Function at 0x14010d630
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Query or enumerate registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x140278800]
xor rax, rsp
mov qword [rbp + 0x18], rax
movzx r10d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp - 0x7a], rax
movups xmmword [rsp + 0x76], xmm0
mov dword [rbp - 0x72], eax
movabs rsi, 0x54548402d9b946ff
mov byte [rbp - 0x6e], al
movabs r12, 0x28964f6dd99b1bc3
mov dword [rsp + 0x40], 0x5f62525e
movabs r14, 0x99d20a5273812e1
mov dword [rsp + 0x44], 0x506e5e6b
movabs r15, 0xb87081c97401db5b
mov dword [rsp + 0x48], 0x66576b7a
movabs r13, 0x6743e2edc0cba3d5
mov dword [rsp + 0x4c], 0x4a767a6b
mov dword [rsp + 0x50], 0x73437649
mov dword [rsp + 0x54], 0x12177066
mov dword [rsp + 0x58], 0xab1f6612
mov dword [rsp + 0x5c], 0x26295a78
mov dword [rsp + 0x60], 0x5c5d2329
mov dword [rsp + 0x64], 0x574c592f
mov dword [rsp + 0x68], 0x56532425
mov dword [rsp + 0x6c], 0x50843159
mov dword [rsp + 0x70], 0x31313649
mov word [rsp + 0x74], 0xad39
nop dword [rax]
mov r8, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor r11d, r11d
cmp r11, 0x53
jae 0x14010e41d
movzx edi, byte [rsp + r11 + 0x40]
mov ebx, edi
cmp r8, r11
ja 0x14010e414
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010d771
lea rcx, [r11 + r12]
mov rax, rcx
and rax, rbx
imul r10, rax, 0xfffffffffffffffe
add r10, rcx
add r10, rbx
sub r10b, 0x55
jmp 0x14010d790
je 0x14010e390
inc rax
cmp r8, rax
je 0x14010e359
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010e30b
cmp r9, r11
ja 0x14010e40b
lea rax, [r9 + 0x3e8]
cmp r8, rax
jae 0x14010d7c0
lea rdx, [r11 + rsi]
movzx r10d, bl
movzx eax, dl
and al, bl
add al, al
sub r10b, al
add r10b, 7
add r10b, dl
jmp 0x14010d800
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010e2ee
inc rax
cmp r8, rax
je 0x14010e2c5
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010e29f
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010e27c
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010e1e3
lea rax, [r9 + r8]
cmp rax, r11
jbe 0x14010de59
nop dword [rax]
lea rcx, [r9 + 8]
cmp r8, rcx
je 0x14010de30
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14010de03
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14010ddd4
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14010ddab
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010dd84
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x14010dd5b
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010dd32
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14010dd0a
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x14010dcd2
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x14010d810
mov r8, rcx
lea r9, [rcx + 0x5a]
lea rcx, [r9 + 0x80]
cmp r8, rcx
jb 0x14010e3e6
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x14010e3c1
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x14010d9f7
lea rax, [r9 + 2]
cmp r8, rax
jb 0x14010d9d9
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14010d9bb
lea rax, [r9 + 4]
cmp r8, rax
jb 0x14010dc74
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x14010dc12
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x14010dbbf
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x14010db92
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x14010d810
mov r8, rcx
lea r9, [rcx + 9]
lea rcx, [r9 + 0x2a]
cmp r8, rcx
ja 0x14010db5e
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x14010db36
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14010db0d
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x14010dae8
lea rax, [r9 + 4]
cmp r8, rax
ja 0x14010dac0
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x14010da97
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14010da6c
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x14010da3e
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x14010da15
lea rax, [r9 + 9]
cmp r8, rax
ja 0x14010d810
mov r8, rcx
lea r9, [rcx + 1]
jmp 0x14010d810
lea rdx, [r11 + r14]
movzx eax, bl
and al, dl
movzx r10d, bl
add al, al
sub r10b, al
sub r10b, 0x27
add r10b, dl
jmp 0x14010d800
lea rdx, [r11 + r15]
movzx eax, bl
and al, dl
movzx r10d, bl
add al, al
sub r10b, al
sub r10b, 0x7d
add r10b, dl
jmp 0x14010d790
lea rdx, [r11 + r13]
movzx eax, bl
and al, dl
movzx r10d, bl
add al, al
sub r10b, al
add r10b, 0x2d
add r10b, dl
jmp 0x14010d745
mov ecx, Ordinal_32
movabs rdx, 0xa2a42016cdca37f8
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x14010e329
movzx eax, dil
movabs rcx, 0x5177813b1a940072
add rcx, r11
inc r9
and al, cl
dec r11
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x1e
inc r11
jmp 0x14010d733
movzx eax, dil
movabs rcx, 0x4ae25f675dc8ec
add rcx, r11
dec r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x74
inc r11
jmp 0x14010d733
mov ecx, reloc.WLDAP32.dll_Ordinal_27
movabs rdx, 0xaf1e4383b4279166
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14010e18a
movzx eax, dil
movabs rcx, 0x5df1a4a800f159e0
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x20
add r8, r9
jmp 0x14010e377
movzx eax, dil
movabs rcx, 0xcc505cc4dbb225a
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x76
jmp 0x14010e377
mov ecx, reloc.WLDAP32.dll_Ordinal_26
movabs rdx, 0xbb9866f09a84ead4
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14010e201
movabs rdx, 0x6a6bc814e74eb34e
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x22
add r10b, dl
jmp 0x14010e232
movzx eax, dil
movabs rcx, 0x193f293934187bc8
add rcx, r11
and al, cl
add al, al
sub dil, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rdi]
sub r10b, 0x78
inc r11
jmp 0x14010d733
movzx eax, dil
movabs rcx, 0x4e4f9c13f410f0f9
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
add r10b, 0x31
mov byte [rsp + r11 + 0x40], r10b
inc r11
jmp 0x14010d733
movabs rdx, 0xfd22fd3840dab973
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x25
add r10b, dl
cmp r9, 0x28
jb 0x14010dbb2
mov ecx, reloc.WS2_32.dll_recvfrom
movabs rdx, 0x2be3a5c4b3cd0fb2
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
add cl, cl
add cl, dil
add cl, dl
lea r10d, [rcx + rcx]
jmp 0x14010e329
movabs rdx, 0xabf65e5c8da481ed
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x7b
add r10b, dl
cmp r8, 0x400
jae 0x14010e161
lea rax, [r9 + 0x20]
cmp r8, rax
jbe 0x14010e054
movabs rdx, 0x25712fb3aee476
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x3a
jmp 0x14010dbdf
movabs rcx, 0x5ac9bf80da6e4a67
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
add r10b, 0x2f
lea rax, [r9 + r8]
cmp rax, 0x10
je 0x14010e1b9
lea rcx, [r9 + 2]
cmp r8, rcx
jbe 0x14010df87
movabs rcx, 0xabd0ed2cd9f59d77
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x41
jmp 0x14010dc35
mov ecx, reloc.WS2_32.dll_setsockopt
movabs rdx, 0xf9fb18111a57a9fa
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
inc r11
jmp 0x14010d733
movabs rdx, 0xa8ce793567217274
movzx r10d, dil
add rdx, r11
movzx eax, dl
and al, dil
add al, al
sub r10b, al
sub r10b, 0x2c
add r10b, dl
jmp 0x14010e232
mov ecx, 0x3f
movabs rdx, 0x57a1da59b3eb3aee
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x14010e201
mov ecx, reloc.WS2_32.dll_sendto
movabs rdx, 0x6753b7e00b50368
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14010e377
movabs rcx, 0xb5489ca24d7ecbe2
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x2e
add r8, r9
jmp 0x14010e377
mov ecx, 0x3e
movabs rdx, 0x641bfdc69a48945c
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14010e18a
mov ecx, reloc.WS2_32.dll_send
movabs rdx, 0x12ef5eeae7125cd6
add rdx, r11
dec r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
inc r11
jmp 0x14010d733
movabs rcx, 0xc1c2c00f33dc2550
inc r9
add rcx, r11
dec r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x30
inc r11
jmp 0x14010d733
mov ecx, 0x3d
movabs rdx, 0x7096213380a5edca
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14010e329
lea rax, [r9 + 0x10]
cmp r8, rax
jae 0x14010de7c
lea rcx, [r11 + r12]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r10d, [rcx + rbx]
sub r10b, 0x55
jmp 0x14010dc93
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010debd
mov ecx, 7
movabs rdx, 0xa8a90805b3728dfe
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
inc r11
jmp 0x14010d733
inc rax
cmp r8, rax
jne 0x14010dee9
movabs rcx, 0x4b0245bd19defd0a
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x46
jmp 0x14010e201
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010df1e
mov ecx, 0x33
movabs rdx, 0xed5b8374804b6c16
add rdx, r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
add r8, r9
jmp 0x14010e377
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010df4b
movabs rcx, 0x3e8822503381a39c
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x44
jmp 0x14010e18a
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010dc93
mov ecx, 9
movabs rdx, 0x8fb4c12be6b7db22
add rdx, r11
dec r11
movzx eax, dl
and al, dil
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
inc r11
jmp 0x14010d733
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010dfb4
movabs rcx, 0xfcfd8c088d2bd4fd
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
add r10b, 0x15
jmp 0x14010e329
inc rax
cmp r8, rax
jne 0x14010dfe6
movabs rcx, 0x9f56c9bff3984409
add rcx, r11
dec r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x3f
inc r11
jmp 0x14010d733
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010e013
movabs rcx, 0xf083689ba6ce7b8f
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
add r10b, 0x17
jmp 0x14010e18a
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14010dc35
movzx eax, dil
movabs rcx, 0x866282e626dd912d
add rcx, r11
and al, cl
add al, al
sub dil, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rdi]
sub r10b, 0x3b
inc r11
jmp 0x14010d733
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010e095
movzx eax, dil
mov ecx, recv
movabs rdx, 0x5152100b66e51bfc
add rdx, r11
and al, dl
sub cl, al
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
inc r11
jmp 0x14010d733
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010e0c6
movabs rdx, 0xf3ab4dc2cd518b08
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x38
add r10b, dl
jmp 0x14010e201
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010e0f4
movabs rdx, 0xe7312a55e6f4319a
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x36
jmp 0x14010e187
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010e12c
mov ecx, reloc.WS2_32.dll_recv
movabs rdx, 0x385dc9319a2a6920
add rdx, r11
movzx eax, dil
and al, dl
dec r11
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
inc r11
jmp 0x14010d733
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14010dbe2
movabs rdx, 0xdab706e90096d82c
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, 0x34
add r10b, dl
jmp 0x14010e329
mov ecx, reloc.WLDAP32.dll_Ordinal_60
movabs rdx, 0x7d1044a067034738
add rdx, r11
movzx eax, dil
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, byte [rsp + r11 + 0x40]
add r10b, dil
add r10b, dl
movzx eax, dil
movabs rcx, 0xa5a6940e409e62fb
add rcx, r11
and al, cl
add al, al
sub dil, al
add dil, 0x23
add dil, cl
add dil, r10b
mov byte [rsp + r11 + 0x40], dil
add r8, r9
jmp 0x14010e377
movabs rdx, 0xce3ce37c1a397ebe
movzx eax, dil
add rdx, r11
movzx r10d, dil
and al, dl
add al, al
sub r10b, al
sub r10b, byte [rsp + r11 + 0x40]
sub r10b, 0x32
add r10b, dl
jmp 0x14010e201
movabs rcx, 0x8c8cdc04c034cba9
movzx eax, bl
add rcx, r11
and al, cl
add al, al
sub cl, al
lea r10d, [rdi + rcx]
add r10b, 0x61
movzx eax, dil
inc r9
movabs rdx, 0xf6d332e9f3d49a81
movzx ecx, dil
add rdx, r11
and al, dl
add al, al
sub cl, al
add cl, 0x79
add cl, dl
movzx eax, cl
mov byte [rsp + r11 + 0x40], al
add rax, r9
sub r11, rax
movzx eax, dil
inc r8
movabs rdx, 0x1f698257cd6fb644
mov ecx, reloc.WS2_32.dll_select
add rdx, r11
and al, dl
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, dil
add cl, dl
mov byte [rsp + r11 + 0x40], cl
add r11, rax
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
inc r11
jmp 0x14010d733
movzx eax, bl
movabs rcx, 0x3b603d290cfe9423
add rcx, r11
and al, cl
add al, al
sub bl, al
lea r10d, [rcx + rbx]
add r10b, 0xb
jmp 0x14010e377
movabs rcx, 0xea339e4d59c85c9d
movzx eax, bl
add rcx, r11
and al, cl
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x4b
add r8, r9
jmp 0x14010e377
movzx eax, bl
movabs rcx, 0x47da6095f35bed91
add rcx, r11
dec r11
and al, cl
add al, al
sub bl, al
lea r10d, [rcx + rbx]
add r10b, 9
inc r11
jmp 0x14010d733
movabs rax, 0xa58122de8cef7e85
add rax, r11
and bl, al
add bl, bl
sub al, bl
lea r10d, [rdi + rax]
add r10b, 0x5d
jmp 0x14010e329
movabs rcx, 0x327e52726830f79
movzx eax, bl
add rcx, r11
and al, cl
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x4f
movabs rcx, 0x5479f5328d682b75
add rcx, r11
movzx eax, cl
and al, dil
add al, al
sub cl, al
sub cl, 0x33
add cl, dil
mov byte [rsp + r11 + 0x40], cl
inc r9
dec r11
inc r11
jmp 0x14010d733
movzx eax, bl
movabs rcx, 0x6d48cadca673f9db
add rcx, r11
and al, cl
add al, al
sub bl, al
lea r10d, [rcx + rbx]
add r10b, 3
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
inc r11
jmp 0x14010d733
movzx eax, bl
movabs rcx, 0x79c2ee498cd15349
add rcx, r11
and al, cl
add al, al
sub bl, al
lea r10d, [rcx + rbx]
inc r10b
movzx eax, byte [rsp + r11 + 0x40]
add rax, r9
add r11, rax
inc r11
jmp 0x14010d733
movzx eax, dil
movabs rcx, 0x161744120d956c4f
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x29
jmp 0x14010d730
movzx eax, dil
movabs rcx, 0xc4eaa5365a5f34c9
add rcx, r11
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x7f
jmp 0x14010d720
lea rdx, [rbp + 0x176a644]
jmp 0x14010e422
lea rdx, [rbp + 0x91c207]
jmp 0x14010e422
lea rdx, [rsp + 0x40]
lea rax, [rbp - 8]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movzx r10d, byte [rsp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x44], eax
movups xmmword [rbp - 0x54], xmm0
mov word [rbp - 0x40], ax
movabs rdi, 0x810b351f2bb36ad3
mov byte [rbp - 0x3e], al
movabs rsi, 0xdc3dfe177697618d
mov dword [rbp - 0x60], 0x182a0d58
movabs r15, 0xd5620eb8576a1147
mov dword [rbp - 0x5c], 0x1c102814
movabs r14, 0x3179e0a6c7c33eff
mov dword [rbp - 0x58], 0xa304062a
movabs r12, 0x86b5c33618ef1c71
movabs r13, 0x5d958b88aec7340a
nop dword [rax + rax]
mov r8, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x14010f26e
movzx r11d, byte [rbp + rbx - 0x60]
mov rdx, r11
cmp r8, rbx
ja 0x14010f265
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010e501
lea rcx, [rbx + r15]
mov rax, rcx
and rax, rdx
imul r10, rax, 0xfffffffffffffffe
add r10, rcx
add r10, rdx
add r10b, 0xf
jmp 0x14010e530
je 0x14010f1e1
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010f14b
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010f0e5
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010f097
nop
cmp r9, rbx
ja 0x14010f25c
lea rax, [r9 + 0x1000]
cmp r8, rax
jae 0x14010e561
lea rdx, [rbx + rdi]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
add r10b, 0x3b
add r10b, dl
jmp 0x14010e5b0
lea rcx, [r9 + 1]
cmp r8, rcx
je 0x14010f076
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010f04b
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010f027
lea rax, [rcx + 1]
cmp r8, rax
je 0x14010f002
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010efdd
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010efaa
nop
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x14010ec13
nop dword [rax]
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x14010ebea
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14010ebbc
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x14010eb91
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010eb6d
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010eb48
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010eb1f
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14010eaf6
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x14010eacd
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14010ea96
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010e5c0
lea r8, [r9 + 0x2a]
lea r9, [r8 + 0x5a]
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x14010f237
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x14010f212
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14010e7b8
lea rax, [r9 + 9]
cmp r8, rax
jb 0x14010e799
lea rax, [r9 + 6]
cmp r8, rax
jb 0x14010e77a
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x14010ea33
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x14010e9ce
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x14010e97b
lea rax, [r9 + 5]
cmp r8, rax
jb 0x14010e94e
lea rax, [r9 + 3]
cmp r8, rax
jb 0x14010e5c0
lea r8, [r9 + 2]
lea r9, [r8 + 1]
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14010e91b
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14010e8f2
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x14010e8c9
lea rax, [r9 + 1]
cmp r8, rax
ja 0x14010e8a0
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x14010e877
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14010e84e
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x14010e823
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14010e7fe
lea rax, [r9 + 8]
cmp r8, rax
ja 0x14010e7d6
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x14010e5c0
lea r8, [r9 + 0x1000]
lea r9, [r8 + 0x400]
jmp 0x14010e5c0
lea rdx, [rbx + rsi]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
add r10b, 0x25
add r10b, dl
jmp 0x14010e5b0
lea rdx, [rbx + r14]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
add r10b, 7
add r10b, dl
jmp 0x14010e530
lea rdx, [rbx + r12]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub dl, 0x17
sub r10b, al
add r10b, dl
jmp 0x14010e4d2
movabs rdx, 0x859a8f95d9b5698
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x28
add r10b, dl
jmp 0x14010f0b6
lea rcx, [rbx + r13]
movzx eax, r11b
and al, cl
inc r9
add al, al
dec rbx
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x46
inc rbx
jmp 0x14010e4c2
movzx eax, r11b
movabs rcx, 0xb2d16e17fff3117c
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x64
inc rbx
jmp 0x14010e4c2
mov ecx, 0x3f
movabs rdx, 0x80d50a7511eeeee
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14010f108
mov ecx, Ordinal_50
movabs rdx, 0x5d493336a24acc60
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14010f12f
mov ecx, reloc.WLDAP32.dll_Ordinal_33
movabs rdx, 0xb28515c5f376a9d2
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14010f132
mov ecx, reloc.WS2_32.dll_select
movabs rdx, 0x7c0f85544a28744
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14010f16c
mov ecx, 3
movabs rdx, 0x5cfcdae495ce64b6
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14010f199
movzx eax, r11b
movabs rcx, 0xb238bd73e6fa4228
add rcx, rbx
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + r11]
sub r10b, 0x18
inc rbx
jmp 0x14010e4c2
movzx eax, r11b
movabs rcx, 0x874e73da31e7ebc5
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x63
mov byte [rbp + rbx - 0x60], r10b
inc rbx
jmp 0x14010e4c2
movabs rdx, 0xdc8a56698313c937
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
add r10b, 0x7f
add r10b, dl
cmp r9, 0x7a
jb 0x14010e96e
movzx ecx, r11b
movabs rdx, 0x511dd72d442e24a
add rdx, rbx
movzx eax, r11b
and al, dl
add al, al
sub cl, al
add cl, dl
lea r10d, [rcx*2 - 0xc]
jmp 0x14010f0b6
movabs rdx, 0x31c638f8d43fa6a9
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
add r10b, 0x61
add r10b, dl
cmp r8, 0x1000
jae 0x14010ef4e
lea rax, [r9 + 0x400]
cmp r8, rax
jbe 0x14010ee45
movabs rdx, 0x5968b70bfff988be
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x32
jmp 0x14010e99b
movabs rdx, 0x87021b88256b841b
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
add r10b, 0x43
add r10b, dl
lea rax, [r9 + r8]
cmp rax, 2
je 0x14010ef7c
lea rax, [r9 + 1]
cmp r8, rax
jbe 0x14010ed7b
movabs rdx, 0xd85d81ecd4461deb
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x6d
jmp 0x14010e9ee
movzx eax, r11b
mov ecx, Ordinal_50
movabs rdx, 0x6433ebb063480f2
add rdx, rbx
and al, dl
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14010e4c2
mov ecx, Ordinal_35
movabs rdx, 0x5b7f214a57605e64
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14010f199
mov ecx, reloc.WS2_32.dll_send
movabs rdx, 0xb0bb03d9a88c3bd6
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14010f16c
mov ecx, 4
movabs rdx, 0x5f6e668f9b81948
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14010f132
movzx eax, r11b
movabs rcx, 0x5b32c8f84ae3f6ba
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x16
jmp 0x14010f12f
movabs rcx, 0xb06eab879c0fd42c
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x34
jmp 0x14010f108
movzx eax, r11b
movabs rcx, 0x5aa8e16ed3bb19e
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x52
inc rbx
jmp 0x14010e4c2
movzx eax, r11b
movabs rcx, 0x5ae670a63e678f10
add rcx, rbx
inc r9
and al, cl
dec rbx
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x70
inc rbx
jmp 0x14010e4c2
mov ecx, reloc.WS2_32.dll_gethostname
movabs rdx, 0xb02253358f936c82
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14010f0b6
lea rax, [r9 + 0x41]
cmp r8, rax
jae 0x14010ec38
lea rdx, [rbx + r15]
movzx eax, r11b
and al, dl
movzx r10d, r11b
add al, al
sub r10b, al
add r10b, 0xf
jmp 0x14010ea53
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010ec78
movzx eax, r11b
mov ecx, Ordinal_60
movabs rdx, 0x2166a3e5766d5a6
add rdx, rbx
and al, dl
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14010e4c2
inc rax
cmp r8, rax
jne 0x14010eca4
movabs rcx, 0x579ea51fb50f1ac2
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x4e
jmp 0x14010f16c
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010ecd2
movzx eax, r11b
movabs rcx, 0xad26e00112b75fde
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x12
jmp 0x14010f12f
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010ed04
mov ecx, 6
movabs rdx, 0x57eafd71c18b826c
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, r11b
jmp 0x14010f108
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010ed3c
mov ecx, reloc.WS2_32.dll_setsockopt
movabs rdx, 0x2af1ae2705fa4fa
add rdx, rbx
movzx eax, r11b
and al, dl
dec rbx
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14010e4c2
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010ea56
mov ecx, 0x24
movabs rdx, 0xad7338531f33c788
add rdx, rbx
movzx eax, r11b
and al, dl
inc r9
sub cl, al
dec rbx
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
inc rbx
jmp 0x14010e4c2
jne 0x14010eda5
movabs rdx, 0x83219f5d831a4079
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x4f
add r10b, dl
jmp 0x14010f0b6
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010edd9
movzx eax, r11b
movabs rcx, 0xd8a9da3ee0c28595
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x13
inc rbx
jmp 0x14010e4c2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010ee06
movabs rcx, 0xd8f63290ed3eed3f
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x47
jmp 0x14010f132
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010e9f1
movabs rcx, 0xd9428ae2f9bb54e9
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [r11 + rcx]
sub r10b, 0x5f
inc rbx
jmp 0x14010e4c2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010ee81
movzx eax, r11b
movabs rcx, 0x42cd47caecdab4c
add rcx, rbx
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + r11]
sub r10b, 0x14
inc rbx
jmp 0x14010e4c2
inc rax
cmp r8, rax
jne 0x14010eeb2
mov ecx, reloc.WS2_32.dll_sendto
movabs rdx, 0x59b50f5e0c75f068
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14010f16c
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010eee4
mov ecx, reloc.WLDAP32.dll_Ordinal_35
movabs rdx, 0x4792ccebb4a12f6
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14010f132
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010ef16
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movabs rdx, 0xaf3d4a3f6a1e3584
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
jmp 0x14010f12f
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010e99e
movzx eax, r11b
movabs rcx, 0x4c58520c7c67aa0
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x60
inc rbx
jmp 0x14010e4c2
mov ecx, recv
movabs rdx, 0xafd5fae3831704d8
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, byte [rbp + rbx - 0x60]
add r10b, dl
add r10b, r11b
jmp 0x14010f108
mov ecx, reloc.WLDAP32.dll_Ordinal_27
movabs rdx, 0x5a9a185431eb2766
add rdx, rbx
movzx eax, r11b
and al, dl
sub cl, al
lea r10d, [rcx + rcx]
sub r10b, byte [rbp + rbx - 0x60]
add r10b, r11b
add r10b, dl
jmp 0x14010f16c
movzx eax, r11b
movabs rcx, 0x81f03e155128a1d1
add rcx, rbx
and al, cl
add al, al
sub r11b, al
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
lea r10d, [rcx + r11]
add r10b, 0x49
inc rbx
jmp 0x14010e4c2
movzx eax, r11b
movabs rcx, 0x81a3e5c344ac3a27
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x11
jmp 0x14010f132
movzx eax, r11b
movabs rcx, 0xd6dfc85295d81799
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x2f
jmp 0x14010f12f
movabs rcx, 0x2c1baae1e703f50b
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x4d
jmp 0x14010f108
movzx eax, r11b
movabs rcx, 0x81578d71382fd27d
add rcx, rbx
dec rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x6b
inc rbx
jmp 0x14010e4c2
movabs rcx, 0x2bcf528fda878d61
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x59
jmp 0x14010f0b6
movabs rcx, 0xd64717ae7cdf4845
movzx eax, r11b
add rcx, rbx
and al, cl
add al, al
sub cl, al
lea r10d, [r11 + rcx]
add r10b, 0x1d
movabs rcx, 0xda73ec2b2bacf391
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, 9
add cl, r11b
mov byte [rbp + rbx - 0x60], cl
inc r9
dec rbx
inc rbx
jmp 0x14010e4c2
movabs rdx, 0xd5fabf5c7062e09b
movzx eax, r11b
add rdx, rbx
movzx r10d, r11b
and al, dl
add al, al
sub r10b, al
sub r10b, 0x3d
add r10b, dl
movabs rdx, 0x8538099bda81161f
movzx ecx, r10b
add rdx, rbx
movzx eax, dl
and al, r11b
add al, al
sub cl, al
add cl, 0x27
add cl, dl
add cl, r11b
mov byte [rbp + rbx - 0x60], cl
add r8, r9
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010e4c2
movabs rcx, 0xd5ae670a63e678f1
mov r11, rdx
add rcx, rbx
movzx eax, cl
and al, dl
add al, al
sub cl, al
lea r10d, [rdx + rcx]
add r10b, 0x69
inc r9
movabs rcx, 0x2ffc270c895538ad
add rcx, rbx
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, 0x45
add cl, r11b
movzx eax, cl
mov byte [rbp + rbx - 0x60], al
add rax, r9
sub rbx, rax
inc r8
movabs rdx, 0x55e35c4e0bf49f4
add rdx, rbx
mov ecx, Ordinal_46
movzx eax, dl
and al, r11b
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
add cl, cl
add cl, dl
add cl, r11b
mov byte [rbp + rbx - 0x60], cl
add rbx, rax
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e4c2
movzx eax, dl
movabs rcx, 0x80262c29063e33d5
add rcx, rbx
and al, cl
add al, al
sub dl, al
lea r10d, [rcx + rdx]
add r10b, 0x2d
movzx eax, byte [rbp + rbx - 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e4c2
movzx eax, r11b
movabs rcx, 0xdbf1a5c56a1af9e3
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x35
jmp 0x14010e4c0
movzx eax, r11b
movabs rcx, 0x312d8854bb46d755
add rcx, rbx
and al, cl
add al, al
sub r11b, al
lea r10d, [rcx + r11]
sub r10b, 0x53
jmp 0x14010e4b0
lea rdx, [rbp + 0x1439b54]
jmp 0x14010f272
lea rdx, [rbp + 0xedac9b]
jmp 0x14010f272
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [rbp - 0x10]
call fcn.140213288
movzx r10d, byte [rsp + 0x30]
mov rsi, rax
xor eax, eax
mov dword [rbp - 0x38], 0xd2c0e58e
xorps xmm0, xmm0
mov dword [rbp - 0x1c], eax
mov word [rbp - 0x18], ax
movabs r13, 0x732ba30fabfc8f38
mov byte [rbp - 0x16], al
movabs r14, 0x729460491bb7bf98
mov dword [rbp - 0x34], 0xd6cac6ca
movabs r15, 0x88b189826221c368
mov dword [rbp - 0x30], 0xcbaeacbc
movabs r12, 0xa25a43630a28a4f8
movups xmmword [rbp - 0x2c], xmm0
nop word [rax + rax]
mov r9, qword [0x1402cdf20]
mov rax, qword [0x1402cdf18]
nop
xor edi, edi
cmp rdi, 0x23
jae 0x14010fe54
movzx ebx, byte [rbp + rdi - 0x38]
mov r11, rbx
cmp r9, rdi
ja 0x14010fe4b
lea rcx, [rax + 1]
cmp r9, rcx
jae 0x14010f354
lea rdx, [rdi + r13]
mov r10d, reloc.WLDAP32.dll_Ordinal_60
movzx ecx, dl
and cl, r11b
sub r10b, cl
add r10b, r10b
add r10b, r11b
add r10b, dl
jmp 0x14010f374
je 0x14010fdb9
lea rcx, [rax + 3]
cmp r9, rcx
je 0x14010fd1e
lea rcx, [rax + 5]
cmp r9, rcx
je 0x14010fccd
cmp rax, rdi
ja 0x14010fe42
lea rcx, [rax + 9]
cmp r9, rcx
jae 0x14010f39d
lea rdx, [rdi + r14]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x28
jmp 0x14010f3f0
lea rcx, [rax + 1]
cmp r9, rcx
je 0x14010fcad
lea rcx, [rax + 3]
cmp r9, rcx
je 0x14010fc84
lea rcx, [rax + 4]
cmp r9, rcx
je 0x14010fc22
lea rcx, [rax + 5]
cmp r9, rcx
je 0x14010fc02
lea rcx, [rax + 7]
cmp r9, rcx
je 0x14010fbd9
lea rcx, [rax + 2]
cmp r9, rcx
je 0x14010fbb0
nop dword [rax + rax]
lea rcx, [rax + r9]
cmp rcx, rdi
jbe 0x14010f8a9
nop dword [rax]
lea rcx, [rax + 0x5a]
cmp r9, rcx
je 0x14010f886
lea rcx, [rax + 0x1000]
cmp r9, rcx
je 0x14010f85a
lea rcx, [rax + 0x2a]
cmp r9, rcx
je 0x14010f82b
lea rcx, [rax + 5]
cmp r9, rcx
je 0x14010f802
lea rcx, [rax + 0x10]
cmp r9, rcx
je 0x14010f7d9
lea rcx, [rax + 0x64]
cmp r9, rcx
je 0x14010f7b0
lea r9, [rax + 9]
lea rax, [r9 + 0x64]
lea rcx, [rax + 0x40]
cmp r9, rcx
jb 0x14010fe1a
lea rcx, [rax + 0x3e8]
cmp r9, rcx
jb 0x14010fdf1
lea rcx, [rax + 0x41]
cmp r9, rcx
jb 0x14010f57c
lea rcx, [rax + 3]
cmp r9, rcx
jb 0x14010f55c
lea rcx, [rax + 9]
cmp r9, rcx
jb 0x14010f53c
lea rcx, [rax + 4]
cmp r9, rcx
jb 0x14010f74b
lea rcx, [rax + 0xa]
cmp r9, rcx
jb 0x14010f6e7
lea rcx, [rax + 0x42]
cmp r9, rcx
jb 0x14010f699
lea rcx, [rax + 0x400]
cmp r9, rcx
jb 0x14010f66e
lea rcx, [rax + 0x5a]
cmp r9, rcx
jb 0x14010f400
lea r9, [rax + 6]
lea rax, [r9 + 4]
lea rcx, [rax + 2]
cmp r9, rcx
ja 0x14010f637
lea rcx, [rax + 8]
cmp r9, rcx
ja 0x14010f60e
lea rcx, [rax + 0x28]
cmp r9, rcx
ja 0x14010f5e5
lea rcx, [rax + 0x200]
cmp r9, rcx
ja 0x14010f5bc
lea rcx, [rax + 0x7a]
cmp r9, rcx
ja 0x14010f5a5
lea r9, [rax + 0x1000]
lea rax, [r9 + 0x3e8]
jmp 0x14010f400
lea r8, [rdi + r15]
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x14010f3f0
lea r8, [rdi + r12]
mov edx, Ordinal_32
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x14010f374
mov edx, 0x24
movabs r8, 0xbc02fd43b22f8688
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x14010f321
movzx edx, dil
movzx r10d, dil
and dl, bl
add dl, dl
sub r10b, dl
add r10b, bl
jmp 0x14010fc68
mov edx, 8
movabs r8, 0x14eea3ac25e06490
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x14010fc6b
mov edx, reloc.WS2_32.dll_recv
movabs r8, 0x2e975d8ccde74620
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, bl
add r10b, r8b
jmp 0x14010fd46
mov edx, Ordinal_27
movabs r8, 0x4840176d75ee27b0
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, bl
add r10b, r8b
jmp 0x14010fd77
mov edx, reloc.WLDAP32.dll_Ordinal_32
movabs r8, 0x61e8d14e1df50940
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, rax
add rdi, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
inc rdi
jmp 0x14010f312
movabs rdx, 0x220ea1ffc2063d28
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x18
mov byte [rbp + rdi - 0x38], r10b
inc rdi
jmp 0x14010f312
movabs rdx, 0x3bb75be06a0d1eb8
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 8
cmp rax, 4
jb 0x14010f68c
movzx edx, bl
movabs r8, 0xe362f83e86a11050
add r8, rdi
movzx ecx, r8b
and cl, bl
add cl, cl
sub dl, cl
add dl, r8b
lea r10d, [rdx*2 - 0x60]
jmp 0x14010fceb
mov edx, 4
movabs r8, 0x556015c112140048
add r8, rdi
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, bl
add r10b, r8b
cmp r9, 6
jae 0x14010fb56
lea rcx, [rax + 0x40]
cmp r9, rcx
jbe 0x14010fa9a
mov edx, gethostname
movabs r8, 0xe3fa3b0516e5dff0
add r8, rdi
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, bl
add r10b, r8b
jmp 0x14010f6b7
movabs r8, 0x6f08cfa1ba1ae1d8
mov edx, recv
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
lea rcx, [rax + r9]
cmp rcx, 0x200
je 0x14010fb83
lea rcx, [rax + 0x64]
cmp r9, rcx
jbe 0x14010f98e
movabs rdx, 0x7165dabbfb2e2058
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x68
jmp 0x14010f70b
mov edx, reloc.WLDAP32.dll_Ordinal_32
movabs r8, 0xfc746f589e632240
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x14010fc6b
mov edx, Ordinal_41
movabs r8, 0x161d2939466a03d0
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x14010fc68
mov edx, Ordinal_50
movabs r8, 0x2fc5e319ee70e560
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x14010fc40
mov edx, gethostname
movabs r8, 0x496e9cfa9677c6f0
add r8, rdi
dec rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
inc rdi
jmp 0x14010f312
movabs rdx, 0x631756db3e7ea880
inc rax
add rdx, rdi
dec rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
add r10b, 0x80
inc rdi
jmp 0x14010f312
movabs rdx, 0x7cc010bbe6858a10
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x70
jmp 0x14010fceb
lea rcx, [rax + 0x5a]
cmp r9, rcx
jae 0x14010f8c6
lea r8, [rdi + r13]
mov edx, reloc.WLDAP32.dll_Ordinal_60
movzx ecx, r8b
and cl, bl
jmp 0x14010f763
lea rdx, [rax + 1]
cmp r9, rdx
jne 0x14010f900
movabs rdx, 0xe528c092376f7f30
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, rax
add rdi, rcx
lea r10d, [rbx + rdx]
sub r10b, 0x50
inc rdi
jmp 0x14010f312
lea rcx, [rax + 3]
cmp r9, rcx
jne 0x14010f92c
movabs rdx, 0xb1d74cd0e761bc10
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x70
jmp 0x14010fd46
lea rcx, [rdx + 1]
cmp r9, rcx
jne 0x14010f958
movabs rdx, 0x982e92f03f5ada80
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
add r10b, 0x80
jmp 0x14010fc6b
lea rcx, [rax + 5]
cmp r9, rcx
jne 0x14010f76f
mov edx, Ordinal_27
movabs r8, 0x17e2f18cf73872b0
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x14010fceb
lea rcx, [rax + 1]
cmp r9, rcx
jne 0x14010f9ba
movabs rdx, 0x57bd20db53273ec8
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x78
jmp 0x14010fceb
lea rcx, [rax + 3]
cmp r9, rcx
jne 0x14010f9f2
mov edx, 0x34
movabs r8, 0x246bad1a03197ba8
add r8, rdi
dec rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
inc rdi
jmp 0x14010f312
lea rcx, [rax + 5]
cmp r9, rcx
jne 0x14010fa24
mov edx, Ordinal_32
movabs r8, 0xd7717f780b04d6f8
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x14010fc6b
lea rcx, [rax + 6]
cmp r9, rcx
jne 0x14010fa56
mov edx, recv
movabs r8, 0xa4200bb6baf713d8
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x14010fd77
lea rcx, [rax + 8]
cmp r9, rcx
jne 0x14010f70b
mov edx, 4
movabs r8, 0x8a7751d612f03248
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, rax
add rdi, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
inc rdi
jmp 0x14010f312
lea rcx, [rax + 1]
cmp r9, rcx
jne 0x14010fac9
mov edx, Ordinal_50
movabs r8, 0xca5181246edefe60
add r8, rdi
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, bl
jmp 0x14010fddb
inc rcx
cmp r9, rcx
jne 0x14010fafa
mov edx, Ordinal_41
movabs r8, 0xb0a8c743c6d81cd0
add r8, rdi
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, bl
add r10b, r8b
jmp 0x14010fd77
lea rcx, [rax + 5]
cmp r9, rcx
jne 0x14010fb2c
mov edx, reloc.WS2_32.dll_recv
movabs r8, 0x63ae99a1cec37820
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x14010fc68
lea rcx, [rax + 4]
cmp r9, rcx
jne 0x14010f6b7
movzx edx, dil
movzx r10d, dil
and dl, bl
dec rdi
add dl, dl
sub r10b, dl
add r10b, bl
inc rdi
jmp 0x14010f312
movzx r10d, byte [rbp + rdi - 0x38]
movabs r8, 0xc9ba3e5dde9a2ec0
add r8, rdi
movzx ecx, r8b
and cl, bl
add cl, cl
sub r10b, cl
sub r10b, 0x40
add r10b, bl
add r10b, r8b
jmp 0x14010fc40
movabs r8, 0xb011847d36934d30
movzx ecx, bl
add r8, rdi
movzx r10d, bl
and cl, r8b
add cl, cl
sub r10b, cl
sub r10b, byte [rbp + rdi - 0x38]
sub r10b, 0x50
add r10b, r8b
jmp 0x14010fd46
mov edx, Ordinal_46
movabs r8, 0xa54e9143db80b318
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x14010fd77
mov edx, 0x34
movabs r8, 0xbef74b24838794a8
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, bl
add r10b, r8b
jmp 0x14010fd46
movabs rdx, 0xf248bee5d39557c8
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x78
jmp 0x14010fc68
movabs rdx, 0xbf178c67b9c3958
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x68
movabs r8, 0x3ce5e16d8a96bdf8
movzx ecx, bl
add r8, rdi
mov edx, Ordinal_32
and cl, r8b
sub dl, cl
add dl, dl
add dl, bl
add dl, r10b
add dl, r8b
mov byte [rbp + rdi - 0x38], dl
add r9, rax
movzx ecx, r10b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x14010f312
movabs rdx, 0x259a32a723a31ae8
add rdx, rdi
dec rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x58
inc rdi
jmp 0x14010f312
movabs rdx, 0x58eba66873b0de08
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x38
jmp 0x14010fceb
movabs rdx, 0x8c3d1a29c3bea128
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r10d, [rbx + rdx]
sub r10b, 0x18
movabs r8, 0x568e9b4e329d9f88
mov edx, 0x24
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
add dl, dl
add dl, r8b
add dl, bl
mov byte [rbp + rdi - 0x38], dl
inc rax
dec rdi
inc rdi
jmp 0x14010f312
mov edx, 0x24
movabs r8, 0x2631756db3e7ea88
add r8, rdi
mov rbx, r11
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rax
movabs r8, 0x233d278ce28fdc68
add r8, rdi
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, r8b
and cl, bl
sub dl, cl
add dl, dl
add dl, r8b
add dl, bl
movzx ecx, dl
mov byte [rbp + rdi - 0x38], cl
add rcx, rax
sub rdi, rcx
inc r9
movabs rdx, 0x9668ca9c8e8c6ba0
add rdx, rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, r9
sub dl, 0x60
add dl, bl
mov byte [rbp + rdi - 0x38], dl
add rdi, rcx
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, rax
add rdi, rcx
inc rdi
jmp 0x14010f312
mov edx, 0x34
movabs r8, 0x5982e92f03f5ada8
add r8, rdi
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
movzx ecx, byte [rbp + rdi - 0x38]
add rcx, rax
add rdi, rcx
inc rdi
jmp 0x14010f312
mov edx, Ordinal_46
movabs r8, 0xd5abb7245a366818
add r8, rdi
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, bl
jmp 0x14010f310
mov ecx, 0x34
movabs rdx, 0xef547105023d49a8
add rdx, rdi
movzx eax, dl
and al, bl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
jmp 0x14010f300
lea rdx, [rbp + 0x1703968]
jmp 0x14010fe58
lea rdx, [rbp + 0x12cc8a0]
jmp 0x14010fe58
lea rdx, [rbp - 0x38]
mov rcx, qword [rbp - 8]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x10]
xor r8d, r8d
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [rsi + 0x10]
lea rbx, [rsi + 0x18]
test eax, eax
je 0x14010fea5
mov edi, eax
lea r9, [rbx + 8]
mov r8, rbx
lea rdx, [rbp]
lea rcx, [0x1402cdd68]
call fcn.14004ec60
add rbx, 0x14
sub rdi, 1
jne 0x14010fe84
mov rcx, rsi
call fcn.140212ef4
mov rcx, qword [rbp - 8]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.140212e90
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret