Function at 0x14004a330
Capabilities:
Contain obfuscated stackstrings
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x1401d8800]
xor rax, rsp
mov qword [rbp + 0x18], rax
movzx r10d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp - 0x7a], rax
movups xmmword [rsp + 0x76], xmm0
mov dword [rbp - 0x72], eax
movabs r13, 0xea8c7737f5c89be5
mov byte [rbp - 0x6e], al
movabs r14, 0x3d85c7972974c9c9
mov dword [rsp + 0x40], 0x6f72626e
movabs r15, 0x5a44bb6273eca557
mov dword [rsp + 0x44], 0x647e6e73
movabs r12, 0x852bccf2885b6d8d
mov dword [rsp + 0x48], 0x66677b72
mov dword [rsp + 0x4c], 0x72666a63
mov dword [rsp + 0x50], 0x6b73667d
mov dword [rsp + 0x54], 0x4a476c66
mov dword [rsp + 0x58], 0x634f564a
mov dword [rsp + 0x5c], 0xb6b5aa94
mov dword [rsp + 0x60], 0xa0a1b3bd
mov dword [rsp + 0x64], 0xa79895bf
mov dword [rsp + 0x68], 0xb6a3b8b1
mov dword [rsp + 0x6c], 0x8470bdb5
mov dword [rsp + 0x70], 0xada5a6bd
mov word [rsp + 0x74], 0x59a5
nop dword [rax]
nop word [rax + rax]
mov rax, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor r11d, r11d
cmp r11, 0x53
jae 0x14004b191
movzx esi, byte [rsp + r11 + 0x40]
mov ebx, esi
nop word [rax + rax]
mov rdi, rbx
cmp rax, r11
ja 0x14004b188
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14004a47f
lea rdx, [r11 + r13]
mov rcx, rdx
and rcx, rbx
imul r10, rcx, 0xfffffffffffffffe
add r10, rdx
add r10, rbx
sub r10b, 0x43
jmp 0x14004a4c0
je 0x14004b105
inc rcx
cmp rax, rcx
je 0x14004b0a1
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004b04c
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14004afe8
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14004afbf
nop dword [rax + rax]
cmp r9, r11
ja 0x14004b17f
lea rdx, [r9 + 3]
cmp rax, rdx
jae 0x14004a4ef
lea r8, [r11 + r14]
movzx r10d, bl
movzx ecx, r8b
and cl, dil
add cl, cl
sub r10b, cl
sub r10b, 0x7f
add r10b, r8b
jmp 0x14004a530
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14004af6e
inc rcx
cmp rax, rcx
je 0x14004af42
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004af1f
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14004aefc
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x14004aeca
nop
lea rcx, [r9 + rax]
cmp rcx, r11
jbe 0x14004ab77
nop dword [rax]
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x14004ab4d
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x14004ab20
lea rcx, [r9 + 0x5a]
cmp rax, rcx
je 0x14004aaf0
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14004aacc
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004aaa2
lea rdx, [r9 + 5]
cmp rax, rdx
je 0x14004aa7e
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x14004aa54
lea rcx, [r9 + 0x2a]
cmp rax, rcx
je 0x14004aa30
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14004a9f7
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14004a540
lea r9, [rdx + 6]
mov rax, rdx
lea rcx, [r9 + 8]
cmp rdx, rcx
jb 0x14004b15b
lea rcx, [r9 + 0x2a]
cmp rdx, rcx
jb 0x14004b137
lea rcx, [r9 + 2]
cmp rdx, rcx
jb 0x14004a708
lea rcx, [r9 + 4]
cmp rdx, rcx
jb 0x14004a6e8
lea rcx, [r9 + 6]
cmp rdx, rcx
jb 0x14004a6c8
lea rdx, [r9 + 9]
cmp rax, rdx
jb 0x14004a999
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x14004a930
lea rcx, [r9 + 3]
cmp rax, rcx
jb 0x14004a8df
lea rcx, [r9 + 5]
cmp rax, rcx
jb 0x14004a8b3
lea r9, [rdx + 0xa]
mov rax, rdx
lea rcx, [r9 + 0x10]
cmp rdx, rcx
ja 0x14004a87a
lea rcx, [r9 + 0x28]
cmp rdx, rcx
ja 0x14004a851
lea rcx, [r9 + 0x42]
cmp rdx, rcx
ja 0x14004a827
lea rcx, [r9 + 8]
cmp rdx, rcx
ja 0x14004a803
lea rcx, [r9 + 0xa]
cmp rdx, rcx
ja 0x14004a7d9
lea rdx, [r9 + 0x20]
cmp rax, rdx
ja 0x14004a7b5
lea rcx, [r9 + 0x40]
cmp rax, rcx
ja 0x14004a785
lea rcx, [r9 + 0x64]
cmp rax, rcx
ja 0x14004a758
lea rcx, [r9 + 0x200]
cmp rax, rcx
ja 0x14004a72e
mov rax, rdx
lea r9, [rdx + 0x28]
jmp 0x14004a540
lea r8, [r11 + r15]
movzx ecx, dil
and cl, r8b
movzx r10d, bl
add cl, cl
sub r10b, cl
sub r10b, 0x61
add r10b, r8b
jmp 0x14004a530
lea r8, [r11 + r12]
movzx ecx, dil
and cl, r8b
movzx r10d, bl
add cl, cl
sub r10b, cl
add r10b, 0x25
add r10b, r8b
jmp 0x14004a4c0
movabs rdx, 0xb012de829cca35c3
movzx r10d, bl
add rdx, r11
and dil, dl
add dil, dil
sub r10b, dil
sub r10b, 0x55
add r10b, dl
jmp 0x14004a450
mov edx, 4
movabs r8, 0xec2e3cb94ba64e48
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
jmp 0x14004af8f
movabs rdx, 0x17154e496015167e
inc r9
add rdx, r11
dec r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x72
inc r11
jmp 0x14004a433
mov edx, 0xa
movabs r8, 0x41fc5fd97483deb4
add r8, r11
dec r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
inc r11
jmp 0x14004a433
movabs rdx, 0x6ce3716988f2a6ea
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x66
jmp 0x14004b009
mov edx, reloc.WS2_32.dll_recv
movabs r8, 0x97ca82f99d616f20
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
jmp 0x14004b030
movabs rdx, 0xc2b19489b1d03756
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x5a
jmp 0x14004b033
mov edx, reloc.WLDAP32.dll_Ordinal_22
movabs r8, 0xed98a619c63eff8c
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, sil
add r10b, r8b
jmp 0x14004b06d
movabs r8, 0x187fb7a9daadc7c2
movzx r10d, sil
add r8, r11
movzx ecx, r8b
and cl, sil
add cl, cl
sub r10b, cl
sub r10b, 0x4e
add r10b, r8b
jmp 0x14004b0bf
mov edx, Ordinal_30
movabs r8, 0x4366c939ef1c8ff8
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, r9
add r11, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
inc r11
jmp 0x14004a433
movabs rdx, 0xaea875222231847f
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x79
mov byte [rsp + r11 + 0x40], r10b
inc r11
jmp 0x14004a433
movabs rdx, 0xd98f86b236a04cb5
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
add r10b, 0xd
cmp r9, 0x61
jb 0x14004a8d2
movzx edx, sil
movabs r8, 0x73f7804bedee1d3e
add r8, r11
movzx ecx, r8b
and cl, sil
add cl, cl
sub dl, cl
add dl, r8b
lea r10d, [rdx*2 - 0x64]
jmp 0x14004af8f
movabs r8, 0x47698424b0f14eb
movzx ecx, sil
add r8, r11
movzx r10d, sil
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x6d
add r10b, r8b
cmp rax, 0x3e8
jae 0x14004ae6d
lea rcx, [r9 + 0x400]
cmp rax, rcx
jbe 0x14004ad62
movabs r8, 0x20fe2fecba41ef5a
movzx ecx, sil
add r8, r11
movzx r10d, sil
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x76
add r10b, r8b
jmp 0x14004a8fe
movabs rdx, 0x2f5da9d25f7ddd21
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
add r10b, 0x19
lea rcx, [r9 + rax]
cmp rcx, 0x64
je 0x14004ae9b
lea rcx, [r9 + 8]
cmp rax, rcx
jbe 0x14004ac78
movabs rdx, 0xe378685590cd2591
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
add r10b, 9
jmp 0x14004a954
mov edx, 3
movabs r8, 0x7122ad8af8bcbab6
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, r9
add r11, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
inc r11
jmp 0x14004a433
movabs rdx, 0x9c09bf1b0d2b82ec
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x74
jmp 0x14004b0bf
mov edx, 9
movabs r8, 0xc6f0d0ab219a4b22
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
jmp 0x14004b06d
movabs rdx, 0xf1d7e23b36091358
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x68
jmp 0x14004b033
mov edx, reloc.WS2_32.dll_ntohs
movabs r8, 0x1cbef3cb4a77db8e
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
jmp 0x14004b030
movabs rdx, 0x47a6055b5ee6a3c4
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x5c
jmp 0x14004b009
mov edx, reloc.WS2_32.dll_setsockopt
movabs r8, 0x728d16eb73556bfa
add r8, r11
dec r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
inc r11
jmp 0x14004a433
movabs rdx, 0x9d74287b87c43430
inc r9
add rdx, r11
dec r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x50
inc r11
jmp 0x14004a433
mov edx, reloc.WLDAP32.dll_Ordinal_27
movabs r8, 0xc85b3a0b9c32fc66
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, sil
add r10b, r8b
jmp 0x14004af8f
lea rcx, [r9 + 5]
cmp rax, rcx
jae 0x14004ab9a
lea rcx, [r11 + r13]
and dil, cl
add dil, dil
sub bl, dil
lea r10d, [rcx + rbx]
sub r10b, 0x43
jmp 0x14004a9b8
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004abdc
mov edx, 1
movabs r8, 0x7b0b8f2e52e99392
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, r9
add r11, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
inc r11
jmp 0x14004a433
inc rcx
cmp rax, rcx
jne 0x14004ac0e
mov edx, 0x3e
movabs r8, 0x50247d9e3e7acb5c
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
jmp 0x14004b0bf
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004ac41
mov edx, reloc.WLDAP32.dll_Ordinal_50
movabs r8, 0xa488375decbfaa84
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, sil
add r10b, r8b
jmp 0x14004b009
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14004a9b8
movabs rdx, 0x79a125cdd850e24e
add rdx, r11
dec r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x22
inc r11
jmp 0x14004a433
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004aca5
movabs rdx, 0xb89156c57c5e5d5b
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x7d
jmp 0x14004af8f
inc rcx
cmp rax, rcx
jne 0x14004acd7
movabs rdx, 0x62c333a55380ccef
add rdx, r11
dec r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
add r10b, 0x77
inc r11
jmp 0x14004a433
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004ad04
movabs rdx, 0xcf510852aa33c83
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
add r10b, 0x6b
jmp 0x14004b030
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14004ad31
movabs rdx, 0xe20dfef51634744d
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x1b
jmp 0x14004b033
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14004a954
movabs rdx, 0xb726ed6501c5ac17
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
add r10b, 0x5f
jmp 0x14004b06d
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x14004ada4
movzx ecx, sil
mov edx, 2
movabs r8, 0xf6171e5ca5d32724
add r8, r11
and cl, r8b
sub dl, cl
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, r9
add r11, rcx
lea r10d, [rdx + rdx]
add r10b, sil
add r10b, r8b
inc r11
jmp 0x14004a433
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004add6
movabs r8, 0xa048fb3c7cf596b8
movzx ecx, sil
add r8, r11
movzx r10d, sil
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 8
add r10b, r8b
jmp 0x14004b06d
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x14004ae04
movzx ecx, sil
movabs rdx, 0x4a7ad81c5418064c
add rdx, r11
and cl, dl
add cl, cl
sub sil, cl
lea r10d, [rdx + rsi]
sub r10b, 0x14
jmp 0x14004b030
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x14004ae37
movabs rdx, 0xf4acb4fc2b3a75e0
add rdx, r11
dec r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x20
inc r11
jmp 0x14004a433
lea rcx, [r9 + 8]
cmp rax, rcx
jne 0x14004a8fe
movabs r8, 0x9ede91dc025ce574
movzx r10d, sil
add r8, r11
movzx ecx, r8b
and cl, sil
add cl, cl
sub r10b, cl
sub r10b, 0x2c
add r10b, r8b
jmp 0x14004af8f
movzx r10d, byte [rsp + r11 + 0x40]
movabs r8, 0x49106ebbd97f5508
add r8, r11
movzx ecx, r8b
and cl, sil
add cl, cl
sub r10b, cl
sub r10b, 0x38
add r10b, sil
add r10b, r8b
jmp 0x14004b009
mov edx, reloc.WLDAP32.dll_Ordinal_33
movabs r8, 0x1e295d2bc5108cd2
add r8, r11
movzx ecx, sil
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
sub r10b, byte [rsp + r11 + 0x40]
add r10b, sil
add r10b, r8b
jmp 0x14004b06d
movabs rcx, 0xbb662986718fbfe3
add rcx, r11
and dil, cl
add dil, dil
sub bl, dil
lea r10d, [rcx + rbx]
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, r9
sub r10b, 0x35
add r11, rcx
inc r11
jmp 0x14004a433
movabs rcx, 0x67026fc6c34ae0bb
add rcx, r11
and dil, cl
add dil, dil
sub bl, dil
lea r10d, [rcx + rbx]
sub r10b, 0x1d
jmp 0x14004b030
movabs rdx, 0x91e98156d7b9a8f1
movzx r10d, bl
add rdx, r11
and dil, dl
add dil, dil
sub r10b, dil
add r10b, 0x69
jmp 0x14004b006
movabs rcx, 0xe7b7a4770097395d
inc r9
add rcx, r11
dec r11
and dil, cl
add dil, dil
sub bl, dil
lea r10d, [rcx + rbx]
add r10b, 0x75
inc r11
jmp 0x14004a433
movabs rdx, 0x129eb60715060193
movzx r10d, bl
add rdx, r11
and dil, dl
add dil, dil
sub r10b, dil
sub r10b, 5
add r10b, dl
movabs rdx, 0x5e83f783e3b6b923
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
add dl, 0xb
add dl, sil
mov byte [rsp + r11 + 0x40], dl
inc r9
dec r11
inc r11
jmp 0x14004a433
movabs rcx, 0xbe3afc4766c1226b
add rcx, r11
and dil, cl
add dil, dil
sub bl, dil
lea r10d, [rcx + rbx]
add r10b, 0x13
dec r11
inc r11
jmp 0x14004a433
movabs rdx, 0xe9220dd77b2feaa1
movzx r10d, bl
add rdx, r11
and dil, dl
add dil, dil
sub r10b, dil
sub r10b, 0x67
add r10b, dl
movzx ecx, sil
movabs rdx, 0x339ce5f3cf47f0ed
add rdx, r11
and cl, dl
add cl, cl
sub sil, cl
sub sil, 0x7b
add sil, dl
add sil, r10b
mov byte [rsp + r11 + 0x40], sil
add rax, r9
movzx ecx, r10b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add r11, rdx
inc r11
jmp 0x14004a433
movabs rdx, 0x69d74287b87c4343
movzx r10d, bl
add rdx, r11
and dil, dl
add dil, dil
sub r10b, dil
add r10b, 0x2b
add r10b, dl
movzx ecx, sil
inc r9
movabs r8, 0x8b5d463bad928b7
movzx edx, sil
add r8, r11
and cl, r8b
add cl, cl
sub dl, cl
dec dl
add dl, r8b
movzx ecx, dl
mov byte [rsp + r11 + 0x40], cl
add rcx, r9
sub r11, rcx
jmp 0x14004b0bf
movabs rcx, 0x94be5417cceb0b79
add rcx, r11
and dil, cl
add dil, dil
sub cl, dil
lea r10d, [rsi + rcx]
sub r10b, 0x4f
inc rax
movabs rdx, 0xf3424b9bb0a1c49c
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
sub dl, 0x44
add dl, sil
mov byte [rsp + r11 + 0x40], dl
add r11, rcx
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, r9
add r11, rcx
inc r11
jmp 0x14004a433
movabs rcx, 0xbfa565a7e159d3af
add rcx, r11
and dil, cl
add dil, dil
sub bl, dil
lea r10d, [rcx + rbx]
add r10b, 0x37
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, r9
add r11, rcx
inc r11
jmp 0x14004a433
movabs rdx, 0xdaf9f012b138fdf9
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
add r10b, 0x31
jmp 0x14004a430
movabs rcx, 0x5e101a2c5a7c62f
add rcx, r11
movzx eax, cl
and al, sil
add al, al
sub cl, al
lea r10d, [rsi + rcx]
sub r10b, 0x49
jmp 0x14004a420
lea rdx, [rbp + 0x148bd1c]
jmp 0x14004b196
lea rdx, [rbp + 0x915901]
jmp 0x14004b196
lea rdx, [rsp + 0x40]
lea rax, [rbp - 8]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movzx r11d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x44], eax
movups xmmword [rbp - 0x54], xmm0
mov word [rbp - 0x40], ax
movabs rsi, 0x4f20df4cf7bb9bea
mov byte [rbp - 0x3e], al
movabs r12, 0x960dc17d91e45cc2
mov dword [rbp - 0x60], 0x6a0461be
movabs r14, 0x79780f2e36fe5d56
mov dword [rbp - 0x5c], 0x6672067a
movabs r15, 0x4d5c8c331335a3d2
mov dword [rbp - 0x58], 0x837e7808
movabs r13, 0x21410937ef6cea4e
nop word [rax + rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x14004bf82
movzx edi, byte [rbp + rbx - 0x60]
mov r10, rdi
cmp r8, rbx
ja 0x14004bf79
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14004b270
lea rcx, [rbx + r12]
mov rax, rcx
and rax, rdi
imul r11, rax, 0xfffffffffffffffe
add r11, rcx
add r11, rdi
sub r11b, 0x4e
jmp 0x14004b2b0
je 0x14004bee7
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004be48
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004bde0
lea rax, [r9 + 4]
cmp r8, rax
je 0x14004bdb1
lea rax, [r9 + 2]
cmp r8, rax
je 0x14004bd5b
nop word [rax + rax]
cmp r9, rbx
ja 0x14004bf70
lea rax, [r9 + 0x2a]
cmp r8, rax
jae 0x14004b2da
lea rcx, [rbx + rsi]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x66
jmp 0x14004b330
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004bd3a
inc rax
cmp r8, rax
je 0x14004bd11
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004bced
lea rax, [r9 + 4]
cmp r8, rax
je 0x14004bcc9
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004bca0
lea rax, [r9 + 2]
cmp r8, rax
je 0x14004bc69
nop word [rax + rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x14004b91e
nop dword [rax]
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x14004b90a
lea rax, [r9 + 6]
cmp r8, rax
je 0x14004b8dd
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004b8c9
lea rax, [r9 + 4]
cmp r8, rax
je 0x14004b8a4
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004b87b
lea rax, [r9 + 2]
cmp r8, rax
je 0x14004b852
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004b82e
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x14004b805
lea rax, [r9 + 9]
cmp r8, rax
je 0x14004b7d3
lea rax, [r9 + 8]
cmp r8, rax
je 0x14004b340
lea r8, [r9 + 0x20]
lea r9, [r8 + 6]
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14004bf47
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x14004bf1e
lea rax, [r9 + 9]
cmp r8, rax
jb 0x14004b513
lea rax, [r9 + 8]
cmp r8, rax
jb 0x14004b4f3
lea rax, [r9 + 6]
cmp r8, rax
jb 0x14004b4d8
lea rcx, [r9 + 0x42]
cmp r8, rcx
jb 0x14004b774
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x14004b70d
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x14004b6be
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14004b68d
lea r9, [rcx + 0xa]
mov r8, rcx
lea rax, [r9 + 0x40]
cmp rcx, rax
ja 0x14004b65b
lea rax, [r9 + 0x28]
cmp rcx, rax
ja 0x14004b632
lea rax, [r9 + 0x20]
cmp rcx, rax
ja 0x14004b609
lea rax, [r9 + 0x400]
cmp rcx, rax
ja 0x14004b5e5
lea rax, [r9 + 0x3e8]
cmp rcx, rax
ja 0x14004b5bc
lea rcx, [r9 + 0x200]
cmp r8, rcx
ja 0x14004b598
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14004b584
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x14004b552
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14004b52e
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14004b340
mov r8, rcx
lea r9, [rcx + 0x61]
jmp 0x14004b340
lea rcx, [rbx + r14]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x5a
jmp 0x14004b330
lea rdx, [rbx + r15]
mov ecx, reloc.WLDAP32.dll_Ordinal_33
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004b2b0
lea rcx, [rbx + r13]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x22
jmp 0x14004b241
movabs rcx, 0x7906fa67bddcdf50
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x30
jmp 0x14004bd7f
mov ecx, gethostname
movabs rdx, 0x4ceb776c9a1425cc
add rdx, rbx
inc r9
movzx eax, dl
dec rbx
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x14004b232
movabs rdx, 0x20cff471764b6c48
mov ecx, 4
jmp 0x14004bdc0
movabs rcx, 0xf4b471765282b2c4
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x5c
jmp 0x14004be04
mov ecx, reloc.WLDAP32.dll_Ordinal_32
movabs rdx, 0xc898ee7b2eb9f940
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004be2c
movabs rcx, 0x9c7d6b800af13fbc
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x24
jmp 0x14004be2f
mov ecx, reloc.WLDAP32.dll_Ordinal_60
movabs rdx, 0x7061e884e7288638
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004be6e
mov ecx, 0xa
movabs rdx, 0x44466589c35fccb4
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004be9f
movabs rcx, 0x182ae28e9f971330
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r11d, [rdi + rcx]
sub r11b, 0x50
inc rbx
jmp 0x14004b232
mov ecx, reloc.WLDAP32.dll_Ordinal_27
movabs rdx, 0x29e61b1ac6214366
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
mov byte [rbp + rbx - 0x60], r11b
inc rbx
jmp 0x14004b232
movabs rcx, 0xfdca981fa25889e2
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x2e
cmp r9, 2
jb 0x14004b6b1
movzx ecx, dil
movabs rdx, 0xc97b180820fcf54c
add rdx, rbx
movzx eax, dl
and al, dil
add al, al
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0x28]
jmp 0x14004bd7f
movabs rdx, 0xd1af15247e8fd05e
mov ecx, gethostname
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
cmp r8, 0x64
jae 0x14004bc17
lea rax, [r9 + 0x400]
cmp r8, rax
jbe 0x14004bb40
mov ecx, 2
movabs rdx, 0x1067fa38bb25b624
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004b6dd
mov ecx, 5
movabs rdx, 0xa59392295ac716da
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
lea rax, [r9 + r8]
cmp rax, 0x28
je 0x14004bc3f
lea rax, [r9 + 0x80]
cmp r8, rax
jbe 0x14004ba11
movabs rdx, 0xc1471aebc36a1a3a
mov ecx, gethostname
add rdx, rbx
movzx eax, dl
and al, dil
jmp 0x14004b725
movabs rcx, 0xdac53bcdce65a77c
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r11d, [rdi + rcx]
sub r11b, 0x64
inc rbx
jmp 0x14004b232
mov ecx, Ordinal_30
movabs rdx, 0xaea9b8d2aa9cedf8
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004be9f
movabs rcx, 0x828e35d786d43474
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x2c
jmp 0x14004be6e
mov ecx, gethostname
movabs rdx, 0x5672b2dc630b7af0
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004be2f
mov ecx, 6
movabs rdx, 0x2a572fe13f42c16c
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004be2c
movabs rdx, 0xfe3bace61b7a07e8
movzx r11d, dil
add rdx, rbx
movzx eax, dl
and al, dil
add al, al
sub r11b, al
sub r11b, 0x58
jmp 0x14004be01
movabs rdx, 0xd22029eaf7b14e64
mov ecx, Ordinal_35
jmp 0x14004bdc0
movabs rcx, 0xa604a6efd3e894e0
inc r9
add rcx, rbx
dec rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x20
inc rbx
jmp 0x14004b232
movabs rdx, 0x79e923f4b01fdb5c
mov ecx, 0x3e
jmp 0x14004bd6a
lea rax, [r9 + 9]
cmp r8, rax
jae 0x14004b942
lea rcx, [rbx + r12]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x4e
jmp 0x14004b798
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004b982
mov ecx, reloc.WLDAP32.dll_Ordinal_26
movabs rdx, 0x9e41be99ef7737d4
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x14004b232
inc rax
cmp r8, rax
jne 0x14004b9ae
movabs rcx, 0xf678c4903708aadc
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 4
jmp 0x14004be6e
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004b9e0
mov ecx, Ordinal_50
movabs rdx, 0x2294478b5ad16460
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004be2f
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004b798
movabs rcx, 0x4eafca867e9a1de4
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x3c
jmp 0x14004be2c
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004ba3e
movabs rcx, 0xed629de6e732d3be
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x32
jmp 0x14004bd7f
inc rax
cmp r8, rax
jne 0x14004ba70
movabs rcx, 0x4599a3dd2ec446c6
add rcx, rbx
dec rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x6a
inc rbx
jmp 0x14004b232
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14004baa2
mov ecx, Ordinal_50
movabs rdx, 0x9dd0a9d37655b9ce
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004be2c
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004bacf
movabs rcx, 0xc9ec2cce9a1e7352
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x3e
jmp 0x14004be2f
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14004bb01
mov ecx, reloc.WS2_32.dll_send
movabs rdx, 0xf607afc9bde72cd6
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004be6e
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004b731
movabs rcx, 0x4e3eb5c005789fde
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r11d, [rdi + rcx]
sub r11b, 0x12
inc rbx
jmp 0x14004b232
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004bb80
mov ecx, 0x34
movabs rdx, 0x3c837d33deee6fa8
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x14004b232
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004bbaf
mov ecx, Ordinal_26
movabs rdx, 0x94ba832a267fe2b0
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
jmp 0x14004be6b
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14004bbe2
movabs rcx, 0x45288f16b5a2c8c0
add rcx, rbx
dec rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x40
inc rbx
jmp 0x14004b232
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14004b6dd
movabs rdx, 0x9d5f950cfd343bc8
movzx r11d, dil
add rdx, rbx
movzx eax, dl
and al, dil
add al, al
sub r11b, al
sub r11b, 0x78
add r11b, dl
jmp 0x14004bd7f
mov ecx, Ordinal_41
movabs rdx, 0xf5969b0344c5aed0
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, byte [rbp + rbx - 0x60]
jmp 0x14004bdfe
movabs rdx, 0x21b21dfe688e6854
movzx eax, dil
add rdx, rbx
movzx r11d, dil
and al, dl
add al, al
sub r11b, al
sub r11b, byte [rbp + rbx - 0x60]
sub r11b, 0x4c
jmp 0x14004be6b
mov ecx, reloc.WS2_32.dll_ntohs
movabs rdx, 0xdc187a2139ca218e
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x14004b232
mov ecx, Ordinal_45
movabs rdx, 0x83e1742af238ae86
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004be6e
movabs rcx, 0x57c5f12fce6ff502
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0xe
jmp 0x14004be2f
movabs rcx, 0x2baa6e34aaa73b7e
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x72
jmp 0x14004be2c
mov ecx, reloc.WS2_32.dll_setsockopt
movabs rdx, 0xff8eeb3986de81fa
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004be04
movabs rcx, 0x7b3c62481b84556e
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 2
jmp 0x14004bd7f
movabs rdx, 0x23055c51d3f2e266
mov ecx, reloc.WLDAP32.dll_Ordinal_27
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
movzx eax, dil
movabs rcx, 0x5f88d985b2e1520e
add rcx, rbx
and al, cl
add al, al
sub dil, al
sub dil, 0x62
add dil, cl
mov byte [rbp + rbx - 0x60], dil
inc r9
dec rbx
inc rbx
jmp 0x14004b232
movabs rdx, 0xcace565b8c616f5e
mov ecx, gethostname
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
dec rbx
inc rbx
jmp 0x14004b232
mov ecx, 5
movabs rdx, 0x9eb2d3606898b5da
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
movabs rdx, 0x8ba45c80d6aa0b92
movzx eax, dil
add rdx, rbx
mov ecx, 1
and al, dl
sub cl, al
add cl, cl
add cl, dil
add cl, r11b
add cl, dl
mov byte [rbp + rbx - 0x60], cl
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14004b232
movabs rdx, 0x1a604a6efd3e894e
movzx r11d, r10b
add rdx, rbx
mov rdi, r10
movzx eax, dl
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x22
add r11b, dl
inc r9
movabs rdx, 0xb7bfdf7bfa72c516
add rdx, rbx
mov ecx, 0x33
movzx eax, dl
and al, dil
sub cl, al
add cl, cl
add cl, dl
add cl, dil
movzx eax, cl
mov byte [rbp + rbx - 0x60], al
add rax, r9
sub rbx, rax
movzx eax, dil
inc r8
movabs rdx, 0x4dcda0f98c5721d8
mov ecx, recv
add rdx, rbx
and al, dl
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, dil
add cl, dl
mov byte [rbp + rbx - 0x60], cl
add rbx, rax
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14004b232
mov ecx, listen
movabs rdx, 0xc2294478b5ad1646
add rdx, rbx
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14004b232
mov ecx, 0x3d
movabs rdx, 0xf525863ccba430ca
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004b230
mov ecx, listen
movabs rdx, 0xc90a0341a7db7746
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14004b220
lea rdx, [rbp + 0x16e51f8]
jmp 0x14004bf86
lea rdx, [rbp + 0x52aeba]
jmp 0x14004bf86
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [rbp - 0x10]
call fcn.140196668
movzx r10d, byte [rsp + 0x30]
mov rsi, rax
xor eax, eax
mov dword [rbp - 0x38], 0xf0e28da0
xorps xmm0, xmm0
mov dword [rbp - 0x1c], eax
mov word [rbp - 0x18], ax
movabs rdi, 0xecfe31f90175572f
mov byte [rbp - 0x16], al
movabs r12, 0xce553f550011c733
mov dword [rbp - 0x34], 0xfce8e0e4
movabs r14, 0x849632709a728b1
mov dword [rbp - 0x30], 0x5bf4f6e2
movabs r15, 0x6b9ee47d09839a4b
movups xmmword [rbp - 0x2c], xmm0
movabs r13, 0xcef465d309600be5
nop dword [rax]
nop dword [rax + rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x14004cde6
movzx r11d, byte [rbp + rbx - 0x38]
mov rdx, r11
cmp r8, rbx
ja 0x14004cddd
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14004c071
lea rcx, [rbx + r12]
mov r10, rdx
movzx eax, cl
and al, dl
add al, al
sub r10b, al
sub r10b, 0x65
add r10b, cl
jmp 0x14004c0c0
je 0x14004cd59
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004ccc3
lea rax, [r9 + 4]
cmp r8, rax
je 0x14004cc8c
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004cc67
lea rax, [r9 + 6]
cmp r8, rax
je 0x14004cc39
lea rax, [r9 + 8]
cmp r8, rax
je 0x14004cbe8
nop dword [rax + rax]
cmp r9, rbx
ja 0x14004cdd4
lea rax, [r9 + 0x64]
cmp r8, rax
jae 0x14004c0ee
lea rdx, [rbx + rdi]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
sub r10b, 0x49
add r10b, dl
jmp 0x14004c130
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004cbc7
inc rax
cmp r8, rax
je 0x14004cb9c
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004cb74
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004cb4f
lea rax, [r9 + 4]
cmp r8, rax
je 0x14004cb27
nop
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x14004c77e
nop dword [rax]
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14004c75a
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14004c72c
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x14004c6fd
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14004c6da
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x14004c6ae
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x14004c689
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14004c665
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004c63c
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004c605
lea rax, [r9 + 6]
cmp r8, rax
je 0x14004c140
lea r8, [r9 + 0x61]
lea r9, [r8 + 2]
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14004cdaf
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x14004cd8a
lea rax, [r9 + 2]
cmp r8, rax
jb 0x14004c328
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x14004c309
lea rax, [r9 + 3]
cmp r8, rax
jb 0x14004c2ea
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x14004c59f
lea rax, [r9 + 4]
cmp r8, rax
jb 0x14004c540
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x14004c4f0
lea rax, [r9 + 5]
cmp r8, rax
jb 0x14004c4c4
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14004c140
lea r8, [r9 + 0x2a]
lea r9, [r8 + 6]
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x14004c48d
lea rax, [r9 + 1]
cmp r8, rax
ja 0x14004c464
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14004c43b
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14004c416
lea rax, [r9 + 8]
cmp r8, rax
ja 0x14004c3ee
lea rax, [r9 + 3]
cmp r8, rax
ja 0x14004c3cb
lea rax, [r9 + 9]
cmp r8, rax
ja 0x14004c39c
lea rcx, [r9 + 4]
cmp r8, rcx
ja 0x14004c36e
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14004c346
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14004c140
mov r8, rcx
lea r9, [rcx + 0x10]
jmp 0x14004c140
lea rdx, [rbx + r14]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
add r10b, 0x29
add r10b, dl
jmp 0x14004c130
lea rdx, [rbx + r15]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
sub r10b, 0xd
add r10b, dl
jmp 0x14004c0c0
lea rdx, [rbx + r13]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub dl, 0x43
sub r10b, al
add r10b, dl
jmp 0x14004c042
movabs rdx, 0x67f18fc80baab978
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x48
add r10b, dl
jmp 0x14004cc07
movzx eax, r11b
movabs rcx, 0xcb47111e0b872b12
add rcx, rbx
inc r9
and al, cl
dec rbx
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x7e
inc rbx
jmp 0x14004c032
mov ecx, Ordinal_41
movabs rdx, 0x2e9c92740b639cac
add rdx, rbx
movzx eax, r11b
and al, dl
dec rbx
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14004c032
mov ecx, listen
movabs rdx, 0x91f213ca0b400e46
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
jmp 0x14004cac4
movzx eax, r11b
movabs rcx, 0xf54795200b1c7fe0
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x20
add r8, r9
jmp 0x14004ccaa
movzx eax, r11b
movabs rcx, 0x589d16760af8f17a
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x56
jmp 0x14004ccaa
mov ecx, Ordinal_60
movabs rdx, 0xbbf297cc0ad56314
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14004cce1
mov ecx, Ordinal_35
movabs rdx, 0x1f4819220ab1d4ae
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14004cd11
movzx eax, r11b
mov ecx, 4
movabs rdx, 0x829d9a780a8e4648
add rdx, rbx
and al, dl
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14004c032
movzx eax, r11b
movabs rcx, 0x7af35dcf0a356249
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
inc r10b
mov byte [rbp + rbx - 0x38], r10b
inc rbx
jmp 0x14004c032
movabs rdx, 0xde48df250a11d3e3
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x35
add r10b, dl
cmp r9, 0x20
jb 0x14004c4e3
movabs rcx, 0x35f73bde07155e52
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
add cl, r11b
lea r10d, [rcx*2 - 0x7c]
jmp 0x14004cc07
movabs rdx, 0x419e607b09ee457d
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x6b
add r10b, dl
cmp r8, 8
jae 0x14004caa2
lea rax, [r9 + 0x7a]
cmp r8, rax
jbe 0x14004c965
movabs rdx, 0x174e493a05b1ce56
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x5a
jmp 0x14004c510
movabs rdx, 0xa4f3e1d109cab717
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
add r10b, 0x5f
add r10b, dl
lea rax, [r9 + r8]
cmp rax, 3
je 0x14004caf9
lea rax, [r9 + 0x3e8]
cmp r8, rax
jbe 0x14004c87c
movabs rdx, 0x2a501741043c7727
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x11
jmp 0x14004c560
movzx eax, r11b
mov ecx, Ordinal_41
movabs rdx, 0x8df52bd608c00b1a
add rdx, rbx
and al, dl
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14004c032
mov ecx, 0xa
movabs rdx, 0xf14aad2c089c7cb4
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14004cd11
movabs rcx, 0x54a02e820878ee4e
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x22
jmp 0x14004cce1
movzx eax, r11b
movabs rcx, 0xb7f5afd808555fe8
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x58
jmp 0x14004ccaa
mov ecx, reloc.WS2_32.dll_gethostname
movabs rdx, 0x1b4b312e0831d182
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
add r8, r9
jmp 0x14004ccaa
mov ecx, reloc.WLDAP32.dll_Ordinal_30
movabs rdx, 0x7ea0b284080e431c
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
jmp 0x14004cac4
mov ecx, 3
movabs rdx, 0xe1f633da07eab4b6
add rdx, rbx
movzx eax, r11b
and al, dl
dec rbx
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14004c032
movzx eax, r11b
movabs rcx, 0x454bb53007c72650
add rcx, rbx
inc r9
and al, cl
dec rbx
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x30
inc rbx
jmp 0x14004c032
movabs rcx, 0xa8a1368607a397ea
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x66
jmp 0x14004cc07
lea rax, [r9 + 4]
cmp r8, rax
jae 0x14004c7a3
lea rdx, [rbx + r12]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
sub r10b, 0x65
jmp 0x14004c5bf
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004c7e3
movzx eax, r11b
mov ecx, gethostname
movabs rdx, 0xd9fc63f202eaae5e
add rdx, rbx
and al, dl
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14004c032
inc rax
cmp r8, rax
jne 0x14004c80f
movabs rcx, 0x135161460331cb2a
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x26
jmp 0x14004cce1
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004c844
mov ecx, reloc.WLDAP32.dll_Ordinal_35
movabs rdx, 0x4ca65e9a0378e7f6
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
add r8, r9
jmp 0x14004ccaa
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14004c5c2
movzx eax, r11b
movabs rcx, 0x85fb5bee03c004c2
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x4e
inc rbx
jmp 0x14004c032
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14004c8a9
movabs rcx, 0xc6fa95eb0460058d
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x25
jmp 0x14004cc07
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004c8da
movzx eax, r11b
movabs rcx, 0x39a4909304ee3f25
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 3
add r8, r9
jmp 0x14004ccaa
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14004c907
movabs rcx, 0xd64f0f3d0511cd8b
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x33
jmp 0x14004ccaa
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14004c934
movabs rcx, 0x72f98de705355bf1
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x69
jmp 0x14004cce1
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14004c563
movabs rcx, 0xfa40c910558ea57
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x61
jmp 0x14004cd11
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004c9a1
movzx eax, r11b
movabs rcx, 0xb3f8c7e405d55cbc
add rcx, rbx
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r10d, [rcx + r11]
sub r10b, 0x24
inc rbx
jmp 0x14004c032
inc rax
cmp r8, rax
jne 0x14004c9d2
mov ecx, 9
movabs rdx, 0x50a3468e05f8eb22
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14004cd11
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004ca04
mov ecx, 0x3f
movabs rdx, 0x89f843e2064007ee
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14004ccaa
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004ca35
movzx eax, r11b
movabs rcx, 0x26a2c28c06639654
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x4c
add r8, r9
jmp 0x14004ccaa
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14004ca6d
mov ecx, reloc.WS2_32.dll_recv
movabs rdx, 0x5ff7bfe006aab320
add rdx, rbx
movzx eax, r11b
and al, dl
dec rbx
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14004c032
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14004c513
movabs rdx, 0x994cbd3406f1cfec
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x74
add r10b, dl
jmp 0x14004cc07
movzx r10d, byte [rbp + rbx - 0x38]
movabs rdx, 0xd2a1ba880738ecb8
add rdx, rbx
movzx eax, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 8
add r10b, r11b
add r10b, dl
movabs rdx, 0xa0f6f9dd074ab3eb
movzx eax, r11b
add rdx, rbx
movzx ecx, r10b
and al, dl
add al, al
sub cl, al
sub cl, 0x6d
add cl, r11b
add cl, dl
mov byte [rbp + rbx - 0x38], cl
add r8, r9
jmp 0x14004ccaa
mov ecx, reloc.WS2_32.dll_socket
movabs rdx, 0x6f4c3932075c7b1e
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
sub r10b, byte [rbp + rbx - 0x38]
add r10b, dl
add r10b, r11b
jmp 0x14004cce1
movabs rdx, 0xd25227490291ca5f
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
add r10b, 0x67
add r10b, dl
jmp 0x14004cd11
movzx eax, r11b
movabs rcx, 0x98fd29f5024aad93
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 5
jmp 0x14004ccaa
movzx eax, r11b
movabs rcx, 0xfc52ab4b02271f2d
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x3b
add r8, r9
jmp 0x14004ccaa
movzx eax, r11b
movabs rcx, 0xc2fdadf701e00261
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x59
inc rbx
jmp 0x14004c032
movabs rcx, 0x89a8b0a30198e595
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x13
jmp 0x14004cc07
movabs rcx, 0x5053b34f0151c8c9
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x7f
movzx eax, r11b
movabs rcx, 0x44c7b3307272585
add rcx, rbx
inc r9
and al, cl
add al, al
sub r11b, al
add r11b, 0x5d
add r11b, cl
mov byte [rbp + rbx - 0x38], r11b
dec rbx
inc rbx
jmp 0x14004c032
movzx eax, r11b
movabs rcx, 0xb3a934a5012e3a63
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x4b
inc r9
dec rbx
inc rbx
jmp 0x14004c032
movzx eax, r11b
movabs rcx, 0xdda9b8a700c38f31
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x57
add r8, r9
jmp 0x14004ccaa
movabs rcx, 0x40ff39fd00a000cb
add rcx, rbx
movzx eax, cl
and al, dl
add al, al
sub dl, al
lea r10d, [rcx + rdx]
add r10b, 0x73
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14004c032
mov r11, rdx
movabs rax, 0xa454bb53007c7265
add rax, rbx
and dl, al
add dl, dl
sub al, dl
lea r10d, [r11 + rax]
add r10b, 0x3d
movzx eax, r11b
inc r9
movabs rdx, 0x3da17887076e4251
movzx ecx, r11b
add rdx, rbx
and al, dl
add al, al
sub cl, al
sub cl, 0x37
add cl, dl
movzx eax, cl
mov byte [rbp + rbx - 0x38], al
add rax, r9
sub rbx, rax
movzx eax, r11b
inc r8
movabs rdx, 0xbf6b7dc07800984
mov ecx, reloc.WLDAP32.dll_Ordinal_50
add rdx, rbx
and al, dl
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, r11b
add cl, dl
mov byte [rbp + rbx - 0x38], cl
add rbx, rax
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14004c032
movzx eax, dl
movabs rcx, 0x6affbdff00355599
add rcx, rbx
and al, cl
add al, al
sub dl, al
lea r10d, [rcx + rdx]
sub r10b, 0x2f
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14004c032
movzx eax, r11b
movabs rcx, 0x3249e729093c7d7f
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x79
jmp 0x14004c030
movzx eax, r11b
movabs rcx, 0x959f687f0918ef19
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x51
jmp 0x14004c020
lea rdx, [rbp + 0x171d60c]
jmp 0x14004cdea
lea rdx, [rbp + 0x439d3f]
jmp 0x14004cdea
lea rdx, [rbp - 0x38]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [rsi + 0x10]
lea rbx, [rsi + 0x18]
test eax, eax
je 0x14004ce41
mov edi, eax
nop word [rax + rax]
lea r9, [rbx + 8]
mov r8, rbx
lea rdx, [rbp]
lea rcx, [0x14022be50]
call fcn.1400599b0
add rbx, 0x14
sub rdi, 1
jne 0x14004ce20
mov rcx, rsi
call fcn.1401962d4
mov rcx, qword [rbp - 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.140196270
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret