Function at 0x1400fb760
Capabilities:
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x140236800]
xor rax, rsp
mov qword [rbp + 0x18], rax
movzx r10d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp - 0x7a], rax
movups xmmword [rsp + 0x76], xmm0
mov dword [rbp - 0x72], eax
movabs r13, 0x5d541a1b744bbc78
mov byte [rbp - 0x6e], al
movabs r14, 0xa7e624408a3675d8
mov dword [rsp + 0x40], 0xf7e0f0e8
movabs r15, 0xacaa2ce8251f5528
mov dword [rsp + 0x44], 0xf2e4f4e3
movabs r12, 0xf201f8b13c87dc38
mov dword [rsp + 0x48], 0x180f1b24
mov dword [rsp + 0x4c], 0xc1c1813
mov dword [rsp + 0x50], 0x13031c05
mov dword [rsp + 0x54], 0x344f1628
mov dword [rsp + 0x58], 0xfb273c2c
mov dword [rsp + 0x5c], 0x202d380e
mov dword [rsp + 0x60], 0x36312325
mov dword [rsp + 0x64], 0x2f063927
mov dword [rsp + 0x68], 0x8131a61
mov dword [rsp + 0x6c], 0x32ce110d
mov dword [rsp + 0x70], 0x111d1c05
mov word [rsp + 0x74], 0xe56d
nop dword [rax]
nop word [rax + rax]
mov rax, qword [0x14023d108]
mov r9, qword [0x14023d100]
nop
xor r11d, r11d
cmp r11, 0x53
jae 0x1400fc5d3
movzx esi, byte [rsp + r11 + 0x40]
mov ebx, esi
nop word [rax + rax]
mov rdi, rbx
cmp rax, r11
ja 0x1400fc5ca
lea rdx, [r9 + 1]
cmp rax, rdx
jae 0x1400fb8af
lea rdx, [r11 + r13]
mov rcx, rdx
and rcx, rbx
imul r10, rcx, 0xfffffffffffffffe
add r10, rdx
add r10, rbx
sub r10b, 0x48
jmp 0x1400fb8f0
je 0x1400fc53e
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x1400fc49e
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x1400fc475
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x1400fc445
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1400fc3ee
nop dword [rax]
cmp r9, r11
ja 0x1400fc5c1
lea rcx, [r9 + 0x400]
cmp rax, rcx
jae 0x1400fb923
lea r8, [r11 + r14]
mov edx, recv
movzx ecx, r8b
and cl, dil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, bl
add r10b, r8b
jmp 0x1400fb960
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x1400fc3ce
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1400fc390
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1400fc370
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x1400fc35c
nop word [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, r11
jbe 0x1400fbfbd
nop dword [rax]
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
je 0x1400fbf93
lea rcx, [r9 + 0x2a]
cmp rax, rcx
je 0x1400fbf66
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x1400fbf3c
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1400fbf18
lea rdx, [r9 + 0x28]
cmp rax, rdx
je 0x1400fbef4
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x1400fbeca
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x1400fbea6
lea rcx, [r9 + 0x5a]
cmp rax, rcx
je 0x1400fbe7c
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x1400fbe49
lea rcx, [r9 + 0x40]
cmp rax, rcx
je 0x1400fb970
lea r9, [rdx + 0x1000]
mov rax, rdx
lea rcx, [r9 + 0x400]
cmp rdx, rcx
jb 0x1400fc598
lea rcx, [r9 + 1]
cmp rdx, rcx
jb 0x1400fc574
lea rcx, [r9 + 0x5a]
cmp rdx, rcx
jb 0x1400fbb6c
lea rcx, [r9 + 6]
cmp rdx, rcx
jb 0x1400fbb4b
lea rdx, [r9 + 0x40]
cmp rax, rdx
jb 0x1400fbb2b
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jb 0x1400fbde5
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jb 0x1400fbd81
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jb 0x1400fbd2a
lea rcx, [r9 + 8]
cmp rax, rcx
jb 0x1400fbcfe
lea rcx, [r9 + 5]
cmp rax, rcx
jb 0x1400fb970
lea r9, [rdx + 0x28]
mov rax, rdx
lea rcx, [r9 + 0x1000]
cmp rdx, rcx
ja 0x1400fbcc5
lea rcx, [r9 + 0x3e8]
cmp rdx, rcx
ja 0x1400fbca1
lea rcx, [r9 + 0x2a]
cmp rdx, rcx
ja 0x1400fbc7a
lea rcx, [r9 + 8]
cmp rdx, rcx
ja 0x1400fbc56
lea rdx, [r9 + 5]
cmp rax, rdx
ja 0x1400fbc3e
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x1400fbc14
lea rcx, [r9 + 0x400]
cmp rax, rcx
ja 0x1400fbbea
lea rcx, [r9 + 1]
cmp rax, rcx
ja 0x1400fbbb7
lea rcx, [r9 + 0x5a]
cmp rax, rcx
ja 0x1400fbb93
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x1400fb970
mov rax, rdx
lea r9, [rdx + 0x40]
jmp 0x1400fb970
lea r8, [r11 + r15]
movzx ecx, dil
and cl, r8b
movzx r10d, bl
add cl, cl
sub r10b, cl
sub r10b, 0x18
add r10b, r8b
jmp 0x1400fb960
lea r8, [r11 + r12]
mov edx, reloc.WLDAP32.dll_Ordinal_60
movzx ecx, dil
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, bl
add r10b, r8b
jmp 0x1400fb8f0
mov ecx, 4
movabs rdx, 0x3759c47a53f06348
add rdx, r11
and dil, dl
sub cl, dil
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
jmp 0x1400fb880
movabs rdx, 0x3f31220451b3aec0
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x40
jmp 0x1400fc40f
mov edx, Ordinal_41
movabs r8, 0x8488edcd691c35d0
add r8, r11
inc r9
movzx ecx, r8b
dec r11
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
inc r11
jmp 0x1400fb863
movabs rdx, 0xc9e0b9968084bce0
add rdx, r11
dec r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x20
inc r11
jmp 0x1400fb863
mov edx, gethostname
movabs r8, 0xf38855f97ed43f0
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
jmp 0x1400fc2fe
movzx edx, r11b
movzx r10d, r11b
and dl, sil
add dl, dl
sub r10b, dl
add r10b, sil
jmp 0x1400fc3b2
movabs rdx, 0x99e81cf1c6be5210
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x70
jmp 0x1400fc3b5
mov edx, reloc.WS2_32.dll_recv
movabs r8, 0xdf3fe8bade26d920
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, sil
jmp 0x1400fc4c0
movabs rdx, 0x2497b483f58f6030
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x50
jmp 0x1400fc4f6
mov edx, reloc.WLDAP32.dll_Ordinal_32
movabs r8, 0x69ef804d0cf7e740
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, r9
add r11, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
inc r11
jmp 0x1400fb863
movabs rdx, 0x974afdc3c77d38e8
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x58
mov byte [rsp + r11 + 0x40], r10b
inc r11
jmp 0x1400fb863
mov edx, Ordinal_30
movabs r8, 0xdca2c98cdee5bff8
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
cmp r9, 0x5a
jb 0x1400fbd1d
movzx edx, sil
movabs r8, 0x2f8266f0562d17d0
add r8, r11
movzx ecx, r8b
and cl, sil
add cl, cl
sub dl, cl
add dl, r8b
lea r10d, [rdx*2 - 0x60]
jmp 0x1400fc40f
movabs r8, 0x21fa9555f64e4708
movzx ecx, sil
add r8, r11
movzx r10d, sil
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x38
add r10b, r8b
cmp rax, 8
jae 0x1400fc2d5
lea rcx, [r9 + 6]
cmp rax, rcx
jbe 0x1400fc1d4
movabs r8, 0xe4f05ccb40425e70
movzx ecx, sil
add r8, r11
movzx r10d, sil
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, 0x10
add r10b, r8b
jmp 0x1400fbd4f
mov edx, Ordinal_45
movabs r8, 0x6752611f0db6ce18
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
lea rcx, [r9 + rax]
cmp rcx, 6
je 0x1400fc330
lea rcx, [r9 + 5]
cmp rax, rcx
jbe 0x1400fc0c8
movabs rdx, 0x3d0a388ab60be898
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x28
jmp 0x1400fbda5
movabs rdx, 0xef64d9833d46c310
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, r9
add r11, rcx
lea r10d, [rsi + rdx]
sub r10b, 0x70
inc r11
jmp 0x1400fb863
mov edx, reloc.WS2_32.dll_recv
movabs r8, 0x34bca54c54af4a20
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
jmp 0x1400fc4f6
movabs rdx, 0x7a1471156c17d130
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x50
jmp 0x1400fc4c3
mov edx, reloc.WLDAP32.dll_Ordinal_32
movabs r8, 0xbf6c3cde83805840
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
jmp 0x1400fc3b5
movabs rdx, 0x4c408a79ae8df50
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x30
jmp 0x1400fc3b2
mov edx, Ordinal_50
movabs r8, 0x4a1bd470b2516660
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
jmp 0x1400fc2f8
movabs rdx, 0x8f73a039c9b9ed70
add rdx, r11
dec r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x10
inc r11
jmp 0x1400fb863
movabs rdx, 0xd4cb6c02e1227480
inc r9
add rdx, r11
dec r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
add r10b, 0x80
inc r11
jmp 0x1400fb863
mov edx, 8
movabs r8, 0x1a2337cbf88afb90
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
jmp 0x1400fc40f
lea rcx, [r9 + 0x28]
cmp rax, rcx
jae 0x1400fbfe0
lea rcx, [r11 + r13]
and dil, cl
add dil, dil
sub bl, dil
lea r10d, [rcx + rbx]
sub r10b, 0x48
jmp 0x1400fbe0a
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400fc022
mov edx, Ordinal_26
movabs r8, 0x4fcc4881146cebb0
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, r9
add r11, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
inc r11
jmp 0x1400fb863
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1400fc055
mov edx, Ordinal_50
movabs r8, 0xf5154d939f624860
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
jmp 0x1400fc2fe
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400fc088
movabs rdx, 0xafbd81ca87f9c150
add rdx, r11
dec r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x30
inc r11
jmp 0x1400fb863
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x1400fbe0a
mov edx, reloc.WLDAP32.dll_Ordinal_32
movabs r8, 0x6a65b60170913a40
add r8, r11
inc r9
movzx ecx, r8b
dec r11
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
inc r11
jmp 0x1400fb863
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400fc0fb
mov edx, 0x24
movabs r8, 0xf7b26cc19ea36188
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
jmp 0x1400fc40f
inc rcx
cmp rax, rcx
jne 0x1400fc133
mov edx, reloc.WS2_32.dll_sendto
movabs r8, 0x6d02d52f6fd25368
add r8, r11
dec r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
inc r11
jmp 0x1400fb863
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400fc160
movabs rdx, 0x27ab09665869cc58
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x68
jmp 0x1400fc2fe
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1400fc193
mov edx, reloc.WLDAP32.dll_Ordinal_60
movabs r8, 0x9cfb71d42998be38
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
jmp 0x1400fc3b5
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x1400fbda5
movzx ecx, sil
movabs rdx, 0xccf40e78e35f2908
add rdx, r11
and cl, dl
add cl, cl
sub sil, cl
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, r9
add r11, rcx
lea r10d, [rdx + rsi]
sub r10b, 0x38
inc r11
jmp 0x1400fb863
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1400fc216
movzx ecx, sil
mov edx, Ordinal_50
movabs r8, 0x9f98910228d9d760
add r8, r11
and cl, r8b
sub dl, cl
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, r9
add r11, rcx
lea r10d, [rdx + rdx]
add r10b, sil
add r10b, r8b
inc r11
jmp 0x1400fb863
inc rcx
cmp rax, rcx
jne 0x1400fc245
mov edx, reloc.WLDAP32.dll_Ordinal_32
movabs r8, 0x14e8f96ffa08c940
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, sil
jmp 0x1400fc4c0
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400fc272
movabs rdx, 0xcf912da6e2a04230
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x50
jmp 0x1400fc3b5
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1400fc2a5
mov edx, reloc.WS2_32.dll_recv
movabs r8, 0x8a3961ddcb37bb20
add r8, r11
movzx ecx, r8b
and cl, sil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, sil
jmp 0x1400fc3b2
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x1400fbd4f
movabs r8, 0x44e19614b3cf3410
movzx r10d, sil
add r8, r11
movzx ecx, r8b
and cl, sil
add cl, cl
sub r10b, cl
sub r10b, 0x70
jmp 0x1400fc2fb
movzx r10d, byte [rsp + r11 + 0x40]
movabs r8, 0xea2a9b273ec490c0
add r8, r11
movzx ecx, r8b
and cl, sil
add cl, cl
sub r10b, cl
sub r10b, 0x40
add r10b, sil
add r10b, r8b
movabs rdx, 0x477eb542b3104d38
mov r8d, reloc.WLDAP32.dll_Ordinal_60
add rdx, r11
movzx ecx, dl
and cl, sil
sub r8b, cl
add r8b, r8b
add r8b, dl
add r8b, sil
add r8b, r10b
mov byte [rsp + r11 + 0x40], r8b
jmp 0x1400fc3b2
mov edx, Ordinal_26
movabs r8, 0xa4d2cf5e275c09b0
add r8, r11
movzx ecx, sil
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
sub r10b, byte [rsp + r11 + 0x40]
add r10b, sil
jmp 0x1400fc4c0
movabs rdx, 0x37cffa2eb789b648
mov ecx, 4
jmp 0x1400fc54d
movabs rcx, 0x7d75d89fdc34b78
add rcx, r11
and dil, cl
add dil, dil
sub bl, dil
lea r10d, [rcx + rbx]
sub r10b, 0x48
jmp 0x1400fc3b5
mov ecx, 0x24
movabs rdx, 0x4d2f2953152bd288
add rdx, r11
and dil, dl
sub cl, dil
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
add rax, r9
movzx ecx, r10b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add r11, rdx
inc r11
jmp 0x1400fb863
movabs rcx, 0x628e587772cdeec8
add rcx, r11
and dil, cl
add dil, dil
sub cl, dil
lea r10d, [rsi + rcx]
sub r10b, 0x78
jmp 0x1400fc40f
movabs rdx, 0xed3df009a19efce8
movzx r10d, bl
add rdx, r11
and dil, dl
add dil, dil
sub r10b, dil
sub r10b, 0x58
add r10b, dl
movabs r8, 0x8cd6810bca78d448
movzx ecx, sil
add r8, r11
mov edx, 4
and cl, r8b
inc r9
sub dl, cl
add dl, dl
add dl, sil
add dl, r8b
mov byte [rsp + r11 + 0x40], dl
dec r11
inc r11
jmp 0x1400fb863
mov ecx, Ordinal_30
movabs rdx, 0x3295bbd2b90783f8
add rdx, r11
and dil, dl
sub cl, dil
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
inc r9
dec r11
inc r11
jmp 0x1400fb863
movabs rcx, 0x77ed879bd0700b08
add rcx, r11
and dil, cl
add dil, dil
sub bl, dil
lea r10d, [rcx + rbx]
sub r10b, 0x38
dec r11
inc r11
jmp 0x1400fb863
mov edx, 4
movabs r8, 0x8d4cb6c02e122748
add r8, r11
movzx ecx, r8b
and cl, dil
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, bl
add r10b, r8b
movzx ecx, sil
inc r9
movabs r8, 0x226e9799ba7c628
movzx edx, sil
add r8, r11
and cl, r8b
add cl, cl
sub dl, cl
sub dl, 0x18
add dl, r8b
movzx ecx, dl
mov byte [rsp + r11 + 0x40], cl
add rcx, r9
sub r11, rcx
movzx ecx, sil
inc rax
movabs rdx, 0x5f7b03950ff382a0
add rdx, r11
and cl, dl
add cl, cl
sub sil, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
sub sil, 0x60
add sil, dl
mov byte [rsp + r11 + 0x40], sil
add r11, rcx
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, r9
add r11, rcx
inc r11
jmp 0x1400fb863
movabs rdx, 0x17fc4e525ce33568
mov ecx, reloc.WS2_32.dll_sendto
add rdx, r11
and dil, dl
sub cl, dil
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, r9
add r11, rcx
inc r11
jmp 0x1400fb863
movabs rdx, 0x7cb190436b58ea58
add rdx, r11
movzx ecx, dl
and cl, sil
add cl, cl
sub dl, cl
lea r10d, [rsi + rdx]
sub r10b, 0x68
jmp 0x1400fb860
mov ecx, reloc.WS2_32.dll_sendto
movabs rdx, 0xc2095c0c82c17168
add rdx, r11
movzx eax, dl
and al, sil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, sil
jmp 0x1400fb850
lea rdx, [rbp + 0x1629fe0]
jmp 0x1400fc5d8
lea rdx, [rbp + 0x16e5c58]
jmp 0x1400fc5d8
lea rdx, [rsp + 0x40]
lea rax, [rbp - 8]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movzx r11d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x44], eax
movups xmmword [rbp - 0x54], xmm0
mov word [rbp - 0x40], ax
movabs rsi, 0x883453d7cc11b7ac
mov byte [rbp - 0x3e], al
movabs r12, 0xe1ea1c5f9c00d7fc
mov dword [rbp - 0x60], 0xbaa8c5ee
movabs r14, 0xaa1d67e9b47545d4
mov dword [rbp - 0x5c], 0x46525652
movabs r15, 0xe6492f2a7c7395dc
mov dword [rbp - 0x58], 0xe34e4c5c
movabs r13, 0x2274f66b4471e5e4
nop word [rax + rax]
mov r8, qword [0x14023d108]
mov r9, qword [0x14023d100]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x1400fd391
movzx edi, byte [rbp + rbx - 0x60]
mov r10, rdi
cmp r8, rbx
ja 0x1400fd388
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1400fc6b0
lea rcx, [rbx + r12]
mov rax, rcx
and rax, rdi
imul r11, rax, 0xfffffffffffffffe
add r11, rcx
add r11, rdi
add r11b, 0x1c
jmp 0x1400fc6e0
je 0x1400fd2fb
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fd265
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400fd1fd
lea rax, [r9 + 7]
cmp r8, rax
je 0x1400fd1a6
nop dword [rax]
cmp r9, rbx
ja 0x1400fd37f
lea rax, [r9 + 4]
cmp r8, rax
jae 0x1400fc70f
lea rdx, [rbx + rsi]
mov ecx, Ordinal_41
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400fc750
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400fd185
inc rax
cmp r8, rax
je 0x1400fd15c
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400fd138
lea rax, [r9 + 7]
cmp r8, rax
je 0x1400fd114
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400fd0dd
nop
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x1400fcd97
nop dword [rax]
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x1400fcd6e
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x1400fcd3c
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x1400fcd0d
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x1400fcce9
lea rax, [r9 + 9]
cmp r8, rax
je 0x1400fccc5
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400fcc9c
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x1400fcc73
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x1400fcc4f
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x1400fcc1d
lea r8, [r9 + 4]
lea r9, [r8 + 3]
lea rax, [r9 + 2]
cmp r8, rax
jb 0x1400fd356
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1400fd332
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x1400fc942
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x1400fc927
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x1400fc907
lea rax, [r9 + 9]
cmp r8, rax
jb 0x1400fcbb7
lea rax, [r9 + 6]
cmp r8, rax
jb 0x1400fcb59
lea rax, [r9 + 4]
cmp r8, rax
jb 0x1400fcb07
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x1400fcad6
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x1400fc760
lea r8, [r9 + 0x64]
lea r9, [r8 + 0x42]
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x1400fcaa4
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x1400fca80
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x1400fca57
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x1400fca2e
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x1400fca0a
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x1400fc9e2
lea rax, [r9 + 9]
cmp r8, rax
ja 0x1400fc9b8
lea rax, [r9 + 6]
cmp r8, rax
ja 0x1400fc986
lea rax, [r9 + 4]
cmp r8, rax
ja 0x1400fc95d
lea rax, [r9 + 2]
cmp r8, rax
ja 0x1400fc760
lea r8, [r9 + 1]
lea r9, [r8 + 0x80]
jmp 0x1400fc760
lea rdx, [rbx + r14]
mov ecx, reloc.WLDAP32.dll_Ordinal_26
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400fc750
lea rcx, [rbx + r15]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 4
jmp 0x1400fc6e0
lea rcx, [rbx + r13]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x3c
jmp 0x1400fc681
mov ecx, Ordinal_50
movabs rdx, 0x41a29ebe608dbd60
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400fd1ca
mov ecx, reloc.WS2_32.dll_sendto
movabs rdx, 0x7dce65ff288c0d68
add rdx, rbx
inc r9
movzx eax, dl
dec rbx
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x1400fc672
movabs rcx, 0xb9fa2d3ff08a5d70
add rcx, rbx
dec rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x10
inc rbx
jmp 0x1400fc672
movabs rdx, 0xf625f480b888ad78
movzx r11d, dil
add rdx, rbx
movzx eax, dl
and al, dil
add al, al
sub r11b, al
sub r11b, 0x48
add r11b, dl
jmp 0x1400fd221
movabs rcx, 0x3251bbc18086fd80
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
add r11b, 0x80
jmp 0x1400fd249
mov ecx, 0x24
movabs rdx, 0x6e7d830248854d88
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400fd24c
mov ecx, 8
movabs rdx, 0xaaa94a4310839d90
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
jmp 0x1400fd287
movabs rcx, 0xe6d51183d881ed98
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x28
jmp 0x1400fd2b4
movabs rcx, 0x2300d8c4a0803da0
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r11d, [rdi + rcx]
sub r11b, 0x60
inc rbx
jmp 0x1400fc672
mov ecx, 0xa
movabs rdx, 0xb96e4ae6947c05b4
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
mov byte [rbp + rbx - 0x60], r11b
inc rbx
jmp 0x1400fc672
movabs rcx, 0xf59a12275c7a55bc
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x24
cmp r9, 0x200
jb 0x1400fcafa
mov edx, reloc.WS2_32.dll_sendto
movabs rcx, 0x3474e1828560e68
add rcx, rbx
movzx eax, cl
and al, dil
sub dl, al
add dl, dl
add dl, cl
add dl, dil
lea r11d, [rdx + rdx]
jmp 0x1400fd1ca
movabs rdx, 0x31c5d9682478a5c4
movzx eax, dil
add rdx, rbx
movzx r11d, dil
and al, dl
add al, al
sub r11b, al
sub r11b, 0x5c
add r11b, dl
cmp r8, 6
jae 0x1400fd082
lea rax, [r9 + 5]
cmp r8, rax
jbe 0x1400fcf7b
movabs rcx, 0x5cfd169ff8452eb8
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 8
jmp 0x1400fcb26
movabs rdx, 0x6df1a0a8ec76f5cc
mov ecx, gethostname
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
lea rax, [r9 + r8]
cmp rax, 4
je 0x1400fd0b0
lea rax, [r9 + 0x400]
cmp r8, rax
jbe 0x1400fce87
movabs rcx, 0xd4c8c2c82c33770c
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x54
jmp 0x1400fcb7c
movabs rcx, 0x3139f70ec86a4e08
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r11d, [rdi + rcx]
sub r11b, 0x38
inc rbx
jmp 0x1400fc672
movabs rcx, 0x6d65be4f90689e10
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x70
jmp 0x1400fd2b4
mov ecx, Ordinal_45
movabs rdx, 0xa99185905866ee18
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400fd287
mov ecx, reloc.WS2_32.dll_recv
movabs rdx, 0xe5bd4cd120653e20
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400fd24c
movabs rcx, 0x21e91411e8638e28
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x18
jmp 0x1400fd249
movabs rcx, 0x5e14db52b061de30
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x50
jmp 0x1400fd221
mov ecx, reloc.WLDAP32.dll_Ordinal_60
movabs rdx, 0x9a40a29378602e38
add rdx, rbx
dec rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x1400fc672
mov ecx, reloc.WLDAP32.dll_Ordinal_32
movabs rdx, 0xd66c69d4405e7e40
add rdx, rbx
inc r9
movzx eax, dl
dec rbx
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x1400fc672
mov ecx, 4
movabs rdx, 0x12983115085cce48
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400fd1ca
lea rax, [r9 + 0x80]
cmp r8, rax
jae 0x1400fcdb7
lea rdx, [rbx + r12]
mov ecx, recv
movzx eax, dl
and al, dil
jmp 0x1400fcbcf
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fcdf2
movabs rcx, 0x1068a7af98236f58
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r11d, [rdi + rcx]
sub r11b, 0x68
inc rbx
jmp 0x1400fc672
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fce24
mov ecx, 4
movabs rdx, 0x9811192e0826cf48
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400fd287
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fce51
movabs rcx, 0xe38dc36bb02bdf30
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x50
jmp 0x1400fd221
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400fcbdb
mov ecx, Ordinal_45
movabs rdx, 0x2f0a6da95830ef18
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400fd1ca
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fceb4
movabs rcx, 0x989cfb8764352704
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x1c
jmp 0x1400fd1ca
inc rax
cmp r8, rax
jne 0x1400fceeb
mov ecx, Ordinal_45
movabs rdx, 0x20456d05d43886f4
add rdx, rbx
dec rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x1400fc672
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fcf18
movabs rcx, 0xa7edde84443be6e4
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x3c
jmp 0x1400fd249
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400fcf45
movabs rcx, 0x6bc217437c3d96dc
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 4
jmp 0x1400fd24c
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400fcb7c
mov ecx, reloc.WLDAP32.dll_Ordinal_26
movabs rdx, 0x2f965002b43f46d4
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400fd287
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fcfbb
mov ecx, Ordinal_26
movabs rdx, 0x20d14f5f3046deb0
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x1400fc672
inc rax
cmp r8, rax
jne 0x1400fcfec
mov ecx, 0x34
movabs rdx, 0xe4a5881e68488ea8
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
jmp 0x1400fd2b4
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fd01e
mov ecx, 8
movabs rdx, 0x3022325c104d9e90
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400fd249
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fd050
mov ecx, 0x24
movabs rdx, 0xf3f66b1b484f4e88
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
jmp 0x1400fd221
lea rax, [r9 + 8]
cmp r8, rax
jne 0x1400fcb26
movabs rdx, 0x3f731558f0545e70
movzx r11d, dil
add rdx, rbx
movzx eax, dl
and al, dil
add al, al
sub r11b, al
sub r11b, 0x10
jmp 0x1400fd1c7
mov ecx, Ordinal_50
movabs rdx, 0xc71b86d76057be60
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, byte [rbp + rbx - 0x60]
add r11b, dil
add r11b, dl
jmp 0x1400fd221
movabs rdx, 0x8aefbf9698596e58
movzx eax, dil
add rdx, rbx
movzx r11d, dil
and al, dl
add al, al
sub r11b, al
sub r11b, byte [rbp + rbx - 0x60]
sub r11b, 0x68
add r11b, dl
jmp 0x1400fd287
mov ecx, Ordinal_35
movabs rdx, 0x6aaa5290c420e764
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc rbx
jmp 0x1400fc672
movabs rcx, 0xe301e112541d8774
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x2c
jmp 0x1400fd287
movabs rcx, 0x1f2da8531c1bd77c
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x64
jmp 0x1400fd24c
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movabs rdx, 0x5b596f93e41a2784
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400fd249
movabs rcx, 0x4c088c97041367a4
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x7c
jmp 0x1400fd1ca
mov ecx, 0xa
movabs rdx, 0xc4601b18941007b4
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
movabs rdx, 0xe5316a77c456e664
mov ecx, Ordinal_35
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
add cl, cl
add cl, dl
add cl, dil
mov byte [rbp + rbx - 0x60], cl
inc r9
dec rbx
inc rbx
jmp 0x1400fc672
mov ecx, gethostname
movabs rdx, 0x78e370daec0af7cc
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
movabs rdx, 0xa905a336fc58965c
mov ecx, 0x3e
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
add cl, dil
mov byte [rbp + rbx - 0x60], cl
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1400fc672
movabs rcx, 0x2d66c69d4405e7e4
mov rdi, r10
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x3c
inc r9
movabs rcx, 0x6cd9dbf6345a4654
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
sub cl, 0x4c
add cl, dil
movzx eax, cl
mov byte [rbp + rbx - 0x60], al
add rax, r9
sub rbx, rax
movzx eax, dil
inc r8
movabs rcx, 0x4ec3f855d05b1e50
add rcx, rbx
and al, cl
add al, al
sub dil, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub dil, 0x30
add dil, cl
mov byte [rbp + rbx - 0x60], dil
add rbx, rax
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400fc672
mov ecx, Ordinal_45
movabs rdx, 0xa5be551ed40287f4
add rdx, rbx
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400fc672
movabs rcx, 0x5ea0bdac0c7035ec
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x74
jmp 0x1400fc670
mov ecx, Ordinal_45
movabs rdx, 0x9acc84ecd46e85f4
add rdx, rbx
movzx eax, dl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1400fc660
lea rdx, [rbp + 0x1511cf0]
jmp 0x1400fd395
lea rdx, [rbp + 0x51f4ec]
jmp 0x1400fd395
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [rbp - 0x10]
call fcn.1401991a8
movzx r10d, byte [rsp + 0x30]
mov rsi, rax
xor eax, eax
mov dword [rbp - 0x38], 0xcfa1934
xorps xmm0, xmm0
mov dword [rbp - 0x1c], eax
mov word [rbp - 0x18], ax
movabs rdi, 0x4348cc0139d8b9c5
mov byte [rbp - 0x16], al
movabs r12, 0x27c6839e88d98ef1
mov dword [rbp - 0x34], 0xf4fcf0
movabs r14, 0x98c977144e209cdb
mov dword [rbp - 0x30], 0x6b0006f2
movabs r15, 0x493c6fd73c6d7ef9
movups xmmword [rbp - 0x2c], xmm0
movabs r13, 0xf9af689a2aba6117
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x14023d108]
mov r9, qword [0x14023d100]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x1400fe1cf
movzx r11d, byte [rbp + rbx - 0x38]
mov rdx, r11
cmp r8, rbx
ja 0x1400fe1c6
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1400fd481
lea rcx, [rbx + r12]
mov r10, rdx
movzx eax, cl
and al, dl
add al, al
sub r10b, al
add r10b, 0x69
add r10b, cl
jmp 0x1400fd4a1
je 0x1400fe142
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fe118
lea rax, [r9 + 2]
cmp r8, rax
je 0x1400fe0eb
cmp r9, rbx
ja 0x1400fe1bd
lea rax, [r9 + 0x3e8]
cmp r8, rax
jae 0x1400fd4d2
lea rdx, [rbx + rdi]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
sub r10b, 0x63
add r10b, dl
jmp 0x1400fd512
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400fe09d
inc rax
cmp r8, rax
je 0x1400fe073
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400fe011
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fdff0
lea rax, [r9 + 9]
cmp r8, rax
je 0x1400fdfbf
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x1400fdb60
nop
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x1400fdb37
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x1400fdb0a
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x1400fdae0
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x1400fdabc
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x1400fda93
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400fda6a
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x1400fda47
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fda23
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x1400fd9f1
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x1400fd520
lea r8, [r9 + 0x40]
lea r9, [r8 + 0x400]
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x1400fe198
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x1400fe173
lea rax, [r9 + 4]
cmp r8, rax
jb 0x1400fd710
lea rax, [r9 + 8]
cmp r8, rax
jb 0x1400fd6f1
lea rax, [r9 + 1]
cmp r8, rax
jb 0x1400fd6d2
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x1400fd993
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x1400fd92e
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x1400fd8db
lea rcx, [r9 + 0x20]
cmp r8, rcx
jb 0x1400fd8ae
lea rax, [r9 + 5]
cmp r8, rax
jb 0x1400fd520
lea r9, [rcx + 9]
mov r8, rcx
lea rax, [r9 + 5]
cmp rcx, rax
ja 0x1400fd877
lea rax, [r9 + 0x5a]
cmp rcx, rax
ja 0x1400fd84e
lea rax, [r9 + 2]
cmp rcx, rax
ja 0x1400fd826
lea rax, [r9 + 0x61]
cmp rcx, rax
ja 0x1400fd801
lea rax, [r9 + 0x64]
cmp rcx, rax
ja 0x1400fd7dc
lea rax, [r9 + 0x3e8]
cmp rcx, rax
ja 0x1400fd7b3
lea rax, [r9 + 0x28]
cmp rcx, rax
ja 0x1400fd784
lea rax, [r9 + 6]
cmp rcx, rax
ja 0x1400fd752
lea rcx, [r9 + 0x2a]
cmp r8, rcx
ja 0x1400fd72e
lea rax, [r9 + 3]
cmp r8, rax
ja 0x1400fd520
mov r8, rcx
lea r9, [rcx + 0x7a]
jmp 0x1400fd520
lea rdx, [rbx + r14]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
add r10b, 3
add r10b, dl
jmp 0x1400fd512
lea rdx, [rbx + r15]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
add r10b, 0x31
add r10b, dl
jmp 0x1400fd4a1
lea rdx, [rbx + r13]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
add dl, 0x5f
sub r10b, al
add r10b, dl
jmp 0x1400fd452
movabs rcx, 0x1a466009cec5ce28
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x18
jmp 0x1400fe0bc
mov ecx, listen
movabs rdx, 0xcab958ccbd12b046
add rdx, rbx
movzx eax, r11b
and al, dl
inc r9
sub cl, al
dec rbx
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x1400fd442
mov ecx, Ordinal_35
movabs rdx, 0x7b2c518fab5f9264
add rdx, rbx
movzx eax, r11b
and al, dl
dec rbx
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x1400fd442
mov ecx, reloc.WS2_32.dll_gethostname
movabs rdx, 0x2b9f4a5299ac7482
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400fe030
movzx eax, r11b
movabs rcx, 0xdc12431587f956a0
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x60
jmp 0x1400fe057
movzx eax, r11b
movabs rcx, 0x8c853bd8764638be
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x32
jmp 0x1400fe05a
movabs rdx, 0x3cf8349b64931adc
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 4
add r10b, dl
jmp 0x1400fdf47
mov ecx, reloc.WS2_32.dll_setsockopt
movabs rdx, 0xed6b2d5e52dffcfa
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400fdf77
movzx eax, r11b
mov ecx, Ordinal_45
movabs rdx, 0x9dde2621412cdf18
add rdx, rbx
and al, dl
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x1400fd442
movzx eax, r11b
movabs rcx, 0xd6fd940894ed1463
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
add r10b, 0x4b
mov byte [rbp + rbx - 0x38], r10b
inc rbx
jmp 0x1400fd442
movabs rdx, 0x87708ccb8339f681
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
add r10b, 0x79
add r10b, dl
cmp r9, 9
jb 0x1400fd8ce
movzx ecx, r11b
movabs rdx, 0xd918712a86aef406
add rdx, rbx
movzx eax, r11b
and al, dl
add al, al
sub cl, al
add cl, dl
lea r10d, [rcx*2 - 0x54]
jmp 0x1400fe0bc
movabs rdx, 0x37e3858e7186d89f
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x59
add r10b, dl
cmp r8, 0x400
jae 0x1400fdef1
lea rax, [r9 + 0x80]
cmp r8, rax
jbe 0x1400fdd84
movabs rdx, 0xbd9628c7d5afc932
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x5e
jmp 0x1400fd8fb
movabs rcx, 0xe8567e515fd3babd
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x2b
lea rax, [r9 + r8]
cmp rax, 5
je 0x1400fdf1e
lea rax, [r9 + 2]
cmp r8, rax
jbe 0x1400fdc5e
movabs rcx, 0x7a4d5cc69bd70f6d
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 5
jmp 0x1400fd951
movabs rcx, 0x93b4c8075b145a9e
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r10d, [r11 + rcx]
sub r10b, 0x52
inc rbx
jmp 0x1400fd442
movabs rcx, 0x4427c0ca49613cbc
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x24
jmp 0x1400fdf77
mov ecx, 5
movabs rdx, 0xf49ab98d37ae1eda
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
jmp 0x1400fdf41
mov ecx, Ordinal_30
movabs rdx, 0xa50db25025fb00f8
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fe05a
mov ecx, 0x33
movabs rdx, 0x5580ab131447e316
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fe057
movabs rcx, 0x5f3a3d60294c534
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x6c
jmp 0x1400fe030
movabs rcx, 0xb6669c98f0e1a752
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x3e
inc rbx
jmp 0x1400fd442
movabs rcx, 0x66d9955bdf2e8970
inc r9
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x10
inc rbx
jmp 0x1400fd442
mov ecx, reloc.WS2_32.dll_ntohs
movabs rdx, 0x174c8e1ecd7b6b8e
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fe0bc
lea rax, [r9 + 0x10]
cmp r8, rax
jae 0x1400fdb84
lea rcx, [rbx + r12]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x69
jmp 0x1400fd9b2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fdbc4
mov ecx, Ordinal_30
movabs rdx, 0x8691980273b1738a
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x1400fd442
inc rax
cmp r8, rax
jne 0x1400fdbf5
mov ecx, 6
movabs rdx, 0xd61e9f3f8564916c
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fdf77
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fdc22
movabs rcx, 0xc4c5b4f6ba7deb12
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x7e
jmp 0x1400fe057
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fd9b2
mov ecx, reloc.WS2_32.dll_send
movabs rdx, 0x63dfc370dde426d6
add rdx, rbx
dec rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
inc rbx
jmp 0x1400fd442
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fdc8b
movabs rcx, 0xc9da6403ad8a2d4f
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x29
jmp 0x1400fe0bc
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fdcbe
movabs rcx, 0x68f4727dd0f06913
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x7b
inc rbx
jmp 0x1400fd442
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fdceb
movabs rcx, 0x579b88350609c2b9
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0xf
jmp 0x1400fe05a
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fdd18
movabs rcx, 0xa7288f7217bce09b
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x3d
jmp 0x1400fdf47
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fdd45
movabs rcx, 0xf6b596af296ffe7d
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x6b
jmp 0x1400fdf77
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400fd951
movabs rcx, 0x46429dec3b231c5f
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r10d, [r11 + rcx]
add r10b, 0x67
inc rbx
jmp 0x1400fd442
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1400fddc4
movzx eax, r11b
mov ecx, Ordinal_60
movabs rdx, 0xd233004e762e714
add rdx, rbx
and al, dl
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x1400fd442
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fddf6
mov ecx, recv
movabs rdx, 0xac3d3e7f0ac922d8
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x1400fdf47
lea rax, [rcx + 1]
cmp r8, rax
jne 0x1400fde24
movzx eax, r11b
movabs rcx, 0xfbca45bc1c7c40ba
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x16
jmp 0x1400fe05a
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fde52
movzx eax, r11b
movabs rcx, 0x4b574cf92e2f5e9c
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x44
jmp 0x1400fe057
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400fde83
movabs rdx, 0x9ae454363fe27c7e
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x72
add r10b, dl
jmp 0x1400fe030
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fdebb
mov ecx, Ordinal_50
movabs rdx, 0xea715b7351959a60
add rdx, rbx
movzx eax, r11b
and al, dl
dec rbx
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x1400fd442
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fd8fe
mov ecx, 2
movabs rdx, 0x898b69ed74fbd624
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x1400fe0bc
movzx r10d, byte [rbp + rbx - 0x38]
movabs rdx, 0x28a57867986211e8
add rdx, rbx
movzx eax, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x58
add r10b, r11b
add r10b, dl
jmp 0x1400fe030
mov ecx, 0x3d
movabs rdx, 0x78327fa4aa152fca
add rdx, rbx
movzx eax, dl
and al, r11b
sub cl, al
lea r10d, [rcx + rcx]
sub r10b, byte [rbp + rbx - 0x38]
add r10b, dl
add r10b, r11b
movzx eax, r11b
inc r9
movabs rdx, 0x9ff9034332eebebb
movzx ecx, r11b
add rdx, rbx
and al, dl
add al, al
sub cl, al
sub cl, 0x1d
add cl, dl
movzx eax, cl
mov byte [rbp + rbx - 0x38], al
add rax, r9
sub rbx, rax
inc r8
movabs rdx, 0xc7bf86e1bbc84dac
add rdx, rbx
mov ecx, Ordinal_41
movzx eax, dl
and al, r11b
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, dl
add cl, r11b
mov byte [rbp + rbx - 0x38], cl
add rbx, rax
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400fd442
movabs rcx, 0xf3e0d26d924c6b7
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
lea r10d, [r11 + rcx]
dec r10b
inc rbx
jmp 0x1400fd442
movabs rcx, 0xd109f03292584f2f
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x49
jmp 0x1400fe057
movabs rcx, 0x817ce8f580a5314d
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x1b
movabs rdx, 0x506bfc06213ba0d9
movzx eax, r11b
add rdx, rbx
movzx ecx, r10b
and al, dl
add al, al
sub cl, al
add cl, 0x11
add cl, r11b
add cl, dl
mov byte [rbp + rbx - 0x38], cl
add r8, r9
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1400fd442
movabs rcx, 0x31efe1b86ef2136b
add rcx, rbx
dec rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x13
inc rbx
jmp 0x1400fd442
movabs rcx, 0x92d5d33e4b8bd7a7
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x6f
movabs rcx, 0xdef4c90f8882f7
inc r9
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, 0x3f
add cl, r11b
mov byte [rbp + rbx - 0x38], cl
dec rbx
inc rbx
jmp 0x1400fd442
movabs rcx, 0xa42ebd8716727e01
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 7
inc r9
dec rbx
inc rbx
jmp 0x1400fd442
movabs rcx, 0x54a1b64a04bf601f
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x27
dec rbx
inc rbx
jmp 0x1400fd442
movabs rcx, 0x77538adb9a8cacd3
add rcx, rbx
movzx eax, cl
and al, dl
add al, al
sub dl, al
lea r10d, [rcx + rdx]
add r10b, 0x3b
movzx eax, byte [rbp + rbx - 0x38]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400fd442
movzx eax, r11b
movabs rcx, 0xaa22615d19074335
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x73
jmp 0x1400fd440
movzx eax, r11b
movabs rcx, 0x5a955a2007542553
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x45
jmp 0x1400fd430
lea rdx, [rbp + 0x16c09b4]
jmp 0x1400fe1d3
lea rdx, [rbp + 0x10598a5]
jmp 0x1400fe1d3
lea rdx, [rbp - 0x38]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [rsi + 0x10]
lea rbx, [rsi + 0x18]
test eax, eax
je 0x1400fe221
mov edi, eax
nop
lea r9, [rbx + 8]
mov r8, rbx
lea rdx, [rbp]
lea rcx, [0x14023ce58]
call fcn.1400590c0
add rbx, 0x14
sub rdi, 1
jne 0x1400fe200
mov rcx, rsi
call fcn.140198e14
mov rcx, qword [rbp - 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.140198db0
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret