movabs rcx, 0xaa1694145b91b719
add rcx, rdi
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
add r11b, 0x51
jmp 0x14004b0e0
lea rdx, [rbp + 0x163f5e4]
jmp 0x14004be38
lea rdx, [rbp + 0xaf5517]
jmp 0x14004be38
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [rbp - 0x10]
call fcn.140198c88
movzx r11d, byte [rsp + 0x30]
mov rsi, rax
xor eax, eax
mov dword [rbp - 0x38], 0x7a08754e
xorps xmm0, xmm0
mov dword [rbp - 0x1c], eax
mov word [rbp - 0x18], ax
movabs r13, 0x75d1137d7048c044
mov byte [rbp - 0x16], al
movabs r14, 0xaa26994a35f7c594
mov dword [rbp - 0x34], 0x76020602
movabs r15, 0xf885951bf78064ec
mov dword [rbp - 0x30], 0x930e0c1c
movabs r12, 0xce36e2116eee464
movups xmmword [rbp - 0x2c], xmm0
nop dword [rax]
mov rax, qword [0x14022e4a8]
mov r9, qword [0x14022e4a0]
nop
xor edi, edi
cmp rdi, 0x23
jae 0x14004cb16
movzx ebx, byte [rbp + rdi - 0x38]
mov r10, rbx
cmp rax, rdi
ja 0x14004cb0d
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14004bf14
lea rdx, [rdi + r13]
mov r11d, reloc.WS2_32.dll_select
movzx ecx, dl
and cl, r10b
sub r11b, cl
add r11b, r11b
add r11b, r10b
add r11b, dl
jmp 0x14004bf41
je 0x14004ca81
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004ca47
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14004ca18
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x14004c9c7
cmp r9, rdi
ja 0x14004cb04
lea rcx, [r9 + 0x28]
cmp rax, rcx
jae 0x14004bf6f
lea r8, [rdi + r14]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
sub r11b, 0xc
add r11b, r8b
jmp 0x14004bfb0
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14004c9a1
inc rcx
cmp rax, rcx
je 0x14004c951
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14004c928
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x14004c88c
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004c866
nop
lea rcx, [r9 + rax]
cmp rcx, rdi
jbe 0x14004c4c6
nop dword [rax]
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14004c49d
lea rcx, [r9 + 0x42]
cmp rax, rcx
je 0x14004c471
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14004c442
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14004c419
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x14004c3f6
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004c3d3
lea rcx, [r9 + 0x64]
cmp rax, rcx
je 0x14004c3aa
mov rax, rcx
lea r9, [rcx + 0x40]
lea rcx, [r9 + 2]
cmp rax, rcx
jb 0x14004cadc
lea rcx, [r9 + 0x42]
cmp rax, rcx
jb 0x14004cab9
lea rcx, [r9 + 1]
cmp rax, rcx
jb 0x14004c150
lea rcx, [r9 + 0x40]
cmp rax, rcx
jb 0x14004c130
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jb 0x14004c111
lea rcx, [r9 + 0x28]
cmp rax, rcx
jb 0x14004c34b
lea rdx, [r9 + 0x5a]
cmp rax, rdx
jb 0x14004c2e6
lea rcx, [r9 + 0x20]
cmp rax, rcx
jb 0x14004c297
lea rcx, [r9 + 0x41]
cmp rax, rcx
jb 0x14004c26c
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x14004bfc0
lea r9, [rdx + 0x7a]
mov rax, rdx
lea rcx, [r9 + 0x20]
cmp rdx, rcx
ja 0x14004c246
lea rcx, [r9 + 0x41]
cmp rdx, rcx
ja 0x14004c21e
lea rcx, [r9 + 0x10]
cmp rdx, rcx
ja 0x14004c1fb
lea rcx, [r9 + 0x7a]
cmp rdx, rcx
ja 0x14004c1d2
lea rcx, [r9 + 0xa]
cmp rdx, rcx
ja 0x14004c1af
lea rcx, [r9 + 0x61]
cmp rdx, rcx
ja 0x14004c18c
lea rcx, [r9 + 9]
cmp rdx, rcx
ja 0x14004c178
mov rax, rcx
lea r9, [rcx + 0x7a]
jmp 0x14004bfc0
lea r8, [rdi + r15]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
sub r11b, 0x74
add r11b, r8b
jmp 0x14004bfb0
lea r8, [rdi + r12]
mov edx, Ordinal_35
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14004bf41
movabs r8, 0x21414726365d63dc
movzx ecx, bl
add r8, rdi
movzx r11d, bl
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 4
add r11b, r8b
jmp 0x14004bee1
movabs r8, 0x79f07c5bee9b2b90
mov edx, 8
jmp 0x14004ca27
movabs rdx, 0x8e4e55610e09ab08
movzx ecx, bl
add rdx, rdi
and cl, dl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x38
jmp 0x14004c975
movzx ecx, bl
movabs rdx, 0xa2ac2e662d782a80
add rdx, rdi
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
add r11b, 0x80
jmp 0x14004ca65
mov edx, Ordinal_30
movabs r8, 0xb70a076b4ce6a9f8
add r8, rdi
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14004ca68
movabs rdx, 0xcb67e0706c552970
movzx ecx, bl
add rdx, rdi
and cl, dl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x10
jmp 0x14004c8af
movabs r8, 0xdfc5b9758bc3a8e8
movzx ecx, bl
add r8, rdi
movzx r11d, bl
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x58
add r11b, r8b
jmp 0x14004c8e0
mov edx, Ordinal_50
movabs r8, 0xf423927aab322860
add r8, rdi
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
jmp 0x14004caa3
movzx ecx, bl
movabs rdx, 0xa70e310779c6670c
add rdx, rdi
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x54
mov byte [rbp + rdi - 0x38], r11b
inc rdi
jmp 0x14004bed2
mov edx, reloc.WLDAP32.dll_Ordinal_50
movabs r8, 0xbb6c0a0c9934e684
add r8, rdi
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
cmp r9, 4
jb 0x14004c28a
movabs rdx, 0xf14dc3fabcfc9b18
movzx ecx, bl
add rdx, rdi
and cl, dl
add cl, cl
sub dl, cl
add dl, bl
lea r11d, [rdx*2 - 0x50]
jmp 0x14004c9e5
mov edx, recv
movabs r8, 0xcfc9e311b8a365fc
add r8, rdi
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
cmp rax, 0x1000
jae 0x14004c818
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jbe 0x14004c6e6
movabs r8, 0xbcf83e2df74d95c8
movzx ecx, bl
add r8, rdi
movzx r11d, bl
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x78
jmp 0x14004c2b8
movabs rdx, 0xe427bc16d811e574
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x2c
lea rcx, [r9 + rax]
cmp rcx, 0x1000
je 0x14004c83f
lea rcx, [r9 + 0xa]
cmp rax, rcx
jbe 0x14004c5ec
movabs rdx, 0x12d1a4e3c155d034
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x6c
jmp 0x14004c30a
mov edx, reloc.WS2_32.dll_sendto
movabs r8, 0x25a349c782aba068
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x14004c8af
movabs rdx, 0x3a0122cca21a1fe0
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x20
jmp 0x14004ca68
movabs rdx, 0x4e5efbd1c1889f58
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x68
jmp 0x14004ca65
mov edx, Ordinal_41
movabs r8, 0x62bcd4d6e0f71ed0
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14004c975
mov edx, 4
movabs r8, 0x771aaddc00659e48
add r8, rdi
dec rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
inc rdi
jmp 0x14004bed2
movabs rdx, 0x8b7886e11fd41dc0
inc r9
add rdx, rdi
dec rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x40
inc rdi
jmp 0x14004bed2
mov edx, reloc.WLDAP32.dll_Ordinal_60
movabs r8, 0x9fd65fe63f429d38
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x14004c9e5
lea rcx, [r9 + 0x41]
cmp rax, rcx
jae 0x14004c4ef
lea r8, [rdi + r13]
mov edx, reloc.WS2_32.dll_select
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x14004c369
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x14004c529
movabs rdx, 0x544d32946bef8b28
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, r9
add rdi, rcx
lea r11d, [rbx + rdx]
sub r11b, 0x18
inc rdi
jmp 0x14004bed2
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004c558
mov edx, reloc.WLDAP32.dll_Ordinal_60
movabs r8, 0x2b91808a2d128c38
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
jmp 0x14004c8ac
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x14004c584
movabs rdx, 0x1733a7850da40cc0
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x40
jmp 0x14004ca68
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14004c5b6
mov edx, 4
movabs r8, 0x2d5ce7fee358d48
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x14004ca65
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14004c369
movabs rdx, 0xda1a1c75af588e58
add rdx, rdi
dec rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x68
inc rdi
jmp 0x14004bed2
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004c618
movabs rdx, 0xfe73cbdea1e750bc
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x24
jmp 0x14004c9e5
inc rcx
cmp rax, rcx
jne 0x14004c652
mov edx, reloc.WS2_32.dll_select
movabs r8, 0xea15f2d98278d144
add r8, rdi
inc r9
movzx ecx, r8b
dec rdi
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
inc rdi
jmp 0x14004bed2
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14004c68a
mov edx, gethostname
movabs r8, 0xd5b819d4630a51cc
add r8, rdi
dec rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
inc rdi
jmp 0x14004bed2
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14004c6b6
movabs rdx, 0xacfc67ca242d52dc
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 4
jmp 0x14004ca65
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x14004c30a
movabs rdx, 0x8440b5bfe55053ec
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x74
jmp 0x14004c8af
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004c720
movzx ecx, bl
movabs rdx, 0xa89a6528d7df1650
add rdx, rdi
and cl, dl
add cl, cl
sub bl, cl
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, r9
add rdi, rcx
lea r11d, [rdx + rbx]
sub r11b, 0x30
inc rdi
jmp 0x14004bed2
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14004c74f
mov edx, Ordinal_50
movabs r8, 0x7fdeb31e99021760
add r8, rdi
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
jmp 0x14004c8ac
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14004c77b
movzx ecx, bl
movabs rdx, 0x572301145a251870
add rdx, rdi
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x10
jmp 0x14004ca65
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x14004c7ad
movzx ecx, bl
movabs rdx, 0x2e674f0a1b481980
add rdx, rdi
dec rdi
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
add r11b, 0x80
inc rdi
jmp 0x14004bed2
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14004c7e2
movzx ecx, bl
movabs rdx, 0x1a097604fbd99a08
add rdx, rdi
inc r9
and cl, dl
dec rdi
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x38
inc rdi
jmp 0x14004bed2
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x14004c2bb
mov edx, 8
movabs r8, 0x5ab9cffdc6b1a90
add r8, rdi
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14004c9e5
movzx r11d, byte [rbp + rdi - 0x38]
movabs r8, 0xdcefeaf59d8e1ba0
add r8, rdi
movzx ecx, bl
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x60
jmp 0x14004c96f
movabs r8, 0xc89211f07e1f9c28
movzx ecx, bl
add r8, rdi
movzx r11d, bl
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, byte [rbp + rdi - 0x38]
sub r11b, 0x18
jmp 0x14004c8ac
mov edx, reloc.WLDAP32.dll_Ordinal_26
movabs r8, 0x737d1213a83c9d4
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x14004c8e0
movabs r8, 0x1b95aa2659f2494c
movzx r11d, bl
add r8, rdi
movzx ecx, r8b
and cl, bl
add cl, cl
sub r11b, cl
sub r11b, 0x14
add r11b, r8b
movzx ecx, bl
inc r9
movabs r8, 0x3e63256dee685c6c
mov edx, 6
add r8, rdi
and cl, r8b
sub dl, cl
add dl, dl
add dl, bl
add dl, r8b
movzx ecx, dl
mov byte [rbp + rdi - 0x38], cl
add rcx, r9
sub rdi, rcx
movzx ecx, bl
inc rax
movabs r8, 0xb43438eb5eb11cb0
mov edx, Ordinal_26
add r8, rdi
and cl, r8b
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add dl, dl
add dl, bl
add dl, r8b
mov byte [rbp + rdi - 0x38], dl
add rdi, rcx
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14004bed2
mov edx, reloc.WLDAP32.dll_Ordinal_46
movabs r8, 0x44515c3098cf483c
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x14004ca65
mov edx, 0xa
movabs r8, 0x58af3535b83dc7b4
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
movabs r8, 0x52c0fe730dd6dbe4
movzx ecx, bl
add r8, rdi
movzx edx, r11b
and cl, r8b
add cl, cl
sub dl, cl
sub dl, 0x3c
add dl, bl
add dl, r8b
mov byte [rbp + rdi - 0x38], dl
jmp 0x14004ca65
mov edx, reloc.WLDAP32.dll_Ordinal_30
movabs r8, 0x95c8c0451689461c
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x14004c9e5
movabs rdx, 0xbe84724f5566450c
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x54
movabs r8, 0x671ed7782d455b5c
movzx ecx, bl
add r8, rdi
mov edx, 0x3e
and cl, r8b
sub dl, cl
add dl, dl
add dl, bl
add dl, r8b
mov byte [rbp + rdi - 0x38], dl
inc r9
dec rdi
inc rdi
jmp 0x14004bed2
movabs r8, 0xe7402459944343fc
mov edx, recv
add r8, rdi
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
dec rdi
inc rdi
jmp 0x14004bed2
movzx ecx, bl
movabs rdx, 0xffbd663d32042ec
add rdx, rdi
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x74
add rax, r9
movzx ecx, r11b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x14004bed2
mov edx, gethostname
movabs r8, 0x61733a7850da40cc
add r8, rdi
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14004bed2
movzx ecx, bl
movabs rdx, 0x359f202b55cbe354
add rdx, rdi
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x4c
jmp 0x14004bed0
mov ecx, gethostname
movabs rdx, 0x49fcf930753a62cc
add rdx, rdi
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x14004bec0
lea rdx, [rbp + 0x1612d78]
jmp 0x14004cb1a
lea rdx, [rbp + 0x169edbc]
jmp 0x14004cb1a
lea rdx, [rbp - 0x38]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [rsi + 0x10]
lea rbx, [rsi + 0x18]
test eax, eax
je 0x14004cb71
mov edi, eax
nop word [rax + rax]
lea r9, [rbx + 8]
mov r8, rbx
lea rdx, [rbp]
lea rcx, [0x14022de40]
call fcn.140059aa0
add rbx, 0x14
sub rdi, 1
jne 0x14004cb50
mov rcx, rsi
call fcn.1401988f4
mov rcx, qword [rbp - 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.140198890
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret