Function at 0x1400fb860
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x14021a800]
xor rax, rsp
mov qword [rbp + 0x18], rax
movzx r10d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp - 0x7a], rax
movups xmmword [rsp + 0x76], xmm0
mov dword [rbp - 0x72], eax
movabs r13, 0x4e0dd76faaf43ce4
mov byte [rbp - 0x6e], al
movabs r14, 0x6722ac290608feb4
mov dword [rsp + 0x40], 0x67689860
movabs r15, 0x6183f9a1d29d0fcc
mov dword [rsp + 0x44], 0x6a64947b
movabs r12, 0xc5684ac27cb49604
mov dword [rsp + 0x48], 0x606f6374
mov dword [rsp + 0x4c], 0x8c7c607b
mov dword [rsp + 0x50], 0x7b8b7c75
mov dword [rsp + 0x54], 0x544f7660
mov dword [rsp + 0x58], 0xa3575c4c
mov dword [rsp + 0x5c], 0xa8ada08e
mov dword [rsp + 0x60], 0xa699abb5
mov dword [rsp + 0x64], 0xaf8691a7
mov dword [rsp + 0x68], 0x90aba2b9
mov dword [rsp + 0x6c], 0x9a4eb98d
mov dword [rsp + 0x70], 0xb9bdbcb5
mov word [rsp + 0x74], 0x25ad
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor r11d, r11d
cmp r11, 0x53
jae 0x1400fc780
movzx edi, byte [rsp + r11 + 0x40]
mov ebx, edi
nop word [rax + rax]
mov rsi, rbx
cmp r8, r11
ja 0x1400fc777
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x1400fb9af
lea rcx, [r11 + r13]
mov rax, rcx
and rax, rbx
imul r10, rax, 0xfffffffffffffffe
add r10, rcx
add r10, rbx
sub r10b, 0x3c
jmp 0x1400fb9f0
je 0x1400fc6ea
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400fc64f
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fc5ec
lea rax, [rcx + 1]
cmp r8, rax
je 0x1400fc5bc
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400fc56e
nop dword [rax]
cmp r9, r11
ja 0x1400fc76e
lea rax, [r9 + 0x10]
cmp r8, rax
jae 0x1400fba1f
lea rdx, [r11 + r14]
mov ecx, 0xa
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
jmp 0x1400fba60
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400fc54b
inc rax
cmp r8, rax
je 0x1400fc522
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fc4ff
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400fc4d8
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400fc4a6
nop
lea rax, [r9 + r8]
cmp rax, r11
jbe 0x1400fc0df
nop dword [rax]
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x1400fc0b6
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x1400fc088
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x1400fc059
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400fc031
lea rcx, [r9 + 0x5a]
cmp r8, rcx
je 0x1400fc008
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400fbfe3
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400fbfba
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x1400fbf92
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x1400fbf5a
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x1400fba70
lea r9, [rcx + 0x41]
mov r8, rcx
lea rax, [r9 + 0x7a]
cmp rcx, rax
jb 0x1400fc745
lea rax, [r9 + 4]
cmp rcx, rax
jb 0x1400fc720
lea rax, [r9 + 2]
cmp rcx, rax
jb 0x1400fbc69
lea rax, [r9 + 0xa]
cmp rcx, rax
jb 0x1400fbc4a
lea rax, [r9 + 0x80]
cmp rcx, rax
jb 0x1400fbc2a
lea rax, [r9 + 0x42]
cmp rcx, rax
jb 0x1400fbef5
lea rax, [r9 + 0x61]
cmp rcx, rax
jb 0x1400fbe95
lea rax, [r9 + 0x400]
cmp rcx, rax
jb 0x1400fbe3e
lea rax, [r9 + 1]
cmp rcx, rax
jb 0x1400fbe11
lea rax, [r9 + 9]
cmp rcx, rax
jb 0x1400fba70
lea r8, [r9 + 8]
lea r9, [r8 + 6]
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x1400fbdd9
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x1400fbdb1
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x1400fbd88
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x1400fbd63
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x1400fbd3e
lea rax, [r9 + 6]
cmp r8, rax
ja 0x1400fbd15
lea rax, [r9 + 4]
cmp r8, rax
ja 0x1400fbcea
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x1400fbcb8
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x1400fbc90
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x1400fba70
lea r8, [r9 + 0x64]
lea r9, [r8 + 0x41]
jmp 0x1400fba70
lea rdx, [r11 + r15]
mov ecx, gethostname
movzx eax, sil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
jmp 0x1400fba60
lea rdx, [r11 + r12]
movzx eax, sil
and al, dl
movzx r10d, bl
add al, al
sub r10b, al
sub r10b, 0x1c
add r10b, dl
jmp 0x1400fb9f0
mov eax, reloc.WLDAP32.dll_Ordinal_46
movabs rcx, 0x294c9be326cc1c3c
add rcx, r11
and sil, cl
sub al, sil
lea r10d, [rax + rax]
add r10b, bl
add r10b, cl
jmp 0x1400fb980
movabs rdx, 0x391561483047f5a0
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x60
add r10b, dl
jmp 0x1400fc58c
mov ecx, listen
movabs rdx, 0x9cf9b268da5f7bd8
add rdx, r11
movzx eax, dil
and al, dl
inc r9
sub cl, al
dec r11
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
inc r11
jmp 0x1400fb963
movzx eax, dil
movabs rcx, 0xde038984770210
add rcx, r11
dec r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x70
inc r11
jmp 0x1400fb963
mov ecx, 4
movabs rdx, 0x64c254aa2e8e8848
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1400fc60a
movzx eax, dil
movabs rcx, 0xc8a6a5cad8a60e80
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
add r10b, 0x80
jmp 0x1400fc633
movzx eax, dil
movabs rcx, 0x2c8af6eb82bd94b8
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 8
jmp 0x1400fc636
mov ecx, gethostname
movabs rdx, 0x906f480c2cd51af0
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1400fc671
movabs rdx, 0xf453992cd6eca128
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x18
add r10b, dl
jmp 0x1400fc6a2
movzx eax, dil
mov ecx, Ordinal_50
movabs rdx, 0x5837ea4d81042760
add rdx, r11
and al, dl
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
inc r11
jmp 0x1400fb963
movzx eax, dil
movabs rcx, 0xd1f2b51f2a3ef6ec
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x74
mov byte [rsp + r11 + 0x40], r10b
inc r11
jmp 0x1400fb963
mov ecx, 2
movabs rdx, 0x35d7063fd4567d24
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
cmp r9, 0x1000
jb 0x1400fbe31
mov ecx, listen
movabs rdx, 0x1983d67e1d5042d8
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
add cl, cl
add cl, dil
add cl, dl
lea r10d, [rcx + rcx]
jmp 0x1400fc58c
mov ecx, 0x3e
movabs rdx, 0x99bb57607e6e035c
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
cmp r8, 0x28
jae 0x1400fc453
lea rax, [r9 + 0x20]
cmp r8, rax
jbe 0x1400fc31a
movabs rdx, 0x6f01c4c23b8108
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x38
jmp 0x1400fbe5f
movabs rdx, 0xfd9fa88128858994
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0xc
add r10b, dl
lea rax, [r9 + r8]
cmp rax, 0x1000
je 0x1400fc480
lea rax, [r9 + 3]
cmp r8, rax
jbe 0x1400fc23f
movabs rdx, 0x994c559bbc328254
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x4c
jmp 0x1400fbeb6
movzx eax, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_60
movabs rdx, 0x6ad008f62435f838
add rdx, r11
and al, dl
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
inc r11
jmp 0x1400fb963
movabs rdx, 0xceb45a16ce4d7e70
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x10
add r10b, dl
jmp 0x1400fc6a2
mov ecx, 0x34
movabs rdx, 0x3298ab37786504a8
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1400fc671
movzx eax, dil
movabs rcx, 0x967cfc58227c8ae0
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x20
jmp 0x1400fc636
mov ecx, Ordinal_46
movabs rdx, 0xfa614d78cc941118
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1400fc633
movabs rdx, 0x5e459e9976ab9750
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x30
add r10b, dl
jmp 0x1400fc60a
mov ecx, 0x24
movabs rdx, 0xc229efba20c31d88
add rdx, r11
movzx eax, dil
and al, dl
dec r11
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
inc r11
jmp 0x1400fb963
movzx eax, dil
movabs rcx, 0x260e40dacadaa3c0
add rcx, r11
inc r9
and al, cl
dec r11
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x40
inc r11
jmp 0x1400fb963
mov ecx, Ordinal_30
movabs rdx, 0x89f291fb74f229f8
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1400fc58c
lea rax, [r9 + 0x400]
cmp r8, rax
jae 0x1400fc105
lea rax, [r11 + r13]
and sil, al
add sil, sil
sub bl, sil
lea r10d, [rax + rbx]
sub r10b, 0x3c
jmp 0x1400fbf18
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1400fc146
movzx eax, dil
mov ecx, reloc.WS2_32.dll_sendto
movabs rdx, 0xce4558520c11fd68
add rdx, r11
and al, dl
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
inc r11
jmp 0x1400fb963
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fc178
mov ecx, Ordinal_30
movabs rdx, 0x67cb610b7e2f0f8
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1400fc671
lea rax, [rcx + 1]
cmp r8, rax
jne 0x1400fc1a6
movzx eax, dil
movabs rcx, 0xa29864f00dcb6ac0
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x40
jmp 0x1400fc636
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fc1d8
mov ecx, 0x24
movabs rdx, 0x3eb413cf63b3e488
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1400fc633
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fc209
movabs rdx, 0xdacfc2aeb99c5e50
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x30
add r10b, dl
jmp 0x1400fc60a
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400fbf18
mov ecx, 0x34
movabs rdx, 0xaf22cf4cbb55cba8
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1400fc58c
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fc271
mov ecx, reloc.WLDAP32.dll_Ordinal_30
movabs rdx, 0x3568047b121afc1c
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1400fc58c
inc rax
cmp r8, rax
jne 0x1400fc2a7
movzx eax, dil
movabs rcx, 0xd183b35a680375e4
add rcx, r11
inc r9
and al, cl
dec r11
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x3c
inc r11
jmp 0x1400fb963
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fc2d5
movzx eax, dil
movabs rcx, 0x41f26ed7bfa55d04
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x1c
jmp 0x1400fc636
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400fbeb9
movzx eax, dil
mov ecx, 0x3e
movabs rdx, 0x16457b75c15eca5c
add rdx, r11
and al, dl
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
inc r11
jmp 0x1400fb963
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1400fc35b
movzx eax, dil
mov ecx, Ordinal_41
movabs rdx, 0x9c8ab0a41823fad0
add rdx, r11
and al, dl
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
inc r11
jmp 0x1400fb963
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fc38d
mov ecx, Ordinal_50
movabs rdx, 0xd4c20e62c3f4ee60
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1400fc671
lea rax, [rcx + 1]
cmp r8, rax
jne 0x1400fc3bb
movzx eax, dil
movabs rcx, 0x70ddbd4219dd6828
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x18
jmp 0x1400fc636
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fc3ed
mov ecx, gethostname
movabs rdx, 0xcf96c216fc5e1f0
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1400fc633
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fc41e
movabs rdx, 0xa9151b00c5ae5bb8
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 8
add r10b, dl
jmp 0x1400fc60a
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400fbe62
movabs rdx, 0x7d68279ec767c910
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x70
add r10b, dl
jmp 0x1400fc58c
movzx r10d, byte [rsp + r11 + 0x40]
movabs rdx, 0xb59f855d7338bca0
add rdx, r11
movzx eax, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x60
add r10b, dil
add r10b, dl
jmp 0x1400fc60a
mov ecx, reloc.WS2_32.dll_sendto
movabs rdx, 0x51bb343cc9213668
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
jmp 0x1400fc671
movabs rax, 0xe41bd2030b3546bc
add rax, r11
and sil, al
add sil, sil
sub bl, sil
lea r10d, [rax + rbx]
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
sub r10b, 0x24
add r11, rax
inc r11
jmp 0x1400fb963
mov eax, Ordinal_46
movabs rcx, 0x48002323b54cccf4
add rcx, r11
and sil, cl
sub al, sil
lea r10d, [rax + rax]
add r10b, cl
add r10b, bl
jmp 0x1400fc6a2
movabs rax, 0x73ad1685b3935f9c
add rax, r11
and sil, al
add sil, sil
sub bl, sil
lea r10d, [rax + rbx]
sub r10b, 0x44
jmp 0x1400fc633
movabs rax, 0x3b75b8c707c26c0c
add rax, r11
dec r11
and sil, al
add sil, sil
sub bl, sil
lea r10d, [rax + rbx]
sub r10b, 0x54
inc r11
jmp 0x1400fb963
movabs rcx, 0x33e5b085bf1787c
movzx r10d, bl
add rcx, r11
and sil, cl
add sil, sil
sub r10b, sil
sub r10b, 0x64
add r10b, cl
jmp 0x1400fc58c
movabs rax, 0xcb06fd49b02084ec
add rax, r11
and sil, al
add sil, sil
sub al, sil
lea r10d, [rdi + rax]
sub r10b, 0x74
movabs rcx, 0x6791adedc8447fbc
inc r9
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
sub cl, 0x24
add cl, dil
mov byte [rsp + r11 + 0x40], cl
dec r11
inc r11
jmp 0x1400fb963
mov eax, 2
movabs rcx, 0x2eeb4e6a5a380b24
add rcx, r11
and sil, cl
sub al, sil
lea r10d, [rax + rax]
add r10b, bl
add r10b, cl
inc r9
dec r11
inc r11
jmp 0x1400fb963
movabs rax, 0xf6b3f0abae671794
add rax, r11
and sil, al
add sil, sil
sub al, sil
lea r10d, [rdi + rax]
sub r10b, 0xc
movabs rdx, 0x3ad5ccd1e2cf984
movzx eax, dil
add rdx, r11
mov ecx, reloc.WLDAP32.dll_Ordinal_50
and al, dl
sub cl, al
add cl, cl
add cl, dil
add cl, dl
add cl, r10b
mov byte [rsp + r11 + 0x40], cl
add r8, r9
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
inc r11
jmp 0x1400fb963
mov eax, reloc.WLDAP32.dll_Ordinal_46
movabs rcx, 0x2260e40dacadaa3c
add rcx, r11
and sil, cl
sub al, sil
lea r10d, [rax + rax]
add r10b, bl
add r10b, cl
movzx eax, dil
inc r9
movabs rdx, 0x9fc90bac7415734c
movzx ecx, dil
add rdx, r11
and al, dl
add al, al
sub cl, al
sub cl, 0x14
add cl, dl
movzx eax, cl
mov byte [rsp + r11 + 0x40], al
add rax, r9
sub r11, rax
movzx eax, dil
inc r8
movabs rcx, 0xedd6e31c1f09b030
add rcx, r11
and al, cl
add al, al
sub dil, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub dil, 0x50
add dil, cl
mov byte [rsp + r11 + 0x40], dil
add r11, rax
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
inc r11
jmp 0x1400fb963
mov eax, Ordinal_41
movabs rcx, 0xea29864f00dcb6ac
add rcx, r11
and sil, cl
sub al, sil
lea r10d, [rax + rax]
add r10b, bl
add r10b, cl
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
inc r11
jmp 0x1400fb963
movzx eax, dil
movabs rcx, 0x8d30ed03d0e3a274
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x2c
jmp 0x1400fb960
mov ecx, Ordinal_41
movabs rdx, 0xf1153e247afb28ac
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1400fb950
lea rdx, [rbp + 0x158e870]
jmp 0x1400fc785
lea rdx, [rbp + 0x8d2554]
jmp 0x1400fc785
lea rdx, [rsp + 0x40]
lea rax, [rbp - 8]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movzx r10d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x44], eax
movups xmmword [rbp - 0x54], xmm0
mov word [rbp - 0x40], ax
movabs rdi, 0x2c10a953a1c11834
mov byte [rbp - 0x3e], al
movabs rsi, 0x609f0b72b4c1264c
mov dword [rbp - 0x60], 0x7a48758e
movabs r15, 0x1a7ab2bad6f0d064
mov dword [rbp - 0x5c], 0x76424642
movabs r14, 0x2ba9a5fd06df8584
mov dword [rbp - 0x58], 0xd34e4c5c
movabs r12, 0xf6b4408758fde4bc
movabs r13, 0x2b8fe527602720d8
nop
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x1400fd5f6
movzx r11d, byte [rbp + rbx - 0x60]
mov rdx, r11
cmp r8, rbx
ja 0x1400fd5ed
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1400fc861
lea rcx, [rbx + r15]
mov rax, rcx
and rax, rdx
imul r10, rax, 0xfffffffffffffffe
add r10, rcx
add r10, rdx
add r10b, 0x44
jmp 0x1400fc8b0
je 0x1400fd565
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400fd4cf
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fd494
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400fd447
lea rax, [r9 + 7]
cmp r8, rax
je 0x1400fd41d
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400fd3c6
nop dword [rax + rax]
cmp r9, rbx
ja 0x1400fd5e4
lea rax, [r9 + 0x5a]
cmp r8, rax
jae 0x1400fc8de
lea rdx, [rbx + rdi]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
sub r10b, 0x6c
add r10b, dl
jmp 0x1400fc911
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400fd3b5
inc rax
cmp r8, rax
je 0x1400fd388
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400fd35f
lea rax, [r9 + 8]
cmp r8, rax
je 0x1400fd328
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x1400fcf57
nop
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400fcf43
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400fcf16
lea rax, [r9 + 8]
cmp r8, rax
je 0x1400fcee7
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x1400fcec3
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x1400fce9a
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x1400fce76
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fce4d
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400fce29
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x1400fcdf2
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x1400fc920
lea r8, [r9 + 0x10]
lea r9, [r8 + 0x5a]
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x1400fd5bf
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x1400fd596
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x1400fcb0c
lea rax, [r9 + 6]
cmp r8, rax
jb 0x1400fcaec
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x1400fcacd
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x1400fcd87
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x1400fcd25
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x1400fccd2
lea rax, [r9 + 5]
cmp r8, rax
jb 0x1400fcca1
lea rax, [r9 + 9]
cmp r8, rax
jb 0x1400fc920
lea r8, [r9 + 0x7a]
lea r9, [r8 + 0x20]
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x1400fcc6a
lea rax, [r9 + 3]
cmp r8, rax
ja 0x1400fcc42
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x1400fcc19
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x1400fcbf4
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x1400fcbcf
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x1400fcba6
lea rax, [r9 + 2]
cmp r8, rax
ja 0x1400fcb7b
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x1400fcb52
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x1400fcb2a
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x1400fc920
lea r8, [r9 + 0xa]
lea r9, [r8 + 0x41]
jmp 0x1400fc920
lea rdx, [rbx + rsi]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
sub r10b, 0x14
add r10b, dl
jmp 0x1400fc911
lea rdx, [rbx + r14]
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400fc8b0
lea rdx, [rbx + r12]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub dl, 0x24
sub r10b, al
add r10b, dl
jmp 0x1400fc832
movabs rdx, 0x60854a9d0e08c1a0
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x60
add r10b, dl
jmp 0x1400fd3ea
lea rdx, [rbx + r13]
mov ecx, listen
movzx eax, r11b
inc r9
and al, dl
dec rbx
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x1400fc822
movzx eax, r11b
movabs rcx, 0xf69a7fb1b2458010
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x70
inc rbx
jmp 0x1400fc822
mov ecx, 4
movabs rdx, 0xc1a51a3c0463df48
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400fd46b
movzx eax, r11b
movabs rcx, 0x8cafb4c656823e80
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x80
jmp 0x1400fd4b3
movzx eax, r11b
movabs rcx, 0x57ba4f50a8a09db8
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 8
jmp 0x1400fd4b6
mov ecx, gethostname
movabs rdx, 0x22c4e9dafabefcf0
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400fd4f0
movabs rdx, 0xedcf84654cdd5c28
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x18
add r10b, dl
jmp 0x1400fd521
movzx eax, r11b
mov ecx, Ordinal_50
movabs rdx, 0xb8da1eef9efbbb60
add rdx, rbx
and al, dl
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x1400fc822
mov ecx, 6
movabs rdx, 0x3474a1496c47a96c
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
mov byte [rbp + rbx - 0x60], r10b
inc rbx
jmp 0x1400fc822
movabs rdx, 0xff7f3bd3be6608a4
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x7c
add r10b, dl
cmp r9, 5
jb 0x1400fccc5
mov ecx, listen
movabs rdx, 0x8ce33671a3f307d8
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
lea r10d, [rcx + rcx]
jmp 0x1400fd3ea
movabs rdx, 0xca89d65e108467dc
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 4
add r10b, dl
cmp r8, 0x3e8
jae 0x1400fd2d5
lea rax, [r9 + 8]
cmp r8, rax
jbe 0x1400fd19a
movabs rdx, 0x7b4d3fd8d922c008
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x38
jmp 0x1400fccf2
movabs rdx, 0x959470e862a2c714
mov ecx, Ordinal_60
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
lea rax, [r9 + r8]
cmp rax, 6
je 0x1400fd302
lea rax, [r9 + 0x1000]
cmp r8, rax
jbe 0x1400fd09e
mov ecx, reloc.WLDAP32.dll_Ordinal_26
movabs rdx, 0x4f3c96853761a7d4
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fcd48
mov ecx, reloc.WLDAP32.dll_Ordinal_60
movabs rdx, 0x863f7f5ca869138
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x1400fc822
movabs rcx, 0xd36e92801ca4f070
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x10
jmp 0x1400fd521
mov ecx, 0x34
movabs rdx, 0x9e792d0a6ec34fa8
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fd4f0
movabs rcx, 0x6983c794c0e1aee0
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x20
jmp 0x1400fd4b6
mov ecx, Ordinal_46
movabs rdx, 0x348e621f13000e18
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fd4b3
movabs rcx, 0xff98fca9651e6d50
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x30
jmp 0x1400fd46b
mov ecx, 0x24
movabs rdx, 0xcaa39733b73ccc88
add rdx, rbx
dec rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x1400fc822
movabs rcx, 0x95ae31be095b2bc0
inc r9
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x40
inc rbx
jmp 0x1400fc822
movabs rdx, 0x60b8cc485b798af8
mov ecx, Ordinal_30
jmp 0x1400fd3d5
lea rax, [r9 + 0x7a]
cmp r8, rax
jae 0x1400fcf74
lea rdx, [rbx + r15]
mov ecx, Ordinal_35
movzx eax, dl
and al, r11b
jmp 0x1400fcd9f
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fcfb4
mov ecx, reloc.WS2_32.dll_sendto
movabs rdx, 0x582152a743823068
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x1400fc822
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fcfe6
mov ecx, Ordinal_30
movabs rdx, 0xc20c1d929f4571f8
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fd4f0
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fd018
mov ecx, 0x24
movabs rdx, 0x2bf6e87dfb08b388
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fd4b3
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fd045
movabs rcx, 0x60ec4df3a8ea5450
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x30
jmp 0x1400fd46b
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fd07d
mov ecx, Ordinal_46
movabs rdx, 0x95e1b36956cbf518
add rdx, rbx
dec rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x1400fc822
lea rax, [r9 + 8]
cmp r8, rax
jne 0x1400fcdab
movabs rdx, 0xffcc7e54b28f36a8
mov ecx, 0x34
jmp 0x1400fd3d5
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fd0cb
movabs rcx, 0x8431fbfae543489c
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x44
jmp 0x1400fd3ea
inc rax
cmp r8, rax
jne 0x1400fd105
mov ecx, Ordinal_35
movabs rdx, 0xb92761709324e964
add rdx, rbx
inc r9
movzx eax, dl
dec rbx
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x1400fc822
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fd132
movabs rcx, 0x580791d19cc9cbbc
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x24
jmp 0x1400fd4b3
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fd164
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movabs rdx, 0x8cfcf7474aab6c84
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fd4b6
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fcd48
mov ecx, Ordinal_60
movabs rdx, 0xf6e7c232a66eae14
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fd521
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fd1da
movzx eax, r11b
mov ecx, Ordinal_41
movabs rdx, 0xb042a54e870460d0
add rdx, rbx
and al, dl
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x1400fc822
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fd20c
mov ecx, Ordinal_50
movabs rdx, 0x1a2d7039e2c7a260
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400fd4f0
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fd23a
movzx eax, r11b
movabs rcx, 0x4f22d5af90a94328
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x18
jmp 0x1400fd4b6
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fd26c
mov ecx, gethostname
movabs rdx, 0x84183b253e8ae3f0
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400fd4b3
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fd29d
movabs rdx, 0xb90da09aec6c84b8
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 8
add r10b, dl
jmp 0x1400fd46b
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400fccf5
movzx eax, r11b
movabs rcx, 0xee0306109a4e2580
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x80
inc rbx
jmp 0x1400fc822
movzx r10d, byte [rbp + rbx - 0x60]
movabs rdx, 0xc1d89be751d4a8a0
add rdx, rbx
movzx eax, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x60
add r10b, r11b
add r10b, dl
jmp 0x1400fd46b
mov ecx, reloc.WS2_32.dll_sendto
movabs rdx, 0xf6ce015cffb64968
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
jmp 0x1400fd4f0
mov ecx, reloc.WLDAP32.dll_Ordinal_46
movabs rdx, 0x8b13a76beafbf3c
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x1400fc822
mov ecx, Ordinal_41
movabs rdx, 0x9ec66f8b62ec7dac
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fd4f0
movabs rcx, 0x95fb743efd8459c4
inc r9
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x5c
inc rbx
jmp 0x1400fc822
movabs rdx, 0x61060ec94fa2b8fc
mov ecx, select
jmp 0x1400fd3d5
movabs rdx, 0xf71b43ddf3df776c
mov ecx, 6
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
movabs rdx, 0xa75de92c7ae3d83c
mov ecx, reloc.WLDAP32.dll_Ordinal_46
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add cl, dl
add cl, r11b
mov byte [rbp + rbx - 0x60], cl
inc r9
dec rbx
inc rbx
jmp 0x1400fc822
movabs rcx, 0x8d3078f2981c35dc
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 4
dec rbx
inc rbx
jmp 0x1400fc822
mov ecx, Ordinal_60
movabs rdx, 0x583b137cea3a9514
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
movabs rdx, 0xdc534ea228c57904
movzx ecx, r10b
add rdx, rbx
movzx eax, dl
and al, r11b
add al, al
sub cl, al
sub cl, 0x1c
add cl, dl
add cl, r11b
mov byte [rbp + rbx - 0x60], cl
jmp 0x1400fd4b3
movabs rcx, 0x2345ae073c58f44c
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x14
add r8, r9
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1400fc822
movabs rcx, 0xb95ae31be095b2bc
mov r11, rdx
add rcx, rbx
movzx eax, cl
and al, dl
add al, al
sub cl, al
lea r10d, [rdx + rcx]
sub r10b, 0x24
inc r9
movabs rdx, 0x1148b417d6a719cc
add rdx, rbx
mov ecx, gethostname
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add cl, dl
add cl, r11b
movzx eax, cl
mov byte [rbp + rbx - 0x60], al
add rax, r9
sub rbx, rax
inc r8
movabs rcx, 0x2bc366d2ad97ea30
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub cl, 0x50
add cl, r11b
mov byte [rbp + rbx - 0x60], cl
add rbx, rax
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400fc822
movzx eax, dl
movabs rcx, 0x4f70183084d2712c
add rcx, rbx
and al, cl
add al, al
sub dl, al
lea r10d, [rcx + rdx]
sub r10b, 0x34
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400fc822
mov ecx, Ordinal_46
movabs rdx, 0xc1bedb11ab1c43f4
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400fc820
movzx eax, r11b
movabs rcx, 0x8cc9759bfd3aa32c
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x34
jmp 0x1400fc810
lea rdx, [rbp + 0x14c02d0]
jmp 0x1400fd5fa
lea rdx, [rbp + 0x17cd334]
jmp 0x1400fd5fa
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [rbp - 0x10]
call fcn.1401834a8
movzx r10d, byte [rsp + 0x30]
mov rsi, rax
xor eax, eax
mov dword [rbp - 0x38], 0x4c22c1e4
xorps xmm0, xmm0
mov dword [rbp - 0x1c], eax
mov word [rbp - 0x18], ax
movabs rdi, 0xcfe38f4896e40481
mov byte [rbp - 0x16], al
movabs r12, 0x5f3b991bd66c61bd
mov dword [rbp - 0x34], 0x48545c58
movabs r14, 0xb55c221d6cd9119f
mov dword [rbp - 0x30], 0xe348565a
movabs r15, 0xf6e4efe5c0004e25
movups xmmword [rbp - 0x2c], xmm0
movabs r13, 0x386dbdae13278aab
nop dword [rax + rax]
mov rax, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x1400fe469
movzx r11d, byte [rbp + rbx - 0x38]
mov r8, r11
cmp rax, rbx
ja 0x1400fe460
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x1400fd6e2
lea rdx, [rbx + r12]
mov r10, r11
movzx ecx, dl
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x2b
add r10b, dl
jmp 0x1400fd710
je 0x1400fe3db
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1400fe372
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x1400fe347
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1400fe319
nop
cmp r9, rbx
ja 0x1400fe457
lea rcx, [r9 + 4]
cmp rax, rcx
jae 0x1400fd73f
lea r8, [rbx + rdi]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
add r10b, 0x79
add r10b, r8b
jmp 0x1400fd790
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x1400fe2c6
inc rcx
cmp rax, rcx
je 0x1400fe298
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1400fe274
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x1400fe250
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1400fe1ea
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1400fe1b8
nop dword [rax]
lea rcx, [r9 + rax]
cmp rcx, rbx
jbe 0x1400fddf8
nop dword [rax]
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1400fddd4
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x1400fdda1
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1400fdd77
lea rcx, [r9 + 0xa]
cmp rax, rcx
je 0x1400fdd53
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x1400fdd29
lea rcx, [r9 + 0x10]
cmp rax, rcx
je 0x1400fdd05
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x1400fdce1
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x1400fdcb7
lea rcx, [r9 + 0x64]
cmp rax, rcx
je 0x1400fdc85
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1400fd7a0
lea rax, [r9 + 5]
lea r9, [rax + 8]
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jb 0x1400fe433
lea rcx, [r9 + 6]
cmp rax, rcx
jb 0x1400fe40e
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x1400fd994
lea rcx, [r9 + 0x41]
cmp rax, rcx
jb 0x1400fd974
lea rcx, [r9 + 0x20]
cmp rax, rcx
jb 0x1400fd954
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jb 0x1400fdc24
lea rcx, [r9 + 3]
cmp rax, rcx
jb 0x1400fdbc2
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x1400fdb6c
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x1400fdb3f
lea rcx, [r9 + 0x200]
cmp rax, rcx
jb 0x1400fd7a0
lea rax, [r9 + 0x400]
lea r9, [rax + 0x61]
lea rcx, [r9 + 8]
cmp rax, rcx
ja 0x1400fdb07
lea rcx, [r9 + 0x20]
cmp rax, rcx
ja 0x1400fdadd
lea rcx, [r9 + 0x5a]
cmp rax, rcx
ja 0x1400fdab7
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x1400fda8d
lea rcx, [r9 + 0x2a]
cmp rax, rcx
ja 0x1400fda63
lea rcx, [r9 + 4]
cmp rax, rcx
ja 0x1400fda3d
lea rcx, [r9 + 0x200]
cmp rax, rcx
ja 0x1400fda0d
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x1400fd9da
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
ja 0x1400fd9b4
lea rcx, [r9 + 0x7a]
cmp rax, rcx
ja 0x1400fd7a0
lea rax, [r9 + 9]
lea r9, [rax + 0x10]
jmp 0x1400fd7a0
lea r8, [rbx + r14]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x59
add r10b, r8b
jmp 0x1400fd790
lea r8, [rbx + r15]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
sub r10b, 3
add r10b, r8b
jmp 0x1400fd710
lea r8, [rbx + r13]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
add r8b, 0x53
sub r10b, cl
add r10b, r8b
jmp 0x1400fd6b2
movabs r8, 0x7f1c7a44b7202408
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x38
jmp 0x1400fe2e7
mov edx, reloc.WS2_32.dll_ntohs
movabs r8, 0xc0a5480d0a47608e
add r8, rbx
movzx ecx, r11b
and cl, r8b
inc r9
sub dl, cl
dec rbx
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
inc rbx
jmp 0x1400fd6a2
mov edx, Ordinal_60
movabs r8, 0x22e15d55d6e9d14
add r8, rbx
movzx ecx, r11b
and cl, r8b
dec rbx
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
inc rbx
jmp 0x1400fd6a2
movabs r8, 0x43b6e39db095d99a
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x36
jmp 0x1400fe393
mov edx, reloc.WS2_32.dll_recv
movabs r8, 0x853fb16603bd1620
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x1400fe3bf
mov edx, Ordinal_60
movabs r8, 0xc6c87f2e56e452a6
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x1400fe3c2
movabs r8, 0x8514cf6aa0b8f2c
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x34
jmp 0x1400fe181
mov edx, reloc.WS2_32.dll_recvfrom
movabs r8, 0x49da1abefd32cbb2
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x1400fe209
movzx ecx, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_60
movabs r8, 0x8b62e887505a0838
add r8, rbx
and cl, r8b
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
inc rbx
jmp 0x1400fd6a2
movzx ecx, r11b
movabs rdx, 0xaf38eafc203c1f87
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
add r10b, 0x4f
mov byte [rbp + rbx - 0x38], r10b
inc rbx
jmp 0x1400fd6a2
movabs r8, 0xf0c1b8c473635c0d
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x5b
add r10b, r8b
cmp r9, 0x20
jb 0x1400fdb5f
movzx edx, r11b
movabs r8, 0xf1bf01176f2ef14e
add r8, rbx
movzx ecx, r11b
and cl, r8b
add cl, cl
sub dl, cl
add dl, r8b
lea r10d, [rdx*2 - 0x44]
jmp 0x1400fe2ea
movabs r8, 0x324a868cc68a9893
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 5
add r10b, r8b
cmp rax, 0x7a
jae 0x1400fe137
lea rcx, [r9 + 9]
cmp rax, rcx
jbe 0x1400fe005
mov edx, Ordinal_33
movabs r8, 0x81170aeaaeb74e8a
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x1400fdb8d
movabs rdx, 0x73d3545519b1d519
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x51
lea rcx, [r9 + rax]
cmp rcx, 9
je 0x1400fe162
lea rcx, [r9 + 0x400]
cmp rax, rcx
jbe 0x1400fdf20
movabs rdx, 0xb1337ba217d34a09
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x3f
jmp 0x1400fdbe6
movabs rdx, 0xdf555bb389581b06
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
lea r10d, [r11 + rdx]
sub r10b, 0x2a
inc rbx
jmp 0x1400fd6a2
mov edx, reloc.WLDAP32.dll_Ordinal_22
movabs r8, 0x20de297bdc7f578c
add r8, rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1400fe209
movabs rdx, 0x6266f7442fa69412
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x7e
jmp 0x1400fe184
movabs rdx, 0xa3efc50c82cdd098
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x28
jmp 0x1400fe3c2
mov edx, reloc.WS2_32.dll_socket
movabs r8, 0xe57892d4d5f50d1e
add r8, rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1400fe3bf
movabs rdx, 0x2701609d291c49a4
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x7c
jmp 0x1400fe396
movabs rdx, 0x688a2e657c43862a
add rdx, rbx
dec rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x26
inc rbx
jmp 0x1400fd6a2
mov edx, Ordinal_27
movabs r8, 0xaa12fc2dcf6ac2b0
add r8, rbx
inc r9
movzx ecx, r8b
dec rbx
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rbx
jmp 0x1400fd6a2
movabs rdx, 0xeb9bc9f62291ff36
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x7a
jmp 0x1400fe2ea
lea rcx, [r9 + 8]
cmp rax, rcx
jae 0x1400fde1c
lea rdx, [rbx + r12]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x2b
jmp 0x1400fdc43
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400fde57
movabs rdx, 0x9fc71e912dc80902
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
lea r10d, [r11 + rdx]
sub r10b, 0xe
inc rbx
jmp 0x1400fd6a2
inc rcx
cmp rax, rcx
jne 0x1400fde89
mov edx, reloc.WLDAP32.dll_Ordinal_35
movabs r8, 0x1cb5830087798ff6
add r8, rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1400fe184
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400fdeb6
movabs rdx, 0x99a3e76fe12b16ea
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x66
jmp 0x1400fe3bf
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1400fdee9
mov edx, Ordinal_35
movabs r8, 0x581b19a78e03da64
add r8, rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1400fe396
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1400fdc43
movabs rdx, 0x16924bdf3adc9dde
add rdx, rbx
dec rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x12
inc rbx
jmp 0x1400fd6a2
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400fdf4d
movabs rdx, 0x6faaadd9c4ac0d83
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x6b
jmp 0x1400fe2ea
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400fdf7a
movabs rdx, 0x698776b8780f1b6b
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x13
jmp 0x1400fe3bf
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1400fdfa7
movabs rdx, 0x27fea8f024e7dee5
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x43
jmp 0x1400fe3c2
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x1400fdfd4
movabs rdx, 0xe675db27d1c0a25f
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x67
jmp 0x1400fe184
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x1400fdbe6
movabs rdx, 0xa4ed0d5f7e9965d9
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x11
jmp 0x1400fe209
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x1400fe041
movzx ecx, r11b
movabs rdx, 0x3f8e3d225b901204
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + r11]
sub r10b, 0x1c
inc rbx
jmp 0x1400fd6a2
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x1400fe071
mov edx, Ordinal_30
movabs r8, 0xbc7ca191b54198f8
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x1400fe181
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x1400fe09f
movzx ecx, r11b
movabs rdx, 0x7af3d3c9621a5c72
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x1e
jmp 0x1400fe3c2
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1400fe0cf
mov edx, reloc.WLDAP32.dll_Ordinal_27
movabs r8, 0xf7e23838bbcbe366
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x1400fe393
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x1400fe103
movzx ecx, r11b
movabs rdx, 0xb6596a7068a4a6e0
add rdx, rbx
dec rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x20
inc rbx
jmp 0x1400fd6a2
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400fdb90
mov edx, reloc.WLDAP32.dll_Ordinal_26
movabs r8, 0x3347cedfc2562dd4
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x1400fe2e7
movzx r10d, byte [rbp + rbx - 0x38]
movabs r8, 0xb036334f1c07b4c8
add r8, rbx
movzx ecx, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x78
add r10b, r11b
jmp 0x1400fe393
mov edx, Ordinal_27
movabs r8, 0x6ead6586c8e07842
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
movzx ecx, r11b
inc r9
movabs r8, 0xcde8fea29f4cd9ff
movzx edx, r11b
add r8, rbx
and cl, r8b
add cl, cl
sub dl, cl
add dl, 7
add dl, r8b
movzx ecx, dl
mov byte [rbp + rbx - 0x38], cl
add rcx, r9
sub rbx, rcx
jmp 0x1400fe209
movabs rdx, 0x8214533daa82e3cb
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
lea r10d, [r11 + rdx]
add r10b, 0x73
inc rbx
jmp 0x1400fd6a2
movabs rdx, 0xc39d2105fdaa2051
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x37
movzx ecx, r11b
inc rax
movabs rdx, 0x2d2497be75b93bbc
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
sub r11b, 0x24
add r11b, dl
mov byte [rbp + rbx - 0x38], r11b
add rbx, rcx
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400fd6a2
movabs rdx, 0x88378a5ef71fd5e3
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x35
jmp 0x1400fe3bf
movabs rdx, 0xc9c058274a471269
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x21
jmp 0x1400fe396
movzx ecx, r11b
movabs rdx, 0x4cd1f3b7f0958b75
add rdx, rbx
inc r9
and cl, dl
dec rbx
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x33
inc rbx
jmp 0x1400fd6a2
movabs r8, 0x8e5ac18043bcc7fb
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
add r10b, 0x23
add r10b, r8b
movabs rdx, 0x50fa9a33459b530b
inc r9
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
sub dl, 0x4d
add dl, r11b
mov byte [rbp + rbx - 0x38], dl
dec rbx
inc rbx
jmp 0x1400fd6a2
movzx ecx, r11b
movabs rdx, 0x52f52ad93d327d8d
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
add r10b, 0x25
inc r9
dec rbx
inc rbx
jmp 0x1400fd6a2
movzx ecx, r11b
movabs rdx, 0x947df8a19059ba13
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
add r10b, 0x7b
dec rbx
inc rbx
jmp 0x1400fd6a2
movabs r8, 0xd606c669e380f699
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x2f
add r10b, r8b
movabs r8, 0xf71cc6af2741685
movzx ecx, r11b
add r8, rbx
movzx edx, r10b
and cl, r8b
add cl, cl
sub dl, cl
add dl, 0x5d
add dl, r11b
add dl, r8b
mov byte [rbp + rbx - 0x38], dl
add rax, r9
movzx ecx, r10b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x1400fd6a2
movabs rdx, 0x1db2cb5383452537
add rdx, rbx
movzx ecx, dl
and cl, r8b
add cl, cl
sub r8b, cl
lea r10d, [rdx + r8]
add r10b, 0x7f
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400fd6a2
movzx ecx, r11b
movabs rdx, 0x79f68b76664ec731
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x57
jmp 0x1400fd6a0
movzx eax, r11b
movabs rcx, 0xbb7f593eb97603b7
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
dec r10b
jmp 0x1400fd690
lea rdx, [rbp + 0x151aac4]
jmp 0x1400fe46d
lea rdx, [rbp + 0xfe0c81]
jmp 0x1400fe46d
lea rdx, [rbp - 0x38]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [rsi + 0x10]
lea rbx, [rsi + 0x18]
test eax, eax
je 0x1400fe4c1
mov edi, eax
nop dword [rax]
lea r9, [rbx + 8]
mov r8, rbx
lea rdx, [rbp]
lea rcx, [0x1402207e8]
call fcn.140058df0
add rbx, 0x14
sub rdi, 1
jne 0x1400fe4a0
mov rcx, rsi
call fcn.140183114
mov rcx, qword [rbp - 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.1401830b0
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret