Function at 0x1400fa090
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x1401d8800]
xor rax, rsp
mov qword [rbp + 0x18], rax
movzx r10d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp - 0x7a], rax
movups xmmword [rsp + 0x76], xmm0
mov dword [rbp - 0x72], eax
movabs rsi, 0x25e7130d76caf114
mov byte [rbp - 0x6e], al
movabs r14, 0x1bf4901abea5c6a4
mov dword [rsp + 0x40], 0xc7c8d8c0
movabs r15, 0xfcdb0c19a505218c
mov dword [rsp + 0x44], 0xcac4d4fb
movabs r12, 0x81334ffe887f23e0
mov dword [rsp + 0x48], 0xc0cfc3f4
movabs r13, 0xe0e67bfee65f5ae8
mov dword [rsp + 0x4c], 0xecfcc0fb
mov dword [rsp + 0x50], 0xfbebfcf5
mov dword [rsp + 0x54], 0xd42ff6c0
mov dword [rsp + 0x58], 0x83d7dc2c
mov dword [rsp + 0x5c], 0xc8cdc0ee
mov dword [rsp + 0x60], 0xc6d9cb35
mov dword [rsp + 0x64], 0xcfe6d1c7
mov dword [rsp + 0x68], 0xd0cbc239
mov dword [rsp + 0x6c], 0x9aeeb9ad
mov dword [rsp + 0x70], 0xb9bdbcb5
mov word [rsp + 0x74], 0xc54d
nop dword [rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor ebx, ebx
cmp rbx, 0x53
jae 0x1400faa9a
movzx r11d, byte [rsp + rbx + 0x40]
mov edi, r11d
nop word [rax + rax]
mov rdx, rdi
cmp r8, rbx
ja 0x1400faa91
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x1400fa1df
lea rcx, [rbx + rsi]
mov rax, rcx
and rax, rdi
imul r10, rax, 0xfffffffffffffffe
add r10, rcx
add r10, rdi
add r10b, 0x74
jmp 0x1400fa20c
je 0x1400faa03
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fa96b
lea rax, [rcx + 1]
cmp r8, rax
je 0x1400fa932
lea rax, [r9 + 9]
cmp r8, rax
je 0x1400fa8e4
nop dword [rax]
cmp r9, rbx
ja 0x1400faa88
lea rax, [r9 + 0x42]
cmp r8, rax
jae 0x1400fa23d
lea rcx, [rbx + r14]
movzx r10d, dil
movzx eax, cl
and al, dl
add al, al
sub r10b, al
sub r10b, 0x7c
add r10b, cl
jmp 0x1400fa271
lea rcx, [r9 + 1]
cmp r8, rcx
je 0x1400fa8c5
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fa89d
lea rax, [rcx + 1]
cmp r8, rax
je 0x1400fa87c
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400fa84d
lea rax, [r8 + r9]
cmp rax, rbx
jbe 0x1400fa455
nop
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x1400fa431
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x1400fa404
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1400fa3e3
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x1400fa3ba
lea r8, [r9 + 0x61]
lea r9, [r8 + 0x80]
lea rax, [r9 + 2]
cmp r8, rax
jb 0x1400faa5f
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x1400faa36
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x1400fa328
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x1400fa280
lea r8, [r9 + 0x40]
lea r9, [r8 + 0x5a]
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x1400fa390
lea rax, [r9 + 8]
cmp r8, rax
ja 0x1400fa36c
lea rax, [r9 + 4]
cmp r8, rax
ja 0x1400fa344
lea r8, [r9 + 0x61]
lea r9, [r8 + 8]
jmp 0x1400fa280
lea rcx, [rbx + r15]
mov eax, reloc.WLDAP32.dll_Ordinal_22
and dl, cl
sub al, dl
lea r10d, [rax + rax]
add r10b, dil
add r10b, cl
jmp 0x1400fa1b0
movabs rdx, 0x18cf9c3463aae830
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x50
add r10b, dl
jmp 0x1400fa98b
movabs rcx, 0xcd01761976150608
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x38
jmp 0x1400fa9bc
lea rcx, [rbx + r12]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
lea r10d, [rcx + r11]
sub r10b, 0x20
inc rbx
jmp 0x1400fa192
mov ecx, 0x24
movabs rdx, 0x101f146a9cb6e388
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fa98b
lea rcx, [rbx + r13]
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x58
inc rbx
jmp 0x1400fa192
movabs rcx, 0x951855e3f8c978c0
inc r9
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x40
inc rbx
jmp 0x1400fa192
movabs rcx, 0x494a2fc90b339698
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x28
jmp 0x1400fa903
lea rax, [r9 + 0x20]
cmp r8, rax
jae 0x1400fa51d
lea rax, [rbx + rsi]
mov ecx, Ordinal_60
and dl, al
sub cl, dl
add cl, cl
add cl, dil
add cl, al
lea rax, [r9 + r8]
cmp rax, 0x7a
je 0x1400fa81f
lea rax, [r9 + 9]
cmp r8, rax
jbe 0x1400fa620
movabs rcx, 0x80f8a354e5b71c4
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x5c
add cl, r11b
cmp r8, 5
jae 0x1400fa7ca
lea rax, [r9 + 0x80]
cmp r8, rax
jbe 0x1400fa6e4
movabs rdx, 0x24041a500d013868
movzx eax, r11b
add rdx, rbx
mov ecx, reloc.WS2_32.dll_sendto
and al, dl
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
cmp r9, 0x40
jb 0x1400fa7ba
mov edx, Ordinal_30
movabs rcx, 0x1a11975d54dc0df8
add rcx, rbx
movzx eax, r11b
and al, cl
sub dl, al
add dl, dl
add dl, cl
add dl, r11b
lea r10d, [rdx + rdx]
jmp 0x1400fa903
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fa55d
mov ecx, 4
movabs rdx, 0x37e920357d4b8d48
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x1400fa192
inc rax
cmp r8, rax
jne 0x1400fa589
movabs rcx, 0x83b746506ae16f70
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x10
jmp 0x1400fa9bc
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fa5b6
movabs rcx, 0x1b539286460d33c0
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x40
jmp 0x1400fa952
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fa5e6
movabs rcx, 0x6721b8a133a315e8
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x58
add r8, r9
jmp 0x1400fa952
lea rax, [r9 + 7]
movzx ecx, r10b
cmp r8, rax
jne 0x1400fa476
mov ecx, 0x24
movabs rdx, 0x965a510ce9fa9e88
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fa903
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fa651
movabs rdx, 0x53ddb0503bf153ec
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x74
add r10b, dl
jmp 0x1400fa903
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fa67d
mov ecx, Ordinal_35
movabs rdx, 0x374822a104b2fa64
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
jmp 0x1400fa7ed
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fa6af
mov ecx, 0xa
movabs rdx, 0xcee46ed6dfdebeb4
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400fa952
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400fa4ae
movabs rdx, 0x1ab294f1cd74a0dc
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 4
add r10b, dl
jmp 0x1400fa98b
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fa724
movzx eax, r11b
mov ecx, 8
movabs rdx, 0x6fd2406afa971a90
add rdx, rbx
and al, dl
sub cl, al
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x1400fa192
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fa751
movabs rcx, 0x76e8ca0d5c2dee0
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x20
jmp 0x1400fa98b
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fa782
movzx eax, r11b
movabs rcx, 0x9f0ad8d6b0eea330
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x50
add r8, r9
jmp 0x1400fa952
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fa4e9
movzx eax, r11b
movabs rcx, 0x36a7250c8c1a6780
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x80
inc rbx
jmp 0x1400fa192
mov byte [rsp + rbx + 0x40], cl
movzx r10d, cl
inc rbx
jmp 0x1400fa192
mov ecx, reloc.WS2_32.dll_recv
movabs rdx, 0x65dfbd784271f020
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, byte [rsp + rbx + 0x40]
add r10b, r11b
add r10b, dl
movabs rcx, 0x8bc6d085b93ce134
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x6c
add cl, r11b
add cl, r10b
mov byte [rsp + rbx + 0x40], cl
add r8, r9
jmp 0x1400fa952
mov ecx, 4
movabs rdx, 0xb1ade3933007d248
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
sub r10b, byte [rsp + rbx + 0x40]
add r10b, r11b
add r10b, dl
jmp 0x1400fa98b
movabs rax, 0xc633e70d18eaba0c
add rax, rbx
and dl, al
add dl, dl
sub dil, dl
lea r10d, [rax + rdi]
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
sub r10b, 0x54
add rbx, rax
inc rbx
jmp 0x1400fa192
movabs rcx, 0x2e979ad73dbef5bc
movzx r10d, dil
add rcx, rbx
and dl, cl
add dl, dl
sub r10b, dl
sub r10b, 0x24
jmp 0x1400fa988
mov eax, 6
movabs rcx, 0x96fb4ea16293316c
add rcx, rbx
and dl, cl
sub al, dl
lea r10d, [rax + rax]
add r10b, dil
add r10b, cl
add r8, r9
jmp 0x1400fa952
mov eax, gethostname
movabs rcx, 0x67c2b635ac3ba8cc
add rcx, rbx
and dl, cl
sub al, dl
lea r10d, [rax + rax]
add r10b, dil
jmp 0x1400fa900
movabs rcx, 0xd02669ffd10fe47c
movzx r10d, dil
add rcx, rbx
and dl, cl
add dl, dl
sub r10b, dl
sub r10b, 0x64
add r10b, cl
movabs rcx, 0x3ff8aa6acba6ff0c
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x54
add cl, r11b
mov byte [rsp + rbx + 0x40], cl
inc r9
dec rbx
inc rbx
jmp 0x1400fa192
mov eax, 0xa
movabs rcx, 0x551fab792d2279b4
add rcx, rbx
and dl, cl
sub al, dl
lea r10d, [rax + rax]
add r10b, dil
add r10b, cl
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1400fa192
mov eax, reloc.WLDAP32.dll_Ordinal_22
movabs rcx, 0x951855e3f8c978c
add rcx, rbx
and dl, cl
sub al, dl
lea r10d, [rax + rax]
add r10b, dil
add r10b, cl
inc r9
movabs rdx, 0xd794f6a0a6d2c35c
add rdx, rbx
mov ecx, 0x3e
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add cl, dl
add cl, r11b
movzx eax, cl
mov byte [rsp + rbx + 0x40], al
add rax, r9
sub rbx, rax
movzx eax, r11b
inc r8
movabs rcx, 0xfd7c09ae1d9db470
add rcx, rbx
and al, cl
add al, al
sub r11b, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub r11b, 0x10
add r11b, cl
mov byte [rsp + rbx + 0x40], r11b
add rbx, rax
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400fa192
mov eax, reloc.WLDAP32.dll_Ordinal_46
movabs rcx, 0x71b539286460d33c
add rcx, rbx
and dl, cl
sub al, dl
lea r10d, [rax + rax]
add r10b, dil
add r10b, cl
movzx eax, byte [rsp + rbx + 0x40]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400fa192
mov ecx, Ordinal_35
movabs rdx, 0xb10ce5feb76f3f64
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400fa190
mov ecx, reloc.WLDAP32.dll_Ordinal_46
movabs rdx, 0x653ebfe3c9d95d3c
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400fa180
lea rdx, [rbp + 0x159f8b0]
jmp 0x1400faa9f
lea rdx, [rbp + 0x164e9c4]
jmp 0x1400faa9f
lea rdx, [rsp + 0x40]
lea rax, [rbp - 8]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movzx edx, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x44], eax
movups xmmword [rbp - 0x54], xmm0
mov word [rbp - 0x40], ax
movabs rdi, 0xf6d9f47014669bb9
mov byte [rbp - 0x3e], al
movabs rsi, 0x18c739908708b167
mov dword [rbp - 0x60], 0xec12f1d4
movabs r15, 0x54e5ceb000f8b215
mov dword [rbp - 0x5c], 0xe8e41c18
movabs r14, 0x6efb9c3085174d3d
mov dword [rbp - 0x58], 0xb3e8e61a
movabs r12, 0xc52ffed08325e913
movabs r13, 0xd040620a143799e
nop word [rax + rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x1400fb838
movzx r11d, byte [rbp + rbx - 0x60]
mov r10, r11
cmp r8, rbx
ja 0x1400fb82f
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1400fab80
lea rcx, [rbx + r15]
mov rax, rcx
and rax, r11
imul rdx, rax, 0xfffffffffffffffe
add rdx, rcx
add rdx, r11
add dl, 0x6d
jmp 0x1400fabb0
je 0x1400fb7ae
inc rax
cmp r8, rax
je 0x1400fb746
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400fb6f6
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fb696
nop dword [rax]
cmp r9, rbx
ja 0x1400fb826
lea rax, [r9 + 0x1000]
cmp r8, rax
jae 0x1400fabdc
lea rcx, [rbx + rdi]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0xf
jmp 0x1400fac30
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400fb649
inc rax
cmp r8, rax
je 0x1400fb620
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fb5fd
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400fb5da
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400fb5b7
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400fb586
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x1400fb23a
nop dword [rax]
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fb217
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x1400fb1eb
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400fb1c2
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x1400fb19c
lea rax, [r9 + 8]
cmp r8, rax
je 0x1400fb176
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x1400fb150
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x1400fb12d
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400fb10a
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x1400fb0d9
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1400fac40
lea r8, [r9 + 5]
lea r9, [r8 + 0x7a]
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x1400fb803
lea rax, [r9 + 8]
cmp r8, rax
jb 0x1400fb7e0
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1400fae2e
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x1400fae14
lea rax, [r9 + 2]
cmp r8, rax
jb 0x1400fadfa
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x1400fb07a
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x1400fb01d
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x1400fafce
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x1400fafa3
lea rax, [r9 + 9]
cmp r8, rax
jb 0x1400fac40
lea r8, [r9 + 0x2a]
lea r9, [r8 + 0x200]
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x1400faf71
lea rax, [r9 + 2]
cmp r8, rax
ja 0x1400faf4e
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x1400faf28
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x1400faf02
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x1400faedc
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x1400faeb9
lea rax, [r9 + 9]
cmp r8, rax
ja 0x1400fae8f
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x1400fae6b
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x1400fae48
lea rax, [r9 + 3]
cmp r8, rax
ja 0x1400fac40
lea r8, [r9 + 0x1000]
lea r9, [r8 + 0x28]
jmp 0x1400fac40
lea rcx, [rbx + rsi]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x2f
jmp 0x1400fac30
lea rcx, [rbx + r14]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x55
jmp 0x1400fabb0
lea rcx, [rbx + r12]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x7b
jmp 0x1400fab52
movabs rcx, 0xb6cfa380a334ddc8
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x78
jmp 0x1400fb667
lea rcx, [rbx + r13]
movzx eax, r11b
and al, cl
inc r9
add al, al
dec rbx
sub r11b, al
lea edx, [rcx + r11]
sub dl, 0x52
inc rbx
jmp 0x1400fab42
movzx eax, r11b
movabs rcx, 0x633868c09f521574
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea edx, [rcx + r11]
sub dl, 0x2c
inc rbx
jmp 0x1400fab42
movabs rcx, 0xb96ccb609d60b14a
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 6
jmp 0x1400fb6b4
movabs rdx, 0xfa12e009b6f4d20
movzx eax, r11b
add rdx, rbx
mov ecx, reloc.WS2_32.dll_recv
and al, dl
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x1400fb6db
movabs rdx, 0x65d590a0997de8f6
movzx eax, r11b
add rdx, rbx
mov ecx, reloc.WLDAP32.dll_Ordinal_35
and al, dl
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x1400fb6de
movabs rdx, 0xbc09f340978c84cc
movzx eax, r11b
add rdx, rbx
mov ecx, gethostname
and al, dl
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1400fb717
movabs rcx, 0x123e55e0959b20a2
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x6e
jmp 0x1400fb76a
movzx eax, r11b
movabs rcx, 0x6872b88093a9bc78
add rcx, rbx
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea edx, [rcx + r11]
sub dl, 0x48
inc rbx
jmp 0x1400fab42
movzx eax, r11b
movabs rcx, 0xbff5af108ece420f
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea edx, [rcx + r11]
sub dl, 0x69
mov byte [rbp + rbx - 0x60], dl
inc rbx
jmp 0x1400fab42
movabs rdx, 0x162a11b08cdcdde5
movzx eax, r11b
add rdx, rbx
movzx ecx, r11b
and al, dl
add al, al
sub cl, al
sub dl, 0x43
add dl, cl
cmp r9, 0x64
jb 0x1400fafc2
movzx ecx, r11b
movabs rdx, 0xd3905a206316f45e
add rdx, rbx
movzx eax, r11b
and al, dl
add al, al
sub cl, al
add cl, dl
lea edx, [rcx*2 - 0x24]
jmp 0x1400fb667
movabs rdx, 0x6c5e74508aeb79bb
movzx eax, r11b
add rdx, rbx
movzx ecx, r11b
and al, dl
sub dl, 0x1d
add al, al
sub cl, al
add dl, cl
cmp r8, 0x1000
jae 0x1400fb532
lea rax, [r9 + 0x28]
cmp r8, rax
jbe 0x1400fb43c
movabs rdx, 0x319c34604fa90aba
movzx eax, r11b
add rdx, rbx
movzx ecx, r11b
and al, dl
add al, al
sub cl, al
sub dl, 0x16
jmp 0x1400fafec
movabs rcx, 0xc292d6f088fa1591
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 9
lea rax, [r9 + r8]
cmp rax, 0x2a
je 0x1400fb55c
lea rax, [r9 + 0x200]
cmp r8, rax
jbe 0x1400fb3aa
movabs rcx, 0x3ac23ff03b426f01
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 7
jmp 0x1400fb03d
movabs rcx, 0xc91bbaa07a67a656
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea edx, [r11 + rcx]
sub dl, 0x5a
inc rbx
jmp 0x1400fab42
movabs rcx, 0x1f501d407876422c
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x34
jmp 0x1400fb76a
movabs rcx, 0x75847fe07684de02
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0xe
jmp 0x1400fb717
movabs rdx, 0xcbb8e280749379d8
mov ecx, recv
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1400fb6de
movabs rdx, 0x21ed452072a215ae
mov ecx, Ordinal_35
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1400fb6db
movabs rdx, 0x7821a7c070b0b184
mov ecx, reloc.WLDAP32.dll_Ordinal_50
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1400fb6b4
movabs rcx, 0xce560a606ebf4d5a
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x76
inc rbx
jmp 0x1400fab42
movabs rcx, 0x248a6d006ccde930
inc r9
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x50
inc rbx
jmp 0x1400fab42
movabs rcx, 0x7abecfa06adc8506
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x2a
jmp 0x1400fb667
lea rax, [r9 + 0x41]
cmp r8, rax
jae 0x1400fb25d
lea rcx, [rbx + r15]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x6d
jmp 0x1400fb098
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fb297
movabs rcx, 0xedb3e8e028cd3772
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea edx, [r11 + rcx]
sub dl, 0x1e
inc rbx
jmp 0x1400fab42
inc rax
cmp r8, rax
jne 0x1400fb2be
movabs rdx, 0x977f86402abe9b9c
movzx ecx, r11b
add rdx, rbx
movzx eax, dl
and al, r11b
sub dl, 0x44
jmp 0x1400fb764
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fb2ea
movabs rcx, 0x414b23a02cafffc6
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x6a
jmp 0x1400fb717
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fb319
movabs rdx, 0x94e25e603092c81a
mov ecx, Ordinal_41
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1400fb6db
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fb348
movabs rdx, 0x3eadfbc032842c44
mov ecx, reloc.WS2_32.dll_select
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1400fb6b4
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400fb37a
movabs rcx, 0xe87999203475906e
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 2
inc rbx
jmp 0x1400fab42
lea rax, [r9 + 9]
cmp r8, rax
jne 0x1400fb098
movabs rcx, 0x3c10d3e0385858c2
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x4e
jmp 0x1400fb667
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fb3d6
movabs rcx, 0xe48ddd503d33d32b
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x2d
jmp 0x1400fb667
inc rax
cmp r8, rax
jne 0x1400fb40b
movzx eax, r11b
movabs rcx, 0x8e597ab03f253755
add rcx, rbx
inc r9
and al, cl
dec rbx
add al, al
sub r11b, al
lea edx, [rcx + r11]
sub dl, 0x53
inc rbx
jmp 0x1400fab42
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fb03d
movzx eax, r11b
movabs rcx, 0x3587f03046eac7fd
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea edx, [rcx + r11]
add dl, 0x15
jmp 0x1400fb6de
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fb477
movzx eax, r11b
movabs rcx, 0xdb67d1c0519a6ee4
add rcx, rbx
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea edx, [rcx + r11]
sub dl, 0x3c
inc rbx
jmp 0x1400fab42
inc rax
cmp r8, rax
jne 0x1400fb49e
movabs rdx, 0x85336f20538bd30e
movzx eax, r11b
add rdx, rbx
movzx ecx, r11b
and al, dl
sub dl, 0x62
jmp 0x1400fb764
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fb4cd
movabs rdx, 0x2eff0c80557d3738
movzx eax, r11b
add rdx, rbx
mov ecx, reloc.WLDAP32.dll_Ordinal_60
and al, dl
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x1400fb717
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fb500
movzx eax, r11b
movabs rcx, 0xd62d82005d42c7e0
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea edx, [rcx + r11]
sub dl, 0x20
inc rbx
jmp 0x1400fab42
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400fafee
movabs rdx, 0x29c4bcc061259034
movzx eax, r11b
add rdx, rbx
movzx ecx, r11b
and al, dl
sub dl, 0x6c
add al, al
sub cl, al
add dl, cl
jmp 0x1400fb667
movabs rdx, 0x7d5bf78065085888
movzx eax, r11b
add rdx, rbx
mov ecx, 0x24
and al, dl
sub cl, al
add cl, cl
add cl, byte [rbp + rbx - 0x60]
add cl, r11b
add dl, cl
jmp 0x1400fb6b4
movabs rdx, 0x272794e066f9bcb2
movzx eax, r11b
add rdx, rbx
mov ecx, reloc.WS2_32.dll_recvfrom
and al, dl
sub cl, al
add cl, cl
sub cl, byte [rbp + rbx - 0x60]
add cl, r11b
add dl, cl
jmp 0x1400fb717
movabs rcx, 0xef027cd025e32133
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea edx, [r11 + rcx]
sub dl, 0x65
inc rbx
jmp 0x1400fab42
movabs rcx, 0x9b6b4210220058df
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x19
jmp 0x1400fb717
movabs rcx, 0xf19fa4b0200ef4b5
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0xd
jmp 0x1400fb6de
movabs rcx, 0x47d407501e1d908b
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x33
jmp 0x1400fb6db
movabs rcx, 0xf43ccc901a3ac837
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x7f
inc rbx
jmp 0x1400fab42
movabs rcx, 0xa0a591d01657ffe3
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x35
movabs rcx, 0x287628d0640fa673
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x25
add cl, r11b
mov byte [rbp + rbx - 0x60], cl
inc r9
dec rbx
inc rbx
jmp 0x1400fab42
movabs rcx, 0x4fab7ef00ca10b11
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x77
movzx eax, r11b
movabs rcx, 0xd241c63066010a9d
add rcx, rbx
and al, cl
add al, al
sub r11b, al
sub r11b, 0x4b
add r11b, dl
add r11b, cl
mov byte [rbp + rbx - 0x60], r11b
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1400fab42
movabs rcx, 0x5248a6d006ccde93
mov r11, r10
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 5
inc r9
movabs rcx, 0x7c0d639067f26ec7
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x71
add cl, r11b
movzx eax, cl
mov byte [rbp + rbx - 0x60], al
add rax, r9
sub rbx, rax
jmp 0x1400fb76a
movabs rdx, 0xa87d097004db7a69
movzx eax, r10b
add rdx, rbx
movzx ecx, r10b
and al, dl
movzx r11d, r10b
add dl, 0x21
add al, al
sub cl, al
add dl, cl
inc r8
movabs rcx, 0xd0f3324068eb20dc
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub cl, 4
add cl, r11b
mov byte [rbp + rbx - 0x60], cl
add rbx, rax
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400fab42
movzx eax, r10b
movabs rcx, 0xfeb16c1002ea163f
add rcx, rbx
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
add dl, 0x47
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400fab42
movabs rcx, 0x1b646170813484e9
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x5f
jmp 0x1400fab40
movabs rcx, 0x7198c4107f4320bf
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x39
jmp 0x1400fab30
lea rdx, [rbp + 0x157a5bc]
jmp 0x1400fb83c
lea rdx, [rbp + 0x15057d1]
jmp 0x1400fb83c
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [rbp - 0x10]
call fcn.140196668
movzx r11d, byte [rsp + 0x30]
mov rsi, rax
xor eax, eax
mov dword [rbp - 0x38], 0xacba9964
xorps xmm0, xmm0
mov dword [rbp - 0x1c], eax
mov word [rbp - 0x18], ax
movabs rdi, 0xaa0f8d80f69bff09
mov byte [rbp - 0x16], al
movabs r14, 0xf3469b943acbebbd
mov dword [rbp - 0x34], 0xb0a4bca0
movabs r15, 0xae339f020c437dbf
mov dword [rbp - 0x30], 0x2bb0b6a2
movabs r12, 0xf93c04926c9f6d58
movups xmmword [rbp - 0x2c], xmm0
movabs r13, 0xa6ee410d9b93722b
nop word [rax + rax]
mov rax, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x1400fc27f
movzx r10d, byte [rbp + rbx - 0x38]
mov r8, r10
cmp rax, rbx
ja 0x1400fc276
lea rdx, [r9 + 1]
cmp rax, rdx
jae 0x1400fb922
lea rdx, [rbx + rdi]
mov r11, r10
movzx ecx, dl
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x3f
add r11b, dl
jmp 0x1400fb95c
je 0x1400fc1f2
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1400fc15a
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x1400fc121
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x1400fc0fd
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x1400fc0af
nop dword [rax]
cmp r9, rbx
ja 0x1400fc26d
lea rcx, [r9 + 0x41]
cmp rax, rcx
jae 0x1400fb98b
lea r11, [rbx + r14]
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
sub r11b, 0x2b
add r11b, r10b
jmp 0x1400fb9bf
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x1400fc089
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1400fc05f
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x1400fc03b
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x1400fc017
nop
lea rcx, [rax + r9]
cmp rcx, rbx
jbe 0x1400fbbb8
nop dword [rax]
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x1400fbb94
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x1400fbb61
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x1400fbb37
lea rax, [r9 + 0x41]
lea r9, [rax + 0x200]
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jb 0x1400fc249
lea rcx, [r9 + 0x200]
cmp rax, rcx
jb 0x1400fc225
lea rcx, [r9 + 0x41]
cmp rax, rcx
jb 0x1400fba7d
lea rcx, [r9 + 0x42]
cmp rax, rcx
jb 0x1400fbb14
mov rax, rcx
lea r9, [rcx + 0x200]
lea rcx, [r9 + 0x1000]
cmp rax, rcx
ja 0x1400fbaeb
lea rcx, [r9 + 0x200]
cmp rax, rcx
ja 0x1400fbac1
lea rcx, [r9 + 0x42]
cmp rax, rcx
ja 0x1400fba98
lea rax, [r9 + 0x42]
lea r9, [rax + 0x200]
jmp 0x1400fb9d0
lea rdx, [rbx + r15]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x39
jmp 0x1400fb8f2
movabs r8, 0xa17a3a96470f697c
movzx r11d, r10b
add r8, rbx
movzx ecx, r8b
and cl, r10b
add cl, cl
sub r11b, cl
sub r11b, 0x64
add r11b, r8b
jmp 0x1400fc17b
mov edx, reloc.WS2_32.dll_listen
movabs r8, 0x4d5b1f9459d76b6a
add r8, rbx
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
jmp 0x1400fc1a8
lea rdx, [rbx + r12]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
lea r11d, [r10 + rdx]
sub r11b, 0x68
inc rbx
jmp 0x1400fb8e2
lea rdx, [rbx + r13]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x2d
mov byte [rbp + rbx - 0x38], r11b
inc rbx
jmp 0x1400fb8e2
movabs rdx, 0xbaed036dd1779202
add rdx, rbx
dec rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0xe
inc rbx
jmp 0x1400fb8e2
mov edx, gethostname
movabs r8, 0x66cde86be43f93f0
add r8, rbx
inc r9
movzx ecx, r8b
dec rbx
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
inc rbx
jmp 0x1400fb8e2
movabs rdx, 0x12aecd69f70795de
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x12
jmp 0x1400fc0ce
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jae 0x1400fbc85
lea rdx, [rbx + rdi]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x3f
lea rcx, [r9 + rax]
cmp rcx, 0x41
je 0x1400fbfe9
lea rcx, [r9 + 0x200]
cmp rax, rcx
jbe 0x1400fbd81
movabs rdx, 0x85b4b7bac32bc525
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 3
cmp rax, 0x41
jae 0x1400fbf90
lea rcx, [r9 + 0x200]
cmp rax, rcx
jbe 0x1400fbe82
movabs rdx, 0x78fb534efdf7b0e2
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x2e
cmp r9, 0x41
jb 0x1400fbb2a
movabs rdx, 0xc232616242279d96
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
add dl, r10b
lea r11d, [rdx*2 - 0x34]
jmp 0x1400fc0ce
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x1400fbcc0
movabs rdx, 0xe68d37287597d77a
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
lea r11d, [r10 + rdx]
sub r11b, 0x56
inc rbx
jmp 0x1400fb8e2
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400fbced
movabs rdx, 0x8ecb6d2c5007d39e
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x52
jmp 0x1400fc17b
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x1400fbd20
mov edx, Ordinal_26
movabs r8, 0xe2ea882e3d3fd1b0
add r8, rbx
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
jmp 0x1400fc141
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x1400fbd50
movabs rdx, 0x3709a3302a77cfc2
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x4e
add rax, r9
jmp 0x1400fc141
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x1400fbbde
movabs rdx, 0x87860f37df57c80a
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x46
jmp 0x1400fc0ce
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x1400fbdae
movabs rdx, 0xd9d3d2bcb063c337
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
add r11b, 0x7f
jmp 0x1400fc0ce
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400fbde2
movzx ecx, r10b
movabs rdx, 0x821208c08ad3bf5b
add rdx, rbx
dec rbx
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x7d
inc rbx
jmp 0x1400fb8e2
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x1400fbe11
movabs r8, 0xd63123c2780bbd6d
movzx ecx, r10b
add r8, rbx
movzx r11d, r10b
and cl, r8b
add cl, cl
sub r11b, cl
add r11b, 5
jmp 0x1400fbfb7
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x1400fbe42
movzx ecx, r10b
movabs rdx, 0x2a503ec46543bb7f
add rdx, rbx
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x79
add rax, r9
jmp 0x1400fc141
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x1400fbc1b
movzx ecx, r10b
movabs rdx, 0x7accaacc1a23b3c7
add rdx, rbx
and cl, dl
add cl, cl
sub r10b, cl
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
lea r11d, [rdx + r10]
sub r11b, 0x71
inc rbx
jmp 0x1400fb8e2
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x1400fbec3
mov edx, Ordinal_45
movabs r8, 0xcd1a6e50eb2faef4
add r8, rbx
movzx ecx, r8b
and cl, r10b
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
inc rbx
jmp 0x1400fb8e2
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400fbef6
mov edx, Ordinal_45
movabs r8, 0x7558a454c59fab18
add r8, rbx
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
jmp 0x1400fc17b
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x1400fbf23
movabs rdx, 0xc977bf56b2d7a92a
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x26
jmp 0x1400fc141
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x1400fbf59
mov edx, reloc.WLDAP32.dll_Ordinal_46
movabs r8, 0x1d96da58a00fa73c
add r8, rbx
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, r10b
add rax, r9
jmp 0x1400fc141
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x1400fbc54
mov edx, reloc.WLDAP32.dll_Ordinal_50
movabs r8, 0x6e13466054ef9f84
add r8, rbx
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
jmp 0x1400fc0ce
mov edx, 0x34
movabs r8, 0x16517c642f5f9ba8
add r8, rbx
movzx ecx, r8b
and cl, r10b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, byte [rbp + rbx - 0x38]
add r11b, r10b
add r11b, r8b
movzx ecx, r10b
movabs rdx, 0xc06109e525fb9ab1
add rdx, rbx
and cl, dl
add cl, cl
sub r10b, cl
add r10b, 0x29
add r10b, r11b
add r10b, dl
mov byte [rbp + rbx - 0x38], r10b
add rax, r9
jmp 0x1400fc141
movabs r8, 0x6a7097661c9799ba
movzx ecx, r10b
add r8, rbx
movzx r11d, r10b
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, byte [rbp + rbx - 0x38]
sub r11b, 0x16
add r11b, r8b
jmp 0x1400fc17b
movabs rdx, 0x402058a1b753de3b
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
add r11b, 0x63
jmp 0x1400fc17b
movabs rdx, 0xec013d9fca1be029
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
sub r11b, 0x1f
jmp 0x1400fc141
movabs rdx, 0xefa3ec9a0273e5f3
add rdx, rbx
dec rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
add r11b, 0x5b
inc rbx
jmp 0x1400fb8e2
movabs r8, 0x4765b6962803e9cf
movzx r11d, r10b
add r8, rbx
movzx ecx, r8b
and cl, r10b
add cl, cl
sub r11b, cl
add r11b, 0x57
add r11b, r8b
jmp 0x1400fc0ce
movabs rdx, 0x9f2780924d93edab
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
add r11b, 0x53
movabs rdx, 0x6c41eee338c39c9f
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
sub dl, 0x59
add dl, r10b
mov byte [rbp + rbx - 0x38], dl
inc r9
dec rbx
inc rbx
jmp 0x1400fb8e2
movabs rdx, 0x4eab148a98b3f563
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
add r11b, 0x4b
add rax, r9
jmp 0x1400fc141
movabs rdx, 0xfa8bf988ab7bf751
add rdx, rbx
movzx ecx, dl
and cl, r8b
add cl, cl
sub r8b, cl
lea r11d, [rdx + r8]
sub r11b, 0x37
movzx ecx, r11b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x1400fb8e2
mov r10, r8
movabs rcx, 0xa66cde86be43f93f
add rcx, rbx
and r8b, cl
add r8b, r8b
sub cl, r8b
lea r11d, [r10 + rcx]
add r11b, 0x47
inc r9
movabs rdx, 0x148024e7133398c3
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
sub dl, 0x55
add dl, r10b
movzx ecx, dl
mov byte [rbp + rbx - 0x38], cl
add rcx, r9
sub rbx, rcx
movzx ecx, r10b
inc rax
movabs r8, 0xbe8fb26809cf97cc
mov edx, gethostname
add r8, rbx
and cl, r8b
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add dl, dl
add dl, r10b
add dl, r8b
mov byte [rbp + rbx - 0x38], dl
add rbx, rcx
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400fb8e2
movzx ecx, r8b
movabs rdx, 0xfe2ea882e3d3fd1b
add rdx, rbx
and cl, dl
add cl, cl
sub r8b, cl
lea r11d, [rdx + r8]
add r11b, 0x43
movzx ecx, byte [rbp + rbx - 0x38]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400fb8e2
movabs rdx, 0x5a1484001f0b7fad
add rdx, rbx
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r11d, [r10 + rdx]
add r11b, 0x45
jmp 0x1400fb8e0
movabs rcx, 0x5f568fe31d3819b
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x3d
jmp 0x1400fb8d0
lea rdx, [rbp + 0x14f59d4]
jmp 0x1400fc283
lea rdx, [rbp + 0x6b58dd]
jmp 0x1400fc283
lea rdx, [rbp - 0x38]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [rsi + 0x10]
lea rbx, [rsi + 0x18]
test eax, eax
je 0x1400fc2d1
mov edi, eax
nop
lea r9, [rbx + 8]
mov r8, rbx
lea rdx, [rbp]
lea rcx, [0x14022c208]
call fcn.1400599b0
add rbx, 0x14
sub rdi, 1
jne 0x1400fc2b0
mov rcx, rsi
call fcn.1401962d4
mov rcx, qword [rbp - 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.140196270
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret